Skip to content

Commit a042232

Browse files
committed
Merge branch 'release' into 'master'
Merge branch 'feature/PB-52498_Hot-fix-release-v5131' into 'release' See merge request passbolt/passbolt-browser-extension!2037
2 parents 76002dc + cc9e7ae commit a042232

23 files changed

Lines changed: 1186 additions & 246 deletions

CHANGELOG.md

Lines changed: 93 additions & 69 deletions
Original file line numberDiff line numberDiff line change
@@ -4,81 +4,100 @@ This project adheres to [Semantic Versioning](http://semver.org/).
44

55
## [Unreleased]
66

7+
## [5.13.4] - 2026-06-18
8+
### Fixed
9+
- PB-52569 Add user to group freezing the page
10+
11+
## [5.13.3] - 2026-06-17
12+
### Fixed
13+
- Fix version mismatch between tag and package.json
14+
15+
## [5.13.2] - 2026-06-17
16+
### Fixed
17+
- PB-51699 Fix adding a user to a large group
18+
19+
## [5.13.1] - 2026-06-15
20+
### Fixed
21+
- PB-52478 Remove subscription CTA when edition plugin is not enabled
22+
23+
### Maintenance
24+
- PB-52428 Update subscription links
25+
726
## [5.13.0] - 2026-06-11
827
### Added
9-
PB-51594 Move findAllForActionLogController and test to the correct location
10-
PB-48516 Build process improvement - Webpack
11-
PB-51534 Update group edit call in groupApiService to contain "my_group_user" as urlOptions
12-
PB-51580 PCD 1.1 - Migrate SearchUsersAndGroupsController off ShareModel
13-
PB-51585 PCD 1.2 - Migrate resourceCreateService ShareModel usage to ShareResourceService
14-
PB-51586 PCD 1.3 - Move passbolt.share.get-folders to controller pattern
15-
PB-51587 PCD 1.4 - Clear ShareModel
16-
PB-51588 PCD 1.5 - Migrate MoveFolderController off FolderModel
17-
PB-51589 PCD 1.6 - Migrate MoveOneFolderService off FolderModel
18-
PB-51590 PCD 1.7 - Migrate MoveResourcesService off FolderModel + ResourceModel
19-
PB-51782 PCD 2.01 - Create SynchroniseKeyringController and binding
20-
PB-51783 PCD 2.02 - Create KeyringServiceWorkerService
21-
PB-51785 PCD 2.04 - Create GetOrFindGroupService
22-
PB-51786 PCD 2.05 - Create GetOrFindGroupController and binding
23-
PB-51787 PCD 2.06 - Create GetOrFindGroupsUsersService
24-
PB-51788 PCD 2.07 - Create GetOrFindGroupsUsersController and binding
25-
PB-51789 PCD 2.08 - Create GetOrFindUsersService
26-
PB-51790 PCD 2.09 - Create GetOrFindUsersController and binding
27-
PB-51791 PCD 2.10 - Add new methods getByIds, getGroupsUsersByGropuId on GroupServiceWorkerService
28-
PB-51999 PCD 2.10.B - Consolidate UserEntity between browser extension and styleguide
29-
PB-52000 PCD 2.10.C - Move GroupEntity + GroupsCollection to the styleguide
30-
PB-51792 PCD 2.11 - Create UserServiceWorkerService
31-
PB-51793 PCD 2.12 - Create PermissionServiceWorkerService
32-
PB-51794 PCD 2.13 - Create SearchUsersAndGroupsService
33-
PB-51795 PCD 2.14 - Refactor ShareService into ShareApiService
34-
PB-51796 PCD 2.15 - Update GroupApiService to support the new filter
35-
PB-51798 PCD 2.17 - Update FindAndUpdateGroupsLocalStorageService to add a method findForLocalStorageByIds
36-
PB-51799 PCD 2.18 - Align UserLocalStorage to add memory cache
37-
PB-51800 PCD 2.19 - Rename UserService to UserApiService
38-
PB-52047 CE/PRO upgrade
39-
PB-49605 Grid columns min-width
40-
PB-51808 PCD 2.27 - Create UserPermissionItem
41-
PB-51809 PCD 2.28 - Create GroupUserPermissionItem
42-
PB-47929 PAG - WP1.1 Add pagination support to ResourceService
43-
PB-47930 PAG - WP1.2 Paginate resource fetch for updating local storage in FindResourceService
44-
PB-52056 Add create method to SubscriptionKeyServiceWorkerService
45-
PB-52057 Add delete method to SubscriptionKeyServiceWorkerService
46-
PB-52058 Adapt EditSubscriptionKey to be customizable
47-
PB-52061 Adapt DisplaySubscriptionKeyTeasing to handle upgrade from app
48-
PB-52064 Create ConfirmDowngradeSubscriptionDialog
49-
PB-52062 Adapt DisplaySubscriptionKey to handle downgrading
50-
PB-52128 DisplaySubscriptionKey new layout
28+
- PB-51594 Move findAllForActionLogController and test to the correct location
29+
- PB-48516 Build process improvement - Webpack
30+
- PB-51534 Update group edit call in groupApiService to contain "my_group_user" as urlOptions
31+
- PB-51580 PCD 1.1 - Migrate SearchUsersAndGroupsController off ShareModel
32+
- PB-51585 PCD 1.2 - Migrate resourceCreateService ShareModel usage to ShareResourceService
33+
- PB-51586 PCD 1.3 - Move passbolt.share.get-folders to controller pattern
34+
- PB-51587 PCD 1.4 - Clear ShareModel
35+
- PB-51588 PCD 1.5 - Migrate MoveFolderController off FolderModel
36+
- PB-51589 PCD 1.6 - Migrate MoveOneFolderService off FolderModel
37+
- PB-51590 PCD 1.7 - Migrate MoveResourcesService off FolderModel + ResourceModel
38+
- PB-51782 PCD 2.01 - Create SynchroniseKeyringController and binding
39+
- PB-51783 PCD 2.02 - Create KeyringServiceWorkerService
40+
- PB-51785 PCD 2.04 - Create GetOrFindGroupService
41+
- PB-51786 PCD 2.05 - Create GetOrFindGroupController and binding
42+
- PB-51787 PCD 2.06 - Create GetOrFindGroupsUsersService
43+
- PB-51788 PCD 2.07 - Create GetOrFindGroupsUsersController and binding
44+
- PB-51789 PCD 2.08 - Create GetOrFindUsersService
45+
- PB-51790 PCD 2.09 - Create GetOrFindUsersController and binding
46+
- PB-51791 PCD 2.10 - Add new methods getByIds, getGroupsUsersByGropuId on GroupServiceWorkerService
47+
- PB-51999 PCD 2.10.B - Consolidate UserEntity between browser extension and styleguide
48+
- PB-52000 PCD 2.10.C - Move GroupEntity + GroupsCollection to the styleguide
49+
- PB-51792 PCD 2.11 - Create UserServiceWorkerService
50+
- PB-51793 PCD 2.12 - Create PermissionServiceWorkerService
51+
- PB-51794 PCD 2.13 - Create SearchUsersAndGroupsService
52+
- PB-51795 PCD 2.14 - Refactor ShareService into ShareApiService
53+
- PB-51796 PCD 2.15 - Update GroupApiService to support the new filter
54+
- PB-51798 PCD 2.17 - Update FindAndUpdateGroupsLocalStorageService to add a method findForLocalStorageByIds
55+
- PB-51799 PCD 2.18 - Align UserLocalStorage to add memory cache
56+
- PB-51800 PCD 2.19 - Rename UserService to UserApiService
57+
- PB-52047 CE/PRO upgrade
58+
- PB-49605 Grid columns min-width
59+
- PB-51808 PCD 2.27 - Create UserPermissionItem
60+
- PB-51809 PCD 2.28 - Create GroupUserPermissionItem
61+
- PB-47929 PAG - WP1.1 Add pagination support to ResourceService
62+
- PB-47930 PAG - WP1.2 Paginate resource fetch for updating local storage in FindResourceService
63+
- PB-52056 Add create method to SubscriptionKeyServiceWorkerService
64+
- PB-52057 Add delete method to SubscriptionKeyServiceWorkerService
65+
- PB-52058 Adapt EditSubscriptionKey to be customizable
66+
- PB-52061 Adapt DisplaySubscriptionKeyTeasing to handle upgrade from app
67+
- PB-52064 Create ConfirmDowngradeSubscriptionDialog
68+
- PB-52062 Adapt DisplaySubscriptionKey to handle downgrading
69+
- PB-52128 DisplaySubscriptionKey new layout
5170

5271
### Security
53-
PB-51937 Fix ws GHSA-58qx-3vcg-4xpx - MEDIUM CVSS3.1
54-
PB-51938 Fix brace-expansion GHSA-jxxr-4gwj-5jf2 - MEDIUM CVSS3.1
55-
PB-52029 Fix tmp GHSA-ph9p-34f9-6g65 - HIGH CVSS4.0
56-
PB-51532 Include GitLab file from ci-definitions repo
57-
PB-51642 Fix fast-uri GHSA-q3j6-qgpj-74h6 - HIGH CVSS3.1
58-
PB-51643 Fix @babel/plugin-transform-modules-systemjs GHSA-fv7c-fp4j-7gwp - HIGH CVSS3.1
59-
PB-51940 Fix qs GHSA-q8mj-m7cp-5q26 - MEDIUM CVSS4.0
60-
PB-52030 Fix webpack-dev-server GHSA-79cf-xcqc-c78w - MEDIUM CVSS3.1
61-
PB-51698 Use correct passbolt repo names in safe-chain whitelist
62-
63-
### Fixed
64-
PB-52148 CSP is blocking upload to TOTP QRCode on Firefox
65-
PB-50949 Fix MetadataKeysSettingsLocalStorageContext and MetadataTypesSettingsLocalStorageContext entity issue on storage changes
66-
PB-52047 Fix Passbolt Pro Edition wording
67-
PB-52156 Fix password preview button min-width
72+
- PB-51937 Fix ws GHSA-58qx-3vcg-4xpx - MEDIUM CVSS3.1
73+
- PB-51938 Fix brace-expansion GHSA-jxxr-4gwj-5jf2 - MEDIUM CVSS3.1
74+
- PB-52029 Fix tmp GHSA-ph9p-34f9-6g65 - HIGH CVSS4.0
75+
- PB-51532 Include GitLab file from ci-definitions repo
76+
- PB-51642 Fix fast-uri GHSA-q3j6-qgpj-74h6 - HIGH CVSS3.1
77+
- PB-51643 Fix @babel/plugin-transform-modules-systemjs GHSA-fv7c-fp4j-7gwp - HIGH CVSS3.1
78+
- PB-51940 Fix qs GHSA-q8mj-m7cp-5q26 - MEDIUM CVSS4.0
79+
- PB-52030 Fix webpack-dev-server GHSA-79cf-xcqc-c78w - MEDIUM CVSS3.1
80+
- PB-51698 Use correct passbolt repo names in safe-chain whitelist
81+
82+
### Fixed
83+
- PB-52148 CSP is blocking upload to TOTP QRCode on Firefox
84+
- PB-50949 Fix MetadataKeysSettingsLocalStorageContext and MetadataTypesSettingsLocalStorageContext entity issue on storage changes
85+
- PB-52047 Fix Passbolt Pro Edition wording
86+
- PB-52156 Fix password preview button min-width
6887

6988
### Maintenance
70-
PB-48560 Use NODE_ENV for webpack mode config
71-
PB-48564 Remove grunt-header
72-
PB-48528 Transpile LESS from webpack
73-
PB-48558 Extract translations directly from webpack
74-
PB-48559 Remove rimraf
75-
PB-49064 Remove Grunt
76-
PB-48516 Replace eval sourcemap by inline
77-
PB-48516 Prevent br tags to be added in translations.
78-
PB-48516 Remove duplicated translations
79-
PB-51793: Add PermissionServiceWorkerService and transfer Permission entity and collection on styleguide
80-
PB-51160 Update Firefox manifest to avoid Mozilla warnings
81-
PB-52155 Update github issue template
89+
- PB-48560 Use NODE_ENV for webpack mode config
90+
- PB-48564 Remove grunt-header
91+
- PB-48528 Transpile LESS from webpack
92+
- PB-48558 Extract translations directly from webpack
93+
- PB-48559 Remove rimraf
94+
- PB-49064 Remove Grunt
95+
- PB-48516 Replace eval sourcemap by inline
96+
- PB-48516 Prevent br tags to be added in translations.
97+
- PB-48516 Remove duplicated translations
98+
- PB-51793: Add PermissionServiceWorkerService and transfer Permission entity and collection on styleguide
99+
- PB-51160 Update Firefox manifest to avoid Mozilla warnings
100+
- PB-52155 Update github issue template
82101

83102
## [5.12.2] - 2026-05-19
84103
### Fixed
@@ -2802,6 +2821,11 @@ self registration settings option in the left-side bar
28022821
- LU: Logged in user
28032822

28042823
[Unreleased]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.12.2...HEAD
2824+
[5.13.4]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.13.3...v5.13.4
2825+
[5.13.3]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.13.2...v5.13.3
2826+
[5.13.2]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.13.1...v5.13.2
2827+
[5.13.1]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.13.0...v5.13.1
2828+
[5.13.0]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.12.1...v5.13.0
28052829
[5.12.2]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.12.1...v5.12.2
28062830
[5.12.1]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.12.0...v5.12.1
28072831
[5.12.0]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.11.3...v5.12.0

RELEASE_NOTES.md

Lines changed: 5 additions & 86 deletions
Original file line numberDiff line numberDiff line change
@@ -1,90 +1,9 @@
1-
Passbolt 5.13.0 makes in-app version upgrades and downgrades generally available, ending the need to run manual migrations. This release also introduces a new pagination system for resources, along with a new healthcheck entry for cache availability and the usual round of security and dependency updates.
2-
3-
## Edition management from the product
4-
Passbolt 5.13 introduces a seamless, in-app system for transitioning between application versions, entirely eliminating the need for administrators to run manual database migrations.
5-
6-
Unlike traditional updates that require executing external scripts or command-line operations, switching versions is now handled natively within the interface. Upgrading to the PRO edition is as simple as entering your subscription key; once saved, a quick logout and login immediately activates all PRO features for your organization.
7-
The system is designed to handle subscription lifecycles gracefully. Should your license key expire, Passbolt allows for a smooth downgrade process, reverting the instance safely without breaking existing data configurations or requiring complex rollbacks.
8-
9-
This release significantly lowers the maintenance overhead for administrators, ensuring that scaling your organization's password management capabilities is completely friction-free.
10-
11-
## Resource pagination
12-
13-
Unlike the previous approach, which retrieved an entire password collection in one request and placed significant load on the server for organizations managing thousands of resources, resources are now fetched page by page, in batches of 500 to 1000 records. Pages are loaded sequentially and assembled in memory, then the complete collection is filtered and decrypted before being written to the local storage.
14-
15-
This first implementation is fully transparent to end users: the interface, workflows, and stored data remain unchanged. This release lays the groundwork for faster resource loading in future versions, including parallel page fetching, concurrent metadata decryption, and an automatic retry mechanism for rate-limited requests.
16-
17-
### Added
18-
PB-51594 Move findAllForActionLogController and test to the correct location
19-
PB-48516 Build process improvement - Webpack
20-
PB-51534 Update group edit call in groupApiService to contain "my_group_user" as urlOptions
21-
PB-51580 PCD 1.1 - Migrate SearchUsersAndGroupsController off ShareModel
22-
PB-51585 PCD 1.2 - Migrate resourceCreateService ShareModel usage to ShareResourceService
23-
PB-51586 PCD 1.3 - Move passbolt.share.get-folders to controller pattern
24-
PB-51587 PCD 1.4 - Clear ShareModel
25-
PB-51588 PCD 1.5 - Migrate MoveFolderController off FolderModel
26-
PB-51589 PCD 1.6 - Migrate MoveOneFolderService off FolderModel
27-
PB-51590 PCD 1.7 - Migrate MoveResourcesService off FolderModel + ResourceModel
28-
PB-51782 PCD 2.01 - Create SynchroniseKeyringController and binding
29-
PB-51783 PCD 2.02 - Create KeyringServiceWorkerService
30-
PB-51785 PCD 2.04 - Create GetOrFindGroupService
31-
PB-51786 PCD 2.05 - Create GetOrFindGroupController and binding
32-
PB-51787 PCD 2.06 - Create GetOrFindGroupsUsersService
33-
PB-51788 PCD 2.07 - Create GetOrFindGroupsUsersController and binding
34-
PB-51789 PCD 2.08 - Create GetOrFindUsersService
35-
PB-51790 PCD 2.09 - Create GetOrFindUsersController and binding
36-
PB-51791 PCD 2.10 - Add new methods getByIds, getGroupsUsersByGropuId on GroupServiceWorkerService
37-
PB-51999 PCD 2.10.B - Consolidate UserEntity between browser extension and styleguide
38-
PB-52000 PCD 2.10.C - Move GroupEntity + GroupsCollection to the styleguide
39-
PB-51792 PCD 2.11 - Create UserServiceWorkerService
40-
PB-51793 PCD 2.12 - Create PermissionServiceWorkerService
41-
PB-51794 PCD 2.13 - Create SearchUsersAndGroupsService
42-
PB-51795 PCD 2.14 - Refactor ShareService into ShareApiService
43-
PB-51796 PCD 2.15 - Update GroupApiService to support the new filter
44-
PB-51798 PCD 2.17 - Update FindAndUpdateGroupsLocalStorageService to add a method findForLocalStorageByIds
45-
PB-51799 PCD 2.18 - Align UserLocalStorage to add memory cache
46-
PB-51800 PCD 2.19 - Rename UserService to UserApiService
47-
PB-52047 CE/PRO upgrade
48-
PB-49605 Grid columns min-width
49-
PB-51808 PCD 2.27 - Create UserPermissionItem
50-
PB-51809 PCD 2.28 - Create GroupUserPermissionItem
51-
PB-47929 PAG - WP1.1 Add pagination support to ResourceService
52-
PB-47930 PAG - WP1.2 Paginate resource fetch for updating local storage in FindResourceService
53-
PB-52056 Add create method to SubscriptionKeyServiceWorkerService
54-
PB-52057 Add delete method to SubscriptionKeyServiceWorkerService
55-
PB-52058 Adapt EditSubscriptionKey to be customizable
56-
PB-52061 Adapt DisplaySubscriptionKeyTeasing to handle upgrade from app
57-
PB-52064 Create ConfirmDowngradeSubscriptionDialog
58-
PB-52062 Adapt DisplaySubscriptionKey to handle downgrading
59-
PB-52128 DisplaySubscriptionKey new layout
60-
61-
### Security
62-
PB-51937 Fix ws GHSA-58qx-3vcg-4xpx - MEDIUM CVSS3.1
63-
PB-51938 Fix brace-expansion GHSA-jxxr-4gwj-5jf2 - MEDIUM CVSS3.1
64-
PB-52029 Fix tmp GHSA-ph9p-34f9-6g65 - HIGH CVSS4.0
65-
PB-51532 Include GitLab file from ci-definitions repo
66-
PB-51642 Fix fast-uri GHSA-q3j6-qgpj-74h6 - HIGH CVSS3.1
67-
PB-51643 Fix @babel/plugin-transform-modules-systemjs GHSA-fv7c-fp4j-7gwp - HIGH CVSS3.1
68-
PB-51940 Fix qs GHSA-q8mj-m7cp-5q26 - MEDIUM CVSS4.0
69-
PB-52030 Fix webpack-dev-server GHSA-79cf-xcqc-c78w - MEDIUM CVSS3.1
70-
PB-51698 Use correct passbolt repo names in safe-chain whitelist
1+
# v5.13.4
712

723
### Fixed
73-
PB-52148 CSP is blocking upload to TOTP QRCode on Firefox
74-
PB-50949 Fix MetadataKeysSettingsLocalStorageContext and MetadataTypesSettingsLocalStorageContext entity issue on storage changes
75-
PB-52047 Fix Passbolt Pro Edition wording
76-
PB-52156 Fix password preview button min-width
4+
PB-52478 Remove subscription CTA when edition plugin is not enabled
5+
PB-51699 Fix adding a user to a large group
6+
PB-52569 Add user to group freezing the page
777

788
### Maintenance
79-
PB-48560 Use NODE_ENV for webpack mode config
80-
PB-48564 Remove grunt-header
81-
PB-48528 Transpile LESS from webpack
82-
PB-48558 Extract translations directly from webpack
83-
PB-48559 Remove rimraf
84-
PB-49064 Remove Grunt
85-
PB-48516 Replace eval sourcemap by inline
86-
PB-48516 Prevent br tags to be added in translations.
87-
PB-48516 Remove duplicated translations
88-
PB-51793: Add PermissionServiceWorkerService and transfer Permission entity and collection on styleguide
89-
PB-51160 Update Firefox manifest to avoid Mozilla warnings
90-
PB-52155 Update github issue template
9+
PB-52428 Update subscription links

package-lock.json

Lines changed: 6 additions & 6 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "passbolt-browser-extension",
3-
"version": "5.13.0",
3+
"version": "5.13.4",
44
"license": "AGPL-3.0",
55
"copyright": "Copyright 2025 Passbolt SA",
66
"description": "Passbolt web extension for the open source password manager for teams",
@@ -21,7 +21,7 @@
2121
"kdbxweb": "2.1.1",
2222
"openpgp": "^6.1.1",
2323
"papaparse": "^5.5.2",
24-
"passbolt-styleguide": "^5.13.0",
24+
"passbolt-styleguide": "^5.13.1",
2525
"react": "^18.3.1",
2626
"react-dom": "^18.3.1",
2727
"secrets-passbolt": "github:passbolt/secrets.js#v2.0.1",

src/all/background_page/controller/group/groupUpdateController.test.js

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -96,6 +96,7 @@ describe("GroupsUpdateController", () => {
9696
it("Add 2 users in a group with 1 secret being unknown for both users and 2 other secrets known by only one user each", async () => {
9797
expect.assertions(20);
9898

99+
chrome.runtime.getManifest.mockImplementation(() => ({ manifest_version: 2 }));
99100
const getResourceId = (data, index) => data["dry-run"].Secrets[index].Secret[0].resource_id;
100101
const findSecret = (secrets, userId, resource1Id) => {
101102
for (const i in secrets) {

0 commit comments

Comments
 (0)