RPM Search

Changelog for drupal9-9.3.22-2.4.noarch.rpm :

* Mon Dec 05 2022 Carsten Ziepke - Update to 9.3.22 This is a security release of the Drupal 9 series.
* Drupal core - Critical - Multiple vulnerabilities - SA-CORE-2022-016 CVE-2022-39261- Changes in 9.3.21 This is a security release of the Drupal 9 series.
* CVE-2022-31175: Cross-site scripting (XSS) caused by the editor instance destroying process- Changes in 9.3.20 This is a security release of the Drupal 9 series.
* CVE-2022-31109: Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack- Changes in 9.3.19 This is a security release of the Drupal 9 series.
* Drupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012
* Drupal core - Moderately critical - Access Bypass - SA-CORE-2022-013
* Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
* Drupal core - Moderately critical - Multiple vulnerabilities - SA-CORE-2022-015- Changes in 9.3.18
* Issue #3294205: Composer v2.2 prompts to authorize another plugin when stability=dev
* Issue #3255749: Composer v2.2 prompts to authorize plugins- Changes in 9.3.17 This is a security release of the Drupal 9 series.
* CVE-2022-31090: CURLOPT_HTTPAUTH option not cleared on change of origin
* Change in port should be considered a change in origin
* Issue #3291780: guzzlehttp/guzzle 6.5.8 requires guzzlehttp/psr7 ^1.9
* Issue #3285193:Temporarily skip random test failures that hide real test failures, part 4
* Merge 9.3.16, resolve merge conflicts, and update lockfile and dev versions.
* Issue #3247683: Disable CKEditor 5\'s automatic link decorators (in Drupal filters should be used instead)
* Issue #3273983: Do not assume that plugin supporting also supports in SourceEditingRedundantTags and upgrade path
* Issue #3283795: ComposerHooksTest is broken on latest DrupalCI PHP container- Changes in 9.3.16 This is a security release of the Drupal 9 series.
* Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-011- Run spec-cleaner- Fix self-obsoletion rpmlint warning
* Tue Jun 07 2022 Joop Boonen - Update to 9.3.15 Issue #3274648 by nod_, Wim Leers: HTMLRestrictions::merge() and ::toGeneralHtmlSupportConfig() fail on allowed attribute values that can be interpreted as integers Issue #3276217 by lauriii, Wim Leers: [drupalMedia] add tests to confirm GHS attributes are retained in linked media Issue #3280985 by mherchel, andy-blum: Olivero\'s code block styling is slightly broken at various viewport widths Issue #3274651 by Wim Leers, nod_, alexpott: Impossible to enable

, ) should return an empty result Issue #2580263 by Berdir, nils.destoop, catch, Cottser, larowlan: Find a way to not run contextual_preprocess() on every template Issue #3280614 by Spokje: (Not so) Random test failures QuickEditFileTest Issue #3272336 by danflanagan8: File tests should not rely on Classy Issue #3279502 by webflo: Fix invalid AATTproperty annotations Issue #3218562 by bradjones1, yogeshmpawar, Lendude, catch: Fix typo in/rename SearchSimplifyTest Issue #3272543 by danflanagan8, larowlan: History tests should not rely on Classy Issue #3279103 by bradjones1: Test cleanup: Remove dead code from JsonApiFunctionalTest Issue #3278314 by acbramley: InlineBlockUsageInterface::getUsage can return FALSE but isn\'t documented Issue #3270081 by franck_lorancy, quietone, Cottser: Fix indentation in doc block \\Drupal\\Core\\Render\\RendererInterface::render Issue #2314443 by olli, Lendude, immaculatexavier, dawehner: Changing view name does not update page title in views ui Issue #2917239 by Lendude, dww, iStryker: Form is built when not using fields Issue #3276218 by lauriii: Follow-up to #3268318: Enable link manual decorator unrestricted test case Issue #2636086 by Matroskeen, Spokje, jian he, ravi.shankar, quietone, larowlan, Lendude, dawehner, Sweetchuck: Add extra test coverage for operators of views date filters Issue #3252100 by amateescu, catch, Tim Bozeman: Set revision_default when publishing Issue #3269657 by hooroomoo, Wim Leers: [drupalMedia] The CKEditor 4 → 5 upgrade path for the media_embed filter should not forcefully allow the data-view-mode attribute on
* Wed Jan 05 2022 Joop Boonen - Update to 9.3.2 Issue #3247619 by Lendude, danflanagan8, FiNeX, beatrizrodrigues: \"Place a colon after the label\" not working on grouping field label on views Issue #2879293 by digitaldonkey, tobiasb, Mac_Weber, paulocs, Meenakshi_j, stefan.korn, ranjith_kumar_k_u, longwave, alexpott: Make Link URI required if there is Link Text input Issue #3014629 by quietone, Wim Leers, xurizaemon: Document that Configuration migrations can depend on Content migrations Issue #3207907 by quietone, Berdir, alexpott: Ensure functional tests use the test mail collector Issue #3190261 by danflanagan8, doostinharrell, phenaproxima, larowlan, paulocs: MediaLibraryWidget can trigger an AJAX error if all media types can be referenced Issue #3256591 by yassermussa, Chi: Fix Element/Table documentation Issue #2916142 by beatrizrodrigues, Chi, yogeshmpawar, tobiberlin, quietone, borisson_: Decimal and Float item generates wrong sample values Issue #3213928 by RoSk0: LoggerChannelInterface documentation Issue #3256581 by cburschka: PHPdoc in update.authorize.inc Issue #2853183 by quietone, darvanen, slootjes, Munavijayalakshmi, himanshu-dixit, shubham.prakash, gaurav.kapoor, prash_98, alexpott, JohnAlbin: Correct references from Symfony Framework Issue #3175287 by murilohp, quietone, SivaprasadC, ankithashetty, anmolgoyal74, sarvjeetsingh, xjm, longwave: Remove accidentally duplicated words in code comments Issue #3174570 by quietone, anmolgoyal74, skudderk: Fix documentation comment in MainContentViewSubscriber Issue #3249859 by apaderno: The documentation page for NestedArray::unsetValue() shows example code that uses NestedArray::unset_nested_value() Issue #3251835 by beatrizrodrigues, joachim, mikelutz, quietone: Fix incorrect AATTreturn docs and description for Row::getSource() Issue #3131348 by Spokje, jungle, mondrake, vsujeetkumar, sja112, kishor_kolekar, Hardik_Patel_12, mrinalini9, yogeshmpawar, daffie: Replace assertions involving calls to empty() with assertEmpty()/assertNotEmpty()/assertArrayNotHasKey() Issue #3255504 by anagomes, Chi, cilefen: Remove jQuery dependency from date.js Issue #3136388 by dww, jyotimishra-developer, nitesh624: Fix phpdocs in core/lib/Drupal/Core/Database/Install/Tasks.php Issue #2675006 by danflanagan8, robpowell, quietone, alexpott: Write UnitTest for MigrationConfigurationTrait and fix Exception Handling Issue #3212470 by JeroenT, Gauravmahlawat: Placeholder CSS selector in off-canvas.reset.css is wrong Issue #2675006 by danflanagan8, robpowell, quietone: Write UnitTest for MigrationConfigurationTrait and fix Exception Handling Issue #3092430 by quietone, shrutidkadam, RdeBoer, bgprior, danflanagan8: Ensure SearchPlugin has a configuration array Issue #3205909 by kunal.sachdev, tedbow, phenaproxima: Ensure only needed permissions are used for Update module functional tests Issue #2793169 by Matroskeen, Manuel Garcia, anmolgoyal74, Pooja Ganjage, Abhijith S, Lendude, dww, quietone: hook_views_post_render provides inaccurate information Issue #3247039 by joachim, quietone: MigrateDestinationInterface::import() should document that it can throw a MigrateException Issue #3255836 by alexpott, clayfreeman, dww, benjifisher, Spokje: Test fails due to Composer 2.2 Issue #3247269 by Sakthivel M, mherchel: Olivero: Alignment of primary menu hover states and dropdowns is incorrect at wide widths Issue #3064890 by danflanagan8, mpp, mottihoresh, scott_euser, peonboyos, Kristen Pol, joshmiller: Notice: Undefined index: name in Drupal ield_uiement\\FieldUiTable::reduceOrder() (line 228 of /var/www/html/docroot/core/modules/field_ui/src/Element/FieldUiTable.php) Issue #3245383 by Beakerboy, daffie: If the database driver is provided by a module, it\'s name must be included in tests which check for enabled modules Issue #3251125 by Beakerboy, daffie, mondrake: Do not uninstall the database driver module within installer tests Issue #3248309 by danflanagan8: AssertBreadcrumbTrait should not rely on Classy Issue #3080819 by beatrizrodrigues, ankithashetty, lucienchalom, quietone, Vivek Panicker, catch: Missing documentation for \"core_version_requirements\" key in InfoParserInterface file Issue #3254403 by paulmckibben, ranjith_kumar_k_u, longwave, Lendude, cilefen: system_post_update_sort_all_config can exhaust PHP memory in 9.3.0 Issue #3253889 by BR0kEN, murilohp, longwave: `?check_logged_in=1` causes `TrustedRedirectResponse` to fail Issue #3246156 by realityloop, rachel_norfolk: Add Brian Gilbert (realityloop) as a full mentoring coordinator Issue #3246158 by rachel_norfolk, volkswagenchick: Add AmyJune Hineline (volkswagenchick) as a full mentoring coordinator Issue #3246157 by ChrisDarke, rachel_norfolk: Add Chris Darke (ChrisDarke) as a full mentoring coordinator Issue #3253568 by Spokje, paul121, rviner, longwave, alexpott, quietone: Error: Cannot use object of type Drupal\\Core\\Render\\Markup as array in Drupal\\Core\\Render\\Renderer->doRender() (line 218. When checkbox \'Use field template\' is checked Issue #3239287 by alexpott, longwave: Fix \\Drupal\\Coretension\\ModuleDependencyMessageTrait to not cause deprecations in PHP 8.1 Issue #3253683 by andypost, Spokje, Gábor Hojtsy: Improve compatibility with composer 2.2 Issue #3250648 by Beakerboy, daffie: Avoid comparing fields with different collations in SelectSubqueryTest Issue #3252067 by tedbow, Spokje: Remove duplicate loading of update reports after refreshUpdateStatus Issue #3253824 by juli sh, Matroskeen: Minor typo in d7_field_formatter_settings.yml comment
* Mon Dec 27 2021 Joop Boonen - Upgrade to drupal 9.3.0 as 8 isn\'t supported any more
* Wed Nov 24 2021 ecsos - Update to 8.9.20 Maintenance and security release of the Drupal 9 series. This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement: Drupal core - Critical - Third-party library - SA-CORE-2021-011 For more information, see CKEditor\'s security advisories: - CVE-2021-41165: HTML comments vulnerability allowing to execute JavaScript code - CVE-2021-41164: Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
* Mon Sep 20 2021 ecsos - Update to 8.9.19 Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Moderately critical - Cross Site Request Forgery - SA-CORE-2021-006 Drupal core - Moderately critical - Cross Site Request Forgery - SA-CORE-2021-007 Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-008 Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-009 Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-010- Changes from 8.9.18 Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Critical - Third-party library - SA-CORE-2021-005
* Fri Jul 23 2021 ecsos - Update to 8.9.17 Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Critical - Third-party library - SA-CORE-2021-004
* Thu May 27 2021 ecsos - Update to 8.9.16 Maintenance and security release of the Drupal 8 series. This release fixes a security vulnerability. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2021-003- Changes from 8.9.15 This is a patch (bugfix) release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8. [#3209456] by kpa, piggito, mherchel: Update Underscore.js to the latest version (1.13.1) [#3211810] by alexpott, xjm, Spokje, Amber Himes Matz, Kristen Pol, lauriii: [security] Update Nightwatch and locked dev dependencies to address security issues [#3212177] by alexpott, lauriii: Update caniuse-lite as it is outdated [#3211805] by xjm, Kristen Pol, longwave: Update composer/composer dev dependency in metapackages to 2.0.13 Revert \"Issue #3211164 by alexpott: Random errors in Javascript Testing\" [#3211164] by alexpott: Random errors in Javascript Testing [#3128389] by clayfreeman, jungle, cliddell, john.oltman, acbramley, larowlan: [backport] LocaleTranslation is not serializable [#2571475] by mglaman, tstoeckler, tedbow, eiriksm, Jaesin, phenaproxima, alexpott: Outbound HTTP requests fail with KernelTestBase Back to dev. Merged 8.9.14. [#2958588] by cainaru, lauriii, DamienMcKenna, clayfreeman, longwave, galactus86, bkosborne, pawandubey, doublealpha, Blackstallion, alexpott, tim.plunkett, kpaxman, justcaldwell, mark_fullmer: Off-canvas style resets are overriding styles (especially SVGs) resulting in display issues [#3120301] by alexpott, zestagio, Wim Leers: RoutePreloader: prevent preloading of routes generated by JSON:API [#3207086] by benjifisher, larowlan, mondrake, Spokje: [HEAD BROKEN] Consistent failure in MonthDatePluginTest [#3202440] by jonathanshaw, ravi.shankar, catch, longwave: [backport] EntityQuery accessCheck: field ui cardinality validation should not be access sensitive [#3206540] by yechaozheng, longwave: Set access check to FALSE for entityQuery of user in user_is_blocked function [#3183301] by mcdruid, longwave, markwittens, nathandentzau, marcaddeo, janusman, -nrzr-, David_Rothstein, Heine, vijaycs85, xjm, tim.plunkett, pandaski, Wim Leers, larowlan: Add tests for SA-CORE-2020-009 [#3201393] by Lendude, dww, imalabya, dawehner, anmolgoyal74, Abhijith S: Filter glossary view by status [#3169212] by int_ua, Matroskeen, anmolgoyal74, Krzysztof Domański, alexpott, biblos, init90, xjm: Improve transliteration of Ukrainian letters [#3184650] by geek-merlin, quietone, benjifisher, alexpott: ContentEntity migration source adds revision ID as source key, incompatible with Drupal 8.8 and earlier [#3201470] by jonathanshaw, catch, longwave: EntityQuery accessCheck: Cron functions should never check access [#3192260] by danflanagan8, longwave, jhodgdon, dww: [random test failure] Random fail in media_library CKEditorIntegrationTest [#3199205] by xjm, mcdruid: Update Archive_Tar to 1.4.13 [#2857444] by nedjo, alexpott, jofitz, gaurav.kapoor, Wim Leers: Editor module fails to track usage of files embedded in non-core fields [#2969107] by raman.b, alexpott, matiasmiranda, L-four, kkalashnikov, catch, daffie, Lendude, xjm: 500 error on passing invalid month to MonthDate view argument handler Revert \"Issue #2969107 by raman.b, matiasmiranda, kkalashnikov, L-four, daffie, Lendude: 500 error on passing invalid month to MonthDate view argument handler\" [#2969107] by raman.b, matiasmiranda, kkalashnikov, L-four, daffie, Lendude: 500 error on passing invalid month to MonthDate view argument handler [#3192231] by larowlan, xjm, catch, Mixologic, kim.pepper: UnroutedUrlTest is failing on dev versions of PHP [#3054510] by greggles, Spokje, bas123, fchandler, effulgentsia, Wim Leers, mr.baileys, patchman-jelmerverkleij: Make a minor docs improvement to NormalizerBase.php in order for Patchman to see it as a newer version than it was prior to SA-CORE-2019-003 Merge 8.9.13, resolve merge conflicts, and update lockfile and dev versions.
* Fri Apr 23 2021 ecsos - Update to 8.9.14 Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Critical - Cross-site scripting - SA-CORE-2021-002
* Thu Jan 21 2021 Joop Boonen - Update to 8.9.13 - Drupal core - Critical - Third-party library - SA-CORE-2021-001
* Sat Jan 16 2021 Arjen de Korte - BuildRequires php-cli
* Thu Jan 07 2021 Joop Boonen - Update to 8.9.12 - All changes since Drupal 8.9.11 Issue #3189547 by lauriii, bnjmnm: Custom Commands indent: command not found on patches with nightwatch changes Issue #3181644 by alexpott, andypost, longwave, chr.fritsch: PCRE library version 10.35 with pcre.jit=1 makes \\Drupal\\Core\\StringTranslation\\Translator\\FileTranslation::getTranslationFilesPattern() regex misbehave Issue #3145076 by johnwebdev, alexpott, Sam152: [backport] MapItem base fields cannot be uninstalled Issue #3178845 by alexpott, Spokje, xjm, lauriii, Mixologic: [backport] Run same checks as committers do on DrupalCI Issue #3189101 by paulocs, ranjith_kumar_k_u: Update documented links from form.api.php Issue #3133386 by jyotimishra123, fgm: Incorrect error text in EntityViewBuilder constructor Issue #3188816 by mariodan, jhodgdon: Main page for api.drupal.org links in Further Information are broken Issue #3036494 by Berdir, alexpott, rgpublic, cilefen, kerasai, regilero: Race condition in ImageStyle::createDerivative() Issue #3162603 by paulocs, daffie, mxr576, vadim.jin, sandeep_jangra, naresh_bavaskar, longwave, amateescu, drunken monkey, larowlan: EntityStorageBase::loadByProperties() is broken on PostgreSQL when using two or more case insensitive properties Issue #2644468 by mondrake, DuaelFr, sanket_markan, swentel, alexpott, Lukas von Blarer, segovia94, Suresh Prabhu Parkala, shobhit_juyal, larowlan, rensingh99, Abhijith S, Haza, fietserwin, Berdir, catch, andypost: Multiple image upload breaks image dimensions Revert \"Issue #3181272 by jungle, longwave, Balu Ertl, larowlan: Fix typo in FileStorage error message\" Issue #3178066 by pameeela, TylerMarshall: Missing word in the documentation for ThirdPartySettingsInterface Issue #2916376 by rlmumford, Sweetchuck, tim.plunkett: The AATTContextDefinition annotation always kills the label and the description Issue #3181272 by jungle, longwave, Balu Ertl, larowlan: Fix typo in FileStorage error message Issue #3181870 by Matroskeen, longwave: Correct typo \"the the\" in \"core/classList\" deprecation message\" Issue #3180167 by valthebald: Remove valthebald from the Core mentoring coordinators
* Sat Dec 12 2020 ecsos - Use apache-rpm-macros.- Insert Supplements: packageand(webserver:%name) to webserver sections.- Put fpm configuration files in separat subpackages.- Change vhosts.d/conf.d only to vhosts.d.
* Sun Dec 06 2020 ecsos - Update to 8.9.11 This is a patch (bugfix) release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8. - Issue #3138795 by quietone, sja112, jungle, longwave: d6_term_node_revision references non-existent migration - Merge 8.9.10, resolve merge conflicts, and update lockfile. - Issue #3136406 by Spokje, codersukanta, IJsbrandy, atul4drupal, MahtabAlam, BalajiDS: Argument 1 passed to Drupal\\Core\\Form\\SubformState::createForSubform() must be of the type array, null given - Back to dev. - Merged 8.9.9. - Issue #3118591 by alexpott, xjm, chesnut: Datetime-related test failures on PostgreSQL 12 - Issue #268909 by maartenvg, raman.b, paulocs, lyricnz, Abhijith S, webchick, Freso, chx, pameeela: \"0\" can\'t be used a path alias, but no error is shown - Issue #2851504 by alexpott, vomiand, Vj, BalajiDS, cilefen, tamasd: \"Illegal choice 0 in Book element\" when switching the book outline field from anything to \"- None - \" - Issue #2223967 by AdamPS, jofitz, LKS90, sja112, shaktik, pminf, Berdir, mxr576, bmcclure, Manuel Garcia, naveenvalecha, Gogowitsch, andypost, alexpott, jonathanshaw, claudiu.cristea, catch, greggles: Do not decode a contact message twice - Issue #3179875 by greg.1.anderson, longwave, catch, Mixologic: Path repositories need to be listed first for Composer 2 - Issue #3181173 by longwave, pefferen, JD_1, larowlan: Drupal 8.9.7 breaks Book Settings Form Validation - Issue #3156651 by alexpott, dww, pfrenssen, Kristen Pol, xjm, andypost, Gábor Hojtsy, bradjones1: Prevent Drupal 8.9 and 9.0 from being installed on PHP 8 - Back to dev.
* Sun Nov 29 2020 ecsos - Update to 8.9.10 Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Critical - Third-party library - SA-CORE-2020-013 (CVE-2020-28948, CVE-2020-28949)- Changes from 8.9.9 Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Critical - Remote code execution - SA-CORE-2020-012 (CVE-2020-13671)- Changes from 8.9.8 [#3014969] by TR, longwave, Abhijith S, joachim, shimpy: Unescaped \"AATT\" in ContextProviderInterface doc comment [#3179318] by dww: Always use HTTPS for fetching translations [#3132426] by alexpott, dww, GuyPaddock, catch, VladimirAus: Notice: Undefined index: title in Drupal\\update\\ProjectSecurityRequirement [#3173004] by beram: Incorrect typehint documentation for FieldItemInterface::view() and FieldItemListInterface::view(): $display_options could also be a string [#2716115] by LittleCoding, gapple, gnuget, jungle, alexpott, mrinalini9, tatarbj, erlendoos, sandeep_jangra, ksemihin, markcarver, NickDickinsonWilde, catch, cayriawill, geek-merlin: [backport] Allow attributes passed with CSS in libraries (SRI) [#3178039] by anmolgoyal74, Matroskeen, xjm, Kristen Pol, alvar0hurtad0: Correct typo \"is has\" in a few code comments and tests in core [#2937844] by andypost, ravi.shankar, Spokje, mrinalini9, Deepak Goyal, RoSk0, daffie, borisson_, xjm, tstoeckler: [8.9/9.0 backport] Fix \'Squiz.PHP.NonExecutableCode\' coding standard [#3040274] by sarvjeetsingh, ayushmishra206, rishabhthakur, alexpott, theotherlondon, kkalaskar, longwave, kiamlaluno, amarphule, ravi.shankar, gringoinc, quietone, larowlan, davidhernandez, tim.plunkett: [backport] Fix grammar, spelling, and style of the code comments in FormBuilder::prepareForm() [#3178273] by longwave: BasicAuthTestTrait::basicAuthPostForm() does not work [#3177765] by klausi: ListInterface::first() return value is documented wrong [#3157963] by shailja179, ravi.shankar, kiamlaluno, davidhernandez, joachim: The link given in FormState::setRedirect() for the page explaining what values are available for $options param takes to a class documentation page [#3177477] by Gábor Hojtsy, pameeela, Dries: Promote pameeela to non-provisional committer facilitator [#3176036] by paulocs, raman.b, longwave: Replace \"does\" to \"do\" in ProfileFieldCheckRequirementsTest.php [#3174190] by anmolgoyal74: Repetive \'using\' word in DbImportCommand.php [#3040181] by paulocs, quietone, snehalgaikwad, ravi.shankar, acbramley, alexpott, mindbet, ultrabob, bthompson1, Lendude, lapaev, pameeela, catch: Unpublished books appear in the list of books at /book [#3175395] by NitinLama: Remove unused #html property from DateTimeFormatterBase::buildDateWithIsoAttribute [#3175112] follow-up by andypost, TR: hold_test module creates files in incorrect place leading to possible random errors [#3175112] by alexpott, longwave: hold_test module creates files in incorrect place leading to possible random errors
* Thu Oct 08 2020 Joop Boonen - Update to 8.9.7 - All changes since Drupal 8.9.6 Issue #3168301 by chr.fritsch, phenaproxima: oEmbed validator should use the urlResolver to get the resource URL Issue #3174569 by paulocs: Fix English mistake in Connection.php Issue #2904546 by mrweiner, vsujeetkumar, quietone, dev.patrick, MaskOta, msuthars, alexpott, sarvjeetsingh, abhisekmazumdar, vacho, heddn: admin/reports/upgrade redirect doesn\'t handle view arguments when enabled Issue #3110064 by idebr, chandrashekhar_srijan, Vidushi Mehta, ckng, benjifisher, mikelutz: Migrate empty, and link field Issue #3173873 by shetpooja04: Unused variable $pos in SearchQuery.php, search module Issue #3156949 by ytsurk, Berdir: Filename is not shown in the maximum allowed file size error message (w/o using the file_validate_size upload validator) Issue #2614720 by quietone, roderik, Dylan Donkersgoed, ofry, Deepak Goyal, samiullah, jonathanshaw, catch, benjifisher, larowlan, Ruedische, Rewted, KlemenDEV, abramm, dmytro-aragorn, ao2, HiMyNameIsSeb, dionsj, mgp_novicell, xjm, vadim.hirbu, scalas89, hchonov, mayurjadhav, nplowman, rollins, paranojik: Fatal errors while loading/building orphaned comments Issue #3173976 by shetpooja04: Remove unused variable $file_path in ConfigTest.php, system module Issue #3173437 by anmolgoyal74: Repeative \'or\' word in FieldOptionTranslation.php Issue #3173435 by anmolgoyal74: Repeated \'not\' word in PharExtensionInterceptor.php Issue #3119254 by quietone, shaktik, douggreen, larowlan: [backport] Add taxonomy_term_reference_plain and taxonomy_term_reference_rss_category to TaxonomyTermReference Issue #2586013 by g-brodiei, pameeela, ayushmishra206, Vidushi Mehta, willzyx, LoMo, larowlan, longwave, Lendude, catch: [backport] node_views_analyze() is never executed because it is in the wrong inc file Issue #2949400 by ayushmishra206, chandrashekhar_srijan, bandanasharma, marvil07, AkashkumarOSL, quietone, mikelutz: MigrateProcessInterface documents ProcessPluginBase behaviour Issue #2821352 by chr.fritsch, jian he, Pancho, RaphaelBriskie, jonathanshaw, alexpott, amateescu, larowlan: EntityReferenceAutocompleteWidget::getAutocreateBundle() unnecessarily requires the \'target_bundles\' setting Revert \"Issue #3143721 by quietone, raman.b, mikelutz: Create a separate SourceProviderTest\" Issue #3158262 by S_Bhandari: Remove Unused variable from Path Alias module Issue #3143721 by quietone, raman.b, mikelutz: Create a separate SourceProviderTest Issue #3171510 by quietone: Add documentation for default_bundle to destination\\Entity Issue #3173037 by bnjmnm: Prettier not run on Ckeditors imagecaption\'s plugin.es6.js Issue #3156878 by alexpott, andypost: \\Drupal\\Component\\Datetime\\DateTimePlus should pass correct parameter types to checkdate() Issue #3171743 by chr.fritsch, paulocs, Berdir, phenaproxima: Not possible to overwrite the upload forms for media library Issue #2132773 by g-brodiei, killesAATTwww.drop.org, DevJoJodae, jonathanshaw, dawehner: Don\'t add term_access tag if SQL rewriting off Issue #3171366 by bnjmnm: Comments from variables.pcss.css create nonuseful noise in compiled css Issue #3165763 by quietone, mikelutz: Combine two tests to one in d7 MigrateFieldTest and MigrateFieldInstance Issue #3051932 by pameeela, larowlan, aurelianzaha: Update docs link to EntityStorageInterface::delete() in core/includes/entity.inc Issue #2678510 by larowlan, quietone, ankithashetty, samiullah, alexpott: Remove AATTtodos from migrate credentials form Issue #3166360 by lauriii: Disable csslint testing in core by xjm: More coding standards fixes. SA-CORE-2020-011 followup by xjm: Clean up coding standards in test. Back to dev. Merged 8.9.6. Issue #3170648 by hussainweb: CKEditorPluginManager::getEnabledButtons throws warnings on PHP 8.0.0 beta3 Issue #2969551 by quietone, mikelutz, joachim, benjifisher, catch: Migrate messages from caught exceptions need file and line details Issue #3159101 by Wim Leers: SQLBase::mapjoinable still does not support SQLite Issue #315176 by Dave Reid, andypost, franz, sun, Alan D.: Clean-up remains of $form[\'array_filter\'] hack with array_filter in book module Issue #3110839 by quietone, jungle: Use of \\Drupal\\Core\\Database\\Install\\Tasks::getFormOptions() in \\Drupal\\migrate_drupal_ui\\Form\\CredentialForm::buildForm() results in confusing description for prefix form element Issue #2822334 by jungle, mbovan, longwave, Kristen Pol, quietone, catch: Unicode::mimeHeaderDecode() doesn\'t support lowercased encoding Issue #3101045 by quietone, mikelutz, Stefan Kangas, NiklasBr: LanguageContentSettingsTaxonomyVocabulary source plugin should only add language column if it exists Issue #3071760 by phenaproxima, vijaycs85, catch, nils.destoop, larowlan, longwave, alexpott: oEmbed system does not remove query strings from local thumbnail filenames Issue #3124302 by Sam152, acbramley, seanB: The media library should perform access checks against the revision of the entity being edited Issue #3122002 by clayfreeman, lauriii, alexpott: Remove dependency to localize.drupal.org on Nightwatch tests Issue #3159849 by quietone, mikelutz: Add missing tests of filepath to FileTest
* Thu Sep 17 2020 Joop Boonen - Update to 8.9.6 - All changes since Drupal 8.9.5 Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2020-007 Drupal core - Moderately critical - Access bypass - SA-CORE-2020-008 Drupal core - Critical - Cross-site scripting - SA-CORE-2020-009 Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2020-010 Drupal core - Moderately critical - Information disclosure - SA-CORE-2020-011
* Fri Sep 04 2020 Joop Boonen - Update to 8.9.5 - All changes since Drupal 8.9.4 Issue #3168763 by xjm, suzymasri, longwave: Update Symfony to 4.4.13 to address CVE-2020-15094 Revert \"Issue #3070375 by lauriii, jungle, larowlan, sacarney: [backport] Hidden buttons in off-canvas dialog are not being hidden\"
* Thu Sep 03 2020 Joop Boonen - Update to 8.9.4 - All changes since Drupal 8.9.3 [#3167036] by gapple, anu.a_zyxware, thalles, larowlan: Empty
*.libraries.yml file can cause fatal error [#3101738] by Lendude, jannakha, alexpott, daffie, catch, bkosborne, Berdir: Exposed term filters should not show term options that the user does not have access to [#1929420] by quietone, krlucas, kay_v, seiplax, floydm, alexpott, mlncn, nlisgo, gulab.bisht, scor, larowlan, longwave, pameeela: [backport] $account->getDisplayName() should be used when outputing username in RDF module [#3005641] by ridhimaabrol24, matsbla, tanubansal, jungle, msankhala, dww, quietone, hchonov: Exception is thrown on changing \"Site language\" setting of a user if user account is translated Revert \"Issue #3101738 by Lendude, jannakha, alexpott, daffie, bkosborne, Berdir: Exposed term filters should not show term options that the user does not have access to\" [#3101738] by Lendude, jannakha, alexpott, daffie, bkosborne, Berdir: Exposed term filters should not show term options that the user does not have access to [#3167390] by mbovan, Berdir: ExceptionLoggingSubscriber should not log backtrace string on access denied exceptions [#2978320] by quietone, Ivan616, larowlan, daffie: [backport] rdf comment storage load should not load NULL comments [#3035732] by Lendude, nod_, jungle, Vidushi Mehta, Kristen Pol, larowlan: [backport] Views UI tags do not use autocomplete suggestions [#3070375] by lauriii, jungle, larowlan, sacarney: [backport] Hidden buttons in off-canvas dialog are not being hidden Revert \"Issue #2614720 by quietone, roderik, Dylan Donkersgoed, ofry, Deepak Goyal, samiullah, jonathanshaw, benjifisher, catch, larowlan, Ruedische, Rewted, KlemenDEV, ao2, abramm, vadim.hirbu, HiMyNameIsSeb, dionsj, xjm, mgp_novicell, scalas89, rollins, dmytro-aragorn, hchonov, mayurjadhav, paranojik, nplowman: Fatal errors while loading/building orphaned comments\" [#2614720] by quietone, roderik, Dylan Donkersgoed, ofry, Deepak Goyal, samiullah, jonathanshaw, benjifisher, catch, larowlan, Ruedische, Rewted, KlemenDEV, ao2, abramm, vadim.hirbu, HiMyNameIsSeb, dionsj, xjm, mgp_novicell, scalas89, rollins, dmytro-aragorn, hchonov, mayurjadhav, paranojik, nplowman: Fatal errors while loading/building orphaned comments [#3167196] by sarvjeetsingh, davidhernandez, Chi: Fix DrupalCoreRenderElementEmail documentation Revert \"Issue #2614720 by quietone, roderik, ofry, Dylan Donkersgoed, Deepak Goyal, samiullah, jonathanshaw, benjifisher, larowlan, Rewted, Ruedische, KlemenDEV, ao2, abramm, vadim.hirbu, HiMyNameIsSeb, dionsj, mgp_novicell, scalas89, rollins, dmytro-aragorn, hchonov, mayurjadhav, paranojik, nplowman: Fatal errors while loading/building orphaned comments\" [#2614720] by quietone, roderik, ofry, Dylan Donkersgoed, Deepak Goyal, samiullah, jonathanshaw, benjifisher, larowlan, Rewted, Ruedische, KlemenDEV, ao2, abramm, vadim.hirbu, HiMyNameIsSeb, dionsj, mgp_novicell, scalas89, rollins, dmytro-aragorn, hchonov, mayurjadhav, paranojik, nplowman: Fatal errors while loading/building orphaned comments [#3122113] by Suresh Prabhu Parkala, rpayanm, bbrala, ilgnerfagundes, gabesullice, catch, alexpott, xjm: Convert all PHPDoc links targeting JSON:API contrib issues to target Drupal core issues [#3164678] by jonathan_hunt, longwave: Reference to RFC5424 severity levels is incorrect [#3166645] by kiamlaluno: The document comment for Image::scaleDimensions() contains a reference to a function that isn\'t implemented in Drupal 8 and 9 [#3127466] by komalkolekar, bnjmnm, kishor_kolekar, sd9121, lauriii, DeepaliJ, DyanneNova, kiran.kadam911, andrewmacpherson, rainbreaw, kostyashupenko: Required fields are not identifiable on Internet Explorer 11 high contrast [#3112433] by AndyF, Baysaa, catch, Sam152, SpadXIII: Content moderation state filter incorrectly groups content type condition [#3025372] by gabesullice, cantrellnm, aleevas, ravi.shankar, bander2, blainelang, Wim Leers: [regression] Impossible to filter for resources with an empty relationship object in JSON:API 2.x Revert \"Issue #3112433 by AndyF, Baysaa, Sam152, SpadXIII: Content moderation state filter incorrectly groups content type condition\" [#3112433] by AndyF, Baysaa, Sam152, SpadXIII: Content moderation state filter incorrectly groups content type condition [#3116841] by quietone, swatichouhan012, dww, larowlan, mikelutz: Correct latest revision for node 1 in drupal6 test fixture [#3160267] by nijolawrence, alexpott, jungle, daffie: Change static queries to dynamic queries in core/modules/{every module}/tests [#3130685] by manarth: Correct PHP CodeSniffer coding-standards violation in autoload.php [#3151101] by Deepak Goyal, dww, ravi.shankar, shetpooja04, alexpott, quietone: [backport] Replace use of whitelist/blacklist in Filter module [#3163687] by shetpooja04, snehalgaikwad, longwave: Unused variable $id in field module, BulkDeleteTest.php [#3163703] by eiriksm, longwave: Typo in DeprecatedServicePropertyTrait
* Tue Aug 11 2020 Joop Boonen - Update to 8.9.3 - All changes since Drupal 8.9.2 Issue #3136762 by dww, codersukanta, webchick, larowlan: Update.php includes link to \'Put site into maintenance mode\' for users without permission to use it Issue #3163162 by quietone: Fix error in d7 fixture field_config_instance table Issue #3151096 by dww, jungle: Replace use of whitelist in \\Drupal\\Core\\Utility\\ProjectInfo Issue #3151098 by rik-dev, dww: Replace use of whitelist/blacklist in Big Pipe module Issue #3160031 by quietone, alexpott, jungle, longwave, jameszhang023: Fix 18 spelling errors for migrate specific terms Issue #3074595 by Lendude, ravi.shankar, sime, jian he, Kristen Pol, longwave: var_export only returns if the second parameter set to TRUE Issue #3156879 by alexpott, Krzysztof Domański: \\Drupal\\Component\\Utility\\Bytes::toInt() - ensure $size is a number type Issue #2875807 by idebr, Hardik_Patel_12, Kristen Pol, larowlan: [backport] Drupal::l() / Link::fromTextAndUrl $text documented as string, actually accepts string|array|\\Drupal\\Component\\Render\\MarkupInterface Issue #3139414 by cburschka, mohrerao, pavnish, jungle, ravi.shankar, mondrake, daffie, sja112: [backport] Replace usages of deprecated AssertLegacyTrait::assert(No)Link() Issue #3155110 by maacl, Mykola Veryha: Update CKEditor to version 4.14.1 Issue #3089495 by andrewmacpherson, Kristen Pol: BooleanCheckboxWidget settings summary is not fully translatable Issue #3162479 by tedbow, Kristen Pol: Incorrect Drupal\\Composer\\VendorHardening namespace is used instead of Drupal\\Composer\\Plugin\\VendorHardening Issue #3142749 by munish.kumar, shaktik, pavnish, sja112, ravi.shankar, Lal_, mondrake, daffie, xjm: AssertLegacyTrait::assertPattern() calls in functional tests still have a message passed in Issue #3138766 by mohrerao, longwave, sja112, jameszhang023, Lal_, ravi.shankar, jungle, xjm: Fix \"Don\'t\" relevant typos in core Issue #3092551 by amateescu, poojakural, pankaj.singh, priyanka.sahni, shaal, nod_, lauriii: Unclickable area to switch to a workspace Issue #3153264 by siddhant.bhosale, Hardik_Patel_12, longwave: Remove uses of t() in clickViewsOperationLink(), helperButtonHasLabel() and optionExists() calls Issue #3161301 by jungle, bbrala, alexpott: Fix typo \"existant\" in Core Issue #3158270 by Hardik_Patel_12, siddhant.bhosale, paulocs: Unused local variables in SelectComplexTest file Issue #3158589 by bhushan.nagaonkar, brittany.huntzberry, ankithashetty, cilefen, alexpott, davidhernandez, nijolawrence: Improve comment in default.settings.php Issue #3156040 by Hardik_Patel_12, kiamlaluno, siddhant.bhosale, paulocs: Avoid initializing a local variable to an empty array before adding items to that array Issue #2994319 by Ramya Balasubramanian, mohrerao, virajrajankar, benjamindamron, hardikpandya, kalyansamanta, jhodgdon, msankhala, jungle, kkalaskar, dhirendra.mishra, joachim, longwave, amateescu, mradcliffe, alexpott, jcnventura: EntityAutocomplete form element has no docs on how to use it Issue #3161199 by lauriii, bnjmnm: Remove $no_operator = TRUE from Views BooleanOperator Issue #3123120 by mondrake, mrinalini9, ridhimaabrol24, longwave, catch: [backport] Properly deprecate AssertLegacyTrait::pass Issue #3161300 by jungle, TR, Hardik_Patel_12, Chris Burge, longwave, Kristen Pol: Improve test coverage of \\Drupal\\Tests\\layout_builder\\Unit\\SectionTest::testUnsetThirdPartySetting() Issue #3158276 by Hardik_Patel_12, kiamlaluno, paulocs: Remove local unused variables from RequestFormatRouteFilterTest.php file Issue #3159982 by nuklive, ultrabob, J2, billywardrop, antojose, daffie, mradcliffe, mcdruid, jungle: AS keyword should be capitalised in SQL queries Issue #3158281 by paulocs, kiamlaluno, Hardik_Patel_12, greg.1.anderson: Unused local variables from ScaffoldTest.php file Issue #2348203 by agentrickard, govind.maloo, mohit_aghera, dagmar, init90, Berdir, alexpott, chx, catch, xjm: hook_node_access() no longer fires for the \'create\' operation Issue #3156345 by jungle, S_Bhandari, Hardik_Patel_12, kiamlaluno, alexpott: Remove Unused variable $method_definitions from PathProcessorTest.php file Issue #3117396 by penyaskito, Berdir: Pathauto requirements confusing message when running -dev Issue #3159739 by jungle, Beakerboy, daffie: Avoid directly comparing string to blob in EntityDisplayTest Issue #3160020 by jungle, ravi.shankar, alexpott, ultrabob: Fix typos \"iids, twoa, twob, roota, rootb, parentc\" by refactoring Issue #3122051 by phenaproxima, andrewmacpherson, Kristen Pol: Name field is always shown on media library form display when adding a new remote video media type Issue #3016038 by dpi, acbramley, jibran, dww, phenaproxima, jungle, Mingsong: Unrecognised entity operation passed to Menu Link Content throws exceptions Issue #3159730 by alexpott, greg.1.anderson: Update composer/installers in root composer.json and lock so we can use Composer 2 Issue #3160124 by jungle, jameszhang023, alexpott: Fix \"wiget, escapeable, PHPunit\" typos in Core Issue #3155796 by Hardik_Patel_12, kiamlaluno: Remove Unused variable $node_storage from NodeRevisionsUiBypassAccessTest.php file Issue #3155462 by andrewmacpherson: Remove landmark region role from Powered-by-Drupal block Issue #3160169 by jameszhang023: Unused variable $a in \\Drupal axonomy\\Plugin\\Validation\\Constraint\\TaxonomyTermHierarchyConstraintValidator::validate() Issue #2728507 by Lendude, Kristen Pol, pameeela: Not selecting an entity type on Config import single leads to a fatal error Issue #3157919 by ultrabob, Hardik_Patel_12, shaktik, nijolawrence, alexpott, lauriii, Berdir, kiamlaluno: Remove unused variable $node from link module Issue #3156070 by Hardik_Patel_12, kiamlaluno: Unused local variables from ConfigSchemaTest file Issue #3085751 by alexpott, Deepak Goyal, rpayanm, longwave, catch, volkerk, kristiaanvandeneynde, dww: [backport] Setter injection arguments are not checked for unmet dependencies Issue #3159528 by jameszhang023, jungle, longwave: Fix typos: \"exeption|gaurd|ouptut|withut|defintion\" in core Issue #3159531 by jameszhang023, ipumpkin, jungle, longwave: Fix typos: \"attibute|uneccesarilly|colletion|constucts|worklow\" in core Issue #3089745 by aleevas, larowlan, dipakmdhrm, pameeela, seycom, joey-santiago, xjm, seanB, rooby: Add focus behaviour for media widget with max elements Issue #3091309 by tim.plunkett, godotislate, paulocs, thursday_bw, alexpott, TwiiK: Broken context-aware block plugins throw an unexpected exception Issue #3138749 by jackniu, dww, jungle: Fix \"cache\" related typos Issue #3155563 by mcdruid, mrinalini9, Hardik_Patel_12, mondrake, daffie: select query should quote aliases which are reserved words in MySQL Issue #3039991 by amateescu, lpeabody, bgreco, plach: Base field purging is not handling translatable fields correctly Issue #3153869 by jungle, xjm, NickDickinsonWilde, longwave: [backport] Remove leftover of wikimedia/composer-merge-plugin Issue #2912244 by quietone, heddn, FMB: Document MigrateIdMapInterface Issue #3159382 by Beakerboy: Sort order not specified in view test_view_fieldapi, but results must be ordered by nid Issue #3151360 by quietone, benjifisher, ToneLoc: Improve description for file paths on the CredentialFrom Issue #3158292 by Hardik_Patel_12, kiamlaluno: Remove unused variables from FormAjaxResponseBuilderTest.php file Issue #3159102 by Niklan: Documentation for \\Drupal\\serialization\\RegisterEntityResolversCompilerPass is incorrect Issue #2942569 hotfix: Sorting nested properties of config entity queries does not work Issue #2855068 hotfix: Can\'t create comments when comment is a base field Issue #3156882 by alexpott, johnwebdev, adityasingh, pfrenssen: \\Drupal\\Core\\Render\\Element\\StatusReport::preRenderGroupRequirements() and \\Drupal\\user\\PermissionHandler::sortPermissions() sorts return bools Issue #2942569 by seanB, idebr, amateescu, kristiaanvandeneynde: Sorting nested properties of config entity queries does not work Issue #3126063 by quietone, Wim Leers, DamienMcKenna, benjifisher, alexpott, heddn: Harden SubProcess process plugin Issue #3040361 by Sam152, jungle, Dylan Donkersgoed, jibran: Moderation state views filter only works on base table entity Issue #3156883 by alexpott, longwave: \\Drupal\\Core\\Url ensure fragment is not an empty string Issue #3155765 by naresh_bavaskar: Fixing minor typo in path alias module test files Issue #3157369 by shaktik, Lendude, alexpott: Use unused variable $filters from DateTimeSchemaTest Issue #3157933 by S_Bhandari: Remove Unused variables from Views UI module Issue #2801929 by Lendude, ridhimaabrol24, Sutharsan, gilles.koffmann, geek-merlin, dawehner: View loses records after adding comment count field Issue #3112916 by Sam152, ocelotkevin, corneboele, jantoine, yovince, bkosborne: Content Moderation views should join on entity ID Issue #3154914 by ju.vanderw: Fix grammar usage of singular/plural Issue #3156123 by andypost: Fix MissingContentEvent see reference Issue #2988960 by tstoeckler, Kristen Pol: Testing profile\'s locale.settings config override is not up-to-date Issue #3157462 by Hardik_Patel_12, sd9121: Fixing comment error in viewAddForm file Issue #3154858 by kristiaanvandeneynde: Drupal\\Core\\Config\\Entity\\Query\\Condition::notExists() does not work when parent property is also missing Issue #3151364 by Charlie ChX Negyesi, amateescu, alexpott, jhodgdon: diacritics are not removed from ǢǣǼǽǮǯ Issue #3151975 by daffie, narendra.rajwar27: Replace the database query with an entity query in NodeRevisionsTest Issue #3153791 by Wim Leers, quietone: Add comment field for \'et\' content type to d7 fixture Issue #3146016 by Beakerboy, daffie: Sort order not specified in view test_node_revision_uid, but results asserted to be in a specific order Revert \"Issue #3146016 by Beakerboy, daffie: Sort order not specified in view test_node_revision_uid, but results asserted to be in a specific order\" Issue #3146016 by Beakerboy, daffie: Sort order not specified in view test_node_revision_uid, but results asserted to be in a specific order Issue #3154125 by Patrick R., kevinvhengst: Return type of ContentEntityFormInterface::validateForm() seems to be wrong Issue #3155463 by longwave, quietone, jungle: Fix spelling error in Drupalilter\\Plugin\\migrate\\process\\FilterID::getSourceFilterType() Issue #3153565 by vijaycs85: Update instances of Drupal\\Core\\Pager\\RequestPagerInterface with Drupal\\Core\\Pager\\PagerParametersInterface Issue #2521782 by paulmckibben, mparker17, MerryHamster, swentel, yogeshmpawar, caspervoogt, Nikolay Borisov, maebug, jkuma, Saviktor, Wim Leers, catch: HTML head has alternate hreflang links to unpublished translations Issue #3142893 by hchonov, Raunak.singh, kishor_kolekar, alexpott, tstoeckler, catch, kfritsche, johnwebdev: Memory leak - typed data prototypes for field items are not re-used like intended Issue #2855068 by jian he, larowlan, andypost, mrinalini9, Jody Lynn, himanshu-dixit, LaravZ, jurgenhaas: Can\'t create comments when comment is a base field Issue #3089961 by tim.plunkett, Deepak Goyal, Lal_, ravi.shankar, tedbow: assertOffCanvasFormAfterWait() doesn\'t check for the correct form ID Issue #2848367 by mlncn, jp.stacey, kunalkursija: Render API overview example of placeholders either incorrect or misleading
* Wed Jul 15 2020 Joop Boonen - Update to 8.9.2 - All changes since Drupal 8.9.1 Issue #2914785 by acbramley, jungle, Hardik_Patel_12, mrinalini9, larowlan: Entities with external urls as a uri relationship can not be deleted when menu_link_content is installed Issue #3149930 by Lendude, ravi.shankar, Bobík, dww, joaomachado, alexpott, lauriii: Views table settings exposes \"Details\" field even when empty Issue #3152003 by Beakerboy, sanjayk, alexpott, daffie: EndOfTransactionQueriesTest does not include bootstrap.inc early enough for contrib database drivers Issue #3027763 by quietone, LiamPower, pratik_kamble: UnroutedUrlAssembler removes query params array item key in buildExternalUrl() Issue #3144046 by Matroskeen: Incorrect example of adding Cache metadata in hook_menu_local_tasks_alter() Issue #3144354 by alexpott, vijaycs85, andypost: ModuleInstaller loads .module and .install before allowing classes to autoloaded Issue #2834525 by alexpott, kim.pepper, jummonk, joshua.roberson, Ruuds: Permission denied caused by race condition during ensureDirectory should be silenced Issue #3151520 by adityasingh, pavnish, daffie, alexpott: Replace the database query with an entity query in UserInstallTest Issue #2120877 by quietone, BryanGullan, duellj, jibran, miro_dietiker, dags: Add tests for tracker module\'s Tools menu link Issue #2898947 by rajandro, jungle, ankit.singh, AkashkumarOSL, Lal_, shimpy, Saurabh_sgh, markdorison, gnikolovski, jordanwood, librarylasso, Swapnil_Kotwal, mrinalini9, chiranjeeb2410, codersukanta, daffie, xjm, alexpott, mmjvb, mparker17, MaskyS, larowlan, quietone: Change \"writeable\" to \"writable\" in documentation Issue #3145930 by bnjmnm, lauriii, msuthars, nod_: Tableheader should recalculate on toolbar tray toggle Issue #3154461 by Hardik_Patel_12: Removing getFormObject call from UserAccountFormFieldsTest Issue #3116147 by idebr, tim.plunkett: Remove AATTtodo pertaining to RequestHelper::duplicate(), which has been removed Issue #3138796 by jungle, mohrerao, sja112, kkalashnikov, xjm, ketikagrover: Fix the typos \"cotrol\" and make the one-line summaries containing it conform to standards) Issue #3154611 by jungle, xjm, longwave: Update composer.lock for 9.0.x and 8.9.x based on Composer 1.10 availability Issue #3146474 by shaktik, kiamlaluno: Remove Unused variable $next from AggregatorController.php file Issue #3154533 by jperk224, jungle: Fix \"Drupal\" typos in core Issue #3028621 by jungle, John Cook: BatchBuilder included files fails Issue #2904467 by quietone, andyg5000: Plugins do not preserve integer keys when parsing annotations Issue #3149799 by mxr576, jungle: BasicAuth::authenticate() does not respect the implemented interface Issue #3154203 by jungle: Fix \"appear\" typos in core Issue #3150731 by andypost, Beakerboy, kim.pepper: FileSystemModuleDiscoveryDataProviderTrait needs to use DIRECTORY_SEPARATOR Issue #3138788 by jungle, sja112, xjm: Fix \"autcomplete\" typos in core Issue #3138791 by jungle, sja112, xjm, mohrerao: Fix \"bubbleable\" relevant typos in core Issue #3143316 by Lendude, sunset_bill, alexpott, daffie, xjm, facine: \"Getting the base fields is not supported for entity type\" exception in ViewsConfigUpdater Revert \"Issue #3143316 by Lendude, sunset_bill, daffie, xjm, facine: \"Getting the base fields is not supported for entity type\" exception in ViewsConfigUpdater\" Issue #3143316 by Lendude, sunset_bill, daffie, xjm, facine: \"Getting the base fields is not supported for entity type\" exception in ViewsConfigUpdater Issue #3150471 by durgeshs, joachim: incorrect constant in docs for DoTrustedCallbackTrait::doTrustedCallback() Issue #3151091 by dww, rik-dev, alexpott: Replace use of whitelist/blacklist in \\Drupal\\Component\\Utility\\Xss and its test and core/lib/Drupal/Core/Render/theme.api.php Issue #3097540 by imganesh, boulaffasae, antoineh, sauravk, KondratievaS, atul4drupal, lauriii, Neetika K, Devipriya Rajamanickam: The \'M\' of Machine name overlaps with the green border around text box Issue #3133033 by munish.kumar, xjm, Hardik_Patel_12, daffie, swatichouhan012: Fix Drupal.Array.Array.LongLineDeclaration coding standard for instances of the drupalCreateUser() test method Issue #3153677 by xjm: Lockfile hash is wrong in 8.9.x since 8.9.1, causing test failures on PHP 7.3+ Issue #3143196 by DevJoJodae, himanshu_sindhwani, nitvirus, alexpott, sykesjs, jungle: Change the download link in CHANGELOG.txt to Drupal 9 Issue #3072305 by jungle, andypost, thursday_bw, longwave, larowlan: Notice: Undefined index: #item in user_user_view_alter() Back to dev. Merged 8.9.1. Issue #3139414 by cburschka, mohrerao, pavnish, jungle, ravi.shankar, daffie, mondrake, sja112: Replace usages of deprecated AssertLegacyTrait::assert(No)Link() Issue #3150474 by jungle, munish.kumar: Inaccurate return type of \\Drupal iews\\Views::getView() Issue #3139402 by mondrake, sja112, xjm: Replace usages of AssertLegacyTrait::assertIdenticalObject(), which is deprecated Issue #2673688 by himanshu_sindhwani, kkalashnikov, atul4drupal, Saurabh_sgh, walangitan, andypost, markdorison, Bunty Badgujar, xjm, catch: Remove remains of hook_field_schema() Issue #2947588 by mrinalini9, borisson_, shaktik, andypost, daffie, joachim, Lendude: Refactor \\Drupal\\Tests iews\\Kernel\\ModuleTest::testViewsGetHandler Issue #3150661 by cburschka: FileFieldRSSContentTest uses XPath incorrectly Issue #2937513 by longwave, eltori, klausi, catch, idebr, xjm: Fix \'Drupal.Commenting.DocComment.TagGroupSpacing\' coding standard Issue #3142752 by sja112, mondrake, xjm, longwave: AssertLegacyTrait::assert(No)Escaped() in functional tests still have a message passed in Issue #3137430 by TR, jungle, alexpott: label_collection is defined twice in BlockContentType entity annotation Issue #3139422 by sja112, jungle, akanksha-hp, mondrake, xjm: Replace usages of deprecated AssertLegacyTrait::assertOptionByText() Issue #3139132 by Beakerboy, daffie: Query uses hardcoded LIMIT instead of queryRange() Issue #2946750 by Sam152, merauluka, timmillwood, catch: Node revisions forced even if bundle not under moderation workflow Issue #3020387 by Sam152, luisnicg, bahuma20, jungle: Moderation state is the same for all node\'s translations in edit page Issue #3151087 by rik-dev, dww, alexpott, Matroskeen: Replace use of whitelist/blacklist in file_munge_filename() and its tests Issue #3127918 by jungle, longwave: Add funding info in composer.lock Issue #3150990 by cburschka: Updater::install() crashes on file transfer exceptions
* Mon Jun 29 2020 Joop Boonen - Update to 8.9.1 + This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Critical - Cross-Site Request Forgery - SA-CORE-2020-004 Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2020-005 Drupal core - Less critical - Access bypass - SA-CORE-2020-006
* Sat Jun 06 2020 Joop Boonen - Update to 8.9.0
* Tue May 26 2020 Joop Boonen - Update to 8.8.6 + Drupal core - Moderately critical - Third-party libraries - SA-CORE-2020-002 https://www.drupal.org/sa-core-2020-002
* Fri Apr 10 2020 Joop Boonen - Update to 8.8.5 - All changes since 8.8.4 [#3120494] by longwave, jungle, alexpott: Bump minimist from ^1.2.0 to ^1.2.2 [#3122605] by Beakerboy, daffie: EntityResourceTestBase.php uses a static query that should be dynamic [#3122742] by alexpott: Fix PHP 5 tests on 8.7.x [#3113992] by dww, tedbow, xjm, Meenakshi.g, benjifisher, kualee, tim.plunkett, webchick, AaronMcHale, ckrina, shaal, mandclu, klonos, lauriii, Gábor Hojtsy, worldlinemine, alexpott: The \'Update\' page has no idea that some updates are incompatible [#3118087] by dww, JoshaHubbers, jungle, tedbow, RajabNatshah, Kingdutch, JonMcL, xjm, Nick Hope, wroehrig, wxman, broeker, mlozano7, kazajhodo, suit4, xmacinfo, BrightBold: If any extension has a missing or invalid version, Update manager throws errors and is confused about site update status [#3119373] by alexpott, BramDriesen: Configuration synchronisation that both enables & configures a module fails and drupal_flush_all_caches() Merged 8.8.4. [#3066801] hotfix: Add hook_removed_post_updates() [#3103529] by alexpott, mcdruid, Chris Burge, greg.1.anderson, rfay, catch, anavarre, Gábor Hojtsy, jungle: Drupal 8.8.1+ and 9 can fail to install in the web browser due to cache pollution Revert \"Issue #3103529 by alexpott, mcdruid, Chris Burge, greg.1.anderson, rfay, anavarre, catch, Gábor Hojtsy: Drupal 8.8.1+ and 9 can fail to install in the web browser due to cache pollution\" [#3094151] by mondrake, swatichouhan012, dhirendra.mishra, ravi.shankar, longwave, alexpott: ExpectDeprecationTrait is not compatible with PHPUnit 8 [#3103529] by alexpott, mcdruid, Chris Burge, greg.1.anderson, rfay, anavarre, catch, Gábor Hojtsy: Drupal 8.8.1+ and 9 can fail to install in the web browser due to cache pollution [#3066801] by catch, WidgetsBurritos, alexpott, pobster, jungle, tedbow, tim.plunkett, xjm, dww, benjifisher, webchick, longwave, worldlinemine, Berdir, lauriii [#3119847] by jungle, dww: Fix typos in InfoParserUnitTest and UpdaterTest doc comments [#3105925] by kiamlaluno: The description of the arguments for FieldDefinition::setDisplayOptions() conflicts with what reported in FieldDefinitionInterface::getDisplayOptions() [#3119445] by kiamlaluno, Deepthi kumari: The documentation comment for BanIpManager::__construct() says it constructs the BanSubscriber [#3118581] by kiamlaluno: The documentation for Crypt::randomBytesBase64() is wrong about the output length Revert \"Issue #3103529 by mcdruid, alexpott, Chris Burge, greg.1.anderson, rfay, anavarre, Gábor Hojtsy: Drupal 8.8.1+ and 9 can fail to install in the web browser due to cache pollution\" [#3103529] by mcdruid, alexpott, Chris Burge, greg.1.anderson, rfay, anavarre, Gábor Hojtsy: Drupal 8.8.1+ and 9 can fail to install in the web browser due to cache pollution [#2605904] by jmikii, swatichouhan012, kishor_kolekar, willzyx, vacho, Berdir, alexpott: Missing return statement in EntityManager::clearDisplayModeInfo() [#2917600] by tedbow, alexpott, catch, anthonyf, xjm, Alan D., andypost, Berdir, moshe weitzman: update_fix_compatibility() puts sites into unrecoverable state [#2865416] by owenpm3, swatichouhan012, neelam_wadhwani, cilefen: Root README.txt installation profile section links to D7 docs [#3056543] by plach, jungle, Berdir, catch, xjm, amateescu: taxonomy_post_update_make_taxonomy_term_revisionable() and the menu link content equivalent fail when entities have no default translation [#3118439] by kiamlaluno: PrivateKey::__construct() describes itself as \"Constructs the token generator.\" [#3118958] by lauriii: Follow-up to #3102724: CSSLint failure [#3088081] by alexpott, dww, tedbow, xjm: Improve the error message if a nonsense constraint is used in core_version_requirement [#3117188] by dww, Gábor Hojtsy: Change AATTtodo comment in core/modules/update/src/ProjectSecurityData.php to point to a better issue [#3115624] by martijn.cuppens, jungle, JeroenT, greg.1.anderson, Mile23: Scaffolding: Only add root files to gitignore [#3003401] by Sam152: UpdatePathTestBase calls setDatabaseDumpFiles twice, resulting in duplicate fixtures in some scenarios [#3118454] by catch, andypost, xjm, Gábor Hojtsy, mradcliffe, mondrake: Drupal\\KernelTests\\Core\\Database\\SelectTest fails on postgres 10 [#3052318] by AndyF, mikelutz, andypost, jungle, catch, AbdeI, mr_fenix, crifi, plach, xjm, vuil, amateescu, jedgar1mx, John_B, waverate, alexpott, owenbush, azovsky: Update from 8.6 to 8.7 fails due to corrupt menu_link_content or taxonomy_term entity data [#3118186] by swatichouhan012: Incorrect link for deprecated randomBytes() method description in utility component
* Mon Dec 23 2019 Joop Boonen - Update to 8.8.1 - Drupal core - Moderately critical - Denial of Service - SA-CORE-2019-009 - Drupal core - Moderately critical - Multiple vulnerabilities - SA-CORE-2019-010 - Drupal core - Moderately critical - Access bypass - SA-CORE-2019-011 - Drupal core - Critical - Multiple vulnerabilities - SA-CORE-2019-012
* Thu Dec 05 2019 Joop Boonen - Update to 8.8.0
* Mon Nov 18 2019 Joop Boonen - Update to 8.7.10 - This is a patch release of Drupal 8 and is ready for use on production sites
* Thu Nov 07 2019 Joop Boonen - Update to 8.7.9 - All changes since 8.7.8 [#3066954] by andrewmacpherson, Wim Leers, bnjmnm, OBKev: Admin toolbar not usable with latest versions of JAWS due to mis-use of aria-owns [#3088163] by amjad1233, larowlan, xjm: \\Drupal\\Core\\Menu\\Form\\MenuLinkDefaultForm::$moduleData is unused [#2981889] by Nebel54, acbramley, timodwhit, bkosborne, fago, josephdpurcell, tim.plunkett, eiriksm, Sam152, grantkruger, shaal, gnikolovski: Performance Degradation in Layout Builder and other places likely [#3083444] by alisonjo315: Duplicate \"attributes\" in docblock Revert \"Issue #3082719 by quietone, mikelutz, NickWilde, Charlie ChX Negyesi: migrate_drupal_migration_plugins_alter() should only alter definitions that exist\" [#3082719] by quietone, mikelutz, NickWilde, Charlie ChX Negyesi: migrate_drupal_migration_plugins_alter() should only alter definitions that exist [#2925816] by godotislate, jens.de.geit, Berdir, Lendude, Anybody, mbovan, rollingnet, tstoeckler: Views plugin \"Rendered Entity\" must add langcode in render function [#3056816] by amateescu, larowlan, hchonov, plach, jibran, Berdir, catch, Sam152: Installing a new field storage definition during a fieldable entity type update is not possible
* Tue Oct 08 2019 Joop Boonen - Update to 8.7.8 - All changes since 8.7.7 [#3083183] by larowlan, Wim Leers, acbramley: FunctionalJavaScript tests fail because newer versions of curl/selenium webdriver require additional headers [#3048348] by Wim Leers, Spokje, yogeshmpawar, logickal, alexpott, adamspe: Denormalizing NULL for an optional AATTFieldType=address or AATTFieldType=geolocation field fails due to either no main property name or computed read-only main property [#3082145] by voleger, Mile23: Vendor cleanup fail for twig/twig [#2846770] by diqidoq, dorian.dirusso, marie.pinet, Thib, larowlan, Mile23, andypost: AdminRouteSubscriber incorrectly identifies paths such as /administration-position as admin paths [#2413191] by claudiu.cristea, alexpott, andyceo, andypost, laszlo.kovacs, Dane Powell, Gábor Hojtsy, pfrenssen: Shipping a profile with multiple languages without locale module not possible [#3028675] by bskibinski, joelpittet, gnuschichten, alexpott, lauriii: Vertical Tabs are unnecessarily hiding content with overflow: hidden [#3080689] by ShaunDychko: Spelling errors in Nightwatch drupalCreateUser command [#3082287] by alexpott: \\Drupal\\user\\Plugin\\views\\access\\Role::access() does not conform to the base class documentation [#3081679] by eiriksm: AjaxResponse::getCommands has wrong return type [#3081080] by stefan.korn: Fix small issue in DocBlock comment for umami_theme_suggestions_block_alter [#3078633] by tim-diels, cindytwilliams: Documentation fix date render element [#2890514] by quietone, vomitHatSteve, heddn: upgrade_d6_imagecache_presets fails if blank \"action\" is enountered [#2913819] by Mile23, Wim Leers, catch: run-tests.sh ignores final classes [#3078676] by chr.fritsch, justafish: drupalUserIsLoggedIn doesn\'t work on https sites [#3012001] by quietone, rkostov, ellenoise: Duplications within migration process plugin [#3068733] by blazey, amateescu, pmelab, hchonov: EntityStorageBase::loadMultiple returns unwanted entities when the static cache is warm [#3045483] by Wim Leers, alexpott, RandomNeighbour, mikelutz, jibran: Incompatibility between zend-diactoros and psr-http-message-bridge versions: require symfony/psr-http-message-bridge >=1.1.2 [#2885441] by phenaproxima, acbramley, dwkitchen, jibran, hchonov, larowlan: EntityReferenceAutocompleteWidget should define its size setting as an integer [#3074949] by amateescu, doidd, catch: Memory leak in the entity schema converter [#3059356] by finnsky, mogtofu33, klausi, jibran, justafish, joaogarin: [Security] Update yarn packages to fix 19 vulnerabilities by updating nightwatch [#3079444] by jdmoreno: ExtensionList::reset() doesn\'t document its return value [#3075933] by jibran, kim.pepper, larowlan: Add kim.pepper as maintainer for file.module [#3076644] by Luke_Nuke, gueguerreiro: Mistake in the comment documenting the \"image\" method of the \"Random\" utility class [#3079805] by mikelutz, xjm, Mixologic, tedbow: expectedException() usage in two pre-8.7.7 commits has broken PHP 5 testing for 8.7.x [#3021452] by Luke.Leber, jibran, ericmulder1980, phenaproxima, Martijn de Wit, alexpott, andrewmacpherson, marcoscano, pawandubey, seanB, lauriii: Add title attribute to oEmbed iframe for accessibility [#3055516] by oknate, dasginganinja, Skymen, rgpublic, Wim Leers, seanB, phenaproxima, tstoeckler: Notice: Undefined index: target_bundles when new reference media field created [#3076259] by oknate, ThomasDik, phenaproxima: Media library does not enforce order which can lead to different hashes
* Wed Sep 04 2019 Joop Boonen - Update to 8.7.7 - Changes since 8.7.6: [#3006815] by plach, gmaka, mudassar774, amateescu, Lendude: ViewsEntitySchemaSubscriber may fail when a view has a broken handler [#3078001] by tedbow, Wim Leers: Followup minor test fix to not catching exception for invalid \'core_version_requirement\' in info.yml files [#3078001] by tedbow, Wim Leers: Don\'t catch exception for invalid \'core_version_requirement\' in info.yml files [#2313917] by tedbow, pwolanin, jhedstrom, Wim Leers, Mixologic, larowlan, Mile23, Gábor Hojtsy, xjm, Berdir: Core version key in module\'s .info.yml doesn\'t respect core semantic versioning [#3075831] by mr.baileys: Failing assertions when bundle ID contains only numbers [#3007102] by mikelutz, juampynr, DamienMcKenna, vpa24: Migrating to Date-only field does not drop time value [#3067889] by quietone: Boolean Field On and Off Label not Migrating [#3076609] by oknate, catch, larowlan: \\Drupal\\Tests\\ckeditor\\FunctionalJavascript\\CKEditorIntegrationTest fails on Sqlite [#3076169] by idebr: D6 OptionWidgetsField migrate plugin has wrong namespace [#3061610] by gabesullice, Wim Leers, larowlan, tedbow: Typed Data\'s EntityDeriver does not derive bundle-level data types when a bundle has the same name as its entity type (f.e. entity:comment:comment) Revert \"Issue #3076609 by oknate: \\Drupal\\Tests\\ckeditor\\FunctionalJavascript\\CKEditorIntegrationTest fails on Sqlite\" [#3076609] by oknate: \\Drupal\\Tests\\ckeditor\\FunctionalJavascript\\CKEditorIntegrationTest fails on Sqlite [#3075661] by Spokje: getHtml5DateFormat and getHtml5TimeFormat in Drupal\\Core\\Datetime\\Element\\Datetime have incorrect Type in phpDoc Revert \"Issue #3061610 by gabesullice, Wim Leers, tedbow, larowlan: Typed Data\'s EntityDeriver does not derive bundle-level data types when a bundle has the same name as its entity type (f.e. entity:comment:comment)\" [#3043168] by Wim Leers, Niklan, gabesullice, joelstein, mglaman: PATCH 405 for untranslatable content entities with different default language than English [#3061610] by gabesullice, Wim Leers, tedbow, larowlan: Typed Data\'s EntityDeriver does not derive bundle-level data types when a bundle has the same name as its entity type (f.e. entity:comment:comment) [#2984938] by vijaycs85, amateescu, jeqq, timmillwood, larowlan, Wim Leers, alexpott: Remember the page you were on and take you back there when switching Workspaces [#3073342] by Lendude, zrpnr, tedbow: JavaScript tests don\'t work with Chromedriver 75 and higher [#2962765] by juampynr, shubham.prakash: Clarify how to set MINK variables at phpunit.xml.dist [#2849413] by sam-elayyoub, idebr, tatarbj, B N Pandey, annetee, developmenticon, borisson_, Lendude: Class name must be a valid object or a string in core/modules/ima Back to dev. ge/src/Entity/ImageStyle.php on line 174 Back to dev. [#3060996] by mikelutz: Fix The \"Symfony\\Component\\BrowserKit\\Response::getStatus()\" method is deprecated since Symfony 4.3, use getStatusCode() instead [#3074039] by mikelutz: Add a composer conflict for symfony/dom-crawler >=4 to 8.7 only [#3073410] by shashikant_chauhan: TwigExtension::getUrl() declares the wrong return type [#2780285] by alexpott, th_tushar, mpdonadio: XSS in date format configuration
* Thu Aug 08 2019 Joop Boonen - Update to 8.7.6 - Changes since Drupal 8.7.4 [#2825516] by mikelutz, amwhalen, jhedstrom, pwolanin, ragnarkurm: hook_node_access() is called with $op = \'delete\' when the create node form is shown [#3029627] by bobbygryzynger, tim.plunkett, xjm, johndevman: FormatterBase should pass along third party settings [#2973137] by davps, efpapado, tstoeckler: EntityViewsData missed revisionable validation [#3067041] by seanB, dhirendra.mishra, Al Munnings, handspiker, phenaproxima, DannyBoing: Media library pagination is broken due to invalid entity_id parameter [#3070604] by christinlepson, joachim, jhodgdon: badly named and documented parameter for FormBuilder::buildForm() [#3070880] by bkosborne: One of methods documented by Drupal core to create a CKEditor build does not work anymore: update docs [#3066439] follow-up by alexpott: Stop invoking pre-save methods in EntityStorageInterface::restore() [#3068661] by bomoko, idebr: Docblock for \"neutral\" method in AccessResult.php is incorrect [#3066439] by alexpott, amateescu, Charlie ChX Negyesi, catch, casey, Berdir, daniel.bosen: Stop invoking pre-save methods in EntityStorageInterface::restore() [#2780475] by alexpott, Jo Fitzgerald, mpdonadio, dawehner: assertEscaped() and assertUnescaped don\'t work as you would expect in JavascriptTestBase [#3060550] by Firass Ziedan: oembed link does not pass the URL parameter to the provider [#1476782] by daffie, droplet, donquixote, Katiemouse, Lendude, lnunesbr, ekl1773, init90, jhedstrom, catch, clemens.tolboom, amateescu: DatabaseStatementPrefetch::current PHP function array_unshift() are used incorrectly SA-CORE-2019-008 by dwbotsch, xjm, mlhess, cilefen, greggles, drumm, alexpott, amateescu [#3065212] by amateescu, pmelab, leolando.tan: Workspaces views query alter multiplies result set by number of languages [#3063020] by mpp: Support translation of the list of styles in CKEditor [#2863986] by bircher, alexpott, pfrenssen, claudiu.cristea, Adita, dawehner, gambry, chr.fritsch, catch: Allow updating modules with new service dependencies [#3065663] by phenaproxima, amateescu, alexpott, tim.plunkett, Wim Leers: Several post-update functions try to update config entity types without checking if they exist [#3062157] by swetha kashetty, shubham.prakash, andrewmacpherson: Document summary_attributes variable in details.html.twig [#3065586] by Charlie ChX Negyesi, alexpott: ConditionManager::execute() implementation doesn\'t conform to the interface [#2996431] by andypost, Charlie ChX Negyesi, Xano: Fix docs for ConditionPluginBase
* Mon Jul 22 2019 Joop Boonen - Update to 8.7.5 - Changes since 8.7.4: Fix: Drupal core - Access bypass - SA-CORE-2019-008
* Fri Jul 05 2019 Joop Boonen - Update to 8.7.4 - Changes since 8.7.3: [#3038254] by phenaproxima, seanB, Wim Leers, yogeshmpawar, effulgentsia, alexpott, larowlan: Delegate media library access to the \"thing\" that opened the library [#3042223] follow-up by alexpott: Map text_plain field formatter to string Revert \"Issue #3054649 by Mile23, alexpott: DrupalKernelTest results in ERROR HANDLER CHANGED!\" [#3035408] by seanB, andrewmacpherson, phenaproxima, mgifford, rainbreaw: Identify purpose of vertical tabs in MediaLibraryWidget dialog for assistive tech users [#3055760] by huzooka, thangaraj.moorthi, John Cook: Fix RTL styles of Vertical tabs in Seven theme [#3054649] by Mile23, alexpott: DrupalKernelTest results in ERROR HANDLER CHANGED! [#2829990] by Krzysztof Domański, idebr, lamp5: Image formatter does not support URL/Link options [#3056454] by Krzysztof Domański, John Cook, johndevman: Hexadecimal validation returns true if the color contains multiple hashes (e.g. \'###FF0\') [#3059022] by alexpott, bnjmnm, dww, phenaproxima, seanB, Krzysztof Domański: If Vimeo is down our tests break [#2979044] by BR0kEN, alexpott: Unable to change menu items weight when the \"system.site.weight_select_max\" exceeded and \"#pre_render\" for \"number\" element is modified [#3054582] by jeqq, blazey, Leksat, Gábor Hojtsy, larowlan, amateescu: Add field ui to workspaces [#3042223] by juampynr, heddn: Map text_plain field formatter to string [#3045384] by mxr576, yogeshmpawar, amateescu: Fix incorrect assumption that all entity are revisionable [#3060081] by pfrenssen, borisson_: Recalculation of display cacheability metadata during module install causing error [#3049895] by quietone: Move setupMigrations to Credential form and remove duplicate code [#3062556] by alexpott, catch, phenaproxima, larowlan: UpdatePathTestBase does not support the $configSchemaCheckerExclusions property [#3061564] by cyb.tachyon: Fix null type hint on \\Drupal::getContainer() [#3050577] by fconnolly, mgifford: Remove hidden site name link in menu [#2944552] by mpdonadio, bhanuprakashnani, liquidcms, Sophie.SK, tacituseu: Documentation for #default_value in Date form element is incorrect [#3056414] by yogeshmpawar, R.shaikh, joachim, John Cook: inaccurate property docs for Drupal\\Core\\Site\\Settings [#3060603] by nuez, marcoscano, phenaproxima, alexpott, seanB: Live preview is broken when editing the media_library view [#3044649] by phenaproxima, seanB, Wim Leers, alexpott: Delegate media library selection handling to the \"thing\" that opened the library Revert \"Issue #2979966 by quietone, PieterDC, masipila, heddn, Gábor Hojtsy: Migrate D7 i18n taxonomy term language\" [#3027598] by amateescu, pmelab, alexpott, larowlan: Omit workspaces entity presave and predelete hooks for internal entities [#3021247] by jeqq, alexpott, amateescu: Bypass workspace access permission is not working as expected [#2991577] by BrightBold, cristiroma, lolcode, morrisona, cosmicdreams, Eli-T, alexpott, jcloys, pawandubey, shaal, kjay: Pluralise taxonomy terms in Umami\'s Recipe Category vocabulary [#3060983] by alexpott, Eli-T: Upgrade chokidar so that we can install on OSX with the latest stable node/npm/yarn binaries [#3039730] by ndobromirov, Wim Leers, e0ipso, l0ke, webchick, xjm: Include paths are resolved for every resource in a resource collection, instead of once per unique resource type [#2990664] by nuez, seanB, cbccharlie, Wim Leers, deepaksingh05, Pancho, Chi, wwedding, Berdir, phenaproxima: Media library does not work when Drupal is installed into a sub-directory [#2979966] by quietone, PieterDC, masipila, heddn, Gábor Hojtsy: Migrate D7 i18n taxonomy term language [#2993927] by juampynr, quietone, deviantintegral: Taxonomy Term field with Rendered Entity formatter breaks migration [#3035446] by seanB, bnjmnm, phenaproxima, andrewmacpherson, Wim Leers, alexpott, rainbreaw: Inform assistive tech users about the outcome of using the MediaLibraryWidget dialog [#3058943] by Mohammed J. Razem, alonaoneill: Fix Media Library module name according to module naming convention [#3056008] by alexpott, Lendude: Set default window size in \\Drupal\\FunctionalJavascriptTests\\WebDriverTestBase [#3038350] by seanB, Wim Leers, effulgentsia: Deny access to all media library View Displays if there is no valid state object [#2763637] by Jo Fitzgerald, quietone, hussainweb, timwood, alexpott, heddn, mikeryan, phenaproxima, maxocub, BenStallings, catch: D7 taxonomy term fields are not migrated with allowed vocabularies [#3016064] by yogeshmpawar, vacho, msankhala, singhkiran, deepanker_bhalla, gambry, dpi: Improve documentation for Datetime and Datelist #date_timezone property [#2968170] by joelpittet, idebr, heddn, quietone, mikelutz, tim.plunkett: MenuLinkParent breaks migration when Parent URI is external [#3059564] by yogeshmpawar, fredysan, init90, joachim, alexpott: error in deprecation note on EntityInterface::link() [#3056616] by idebr, Pasqualle, init90, alexpott: Remove dead code in NodeTypeForm::actions() [#3044366] by shaal, kjay, tim.plunkett, bnjmnm, alexpott, pawandubey, smaz, lauriii, markconroy, Gábor Hojtsy: Fix styling of Umami for layout builder
* Thu Jun 06 2019 Joop Boonen - Update to 8.7.3 - Changes since 8.7.2: [#3057314] by alexpott, chr.fritsch, larowlan: Harden hash checking in core [#3041326] by Sam152, amateescu, Berdir: Remove \'title\' and \'description\' from MenuSettingsConstraintValidator when used with content moderation by creating a draft of menu link content when a draft of it\'s parent content is created [#2939356] by Lendude, mediabounds, Manuel Garcia, validoll, justclint, hctom: Fatal error during import translaton of workflows.workflow.editorial.yml config Revert \"Issue #3054315 by yogeshmpawar, alexpott: Sort out ApcuBackendTest\" [#3048196] by tetranz, Tom Konda, Berdir: A field title isn\'t translated if \"Account administration pages\" plugin is enabled [#2994315] by BackEndTea: Allow installation of latest paragonie/random_compat [#3057370] by Wim Leers, seanB: MediaLibraryState::fromRequest() may result in invalid MediaLibraryState::create() call [#3058013] by plach: Promote plach to full-fledged Framework Manager [#3054315] by yogeshmpawar, alexpott: Sort out ApcuBackendTest [#2927012] by deviantintegral, alexpott, arunkumark: _drupal_log_error() returns a 0 exit code on errors [#3043907] by alexpott, dawehner, starlightE, cilefen: DatabaseCacheBackend::ensureBinExists() does not properly handle exceptions [#3023220] by tim.plunkett, andyg5000, Berdir, phenaproxima, bkosborne: Performance: Prevent extra Layout Builder code from running when rendering fields in isolation (Views results, FieldBlock, etc) [#3046007] by Sam152, alexpott, amateescu, tim.plunkett: In some circumstances the override field is not cleared from the field map when a bundle is deleted, resulting in a fatal error in layout_builder_post_update_make_layout_untranslatable [#3056348] by Pasqualle: Wrong code comment in NodeRevisionRevertForm [#3051908] by Roensby, gabesullice: Documentation in json.api.php describes wrong query parameter [#3053330] by Maithri Shetty: Update Dependencies Format in workspaces in .info.yml file [#3045211] by nlisgo, yogeshmpawar, Nebel54, heddn, quietone: Prevent link field migration from creating invalid link attributes [#3055474] by Gribnif, Berdir: template_preprocess_file_link will not work with a stdClass object, though it tries to [#3055918] by kkalaskar, kpv: Fix typo in LibraryDiscoveryParser::parseLibraryInfo() docblock [#3053827] by gabesullice: Leaked cache metadata detected when using JSON:API to GET a threaded comment when RDF module is installed [#3035980] by jhedstrom: Provide a better error when a NULL is passed to EntityStorageBase::load() [#3048434] by claudiu.cristea, Lendude: Convert FileManagedAccessTest into a Kernel test [#2892440] follow-up by alexpott: Provide helper test method to wait for an element to be removed from the page [#2892440] by bnjmnm, tedbow, alexpott, Krzysztof Domański, Lendude: Provide helper test method to wait for an element to be removed from the page [#3056536] by alexpott, tedbow: LayoutBuilderDisableInteractionsTest randomly fails [#3048707] by Daniel Korte, Lendude: Views AJAX arguments are not HTML decoded [#3052940] by Krzysztof Domański: Incorrect data type for the expected parameter [#3055001] by Neslee Canil Pinto: Typo error in comment module file [#3043087] by tedbow, Sam152: Retrieving plugins with entity context definitions from cache is expensive, which is noticeable when used with Layout Builder\'s FieldBlockDeriver [#2901792] by alexpott, tedbow, dww, bnjmnm, jhodgdon, Krzysztof Domański: Disable all animations in Javascript testing
* Thu May 23 2019 Joop Boonen - Update to 8.7.2 - All changes since 8.7.0: Revert \"Issue #2822778 by wengerk, bighappyface, joelpittet, Lendude, lauriii, vivekguptakota, Meenakshi.g, shashikant_chauhan, GoZ, ifrik, Manuel Garcia, Neograph734: Modal popups in views is not showing properly when toolbar tray is upon modal\" [#3030363] by andrewmacpherson, Krzysztof Domański: Add test to assert ajax buttons are operable with the spacebar key [#3053129] by R.shaikh, idebr: Links to twig.sensiolabs.org are redirects: replace with its destination URLs 1.x version [#3052971] by alexpott, l.grube: Notice: Undefined index: #include_fallback in Drupal\\Core\\Render\\Element\\StatusMessages::generatePlaceholder() [#3034599] by heddn, jian he, alexpott: PHP 7.0 got error: Undefined class constant \'SOURCE_IDS_HASH\' [#3001299] by seanB, joseph.olstad, damondt, amateescu: Error Loading Language Not Translated For Current Revision [#3055495] by Mile23, Lendude: Search page migration tests are misplaced kernel tests [#3042124] by gabesullice, Wim Leers, logickal, benjy, Grimreaper: [regression] Empty response body when user is an administrator and an exception is thrown; some traces cannot be encoded because of recursion detection [#3024460] by quietone, Gábor Hojtsy, masipila, heddn: Migrate D7 comment type language settings [#2884052] by zviryatko, Krzysztof Domański, alexpott, drclaw, vijaycs85, Madis, charlotte.b, mcdruid, Berdir, lauriii: Uploading a managed file on a custom form that allows multiple files also triggers the remove button which results in a duplicate temporary record and results in the file being deleted [#3049437] by mfb, amateescu: SharedTempStore not serializable on PHP 7.3 [#3054392] by iuana, joachim: protected methods in LocalAwareRedirectResponseTrait are missing docs [#3040166] follow-up by Lendude: mkdir() fails in BrowserHtmlDebugTrait.php:141 because of a race condition [#3052271] by amateescu, catch, mikelutz, alexpott, xaqrox, jimik42, plach, phenaproxima, rfmarcelino, mzvaan: media_library_update_8701() fails during update from 8.6.15 to 8.7.0 [#3053552] by alexpott, oriol_e9g, cilefen, xjm, Skin, luke.stewart: Bump typo3/phar-stream-wrapper library version to v2.1.2 to remove fileinfo extension dependency [#3053529] by tim.plunkett, Waxwing, portulaca: Cannot enable overrides for any bundle if another bundle has full view mode enabled [#3050275] by Balu Ertl, borisson_: Replace remaining references of PSR-0 to PSR-4 instead [#3052059] by kkalaskar, cilefen: StringFilter docblock references the wrong class [#3049685] by claudiu.cristea, martin107: Move MigrateNodeRevisionTest & NodeMigrateDeriverTest under the Kernel tests namespace [#3050172] by naveenvalecha, claudiu.cristea: Move MigrateLanguageTest under Kernel tests namespace [#2923428] by undertext, Manuel Garcia, andypost, badjava, amateescu, douggreen: Wrong check for file status in _editor_record_file_usage [#3051889] by idebr, joachim: $sandbox[\'max\'] count in docs for hook_update_N() is incorrect [#3052147] by Sam152, amateescu, Dropa, alexpott, larowlan, catch, xjm: comment_update_8701 fails if there are comments without field_name [#3045148] by huzooka, amateescu: Followup to: workspaces toolbar tab sizing is odd on really small viewport width (below 16.5em) and RTL styles are incomplete [#3045148] by huzooka, amateescu: Workspaces toolbar tab sizing is odd on really small viewport width (below 16.5em) and RTL styles are incomplete [#3037668] by starshaped, Gábor Hojtsy, phenaproxima, seanB, lauriii: Improve visual coherence of the media library [#3052625] by Mile23, alexpott: DeprecationListenerTrait croaks on tests with no results [#2859297] by quietone, masipila, jhodgdon, Gábor Hojtsy, heddn: Migrate taxonomy term references for D6 Node translations [#3052467] by amateescu, Rick Bergmann: System update 8702 fails with \" Error: Call to a member function getKey() on null in core\\modules\\system\\system.install\" [#3052431] by amateescu, tim.plunkett: layout_builder_post_update_make_layout_untranslatable() still attempts to query all revisions for non-revisionable entities Back to dev. Merged 8.7.1. Drupal 8.7.1 SA-CORE-2019-007 by Blaklis, oliver.hader, alexpott, mlhess, tim.plunkett, dsnopek, xjm [#3050448] by kkalaskar, joachim, idebr: AATTsee link in TwigNodeTrans docs is a 404 [#3052492] by amateescu, plach, alexpott: ViewsEntitySchemaSubscriber should not make an entity update fail if a view cannot be resaved [#3050429] by pfrenssen: Fix misspelled property \"lable\" in schema definitions [#3046694] by vadim.hirbu, claudiu.cristea, Lendude, catch: Convert BookInstallTest into a Kernel test [#3042882] by RuslanP, cilefen, eslamhiko: Word duplication and punctuation in README.txt [#3047757] by radmosley, ex DJ, ehazell, wolffereast, Adrian_S_M, Luke.Leber: Duplicate a in ViewsHandlerInterface docblock [#3048885] by RenatoG: Examples using new array in settings.php [#3027318] by Krzysztof Domański, wengerk: Improve test coverage for Inline Form Errors [#3034885] by godotislate, Sam152, alexpott: Content moderation paramconverter.latest_revision paramconverter applied on config entity admin route [#2981584] by Wim Leers, JvE, ndobromirov: BigPipe breaks on large amounts of placeholders (e.g. Flag module on view displaying ~1000 entities) [#3049604] by claudiu.cristea, Manuel Garcia: Convert CommentFieldNameTest into a Kernel test [#3041842] by claudiu.cristea, Lendude: Convert ArgumentValidateTest into a kernel test [#2970912] by zaporylie, Chi: Missing configuration schema for default value of Telephone field type [#2969691] by thejacer87, matthieuscarset, lhangea, rwohleb, alexpott: Muted attribute not working for Video file [#3046937] by claudiu.cristea, naveenvalecha: Convert TrackerUserUidTest into a Kernel test. [#3052140] by amateescu, dpi, xjm: Cannot convert custom entity types from non-revisionable to revisionable with pre-8.7.x compatible methods [#3049938] by pfrenssen: Deprecation message linking to wrong change record
* Thu May 09 2019 Joop Boonen - Update to 8.7.1 - This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Third Party Libraries - SA-CORE-2019-007 - No other fixes are included.
* Thu May 02 2019 Joop Boonen - Update to 8.7.0 - Important update information
* Site update and module owners planning to update to this release should take note of the following important changes: PHP 5 support, automatic entity updates, and Internet Explorer 9 workarounds have been removed PHP 5.5 and 5.6 will no longer be supported as of Drupal 8.7.0. As of December 2018, PHP 5.6 no longer receives security support from the maintainers of PHP. Anyone running Drupal 8 on PHP 5.5 or 5.6 should upgrade their PHP version to at least 7.1. PHP 7.2 is now recommended. Read more in the change record for the PHP requirement update. Starting with 8.7.0, Drupal core no longer provides support for automatic entity updates as these have resulted in conflicts with regular database updates and data integrity issues. Whenever an entity type or field storage definition needs to be created, changed or deleted, it has to be done with an explicit update function as provided by the Update API, and using the API provided by the entity definition update manager. (Note that using the API has always been the recommended way for developers to trigger entity updates.) drush entup is also no longer supported by Drupal core. These three change records provide further details: Support for automatic entity updates has been removed Kernel tests have to install entity type schemas for all the entity types they are testing, and before installing any other configuration New helper method available to set up the \"current_user\" service in kernel tests Workarounds for the stylesheet limit in Internet Explorer 9 (IE9) and earlier have been removed. Drupal dropped support for Internet Explorer 9 and 10 in 8.4.0, but Drupal 8.5 and 8.6 retained a workaround to allow 32 or more stylesheets to be included. This workaround has been removed in 8.7. Sites still requiring Internet Explorer 9 support for the work around of IE\'s limit of 31 style sheets per page, should enable CSS aggregation (preferred) or install the IE9 Compatibility contributed module. - Entity and field system changes Entity schema operations will now leave backup tables in place for inspection. See the change record on entity update backup data for more details including how to disable this functionality. Custom menu links and taxonomy terms are now revisionable, which allows them to be used in editorial workflows (similarly to nodes, media, and custom blocks). These changes involve an upgrade path and updates to the respective entity storages. Custom code updating these entities programmatically may need to update to take account revision creation. This may also impact API clients, exported default content, and custom database queries. See the change records for details: Custom menu links are revisionable Taxonomy terms are revisionable Serialized properties of base fields are now automatically unserialized to be consistent with configurable fields. Existing workarounds for this bug might need to be adjusted if they relied on the old behavior of passing a string to those fields. Read the change record about loading serialized field properties. - Changes for Symfony 4 and 5 compatibility Drupal\\Component\\DependencyInjection\\Container no longer implements Symfony\\Component\\DependencyInjection\\ResettableContainerInterface for future compatibility with Symfony 5. If you are type-hinting on this interface, update your type-hint to instead use Drupal\\Component\\DependencyInjection\\Container Read the change record about the Container Symfony component. In the interest of supporting deprecations in Symfony 4 leading up to Symfony 5, \\Drupal\\Core\\Validation\\TranslatorInterface no longer extends \\Symfony\\Component\\Translation\\TranslatorInterface. Read the change record about the TranslatorInterface Symfony component. Additionally, numerous critical Symfony 4 and 5 compatibility issues are resolved in this release. - Plugin system changes ConfigurablePluginInterface, which is used by many, many plugins, is deprecated in favor of a combination of two interfaces: ConfigurableInterface and DependentPluginInterface. If the plugin does not have external module dependencies, then developers may opt to just implement ConfigurableInterface by itself and not implement DependentPluginInterface. Read the change record on deprecation of ConfigurablePluginInterface. For context-aware plugins defined by annotation the context key is deprecated. To define context definitions, use the context_definitions key. Interacting with the context definitions of a plugin is unchanged, see \\Drupal\\Component\\Plugin\\ContextAwarePluginInterface. Read the change record on context definitions for plugins. - Changes to base themes (Stable, Classy) - This release includes some small changes to core\'s base themes (Stable, Classy). Themes that extend one of these base themes should review the following changes. JavaScript messages template changes Pager CSS ID changed from \"pagination-heading\" to a unique ID - New stable module: Layout Builder Layout Builder allows content editors and site builders to easily and quickly create visual layouts for displaying content. Users can customize how content is arranged on a single page, or across types of content, with an easy to use drag-and-drop interface. - This module was introduced as an experimental core module in Drupal 8.5.0, but is now stable and ready for production use! For sites using the experimental module prior to 8.7.0 there are some important changes: The Layout Builder module is designed to support extensible storage for layouts, so that layouts can be created and saved for various use cases. (For example, the core module has two storages, one for default content layouts and another for individual entity layouts.) A serious bug with the beta API prevented other storages from being used and API changes were required to resolve this issue. Layout Builder section storage plugins must adapt to changes to their interface and rely on the context system instead of external setter calls. Additionally, those interacting with the Layout Builder API must use the new methods for loading SectionStorage plugins. Layout Builder overrides are now stored in non-translatable fields. This means that on entities with overridable layouts, when Content Translation is enabled, the Layout tab is only available when viewing the entity in its default language (not from a translation) and layout changes made from there apply to all translations. For sites that installed Layout Builder and enabled layout overrides for some entity bundles while it was still Experimental, this release retains the site\'s existing translatability configuration of those fields. For those sites, manually setting the layout field to non-translatable is strongly recommended unless there is existing layout translation data. See the change record on Layout Builder translation changes for more details. Layout translatability is planned as a feature for a future release. Layout Builder now has more granular permissions Previously, it only provided a single permission to access all aspects of Layout Builder (configuring/deleting layouts, adding or removing inline blocks, etc.). One example of Layout Builder\'s more granular permission options means users will only be able to manipulate the layout of content if they have access to edit that content. Review Layout Builder\'s permissions after updating and change to permissions where appropriate for better access control. CSS classes used in Layout Builder\'s user interface have been renamed in accordance with BEM standards. For example, classes like .layout-section are now .layout-builder__section. Read the change record on BEM standards for Layout Builder\'s user interface classes. - New stable module: JSON:API JSON:API is now included in core. Contributed modules that depend on the contrib JSON:API project should remove this dependency now that the module is in core. Sites currently using the 8.x-2.x branch of the JSON:API contributed module should remove the contributed module from the codebase, ensuring that any contrib modules depending on the contributed project are updated at the same time. Use composer remove drupal/jsonapi to remove the JSON:API contributed project when updating core, and rm -rf modules/jsonapi if not using composer, when updating to Drupal 8.7.0. - The contributed module will not receive further updates aside from security fixes. Sites using the 8.x-1.x branch may require changes to API clients, but the contributed module may be left in place with Drupal 8.7 until any needed conversions are complete. Note that the core version of JSON:API uses a read-only mode by default for security reasons. This is configurable at /admin/config/services/jsonapi. Sites requiring create, update, or delete access should review the JSON:API security considerations documentation. Third-party library updates The following third-party libraries are updated in this release: Guzzle has been updated from 6.3.0 to 6.3.3. With this update, the http_client service also now supports empty headers. Previously, Drupal packaged a copy of the PEAR Archive_Tar library in a Drupal core namespace. In 8.7, this has been deprecated and replaced with a proper Composer dependency on this library. The dependency has also been updated to version 1.4.6. Stylelint has been updated from 9.1.1 to 9.10.1. drupal/coder has been updated to ˆ8.3.1. You may need to re-install coder if you have automated coding standards checks as part of your workflow, since the update includes new coding standards checks. CKEditor has been updated to 4.11.3. Twig has been updated to 1.38.4. A number of other PHP dependencies have also been updated, including: composer/installers to 1.6.0 composer/semver to 1.5.0 egulias/email-validator to 2.1.7 paragonie/random_compat to v2.0.18 Most symfony/
* components to v3.4.26 symfony/http-foundation to v3.4.27 symfony/polyfill-
* to v1.11.0 typo3/phar-stream-wrapper to v2.1.0 - Other important update information Previously, a fix was committed following upstream Symfony issue with lazy session data in Symfony 3.4.24. Symfony has now reverted the commit in Symfony 3.4.27 (released May 1). Drupal 8.7 has therefore reverted the workaround for the issue and updated symfony/http-foundation to 3.4.27. Other Symfony components remain on 3.4.26 as of Drupal 8.7.0. Any site owners encountering issues with lazy session data should review the above issue and ensure that http-foundation is updated to 3.4.27. datetime fields that store both date and time now specify a time zone when normalized, datetime fields that store only a date no longer expose a (meaningless) time when normalized. daterange fields behave the same way as datetime fields, because both field types use the same \"data type\" under the hood, and hence get the same normalization. Finally, there is now automatic time zone conversion when POSTing or PATCHing datetime or daterange fields: the client can specify any time zone, and the necessary transformations to match the site\'s timezone are applied. Read the change record about normalization of the Date and Date range fields. The session_handler.write_check service has been removed from core.services.yml. In the unlikely event that this service is being swapped out, the functionality has been moved to \\Drupal\\Core\\Session\\WriteSafeSessionHandler - the session_handler.write_safe service. Read the change record on removal of the session handler proxy. In order to resolve a critical issue affecting the PostgreSQL database, The naming scheme for PostgreSQL sequence generators has been changed. For all changes that may affect contributed or custom code, search the Drupal 8.7.x change records. - Important bug fixes In addition to those already listed above, the following critical and important issues have been fixed in Drupal 8.7.0. The Entity system now provides an API for retrieving an entity variant that is safe for editing and previewing in editorial workflows, depending on the specified context, by default the current context. [#2942675]: Layout builder should use the active variant of an entity to avoid orphaned revisions [#2990517]: Adding a display mode to a content type using layout, and disabling layout on that new display mode removes the layout_builder__layout field and breaks layout in already configured display modes. [#3033686]: Saving Layout override will revert other field values to their values when the Layout was started. [#3037823]: The system.theme.data key remains corrupted in state causing performance issues and is not used in >= 8.7 [#3042993]: Translatable and revisonable installed entity type definitions are missing the \'revision_translation_affected\' entity key [#2554235]: Make the content entity storage and entity query use the last installed definitions instead of the ones living in code [#2891754]: [regression] UserMailRequiredValidator fails on new user entities [#2787185]: track_changes does not work when the map is joinable [#3033653]: InvalidArgumentException when adding reference field without Media type [#3051826]: 8.7.0-rc1 database updates fail on media_library configuration dependencies due to missing form and view modes Beginning with the Drupal 8.7.0-beta1 release, the Drupal Association and Drupal core maintainers have partnered with agencies and site owners in an official beta testing program for Drupal core minor releases. A number of issues were identified and resolved directly as a result of this initiative. Participating in the beta program is an important way to contribute to the Drupal project. Special thanks to the following individuals and organizations for participating, and directly contributing to the quality of this release: larowlan at PreviousNext for Charles Darwin University, Brisbane City Council, Wyndham City Council plach RoSk0 at Catalyst IT alexpott at Thunder thursday_bw at Catalyst IT Juterpillar at Catalyst IT Joseph Zhao at govCMS (Australian Government Department of Finance) daniel.bosen at Thunder kim.pepper at PreviousNext - Known issues [#3052147]: comment_update_8701 fails if there are comments without field_name [#3052140]: Cannot convert custom entity types from non-revisionable to revisionable with pre-8.7.x compatible methods [#3044211]: SectionStorage objects in tempstore are broken when updating from 8.6.x to 8.7.x [#3026560]: After upgrade to 7.63, 8.6.7, or 8.5.10 still get TYPO3 phar error for drush [#3026443]: \\Drupal\\Core\\Security\\PharExtensionInterceptor is incompatible with GeoIP and other libraries that use phar aliases or Phar::mapPhar() [#3044682]: Permission denied creating /tmp/twig - Search the issue queue for all known issues. - All changes since 8.7.0-rc1 [#3045349] by alexpott, mikelutz, geerlingguy, catch, mglaman, larowlan: Lazy started sessions with session data are not saved with symfony/http-foundation 3.4.24 [#3051826] by tim.plunkett, mikemadison: 8.7.0-rc1 database updates fail on media_library configuration dependencies due to missing form and view modes [#2981393] by quietone, masipila, heddn, Gábor Hojtsy, maxocub: Migrate D6 comment type language settings [#2987956] by mariancalinro, amateescu, vijaycs85, mheip, mallezie: Entity queries with sorting and ordering are not working in a non-default workspace Revert \"Issue #2987956 by mariancalinro, amateescu, vijaycs85, mheip, mallezie: Entity queries with sorting and ordering are not working in a non-default workspace\" [#3022137] by quietone, heddn: Update migrate fixtures for remaining active issues [#3045966] by partyka, shaal, Wim Leers, Gábor Hojtsy, mglaman, tedbow, Berdir, kjay: Set author and editor passwords to the admin password in the demo to make demoing easier [#3049737] by shaal, smaz: Demonstrate per item layout customization in Umami, make finding layout editing much easier [#3050180] by alexpott, shaal, smaz: Cannot install Umami in Spanish [#2904550] by tim.plunkett, Sam152, jwilson3, neclimdul, eelkeblok, amateescu, DuaelFr, K3vin_nl, alexpott, tedbow, andypost: PluginDependencyTrait::calculatePluginDependencies() does not handle theme provided plugins [#3048698] by Sam152, alexpott, tedbow, fenstrat: Content moderation layout builder integration fails when a node has an associated menu item [#3046992]: Add AATTckrina as a usability maintainer [#3040166] by oriol_e9g, Mile23, willzyx, Berdir, alexpott, catch, cilefen: mkdir() fails in BrowserHtmlDebugTrait.php:141 because of a race condition [#3048699] by shaal: Taxonomies are only displayed in English [#3029669] by tim.plunkett, K3vin_nl, mpdonadio: Layout Builder must adjust #states for formatters written expecting to be used by the Field UI [#3010825] by mark_fullmer, tim.plunkett, tedbow, johndevman: Back to site link returns user to manage layout for defaults [#3046121] by shaal, pawandubey, kjay: Umami tabs are too wide for mobile screens [#3019824] by nord102, tim.plunkett: Layout Builder\'s isOverridable()/setOverridable() do not respect the result of isLayoutBuilderEnabled() [#2955065] by tim.plunkett, phenaproxima, pixlkat, andypost, mtodor, dmsmidt: Customized layout does not display for node with customizations enabled when using full content view mode [#3040645] by mark_fullmer, tim.plunkett, porkloin, xjm, andrewmacpherson, mgifford: Add a role=region wrapper to the Layout Builder action form to fix screen reader navigation barriers [#2802803] by Berdir, AdamPS, Darren Oh, alexpott, Munavijayalakshmi, jackbravo, slashrsm, mmbk, Dane Powell, larowlan, LittleCoding, gapple, catch, wiifm, quantumized, acbramley: Temporary files whose files are missing on the disk result in never-ending error log messages [#2995655] by awm, Sam152, jedgar1mx, lpeabody, axel.rutz: Invalid translation language (und) specified. in Drupal\\Core\\Entity\\ContentEntityBase when changing language of an entity
* Thu Apr 18 2019 Joop Boonen - Update to 8.6.15 - This security release fixes third-party dependencies included in or required by Drupal core. [#]CVE-2019-10909: Escape validation messages in the PHP templating engine. From that advisory: - Validation messages were not escaped when using the form theme of the PHP templating engine which, when validation messages may contain user input, could result in an XSS. [#]CVE-2019-10910: Check service IDs are valid. From that advisory: - Service IDs derived from unfiltered user input could result in the execution of any arbitrary code, resulting in possible remote code execution. [#]CVE-2019-10911: Add a separator in the remember me cookie hash. From that advisory: - This fixes situations where part of an expiry time in a cookie could be considered part of the username, or part of the username could be considered part of the expiry time. An attacker could modify the remember me cookie and authenticate as a different user. This attack is only possible if remember me functionality is enabled and the two users share a password hash or the password hashes (e.g. UserInterface::getPassword()) are null for all users (which is valid if passwords are checked by an external system, e.g. an SSO). [#] Vulnerability: Cross Site Scripting - The jQuery project released version 3.4.0, and as part of that, disclosed a security vulnerability that affects all prior versions. As described in their release notes: - jQuery 3.4.0 includes a fix for some unintended behavior when using jQuery.extend(true, {}, ...). If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. This fix is included in jQuery 3.4.0, but patch diffs exist to patch previous jQuery versions. - It\'s possible that this vulnerability is exploitable with some Drupal modules. As a precaution, this Drupal security release backports the fix to jQuery.extend(), without making any other changes to the jQuery version that is included in Drupal core (3.2.1 for Drupal 8 and 1.4.4 for Drupal 7) or running on the site via some other module such as jQuery Update.
* Tue Apr 09 2019 Joop Boonen - Update to 8.6.14 - Changes since 8.6.13 Symfony 3.4.24 made a change with how session are saved, which is incompatible with Drupal\'s lazy session handling, this caused a critical bug on sites upgraded via composer, including breaking password reset links. Drupal\'s lazy session handling has been updated to be compatible with this change. - Known issues [#3026560]: After upgrade to 7.63, 8.6.7, or 8.5.10 still get TYPO3 phar error for drush [#3026443]: \\Drupal\\Core\\Security\\PharExtensionInterceptor is incompatible with GeoIP and other libraries that use phar aliases or Phar::mapPhar()
* Thu Mar 21 2019 Joop Boonen - Update to 8.6.13 - Changes since 8.6.12 [#]This release fixes security vulnerabilities. [#]Drupal core - Cross-Site Scripting- SA-CORE-2019-004
* Sat Mar 16 2019 Joop Boonen - Update to 8.6.12 - Known issues [#3026560]: After upgrade to 7.63, 8.6.7, or 8.5.10 still get TYPO3 phar error for drush [#3026443]: \\Drupal\\Core\\Security\\PharExtensionInterceptor is incompatible with GeoIP and other libraries that use phar aliases or Phar::mapPhar() [#3031128]: Update from 8.6.7 to 8.6.8 warnings - Drupal\\Core\\Extension\\Extension has no unserializer - Changes since 8.6.11 [#]The third-party Twig library, which powers Drupal 8\'s theme system, recently released new versions (Twig 1.38.0 and 1.38.1) that introduced a fatal error for Drupal 8 sites using Composer. Drupal 8.6.11 was released yesterday with an update to Twig 1.38.2 in order to resolve that error. However, this update also led to a different regression for certain Drupal 8 themes that use Twig {% embed %} tags. This release hotfixes Drupal 8 to resolve that regression. No other changes are included.
* Thu Mar 14 2019 Joop Boonen - Update to 8.6.11 - Known issues [#3026560]: After upgrade to 7.63, 8.6.7, or 8.5.10 still get TYPO3 phar error for drush [#3026443]: \\Drupal\\Core\\Security\\PharExtensionInterceptor is incompatible with GeoIP and other libraries that use phar aliases or Phar::mapPhar() [#3031128]: Update from 8.6.7 to 8.6.8 warnings - Drupal\\Core\\Extension\\Extension has no unserializer - Changes since 8.6.10 [#3037970] by Berdir, Baysaa: Custom serialized field\'s data should be normalized even if it\'s empty [#3039408] by vijaycs85, WidgetsBurritos, alexpott, phenaproxima, Joseph Zhao, tstoeckler, kfritsche, mikelutz, fabpot: Updating twig/twig to v1.38.0 or v1.38.1 causes fatal error Revert \"Issue #2135445 by dww, Sam152, jessebeach, Mile23, Kristen Pol, Wim Leers, larowlan: Toolbar displays Manage tab even if the user is not permitted to see it\" [#2947517] by Lendude, jibran, alexpott, larowlan: Selenium driver: API to get remote file paths [#2999723] by hiway, pawandubey, shaal, kjay, MaddieC, lauriii: Umami\'s card layout broken in IE11 [#3031710] by scor: Remove scor from MAINTAINERS.txt [#3034913] by govind.maloo, wombatbuddy: Written \'Confuration\' instead of \'Configuration\' in the \'Typed Data API\' article [#3036197] by dww: REST FileUploadResource::streamUploadData() can call fclose(FALSE) [#2975081] by alexpott, amateescu, larowlan, mtodor, catch: UpdatePathTestBase fails to re-initialize the test site (rebuild container, clear caches) after running the database updates [#3035873] by Eli-T: Remove Eli-T from MAINTAINERS.TXT [#2870458] by Lendude, alexpott, jibran, vijaycs85, Wim Leers, dawehner, Gábor Hojtsy: Convert web tests to browser tests for quickedit module Revert \"Issue #2870458 by Lendude, jibran, alexpott, vijaycs85, Wim Leers, dawehner, larowlan: Convert web tests to browser tests for quickedit module\" [#2870458] by Lendude, jibran, alexpott, vijaycs85, Wim Leers, dawehner, larowlan: Convert web tests to browser tests for quickedit module [#2937639] by hotwebmatter, hiway, andrewmacpherson, markconroy, shaal, cehfisher, mgifford, kjay, Eli-T, kbeck303: Umami Theme - a11y context is needed for read more links [#3021406] by ApacheEx, Lendude: Convert \\Drupal\\Tests\\quickedit\\FunctionalJavascript\\QuickEditLoadingTest::testDisplayOptions to a kernel test [#3030929] by kiwimind, Kavichandran P, c.nish2k3, quietone: User migrations tests in wrong directory [#3008030] by quietone, masipila, maxocub: Migrate D7 i18n fields label and description [#3032376] by alexpott, dww, Berdir: Files renamed by \\_file_save_upload_single() do not have the correct filename on the File entity [#3032620] by alexpott, dww: \\Drupal\\file\\Plugin\\rest\\resource\\FileUploadResource uses basename() when it needs to use the Drupal version [#3033494] by alexpott, dww, tim.plunkett: SiteConfigureForm can install the file module without the field module [#3035318] by mpdonadio: `DateFormatter()` assumes 30 days per month, while February only has 28 days. Causes fails in tests [#2995200] by Sam152, sjancich: Defaults for publishing options do not save when workflow is enabled [#3029661] by Lendude, dawehner: Move BrowserTestBase tests out of modules/simpletest into /tests [#3027745] by claudiu.cristea, idimopoulos, wengerk, alexpott: UniqueFieldConstraint doesn\'t work for entities with string IDs [#2903322] by gaurav.kapoor, levmyshkin: Change FAPI Container example class to an array [#3034695] by xjm, neclimdul: Fix coding standard errors from SA-CORE-2019-003 [#2994550] by tedbow, tim.plunkett, gapple, johndevman, Wim Leers, neclimdul, EclipseGc, catch: Filtering block plugins by context is slow [#3028490] by tim.plunkett, Kristen Pol, xjm, tedbow, r.aubin, phenaproxima: Users with \"configure any layout\" can see entities they don\'t have \"view\" access to [#3032869] by alexpott, tim.plunkett, dww, tacituseu, xjm, Mixologic: \\Drupal\\Core\\Update\\UpdateKernel::fixSerializedExtensionObjects() caused test runs to double in duration Merged 8.6.10. Revert \"Issue #3031740 by alexpott, tmanhollan, catch, collinhaines: Updating to 8.6.8 or 8.6.9 with Drush 8 causes data loss via update_fix_compatibility()\" Revert \"Issue #3032869 by alexpott, tim.plunkett, dww, tacituseu, Mixologic: \\Drupal\\Core\\Update\\UpdateKernel::fixSerializedExtensionObjects() caused test runs to double in duration\" [#2672950] by Vj, ilya.no, Krzysztof Doma≈Ñski, elandirayan, Rijidij, amateescu, shahgm, larowlan: Notice: Undefined index: #default_value in Drupal\\Core\\Datetime\\Element\\Datetime::valueCallback() (line 103 [#3032869] by alexpott, tim.plunkett, dww, tacituseu, Mixologic: \\Drupal\\Core\\Update\\UpdateKernel::fixSerializedExtensionObjects() caused test runs to double in duration [#3019333] by tim.plunkett, julenmelgar, Ismail Cherri: If you translate the literal \"inline blocks\" to another language in the layout builder, it stops working [#2992580] by Vj, Arez, andypost, jhedstrom: Custom callbacks doesn\'t work [#3031740] by alexpott, tmanhollan, catch, collinhaines: Updating to 8.6.8 or 8.6.9 with Drush 8 causes data loss via update_fix_compatibility() [#2135445] by dww, Sam152, jessebeach, Mile23, Kristen Pol, Wim Leers, larowlan: Toolbar displays Manage tab even if the user is not permitted to see it [#2964777] by tim.plunkett, tedbow: Method comment for \\Drupal\\layout_builder\\Plugin\\SectionStorage\\DefaultsSectionStorage::getDisplay is wrong [#3029614] by cdykstra, cilefen, andrewmacpherson, jrockowitz: Fix aria-required in states.js [#3027236] by rachel_norfolk, kjay, tonypaulbarker, akshay_d, shaal, Eli-T, Not Real, babusaheb.vikas: Umami - hero block is identical on Home and Recipe pages, so potentially confusing [#3023729] by tim.plunkett, bkosborne, xjm: LayoutBuilderController should iterate over components in a region using Element::children() [#3025865] by quietone, xurizaemon, mikelutz: i18ntaxonomy should be an array in d6 VocabularyPerType source plugin [#3030781] by shaal, mcannon, andrewmacpherson, Gábor Hojtsy: Umami - icon misaligned on warning and error messages
* Thu Feb 21 2019 joop.boonenAATTopensuse.org- Update to 8.6.10 - Changes since 8.6.9: Drupal core - Remote code execution - SA-CORE-2019-003
* Fri Feb 08 2019 Joop Boonen - Update to 8.6.9 Patches are not now incorperated in the code - Changes since 8.6.8: [#2215857] followup by gaydamaka, timmillwood, alexpott, lauriii: Regression on Internet Explorer 11 [#3031128] by alexpott, TrevorBradley, indigoxela, catch, cilefen, larowlan, jibran: Update from 8.6.7 to 8.6.8 warnings - Drupal\\Core\\Extension\\Extension has no unserializer Revert \"Issue #2924201 by tim.plunkett, tedbow, larowlan, xjm, jibran, Kristen Pol: Resolve random failure in LayoutBuilderTest so that it can be added to HEAD\" [#2924201] by tim.plunkett, tedbow, larowlan, xjm, jibran, Kristen Pol: Resolve random failure in LayoutBuilderTest so that it can be added to HEAD
* Fri Feb 08 2019 joop.boonenAATTopensuse.org- Added Drupal patches https://www.drupal.org/project/drupal/issues/2215857 2215857-64.patch https://www.drupal.org/project/drupal/issues/3031128 3031128-3-41.patch
* Thu Feb 07 2019 joop.boonenAATTopensuse.org- Update to 8.6.8 - Changes since 8.6.7 [#2975539] by mondrake, alexpott, marcoscano, desierto: Changing machine name of image style leads to WSOD when loading widgets that used the old name [#2859315] by quietone, heddn, jhodgdon: SQL error from profile_fields when migrating d6 (or d7) to d8 without Profile module [#2443165] by davidwbarratt, amateescu, HOG, kostyashupenko, yched, Berdir, andypost, alexpott, tstoeckler, xjm: Drupal\\Core\\Entity\\EntityInterface\\ContentEntityStorageBase::doCreate() assumes that the bundle is a string [#2849074] by decafdennis, alexpott, zuuperman, AdamPS, sagesolutions, tucho, xjm: SiteConfigureForm overrides value from install profile [#3007716] by Sam152, kevin.dutra, jhedstrom, larowlan: Security update introduces breaking changes to content moderation [#2215857] by michielnugter, Lendude, gmercer, tim.plunkett, cferthorney, marabak, olli, ericmulder1980, TwoD, sanduhrs, stella, dww, nod_: Behaviors get attached to removed forms [#3017812] by ibustos, joachim: Language selector is immune to hook_entity_field_access in entity forms [#2900883] by larskhansen, GaëlG, kalyansamanta, Chi, tim.plunkett, Gábor Hojtsy, joachim: Wrong documentation of Drupal\\Component\\Plugin\\Derivative\\DeriverInterface::getDerivativeDefinitions() [#3027595] by amateescu, pmelab: Incorrect blacklist condition in WorkspaceManager [#2725259] by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, lauriii, catch, cilefen, Cottser: [regression] Table Drag handles no longer respond to up/down arrow keys Revert \"Issue #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, AATTcatch, AATTcilefen, AATTCottser, AATTlauriii: [regression] Table Drag handles no longer respond to up/down arrow keys\" [#2725259] by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, AATTcatch, AATTcilefen, AATTCottser, AATTlauriii: [regression] Table Drag handles no longer respond to up/down arrow keys [#2937073] by tim.plunkett, Saviktor, tedbow: Improve robustness of FieldBlockTest [#2973713] by quietone, Adita, etecjdo, apmsooner, mikeryan, gnuschichten, tstoeckler: cache_key source plugin configuration not documented [#2949555] by quietone, ankitjain28may: Correct the documentation on method UserMigrationClassTest [#3025685] by quietone: Add error msg to assertions in MigrateSourceTestBase [#3026840] by izus: Fix plural typo in workspaces field [#3024452] by kfritsche, hchonov, alexpott: DatabaseStorageExpirable:setWithExpireIfNotExists is not respecting expired [#2999908] by penyaskito: View more link in recipe cards is not fully translated [#3028819] by alwaysworking: Update username [#2916021] by d.olaresko, wengerk, Chi, xjm, dawehner, idebr: Update \"Running tests\" section in core.api.php [#2953995] by kjay, starshaped, rachel_norfolk, Vidushi Mehta, cferthorney, HAL 9000, Eli-T, markconroy, steveparks: Update the Umami Vegan Chocolate Brownie recipe [#3028608] by danharper, Eli-T, markconroy, Not Real: Umami - favicon [#2940027] by jmsosso: Add change record to AATTdeprecated for AccountInterface [#2995150] by msankhala, tim.plunkett: Command examples in core/tests/README.md are confusing and not executable [#3024184] by seanB, andrewmacpherson, Kristen Pol: Make the tabbing order match the visual reading order in MediaLibraryWidget [#2668416] by Krzysztof Domański, wheatpenny, Lendude, alexpott: Wrong assert in NodeTitleTest [#2981870] by Lendude, alexpott: Duplicate BrokenSetUpTest for BrowserTestBase [#2809513] by Lendude, brentgees: Convert AJAX part of \\Drupal\\responsive_image\\Tests\\ResponsiveImageFieldUiTest to JavascriptTestBase and the rest to BrowserTestBase [#3027574] by tuutti: SqlContentEntityStorage no longer update entities with certain (id) fields [#3026043] by Berdir: ConfigEntityBase::__sleep() serializes plugin instances if they were not previously initialized [#3021395] by quietone, alexpott: MigrateDrupalTestBase::migrateContent([\'translations\') does not migrate translations Revert \"Issue #3003238 by Sam152, amateescu, Berdir: EntityStorageException: Default revision can not be deleted in content_moderation_entity_revision_delete()\" [#2987418] by quietone, Kristen Pol: Rename MigrateUpgrade tests [#3003238] by Sam152, amateescu, Berdir: EntityStorageException: Default revision can not be deleted in content_moderation_entity_revision_delete() [#3026470] by alexpott, jrockowitz, Joseph Zhao: ArchiveTar is throwing fatal error Merged 8.6.7. Merged 8.6.6. [#3015992] by Krzysztof Domański, alexpott, larowlan: Not affecting spacing in PhpTransliterationTest [#2998769] by kiamlaluno, quietone, kkalaskar: AATTsee directive used in the wrong place outputs the wrong HTML markup [#3000677] by catch, Shane Birley, featherbelly, alexpott, larowlan: Fatal error after upgrade to 8.6x [due to regression in extension system] [#2955457] by pfrenssen, Chewie, unrealauk, alexpott, Pol: ConfigFactory static cache gets polluted with data from config overrides [#3020142] by mglaman, tim.plunkett: Test module no_transitions_css has invalid hook_page_attachments [#3007973] by tim.plunkett, lukasss, xopoc, bnjmnm, stompersly: Layout builder prevents the rendering of extra fields (like Links) on pages not using Layout Builder [#3024259] by Pol, alexpott: [PHP 7.3] Fix EnvironmentTest::providerTestCheckMemoryLimit() notice [#3023747] by mikelutz, heddn: D6 profile migrations assume stubs, which fail [#2978922] by brathbone, philipnorton42, msankhala, hardikpandya, alexpott, siliconmeadow: Improve batch_process() documentation [#2845975] by quietone, Jo Fitzgerald, aleevas, maxocub, Gábor Hojtsy: Migrate Drupal 6 user profile field value option translations [#2701829] by alexpott, andypost, Soul88, Graber, Eduardo Morales, dawehner, pingwin4eg, catch, Berdir, jibran, httang12: Extension objects should not implement \\Serializable [#2693727] by mikelutz, sanduhrs, CalebD, ajlib, Lendude, tstoeckler, catch: Limiting options for exposed Language filters causes errors and doesn\'t work for special languages
* Fri Jan 18 2019 Joop Boonen - Update to 8.6.7 - Changes since 8.6.6 This is a hotfix release for a regression affecting some Drush installations that was introduced by the fix for SA-CORE-2019-002. No other fixes are included.
* Fri Jan 18 2019 Joop Boonen - Update to 8.6.6 - Changes since 8.6.5 Drupal core - Third Party Libraries - SA-CORE-2019-001 Drupal core - Arbitrary PHP code execution - SA-CORE-2019-002
* Thu Jan 03 2019 Joop Boonen - Update to 8.6.5 - Changes since 8.6.4 [#3023402] by alexpott: \\Drupal\\Tests\\Component\\Datetime\\DateTimePlusTest fails on latest PHP7.3 build [#3001997] by Krzysztof Domańskii, scott_euser, alexpott: Transliteration a string containing an unknown character (e.g. 0x80) is not valid [#3018942] by welly, alexpott, jibran, Krzysztof Domańskii, floydm: Domain URL language detection - InvalidArgumentException: The user-entered string must begin with a \'/\', \'?\', or \'#\' [#3020902] by Berdir, alexpott: PostgresqlDateSql fails to serialize Revert \"Issue #2986725 by Mile23, devitate, alexpott: doctrine common 2.9 has moved reflection\" [#3022183] by wengerk, benjifisher: Fix BlockContentAccessHandlerTest::providerTestAccess wrong coverage by early return [#2984072] by vijaycs85, Lendude, ApacheEx, dawehner: System: Convert ErrorHandlerTest to phpunit [#3019706] by hchonov, alexpott, sheanhoxie, jibran, dawehner: Functional JS Tests are broken if XDEBUG_CONFIG is set as an env variable Revert \"Issue #3019706 by hchonov, jibran: Functional JS Tests are broken if XDEBUG_CONFIG is set as an env variable\" [#3021204] by maxocub: Remove maxocub from Migrate maintainers [#3019706] by hchonov, jibran: Functional JS Tests are broken if XDEBUG_CONFIG is set as an env variable [#2986725] by Mile23, devitate, alexpott: doctrine common 2.9 has moved reflection [#2939908] by kjay, steveparks, spitzialist, cferthorney, danharper, Eli-T: Add an article to Umami - Dairy-free chocolate [#3007439] by tim.plunkett, Wim Leers, xopoc: Layout builder renders Book navigation block on non-book pages [#2927768] by justinlevi, Lendude, pritish.kumar, Wim Leers, dawehner: Update RestRegisterUserTest to use the ResourceTestBase base class instead of the deprecated RESTTestBase [#3020550] by catch: Passing commands as a string to Process is deprecated in Symfony 4 [#3020579] by catch: TypeError: Argument 3 passed to Symfony\\Component\\HttpKernel\\Event\\FilterResponseEvent::__construct() must be of the type integer, string given [Symfony 4] [#2618606] by dawehner, rbayliss: Update.php - Reverse proxy settings not used [#2865344] by mpdonadio, Lendude, mbovan, organicwire, alexpott, jibran, jhedstrom, bobemoe, Berdir, larowlan: Exposed date filters \'empty\' and \'not empty\' are broken [#2974274] by mitrpaka, RumyanaRuseva, joachim: exception message for unrecognized source IDs in lookupDestinationIds() should have more detail [#2809305] by Upchuk, Pavan B S, Jo Fitzgerald, tim.plunkett, Berdir: Block Context assignment form element shows even if no options are available [#3018774] by xjm: hook_post_update_NAME() docs do not explain batching/ parameter [#3018539] by phenaproxima, rodrigoaguilera, alexpott: Media types cannot be created in the UI without JavaScript [#3018764] by Wim Leers: One test case in MediaUiFunctionalTest is not actually tested due to a duplicate key [#2998462] by AndyF, Baysaa, Siavash, tim.plunkett, millionleaves, fatmarker: Error adding Content Type Selection criteria or Context [#3016501] by govind.maloo, andrewmacpherson, markconroy: Writing style - Umami should be capitalised when it is used as a proper noun in English [#2916595] by phenaproxima, AdamPS, Wim Leers: File element discards attributes if #multiple [#2883260] by kiamlaluno, yogeshmpawar, msankhala, benjifisher, alexpott, bdlangton: Replace the schema example with one actually used from a module [#2883553] by govind.maloo, msankhala, seanB, Berdir, xjm, alexpott: Obsolete argument for hasPermission in node_node_access() [#3016011] by mikelutz, quietone, alexpott: Reroll all migrate dump files [#3017753] by mxr576, alexpott: MemoryBackend should validate the passed cids