New in Tuleap 16.4: Tailor your Tracker notifications! Set preferences to reduce email clutter and stay updated only on essential changes. Plus, utilize “@user” mentions in pull requests and export Cross Tracker Search results to spreadsheets for enhanced collaboration and data handling.
Reduce emails sent by Trackers
Tuleap can be chatty when it comes to Trackers. By default, as soon as you comment on or modify an artifact, you will get email notifications for all changes after that.
Starting 16.4, users can choose to disable this default behavior with two new preferences:

By unchecking the two boxes, you will be notified when someone else modifies an artifact you created or you are assigned to. Of course this works together with the recently added “@user” notification. Even with those two boxes unchecked, you will still receive an email when someone pings you with “@username”.
@user mention in pull requests
Everything is already in the title, the @user usage in Pull Request will trigger an email to the associated user.

Export Cross Tracker Search results to spreadsheet
Cross tracker search “default” mode is sun-setting and will be completely removed in the next release (16.5). We will migrate queries automatically but before doing that there was one feature that was still missing in “expert” mode: spreadsheet export.

Bugs and requests
During the 16.4 release cycle, 30 requests were implemented. Bugs and security fixes were already back-ported on Tuleap Enterprise builds. You will find below a detailed list of fixes. The most notable ones are in bold.
Security
- #41476 Artifact permissions are not verified in the Cross Tracker Search widget – CVE-2025-24029 – Moderate
- #41434 Initial effort field does not respect field permissions in the Taskboard REST card representation – CVE-2025-22129 – Moderate
Trackers
- #41474 Colors associated with select box values are not displayed in the tracker report widgets
- #41465 Expose a `submitter_user_groups` key in the artifact update webhook payload
Git
- #41445 Import Git configuration variables in DB
- #40100 Pull Request comment is empty after scrolling
- #41433 [Git] – Line number not aligned with code
- #41459 Git: 2.46.1 -> 2.48.1
- #41790 Allow to disable anonymous git web browsing
- #41456 Add setting to make Git snapshots accessible only to authenticated users
- #41430 Delete Git repository without shelling out to a system command
Site administration
- #41437 Fatal error on Available Plugins