New Features:

• Prompt Templates Module: New dedicated module for managing AI prompt templates, featuring an embedded md-editor-v3 editor
• MintMCP Login View: Added a dedicated authentication view for connecting to the MintMCP server
• MintMCP Internal Authorization: Added internal authorization handling for agent access to MCP tools
• MintMCP Tooling Expansion: Extended MintMCP with documentation retrieval, report invocation, many-to-many relationship handling, MCP Apps support, and built-in CRM tools with an agent–tool interaction loop
• MintMCP Automated Regression Tests: Added an automated regression test suite covering MCP tools
• OpenID Connect (OIDC) & SSO Support: Added OIDC authentication and improved SSO login to allow simultaneous use of classic login/password alongside SSO
• SAML Support in New API: Added SAML authentication support to the modern API layer
• Events — Candidate Support: Events can now be linked to candidate records
• Recurrence Until a Given Date: Added the ability to set recurring records to repeat until a specific date
• Progress Bar During Recurrence Save: Added a progress indicator while saving recurring records
• File Attachments on Candidates & Candidatures: Added file attachment support on Candidate and Candidature records
• Image Preview on Record View: Images attached to a record are now previewed directly on the record view
• Recently Viewed — Real-Time Update: The “Recently viewed” list now updates immediately when a record view is opened
• Scroll to Invalid Field on Validation: The form now automatically scrolls to the first field that fails validation
• Close Tasks from Dashlet: Tasks can now be closed directly from the dashlet
• List View — Select All Records: Added a “select all” option on list views
• Offboarding for More Employee Statuses: Offboarding generation now supports Active, During Termination, and Terminated employee statuses
• Missing API V8 Endpoints: Added previously missing endpoints to the legacy V8 API
• Notification Screen Redirect: Clicking a notification now redirects to the relevant record or screen
• Instance Operation Modes: Added configurable operation modes for a MintHCM instance
• WCAG Keyboard Accessibility: Improved keyboard navigation and focus handling across the homepage, list views, forms, and general navigation
• Subpanel Modifications: Various subpanel configuration improvements

Security Fixes:

• Content-Security-Policy (CSP): Introduced a CSP header to reduce XSS and injection attack surface
• Third-Party JS Library Updates: Updated jQuery, YUI, FullCalendar, and jsTree to patch known vulnerabilities
• Field Hiding in API V8: Prevented sensitive fields from being exposed via the legacy V8 API
• Markdown File Access Restriction: Restricted public access to markdown documentation files
• Self-XSS via login_language Parameter: Fixed improper input handling allowing self-XSS through the login_language parameter
• IDOR via Subpanel Endpoint: Added missing parent-record ACL check on the subpanel endpoint that allowed cross-record data access
• Stored XSS in Comments Module: Sanitized the description field before rendering via v-html
• Authenticated SQL Injection in Legacy V8 API: Fixed SQL injection in filter handling of in/not_in operators
• Restricted Public Directories and Files: Blocked access to directories and files that should not be publicly reachable
• Removal of ESList: Removed the legacy ESList module, which contained multiple security issues and is now superseded by the Vue frontend

Bug Fixes:

• Fixed the installer by replacing the faulty component
• Fixed view logic that was not executing correctly
• Fixed non-clickable links inside subpanels
• Fixed the forgot-password flow
• Fixed an ElasticSearch error triggered by missing records
• Fixed an issue preventing record saves
• Fixed field requirement mismatch on the Birthdate field in Candidates
• Fixed duplicate notification entries in the bell icon
• Fixed incorrect language display for list view column headers
• Fixed several issues identified in Studio, including field editing and entity generator randomly clearing unrelated entities
• Fixed record creation failure in the Terms of Employment module
• Fixed missing confirmation notification on save
• Fixed multiple errors in the Delegations/Costs module
• Fixed multiple errors in the Work Schedules/Work Time module
• Fixed a relation issue with the Office field preventing record creation in the Room module
• Fixed a server error (Error 500) preventing record creation in the Knowledge module
• Fixed record creation from an Employee subpanel for Training records
• Fixed several minor bugs in Contracts and Terms of Employment
• Fixed a conflict between browser autofill and floating labels on the login form
• Fixed an authentication error in the API
• Fixed an issue preventing meetings from being closed via the dashlet
• Fixed issues in the recurrence view
• Fixed filter behavior on the search view
• Fixed logo link behavior for Cmd/Ctrl-click (open in new tab)
• Fixed incorrect search results for meeting participants
• Fixed menu module ordering not persisting in view options
• Fixed a crash when sorting the Employees list
• Fixed a permission issue blocking non-admin users from accessing MintMCP tools
• Fixed incorrect status display on the Ratings dashlet
• Fixed missing scrollbars causing a critical UX issue
• Fixed the sidebar collapse button’s background color
• Fixed text splitting behavior when pressing Enter
• Fixed the Certificates subpanel behavior on Employee records
• Fixed field handling exceptions when duplicating a meeting
• Fixed several issues from Greens testing, including problems with relate fields
• Fixed several bugs reported from production use of MintMCP
• Fixed responsive layout issues in the sidebar menu at various resolutions
• Fixed incorrect date handling for MCP-created meetings
• Improved the warning message shown when adding a new Terms of Employment condition
• Fixed relation propagation when creating a Candidature from a Candidate record

More info about release: https://github.com/minthcm/minthcm/releases/tag/4.3.2

Security Fixes

• [SEC] SQL Injection in Schedulers — Fixed SQL injection vulnerability in the Schedulers module by sanitizing query parameters in the SchedulerRepository.

New Features

• WCAG — Main page accessibility attributes for AI agent support — Added aria-label and aria-description attributes to key UI elements (Kudos/News drawer, top bar buttons, global search, sidebar modules) to improve screen reader support and WCAG compliance.

Bug Fixes

• Mint CLI installer permission issue — Fixed a permission error (chmod: cannot read directory) occurring during MintHCM CLI installation.
• Kudos drawer showing incorrect records on tab switch — Fixed a race condition where switching Kudos tabs (All/Received/Given) before data loaded would display incorrect records.
• Incorrect display of quotes in list view and calendar — Fixed HTML entity encoding issue causing single and double quotes to render as escaped entities (") in list views and calendar entries.
• Supervisor change not saving on Employee record — Fixed an issue where changing the “Reports to” field on an Employee record would not persist, by restricting association handling in getRecord to scalar (ManyToOne/OneToOne) relationships.
• Incorrect record search on list views — Fixed search functionality on list views where records were not found correctly when using partial name queries.

Key Features:

• Unified Interface: Single view that combines both display and edit modes, eliminating the need for separate DetailView and EditView
• Modern Architecture: Built with Vue 3 using composables (useBean, useACL) for better code reusability and maintainability
• Studio Support: Full configuration through Studio interface
• Panel-Based Layout: Flexible panel system supporting multiple components and custom layouts
• Subpanels Integration: Built-in support for subpanels with pagination and ACL control
• ACL Integration: Comprehensive permissions checking at view, field, and action levels
• Dynamic Title: Browser tab title updates based on record name and module
• 200+ Entity Files: Added/updated entities for all modules in api/app/Entities/Custom Fields Support: Entities now support custom fields with automatic synchronization
• Dynamic entity rebuilding when custom fields are added/modified via Admin > “Quick Repair and Rebuild”
• Proper handling of the custom table (CSTM) integration
• Cross-Module Search: Search records across all accessible modules simultaneously
• Advanced Query Processing: Smart query standardization with wildcard support
• Paginated Results: Built-in pagination with configurable items per page
• Module Icons: Visual module identification in search results
• Quick Navigation: Direct links to record detail views from search results
• Responsive Design: Modern, clean interface with proper loading states

Improved Generation:

• Better entity generator with relational field support
• Automatic constraint handling for custom entities
• Fixed entity rebuilding issues with technical column names (e.g., “system”)
• Fixed Custom ID Generator handling in entity properties
• Improved shouldGenerateCustomEntity validation logic
• Better hasCustomTable() detection

Bug Fixes:

• Fixed multiple data loading when entering list view
• Fixed “Email Addresses” column sorting not working
• Fixed sorting by relational field, breaking the list view
• Fixed relational field filters not always working
• Fixed pencil action not redirecting to EditView
• Fixed pagination issues in Work Time view within Work Plan
• Fixed non-functional parent field on edit view
• Fixed global search relate/parent fields – display and navigation to records
• Fixed missing data in subpanels
• Fixed subpanel loading errors
• Fixed subpanel visibility issue despite having module access
• Fixed “Create” button in subpanels
• Fixed users not being able to see too much in subpanels
• Fixed adding Contracts through subpanel not working
• Fixed Date field clearing itself
• Fixed missing users when duplicating meeting records
• Fixed empty fields after failed user creation attempt
• Fixed unable to create costs under Business Trip
• Fixed unable to change employee status
• Fixed multienum field issues
• Fixed administrators having too many modules in the navigation bar
• Fixed alert panel clearing when clicking “x” on alerts
• Fixed the test environment lagging due to alerts
• Fixed database errors
• Fixed entity generation issues with technical column names (e.g., “system”)
• Fixed Doctrine cache not being cleared during Quick Repair and Rebuild

More info about release: https://github.com/minthcm/minthcm/releases/tag/4.3.0

New Features

• Redirect when clicking on the MintHCM logo button

• Ability to customize the Select file button when adding a logo

• Duplicating a meeting – by default without copying Recurrences

• Executing MintCLI as $current_user

• Employees – Employment status – During notice period

• Mass approval of work plans – announcement

• Error message on the list view

• Ability to customize the employee list view

• Comments – ability to hide replies

• Replacing the Skype field on the candidate card

• Number of unread News on the drawer displayed as a counter and reactions

• Salary range – preview only those resulting from my position

• Filters on the Kanban view

Bug Fixes

• Kanban no longer has bugs in version 4.2.2 [Community]

• Spinner when saving the working time record from the dashlet has been fixed

• Access to News even though it was visible in the drawer has been fixed

• Opening new tabs with the Command key pressed has been fixed

• StatusBox now properly disappears after the Work Plan has been approved

• Asterisk of requirements multiplying on form if field is required by condition has been fixed

• Save button in the edit view is now properly blocked by the system

• Logout button functionality has been fixed

• Sort by currency field has been fixed

• Remnants of the position_name fields in Onboarding Templates and Offboarding Templates modules have been removed

• Work plan – time bar shift has been fixed

• Order of modules in navigation vs cache has been fixed

• Errors in the Module Creator have been fixed

• Errors in basic reports and advanced templates have been fixed

• Issue with saving the time without specifying the remaining time has been fixed

New Features

• Custom Login Logo: Added ability to override the logo on the login page
• Enhanced Calendar View: Modified month view in calendar – day numbers are now clearly visible
• Interactive List Rows: List rows now highlight when hovering with cursor
• Accounts Module Removal: Removed all functionality related to Accounts
• Lead Module Removal: Removed all functionality related to Lead
• AM/PM DateTime Support: Added support for AM/PM format in DateTime fields

Bug Fixes

• PDF Templates: Fixed Smarty functionality in PDF Templates when using variables from bean
• Work Plan Manager: Fixed “Approve” button in work plan manager dashlet – work plan now properly closes after clicking
• Number Formatting: Fixed default number formatting in VUE components

Release Notes:

Model Context Protocol has been added to the Mint core

New Features

• Employee Management: Enabled employee editing for non-administrator users
• Meeting Management: Added ability to close meetings from subpanel level
• Time Logging: Implemented work time logging with organizational unit selection

Bug Fixes

• Installing MintHCM via docker image: Fixed problem with installation of MintHCM via docker image
• List Display Issue: Fixed records display on lists for group permission-based queries
• Indexing Problem: Resolved indexing issue runned by MintCLI
• PDF Preview: Fixed PDF preview functionality and relationship looping

Mint MCP setup instructions: https://minthcm.org/mint-mcp-instructions/

Bug Fixes

• Recruitment filtering by Status – Fixed filtering functionality in Recruitment module
• Global Search for employees – Resolved employee search issues in Global Search
• Date sorting on lists – Corrected sorting behavior for date columns
• Total count display – Fixed accurate display of total records count on lists
• Email/Document links – Active links now properly display with email/document names in LV modules
• Document Revisions subpanel – Detail view now displays correctly in Document Revisions subpanel
• Role detail view – Role detail view functionality restored
• Developer instance lists – Data now displays properly on lists in developer instance
• Calendar week numbers – Correct week numbers and work plan acceptance button now display on calendar
• Recurring objects widget – Added labels and validations to recurring objects creation widget
• Employee list filters – All filters on Employee list now function correctly
• Shared calendar link – Shared calendar link generation now works properly
• External Accounts password confirmation – Users now receive password change confirmation for External Accounts
• Recurrence section buttons – All buttons in “Recurrence” section now function properly
• Post-installation button text – Button text no longer blends with background after installation
• Workplace translations – Corrected translations in “Workplace” area for list view buttons

New Features

• V8 Users module meta data – Added capability to fetch meta data for Users module in V8
• Doctrine entity generation – Generate Doctrine entities from vardefs
• Resource Management package update – Updated Resource Management packages to version 1.4.1
• Custom constants extension – Package installation now allows extending constants files through custom files
• Work plan approval notification – Added notification system when supervisor accepts work plan
• Manage Notifications tab – New “Manage Notifications” tab added to interface
• Absence type filtering – Added absence type filtering in office absence dashlet
• Multiple timezone support – MintHCM now supports different time zones
• Enhanced date/time formats – New frontend handles dates and times in various formats
• Bulk work plan approval – Mass approval functionality for work plans
• Global Search boost parameter – Added boost parameter for fields in Global Search functionality

For instructions how to upgrade MintHCM 3.v to MintHCM 4.v visit Upgrade your MintHCM

Hotfix 4.1.3.2

DetailView of ACLRoles is broken

Hot Fix 4.1.3.1

User Profile Issue Resolved: You can now create and save changes to user profiles without errors.

System Requirements Update

• PHP: 8.2
• Database: MySQL: 8.0 or MariaDB: 10.5, 10.6, 10.10, 10.11

New Features

• MintCLI: Added index reset functionality for selected modules
• User Management: Enabled editing of employee records for non-administrator users
• Demo Data: Added user photos to MintHCM demo dataset
• Activity Views: Added work plan display in Participants section on detailed Activity view
• Search Enhancement: Added record count information in search result lists
• Session Management: Implemented automatic logout after session loss
• Global Search: Unified search engines across the platform
• MintCLI Commands: Added new commands for database dump export and import operations
• Dashboard Management: Relocated edit and delete capabilities for dashboards

Bug Fixes

• Security: Enhanced code security measures and completed comprehensive security audit
• Access Control: Fixed global search to hide records from modules without proper access rights
• Permissions: Granted appropriate permissions for viewing News records
• PDF Templates: Fixed relationship tree expansion functionality
• Employee Contracts: Corrected information display for employees with permanent contracts
• Delegations: Fixed total cost calculation and display
• Internationalization: Resolved Kudos display issues when special characters are present in content
• Calendar: Fixed shared calendar functionality and resolved errors in new group features
• Work Plans Dashlet: Corrected display of Date, Status, User/Employee, and worked time columns in “My Work Plans”
• Workspace: Prevented multiple MintHCM instances from opening in the same workspace
• Module Builder: Fixed overlay disappearing issue
• Quick Create Menu: Added proper user permission validation for VUE Quick Create menu
• Calendar Navigation: Fixed “Cancel” button to properly redirect to previous view
• Mobile: Removed timezone conflicts during MintHCM Mobile login process