Hotfix 4.4.4 - FinTS bank import review fixes - #332

Open

lukas-staab wants to merge 35 commits into

mainfrom

Commits on Aug 11, 2026

fix(fints): accept POST on the bank-access pages again

lukas-staab
and
claude
committed
892ce81
fix(fints): stop mangling the PIN, the TAN and the free-text labels

lukas-staab
and
claude
committed
42e2d8c
fix(fints): stop convertToCent() flipping the sign of negative amounts

lukas-staab
and
claude
committed
779c505
fix(fints): never re-import silently when the resume point is not found

lukas-staab
and
claude
committed
9e78219
fix(fints): send an expired session back to the login instead of erroring

lukas-staab
and
claude
committed
e83f024
fix(fints): catch the bank responses that ended in an error page

lukas-staab
and
claude
committed
3eb77ed
fix(fints): only resume a statement request for the account it was made for

lukas-staab
and
claude
committed
927f0c1
fix(fints): report the installed version to the bank, not always "-dev"

lukas-staab
and
claude
committed
1918ff9
fix(fints): validate an account before registering it for synchronisation

lukas-staab
and
claude
committed
fb3085e
chore(fints): remove the dead Hibiscus connector and the broken REST endpoints

lukas-staab
and
claude
committed
803d31d
fix(fints): verify the CSRF nonce on the bank-access actions

lukas-staab
and
claude
committed
84698c8
style(fints): apply rector to the new FinTS conversion test

lukas-staab
and
claude
committed
fb45df5
chore: bump version to 4.4.4

lukas-staab
and
claude
committed
08f68be
fix(fints): work through the 4.4.4 review feedback

lukas-staab
and
claude
committed
cf38557
Fix: changelog
DieMichii
authored
5d81891
feat(konto): explain what the account IBAN is used for

lukas-staab
and
claude
committed
0e90269
fix(logging): rotate the application log instead of growing one file

lukas-staab
and
claude
committed
e7c6025
chore(dependencies): update composer.lock to latest package versions
lukas-staab
committed
78521dc

Commits on Aug 14, 2026

Commits on Aug 23, 2026

fix(booking): download the booking archive instead of erroring

lukas-staab
and
claude
committed
35b9c94
fix(lang): fill the three empty translations that fail the CI check

lukas-staab
and
claude
committed
2015b68
fix(export): hand the legacy CSV downloads over as a response too

lukas-staab
and
claude
committed
fc5e0e5
feat(booking): offer the DATEV export under the booking history

lukas-staab
and
claude
committed
e929d0f