6.2.0

Merge pull request #135 from horde/feat/sync-response-streaming
feat(horde): add ActiveSync Sync response streaming config
Merge pull request #133 from horde/fix/admin-sessions-capability-exception
fix(horde): catch CapabilityException from lazy session generator
chore(deps): bump minimum versions to latest stable releases
fix(theme): constrain secure-form lock badge to 16px

6.1.0

fix(health-check): catch Throwable when probing modern AuthService
i18n(perms): update de translations for negative-permissions admin UI
feat(perms): Negative-permissions admin UI, templates and configswitch
feat(admin-api): add GET /api/v1/admin/registry for compiled registry introspection
Feat: Update French translations
Merge pull request #128 from jcdelepine/patch-4
style(prefs): Use consistent punctuation for preference labels
chore: Document the previously hidden mode switch for session encryption.

6.0.0

test: add @coversNothing to coverage-neutral tests
style: import classes instead of fully-qualified backslash references
chore: update CI
style(config): align Form test namespace and add strict_types
fix(config): hide ActiveSync tab when horde/activesync is not installed
fix(topbar): use h() helper for URL escaping in menubar template
fix(topbar): HTML-escape URLs in legacy menubar template
fix(services): cast Variables magic-property to string before substr() in download endpoint
fix: regenerate session before redirect_on_logout
refactor: rework PR120 to use format constants
fix(prefs): restore locale-aware time format defaults via ICU styles #22
fix(registry): stop pre-declaring optional content/timeobjects apps
feat(base): add SessionApiClient.js standalone session-API JS client
feat(base): mount /api/v1/session/ping and /api/v1/session/csrf-token routes
fix(icons): constrain category prefs action icons to 16px
fix(icons): modernize delete-small autocompleter remove icon
fix(icons): modernize delete-small autocompleter remove icon
feat(horde): add ActiveSync sync maxresponsetime config
feat(horde): add ActiveSync sync maxresponsetime config
Merge pull request #115 from horde/fix/account-only-wipe-admin
Merge remote-tracking branch 'origin/fix/account-only-wipe-admin' into fix/account-only-wipe-admin
Require user for delete action in ActiveSync admin to prevent null-user state removal
fix: add missing locale/horde.pot entry for "Unable to determine which account to wipe."
test: add unit test for cancel-wipe clearing both RW statuses
Potential fix for pull request finding
fix(horde): account-only wipe admin and prefs reliability
Merge pull request #114 from horde/feat/activesync-admin-ui
Potential fix for pull request finding
Restore missing msgid "unified" in de.po
Update horde.pot for ActiveSync device table strings
Potential fix for pull request finding
feat(horde): improve ActiveSync admin device table UI
Merge pull request #113 from horde/fix/portal-layout-save
Potential fix for pull request finding
fix(horde): persist classic portal layout saves reliably
Merge pull request #112 from horde/feat/Initial_EAS16.1-support
Modify EAS version 16.1 description in conf.xml
Address Copilot review: NaN-safe parsing, localStorage try/catch, restore inline styles, keyboard + ARIA + touch support
Expose sidebar width as CSS custom property and enable global resize
feat(horde): add account-only remote wipe UI/actions with 16.1 gating

6.0.0-RC7

test(session): drop dead $_SESSION speculative tests
refactor(jwt): delete duplicate JWT classes and their tests
test(jwt): point AuthenticationService tests at Core JwtService
refactor(jwt): wire AuthenticationService against Core JwtService
refactor(login): drop globals from LoginService
feat(session): add /api/v1/session/whoami modern PSR-15 demo route

6.0.0-RC6

refactor(token): Use Horde\Token\Token directly at four sites
fix: Observability endpoint is a middleware, not a controller
refactor: port session admin screen to new SessionAdministrator helper
refactor(cli): Port horde-active-sessions to SessionAdministrator
refactor(cli): Port horde-sessions-gc to modern SessionHandler
refactor: Make AuthCredentialStore mandatory
fix(auth): Read credentials via AuthCredentialStore in JWT issuance
refactor(diagnostic): Port session inspection to the modern stack
refactor(application): Port logout gc_tempfiles loop to HordeSession
refactor(auth): Port JWT bootstrap flash data to HordeSession
refactor(base): admin/hashtable.php uses Horde\HashTable\HashTable

6.0.0-RC5

fix(security): restrict unserialize allowed_classes (ZDI-20-1051)
feat(conf): add Redis ACL username and sentinel password fields
Update EAS version in configuration file
Remove experimental label from Exchange 2013 version

6.0.0-RC4

Remove symlink from codebase
fix(auth): resolve login controller DI and compatibility issues
refactor(responsive): merge responsive rules into screen.css
refactor(responsive): collapse responsive.css into screen.css
refactor(routes): replace Mapper with RoutesProvider in UrlGenerator
refactor(routes): rely on RuntimeRoutesProvider for URL generation
Merge pull request #94 from horde/feat/adopt-nls-psr4
refactor: Use PSR-4 version of horde/nls
Check for existence before echoing version details
fix: resize icons, closes horde/imp#47
chore: Update workflow dependency

6.0.0-RC3

fix(admin): validate group existence and fix JS tree URL encoding
feat: Make activesync admin screen more helpful when activesync is unavailable
fix: Explicitly add HordeCore middleware for routes which depend on per-app DI bootstrap.
refactor(injector): Widen type hints from Horde_Injector to Horde_Injector|Injector
chore: Add gitignore entries related to config items
refactor: Use ext-Intl natively instead of strftime and remove any shim logic
Add image styling for various tag lists
Add image size styles for various tag lists
Add image size styles for various tag lists
Refactor background properties in screen.css
Refactor background properties in screen.css
Refactor CSS background properties for clarity

6.0.0-RC2

fix: Require only horde.local.php if exists, not the core.php file
refactor: Explicitly declare the default stack as a prestep to removing fallback logic
docs: Mark twitter v1 endpoint deprecated, see #86
style: Resize CSS icons in permission admin dialog

6.0.0-RC1

style: Resize trash icon in group admin screen
style: Fix multiple instances of icons too large
feat: Port error message parameter to ResponsiveLoginController
feat: Rebase login route controller and factor out services
refactor: Provide full functionality of login.inc in the login.html.php template
Add download service route to routes.php
Enhance DownloadController with PHPDoc comments
Implement DownloadController for handling downloads