snapshot of https://github.com/espocrm/espocrm.git (master, 2026-09-18; blobs > 131072B omitted)

.github/CONTRIBUTING.md

@@ -0,0 +1,54 @@
+## Issues
+
+#### Guidelines
+
+When reporting a possible bug, provide detail steps so that we will be able
+to reproduce the issue. Steps to reproduce should be clear and unambiguous.
+
+Try not to use phrases like "very big bug", "huge issue", "useless feature", etc. No need to use exclamation marks as well.
+
+#### No support
+
+Note that we don't provide developer help or any kind of support on GitHub.
+For this, please use our [forum](https://forum.espocrm.com).
+
+#### Forum
+
+If you are very new to EspoCRM, it's probable that an issue you ran into is not a bug.
+Consider creating a topic on our [forum](https://forum.espocrm.com/forum/general) instead.
+
+#### Upgrade issues
+
+For upgrade-related issues, create a topic on the forum in the appropriate [section](https://forum.espocrm.com/forum/installation-and-upgrade-help). Upgrade-related issues posted on GitHub are removed.
+
+#### Project's best interest
+
+The issue tracker is for the benefit of the EspoCRM project. The project maintainers are going to handle issues in the project's best interest.
+The maintainers have right to close issues without explanation.
+
+#### Off-topic
+
+As we reference GitHub issues in release notes, we strive to keep them free of off-topic comments.
+
+#### Code-level issues
+
+If an issue is not reproducible by actions made via the UI but only by coding, the reporter is expected to have a clear
+understanding of its cause and to provide an explanation of it — unless the cause is obvious from the context.
+
+Otherwise, it's advisable to post on the forum in the Developer Help section.
+
+## Pull Requests
+
+We are open for contributions that are bug fixes and small improvements. If you would like to contribute something
+that is not a small fix, please reach out to maintainers before submitting your PR
+(by creating a GitHub issue or a forum post).
+
+Before we can merge your pull request, you need to accept our CLA [here](https://github.com/espocrm/cla).
+
+It's desirable that one PR solves one specific problem. Do not include code style changes to PRs
+(unless the main purpose of the PR is a code style fix).
+
+Branches:
+
+* *master* – the develop branch; new features should be pushed to here;
+* *fix* – the upcoming maintenance release; small fixes should be pushed to here.

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,30 @@
+---
+name: Bug report
+about: Create a bug report. Not to be used for help requests or server configuration issues. Only for issues related to open source EspoCRM. Issues related to extensions should not to be posted here.
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce (MANDATORY, DO NOT REMOVE)**
+Explicit steps to reproduce the behavior:
+1. ...
+2. ...
+3. ...
+...
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+If applicable, add screenshots to help explain your problem.
+
+**EspoCRM version**
+Specify the EspoCRM version (or versions) on which the bug occurs.
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/code_mistake.md

@@ -0,0 +1,20 @@
+---
+name: Mistake or typo
+about: Report a typo or mistake in the code.
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Describe the mistake**
+A clear and concise description of the mistake or typo.
+
+**Location**
+Path of the file where the mistake is found. Paste the incorrect line or snippet if helpful.
+
+**Suggested correction**
+How it should be fixed.
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Upgrade issue
+    url: https://forum.espocrm.com/forum/installation-and-upgrade-help
+    about: "If something went wrong with an upgrade."
+  - name: Feature request
+    url: https://forum.espocrm.com/forum/feature-requests
+    about: "Use our forum for feature requests."
+  - name: Forum
+    url: https://forum.espocrm.com/
+    about: "Use our forum for help requests and questions. We don't provide support on GitHub."

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature request for framework
+about: For low-level features. For high-level features, create feature requests on our forum.
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Is your feature request related to a problem? Please describe.**
+A clear and concise description of what the problem is.
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

.github/SECURITY.md

@@ -0,0 +1,15 @@
+# Security Policy
+
+## Reporting a vulnerability
+
+If you believe you have discovered a vulnerability in EspoCRM, please contact us via [this](https://www.espocrm.com/contacts/) or [this](https://www.espocrm.com/support/) forms. Or create a private vulnerability report on GitHub.
+
+What reports we do not accept:
+
+- Executing PHP code by an extension, during extension installation or upgrade process.
+- Exposing contacts through a target list, campaign or mass email features, considering the user has access to these features.
+- SSRF in IMAP/SMTP with TOCTOU.
+
+Submitting multiple unverified reports without a proper proof of concept
+(for example, by simply copy-pasting LLM-generated output) may be considered abuse of the reporting process
+and may result in the reporting account being blocked.

.github/workflows/test-integration-pg.yml

@@ -0,0 +1,64 @@
+name: Test Integration on PostgreSQL
+
+on:
+    schedule:
+        - cron:  '0 11 * * *'
+
+jobs:
+  test:
+    name: Test on PHP ${{ matrix.php-versions }} ${{ matrix.branches }}
+    runs-on: ubuntu-latest
+    env:
+      TEST_DATABASE_HOST: '127.0.0.1'
+      TEST_DATABASE_PLATFORM: 'Postgresql'
+      TEST_DATABASE_CHARSET: 'utf8'
+      TEST_DATABASE_PORT: '8888'
+      TEST_DATABASE_NAME: integration_test
+      TEST_DATABASE_USER: postgres
+      TEST_DATABASE_PASSWORD: password
+    services:
+      postgres:
+        image: postgres:17.9
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: password
+          POSTGRES_DB: integration_test
+        ports:
+          - '8888:5432'
+        options: >-
+            --health-cmd pg_isready
+            --health-interval 10s
+            --health-timeout 5s
+            --health-retries 5
+    strategy:
+      fail-fast: false
+      matrix:
+        php-versions: ['8.4']
+        branches: ['master', 'fix']
+
+    steps:
+    - uses: actions/checkout@v2
+      with:
+        ref: ${{ matrix.branches }}
+
+    - name: Setup Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: '24'
+        cache: 'npm'
+
+    - name: Setup PHP with Composer
+      uses: shivammathur/setup-php@v2
+      with:
+        php-version: ${{ matrix.php-versions }}
+        tools: composer:v2
+        ini-values: memory_limit=1024M
+
+    - name: NPM install
+      run: npm install
+
+    - name: Build
+      run: grunt test
+
+    - name: Integration testing
+      run: vendor/bin/phpunit --testsuite integration-pg

.github/workflows/test-integration.yml

@@ -0,0 +1,64 @@
+name: Test Integration on MySQL
+
+on:
+  schedule:
+    - cron:  '0 10 * * *'
+
+jobs:
+  test:
+    name: Test on PHP ${{ matrix.php-versions }}
+    runs-on: ubuntu-latest
+    env:
+      TEST_DATABASE_HOST: '127.0.0.1'
+      TEST_DATABASE_PORT: '8888'
+      TEST_DATABASE_NAME: integration_test
+      TEST_DATABASE_USER: root
+      TEST_DATABASE_PASSWORD: password
+    services:
+      mysql:
+        image: mysql:8.4
+        env:
+          MYSQL_ALLOW_EMPTY_PASSWORD: false
+          MYSQL_ROOT_PASSWORD: password
+          MYSQL_DATABASE: integration_test
+        ports:
+          - '8888:3306'
+        options: --health-cmd="mysqladmin ping" --health-interval=10s --health-timeout=5s --health-retries=3
+    strategy:
+      fail-fast: false
+      matrix:
+        php-versions: ['8.3', '8.5']
+        branches: ['master']
+
+    steps:
+    - uses: actions/checkout@v2
+      with:
+        ref: ${{ matrix.branches }}
+
+    - name: Setup Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: '24'
+        cache: 'npm'
+
+    - name: Setup PHP with Composer
+      uses: shivammathur/setup-php@v2
+      with:
+        php-version: ${{ matrix.php-versions }}
+        tools: composer:v2
+        ini-values: memory_limit=1024M
+
+    - name: Start MySQL service
+      run: sudo systemctl start mysql
+
+    - name: Create DB table
+      run: mysql -h 127.0.0.1 --port 8888 -u root -ppassword -e 'CREATE DATABASE IF NOT EXISTS integration_test;'
+
+    - name: NPM install
+      run: npm install
+
+    - name: Build
+      run: grunt test
+
+    - name: Integration testing
+      run: vendor/bin/phpunit tests/integration

.github/workflows/test.yml

@@ -0,0 +1,57 @@
+name: Test
+
+on:
+  push:
+    branches:
+      - 'master'
+      - 'fix'
+    paths:
+      - '**.php'
+      - '**.json'
+      - '**.yml'
+      - 'composer.lock'
+      - 'phpstan.neon'
+
+  pull_request:
+    paths:
+      - '**.php'
+      - '**.json'
+      - '**.yml'
+      - 'composer.lock'
+      - 'phpstan.neon'
+      - '.github/workflows/test.yml'
+
+jobs:
+  test:
+    name: Test on PHP ${{ matrix.php-versions }}
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        php-versions: ['8.3', '8.4', '8.5']
+
+    steps:
+    - uses: actions/checkout@v2
+
+    - name: Setup PHP with Composer
+      uses: shivammathur/setup-php@v2
+      with:
+        php-version: ${{ matrix.php-versions }}
+        tools: composer:v2
+        ini-values: memory_limit=1024M
+
+    - name: Cache Vendor
+      id: cache-vendor
+      uses: actions/cache@v4
+      with:
+        path: vendor
+        key: ${{ runner.os }}-vendor-${{ hashFiles('**/composer.lock') }}
+
+    - name: Composer install
+      if: steps.cache-vendor.outputs.cache-hit != 'true'
+      run: composer install
+
+    - name: Static analysis
+      run: vendor/bin/phpstan
+
+    - name: Unit testing
+      run: vendor/bin/phpunit tests/unit

.github/workflows/ts-check.yml

@@ -0,0 +1,40 @@
+name: TypeScript static analysis
+
+on:
+  push:
+    branches:
+      - 'master'
+      - 'fix'
+    paths:
+      - '**.ts'
+      - 'package-lock.json'
+      - 'tsconfig.json'
+      - '.github/workflows/ts-check.yml'
+
+  pull_request:
+    paths:
+      - '**.ts'
+      - 'package-lock.json'
+      - 'tsconfig.json'
+      - '.github/workflows/ts-check.yml'
+
+jobs:
+  typescript-check:
+    name: TypeScript check
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run TypeScript check
+        run: npx tsc --noEmit