Bye bye PHP 8.2
In the previous release, all Tuleap instances were automatically upgraded to PHP 8.4. Since no issues have been reported in the wild, PHP 8.2 support is now officially retired. We recommend removing PHP 8.2 packages; please refer to the deployment guide for details.
Switch to Valkey
The Redis version shipped with EL9 reached end-of-life status in February 2025 and may no longer be available in some distributions (such as Rocky Linux). We now recommend installing Valkey, the Redis fork backed by the Linux Foundation.
Bugs and requests
During the 16.11 release cycle, 44 requests were implemented. Bugs and security fixes have already been back-ported on Tuleap Enterprise builds. You will find below a detailed list of fixes. The most notable ones are in bold.
Security
- #44068 Special and always there fields permissions are not verified in Cross-Tracker Search – CVE-2025-54877 – Moderate
Trackers
- #44030 Burnup data built and cached data cannot be the same
Cross-Tracker Search
- #44037 Allow REST API users to fetch artifacts via the cross tracker search endpoint
- #43363 XTS: Errors remain displayed even when the request becomes valid
- #44070 Cross tracker search widget only searching once on edition / creation of a query
- #44061 Cross tracker search doesn’t display assignee when there is more than one people
Taskboard
- #44047 dropdown to edit milestone in taskboard header doesn’t show up
Roadmap
- #44035 Gantt : issues with tooltips alignment & today line indicator
Git and Pull Requests
- #44023 New file cut off in PR unified diff
System administration
- #44057 Running tuleap-cfg site-deploy can fail depending on the current directory
