Merge branch 'release' into 'master'

v5.5.0 on master

See merge request passbolt/passbolt-ce-api!438

Author: cedricalfonsi

.ddev/commands/host/analyze

@@ -1,7 +1,7 @@
-name: passbolt-pro-api
+name: passbolt-api
 type: cakephp
 docroot: webroot
-php_version: "8.3"
+php_version: "8.4"
 webserver_type: nginx-fpm
 xdebug_enabled: false
 additional_hostnames: []
@@ -11,16 +11,16 @@ database:
     version: "10.11"
 hooks:
     post-start:
-        - exec: sudo apt-get update
+        - exec: "sudo apt-get update && sudo apt-get install -y git unzip nano"
         - exec: sh -c "if [ ! -f /var/www/html/config/app.php ]; then cp /var/www/html/config/app.default.php /var/www/html/config/app.php; fi"
         - exec: gpg --list-keys
 mailpit_https_port: "9102"
-webimage_extra_packages: [php8.3-gnupg, php8.3-xdebug]
+webimage_extra_packages: ["php${DDEV_PHP_VERSION}-gnupg", "php${DDEV_PHP_VERSION}-xdebug"]
 use_dns_when_possible: true
 composer_version: "2"
 web_environment:
     - DEBUG=true
-    - APP_FULL_BASE_URL=https://passbolt-pro-api.ddev.site
+    - APP_FULL_BASE_URL=https://passbolt-api.ddev.site
     - PASSBOLT_SELENIUM_ACTIVE=true
     - DATASOURCES_DEFAULT_HOST=db
     - DATASOURCES_DEFAULT_USERNAME=db

.ddev/commands/host/refresh

@@ -5,10 +5,13 @@
 # and ddev will respect it and won't overwrite the file.
 # See https://ddev.readthedocs.io/en/stable/users/extend/customization-extendibility/#custom-nginx-configuration
 
+# catch-all server: we prefer to avoid that nginx answers any domains in order to exclude any wrong routing
 server {
     listen 80 default_server;
     listen 443 ssl default_server;
 
+    server_name _;
+
     root /var/www/html/webroot;
 
     ssl_certificate /etc/ssl/certs/master.crt;

.ddev/config.yaml

@@ -103,7 +103,7 @@
     PASSBOLT_SELENIUM_ACTIVE: 1
     # This is the development dummy fingerprint
     PASSBOLT_GPG_SERVER_KEY_FINGERPRINT: 2FC8945833C51946E937F9FED47B0811573EE67E
-    PHPUNIT_COMMAND: vendor/bin/phpunit --log-junit unitreport.xml
+    PHPUNIT_COMMAND: vendor/bin/phpunit --testsuite $TEST_SUITE_GROUP -c tmp/tests/testsuitesplit.xml --log-junit unitreport.xml
     COMPOSER_ALLOW_SUPERUSER: 1
   image: $CI_REGISTRY_IMAGE_TEST:$PHP_VERSION
   script:
@@ -112,6 +112,7 @@
     - gpg --import config/gpg/unsecure_private.key
     - gpg --import config/gpg/unsecure.key
     - ./bin/cake passbolt create_jwt_keys
+    - composer create-split-testsuite
     - $PHPUNIT_COMMAND
   artifacts:
     reports:
@@ -122,10 +123,22 @@
 ##
 ## CUSTOM COMBINATIONS
 ##
-seq-php8.2-mysql5.7:
+seq-php8.2-mysql5.7-testsuite-1-of-2:
   variables:
     PHP_VERSION: "8.2"
     DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mysql:5.7"
+    TEST_SUITE_GROUP: "1"
+  extends:
+    - .mysql-template
+    - .test-template
+  rules:
+    - if: "$TEST_DISABLED == null"
+
+seq-php8.2-mysql5.7-testsuite-2-of-2:
+  variables:
+    PHP_VERSION: "8.2"
+    DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mysql:5.7"
+    TEST_SUITE_GROUP: "2"
   extends:
     - .mysql-template
     - .test-template
@@ -191,10 +204,23 @@ seq-php8.2-mysql5.7:
 #    - if: '$TEST_DISABLED == null'
 
 ## UBUNTU 22.04 LTS JAMMY
-seq-php8.2-mysql8:
+seq-php8.2-mysql8-testsuite-1-of-2:
   variables:
     PHP_VERSION: "8.2"
     DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mysql:8.0"
+    TEST_SUITE_GROUP: "1"
+  extends:
+    - .mysql-template
+    - .test-template
+  rules:
+    - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "master"'
+    - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "develop"'
+
+seq-php8.2-mysql8-testsuite-2-of-2:
+  variables:
+    PHP_VERSION: "8.2"
+    DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mysql:8.0"
+    TEST_SUITE_GROUP: "2"
   extends:
     - .mysql-template
     - .test-template
@@ -227,10 +253,20 @@ seq-php8.2-mysql8:
 #    - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "master"'
 #    - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "develop"'
 
-seq-php8.2-postgres15:
+seq-php8.2-postgres15-testsuite-1-of-2:
+  variables:
+    PHP_VERSION: "8.2"
+    DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/postgres:15-alpine"
+    TEST_SUITE_GROUP: "1"
+  extends:
+    - .postgres-template
+    - .test-template
+
+seq-php8.2-postgres15-testsuite-2-of-2:
   variables:
     PHP_VERSION: "8.2"
     DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/postgres:15-alpine"
+    TEST_SUITE_GROUP: "2"
   extends:
     - .postgres-template
     - .test-template
@@ -245,35 +281,63 @@ seq-php8.2-postgres15:
 #  rules:
 #    - if: "$TEST_DISABLED == null"
 
-seq-php8.3-postgres13:
+seq-php8.3-postgres13-testsuite-1-of-2:
+  variables:
+    PHP_VERSION: "8.3"
+    DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/postgres:13-alpine"
+    TEST_SUITE_GROUP: "1"
+  extends:
+    - .postgres-template
+    - .test-template
+  rules:
+    - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "master"'
+    - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "develop"'
+
+seq-php8.3-postgres13-testsuite-2-of-2:
   variables:
     PHP_VERSION: "8.3"
     DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/postgres:13-alpine"
+    TEST_SUITE_GROUP: "2"
   extends:
     - .postgres-template
     - .test-template
   rules:
     - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "master"'
     - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "develop"'
 
+
 # Mariadb 11.5 tests
 
 # This is what we ship with the docker image as of 14 Nov 2024
-seq-php8.2-mariadb11.5:
+seq-php8.2-mariadb11.5-testsuite-1-of-2:
   variables:
     PHP_VERSION: "8.2"
     DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
+    TEST_SUITE_GROUP: "1"
   extends:
     - .mariadb-template
     - .test-template
   rules:
     - if: "$TEST_DISABLED == null"
   allow_failure: true
 
-seq-php8.3-mariadb11.5:
+seq-php8.2-mariadb11.5-testsuite-2-of-2:
+  variables:
+    PHP_VERSION: "8.2"
+    DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
+    TEST_SUITE_GROUP: "2"
+  extends:
+    - .mariadb-template
+    - .test-template
+  rules:
+    - if: "$TEST_DISABLED == null"
+  allow_failure: true
+
+seq-php8.3-mariadb11.5-testsuite-1-of-2:
   variables:
     PHP_VERSION: "8.3"
     DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
+    TEST_SUITE_GROUP: "1"
   extends:
     - .mariadb-template
     - .test-template
@@ -282,3 +346,17 @@ seq-php8.3-mariadb11.5:
       - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "develop"'
       - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "release"'
   allow_failure: true
+
+seq-php8.3-mariadb11.5-testsuite-2-of-2:
+  variables:
+    PHP_VERSION: "8.3"
+    DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
+    TEST_SUITE_GROUP: "2"
+  extends:
+    - .mariadb-template
+    - .test-template
+  rules:
+    - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "master"'
+    - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "develop"'
+    - if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "release"'
+  allow_failure: true

.ddev/docker-compose.openldap.yaml

@@ -2,6 +2,69 @@
 All notable changes to this project will be documented in this file.
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+## [5.5.0] - 2025-09-15
+### Added
+- PB-44639 As an administrator, when updating metadata settings from friendly mode to zero knowledge, I should see the server key dropped in DB
+- PB-44756 Updates metadata keys settings endpoint to accept server metadata private key
+- PB-44752 Adds a new data check for existing resources v5 encrypted with hard or soft deleted shared metadata key
+
+### Fixed
+- PB-45060 Fixes custom fields json schema properties type
+- PB-45062 Fixes user_setup_complete.php template in LU folder instead of AD
+- PB-44760 Fixes health check "record not found in table organization_settings" issue (GITHUB #563)
+
+### Maintenance
+- PB-44915 Changes DDEV containers names and URLs from passbolt-ce-api to passbolt-api
+- PB-44813 Updates ddev config
+- PB-44772 Speeds up continuous integration by splitting pipelines in two distinct test suites
+
+## [5.5.0-rc.1] - 2025-09-12
+### Added
+- PB-44639 As an administrator, when updating metadata settings from friendly mode to zero knowledge, I should see the server key dropped in DB
+- PB-44756 Updates metadata keys settings endpoint to accept server metadata private key
+- PB-44752 Adds a new data check for existing resources v5 encrypted with hard or soft deleted shared metadata key
+
+### Fixed
+- PB-45060 Fixes custom fields json schema properties type
+- PB-45062 Fixes user_setup_complete.php template in LU folder instead of AD
+- PB-44760 Fixes health check "record not found in table organization_settings" issue (GITHUB #563)
+
+### Maintenance
+- PB-44915 Changes DDEV containers names and URLs from passbolt-ce-api to passbolt-api
+- PB-44813 Updates ddev config
+- PB-44772 Speeds up continuous integration by splitting pipelines in two distinct test suites
+
+## [5.5.0-test.2] - 2025-09-08
+### Added
+- PB-44639 As an administrator, when updating metadata settings from friendly mode to zero knowledge, I should see the server key dropped in DB
+- PB-44756 Updates metadata keys settings endpoint to accept server metadata private key
+- PB-44752 Adds a new data check for existing resources v5 encrypted with hard or soft deleted shared metadata key
+
+### Fixed
+- PB-45060 Fixes custom fields json schema properties type
+- PB-45062 Fixes user_setup_complete.php template in LU folder instead of AD
+- PB-44760 Fixes health check "record not found in table organization_settings" issue (GITHUB #563)
+
+### Maintenance
+- PB-44915 Changes DDEV containers names and URLs from passbolt-ce-api to passbolt-api
+- PB-44813 Updates ddev config
+- PB-44772 Speeds up continuous integration by splitting pipelines in two distinct test suites
+
+## [5.5.0-test.1] - 2025-09-02
+### Added
+- PB-44639 As an administrator when updating metadata settings from friendly mode to zero knowledge I should see the server key dropped in DB
+- PB-44756 Update metadata keys settings endpoint to accept server metadata private key
+- PB-44752 Add new datacheck for existing resources v5 encrypted with hard or soft deleted shared metadata key
+
+### Fixed
+- PB-45060 Fixes custom fields json schema properties type
+- PB-45062 Fix user_setup_complete.php template in LU folder instead of AD
+- PB-44760 Fix healthcheck "record not found in table organization_settings" issue (GITHUB #563)
+
+### Maintenance
+- PB-44915 Change DDEV containers names and URLs from passbolt-ce-api to passbolt-api
+- PB-44813 Update ddev config
+
 ## [5.4.1] - 2025-08-13
 ### Fixed
 - PB-44220 Enforces the format to datetime string when persisting the last_logged_in field on users login