Changes in 3.7.10 - 26th May 2026 - fix: SQL error when updating from 3.7.8 to 3.7.9 using the full update file rather than the patch - fix: POP3 fetching stopped working properly in 3.7.9 due to r/rb mode mismatch - fix: database result checked against the wrong variable when re-sending reply notifications Changes in 3.7.9 - 23rd May 2026 - security: various fixes and improvements - changed URL generator to only auto-link safe schemes (http, https, mailto) - improved security and reliability of email-to-ticket attachment processing - fix: email link scanners (common in enterprise use) invalidate password reset links - fix: fixed validation of custom ticket priority values in new ticket creation - fix: show the backup code form again when a wrong MFA backup code is entered - fix: duplicate tickets appearing in exports when duplicate collaborator records existed - fix: ticket exports showing the current time as "First reply at" for tickets with no first reply - fix: report warnings when time tracking was disabled - fix: custom priorities are not properly used in some cases - fix: "this week" and "last week" date range issue on Mondays - fix: edge case ticket display issue not printing table head Changes in 3.7.8 - 4th May 2026 - security: various fixes and improvements - fix: missing users in bulk assign list with permission granted by group - fix: display deactivated users' names in the ticket list - fix: clicking help icon should not initiate the action - fix: wrong database function call when clearing temporary attachments - fix: missing include when bulk resolving tickets with collaborators and customer notifications are off - fix: HTML code in aria-label must be encoded - fix: wrong aria-label variable in admin_ticket.php - fix: column email in where clause is ambiguous when searching for tickets - fix: deleting custom status wipes out ticket custom field Changes in 3.7.7 - 16th April 2026 - fix: a JS error in 3.7.6 breaks knowledgebase administration - fix: wrong aria-label variable Changes in 3.7.6 - 9th April 2026 - improved accessibility for admin and public pages (WCAG 2.1 AA compliance) - you can now create customers when editing a ticket - fix: customer-side ticket details cannot be expanded anymore on mobile - fix: unassigned tickets not sending email notifications to users with team permissions - fix: extending admin session interferes with MFA verification - fix: prevent URL encoding of new tags in email templates - fix: cannot select "Yes" multi-email option when setting up custom email fields - fix: manual cache clearing not working as expected - fix: call opcache_reset every time cache is cleared - updated PHPMailer to 7.0.2 Changes in 3.7.5 - 13th February 2026 - fix: permission group categories were not considered when adding collaborators
- fix: administrators should always be able to edit all permission groups
- fix: saving a customized theme could inadvertently reset colors

Changes in 3.7.4 - 8th February 2026 - fix: remove possible invalid theme $css_variable - fix: preserve custom theme variables when not using patch files