All Versions
47
Latest Version
Avg Release Cycle
84 days
Latest Release
-
Changelog History
Page 2
Changelog History
Page 2
-
v8.5.4 Changes
June 09, 2020๐ Bug Fixes
- ๐ Fixing update errors that can happen (Update causes exception): #8729 (thanks mlocati)
- ๐ Fix certain occasions where editing pages would result in composer being unable to load blocks. Fixes error โUnable to load block into composerโ (Note: this will fix the issue for pages going forward, but existing pages with this error will not be resolved.)
โ Additional Functionality Present in 8.5.3 not described in previous release notes
๐ New Features (Note: some of these are present in 8.5.3)
- โ Added the ability to copy, paste, import and export style customizer settings at the page level (thanks mlocati)
- โ Added new public identifier property to express entries; you can use this identifier to relate entries to each other, or within custom API requests in such a way that it canโt be guessed.
- โ Added a new Group custom attribute type for use with Express.
- โ Added the ability to specify file storage locations at the file folder level (thanks marvinde)
- โ Added the ability to send private messages to all users in a specific group.
- CSV files exported from Express objects now containing association data.
- โ Added the ability to show/hide survey results in the survey block.
- โ Added a console command to export express entities.
- โ Added the ability to require associations be selected in Express forms.
- โ Running the reindex search all function will now reindex all Express entities and entries as well.
Behavioral Improvements (Note: some of these are present in 8.5.3)
- ๐ Improvements to code quality, speed and efficiency (thanks mlocati)
- ๐ Improvements to file importer code quality, better sanitization of problematic SVGs on upload. (thanks mlocati)
- ๐ Much improved address attribute logic and presentation for non North American countries/provinces/states โ see #7943 (thanks ahukkanen)
- We now refresh the file manager after changing properties (thanks marvinde)
Developer Improvements (Note: some of these are present in 8.5.3)
- โ Added coding style guideline sniffer using phpcs directly into the concrete5 console (thanks mlocati)
- ๐จ Refactored file importer, added support for pre and post processors (thanks mlocati)
- ๐ Generalizes IP Blocking, making it easier for developers to add support for blocking IPs based on custom actions (thanks mlocati)
- ๐ฆ Cleanup and improvements to the c5๐ฆpack command (thanks mlocati)
-
v8.5.3 Changes
June 04, 2020๐ New Features
- โ Added the ability to display the version status on the results page of a Page Search (thanks biplobice)
- โ Added the ability to log API requests via a Dashboard setting (thanks Kaapiii)
- โ Add phone and email to social links (thanks mlocati)
- ๐ The YouTube Video block now supports lazy loading. (Thanks MrKarlDilkington)
Behavioral Improvements
- ๐ Moves the custom block template selector from the advanced tab to buttons (thanks Mesuva)
- YouTube block: Delete 'show video infomation' option and change option name of showing related videos (thanks yuuminakazawa)
- Return a response object instead of exiting after saving a block (thanks mlocati)
- ๐ Fixed: We don't have to generate thumbnails if the image is in the private storage location (thanks hissy)
- ๐ Fixed potential errors that could result when adding invalid regular expressions into the Google authentication type whitelist/blacklist (thanks mlocati)
- ๐ When you uncheck โinclude attribute in search indexโ then the columns will be fully removed from the search indexing tables (thanks mlocati)
- โก๏ธ Update OAuth password check to use PasswordHasher class (thanks Mesuva)
- CKEditor: turn off 'Edit Source' before submit (thanks mlocati)
- ๐ Fix issue with sitemap generation in multilingual sites (thanks dimger)
- concrete5 handle the session garbage collection if a server isnโt going to do it (thanks mlocati)
- Select Multiple now works from within the file manager again (thanks deek87)
- โฑ When the user opens "Schedule Publishing" dialog, show a warning message if there is another scheduled version (thanks hissy)
- โ Add "Cancel Scheduled Publish" button in "Publish Pending" dialog (thanks hissy)
- ๐ Show a logout view to logged in users on the login page
- ๐ฒ More logging during OAuth attach/detach attempts.
- โ Added a unique page ID class to each page for page targeting (thanks Shahroq)
- โ Added a blacklist of file extensions to ensure that developers canโt easily add PHP to a list of uploadable file types (thanks mlocati)
- ๐ Improves to logout speed under certain circumstances (thanks kkyusuke)
- ๐ Calendar block height set to auto for better display in small width areas (thanks nakazanaka)
- ๐ Fixed: getUserAccessEntityObjects returns guest if no session found (thanks biplobice)
- The Refresh Token grant is now available for OAuth2 APIs (thanks kkyusuke)
- ๐ Use local date time format in CSV (thanks hissy)
- ๐ Faster and safer duplication of FAQ/Image Slider blocks (thanks mlocati)
- โ Added an exception in case there's no template file to render (thanks iampedropiedade)
- โ Added raw and samesite options to cookie (thanks iampedropiedade)
- ๐ Improve distinction between log severity icons (thanks JohnTheFish)
๐ Bug Fixes
- ๐ Fixed inability to save blocks or do much of anything on Chrome 83 (relates to Chrome 83 behavioral change) (thanks bikerdave)
- ๐ Fixing not sending password to RedisArray in session and cache drivers (thanks deek87)
- ๐ Fixed bug where unnecessary localized stacks are generated when adding stacks to a multilingual site (thanks hissy)
- ๐ Fixed: 8.5.2 - Chunked file uploads generate multiple files in the backend (thanks ahukkanen)
- ๐ Fix flat sitemap in the trash view (thanks hamzaouibacha)
- ๐ Fixed: Given a calendar event that was starting yesterday and ends tomorrow. It's a strange behavior if this event doesn't show up today in the calendars "events list" block (thanks core77)
- ๐ Fixed multiple issues with user groups (thanks deek87)
- Failed to upload avatar on user account page because of ccm_token error (thanks deek87)
- ๐ Fix file manager issue with number of items per page (thanks biplobice)
- ๐ Fixed: Thumbnails broken for storage locations outside web root (thanks hissy)
- ๐ Fixed: Unable to detach google account at My Account page due to null exception (thanks deek87)
- ๐ Fixed inability to move multiple pages at once in certain situations (thanks wordish)
- Unable to paste the screenshot into content block (thanks deek87)
- ๐ Fixed: Failing block validation denies any further access to that block if you cancel editing (thanks jlucki)
- ๐ Fix user-selector events firing more than once (thanks deek87)
- ๐ Fixed: CSS of Free-Form Layouts (or 'Custom Layouts') isn't loaded if the visitor is not logged in (thanks Ruud-Zuiderlicht)
- ๐ Fixed inability to insert a link in Rich Text editor custom attributes in the Dashboard context (thanks mlocati)
- ๐ Fixed XSS issue where admin could insert tags into image slider titles.
- ๐ Fix error caused by invalid sort direction.
- ๐ Build youtube embed url with the league url class to fix issues when malicious admin uses invalid URLs.
- ๐ Fixed: [Bug] Single pages lose their path if location is resaved in sitemap or composer. (thanks dimger)
- ๐ฑ [Fix] Image block hover option doesn't work for responsive images using the picture tag (thanks biplobice)
- ๐ Fixed error when the sortBy column isn't exists on the advanced search result (thanks biplobice)
- ๐ Fixed: Setup on Child Pages updates all pages of the type, not the type / template combination (thanks danklassen)
- ๐ Fixed: getUserAccessEntityObjects returns guest if no session found (thanks deek87)
- ๐ Fixed: The folder name is null when you create it with name '0' (thanks biplobice)
- ๐ Fix setting the emails subject a second time with an undefined variable (thanks Kaapiii)
- ๐ Fixed: 404 does not work in multi language case (thanks Kaapiii)
- ๐ Fixed: CKEDITOR errors shown in console (thanks mlocati)
- BC Fix: Make it so routes can echo their output (thanks mlocati)
- Fix token error on flag_conversation_message (thanks guyasyou)
- ๐ Fix document library block error when file node type is other than File or FileFolder (thanks biplobice)
- ๐ Fixed: Unable to save layout if it contains a Form block (thanks mlocati)
- ๐ Fix Fix initializing country/province link (thanks mlocati)
- ๐ป Avoid exception on express attribute form during certain edge cases (thanks biplobice)
- ๐ HackerOne security fixes (thanks mlocati)
- ๐ Fix error on submitting workflow request to a deleted user (thanks hissy)
- ๐ Fix height/width of edit folder permissions dialog (thanks deek87)
- โก๏ธ php 7.2 fix for updating a conversation message (thanks danklassen)
- Replying to a conversation does not clear editor (thanks danklassen)
- ๐ Don't check POSIX permissions of API public key on Windows (thanks mlocati)
- ๐ Fixing draggable zone on filemanager to only accept file/folder nodes (thanks deek87)
- ๐ Fixed: Currently in version 8.5.x sites that have been upgraded from 5.7 sites, you can no longer replace files (thanks deek87)
- ๐ Fixed upgrading from 5.7 under certain database circumstances (thanks mlocati)
- ๐ Fix wrong translatable strings placeholders (thanks mlocati)
- ๐ Fixed: Loading malformed html into a content block does some funky stuff (thanks mlocati)
- ๐ Fix H1 report 753567 (thanks hissy)
- Aliases are now shown in the Dashboard menu (thanks Ruud-Zicherlicht)
- ๐ฆ make
c5:package:uninstall --trash
not throw exception if there wasn't a problem (thanks nklatt) - ๐ Fix: Creating folders in the file manager doesn't create them in the right place
- ๐ Fixed: Deleting a Form block instance for an Existing Express Entity Form can delete the original entity (thanks dimger)
- Avoid error on save page list block options with empty custom topic node (thanks hissy)
- ๐ FIxed bug in alphabetizing multilingual sections (thanks biplobice)
- ๐ Fixed bug where public date/time page property wasnโt being properly validated if it was marked as required in a composer form (thanks matt9mg)
- ๐ Fixed potential YouTube block exception (thanks matt9mg)
- ๐ Fixed: select filterByAttribute can return all results (thanks matt9mg)
- ๐ Fixed order of parameters in some
implode()
methods (thanks shahroq) - ๐ Fixed PHP errors raised when calling View::action() method of an attribute (thanks mlocati)
- ๐ Fixed certain block type errors in advanced permissions and stacks (thanks mlocati)
- ๐ Fixed: CLI update fails if there is a package dependency such as MultiStep Workflow add-on
Developer Improvements
- ๐ Allow nested containers in custom theme layout presets (thanks jneijt)
- ๐ Allow the AuthorFormatter class to be overridden (thanks danklassen)
- โก๏ธ Update concrete5 Translation Library (thanks mlocati)
- Code cleanup and improvements (thanks mlocati)
- [Fix] Config command with env option (thanks biplobice)
- ๐ฆ Correctly set express entity package reference during import (thanks olsgreen)
- โ Added new
buildRedirect
method for easily creating redirects that honor the framework middleware from within controller methods (thanks mlocati) - โฌ๏ธ We now test installation and upgrades within Docker in our unit test suite (thanks mlocati)
- โก๏ธ Update punic to 3.5.1 (thanks mlocati)
- โ Add the ability to easily inject custom Config drivers (loaders/saves) and implement Redis drivers.
- ๐ Fix phpdoc of the \Concrete\Core\Form\Service\Validation::test() (thanks biplobice)
- ๐ Fixed bug where update process wouldnโt use the interface LongRunningMigrationInterface to increase timeout (thanks mlocati)
- โ Add ForeignKeyFixer and c5:database:foreignkey:fix CLI command (thanks mlocati)
-
v8.5.2 Changes
October 02, 2019๐ New Features
- You can now control the number of results in the file manager from the file manager directly without loading the advanced search dialog (thanks marvinde)
- You can now delete all entries from an existing Express object without deleting the object.
- โก๏ธ Update CKEditor from 4.11.1 to 4.12, add Placeholder plugin (thanks mlocati)
- โ Add the ability for each Express Form block to have its own from address (thanks dimger)
- โ Added the ability to set a background color for thumbnails and for use with the image editor (thanks marvinde)
- โ Added the ability to search attributes when adding attributes to the page composer form (thanks iampedropiedade)
- The Page Attribute block can now use custom templates (thanks danklassen)
- โ Add GUI to configure trusted headers received by a proxy (thanks mlocati)
- โ Add dashboard page to change database character set / collation (thanks mlocati)
- ReCaptcha is now included as a captcha option in the core (thanks edbeeny and mlocati)
- You can now include page aliases in searches in the Dashboard advanced page search (thanks HamedDarragi)
- ๐ Allow email sending enable/disable from the dashboard (thanks biplobice)
- ๐ง Make it configurable whether or not to ignore page permissions for RSS feeds (thanks hissy)
- โ Added the ability to show captions by default for the YouTube block (thanks ahukkanen)
- โ Added a new install theme console command (thanks AdamBassett)
Behavioral Improvements
- โ Add MySQL version and SQL_MODE to environment information (thanks mlocati)
- โ Removed the extraneous exception stack trace when the MySQL connection fails during installation (thanks mlocati)
- โ Added support for right-to-left languages in the concrete5 translate UI (thanks mlocati)
- ๐ Fix error where sitemap panel would show up even if the user has no access to add pages or to the sitemap.
- ๐ Improved uniformity between search interfaces in the Dashboard and dialogs for things like files, pages. Miscellaneous display bug fixes for search interfaces.
- โ Add the author column on express entries CSV export (thanks biplobice)
- โ Added file read route to the rest api (thanks deek87)
- ๐ Use the HTTP 303 code for downloading files instead of HTTP 302 (thanks dimger)
- Simplify the error message when copying a file to folder (thanks mlocati)
- โ Added Choose New File to the top of the file selector menu to help users confused by the โReplaceโ option further below (thanks mlocati)
- If the form redirects to a thank you page, pass the entry id so that the page can interact with the entry if desired. (thanks JeffPaetkau)
- We now separate titles and content of installation errors if you encounter them (thanks mlocati).
- In the desktop draft block, deleting a draft now no longer redirects you to the home page (thanks hamzaouibacha)
- ๐ Improved reliability when uploading large files into the file manager (thanks mlocati)
- RSS feed URL slugs can now have hyphens in them (to match the behavior of other concrete5 URL slugs) (thanks bikerdave)
- โ Added rel=noopener noreferer to different places in the core where we link to external pages, enabling better process management (thanks dimger)
- โ Added Twitch Social Link (thanks core77)
- ๐ฒ Composer and block editing will no longer log you out while you are editing for a long period of time (thanks mlocati)
- ๐ง Remember me 2 weeks value is now configurable (thanks iampedropiedade)
- Routing system now handles response objects returned by any controller
on_start()
methods (thanks mlocati) - โ Add a config key to support script-specific locales (thanks hissy)
- โ Added the ability to disable checking for core and package updates when using concrete5 via composer (thanks mlocati)
- ๐ Improvements to the display of the feature block icon selector (thanks shahroq)
- โก๏ธ PageTypeDefaults::SetupOnChildPages: Make Update forked blocks optional (thanks HamedDarragi)
- โฌ๏ธ Reduced the number of errors Doctrine complains about when inspecting the mapipng information for the core entity classes (thanks macserv)
- ๐ Spelling errors fixed in certain error messages (thanks edbeeny)
- ๐จ Set quoted-printable encoding for outgoing emails for better compatibility (thanks mlocati)
- ๐ Improvements to how the My Account menu was displayed in certain themes (thanks mlocati)
- Don't ask to preserve old page path of external URLs (thanks mlocati)
- When creating external links, the URL slug we generate is now based off the name of the link instead of the link (thanks dimger)
- ๐ Better localization in edit mode of calendar, by including localized version of moment.js (thanks mlocati)
- Brought back the ability to drag a file immediately into the file manager and have it begin uploading (Thanks mlocati)
- โ Add asset version number to cache bursting query string (thanks mnakalay)
- ๐ Show only the message when we have in case of UserMessageException (thanks mlocati)
- ๐ Fixed - SEO issue: tag ignores any actions of page/block controller (thanks hissy)
- Attribute controllers can now define the โNo Valueโ text (thanks mlocati)
- โฌ๏ธ Reduced size of bundled bootstrap libraries; removed missing references to glyphicon font file
๐ Bug Fixes
- ๐ Fixed bug where XSS could be passed through to the select form helper under certain conditions.
- Fixed bug when using the document library when MySQL has ONLY_FULL_GROUP_BY enabled (thanks dimger)
- ๐ Fixed bug where additional cancel and submit search buttons were showing up in advanced search dialogs.
- โฌ๏ธ "Order Entries" page is not installed on upgrading from version 7 (thanks hissy)
- ๐ Fixed buggy behavior when searching by associations in Express.
- ๐ Fixed: Search Presets in dialog not actually submitting (thanks deek87)
- ๐ Fixed: Bugs with search presets not being deletable, searching JS errors when working with search presets (thanks deek87)
- ๐ Fixed bug with autoplay not starting in YouTube block due to https://developers.google.com/web/updates/2017/09/autoplay-policy-changes (thanks edbeeny)
- ๐ Fixed bug when Express form sends notification with an image/file attribute and itโs not filled out (thanks a3020)
- โ Add new Italian Province: South Sardinia (thanks mlocati)
- ๐ Fix error where adding an image or a file to composer would complain about it not being present, even if it was.
- ๐ Fixed error where file usage dialog did not work with files linked in the content block (thanks jeverd01)
- ๐ Fixed bug where navigating directly to dispatcher.php would throw PHP errors.
- ๐ Fixed error where global password reset didnโt require typing the confirm code.
- ๐ FIxed inability to unapprove a page version in the versions menu (thanks kzn-a)
- ๐ Fixed: Password Requirements dashboard page was not installed via 8.5.0 & 8.5.1 fresh install (thanks katzueno and hissy)
- ๐ Fixed bug where clicking publish on a composer page draft could still create an extra version in some cases (thanks ahukkanen)
- ๐ Fixed: ccmAuthUserHash cookie and "Stay signed in" functionality allows user impersonation if hash table is leaked (thanks mlocati)
- โ Remove Guest from "Group to enter on registration" options (thanks hissy)
- ๐ Fixed: Copy page does not change the mpRelationID of the new page (thanks 1stthomas)
- ๐ Fixed error with user attribute not calling its method on the correct user object, leading to strange results (thanks deek87)
- ๐ Fixed: If you dropped an image into the rich text description of an FAQ entry, when you went back to edit the entry, the image didn't show up (thanks JeRoNZ)
- ๐ Fixes error where Download file does not show up for files that arenโt images (thanks MrKarlDilkington.)
- ๐ Fixed: $c->getPageWrapperClass() removes all other specified classes (thanks HamedDarragi)
- ๐ Fixed: UI: Can not select topic in large tree on Page Search (thanks hissy)
- ๐ Fixed error in Redis cache backend: Password set in config is not sent Redis connection process (thanks HamedDarragi)
- ๐ Fixed untranslated text in the Event List block (thanks iampedropiedade)
- ๐ Fix showing empty error message when a problem occurred using Setup on Child Pages (thanks HamedDarragi)
- ๐ Fixed error where bumping the concrete5 version number without changing a version_db number wouldnโt re-trigger an upgrade.
- ๐ Fixes issue with broken links to files in textarea(richtext) attribute (thanks dimger)
- Check $search_path is set and string in search block view (thanks r-kumazaki)
- ๐ Fixed errors in full page caching under multisite setups. (thanks ahukkanen)
- ๐ Fixed errors in full page caching with blocks that used special parameters โ the page was saved properly but it would replace the contents of the pages without parameters (thanks ahukkanen)
- ๐ Fixed: 8.5.2RC1 - Adding external link with URL "/" breakes the whole site (thanks mlocati)
- ๐ Fix error on delete user who has express enties (thanks hissy)
- ๐ Fix: calendar feed parameter and validation (thanks myq)
- ๐ Fixed: Calendar events displayed only on starting month when they span multiple months (thanks cirdan)
- ๐ Fixed bug with rich text editor not exporting content properly (thanks ahukkanen)
- Fixed bug where we displayed an error when browsing directly to /dashboard/system/environment/entities/update_entity_settings (thanks mlocati)
- ๐ Fixed bug where users who first created would be deactivated if automatic deactivation based on last login were turned on and they hadnโt yet logged in yet.
- ๐ Fixed: blocks added to stacks that use JavaScript or CSS assets in their view templates were not working when the block was cached.
- ๐ Fixed errors in localization class not including the Config class (thanks haeflimi)
- ๐ Fixed login error complaining about Groups being a reserved word under Percona MySQL 8.0 (thanks macserv)
- ๐ Fixed issue where in page list block, missing input validation results in mysql-error (thanks krebbi)
- ๐ Fixed: Default Express Entry List search functionality does not allow for searching for multiple fields simultaneously (thanks suuuth)
- ๐ Fixes bug where Express form answers were emailed in a random order, rather than in the order they displayed in the form (thanks joe-meyer)
- Login page will now no longer let you render parts of authentication type forms if those types are not enabled.
- ๐ Fixed bug where images or files added to front-end forms wouldnโt be included in the email notification about those forms.
- ๐ Fixed bugs and cleaned up code in the Workflow classes (thanks mlocati)
- Prevent leading/trailing commas from triggering errors in Legacy Form block (thanks MrKarlDilkington)
- ๐ Fixed bugs when arranging stack proxy blocks in pages as a non-super user with advanced permissions enabled (thanks mlocati)
- ๐ Blocks no longer remain in their target area if there was something about the move operation that failed (thanks mlocati)
- ๐ Fixed multiple bugs when working with the HTML Upload interaction type in the image/file attribute (thanks mlocati)
- ๐ Fix the layout of the search fields in "Page Report" page (thanks shahroq)
- ๐ Fixed: Migration to ut8mb4 incomplete due to problems with schema (thanks mlocati)
- ๐ Fixed bug where the hovering image in a file manager window didnโt disappear when clicking on the image record (thanks mlocati)
- ๐ Fix inability to connect to marketplace on sites behind SSL when that site is also behing a proxy like Cloudflare (thanks mlocati)
- ๐ Fixed: All Day Events are not determined correctly (thanks haeflimi)
- ๐ Fix calendar block issues with all-day events (thanks biplobice)
- ๐ Fixed inconsistencies when using Ctrl key to deselect images in the file manager (thanks mlocati)
- ๐ Fix some issues installing content with the content XML format by disabling request cache during XML installation (thanks mlocati)
- ๐ Fixed Issues when removing Custom Workflow Types (thanks deek87)
- ๐ Fixed Issues when adding Workflows that have custom workflow types. (thanks deek87)
- ๐จ Refactored Workflow Types Class to use newer code. (thanks deek87)
- ๐ Upgrading jQuery UI to 1.12.1 and downgrading jQuery to 1.12.2 to fix security issue (
- ๐ Fixed bug when clicking on folders in Document Library (thanks dimger)
- ๐ Fixed: When you add a datetime attribute into the search form, you'll get a JavaScript error.
- ๐ Fixed: When paging through versions in stacks or on a page, clicking version doesn't show menu
- ๐ Fixed errors when sorting attributes, inability to sort attribute sets as a regular administrator and not the super user (thanks mlocati)
- ๐ Fixed: When opening existing repeated events, selected days were not selected.
- ๐ Fixed: Unpublished repeated events get published after deleting part of events.
- ๐ Bug fixes when updating a site from 5.7 (thanks deek87, mlocati)
- ๐ Fixed warnings when sending mail with the intl extension enabled (thanks mlocati)
- ๐ Fixed entity not found exception when retrieving author of a file when the author had been deleted (thanks mlocati)
- ๐ Fixed StorageLocationFactory::fetchByName should return an instance (thanks hissy)
- Miscellaneous cleanup in URL Resolver classes (thanks mlocati)
- ๐ Fixed null pointer exception when user attempted to view calendars in the Dashboard but didnโt have permission access to the first calendar retrieved (thanks kaktuspalme)
- ๐ Bug fixes when upgrading from previous versions of concrete5 (#7837) (thanks mlocati)
- ๐ Fixed bug where account menu was floating underneath the concrete5 toolbar (thanks mlocati).
- ๐ Fixed problems overriding the Express form context registry (thanks ahukkanen)
- ๐ Fix block templates that edit the scope variables within the block view (thanks ahukkanen)
- ๐ Fixed bug where default contact form in Elemental wasnโt set to store its form data in the backend, only to email it.
- ๐ Fix H1 Report 643442 (thanks hissy)
Developer Improvements
- โ Add 'noCountryText' option to Form::selectCountry() (thanks mlocati)
- Check that LIBXML constants are defined (thanks mlocati)
- ๐ Render jQueryUI dialog buttons in concrete5 style (see #7588 for example) (thanks mlocati)
- โ Add CkeditorEditor::outputEditorWithOptions (thanks mlocati)
- โก๏ธ Updated Punic library to 3.4 (thanks mlocati)
- โ Added
app()
global helper method to return an instance of the Application object (thanks rikzuiderlicht) - โก๏ธ Update phpseclib from 2.0.13 to 2.0.21 (thanks mlocati)
- โก๏ธ Updated Bootstrap to 3.4.1 to fix XSS issue.
- Added two new events:
on_page_alias_add
andon_page_alias_delete
(thanks faker-ben-ali) - โก๏ธ changing instructions order to send collection version with updated data when triggering approve page version event (thanks faker-ben-ali)
- โ Add new DestinationPicker form widget to enable users to specify an object to link to, and get a nice widget instead of having to paste a URL (Thanks mlocati)
- โก๏ธ Update composer.json to add PDO ext as dependency for project (thanks gavinkalinka)
- โฌ๏ธ Upgrading Spectrum color picker color palette library to 1.8.0 (thanks mlocati)
- ๐ Miscellaneous code cleanup and php documentation (thanks mlocati, biplobice, deek87, concrete5russia)
- โก๏ธ Update IPLib from version 1.6.0 to version 1.9.0 (thanks mlocati)
- โ Add native lazy loading and JavaScript lazy loading support to the "html/image" service (thanks MrKarlDilkington)
- โ Added optgroup functionality to the selectMultiple form helper method (thanks mlocati)
- ๐ฎ Force attribute keys to be in one set only during import (thanks mlocati)
-
v8.5.1 Changes
April 03, 2019๐ Feature Updates
- โ Added the ability to filter logs by time (thanks biplobice)
Behavioral Improvements
- ๐ Improved translation of user logging in multilingual environments. (Thanks katzueno )
- ๐ Improvements to code quality and reduction in suppressed errors (thanks mlocati)
- ๐ improvements to using multiple user selectors on a page; miscellaneous bug fixes to user selector (thanks haeflimi)
- ๐ improvements to installation on a cluster where site home page ID may not be 1. (Thanks mlocati)
- ๐ Improved file size of app.css; removed unnecessary and broken CSS.
- โ Simplify the warning when the database does not fully support utf8mb4 (thanks mlocati)
๐ Bug Fixes
- ๐ Fixed error where external form actions were not working.
- ๐ Fix Exception already used in CharsetCollation\Manager (thanks mlocati)
- ๐ Fixed error where move/copy didnโt work in site map flat view (thanks biplobice)
- ๐ Fix resuming copy language tree operation (thanks mlocati)
- ๐ Fixed inability to run some user bulk actions in the Dashboard.
- ๐ Fixed JavaScript error when changing default calendar colors in the Dashboard.
- ๐ Fixed error in API where authenticated requests could pass through to read any API route.
- ๐ Fix error on package uninstall while remove the package directory is checked (thanks biplobice)
- Hide publish now button on versions of pages when user doesnโt have permission to publish (thanks hissy)
- ๐ Make sure custom thumbnails have upscaling enabled (#7697)
-
v8.5.0 Changes
March 14, 20198.5.0
๐ Feature Updates
- File Storage Location improvements: added the ability to search by file storage location, added file storage location to the file menu, allows changing file storage in bulk using a progressive operation, prevents deletion of file storage locations if they have files (thanks marvinde)
- โ Added the User Selector attribute to the core, enabling the selection of users for pages, files and Express objects (thanks haeflimi)
- ๐ง Much improved logging support: more actions are logged, and you have the ability to specify what log levels you want to keep/discard in the Dashboard. Additionally, Monolog Cascade support means granular logging configuration is available in the PHP config.
- โ Added date modified to express entries (thanks deek87)
- โ Added โAuthorโ as a property to Express โ the users who create express entries are tracked. Added form field for author property as well.
- โ Added the ability to specify an HTML Input vs Entry Selector vs. Select2 search autocomplete for association selecting in the Dashboard (thanks hissy)
- โ Added the ability to filter the Express Entry List block at the block level before the data hits the page.
- Express Entry List block can now be filtered by associations in advanced search on the page (thanks hissy)
- You can now filter block types by searching them when adding blocks in stacks (thanks mlocati)
- โ Added preview images when mousing over images in the file manager (thanks haeflimi)
- โก๏ธ Updated CKEditor from 4.9.1 to 4.10.0 (thanks MrKarlDilkington)
- โ Added the ability to search a site by any locale in the local selector on multilingual sites (thanks mlocati)
- โ Added a page changes report that lets users export a full list of versions that have been created during a particular time period.
- 0๏ธโฃ Nascent support for the upcoming REST API (defaulted to off.)
- โ Add ability to configure password requirements in a new Password Options Dashboard page.
- โ Add ability to keep users from reusing the same password.
- โ Add ability to automatically log users out after a period of inactivity.
- โ Added a Dashboard page to control Automated Logout settings that were previously only available by editing PHP config files directly (thanks mlocati)
- โ Added ability to automatically log out all signed-in users from the Automated Logout page.
- โ Added a dashboard page to configure trusted proxy IPs (thanks mlocati)
- ๐ Show URL of selected page in sitemap selector (thanks mlocati)
- โ Added an external authentication type based on OAuth2 authorization, allowing one concrete5 site to act as the authentication provider for another.
- โ Add support to generate animated GIF thumbnails (Requires Imagick) (thanks mlocati)
- โ Add โScheduledโ as an option for page searches (thanks deek87)
- โ Add the ability to automatically deactivate user accounts that receive many failed login attempts
- You now can control whether CSV exports contain a BOM with an Export Options Dashboard settings page (thanks mlocati)
- โ Added ability for YouTube videos to skip setting a cookie (thanks HamedDarragi and tigerxy)
Behavioral Improvements
- ๐ We have removed the spaces from URLs generated by the topic list block for improved display (thanks JackVanson)
- We now show the types of Express entities being viewed in the Dashboard page header (thanks hissy)
- ๐ Show errors when displaying Ajax dialogs fails (thanks mlocati)
- We now remember the state of both sitemaps in the 2-up sitemap interface, instead of just 1 (thanks mlocati)
- ๐ Split install steps in smaller chunks for better performance (thanks mlocati)
- SVG images in the image block can now be resized in the image block (thanks dimger)
- When entities that own other entities are deleted in Express their child entities will also be deleted.
- ๐ Improvements to the stack panel: you can now drag the entire row (instead of a small handle) and you can click an arrow to expand/collapse the stack (thanks mlocati)
- My Account now honors user attribute sets (thanks marvinde)
- Registration now honors user attribute sets (thanks marvinde)
- โ Added the ability to sanitize uploaded SVG files (thanks mlocati)
- ๐ Improved performance of large CSV exports (thanks mlocati)
- Express Entry Detail block now modifies the title of the page when itโs rendering a detailed express entry (thanks hissy)
- ๐ Improvements to drag performance and experience in sitemap (thanks mlocati)
- Miscellaneous improvements to editing external links
โ #7004 (thanks mlocati) - When deleting an element (express entity, file, page, site, user), the associated row in the index table are automatically deleted (thanks mlocati)
- ๐ป Uploading files via the Your Computer dialog in the File Manager now has chunking support (thanks joemeyer)
- ๐ Fixed error where โstay signed in for two weeksโ didnโt work (thanks Xianghar)
- Send a JSON error response only if the client is requesting a JSON response (thanks mlocati)
- โก๏ธ When showing changelog updates for packages we now read from CHANGELOG.txt and CHANGELOG.md if they exist (thanks mlocati)
- You can now view SVG images in the file manager like other image files (thanks mlocati)
- โ Remove frameborder attribute on YouTube block and use CSS border for W3C validation (thanks marvinde)
- ๐ Show different text for aliases and external links in removal confirmation (thanks mlocati)
- ๐ New and existing databases will be updated to utf8mb4 โ adding emoji support! (thanks mlocati)
- โ Add a version-specific querystring parameter to URL local assets based on core version or the package version (thanks mlocati)
- ๐ Improvements and consolidation of different libraries used to upload files (thanks mlocati)
- โ Added CKEditor Emoji plugin (thanks mlocati)
- ๐ Allow sending the registration notification to multiple email addresses (thanks marvinde)
- ๐ Fixing issue with Image Editor not adding crossOrigin (thanks deek87)
- ๐ Moving Delete all channels button to header to remove ambiguity (thanks joemeyer)
- ๐ Use translated text when dislaying checkbox labels with the checkbox custom attribute (thanks mlocati)
- ๐ Fixed bug where deleted pages could break uses of the page selector component that referred to them (thanks Ruud-Zuiderlicht)
- We use less memory when uploading and resizing large images in the file manager (thanks mlocati)
- ๐ Better validation against unexpected input when filtering page list blocks and page title blocks by months and years (thanks hissy)
- ๐ Better error checking against remote files uploaded in the file manager (thanks mlocati)
- ๐ Keep animations when ConstrainImageProcessor resizes animated GIFs (only works if youโre using Imagick support in PHP) (thanks mlocati)
- 0๏ธโฃ Return the default 404 error page if a feed can't be found (thanks mlocati)
- ๐ You can now merge social links as well as append them in config (thanks mesuva)
- ๐ We force MyISAM database tables for the PageSearchIndex now only if the MySQL version of InnoDB tables doesnโt support it (thanks mlocati)
- Downloading multiple files with the same name downloads only one (thanks marvinde)
- โ Added the ability to replace a page with another page (thanks mlocati)
- โก๏ธ Update CKEditor from 4.10.0 to 4.11.1 and add Auto Link plugin (thanks MrKarlDilkington)
- ๐ Fixed workflow emails showing irrelevant dates in some cases (thanks katzueno)
- ๐ Fixed: Group Combination returns wrong group combination if there is another entity contains same group combination (thanks deek87)
- ๐ Improved speed when adding files to file sets because we no longer refresh thumbnails on every add to file set (thanks mlocati).
- ๐ Fixed incorrect flag showing if a page is aliased from one locale to the next (thanks Ruud-Zuiderlicht)
- ๐ Fixing errors in UserList::filterByInAnyGroup (thanks deek87)
- ๐ Fix issue where some console commands didnโt have a description even though it had been set in the command class (thanks mlocati)
- ๐ Fixed: When using inline blocks, I can edit other inline blocks (thanks hissy)
- (Try to) redirect to the newly generated thumbnail if it's the requested one (thanks mlocati)
- Dashboard page title tags are now translated properly (thanks mlocati)
- Stack In Dashboard leave pop-up menu when adding a content block (thanks mlocati)
๐ Bug Fixes
- ๐ Fixed inability to delete conversation messages from dashboard (thanks hissy)
- ๐ Fixed: Unpublished scheduled page gets published when there is a new version with schedule (thanks deek87)
- ๐ Fixed: Avoid displaying an empty message when forcing exit edit mode (thanks mlocati)
- ๐ Fixed built-in limit of 1920x1080 on some uploads (thanks mlocati)
- ๐ Fixed: Automatically resize uploaded images" breaks PNG semi-transparency (thanks mlocati)
- ๐ Fixed: User with 'Approve Changes' permission is not able to approve content in global areas (thanks mlocati)
- ๐ Fixed: Avoid error on getting users of group permission access entity when group has been deleted (thanks hissy)
- ๐ Improved page version publishing date support to ensure that versions cannot overlap (thanks mlocati)
- ๐ Fix too many results in PagerAdapter::getSlice (thanks mlocati)
- ๐ Fixing Issue when deleting users who created other users (Thanks deek87)
- ๐ Fixed bug where a session cookie is always created in a multilingual site, even when it shouldnโt be required (thanks marvinde and mlocati)
- ๐ Fixed poor performance when running the search indexing job on large sites where areas are set to use the blacklist indexing method (thanks ahukkanen)
- ๐ Fixed: Trying to add a larger number of files to a file set in bulk leads to an out of memory error (thanks mlocati)
- ๐ Fixed errors and buggy behaviors in sitemap overlay dialog (thanks marvinde)
- ๐ Fixed minor display issues with the page version listing dialog/panel (thanks marvinde)
- ๐ Fixed When the Zend I18N component loads language files with wrong or missing plural rules (thanks mlocati)
- Correctly detect if sendPrivateMessage returned an error (thanks mlocati)
- ๐ Fixed
Call to a member function getTimezones() on null
on editing profile (thanks mlocati) - โฑ MIscellaneous bug fixes with scheduled pages and 404 experience (thanks deek87)
- ๐ Fix ParentPageField search field when page is no (more) available (thanks mlocati)
- ๐ Fixed bug where editing an express entry in the Dashboard doesnโt re-show the entry form when validation is failed (thanks ahukkanen)
- ๐ Fixed inability to add page type composer output control blocks if you were not the super admin but you still had access to page type defaults (thanks hissy)
- ๐ Fixed: Single::addGlobal can create the same single page repeatedly (thanks hissy)
- ๐ Fix resizing images on import when only max height is set (thanks mlocati)
- ๐ Fixed: Thumbnail error takes down Dashboard completely (thanks mlocati)
- ๐ Fixed: we now check more appropriate permissions when checking to see if users have permissions to edit stacks (in advanced permissions) (thanks mlocati)
- ๐ Fixed: Deleting attributes used with customized results in advanced search leads to an error (thanks mlocati)
- ๐ Fixed: RSS Feed can not be filtered by multilingual parents (thanks mlocati)
- โ Add CSRF validation token to Copy Languages (thanks mlocati)
- ๐ Fixed bug when the site id contained in the ConcreteSitemapTreeID cookie does not match a valid site (thanks marvinde and a3020).
- ๐ Fix an error when selecting trash or system pages as the parent page on page search (thanks deek87)
- ๐ Fixed: Old draft pages of multilingual site upgraded from 5.7.5.13 to 8.4.x gets error (thanks deek87)
- ๐ Fixed bug where users could see certain aspects of others users private messages (thanks mlocati)
- โก๏ธ Patch Zend HTTP with security update to fix https://framework.zend.com/security/advisory/ZF2018-01 (thanks mlocati)
- ๐ Fixed: Currently when using a userSelector if you search for a user or load a new page and try to use the dropdown to select user(s). The option will disappear. (thanks deek87)
- ๐ Fixed: Page Selector with pagination doesn't work (thanks marvinde)
- ๐ Fixed bug where exporting forms might put the form data in the wrong columns.
- ๐ Fixed: Page version menu doesn't close automatically (thanks joemeyer)
- ๐ Fixed: Option for the multilingual canonical URL is not respected (thanks 1stthomas)
- ๐ Fixed: #7152 (thanks mlocati)
- ๐ Fixed: Block is not being rendered using custom template after editing when custom template was set programmatically (thanks fabian)
- ๐ Only parse $_SERVER[โargvโ] on the command line (thanks mlocati)
โก๏ธ Developer Updates
- ๐ Completely new routing component with a much nicer syntax for creating custom routes to closures, controllers and other classes, with full support for route requirements, HTTP verbs and much more. (fully backward compatible)
- ๐ concrete5 now supports PHP 7.3
- โ Adding Redis as a Session and Cache handler (thanks deek87 and concrete5 Japan)
- โ Added the ability to rescan files via a console command.
- ๐ Much improved console command, including support for progress bar, Laravel-like syntax definitions and more.
- ๐ Improve ability to configure and extend concrete5 session.
- ๐ New memcache session handler. See #7258 for configuration information.
- โ Added an option to control whether or not to display parent page in AutoNav (thanks hissy)
- ๐ Allow custom class loading from the package for a custom permission key (thanks biplobice)
- Trigger event when the display order of a page changes (thanks a3020)
- ๐ Improved SiteLocaleSelector: show Country in addition to Language, and added new selectMultiple method to the class (thanks mlocati)
- โ Add a config value to toggle the generator meta tag (thanks marvinde)
- โฌ๏ธ Upgrade Imagine image manipulation library from 0.7.1 to 1.0.0 (thanks mlocati)
- ๐จ Refactored certain old tools files into routes, views and controllers (thanks mlocati, marvinde)
- โ Added the ability to automatically include CSS files when adding/editing blocks by including an auto.css file in the block folder (thanks mlocati).
- ๐ฑ Image Slider block - remove old CSS and JS assets code (thanks MrKarlDilkington)
- ๐จ Refactoring and code improvements to CookieJar service (thanks mlocati)
- ๐ Improved code quality and removal of PHP NOTICE errors (thanks mlocati, a3020)
- Tons of new docblocks added to core classes (thanks mlocati)
- ๐ Fix docblocks in Number service (thanks a3020)
- ๐ Improve installation detection by allowing {$env}.database.php
- Let sitemap event listeners modify the sitemap data (thanks mlocati and a3020)
-
v8.5.0.RC2
February 26, 2019 -
v8.5.0.RC1
February 07, 2019 -
v8.4.5 Changes
February 26, 2019๐ Bug Fixes
- ๐ Fixes a vulnerability which permitted authenticated users to view the contents of arbitrary messages sent through the My Account section.
-
v8.4.4 Changes
January 10, 2019๐ Feature Updates
- ๐ Improvement for compliance and GDPR: Storage of form data submitted through the form block is now optional. It is a new checkbox in the block (thanks Faker Ben Ali)
Behavioral Improvements
- ๐ Much improved performance in the Stacks panel menu for sites with a lot of stacks โ stacks lazily load the blocks within them.
- Dashboard Welcome Page: hides the "Customize" button if the user does not have permission to edit the page content (thanks marvinde)
- ๐ Allow disabling of Sitemap button in CKEditor concrete5link core plugin (thanks joemeyer)
- ๐ Fixed W3C validation errors in Elemental (thanks MPagel)
๐ Bug Fixes
- ๐ Fix XSS error when certain error messages could contain HTML (thanks mlocati)
- ๐ Fix error where EditorServiceProvider was complaining about array_merge not being a valid array
- ๐ Fixed: GDPR - ConversationMessages are not deleted when a user is deleted (thanks marvinde)
- ๐ Fix typo in list of CKEditor plugins ('applying') (thanks a3020)
-
v8.4.3 Changes
September 24, 2018Behavioral Improvements
- The word โActionโ is now properly localized in in-page notifications (thanks mlocati)
- The icon of external links now more clearly distinguishes them from page aliases (thanks mlocati)
- Create collection handle when aliasing the homepage (thanks mlocati)
๐ Bug Fixes
- ๐ Bug Fix: Tags block - support mixed case tag names when setting selected tag class (thanks MrKarlDilkington)
- ๐ Fixed bug where archived notification alerts were showing up in Waiting for Me.
- ๐ Fix PHP 7.2 count error in Calendar Dashboard Colors system page (thanks altinkonline)
- ๐ Fix Page::movePageDisplayOrderToSibling() when working with aliases (thanks mlocati)
- ๐ Fixed incorrectly returning object instead of text string when working with textarea attributes under some circumstances.
- ๐ Fixed Exception in Marketplace.php after site/project has been removed from community account
- ๐ Fixed accidentally deleting all FileSets when deleting a user (thanks deek87)
- ๐ Fix alternative canonical URL not installing properly when set during installation (thanks a3020)
- ๐ Fixed: Deactivating users in bulk fails in 8.4.2 when a workflow is attached to the permission.
- ๐ Fixed Express Entry association view on owned element when creating elements showing a list of all entries instead of none.
- ๐ Fixing permission checker on image_uploading / thumbnail options page (thanks deek87)
- ๐ Fix package installer not checking dependencies on other packages (thanks acohin)
- Avoid errors in editing express entry detail block on PHP 7.2 under certain circumstances (thanks hissy)
- ๐ Fixed: Datepicker options has no effect in 8.4.2 (thanks alexeytrusov)
- Require pagination asset from express entry list block (thanks hissy)