Blesta 6.0 Beta 4 Released

Blesta 6.0.0 BETA 4 has been released! Thanks to everyone who tried Beta 3 and reported issues — this release builds on that feedback with several new additions and a round of fixes.

Can I participate in the beta?

If you have an owned or monthly license with us directly, you may download blesta-6.0.0-b4.zip in the client area now (Login Required). If you obtained your license from a reseller or distributor, you may be able to participate. Contact your reseller to find out. As with any beta, and especially a major release like this one, this release is for non-production use only and is unsupported. DO NOT UPGRADE YOUR PRODUCTION.

If you’ve already installed an earlier beta, you can try upgrading to Beta 4 under Settings > System > Upgrade Options. Before attempting the upgrade, we strongly recommend making a manual backup of your files and database as a precaution.

Once you are up and running, head to the beta forums or the Discord beta channel to report any issues and let us know what you think! If you have a license and are verified or become verified on our Discord chat, you’ll have access to the license holder only beta channel.

Visit the Beta Forums! Visit Discord Chat!

Trying the AI features

Blesta 6 introduces optional AI features through Blesta AI, powered by the latest leading models. To try this out during beta, open a ticket from your client account to request a Blesta AI API key. Beta keys are issued manually at our discretion and are temporary: they’ll be revoked once 6.0 is officially released. At that point, you’ll be able to request a new key directly from your account.

What’s new in Beta 4?

The headline additions in this beta:

• “Same Day” suspension — a new option to suspend services “Same Day” in addition to 1-60 days.
• Search services by ID — added a service search filter option by service ID.
• System Overview links restored — brought back missing links on values in the System Overview widget.
• System Overview recent user activity — recent users now use a different color shade depending on last activity.
• Password generator hardening — removed < and > characters from the password generator character pool.
• Encrypted notes — added support for encrypted client notes.

Bug fixes

Beta 4 resolves 16 bugs reported during the beta, these are some of them:

• When creating a pending service and appending it to an existing invoice, it was being activated.
• Drag-n-drop only worked from the grip icon.
• When manually activating a pending service, the module row was missing.
• Domains: the embed code snippet didn’t observe dark mode.
• Avatars set the full system path in user_avatars.file_name.
• AI validation error: “Could not connect to AI API: AI integration files failed integrity validation.”

See the release notes for the complete list of changes.

When is the final release?

Version 6.0 will be officially released after the beta phase has completed. Given that 6.0 is a major release, we expect there will be more betas than typical with a minor release. Once we deem 6.0 stable for production, a final release will be issued. You can help speed things along by participating in the beta!

Blesta 6.0 Beta 3 Released

Blesta 6.0.0 BETA 3 has been released! Thanks to everyone who tried Beta 2 and reported issues — this release builds on that feedback with a handful of new additions and a long list of fixes.

Can I participate in the beta?

If you have an owned or monthly license with us directly, you may download blesta-6.0.0-b3.zip in the client area now (Login Required). If you obtained your license from a reseller or distributor, you may be able to participate. Contact your reseller to find out. As with any beta, and especially a major release like this one, this release is for non-production use only and is unsupported. DO NOT UPGRADE YOUR PRODUCTION.

If you’ve already installed Beta 1 or Beta 2, you can try upgrading to Beta 3 under Settings > System > Upgrade Options. Before attempting the upgrade, we strongly recommend making a manual backup of your files and database as a precaution.

Once you are up and running, head to the beta forums or the Discord beta channel to report any issues and let us know what you think! If you have a license and are verified or become verified on our Discord chat, you’ll have access to the license holder only beta channel.

Visit the Beta Forums! Visit Discord Chat!

Trying the AI features

Blesta 6 introduces optional AI features through Blesta AI, powered by the latest leading models. To try this out during beta, open a ticket from your client account to request a Blesta AI API key. Beta keys are issued manually at our discretion and are temporary: they’ll be revoked once 6.0 is officially released. At that point, you’ll be able to request a new key directly from your account.

What’s new in Beta 3?

The headline additions in this beta:

• AI model sunset fallback — automatically fall back to an available model when a configured AI model is retired.
• Upgrade hardening — improvements to make upgrading to Blesta 6 more reliable.
• Bulk domain sync — a new bulk option to queue domains for sync.
• SVG extension logos — updated extension logos to SVGs where possible for crisper display.
• Mobile settings navigation — updated the mobile settings view to add handlebar access to the nav.
• Example data for extensions — added an interface for example data for plugins and modules.

Beyond these, Beta 3 includes over 30 bug fixes across the platform.

When is the final release?

Version 6.0 will be officially released after the beta phase has completed. Given that 6.0 is a major release, we expect there will be more betas than typical with a minor release. Once we deem 6.0 stable for production, a final release will be issued. You can help speed things along by participating in the beta!

Blesta 5.13.10 Patch Released

We are pleased to announce the release of Blesta 5.13.10, which addresses bugs discovered in the 5.13 branch. A big thanks to everyone who participated in helping to make Blesta better by reporting and confirming bugs on our forums and discord chat, we appreciate your help!

The release notes are available at https://docs.blesta.com/support/releases/5/51310/.

Always run /admin/upgrade in your browser or via CLI after updating the files for your installation. Patch releases may only be applied to the minor release to which it belongs. Only apply this patch if you are running 5.13.0, 5.13.1, 5.13.2, 5.13.3, 5.13.4, 5.13.5, 5.13.6, 5.13.7, 5.13.8, or 5.13.9. If you are running an earlier version, you must download the full release.

Download 5.13.10 Patch Download 5.13.10 Full

SHA256 Sum

4cb8a9d8afee7094060d3c7a51c475b40a74ef1b84d0d3ed20dbb39b01ec9a90

% blesta-5.13.0-5.13.10.zip
0e959359d2b1123fe8b0edc5865b36a00eecff38e93bc1011a78230c9680ce11

To patch your installation, please follow the instructions for Patching an Existing Install from our user manual.

Blesta 6.0 Beta 2 Released

Blesta 6.0.0 BETA 2 has been released! Thanks to everyone who tried Beta 1 and reported issues — this release builds on that feedback with a handful of new additions and a long list of fixes.

Can I participate in the beta?

If you have an owned or monthly license with us directly, you may download blesta-6.0.0-b2.zip in the client area now (Login Required). If you obtained your license from a reseller or distributor, you may be able to participate. Contact your reseller to find out. As with any beta, and especially a major release like this one, this release is for non-production use only and is unsupported. DO NOT UPGRADE YOUR PRODUCTION.

Once you are up and running, head to the beta forums or the Discord beta channel to report any issues and let us know what you think! If you have a license and are verified or become verified on our Discord chat, you’ll have access to the license holder only beta channel.

Visit the Beta Forums! Visit Discord Chat!

Trying the AI features

Blesta 6 introduces optional AI features through Blesta AI, powered by the latest leading models. To try this out during beta, open a ticket from your client account to request a Blesta AI API key. Beta keys are issued manually at our discretion and are temporary: they’ll be revoked once 6.0 is officially released. At that point, you’ll be able to request a new key directly from your account.

What’s new in Beta 2?

The headline additions in this beta:

• Search when adding a service — a new search option on admin Add Service view makes finding the right package fast.
• Embeddable domain search — copy domain search markup to an external website from the order form config.
• Dashboard sidebar control — a new staff option to disable the calendar / quicklinks sidebar on the dashboard.
• Billing > Transactions optimizations — performance improvements for the transactions listing.

Beyond these, Beta 2 includes a long list of fixes across the Support Manager, Order Manager, Domain Manager, Import Manager, multi-company installs, and more — including the removal of the Perfect Money gateway, which is no longer in business.

When is the final release?

Version 6.0 will be officially released after the beta phase has completed. Given that 6.0 is a major release, we expect there will be more betas than typical with a minor release. Once we deem 6.0 stable for production, a final release will be issued. You can help speed things along by participating in the beta!

Security Advisory

Blesta 5.13.9 is a maintenance release made up primarily of routine bug fixes. It also addresses one reported low-severity security issue and includes some additional defense-in-depth hardening. A patch is being released for the 5.13 branch.

The functional fixes cover partial refund status handling, a Support Manager OAuth2 callback issue, a default avatar path regression, the display of the ACH payment option in the order flow, and email blacklist wildcard matching. We give this an overall impact rating of Low. We recommend applying the 5.13.9 patch, or upgrading to version 5.13.9.

More information about how we rate vulnerabilities can be found on our Security Advisories page.

Always back up your files and database prior to upgrading and be sure to run /admin/upgrade in your browser after uploading either a patch or full release. Patch releases may only be applied to the minor release to which it belongs, so download the appropriate patch for your minor version. If you are running a version of Blesta between 3.0 and 5.13, upgrade to 5.13.9.

Downloads

Download 5.13.9 Patch Download 5.13.9 Full

% blesta-5.13.9.zip
d1d9b19608884de7df0dba1760075be6a202b6ee15623f2e5c6f5873b6888a8f

% blesta-5.13.0-5.13.9.zip
67fd91142c43dfc66c52255023fa333f70bca1d6d470b25f616e454ef18ba2e9

To patch your installation, please follow the instructions for Patching an Existing Install from our user manual.

Full Release Notes for 5.13.9

• [CORE-5940] - Partial refunds may get saved with incorrect status
• [CORE-5941] - Security Fix
• [CORE-5942] - Security Fix
• [CORE-5955] - Support Manager: OAuth2 callback partial department edit and deletes priorities/custom field data
• [CORE-5974] - Custom Support Manager default avatar never loads (path validation regression)
• [CORE-5979] - Security Fix
• [CORE-5988] - Order: ACH option appears prior to payment even when disabled in order settings
• [CORE-6009] - Blacklist email wildcards fail to block

Resolution

• If you are running version 5.13.x, apply the 5.13.9 patch above.
• If you are running version 3.0.x through 5.12.x, upgrade to 5.13.9 Full.

Credits

One of these issues was reported by Rungrawin Markboon, Nissana Sirijirakal from SnoopBees in accordance with our Responsible Disclosure Policy. The remaining issues were discovered internally and are largely defense-in-depth measures.