From a9d846dfd627a17d4579e1d06c33f9aff7f06493 Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Sun, 15 Mar 2026 12:22:16 +0100 Subject: [PATCH 1/6] Disable paralle-lint that is no more available on travis (security bug) --- .travis.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/.travis.yml b/.travis.yml index 4775c9ba1e7..53c5931d50a 100644 --- a/.travis.yml +++ b/.travis.yml @@ -278,13 +278,13 @@ script: set -e #parallel-lint --exclude htdocs/includes --blame . # Exclusions are defined in the ruleset.xml file - if [ "$TRAVIS_PHP_VERSION" = "7.4.22" ]; then - parallel-lint -e php --exclude dev/tools/test/namespacemig --exclude htdocs/includes/composer --exclude htdocs/includes/myclabs --exclude htdocs/includes/phpspec --exclude dev/initdata/dbf/includes \ - --exclude htdocs/includes/sabre --exclude htdocs/includes/phpoffice/PhpSpreadsheet --exclude htdocs/includes/sebastian \ - --exclude htdocs/includes/squizlabs/php_codesniffer --exclude htdocs/includes/jakub-onderka --exclude htdocs/includes/php-parallel-lint --exclude htdocs/includes/symfony \ - --exclude htdocs/includes/mike42/escpos-php/example --exclude htdocs/includes/maximebf \ - --exclude htdocs/includes/phpunit/ --exclude htdocs/includes/tecnickcom/tcpdf/include/barcodes --exclude htdocs/includes/webmozart --blame . - fi + #if [ "$TRAVIS_PHP_VERSION" = "7.4.22" ]; then + # parallel-lint -e php --exclude dev/tools/test/namespacemig --exclude htdocs/includes/composer --exclude htdocs/includes/myclabs --exclude htdocs/includes/phpspec --exclude dev/initdata/dbf/includes \ + # --exclude htdocs/includes/sabre --exclude htdocs/includes/phpoffice/PhpSpreadsheet --exclude htdocs/includes/sebastian \ + # --exclude htdocs/includes/squizlabs/php_codesniffer --exclude htdocs/includes/jakub-onderka --exclude htdocs/includes/php-parallel-lint --exclude htdocs/includes/symfony \ + # --exclude htdocs/includes/mike42/escpos-php/example --exclude htdocs/includes/maximebf \ + # --exclude htdocs/includes/phpunit/ --exclude htdocs/includes/tecnickcom/tcpdf/include/barcodes --exclude htdocs/includes/webmozart --blame . + #fi set +e echo From 39f3abec0c1861fbc28a6aab8c0c040cee5be396 Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Sun, 15 Mar 2026 13:47:49 +0100 Subject: [PATCH 2/6] Try to ignore travis --- .travis.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.travis.yml b/.travis.yml index 53c5931d50a..d770a6f7e60 100644 --- a/.travis.yml +++ b/.travis.yml @@ -92,6 +92,7 @@ install: composer -n init composer -n config vendor-dir htdocs/includes composer -n config -g vendor-dir htdocs/includes + composer -n config audit.block-insecure false echo - | From 9e13496975811c546f70cab34f94bbdbeba0d87f Mon Sep 17 00:00:00 2001 From: William Desportes Date: Sun, 15 Mar 2026 14:48:32 +0100 Subject: [PATCH 3/6] Fix User creation API permission check (#37502) Bug introduced by 3c9d8bc931799f9cbf7e04d6cedcf1a3bff44ab8 Co-authored-by: Laurent Destailleur --- htdocs/user/class/api_users.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/htdocs/user/class/api_users.class.php b/htdocs/user/class/api_users.class.php index 0acfe30d279..8ae7b1d4b26 100644 --- a/htdocs/user/class/api_users.class.php +++ b/htdocs/user/class/api_users.class.php @@ -297,7 +297,7 @@ class Users extends DolibarrApi public function post($request_data = null) { // Check user authorization - if (empty(DolibarrApiAccess::$user->rights->user->creer) && empty(DolibarrApiAccess::$user->admin)) { + if (empty(DolibarrApiAccess::$user->rights->user->user->creer) && empty(DolibarrApiAccess::$user->admin)) { throw new RestException(401, "User creation not allowed for login ".DolibarrApiAccess::$user->login); } From 2605d33dbc4260e823d2aca8f6566bd3486ebec3 Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Sun, 15 Mar 2026 14:50:13 +0100 Subject: [PATCH 4/6] Restore parallel-lint --- .travis.yml | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/.travis.yml b/.travis.yml index d770a6f7e60..0003dbf8fc5 100644 --- a/.travis.yml +++ b/.travis.yml @@ -277,15 +277,15 @@ script: echo "Checking PHP syntax errors (only 1 version to not overload travis and avoid duplicate tests)" # Ensure we catch errors set -e - #parallel-lint --exclude htdocs/includes --blame . + parallel-lint --exclude htdocs/includes --blame . # Exclusions are defined in the ruleset.xml file - #if [ "$TRAVIS_PHP_VERSION" = "7.4.22" ]; then - # parallel-lint -e php --exclude dev/tools/test/namespacemig --exclude htdocs/includes/composer --exclude htdocs/includes/myclabs --exclude htdocs/includes/phpspec --exclude dev/initdata/dbf/includes \ - # --exclude htdocs/includes/sabre --exclude htdocs/includes/phpoffice/PhpSpreadsheet --exclude htdocs/includes/sebastian \ - # --exclude htdocs/includes/squizlabs/php_codesniffer --exclude htdocs/includes/jakub-onderka --exclude htdocs/includes/php-parallel-lint --exclude htdocs/includes/symfony \ - # --exclude htdocs/includes/mike42/escpos-php/example --exclude htdocs/includes/maximebf \ - # --exclude htdocs/includes/phpunit/ --exclude htdocs/includes/tecnickcom/tcpdf/include/barcodes --exclude htdocs/includes/webmozart --blame . - #fi + if [ "$TRAVIS_PHP_VERSION" = "7.4.22" ]; then + parallel-lint -e php --exclude dev/tools/test/namespacemig --exclude htdocs/includes/composer --exclude htdocs/includes/myclabs --exclude htdocs/includes/phpspec --exclude dev/initdata/dbf/includes \ + --exclude htdocs/includes/sabre --exclude htdocs/includes/phpoffice/PhpSpreadsheet --exclude htdocs/includes/sebastian \ + --exclude htdocs/includes/squizlabs/php_codesniffer --exclude htdocs/includes/jakub-onderka --exclude htdocs/includes/php-parallel-lint --exclude htdocs/includes/symfony \ + --exclude htdocs/includes/mike42/escpos-php/example --exclude htdocs/includes/maximebf \ + --exclude htdocs/includes/phpunit/ --exclude htdocs/includes/tecnickcom/tcpdf/include/barcodes --exclude htdocs/includes/webmozart --blame . + fi set +e echo From 88b66741fcc1639a9c9ebcac8cc0ce984471a77a Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Sun, 15 Mar 2026 14:52:07 +0100 Subject: [PATCH 5/6] Merge branch '14.0' of git@github.com:Dolibarr/dolibarr.git into 15.0 --- .travis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.travis.yml b/.travis.yml index 3b25d9e6a35..1665e88195a 100644 --- a/.travis.yml +++ b/.travis.yml @@ -273,7 +273,7 @@ script: echo "Checking PHP syntax errors (only 1 version to not overload travis and avoid duplicate tests)" # Ensure we catch errors set -e - parallel-lint --exclude htdocs/includes --blame . + #parallel-lint --exclude htdocs/includes --blame . # Exclusions are defined in the ruleset.xml file if [ "$TRAVIS_PHP_VERSION" = "7.4.22" ]; then parallel-lint -e php --exclude dev/tools/test/namespacemig --exclude htdocs/includes/composer --exclude htdocs/includes/myclabs --exclude htdocs/includes/phpspec --exclude dev/initdata/dbf/includes \ From 209323598a80242fcd0ff27a0d6c540c8ef5923d Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Sun, 15 Mar 2026 14:52:53 +0100 Subject: [PATCH 6/6] Restore parallel-lint only on last version --- .travis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.travis.yml b/.travis.yml index 0003dbf8fc5..651922f2b59 100644 --- a/.travis.yml +++ b/.travis.yml @@ -277,7 +277,7 @@ script: echo "Checking PHP syntax errors (only 1 version to not overload travis and avoid duplicate tests)" # Ensure we catch errors set -e - parallel-lint --exclude htdocs/includes --blame . + #parallel-lint --exclude htdocs/includes --blame . # Exclusions are defined in the ruleset.xml file if [ "$TRAVIS_PHP_VERSION" = "7.4.22" ]; then parallel-lint -e php --exclude dev/tools/test/namespacemig --exclude htdocs/includes/composer --exclude htdocs/includes/myclabs --exclude htdocs/includes/phpspec --exclude dev/initdata/dbf/includes \