Merge devel branch into master

.github/workflows/codacy.yml

@@ -15,10 +15,10 @@ name: Codacy Security Scan
 
 on:
   push:
-    branches: [ "main", "devel" ]
+    branches: [ "stable", "devel" ]
   pull_request:
     # The branches below must be a subset of the branches above
-    branches: [ "main" ]
+    branches: [ "stable" ]
   schedule:
     - cron: '33 6 * * 2'
 

.github/workflows/codeql.yml

@@ -2,9 +2,9 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [ "main"]
+    branches: [ "stable"]
   pull_request:
-    branches: [ "main", "devel"]
+    branches: [ "stable", "devel"]
   schedule:
     - cron: '15 14 * * 6'
 

.github/workflows/scorecard.yml

@@ -5,14 +5,14 @@
 name: Scorecard supply-chain security
 on:
   # For Branch-Protection check. Only the default branch is supported. See
-  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
+  # https://github.com/ossf/scorecard/blob/stable/docs/checks.md#branch-protection
   branch_protection_rule:
   # To guarantee Maintained check is occasionally updated. See
-  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
+  # https://github.com/ossf/scorecard/blob/stable/docs/checks.md#maintained
   schedule:
     - cron: '33 21 * * 4'
   push:
-    branches: [ "main" ]
+    branches: [ "stable" ]
 
 # Declare default permissions as read only.
 permissions: read-all

.github/workflows/scripts/run-build.sh

@@ -2,21 +2,6 @@
 
 set -e
 
-LOGFILE="/var/globaleaks/log/globaleaks.log"
-ACCESSLOG="/var/globaleaks/log/access.log"
-
-function atexit {
-  if [[ -f $LOGFILE ]]; then
-    cat $LOGFILE
-  fi
-
-  if [[ -f $ACCESSLOG ]]; then
-    cat $ACCESSLOG
-  fi
-}
-
-trap atexit EXIT
-
 sudo apt-get install -y debootstrap
 
 export chroot="/tmp/globaleaks_chroot/"

.github/workflows/scripts/run-tests.sh

@@ -2,21 +2,6 @@
 
 set -e
 
-LOGFILE="$GITHUB_WORKSPACE/backend/workingdir/log/globaleaks.log"
-ACCESSLOG="$GITHUB_WORKSPACE/backend/workingdir/log/access.log"
-
-function atexit {
-  if [[ -f $LOGFILE ]]; then
-    cat $LOGFILE
-  fi
-
-  if [[ -f $ACCESSLOG ]]; then
-    cat $ACCESSLOG
-  fi
-}
-
-trap atexit EXIT
-
 setupClient() {
   cd  $GITHUB_WORKSPACE/client  # to install frontend dependencies
   npm install -d

AUTHORS

@@ -1,6 +1,6 @@
 Copyright: 2011-2024 - GlobaLeaks
 
-License: https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/LICENSE
+License: https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/stable/LICENSE
 
 Original authors:
     Arturo Filastò

CHANGELOG

@@ -1,3 +1,15 @@
+Changes in version 5.0.19
+    Update codebase to use new angular 17 standalone components and control flow
+    Correct accessibility of language selector
+    Fix issue #4278
+    Revise colors of the application
+    Revise sticky footer implementation using Bootstrap 5 classes
+    Bump client dependencies to latest version
+    Update translations
+    Update brand assets
+    Rename main branch in stable
+    [ci] Revise tests to improve screenshots
+
 Changes in version 5.0.18
     Adopt OpenSSF Scorecard and implement most of the recommendations
     Add OpenSSF Scorecard to README.md

CONTRIBUTING.md

@@ -14,7 +14,7 @@ As a contributor, here are the guidelines we would like you to read:
 ## <a name="coc"></a> Code of Conduct
 
 Help us keep GlobaLeaks community safe and inclusive.
-Please read and follow our [Code of Conduct](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/CODE_OF_CONDUCT.md).
+Please read and follow our [Code of Conduct](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/stable/CODE_OF_CONDUCT.md).
 
 ## <a name="question"></a> Got a Question or Problem?
 
@@ -81,7 +81,7 @@ Before you submit your Pull Request consider the following guidelines:
 
 9. In GitHub, send a pull request to `GlobaLeaks:main`.
 
-## <a name="donate"></a> Donations <img src="https://raw.githubusercontent.com/globaleaks/globaleaks-whistleblowing-software/main/brand/assets/heart.svg" alt="heart icon" width="24" />
+## <a name="donate"></a> Donations <img src="https://raw.githubusercontent.com/globaleaks/globaleaks-whistleblowing-software/stable/brand/assets/heart.svg" alt="heart icon" width="24" />
 As a pure community-driven project without major corporate backing, we also welcome [donations](https://github.com/sponsors/globaleaks).
 
 - [Help Us Protect Whistleblowers—Become a GlobaLeaks Donor](https://github.com/sponsors/globaleaks)

GOVERNANCE.md

@@ -3,7 +3,7 @@
 ## Introduction
 [GlobaLeaks](https://www.globaleaks.org) is free, open source software enabling anyone to easily set up and maintain a secure whistleblowing platform.
 
-The software project has been started in 2011 and [originally authored](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/AUTHORS) by Arturo Filastò, Claudio Agosti, Fabio Pietrosanti, Giovanni Pellerano and Michele Orrù.
+The software project has been started in 2011 and [originally authored](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/stable/AUTHORS) by Arturo Filastò, Claudio Agosti, Fabio Pietrosanti, Giovanni Pellerano and Michele Orrù.
 
 Authored in 2021, this document is a responsible and tentative attempt to analyze the existing governance status, define roles and responsibilities in order to properly define a proper project governance and thus be sure to be able to continue to protect whistleblowers in the long run.
 
@@ -13,15 +13,15 @@ This section defines the main project roles and respective responsibilities for
 ### Project Lead
 The Project Lead is responsible for coordinating the overall work of the GlobaLeaks team and of the GlobaLeaks FLOSS community with the aim of continuously improving the software and methodology and protecting whistleblowers.
 
-The project is currently led by [Giovanni Pellerano](https://www.globaleaks.org/about/people/#giovanni-pellerano), who is currently the lead developer and has continuously guided and advised contributors and users since 2011. This lead role and responsibility is focused on doing what's best for this project, guiding contributors through the analysis of user requirements and the definition and execution of the [Project Roadmap](https://docs.globaleaks.org/en/main/roadmap/) in adherence to [Contributributors Guidelines](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/CONTRIBUTING.md) and the [Best Practices](https://bestpractices.coreinfrastructure.org/en/projects/3816).
+The project is currently led by [Giovanni Pellerano](https://www.globaleaks.org/about/people/#giovanni-pellerano), who is currently the lead developer and has continuously guided and advised contributors and users since 2011. This lead role and responsibility is focused on doing what's best for this project, guiding contributors through the analysis of user requirements and the definition and execution of the [Project Roadmap](https://docs.globaleaks.org/en/stable/roadmap/) in adherence to [Contributributors Guidelines](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/stable/CONTRIBUTING.md) and the [Best Practices](https://bestpractices.coreinfrastructure.org/en/projects/3816).
 
 ### Project Manager
 The Project Manager is in charge of managing and coordinating the activities of the project.
 
 [Susanna Ferro](https://www.globaleaks.org/about/people/#susanna-ferro) is the current Project Manager.
 
 ### Community Lead
-The Community Lead is responsible for identifying community needs, verifying and enforcing the project’s [Code of Conduct](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/CODE_OF_CONDUCT.md), making sure everybody feels represented and safe.
+The Community Lead is responsible for identifying community needs, verifying and enforcing the project’s [Code of Conduct](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/stable/CODE_OF_CONDUCT.md), making sure everybody feels represented and safe.
 
 [Rima Sghaier](https://www.globaleaks.org/about/people/#rima-sghaier) is the current Community Lead.
 
@@ -38,7 +38,7 @@ The Data Protection Officer (DPO) is responsible for educating the members of th
 ### Contributors
 Everyone is welcome!
 
-[Contributors](https://github.com/globaleaks/globaleaks-whistleblowing-software/graphs/contributors) are invited to adhere to the [Contributors Guidelines](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/CONTRIBUTING.md), participate in the project [Community Chat](https://community.globaleaks.org) and [Forum](https://forum.globaleaks.org) and to propose contributions opening Tickets and Pull Requests on the project’s [Ticketing System](https://github.com/globaleaks/globaleaks-whistleblowing-software/issues).
+[Contributors](https://github.com/globaleaks/globaleaks-whistleblowing-software/graphs/contributors) are invited to adhere to the [Contributors Guidelines](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/stable/CONTRIBUTING.md), participate in the project [Community Chat](https://community.globaleaks.org) and [Forum](https://forum.globaleaks.org) and to propose contributions opening Tickets and Pull Requests on the project’s [Ticketing System](https://github.com/globaleaks/globaleaks-whistleblowing-software/issues).
 
 List of team members, current and previous contributors and related statistics can be found at:
 
@@ -79,7 +79,7 @@ Here are listed the main organizations behind the project’s governance and sus
 
 * [Whistleblowing Solutions Impresa Sociale (S.r.l.)](https://www.whistleblowingsolutions.it/): an innovative social enterprise that carries out research and development to support whistleblowers and the fight against corruption. It was founded in 2016 to guarantee the economic sustainability of the GlobaLeaks project, through taking care of the growing number of requests for assistance, maintenance and custom deployment. WBS hosts the development activities and coordinates the community efforts.
 
-* [Hermes Center for Transparency and Digital Human Rights (HERMES)](https://www.hermescenter.org/): a non-profit association founded in 2012 by a group of hacktivists, lawyers and digital rights defenders to host the development and implementation of open source technologies with the purpose of advocating for freedom of speech online and, more generally, the protection of human rights and personal freedom in a connected world. Fiscal sponsor for the initial GlobaLeaks development lifecycle is owner of the [AGPLv3 License](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/LICENSE) and [Trademark](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/brand/globaleaks-euipo-trademark-certificate.pdf).
+* [Hermes Center for Transparency and Digital Human Rights (HERMES)](https://www.hermescenter.org/): a non-profit association founded in 2012 by a group of hacktivists, lawyers and digital rights defenders to host the development and implementation of open source technologies with the purpose of advocating for freedom of speech online and, more generally, the protection of human rights and personal freedom in a connected world. Fiscal sponsor for the initial GlobaLeaks development lifecycle is owner of the [AGPLv3 License](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/stable/LICENSE) and [Trademark](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/stable/brand/globaleaks-euipo-trademark-certificate.pdf).
 
 ## Possible improvements
 The GlobaLeaks team looks forward to improving the project governance and is exploring the following possibilities:
@@ -93,7 +93,7 @@ Feedback is welcome by any former or new contributor.
 ## Annexes
 
 * [Project Roadmap](https://docs.globaleaks.org/en/devel/roadmap/index.html)
-* [Project Code of Conduct](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/CODE_OF_CONDUCT.md)
-* [Contributors Guidelines](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/CONTRIBUTING.md)
+* [Project Code of Conduct](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/stable/CODE_OF_CONDUCT.md)
+* [Contributors Guidelines](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/stable/CONTRIBUTING.md)
 * [Project Security Policy](https://github.com/globaleaks/globaleaks-whistleblowing-software/security/policy)
 * [Project Best Practices](https://bestpractices.coreinfrastructure.org/en/projects/3816)

LICENSE

@@ -1,21 +1,3 @@
--------------------------------------------------------------------------------
-Copyright (c) 2011-2024 - GlobaLeaks
-
-This program is free software: you can redistribute it and/or modify
-it under the terms of the GNU Affero General Public License as
-published by the Free Software Foundation, either version 3 of the
-License, or (at your option) any later version.
-
-This program is distributed in the hope that it will be useful,
-but WITHOUT ANY WARRANTY; without even the implied warranty of
-MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-GNU Affero General Public License for more details.
-
-You should have received a copy of the GNU Affero General Public License
-along with this program.  If not, see <http://www.gnu.org/licenses/>.
--------------------------------------------------------------------------------
-                               AGPLv3 LICENSE
--------------------------------------------------------------------------------
                     GNU AFFERO GENERAL PUBLIC LICENSE
                        Version 3, 19 November 2007
 
@@ -633,8 +615,6 @@ reviewing courts shall apply local law that most closely approximates
 an absolute waiver of all civil liability in connection with the
 Program, unless a warranty or assumption of liability accompanies a
 copy of the Program in return for a fee.
-
-                     END OF TERMS AND CONDITIONS
 --------------------------------------------------------------------------------
                 ADDITIONAL TERMS PURSUANT TO SECTION 7 OF AGPLv3
 --------------------------------------------------------------------------------