8.5.0 -- add password reset feature

What's Changed

• Add POST /reset endpoint to create password reset records by @Copilot in #459
• Send reset email by @briskt in #465
• add reset verification endpoint by @briskt in #467
• corrections suggested by feedback on PR #465 by @briskt in #468
• corrections suggested by feedback on PR #467 by @briskt in #469

New Contributors

• @Copilot made their first contribution in #459

Full Changelog: 8.4.4...8.5.0

8.4.4 - security and maintenance

What's Changed

• Bump phpseclib/phpseclib from 3.0.50 to 3.0.51 in /app by @dependabot[bot] in #452
• update dependencies.json for dependabot patch by @briskt in #457
• use correct indentation for behat.yml by @briskt in #456
• add a compose healthcheck for mfaapi by @briskt in #458
• Bump phpseclib/phpseclib from 3.0.51 to 3.0.52 in /app by @dependabot[bot] in #461
• upgrade API doc to OpenAPI 3 by @briskt in #463
• deprecate the user hide property by @briskt in #464
• Bump yiisoft/yii2 from 2.0.54 to 2.0.55 in /app by @dependabot[bot] in #466

Full Changelog: 8.4.3...8.4.4

8.4.3 -- fix cc and bcc headers not working

What's Changed

• use Behat attributes in place of old-style comment annotations by @briskt in #450
• Remove whenavail by @briskt in #451
• Fix the cc and bcc headers in emails sent. The SES driver was incomplete by @briskt in #453
• Update the SES mail driver to more correctly match the Yii2 interface. by @briskt in #454

Full Changelog: 8.4.2...8.4.3

8.4.2 -- bump aws-sdk-php, test improvements

What's Changed

• upgrade GitHub actions by @briskt in #446
• Fix broken tests by @briskt in #447
• Bump aws/aws-sdk-php from 3.368.0 to 3.371.4 in /dynamorestart by @dependabot[bot] in #449
• update PHP version in composer.json; PSR12 changes by @briskt in #448

Full Changelog: 8.4.1...8.4.2

8.4.1 - dependency update

What's Changed

• use test.env to avoid test variable duplication by @briskt in #443
• Sort all the things by @briskt in #444
• update dependencies by @briskt in #445

Full Changelog: 8.4.0...8.4.1

8.4.0 - add task monitor

What's Changed

• add a call to a monitoring service at the end of task processing by @briskt in #442

Full Changelog: 8.3.10...8.4.0

8.3.10 - Switch to GHCR

What's Changed

• Remove DockerHub push by @devon-sil in #438
• Switch compose php8 to GHCR by @devon-sil in #439
• Switch test builds for mfa-api-go to GHCR by @devon-sil in #441
• Switch to GHCR base image by @devon-sil in #440

Full Changelog: 8.3.9...8.3.10

8.3.9 - AWS SDK patch, fix abandoned user report template

What's Changed

• Bump aws/aws-sdk-php from 3.288.1 to 3.368.0 in /dynamorestart by @dependabot[bot] in #435
• skip the build-and-publish job if triggered by dependabot by @briskt in #437
• fix abandoned user report issues (IDP-1818) by @briskt in #436

Full Changelog: 8.3.8...8.3.9

8.3.8 - sleep less during startup

What's Changed

• replace a test password that is now in the pwned database by @briskt in #432
• use the latest mfa-api for tests by @briskt in #433
• only need to sleep one second (at most) by @briskt in #434

Full Changelog: 8.3.7...8.3.8

8.3.7 - move app source to /app directory in the container

What's Changed

• Release 8.3.7 - move to /app by @briskt in #431

Full Changelog: 8.3.6...8.3.7