From ae01411e949a2d4dd2eaeb22823504a393175423 Mon Sep 17 00:00:00 2001
From: Andrew Fuerste-Henry <andrew@bywatersolutions.com>
Date: Mon, 31 Jan 2022 17:42:28 +0000
Subject: [PATCH] Update release notes for 21.05.09 release

Signed-off-by: Andrew Fuerste-Henry <andrew@bywatersolutions.com>
---
 .../release_notes/release_notes_21_05_09.html | 481 ++++++++++++++++++
 misc/release_notes/release_notes_21_05_09.md  | 389 ++++++++++++++
 2 files changed, 870 insertions(+)
 create mode 100644 misc/release_notes/release_notes_21_05_09.html
 create mode 100644 misc/release_notes/release_notes_21_05_09.md

diff --git a/misc/release_notes/release_notes_21_05_09.html b/misc/release_notes/release_notes_21_05_09.html
new file mode 100644
index 0000000000..db527d3ff4
--- /dev/null
+++ b/misc/release_notes/release_notes_21_05_09.html
@@ -0,0 +1,481 @@
+<h1 id="releasenotesforkoha21.05.09">RELEASE NOTES FOR KOHA 21.05.09</h1>
+
+<p>31 Jan 2022</p>
+
+<p>Koha is the first free and open source software library automation
+package (ILS). Development is sponsored by libraries of varying types
+and sizes, volunteers, and support companies from around the world. The
+website for the Koha project is:</p>
+
+<ul>
+<li><a href="http://koha-community.org">Koha Community</a></li>
+</ul>
+
+<p>Koha 21.05.09 can be downloaded from:</p>
+
+<ul>
+<li><a href="http://download.koha-community.org/koha-21.05.09.tar.gz">Download</a></li>
+</ul>
+
+<p>Installation instructions can be found at:</p>
+
+<ul>
+<li><a href="http://wiki.koha-community.org/wiki/Installation_Documentation">Koha Wiki</a></li>
+<li>OR in the INSTALL files that come in the tarball</li>
+</ul>
+
+<p>Koha 21.05.09 is a bugfix/maintenance release with security fixes.</p>
+
+<p>It includes 9 security fixes, 26 bugfixes.</p>
+
+<h3 id="systemrequirements">System requirements</h3>
+
+<p>You can learn about the system components (like OS and database) needed for running Koha here: https://wiki.koha-community.org/wiki/System_requirements_and_recommendations</p>
+
+<h2 id="securitybugs">Security bugs</h2>
+
+<h3 id="koha">Koha</h3>
+
+<ul>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102">[26102]</a> Javascript injection in intranet search</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28735">[28735]</a> Self-checkout users can access opac-user.pl for sco user when not using AutoSelfCheckID</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29540">[29540]</a> Accounts with just 'catalogue' permission can modify/delete holds</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29541">[29541]</a> Patron images can be accessed with just 'catalogue' permission</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29542">[29542]</a> User with 'catalogue' permission can view everybody's (private) virtualshelves</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29543">[29543]</a> Self-checkout allows returning everybody's loans</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29544">[29544]</a> A patron can set everybody's checkout notes</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29903">[29903]</a> Message deletion possible from different branch</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29914">[29914]</a> check_cookie_auth not strict enough</li>
+</ul>
+
+<h2 id="criticalbugsfixed">Critical bugs fixed</h2>
+
+<h3 id="acquisitions">Acquisitions</h3>
+
+<ul>
+<li><p><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29464">[29464]</a> GET /acquisitions/orders doesn't honour sorting</p>
+
+<p><strong>Sponsored by</strong> <em>ByWater Solutions</em></p></li>
+</ul>
+
+<h3 id="finesandfees">Fines and fees</h3>
+
+<ul>
+<li><p><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29457">[29457]</a> Fee Cancellation records the wrong manager_id</p>
+
+<blockquote>
+  <p>Prior to this patch inadvertently the field borrowers.userid was used to fill accountslines.manager_id. This should have been borrowernumber.</p>
+  
+  <p>This report fixes that and prints a generic warning.</p>
+</blockquote></li>
+</ul>
+
+<h3 id="holdrequests">Hold requests</h3>
+
+<ul>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29736">[29736]</a> Error when placing a hold for a club without members</li>
+</ul>
+
+<h3 id="notices">Notices</h3>
+
+<ul>
+<li><p><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29381">[29381]</a> Auto-renewal digest messages are sent on every cron run</p>
+
+<blockquote>
+  <p>This fixes an issue with automatic renewal digest messages - these were being sent on every cron run, even if there was nothing to renew or no renewal errors.</p>
+  
+  <p>(This error was caused by a regression in 21.05 from Bug 18532: Add individual issues to digest notice and hide auto_renewals messaging preference when not needed.)</p>
+</blockquote></li>
+</ul>
+
+<h3 id="opac">OPAC</h3>
+
+<ul>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29696">[29696]</a> "Suggest for purchase" missing biblio link</li>
+</ul>
+
+<h3 id="restapi">REST API</h3>
+
+<ul>
+<li><p><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29018">[29018]</a> Deleting patrons from REST API doesn't do any checks or move to deletedborrowers</p>
+
+<blockquote>
+  <p>These fixes the REST API route for deleting patrons so that it now checks for guarantees, debts, and current checkouts. If any of these checks fail, the patron is not deleted.</p>
+</blockquote></li>
+</ul>
+
+<h2 id="otherbugsfixed">Other bugs fixed</h2>
+
+<h3 id="acquisitions">Acquisitions</h3>
+
+<ul>
+<li><p><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24866">[24866]</a> Display budget hierarchy in the budget dropdown menu used when placing a new order</p>
+
+<blockquote>
+  <p>This improves the display for selecting a fund when placing a new order in acquisitions. It now displays as a hierarchy instead of a list without any indentation, for example:</p>
+  
+  <p>Budget 2021
+   -- Book
+   -- -- Adult fiction</p>
+</blockquote></li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29419">[29419]</a> Suggest for purchase clears item type, quantity, library and reason if bib exists</li>
+</ul>
+
+<h3 id="architectureinternalsandplumbing">Architecture, internals, and plumbing</h3>
+
+<ul>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29702">[29702]</a> all_libraries routine in library groups make a DB call per member of group</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29789">[29789]</a> Unused $error in cataloguing/additem.pl</li>
+</ul>
+
+<h3 id="circulation">Circulation</h3>
+
+<ul>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29476">[29476]</a> Earliest renewal date is displayed wrong in circ/renew.pl for issues with auto renewing</li>
+</ul>
+
+<h3 id="holdrequests">Hold requests</h3>
+
+<ul>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29553">[29553]</a> Holds: Can't call method "notforloan" on an undefined value when placing a hold</li>
+</ul>
+
+<h3 id="notices">Notices</h3>
+
+<ul>
+<li><p><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29557">[29557]</a> Auto renew notices should handle failed renewal due to patron expiration</p>
+
+<blockquote>
+  <p>This enhancement updates the default auto-renewal notices to tell patrons that their renewals have failed because their account has expired.</p>
+</blockquote></li>
+</ul>
+
+<h3 id="opac">OPAC</h3>
+
+<ul>
+<li><p><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17127">[17127]</a> Can't hide MARC21 500 and others with NotesToHide</p>
+
+<blockquote>
+  <p>This fixes hiding notes fields (5XX in MARC21 and 3XX in UNIMARC) using NotesToHide. Before this you could hide one field and it worked. However, when hiding multiple fields one field would still always be visible. Now hiding notes fields works as expected.</p>
+</blockquote></li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29604">[29604]</a> Term highlighting adds unwanted pseudo element in the contentblock of OPAC details page</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29685">[29685]</a> 'If all unavailable' state for 'on shelf holds' makes holds page very slow if there's a lot of items on opac</li>
+</ul>
+
+<h3 id="packaging">Packaging</h3>
+
+<ul>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28926">[28926]</a> Update cpanfile for Mojolicious::Plugin::OpenAPI v2.16</li>
+</ul>
+
+<h3 id="restapi">REST API</h3>
+
+<ul>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29503">[29503]</a> GET /patrons should use Koha::Patrons->search_limited</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29506">[29506]</a> objects.search should call search_limited if present</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29508">[29508]</a> GET /patrons/:patron_id should use Koha::Patrons->search_limited</li>
+</ul>
+
+<h3 id="reports">Reports</h3>
+
+<ul>
+<li><p><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29530">[29530]</a> When NumSavedReports is set, show value in pull down of entries</p>
+
+<blockquote>
+  <p>This updates the way the NumSavedReports preference value is used on the saved reports page. For the "Show" dropwdown list:</p>
+  
+  <ul>
+  <li>it now displays the number set in NumSavedReports (previously it showed 20)</li>
+  <li>when expanded it now shows the number set in NumSavedReports sequentially (for example, if NumSavedReports is 78, the menu options should be "10, 20, 50, 78, 100, All"), and</li>
+  <li>it now displays 'All' if NumSavedReports is blank.</li>
+  </ul>
+  
+  <p>It also updates the description for the NumSavedReports preference to clarify that all reports are shown when no value is entered.</p>
+</blockquote></li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29680">[29680]</a> Reports menu 'Show SQL code' wrong border radius</li>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29729">[29729]</a> If serials_stats.pl returns no results dataTables get angry</li>
+</ul>
+
+<h3 id="searching-elasticsearch">Searching - Elasticsearch</h3>
+
+<ul>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29436">[29436]</a> Cannot reorder facets in staff interface elasticsearch configuration</li>
+</ul>
+
+<h3 id="systemadministration">System Administration</h3>
+
+<ul>
+<li><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29591">[29591]</a> Add autorenew_checkouts to BorrowerMandatory/Unwanted fields system preferences</li>
+</ul>
+
+<h3 id="templates">Templates</h3>
+
+<ul>
+<li><p><a href="http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29571">[29571]</a> Mainpage : "All libraries" pending suggestions are visible only if the current library has suggestions</p>
+
+<blockquote>
+  <p>This fixes the display of pending suggestions in the staff interface so that it now shows pending suggestions for all libraries, for example: "Suggestions pending approval: Centerville: 0 / All libraries: 1.". Previously suggestions pending approval was only shown if there were suggestions for the user's current library.</p>
+</blockquote></li>
+</ul>
+
+<h2 id="documentation">Documentation</h2>
+
+<p>The Koha manual is maintained in Sphinx. The home page for Koha
+documentation is</p>
+
+<ul>
+<li><a href="http://koha-community.org/documentation/">Koha Documentation</a></li>
+</ul>
+
+<p>As of the date of these release notes, the Koha manual is available in the following languages:</p>
+
+<ul>
+<li><a href="https://koha-community.org/manual/21.05/ar/html/">Arabic</a> (34.3%)</li>
+<li><a href="https://koha-community.org/manual/21.05/zh_TW/html/">Chinese (Taiwan)</a> (58.8%)</li>
+<li><a href="https://koha-community.org/manual/21.05/cs/html/">Czech</a> (27.6%)</li>
+<li><a href="https://koha-community.org/manual/21.05/en/html/">English (USA)</a></li>
+<li><a href="https://koha-community.org/manual/21.05/fr/html/">French</a> (56.2%)</li>
+<li><a href="https://koha-community.org/manual/21.05/fr_CA/html/">French (Canada)</a> (25.5%)</li>
+<li><a href="https://koha-community.org/manual/21.05/de/html/">German</a> (73.5%)</li>
+<li><a href="https://koha-community.org/manual/21.05/hi/html/">Hindi</a> (100%)</li>
+<li><a href="https://koha-community.org/manual/21.05/it/html/">Italian</a> (48.1%)</li>
+<li><a href="https://koha-community.org/manual/21.05/es/html/">Spanish</a> (36.9%)</li>
+<li><a href="https://koha-community.org/manual/21.05/tr/html/">Turkish</a> (40.3%)</li>
+</ul>
+
+<p>The Git repository for the Koha manual can be found at</p>
+
+<ul>
+<li><a href="https://gitlab.com/koha-community/koha-manual">Koha Git Repository</a></li>
+</ul>
+
+<h2 id="translations">Translations</h2>
+
+<p>Complete or near-complete translations of the OPAC and staff
+interface are available in this release for the following languages:</p>
+
+<ul>
+<li>Arabic (89.9%)</li>
+<li>Armenian (100%)</li>
+<li>Armenian (Classical) (89%)</li>
+<li>Chinese (Taiwan) (83%)</li>
+<li>Czech (71.4%)</li>
+<li>English (New Zealand) (61.5%)</li>
+<li>English (USA)</li>
+<li>Finnish (82.4%)</li>
+<li>French (92.8%)</li>
+<li>French (Canada) (94.7%)</li>
+<li>German (100%)</li>
+<li>German (Switzerland) (60.8%)</li>
+<li>Greek (54.9%)</li>
+<li>Hindi (100%)</li>
+<li>Italian (94.7%)</li>
+<li>Nederlands-Nederland (Dutch-The Netherlands) (61.7%)</li>
+<li>Norwegian Bokmål (65.9%)</li>
+<li>Polish (100%)</li>
+<li>Portuguese (91.4%)</li>
+<li>Portuguese (Brazil) (87.1%)</li>
+<li>Russian (86.6%)</li>
+<li>Slovak (72.7%)</li>
+<li>Spanish (99.9%)</li>
+<li>Swedish (77%)</li>
+<li>Telugu (99.7%)</li>
+<li>Turkish (99.7%)</li>
+<li>Ukrainian (75.2%)</li>
+</ul>
+
+<p>Partial translations are available for various other languages.</p>
+
+<p>The Koha team welcomes additional translations; please see</p>
+
+<ul>
+<li><a href="http://wiki.koha-community.org/wiki/Translating_Koha">Koha Translation Info</a></li>
+</ul>
+
+<p>For information about translating Koha, and join the koha-translate 
+list to volunteer:</p>
+
+<ul>
+<li><a href="http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-translate">Koha Translate List</a></li>
+</ul>
+
+<p>The most up-to-date translations can be found at:</p>
+
+<ul>
+<li><a href="http://translate.koha-community.org/">Koha Translation</a></li>
+</ul>
+
+<h2 id="releaseteam">Release Team</h2>
+
+<p>The release team for Koha 21.05.09 is</p>
+
+<ul>
+<li><p>Release Manager: Fridolin Somers</p></li>
+<li><p>Release Manager assistants:</p>
+
+<ul>
+<li>Jonathan Druart</li>
+<li>Martin Renvoize</li>
+<li>Tomás Cohen Arazi</li>
+</ul></li>
+<li><p>QA Manager: Katrin Fischer</p></li>
+<li><p>QA Team:</p>
+
+<ul>
+<li>Andrew Nugged</li>
+<li>Jonathan Druart</li>
+<li>Joonas Kylmälä</li>
+<li>Kyle M Hall</li>
+<li>Marcel de Rooy</li>
+<li>Martin Renvoize</li>
+<li>Nick Clemens</li>
+<li>Petro Vashchuk</li>
+<li>Tomás Cohen Arazi</li>
+<li>Victor Grousset</li>
+</ul></li>
+<li><p>Topic Experts:</p>
+
+<ul>
+<li>UI Design -- Owen Leonard</li>
+<li>REST API -- Tomás Cohen Arazi</li>
+<li>Zebra -- Fridolin Somers</li>
+<li>Accounts -- Martin Renvoize</li>
+</ul></li>
+<li><p>Bug Wranglers:</p>
+
+<ul>
+<li>Indranil Das Gupta</li>
+<li>Erica Rohlfs</li>
+</ul></li>
+<li><p>Packaging Manager: </p></li>
+<li><p>Documentation Manager: David Nind</p></li>
+<li><p>Documentation Team:</p>
+
+<ul>
+<li>Aude Charillon</li>
+<li>Caroline Cyr La Rose</li>
+<li>Kelly McElligott</li>
+<li>Lucy Vaux-Harvey</li>
+<li>Martin Renvoize</li>
+<li>Rocio Lopez</li>
+</ul></li>
+<li><p>Translation Managers: </p>
+
+<ul>
+<li>Bernardo González Kriegel</li>
+</ul></li>
+<li><p>Wiki curators: </p>
+
+<ul>
+<li>Thomas Dukleth</li>
+</ul></li>
+<li><p>Release Maintainers:</p>
+
+<ul>
+<li>21.11 -- Kyle M Hall</li>
+<li>21.05 -- Andrew Fuerste-Henry</li>
+<li>20.11 -- Victor Grousset</li>
+<li>19.11 -- Wainui Witika-Park</li>
+</ul></li>
+</ul>
+
+<h2 id="credits">Credits</h2>
+
+<p>We thank the following libraries, companies, and other institutions who are known to have sponsored
+new features in Koha 21.05.09</p>
+
+<ul>
+<li><a href="https://bywatersolutions.com">ByWater Solutions</a></li>
+</ul>
+
+<p>We thank the following individuals who contributed patches to Koha 21.05.09</p>
+
+<ul>
+<li>Tomás Cohen Arazi (16)</li>
+<li>Florian Bontemps (3)</li>
+<li>Nick Clemens (8)</li>
+<li>David Cook (1)</li>
+<li>Jonathan Druart (23)</li>
+<li>Katrin Fischer (1)</li>
+<li>Andrew Fuerste-Henry (6)</li>
+<li>Lucas Gass (2)</li>
+<li>Didier Gautheron (1)</li>
+<li>Mason James (1)</li>
+<li>Joonas Kylmälä (2)</li>
+<li>Owen Leonard (9)</li>
+<li>Martin Renvoize (2)</li>
+<li>Marcel de Rooy (3)</li>
+<li>Andreas Roussos (1)</li>
+<li>Koha translators (1)</li>
+</ul>
+
+<p>We thank the following libraries, companies, and other institutions who contributed
+patches to Koha 21.05.09</p>
+
+<ul>
+<li>Athens County Public Libraries (9)</li>
+<li>BibLibre (4)</li>
+<li>Bibliotheksservice-Zentrum Baden-Württemberg (BSZ) (1)</li>
+<li>ByWater-Solutions (16)</li>
+<li>Dataly Tech (1)</li>
+<li>Independant Individuals (2)</li>
+<li>Koha Community Developers (23)</li>
+<li>KohaAloha (1)</li>
+<li>Prosentient Systems (1)</li>
+<li>PTFS-Europe (2)</li>
+<li>Rijksmuseum (3)</li>
+<li>Theke Solutions (16)</li>
+</ul>
+
+<p>We also especially thank the following individuals who tested patches
+for Koha</p>
+
+<ul>
+<li>Tomás Cohen Arazi (11)</li>
+<li>Florian Bontemps (1)</li>
+<li>Nick Clemens (23)</li>
+<li>Jonathan Druart (14)</li>
+<li>Katrin Fischer (34)</li>
+<li>Andrew Fuerste-Henry (73)</li>
+<li>Lucas Gass (4)</li>
+<li>Victor Grousset (20)</li>
+<li>Kyle M Hall (45)</li>
+<li>Joonas Kylmälä (1)</li>
+<li>Owen Leonard (1)</li>
+<li>David Nind (12)</li>
+<li>Martin Renvoize (9)</li>
+<li>Marcel de Rooy (4)</li>
+<li>Andreas Roussos (2)</li>
+<li>Sally (1)</li>
+<li>Fridolin Somers (37)</li>
+<li>ThibaudGLT (2)</li>
+</ul>
+
+<p>We regret any omissions.  If a contributor has been inadvertently missed,
+please send a patch against these release notes to koha-devel@lists.koha-community.org.</p>
+
+<h2 id="revisioncontrolnotes">Revision control notes</h2>
+
+<p>The Koha project uses Git for version control.  The current development
+version of Koha can be retrieved by checking out the master branch of:</p>
+
+<ul>
+<li><a href="https://git.koha-community.org/koha-community/koha">Koha Git Repository</a></li>
+</ul>
+
+<p>The branch for this version of Koha and future bugfixes in this release
+line is rmain2105.</p>
+
+<h2 id="bugsandfeaturerequests">Bugs and feature requests</h2>
+
+<p>Bug reports and feature requests can be filed at the Koha bug
+tracker at:</p>
+
+<ul>
+<li><a href="http://bugs.koha-community.org">Koha Bugzilla</a></li>
+</ul>
+
+<p>He rau ringa e oti ai.
+(Many hands finish the work)</p>
+
+<p>Autogenerated release notes updated last on 31 Jan 2022 17:38:56.</p>
diff --git a/misc/release_notes/release_notes_21_05_09.md b/misc/release_notes/release_notes_21_05_09.md
new file mode 100644
index 0000000000..2752102ab6
--- /dev/null
+++ b/misc/release_notes/release_notes_21_05_09.md
@@ -0,0 +1,389 @@
+# RELEASE NOTES FOR KOHA 21.05.09
+31 Jan 2022
+
+Koha is the first free and open source software library automation
+package (ILS). Development is sponsored by libraries of varying types
+and sizes, volunteers, and support companies from around the world. The
+website for the Koha project is:
+
+- [Koha Community](http://koha-community.org)
+
+Koha 21.05.09 can be downloaded from:
+
+- [Download](http://download.koha-community.org/koha-21.05.09.tar.gz)
+
+Installation instructions can be found at:
+
+- [Koha Wiki](http://wiki.koha-community.org/wiki/Installation_Documentation)
+- OR in the INSTALL files that come in the tarball
+
+Koha 21.05.09 is a bugfix/maintenance release with security fixes.
+
+It includes 9 security fixes, 26 bugfixes.
+
+### System requirements
+
+You can learn about the system components (like OS and database) needed for running Koha here: https://wiki.koha-community.org/wiki/System_requirements_and_recommendations
+
+
+## Security bugs
+
+### Koha
+
+- [[26102]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102) Javascript injection in intranet search
+- [[28735]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28735) Self-checkout users can access opac-user.pl for sco user when not using AutoSelfCheckID
+- [[29540]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29540) Accounts with just 'catalogue' permission can modify/delete holds
+- [[29541]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29541) Patron images can be accessed with just 'catalogue' permission
+- [[29542]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29542) User with 'catalogue' permission can view everybody's (private) virtualshelves
+- [[29543]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29543) Self-checkout allows returning everybody's loans
+- [[29544]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29544) A patron can set everybody's checkout notes
+- [[29903]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29903) Message deletion possible from different branch
+- [[29914]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29914) check_cookie_auth not strict enough
+
+
+
+
+## Critical bugs fixed
+
+### Acquisitions
+
+- [[29464]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29464) GET /acquisitions/orders doesn't honour sorting
+
+  **Sponsored by** *ByWater Solutions*
+
+### Fines and fees
+
+- [[29457]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29457) Fee Cancellation records the wrong manager_id
+
+  >Prior to this patch inadvertently the field borrowers.userid was used to fill accountslines.manager_id. This should have been borrowernumber.
+  >
+  >This report fixes that and prints a generic warning.
+
+### Hold requests
+
+- [[29736]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29736) Error when placing a hold for a club without members
+
+### Notices
+
+- [[29381]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29381) Auto-renewal digest messages are sent on every cron run
+
+  >This fixes an issue with automatic renewal digest messages - these were being sent on every cron run, even if there was nothing to renew or no renewal errors.
+  >
+  >(This error was caused by a regression in 21.05 from Bug 18532: Add individual issues to digest notice and hide auto_renewals messaging preference when not needed.)
+
+### OPAC
+
+- [[29696]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29696) "Suggest for purchase" missing biblio link
+
+### REST API
+
+- [[29018]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29018) Deleting patrons from REST API doesn't do any checks or move to deletedborrowers
+
+  >These fixes the REST API route for deleting patrons so that it now checks for guarantees, debts, and current checkouts. If any of these checks fail, the patron is not deleted.
+
+
+## Other bugs fixed
+
+### Acquisitions
+
+- [[24866]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24866) Display budget hierarchy in the budget dropdown menu used when placing a new order
+
+  >This improves the display for selecting a fund when placing a new order in acquisitions. It now displays as a hierarchy instead of a list without any indentation, for example:
+  >
+  >  Budget 2021
+  >  -- Book
+  >  -- -- Adult fiction
+- [[29419]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29419) Suggest for purchase clears item type, quantity, library and reason if bib exists
+
+### Architecture, internals, and plumbing
+
+- [[29702]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29702) all_libraries routine in library groups make a DB call per member of group
+- [[29789]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29789) Unused $error in cataloguing/additem.pl
+
+### Circulation
+
+- [[29476]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29476) Earliest renewal date is displayed wrong in circ/renew.pl for issues with auto renewing
+
+### Hold requests
+
+- [[29553]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29553) Holds: Can't call method "notforloan" on an undefined value when placing a hold
+
+### Notices
+
+- [[29557]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29557) Auto renew notices should handle failed renewal due to patron expiration
+
+  >This enhancement updates the default auto-renewal notices to tell patrons that their renewals have failed because their account has expired.
+
+### OPAC
+
+- [[17127]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17127) Can't hide MARC21 500 and others with NotesToHide
+
+  >This fixes hiding notes fields (5XX in MARC21 and 3XX in UNIMARC) using NotesToHide. Before this you could hide one field and it worked. However, when hiding multiple fields one field would still always be visible. Now hiding notes fields works as expected.
+- [[29604]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29604) Term highlighting adds unwanted pseudo element in the contentblock of OPAC details page
+- [[29685]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29685) 'If all unavailable' state for 'on shelf holds' makes holds page very slow if there's a lot of items on opac
+
+### Packaging
+
+- [[28926]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28926) Update cpanfile for Mojolicious::Plugin::OpenAPI v2.16
+
+### REST API
+
+- [[29503]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29503) GET /patrons should use Koha::Patrons->search_limited
+- [[29506]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29506) objects.search should call search_limited if present
+- [[29508]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29508) GET /patrons/:patron_id should use Koha::Patrons->search_limited
+
+### Reports
+
+- [[29530]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29530) When NumSavedReports is set, show value in pull down of entries
+
+  >This updates the way the NumSavedReports preference value is used on the saved reports page. For the "Show" dropwdown list:
+  >- it now displays the number set in NumSavedReports (previously it showed 20)
+  >- when expanded it now shows the number set in NumSavedReports sequentially (for example, if NumSavedReports is 78, the menu options should be "10, 20, 50, 78, 100, All"), and
+  >- it now displays 'All' if NumSavedReports is blank.
+  >
+  >It also updates the description for the NumSavedReports preference to clarify that all reports are shown when no value is entered.
+- [[29680]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29680) Reports menu 'Show SQL code' wrong border radius
+- [[29729]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29729) If serials_stats.pl returns no results dataTables get angry
+
+### Searching - Elasticsearch
+
+- [[29436]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29436) Cannot reorder facets in staff interface elasticsearch configuration
+
+### System Administration
+
+- [[29591]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29591) Add autorenew_checkouts to BorrowerMandatory/Unwanted fields system preferences
+
+### Templates
+
+- [[29571]](http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29571) Mainpage : "All libraries" pending suggestions are visible only if the current library has suggestions
+
+  >This fixes the display of pending suggestions in the staff interface so that it now shows pending suggestions for all libraries, for example: "Suggestions pending approval: Centerville: 0 / All libraries: 1.". Previously suggestions pending approval was only shown if there were suggestions for the user's current library.
+
+
+
+## Documentation
+
+The Koha manual is maintained in Sphinx. The home page for Koha
+documentation is
+
+- [Koha Documentation](http://koha-community.org/documentation/)
+
+As of the date of these release notes, the Koha manual is available in the following languages:
+
+
+- [Arabic](https://koha-community.org/manual/21.05/ar/html/) (34.3%)
+- [Chinese (Taiwan)](https://koha-community.org/manual/21.05/zh_TW/html/) (58.8%)
+- [Czech](https://koha-community.org/manual/21.05/cs/html/) (27.6%)
+- [English (USA)](https://koha-community.org/manual/21.05/en/html/)
+- [French](https://koha-community.org/manual/21.05/fr/html/) (56.2%)
+- [French (Canada)](https://koha-community.org/manual/21.05/fr_CA/html/) (25.5%)
+- [German](https://koha-community.org/manual/21.05/de/html/) (73.5%)
+- [Hindi](https://koha-community.org/manual/21.05/hi/html/) (100%)
+- [Italian](https://koha-community.org/manual/21.05/it/html/) (48.1%)
+- [Spanish](https://koha-community.org/manual/21.05/es/html/) (36.9%)
+- [Turkish](https://koha-community.org/manual/21.05/tr/html/) (40.3%)
+
+The Git repository for the Koha manual can be found at
+
+- [Koha Git Repository](https://gitlab.com/koha-community/koha-manual)
+
+
+## Translations
+
+Complete or near-complete translations of the OPAC and staff
+interface are available in this release for the following languages:
+
+- Arabic (89.9%)
+- Armenian (100%)
+- Armenian (Classical) (89%)
+- Chinese (Taiwan) (83%)
+- Czech (71.4%)
+- English (New Zealand) (61.5%)
+- English (USA)
+- Finnish (82.4%)
+- French (92.8%)
+- French (Canada) (94.7%)
+- German (100%)
+- German (Switzerland) (60.8%)
+- Greek (54.9%)
+- Hindi (100%)
+- Italian (94.7%)
+- Nederlands-Nederland (Dutch-The Netherlands) (61.7%)
+- Norwegian Bokmål (65.9%)
+- Polish (100%)
+- Portuguese (91.4%)
+- Portuguese (Brazil) (87.1%)
+- Russian (86.6%)
+- Slovak (72.7%)
+- Spanish (99.9%)
+- Swedish (77%)
+- Telugu (99.7%)
+- Turkish (99.7%)
+- Ukrainian (75.2%)
+
+Partial translations are available for various other languages.
+
+The Koha team welcomes additional translations; please see
+
+- [Koha Translation Info](http://wiki.koha-community.org/wiki/Translating_Koha)
+
+For information about translating Koha, and join the koha-translate 
+list to volunteer:
+
+- [Koha Translate List](http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-translate)
+
+The most up-to-date translations can be found at:
+
+- [Koha Translation](http://translate.koha-community.org/)
+
+## Release Team
+
+The release team for Koha 21.05.09 is
+
+
+- Release Manager: Fridolin Somers
+
+- Release Manager assistants:
+  - Jonathan Druart
+  - Martin Renvoize
+  - Tomás Cohen Arazi
+
+- QA Manager: Katrin Fischer
+
+- QA Team:
+  - Andrew Nugged
+  - Jonathan Druart
+  - Joonas Kylmälä
+  - Kyle M Hall
+  - Marcel de Rooy
+  - Martin Renvoize
+  - Nick Clemens
+  - Petro Vashchuk
+  - Tomás Cohen Arazi
+  - Victor Grousset
+
+- Topic Experts:
+  - UI Design -- Owen Leonard
+  - REST API -- Tomás Cohen Arazi
+  - Zebra -- Fridolin Somers
+  - Accounts -- Martin Renvoize
+
+- Bug Wranglers:
+  - Indranil Das Gupta
+  - Erica Rohlfs
+
+- Packaging Manager: 
+
+
+- Documentation Manager: David Nind
+
+
+- Documentation Team:
+  - Aude Charillon
+  - Caroline Cyr La Rose
+  - Kelly McElligott
+  - Lucy Vaux-Harvey
+  - Martin Renvoize
+  - Rocio Lopez
+
+- Translation Managers: 
+  - Bernardo González Kriegel
+
+- Wiki curators: 
+  - Thomas Dukleth
+
+- Release Maintainers:
+  - 21.11 -- Kyle M Hall
+  - 21.05 -- Andrew Fuerste-Henry
+  - 20.11 -- Victor Grousset
+  - 19.11 -- Wainui Witika-Park
+
+## Credits
+We thank the following libraries, companies, and other institutions who are known to have sponsored
+new features in Koha 21.05.09
+
+- [ByWater Solutions](https://bywatersolutions.com)
+
+We thank the following individuals who contributed patches to Koha 21.05.09
+
+- Tomás Cohen Arazi (16)
+- Florian Bontemps (3)
+- Nick Clemens (8)
+- David Cook (1)
+- Jonathan Druart (23)
+- Katrin Fischer (1)
+- Andrew Fuerste-Henry (6)
+- Lucas Gass (2)
+- Didier Gautheron (1)
+- Mason James (1)
+- Joonas Kylmälä (2)
+- Owen Leonard (9)
+- Martin Renvoize (2)
+- Marcel de Rooy (3)
+- Andreas Roussos (1)
+- Koha translators (1)
+
+We thank the following libraries, companies, and other institutions who contributed
+patches to Koha 21.05.09
+
+- Athens County Public Libraries (9)
+- BibLibre (4)
+- Bibliotheksservice-Zentrum Baden-Württemberg (BSZ) (1)
+- ByWater-Solutions (16)
+- Dataly Tech (1)
+- Independant Individuals (2)
+- Koha Community Developers (23)
+- KohaAloha (1)
+- Prosentient Systems (1)
+- PTFS-Europe (2)
+- Rijksmuseum (3)
+- Theke Solutions (16)
+
+We also especially thank the following individuals who tested patches
+for Koha
+
+- Tomás Cohen Arazi (11)
+- Florian Bontemps (1)
+- Nick Clemens (23)
+- Jonathan Druart (14)
+- Katrin Fischer (34)
+- Andrew Fuerste-Henry (73)
+- Lucas Gass (4)
+- Victor Grousset (20)
+- Kyle M Hall (45)
+- Joonas Kylmälä (1)
+- Owen Leonard (1)
+- David Nind (12)
+- Martin Renvoize (9)
+- Marcel de Rooy (4)
+- Andreas Roussos (2)
+- Sally (1)
+- Fridolin Somers (37)
+- ThibaudGLT (2)
+
+
+
+We regret any omissions.  If a contributor has been inadvertently missed,
+please send a patch against these release notes to koha-devel@lists.koha-community.org.
+
+## Revision control notes
+
+The Koha project uses Git for version control.  The current development
+version of Koha can be retrieved by checking out the master branch of:
+
+- [Koha Git Repository](https://git.koha-community.org/koha-community/koha)
+
+The branch for this version of Koha and future bugfixes in this release
+line is rmain2105.
+
+## Bugs and feature requests
+
+Bug reports and feature requests can be filed at the Koha bug
+tracker at:
+
+- [Koha Bugzilla](http://bugs.koha-community.org)
+
+He rau ringa e oti ai.
+(Many hands finish the work)
+
+Autogenerated release notes updated last on 31 Jan 2022 17:38:56.
-- 
2.39.5