Release 2.14 (#4710)

- show "link has expired message" in password reset screen
- added date objects as hydrator variables - for custom date formats in invoice templates
- show meta-fields with null values (e.g. booleans with `false` where hidden)
- fix permission check: allow to remove `view_own_timesheet` but still record times
- prevent error 500 if customer country is empty
- fix API 500 error if project does not exist when creating new timesheet
- fix tags are not created in remote-search mode
- do not check "export items" by default
- fix daterange query, if user an request locale are different
- added logging for invalid SAML responses (see various discussions)

src/Controller/AbstractController.php

@@ -255,6 +255,8 @@ abstract class AbstractController extends BaseAbstractController implements Serv
     }
 
     /**
+     * Use "performSearch=1" to skip loading session searches.
+     *
      * @param array<string> $filterParams parameter names, which should not be saved (neither session, nor database)
      * @throws \Exception
      */
@@ -298,7 +300,6 @@ abstract class AbstractController extends BaseAbstractController implements Serv
         }
         $searchName = $this->getSearchName($data);
 
-        /** @var BookmarkRepository $bookmarkRepo */
         $bookmarkRepo = $this->getBookmark();
         $bookmark = $bookmarkRepo->getSearchDefaultOptions($this->getUser(), $searchName);