Release 2.4.0

tvdijen · tvdijen · commit 93ca2d0043ae · 2025-04-16T22:54:35.000+02:00
diff --git a/.github/build/full.json b/.github/build/full.json
@@ -6,11 +6,11 @@
     },
     "consent": {
       "repository": "simplesamlphp/simplesamlphp-module-consent",
-      "version": "~1.4.0"
+      "version": "~1.4.1"
     },
     "consentadmin": {
       "repository": "simplesamlphp/simplesamlphp-module-consentadmin",
-      "version": "~1.0.3"
+      "version": "~1.1.0"
     },
     "discopower": {
       "repository": "simplesamlphp/simplesamlphp-module-discopower",
@@ -28,10 +28,6 @@
       "repository": "simplesamlphp/simplesamlphp-module-radius",
       "version": "~2.0.2"
     },
-    "statistics": {
-      "repository": "simplesamlphp/simplesamlphp-module-statistics",
-      "version": "~1.2.2"
-    },
     "sqlauth": {
       "repository": "simplesamlphp/simplesamlphp-module-sqlauth",
       "version": "~1.3.1"
diff --git a/composer.lock b/composer.lock
diff --git a/docs/simplesamlphp-changelog.md b/docs/simplesamlphp-changelog.md
@@ -7,15 +7,56 @@ See the [upgrade notes](https://simplesamlphp.org/docs/stable/simplesamlphp-upgr
 
 ## Version 2.4.0
 
-Released TBD
+Released 2025-04-16
 
+* Added a new feature flag `encryption.optional` to allow unencrypted assertions if the SP does
+  not provide an encryption certificate (#2208)
+* Make translations tool theme-aware (#2315)
+* Fix deprecation of Twig spaceless-filter (#2229)
+* Add possibility to provide connection context to XML storage-handler (#2332)
+* Throw user-friendly exception with the proper HTTP statuscode for incorrect HTTP-method (#2234)
+* Fixed build-workflow to only re-build the website once
+* Bugfix: Use entityID from state to allow overriding the issuer (#2345)
+* When only a single IdP is in scope, skip discovery screen (#2355)
 * Downgrade simplesamlphp/composer-module-installer to 1.3.x to keep things working with older (OS-supplied)
   versions of composer
+* Skip test if xdebug.mode does not contain develop (#2419)
+* Add a console-script to clear cache (#2410)
+* PHP 8.4 Deprecation fixes (#2413)
+* Warn if a module has an unexpected translation-domain in its po file.
+* Add configuration that enables/disables twig template debug mode (#2406)
+* Add support for IDP Discovery protocol (#2402)
+* Destroy session cookies on logout (#2278)
+* A new module to allow debugging SP logins (#2381)
+* When only a single IdP is in scope, skip discovery screen (#2355)
+* Add authproc-filter to manipulate the Assertion's Issuer (#2346)
+* Many improvements to docs and translations
+* Updated dependencies
+
+`adfs`
+
+* The ADFS-module has been disconnected from the SSP release. To continue to use it, the module has to be manually installed.
+* The ADFS-module was completely rewritten and now uses our own XML-libraries for building, signing and encrypting XML (v3.0.0)
+
+`discopower`
+
+* Create discopower.po for italian locale (#22)
+* Hide tab list when there's only one tab
+* Fix for tags containing uppercase letters
+* Updated jQuery
+
+`ldap`
+
+* Add SASL-support (v2.4.0). Note that this required a newer version of symfony/ldap than the one packaged (v2.4.3)
 
 `metarefresh`
 
 * Fixed parsing of large metadata files (v1.2.4)
 
+`saml`
+
+* Stricter regexp to verify SubjectID/PairwiseID: disallow trailing spaces.
+
 ## Version 2.3.7
 
 Released TBD
diff --git a/docs/simplesamlphp-upgrade-notes-2.4.md b/docs/simplesamlphp-upgrade-notes-2.4.md
@@ -7,12 +7,5 @@ The following changes are relevant for installers and/or developers.
   This means that endpoints such as SingleSignOnService values will be taken from the
   entityId block in saml20-idp-hosted.php. See (<https://github.com/simplesamlphp/simplesamlphp/pull/2270>) for details.
 
-## Deprecations
-
-The following classes were marked `deprecated` and will be removed in a next major release.
-
-- fixme
-
-## BC break
-
-- fixme
+- The `statistics` module has been removed from the release, because the Charts API it depends on has been discontinued
+  by Google, rendering the module useless.
