Kevin Papst 31a8f887a5 Release 2.58 (#5952)
* bump version
* fix formatting locale reset after embedded controller sub-requests (#5944)
* fix GHSA-c6w6-57jj-62vh
* fix GHSA-m492-gv72-xvxj
* fix GHSA-jr9p-4h4j-6c58
* make sure to only use JS logic to call API endpoints
* fixes GHSA-r8vr-m544-qh4h
* make sure to only use JS logic to call API endpoints
* fix GHSA-rw46-qg69-vg6h
* fix GHSA-pj8j-p4g4-4vw8 - prevent kimai from rendering images via markdown
* fix GHSA-pj8j-p4g4-4vw8 - use a safe network client to prevent SSRF via images
* fix GHSA-xv4r-4885-gwpg
* fix GHSA-pgcc-vfmc-7cw5 - move GET routes to API with POST method to prevent CSRF
* fix tooltip survives page reload
* updated wizard images
* split wizard and password reset subscriber into two classes
* relax upper php limit
* added zizmor workflow scans and apply findings
* user permissions <name>_other_profile  now respect teams
* move all linting steps to new job
* updated docker image version names
* use .env.local for storing APP_SECRET
* improve build order and use given tag as ref for checkout, not default main branch
* improved APP_SECRET handling, see entrypoint.sh
* use local code for building the image for more flexibility, added dockerignore
2026-05-25 15:39:47 +02:00
2026-05-25 15:39:47 +02:00
2026-05-25 15:39:47 +02:00
2026-05-25 15:39:47 +02:00
2026-05-25 15:39:47 +02:00
2026-05-25 15:39:47 +02:00
2026-05-25 15:39:47 +02:00
2026-05-25 15:39:47 +02:00
2026-05-25 15:39:47 +02:00
2025-08-08 23:25:42 +02:00
2023-01-12 12:10:11 +01:00
2026-05-25 15:39:47 +02:00
2026-04-16 22:06:53 +02:00
2026-01-07 00:59:47 +01:00
2025-12-21 16:42:34 +01:00
2026-05-21 22:14:10 +02:00
2022-12-26 17:09:07 +01:00
2026-05-25 15:39:47 +02:00
2026-05-25 15:39:47 +02:00
2026-01-07 00:59:47 +01:00
2026-05-25 15:39:47 +02:00
2026-04-25 09:58:43 +02:00
2024-10-03 10:34:20 +02:00
2026-05-25 15:39:47 +02:00
2026-05-21 22:14:10 +02:00
2026-05-21 22:14:10 +02:00
2026-01-25 09:51:22 +01:00
2023-09-07 22:24:08 +02:00
2025-12-25 16:44:11 +01:00
2026-05-25 15:39:47 +02:00

Kimai logo

CI Status Code Coverage Latest stable version

Kimai
#1 Open-Source Time-Tracker

Kimai is a professional grade time-tracking application, free and open-source. It handles use-cases of freelancers as well as companies with dozens or hundreds of users. Kimai was build to track your project times and ships with many advanced features, including but not limited to:

JSON API, invoicing, data exports, multi-timer and punch-in punch-out mode, tagging, multi-user - multi-timezones - multi-language (over 30 translations existing!), authentication via SAML/LDAP/Database, two-factor authentication (2FA) with TOTP, customizable role and team permissions, responsive design, user/customer/project specific rates, advanced search & filtering, money and time budgets, advanced reporting, support for plugins and so much more.

  • Home — Kimai project homepage
  • Blog — Read the latest news
  • Documentation — Learn how to use Kimai
  • Newsletter - Subscribe and get notified about new releases and important updates

Requirements

  • PHP 8.2 minimum with support for 8.3, 8.4, 8.5
  • MariaDB / MySQL: oldest maintained LTS release (MariaDB >= 10.6 or MySQL >= 8.4) or newer
  • A webserver and subdomain (subdirectory is not supported)
  • PHP extensions: gd, intl, json, mbstring, pdo, tokenizer, xml, xsl, zip

Installation

There are more documented ways for on-premise hosting.

And if you don't want to host Kimai, you can use the Cloud version of it.

Updating Kimai

Plugins

Roadmap and releases

You can see a rough development roadmap, which is open for changes and input from the community, your ideas are welcome.

Release versions will be created on a regular basis, every couple of weeks latest. Every code change, whether it's a new feature or a bugfix, will be done on the main branch.

Contributing

You want to contribute to this repository? This is so great! The best way to start is to open a new issue for bugs or feature requests or a discussion for questions, support and such.

In case you want to contribute, but you wouldn't know how, here are some suggestions:

  • Spread the word: Please write a testimonial for our Wall of love, vote for Kimai on any software platform, you can toot or tweet about it, share it on LinkedIn, Reddit and any other social media platform!
  • Translate Kimai into your language, or help to improve the existing translations, many languages look for a contributor
  • Answer questions: You know the answer to another user's problem? Share your knowledge.
  • Something can be done better? An essential feature is missing? Create a feature request.
  • Report bugs makes Kimai better for everyone.
  • You don't have to be programmer, the documentation and translation could always use some attention.
  • Sponsor the project: free software costs money to create!

There is one simple rule in our "Code of conduct": Don't be an ass!

Follow Kimai

Credits

Kimai is based on modern technologies and frameworks such as PHP, Symfony and Doctrine, Bootstrap and Tabler, and countless others.

Description
Kimai 2.61.0 — Migrated from Kimai 1.x. PHP 8.3, Symfony 6.4, MariaDB. 908K timesheets, 2,154 users.
Readme AGPL-3.0 53 MiB
Languages
PHP 85.7%
Twig 9.7%
JavaScript 3.3%
SCSS 0.5%
CSS 0.4%
Other 0.4%