Part-DB 2.14.1

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.14.1

Improvements

• Support TME v2 API (issue #1447, thanks also to @carmisergio and PR #1447)
• Improvements to TME provider
• Improvement to attachment size formatting

Bug fixes

• Ensure that user has part read permission when using search_parts MCP tool
• Do not throw an exception when cloning an private attachment (#1473)
• Fixed part creation for certain element14 barcodes
• Keep target ID when loading a label profile (#1164)
• Allow to import footprint EDA info (#1392)
• Check that user has permission to read target elements, when generating labels

Other changes

• Updated dependencies

Full Changelog: v2.14.0...v2.14.1

Part-DB 2.14.0

Warning

After upgrade, you need to run php bin/console doctrine:migrations:migrate (or equivalent) as webserver user after upgrade.. If you are running a docker container, use sudo docker exec --user=www-data partdb php bin/console doctrine:migrations:migrate, or sudo -E inside the docker container, to ensure that the migrations are applied to the correct database.

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

New features

• Provide MCP tools to allow AI agents access Part-DB's data (read-only for now)
• Allow to query info providers via Part-DB's API
• Improved Info provider metadata
• Improved price view for parts (#1384, thanks @MayNiklas)
• Implement extensive search for multi-field matching (#1406, thanks @d-buchmann)
• Added CSV export for Project BOM tables (#1442, thanks @swdee)
• Add per-parameter "visible in symbol" flag for KiCad EDA export by @Dant-hw in #1444
• Consider the prices of built instances of subprojects by @d-buchmann in #1459

Bug fixes

• Fixed webauthn security key registration and login
• Fixed link to target element in log detail page

Other changes

• Updated KiCAD symbol list
• Updated dependencies
• Improved translations / Fixed typos and grammar mistakes

Full Changelog: v2.13.4...v2.14.0

Part-DB 2.13.4

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Changes

• Made it more clear that TRUSTED_HOST value must not be quoted in docker-compose file, both in documentation and messages (#1453)
• Import: document EDA/KiCad columns, add regression tests, fix eda_invisible inversion by @Sebbeben in #1436

Other changes

• Updated KiCad Symbols and footprints

Full Changelog: v2.13.3...v2.13.4

Part-DB 2.13.3

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.13.3

Changes

• Added korean translation (thanks @progh2)
• Show an warning/recommendation banner on homepage, recommending to configure the TRUSTED_HOSTS env, for security hardening

Bug fixes

• Properly escape html characters in placeholder fields (#1446)
• Ensure that the password reset link is always pointing to a trustable host
• Fixed LCSC search (#1440)
• Fixed translation issue with canopy settings (#1386)

Other changes

• Updated dependencies
• Updated installation guide to docker 13

Full Changelog: v2.13.2...v2.13.3

Part-DB 2.13.2

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.13.2

Bug fixes

• Respect the attachment file limits, when Part-DB downloads a file, or a file gets uploaded base64 encoded via API
• Prevent formula injection when exporting tables as excel files
• Fixed problem with javascript and CSS not loading when using apache with mod_php (#1423)

Other changes

• Updated dependencies
• Improved documentation (@Apfelwurm, #1438)
• Improved translations

New Contributors

• @Apfelwurm made their first contribution in #1438

Full Changelog: v2.13.1...v2.13.2

Part-DB 2.13.1

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.13.1

This version is identical to Part-DB 2.13.0. See Release Notes there for list of changes.

This version is to fix the build and tagging of the docker images to fix issue #1430

Full Changelog: v2.13.0...v2.13.1

Part-DB 2.13.0

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.13.0

New features & Improvements

• Improved password strength estimator and show time to crack estimate in tooltip
• Use better library for alerts and dialogs, instead of the outdated bootbox
• Improved page load error dialog
• Added bootswatch*s brite theme as possible theme
• Added Ollama as (local) AI provider
• Allow to configure the timeout for AI providers, making it more suitable for slow local inference
• Added full chinese translation (thannks @0x915)
• Allow to edit info provider references in part edit form

Bug fixes

• Fixed bug that stocktake date changed on part edit (#1390)

Other changes

• Updated dependencies
• Updated KiCad symbols
• Fixed many deprecations

New Contributors

• @0x915 made their first contribution in #1426

Full Changelog: v2.12.3...v2.13.0

Part-DB 2.12.3

Important

This version contains security fixes, it is recommended to update to this version immediately.

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.12.3

Security fixes

• Fixed missing SVG sanitatization, when file was uploaded with non-svg extension
• Added CSP headers to static files, to prevent script execution, should an vulnerable file be uploaded somehow

Other changes

• Updated KiCad symbols
• Updated dependencies

Full Changelog: v2.12.2...v2.12.3

Part-DB 2.12.2

Important

This version contains security fixes, it is recommended to update to this version immediately.

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.12.2

Security fixes

• MEDIUM: Fixed XSS vulnerability in project BOM import
• MEDIUM: Fixed XSS vulnerability in project BOM table

Bug fixes

• Fixed invalid reference in api docs (PR #1403, @d-buchmann)
• Fixed problem that sidebar hide state was not persisted over page reloads (PR #1404, @d-buchmann)
• Do not log deprecations as the files can quickly get very large, old behavior can be reenabled via env setting. This might also give a small performance boost (fixes #1405)

Other changes

• Updated KiCad symbols
• Updated dependencies
• Fixed deprecations

Full Changelog: v2.12.1...v2.12.2

Part-DB 2.12.1

Important

This version contains critical security fixes, it is recommended to update to this version immediately.

Part-DB 2.12.1

Security fixes

• CRITICAL: Fixed issue that users with editing rights could execute arbitary php code in the docker installations by uploading phar files
• MEDIUM: Fixed XSS issue in unsanatized log entry extra. Due to the Content-Security-Policy this has limited impact, as no arbitrary javascript can be executed.
• MEDIUM: The APP_SECRET env must be changed to prevent forgery of REMEMBERME tokens. To be doable an attacker requires to know the secret password hash of a user, which is not obtainable without another security issue. Administrators will see an warning banner on the homepage, asking to change the APP_SECRET.

Generate an new random 32 character string with openssl rand -hex 32 and put the value for APP_SECRET into your .env.local or the environment section of the docker-compose.yaml.

Other changes

• Updated dependencies to fix known security issues in symfony and twig
• Updated KiCad symbol and footprint lists