{"url":"https://api.github.com/repos/kimai/kimai/releases/371433825","assets_url":"https://api.github.com/repos/kimai/kimai/releases/371433825/assets","upload_url":"https://uploads.github.com/repos/kimai/kimai/releases/371433825/assets{?name,label}","html_url":"https://github.com/kimai/kimai/releases/tag/2.66.0","id":371433825,"author":{"login":"github-actions[bot]","id":41898282,"node_id":"MDM6Qm90NDE4OTgyODI=","avatar_url":"https://avatars.githubusercontent.com/in/15368?v=4","gravatar_id":"","url":"https://api.github.com/users/github-actions%5Bbot%5D","html_url":"https://github.com/apps/github-actions","followers_url":"https://api.github.com/users/github-actions%5Bbot%5D/followers","following_url":"https://api.github.com/users/github-actions%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/github-actions%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/github-actions%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/github-actions%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/github-actions%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/github-actions%5Bbot%5D/repos","events_url":"https://api.github.com/users/github-actions%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/github-actions%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOBELIZs4WI6Fh","tag_name":"2.66.0","target_commitish":"main","name":"2.66.0","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-09-03T17:04:23Z","updated_at":"2026-09-05T19:40:02Z","published_at":"2026-09-05T19:40:02Z","assets":[],"tarball_url":"https://api.github.com/repos/kimai/kimai/tarball/2.66.0","zipball_url":"https://api.github.com/repos/kimai/kimai/zipball/2.66.0","body":"**Compatible with PHP 8.2 to 8.5**\r\n\r\n## Features\r\n\r\n- Added a lock date to active projects to limit timesheet editing for past periods - [read docs](https://www.kimai.org/documentation/project.html#times-locked-until) (#6103)\r\n- Activity listing now allows to use \"create timesheet\" for users with `create_own_timesheet` only (#6151)\r\n- Improve documentation link with higher contrast and page title (#6129)\r\n\r\n**API**\r\n\r\n- Adds `budget`, `timeBudget` and `budgetType` to customer, project and activity collection endpoints (#6140)\r\n- Switch to using an ExclusionStrategy instead of serialization groups (#6140)\r\n- New API endpoint to delete invoices (#6141)\r\n- Timesheet API improvements (#6139)\r\n- Serialization group improvements (e.g. exclude fields on different permission sets) (#6131)\r\n- Convert controller methods to API (#6143)\r\n- New \"favorites\" endpoints (#6143)\r\n\r\nDevs: read the [UPGRADING](https://github.com/kimai/kimai/blob/main/UPGRADING.md) notes.\r\n\r\n## Bugfixes\r\n\r\n- Fix weekly invoice grouping merging the same week from different years (#6134)\r\n- Two-factor (2FA) form was not visible with SAML and deactivated login form (#6136)\r\n\r\n## Maintenance\r\n\r\n- Update dependencies (#6130) (#6159)\r\n- Remove Symfony cache from Docker image (#6138)\r\n- Translations update from Hosted Weblate (#6126) (#6160) (#6149)\r\n\r\n🚨 This release contains several security fixes, you are advised to upgrade your system ASAP. \r\n\r\nYou can read more about all security reports [here](https://www.kimai.org/documentation/bughunter.html#published-vulnerabilities) or grab this [RSS feed](https://www.kimai.org/security.xml) to get notified about new published advisories. \r\n\r\nInvolved in this release: @kevinpapst, @TowyTowy, @AgenteGabrielofc, aspopovic, @dkguy, @flytothehighest, @leevincent, @mapi68, @suyeonkim20, @Watchman89 and @yarons\r\n","mentions_count":10}