Drupal

Subscribe to Drupal feed
Updated: 4 days 8 hours ago

drupal 8.6.7

Wed, 01/16/2019 - 18:42
Release notes

This is a hotfix release for a regression affecting some Drush installations that was introduced by the fix for SA-CORE-2019-002. No other fixes are included.

Sites on 8.5.x or earlier should update immediately to Drupal 8.5.10 instead, and plan to update to the latest 8.6.x release before May 2019.

If you continue to experience issues with Drush following this update, try the following:

  1. Run update.php to ensure database updates are completed and to clear the site cache safely without Drush.
  2. Check the site status report to confirm that 8.6.7 was successfully installed.
  3. Test Drush again. If issues persist:
    • Rename your drush CLI file back to drush.phar.
    • Create a symlink named drush pointing to drush.phar

Alternately, try installing Drush with Composer instead of from a phar.

Known issues Download Size md5 hash drupal-8.6.7.tar.gz 15.72 MB cd3d0c9ad1d9e976eb589a963e427388 drupal-8.6.7.zip 25.35 MB 1afd2d955bbbf4ea7cd4d0023c01f616 Last updated: 16 Jan 2019 at 23:43 UTCOfficial release from tag: 8.6.7Core compatibility: 8.xRelease type: Bug fixesShort description: This is a patch release of Drupal 8 and is ready for use on production sites.Packaged Git sha1: 021b0fd5d6ac752c472655b16c68286acba8afd0

drupal 8.5.10

Wed, 01/16/2019 - 18:40
Release notes

This is a hotfix release for a regression affecting some Drush installations that was introduced by the fix for SA-CORE-2019-002. No other fixes are included.

Versions of Drupal 8 prior to 8.5.x are end-of-life and do not receive security coverage. Sites on 8.5.x will receive security coverage until May 2019.

If you continue to experience issues with Drush following this update, try the following:

  1. Run update.php to ensure database updates are completed and to clear the site cache safely without Drush.
  2. Check the site status report to confirm that 8.6.7 was successfully installed.
  3. Test Drush again. If issues persist:
    • Rename your drush CLI file back to drush.phar.
    • Create a symlink named drush pointing to drush.phar

Alternately, try installing Drush with Composer instead of from a phar.

Known issues Download Size md5 hash drupal-8.5.10.tar.gz 15.09 MB 39e2b451d6bc6f58c4eeb09ad26ad965 drupal-8.5.10.zip 24.31 MB daccd346e36000fb9949693348712acc Last updated: 16 Jan 2019 at 23:43 UTCOfficial release from tag: 8.5.10Core compatibility: 8.xRelease type: Bug fixesShort description: This is a patch release of Drupal 8 and is ready for use on production sites.Packaged Git sha1: 0da0def27a6db8a5ff0019c08798452f882a7858

drupal 7.63

Wed, 01/16/2019 - 18:37
Release notes

This is a hotfix release for a regression affecting some Drush installations that was introduced by the fix for SA-CORE-2019-002. No other fixes are included.

If you continue to experience issues with Drush following this update, try the following:

  1. Run update.php to ensure database updates are completed and to clear the site cache safely without Drush.
  2. Check the site status report to confirm that 7.63 was successfully installed.
  3. Test Drush again. If issues persist:
    • Rename your drush CLI file back to drush.phar.
    • Create a symlink named drush pointing to drush.phar

Alternately, try installing Drush with Composer instead of from a phar.

Important update information
  • The .phar file extension has been added to Drupal's dangerous extensions list, which means that any such file uploaded to a Drupal file field will automatically be converted to a text file (with the .txt extension) to prevent it from being executed. This is similar to how Drupal handles file uploads with a .php extension.

  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

  • The replacement stream wrapper needed to resolve Drupal Core - Remote code execution - SA-CORE-2018-002 is not compatible with PHP versions lower than 5.3.3. For sites using lower PHP versions, the built-in phar stream wrapper has been disabled rather than replaced. Drupal 7 sites using PHP 5.2 (or PHP 5.3.0-5.3.2) that require phar support will need to re-enable the stream wrapper for it; however, note that re-enabling the stream wrapper will re-enable the insecure PHP behavior on those PHP versions.

    It is very uncommon to both be running a PHP version lower than 5.3.3 and to need phar support. If you're in that situation, consider upgrading your PHP version instead of restoring insecure phar support.

Known issues Download Size md5 hash drupal-7.63.tar.gz 3.15 MB 926f05ef0acadfa4ea75fd1d94c8489c drupal-7.63.zip 3.65 MB 466faca7b39a760bebdb7be99d6a658c Last updated: 16 Jan 2019 at 23:33 UTCOfficial release from tag: 7.63Core compatibility: 7.xRelease type: Bug fixesShort description: If you need stability and features from the widest variety of contributed modules and themes, this is the version for you.`Packaged Git sha1: e1d746d812b077a5a8fad101904d598bfcf09675

drupal 8.6.6

Wed, 01/16/2019 - 13:29
Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

Sites on 8.5.x or earlier should update immediately to Drupal 8.5.8 instead, and plan to update to the latest 8.6.x release before May 2019.

Important update information
  • The .phar file extension has been added to Drupal's dangerous extensions list, which means that any such file uploaded to a Drupal file field will automatically be converted to a text file (with the .txt extension) to prevent it from being executed. This is similar to how Drupal handles file uploads with a .php extension.

  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues

Users are reporting seeing a fatal error when updating their sites with Drush. Site owners may be able to run drush updb and either drush cc all or drush cr depending on the version to complete the update. Check the status report afterward to confirm that Drupal has been updated. See #3026386: Drush fatal error after upgrading to 8.6.6, 8.5.9, or 7.62: PHP Fatal error: Uncaught TYPO3\PharStreamWrapper\Exception for details.

Download Size md5 hash drupal-8.6.6.tar.gz 15.72 MB bdabe7ae149890555e176ba492b7b250 drupal-8.6.6.zip 25.35 MB ab995873f865d7c7a597f2b4e3b9018b Last updated: 16 Jan 2019 at 18:32 UTCOfficial release from tag: 8.6.6Core compatibility: 8.xRelease type: Security updatePackaged Git sha1: c9f66f9f581cd0734fe74c1cbb1addce3260cf5d

drupal 8.5.9

Wed, 01/16/2019 - 13:29
Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

Versions of Drupal 8 prior to 8.5.x are end-of-life and do not receive security coverage. Sites on 8.5.x will receive security coverage until May 2019.

Important update information
  • The .phar file extension has been added to Drupal's dangerous extensions list, which means that any such file uploaded to a Drupal file field will automatically be converted to a text file (with the .txt extension) to prevent it from being executed. This is similar to how Drupal handles file uploads with a .php extension.

  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues

Users are reporting seeing a fatal error when updating their sites with Drush. Site owners may be able to run drush updb and either drush cc all or drush cr depending on the version to complete the update. Check the status report afterward to confirm that Drupal has been updated. See #3026386: Upgrading to 8.6.6, 8.5.8, or 7.62 using drush 8 causes PHP Fatal error: Uncaught TYPO3\PharStreamWrapper\Exception for details.

Download Size md5 hash drupal-8.5.9.tar.gz 15.08 MB ab7feda97f750c8997154c04ee7b1c5b drupal-8.5.9.zip 24.27 MB 1df42622c98481fd23d15db3cac97b3f Last updated: 16 Jan 2019 at 18:32 UTCOfficial release from tag: 8.5.9Core compatibility: 8.xRelease type: InsecureSecurity updateShort description: The next patch release of Drupal 8 is ready for new development and use on production sites.Packaged Git sha1: 3c5a5276ab17f2e117ecaae6ecda16f918e5fb7d

drupal 7.62

Wed, 01/16/2019 - 13:29
Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

Important update information
  • The .phar file extension has been added to Drupal's dangerous extensions list, which means that any such file uploaded to a Drupal file field will automatically be converted to a text file (with the .txt extension) to prevent it from being executed. This is similar to how Drupal handles file uploads with a .php extension.

  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

  • The replacement stream wrapper needed to resolve Drupal Core - Remote code execution - SA-CORE-2018-002 is not compatible with PHP versions lower than 5.3.3. For sites using lower PHP versions, the built-in phar stream wrapper has been disabled rather than replaced. Drupal 7 sites using PHP 5.2 (or PHP 5.3.0-5.3.2) that require phar support will need to re-enable the stream wrapper for it; however, note that re-enabling the stream wrapper will re-enable the insecure PHP behavior on those PHP versions.

    It is very uncommon to both be running a PHP version lower than 5.3.3 and to need phar support. If you're in that situation, consider upgrading your PHP version instead of restoring insecure phar support.

Known issues

Users are reporting seeing a fatal error when updating their sites with Drush. Site owners may be able to run drush updb and either drush cc all or drush cr depending on the version to complete the update. Check the status report afterward to confirm that Drupal has been updated. See #3026386: Drush fatal error after upgrading to 8.6.6, 8.5.9, or 7.62: PHP Fatal error: Uncaught TYPO3\PharStreamWrapper\Exception for details.

Download Size md5 hash drupal-7.62.tar.gz 3.15 MB ba6c2d9f1757da31e804b92cab09dc17 drupal-7.62.zip 3.65 MB 688bc8b13f235d8e6e60800bd11038be Last updated: 16 Jan 2019 at 18:32 UTCOfficial release from tag: 7.62Core compatibility: 7.xRelease type: Security updateShort description: If you need stability and features from the widest variety of contributed modules and themes, this is the version for you.Packaged Git sha1: 492fd4da5c9e8c0695f779f1967e7f90960d343b

drupal 8.6.5

Wed, 01/02/2019 - 17:16
Release notes

This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.

If you are upgrading to this release from 8.5.x, read the Drupal 8.6.0 release notes before upgrading to 8.6.5.

Changes since 8.6.4 Download Size md5 hash drupal-8.6.5.tar.gz 15.7 MB 3db4ab3674ae38d1b15d5faac3b10ff0 drupal-8.6.5.zip 25.33 MB cb829fe1939cf9844a02d66f1ff097ff Last updated: 2 Jan 2019 at 22:18 UTCOfficial release from tag: 8.6.5Core compatibility: 8.xRelease type: Bug fixesShort description: This is a patch release of Drupal 8 and is ready for use on production sites.Packaged Git sha1: 1a8e6de9de0b12cc13d4020ea290327b86a8ba12

drupal 8.6.4

Wed, 12/05/2018 - 07:05
Release notes

This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.

If you are upgrading to this release from 8.5.x, read the Drupal 8.6.0 release notes before upgrading to 8.6.4.

Changes since 8.6.3:
  • #2956368 by marcoscano, Nitebreed, ph53: MediaThumbnailFormatter produces unhelpful text alternative and title attributes for media thumbnails
  • #3000240 by govind.maloo, philipnorton42, msankhala, izus, scott_euser, joachim, alexpott, catch: hook_user_format_name_alter() should document that it's invoked for both user entities and session objects
  • #3014669 by kalyansamanta, govind.maloo, msankhala, hardikpandya, joachim, awangsetyawan: return value for hook_entity_bundle_info() doesn't mark 'uri_callback' as optional
  • #2977276 by Sam152, ergonlogic, amateescu, jibran, catch, greggmarshall: Node views integration that joins revisions to the default entity fails to consider langcode, resulting in duplicate rows
  • Revert "Issue #3016458 by tim.plunkett, xjm: ContextHandler should use setContext() not setContextValue()"
  • #3017119 by phenaproxima: SourcePluginBase::next() calls Row constructor incorrectly
  • #3016458 by tim.plunkett, xjm: ContextHandler should use setContext() not setContextValue()
  • #2511968 by Berdir, jhedstrom, zaporylie, catch, dawehner, alexpott, amateescu: Path field should fall back to language neutral aliases (also makes this happen for the form widget!)
  • #2737741 by amateescu, anoopjohn: Drupal\menu_link_content\Plugin\Menu\MenuLinkContent::getUuid() does not return any value
  • #2370115 by Upchuk, nafsinvk, jibran: Clicking 'Add to shortcuts' adds shortcut multiple times
  • #2968139 by tim.plunkett, tedbow: Layout Builder field blocks show up on Block UI when they shouldn't
  • Revert "Issue #3000630 by scott_euser, Krzysztof Domański, APolitsin, vijaycs85, longwave: Transliteration causes 2 capital letters at the beginning of a word"
  • #2983665 by cferthorney, zuhair_ak, Saviktor, John Cook, Eli-T, longwave, alexpott: Inconsistent ordering of views of content in Umami
  • #2911149 by quietone, Jo Fitzgerald, heddn, cogent, mikelutz: FormatDate process plugin doesn't handle zero values
  • #3015110 by pwolanin, mikelutz, YesCT, quietone: migrate source plugin SqlBase::initializeIterator fails to update rows when high water reset to NULL or 0 and mapJoinable() = TRUE
  • #3015004 by tedbow, andrewmacpherson, tim.plunkett: Distinguish between the repeated text of remove-section buttons in Layout Builder UI
  • #2936360 by tim.plunkett, samuel.mortenson: Remove duplicate references to the "layout_builder__layout" field from Layout Builder
  • #2924218 by amateescu, Fabianx: Clearing the persistent entity cache every time we switch between workspaces is super wasteful
  • #2997194 by ndf, L-four, drpal: tableheader.js throws error when running Drupal inside an iframe
  • #2948068 by drpal, dawehner, borisson_, ethomas08, lauriii, yoroy, tedbow: Placing and then removing a block appends incorrect query string destination parameter
  • #2936032 by gambry, nlisgo, alexpott, cwells, cilefen, Darvanen, DamienGR: Sites named with special characters cannot send mail
  • #3014797 by mikelutz: Add mikelutz as sub-system maintainer for Migrate
  • #3014851 by tim.plunkett: ContextAwarePluginBase::setContextValue() should delegate to ::setContext()
  • #2894193 by alexpott, jlscott, kkonuhov, mallezie, larowlan: Multiple file upload does not validate extensions correctly
  • #3000630 by scott_euser, Krzysztof Domański, APolitsin, vijaycs85, longwave: Transliteration causes 2 capital letters at the beginning of a word
  • #3014772 by kiamlaluno: ModuleHandlerTest::testUninstallProfileDependency() uninstall a module and reports another module has been uninstalled
  • Revert "Revert "Issue #2809533 by Lendude, jibran: Convert AJAX part of \Drupal\system\Tests\Ajax\FrameworkTest to JavascriptTestBase""
  • #3006625 by Lendude, borisson_: 'stylesheets-remove' test is broken
  • #3001124 by yongt9412, huzooka, amateescu, Berdir: Unable to create new draft for content translation even if the path alias does not change
  • #3012959 by govind.maloo: Fix typos involving the word bet
  • #3014415 by brathbone, DavidPetit, kiamlaluno: Replace "page" by "page title" in the description for "bartik_preprocess_page_title"
  • #3012599 by mondrake, andypost: Replace all db calls to aggregator_feed and aggregator_item tables with Entity APIs
  • #3008720 by quietone, neclimdul, dhirendra.mishra, heddn: DrupalSqlBase::getSystemData eats exceptions causing DrupalSqlBase::checkRequirements to be less useful on database errors than it should be
  • #3002121 by Lendude, jibran, borisson_: Session: Convert system functional tests to phpunit
  • #3001398 by mondrake, Krzysztof Domański, alexpott, voleger, neclimdul, longwave, dawehner, goodboy: format_size() fixes
  • Revert "Issue #2809533 by Lendude, jibran: Convert AJAX part of \Drupal\system\Tests\Ajax\FrameworkTest to JavascriptTestBase"
  • #2900291 by martin107, Lendude, RytoEX, vijaycs85, borisson_, jibran, dawehner: Form: Convert system functional tests to phpunit Part 2
  • #3008490 by Lendude, jibran, jhodgdon: Update \Drupal\Tests\UiHelperTrait::drupalPostForm docblock to match BrowserTestBase version
  • #2863563 by Lendude, michielnugter, larowlan: Convert PreviewTest WebTestBase to BrowserTestBase and JavascriptTestBase
  • #3013029 by amateescu, dolu: StringFormatter should check whether an entity type has a 'revision' link template
  • #2986887 by hchonov, tstoeckler, amateescu, alexpott: Impossible entity query with condition on revision metadata keys
  • #2809533 by Lendude, jibran: Convert AJAX part of \Drupal\system\Tests\Ajax\FrameworkTest to JavascriptTestBase
  • #3013187 by tim.plunkett: Rename PlaceholderInterface to PreviewFallbackInterface
  • #2982626 by phenaproxima, tim.plunkett, EclipseGc: ContextAwarePluginBase is incompatible with ContextAwarePluginDefinitionInterface
  • #2886609 by quietone, Jo Fitzgerald, masipila, heddn, jhodgdon, Gábor Hojtsy, mikeryan, alexpott: Migrate translations for D6 i18n taxonomy 'localized' terms
  • #3007436 by Jo Fitzgerald, andypost, mikelutz, heddn: Fix d7 comment migration
  • #3006719 by tetranz, dhirendra.mishra, scott_euser, Eli-T, amateescu: Workspace indicator does not update after workspace label edited
  • #3008025 by quietone: Migrate D7 i18n block translated strings
  • #2946402 by Sam152, awm, jibran, lamp5, mattshoaf, amateescu: Content moderation incorrectly always assumes a language is being added when the default language of an entity is being changed
  • #2809531 by Lendude, martin107, larowlan: Convert AJAX part of \Drupal\system\Tests\Ajax\FormValuesTest::testSimpleAjaxFormValue to JavascriptTestBase
  • #3013197 by tim.plunkett: Cloning an implementation of SectionListInterface does not deep clone the Section or SectionComponent objects
  • #2189267 by Manuel Garcia, snufkin, alexpott, nuez, maxocub, mirsoft, SiliconMind, blazey, mErilainen, wannesderoy, borisson_, Gábor Hojtsy, stella, spoit, swentel, lauriii, Rob230, Xano, danquah: When content language detection is different from interface language detection, the detected language is not applied to the rendered content
  • #2959370 by dawehner, Lendude, alexpott: View with user/% path breaks login/logout
  • #2809495 by Lendude, jibran, larowlan: Convert AJAX part of \Drupal\field\Tests\EntityReference\EntityReferenceAdminTest to JavascriptTestBase
  • #2998662 by Sam152, dhirendra.mishra, amateescu, Eli-T: Saving a tagged article in staged workspace causes fatal exception
  • #2968452 by amateescu, timmillwood, jeqq, alexpott, Fabianx: Add a way to execute a function in the context of a specific workspace
  • #2982372 by phenaproxima, catch, alexpott: oEmbed system can't parse XML attributes
  • #2342699 by Beakerboy, david_garcia, alexpott, madhavvyas, Nitesh Sethia, mradcliffe, plach, rakshith.thotada, ruloweb, deepakaryan1988, Berdir, rbrenton: SqlContentEntityStorage tries to update identity/serial values by default
  • #3000573 by Sam152, yongt9412, scott_euser, idflood, Berdir, amateescu: After enabling Workflows and Content Moderation there is a fatal error when trying to edit content translation
  • #2968500 by tedbow, bendeguz.csirmaz, samuel.mortenson, phenaproxima, lauriii, AaronMcHale: Change inline blocks workflow in Layout Builder to match mocks
  • #2919795 by tim.plunkett, tedbow, dead_arm, webchick, alexpott, xjm: Add visual hints that Layout Builder work is in tempstore and will not be lost, or take effect until saved
  • #2995071 by tim.plunkett, sugaroverflow: Refactor LayoutBuilderLocalTaskDeriver to delegate local tasks to plugins
  • #2992410 by tim.plunkett, scottsawyer, sugaroverflow, phenaproxima: Provide placeholders for empty blocks (for example, an empty Views listing)
  • #2978939 by tedbow, dead_arm: Change 'field_block' block plugins to use "[entity_type] - fields" category to avoid confusion with other blocks
  • #2934223 by jibran, MerryHamster, tim.plunkett, kiamlaluno: layout_builder module has a hidden dependency on block module
  • #2942011 by tsega, imalabya, robindh, David_Rothstein, Eli-T, Gábor Hojtsy, markconroy, aburrows, ckrina, Gvert, alexpott, cchoudhary: Umami demo has display problems in right-to-left languages
  • #2989734 by alexpott, andypost, mikelutz, tacituseu: PHP 7.3 compatibility
  • #2982183 by phenaproxima, neclimdul: Follow-up Conflict between TypedDataManager and TypedConfigManager in ConfigEntityAdapter
  • #3002522 by andypost, Matthijs, tim.plunkett, wizonesolutions: Calling StatusMessages::renderMessages() with a returns a faulty render array
  • Back to dev.
  • #2982183 by tim.plunkett, phenaproxima, Berdir, Wim Leers, agentrickard: Conflict between TypedDataManager and TypedConfigManager in ConfigEntityAdapter
  • #2856362 by bpresles, Surian, WamFlying: Drupal install fail on Percona XtraDB Cluster 5.7 (pxc_strict_mode enforced)
  • #3008772 by andypost, tim.plunkett: Layout definition defined in YAML is not translated
  • #2982149 by scuba_fly, vijaycs85, Lendude: Routing: Convert system functional tests to phpunit
  • #2809529 by Lendude, martin107: Convert AJAX part of \Drupal\system\Tests\Ajax\ElementValidationTest::testAjaxElementValidation to JavascriptTestBase
Download Size md5 hash drupal-8.6.4.tar.gz 15.64 MB 455722dcf2c051232e6f9299725d11a3 drupal-8.6.4.zip 25.26 MB 1f4a079f34fc25ef5fb73cd507f2b344 Last updated: 5 Dec 2018 at 12:08 UTCOfficial release from tag: 8.6.4Core compatibility: 8.xRelease type: Bug fixesShort description: This is a patch release of Drupal 8 and is ready for use on production sites.Packaged Git sha1: b872dbb52bea17e5ed9a0e76d0c65fc3b13f7fed

drupal 7.61

Thu, 11/08/2018 - 08:34
Release notes

Maintenance release of the Drupal 7 series. Includes bug fixes and small API/feature improvements only (no major, non-backwards-compatible new functionality).

No security fixes are included in this release.

No changes have been made to the .htaccess, web.config, robots.txt in this release, so upgrading custom versions of those files is not necessary.

There is one change to the sites/default/default.settings.php file in this release:

Major changes since 7.60:
  • Full compatibility with PHP 7.2 (#2947772)
All Changes since 7.60: Download Size md5 hash drupal-7.61.tar.gz 3.14 MB 94bc49170d98e0cfe59db487911ecb9d drupal-7.61.zip 3.63 MB 402d1b367789aa867e2d9d7a8e6edf31 Last updated: 8 Nov 2018 at 13:38 UTCOfficial release from tag: 7.61Core compatibility: 7.xRelease type: Bug fixesNew featuresShort description: If you need stability and features from the widest variety of contributed modules and themes, this is the version for you.Packaged Git sha1: 55d17c3e4dcc888984795c7e7e6a9d745708e275

drupal 8.6.3

Wed, 11/07/2018 - 09:55
Release notes

This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.

If you are upgrading to this release from 8.5.x, read the Drupal 8.6.0 release notes before upgrading to 8.6.3

Changes since 8.6.2:

  • #2986735 by tim.plunkett: PHP 5 test fix
  • #2995570 by lauriii, jrockowitz, drpal, aaronbauman: #states breaks when OR is used
  • #2986735 by phenaproxima, Berdir, tim.plunkett, MegaChriz: Drupal\Core\Plugin\Context\Context needs DependencySerializationTrait
  • #2970849 by quietone, phenaproxima: i18n Variable to config: user settings and user.mail
  • #2989627 by maxocub, quietone, masipila, phenaproxima, Gábor Hojtsy: d7_node_entity_translation migration is in the wrong module and is missing some mappings
  • #2970847 by quietone, phenaproxima: i18n Variable to config: system site settings [d7]
  • #3001749 by quietone, Jo Fitzgerald, heddn, masipila, Gábor Hojtsy: Migrate D7 i18n custom blocks
  • #2943899 by Sam152, amateescu, tstoeckler: Moderation state field cannot be updated via REST, because special handling in ModerationStateFieldItemList
  • #2992817 by RoSk0, johndevman, phenaproxima, tim.plunkett, yanniboi, alexpott: Layout builder cron errors when no cleanup required
  • #3004037 by jsacksick: ContentTranslationController::overview() should not construct URLs manually
  • #2947291 by pounard, markus_petrux: Missing argument 5 for _drupal_error_handler()
  • #3002941 by tim.plunkett, tedbow: New enabled View modes for bundle have duplicate fields in layout
  • #3002604 by tstoeckler: Improve debuggability of update failures in UpdatePathTestBase
  • #3001979 by alexpott: \Drupal\Core\Config\FileStorage::getAllCollectionNames() should work when the directory does not exist
  • #2707879 by hctom, Sam152, grahl, reekris, casey, gngn, Noemi, dawehner, jherencia: Contextual Links do not respect pathPrefix
  • #3004038 by jsacksick, tstoeckler: ContentTranslationRouteSubscriber should not construct its own URLs
  • #3002279 by alexpott: Xdebug in InstallerTestBase
  • #2896215 by tim.plunkett, borisson_, Anybody, tacituseu: Formatter settings lost when moving fields between regions in 'Manage display'
  • #2961114 by quietone, heddn, Gábor Hojtsy, maxocub, masipila: Migrate D6 i18n CCK field option translations
  • #2938190 by smaz, markconroy, navneet0693, Gvert, John Cook, Adam_Moulsdale, sastha, Eli-T, Sutharsan, JayKandari, lauriii, xjm, larowlan: Create a favicon for Umami
  • #3005129 by e0ipso: Add Gabriel Sullice as API-First Initiative coordinator
  • #2970848 by quietone, maxocub: i18n Variable to config: site offline message [d7]
  • #2938743 by Manuel Garcia: Document #pattern property for email, password, tel, textfield, and url form elements
  • #3007371 by Lendude: System: Convert remaining Render functional tests to phpunit
  • #3004968 by Lendude: Convert FieldApiDataTest to BrowserTestBase
  • #3008109 by Lendude, andypost: Convert ResponsiveImageFieldDisplayTest to BrowserTestBase
  • #2575105 by alexpott: hotfix for PHP 5 test failures in ShutdownFunctionsTest
  • #2309731 by bendeguz.csirmaz, phenaproxima, alexpott: drupal_check_profile() does not invoke the profile's hook_requirements()
  • #2575105 by Berdir, catch, amateescu: Use cache collector for state (revert)
  • #2990517 by tim.plunkett, alphex, xjm, phenaproxima, neclimdul: Adding a display mode to a content type using layout, and disabling layout on that new display mode removes the layout_builder__layout field and breaks layout in already configured display modes
  • #2866722 by shabana.navas, kpv: Avoid using display mode machine name in AccountForm::form()
  • #3005689 by foxtrotcharlie, joachim, alexpott: improve docs for _install_select_profile()
  • #2985907 by pasan.gamage, acbramley, dawehner, alexpott, DYdave: Add entity type into error description
  • #2975509 by quietone, masipila, gaydabura, jhodgdon, maxocub: Migrate D6 vocabulary language settings
  • #2855026 by phenaproxima, trobey, HaiNguyen007, alexpott, Taran2L, -enzo-, Jo Fitzgerald, tucho, DamienMcKenna, andypost, tobiasb, dawehner, larowlan: Installation profiles do not support project:module format for dependencies
  • #2913971 by jhedstrom, TrevorBradley, amateescu: Views regression: 8.4.x EntityField can't handle a null row value from a non-required relationship
  • #3004659 by volkswagenchick: Grammar error in Umami content file
  • #2821077 by Wim Leers, dawehner, tedbow, amateescu, tstoeckler, alexpott: PATCHing entities validates the entire entity, also unmodified fields, so unmodified fields can throw validation errors
  • #2998296 by Mile23: drupal-phpunit-upgrade should also update prophecy
  • #2999691 by kevineinarsson, Wim Leers, TwoD: Update CKEditor library to 4.10.1
  • #2981000 by maxocub, masipila: Migrate Drupal 7 comment entity translations data to Drupal 8
  • #3001846 by wengerk, Krzysztof Domański, longwave, mondrake: Refactor KernelTests/Core/Common/SizeTest
  • #3001029 by frob, Wim Leers: Improve the documentation of the @CKEditorPlugin plugin type annotation
  • #2919332 by andypost, kyberman, borisson_, amateescu: Fix $reset parameter inside TermStorageSchema::getEntitySchema() parent call
  • #3003669 by dawehner: yarn build:js-dev is broken due to wrong order of arguments
  • #2998666 by quietone, heddn: Warnings after D7 upgrade caused by rdf migration
  • #2875276 by huzooka, ion.macaria, cestmoi, catch: Breadcrumbs disappears when starting with front-page after cache rebuild (for anonymous user)
  • #2980996 by maxocub, masipila, mradcliffe, Gábor Hojtsy: Migrate Drupal 7 taxonomy term entity translations data to Drupal 8
  • #2959410 by quietone, Jo Fitzgerald, masipila, mikeryan: Migrate D6 i18n CCK fields label and description
  • #2867757 by alexpott, Mile23, anavarre, David_Rothstein, cilefen, kylebrowning, xjm: Improve instructions for updating composer.json and /vendor
  • #2981392 by masipila, maxocub: Comment migration corrupts data with multilingual sites
  • #3002655 by alexpott, johnpicozzi, nathandentzau, larowlan: Optional profile configuration can be unexpectedly recreated after being deleted
  • #3001164 by parijke, mcannon: To follow standards base.css should not be under component:
  • #2722237 by webflo, dawehner, borisson_, drunken monkey, Wim Leers: "Local actions" block doesn't take cache data of route access information into account
  • #2794347 by nuez, Jo Fitzgerald, jmuzz, Lendude, boaloysius, klausi, jibran: Convert web tests to browser tests for field_ui module
  • #2975388 by NickWilde, idebr: Replace Firefox @-moz-document url-prefix() css selector, since its support is being removed
  • #3001851 by abramm, longwave: Incorrect documented CommentInterface::getCommentedEntity() return value
  • #3001782 by volkswagenchick, Eli-T, parijke, Kristen Pol, longwave: Misspellings and capitalization error in Umami content files
  • #2625554 by Xano, googletorp, longwave, borisson_, dawehner, tim.plunkett, alexpott, twistor: getInstance() fatals on almost all plugin managers
  • #3002935 by Mile23, tim.plunkett, Berdir: Document that DeprecationListenerTrait::getSkippedDeprecations() should not be expanded for new deprecations
  • #2998748 by MaddieC, lauriii, markconroy, kjay: Horizontal Scrolling when screensize hits 960px
  • #2995078 by sugaroverflow, dead_arm: Add a title to the off-canvas dialog when opened by clicking "Add Block"
  • #2686409 by mpdonadio, pjonckiere, claudiu.cristea, darrick, xSDx, bceyssens, tamasd, Ismail Cherri, joelpittet, dawehner, AdamPS, jhedstrom, JaceRider: Time Ago summary does not render on Manage Display for Timestamp and Datetime fields
  • #2867042 by jgrunert, jhodgdon, rakesh.gectcr, dawehner, jazzdrive3, alexpott, Loparev: Running any tests which extended from BrowserTestBase getting permission denied
  • #3000424 by acbramley, rikki_iki: OEmbed Media Source and related controller use LoggerChannelInterface in their constructors which is not compatible with the monolog module
  • #3001893 by parijke, Eli-T: Remove non-existing article.css from the libraries.yml
  • #2986193 by amateescu, sim_1, andrewmacpherson: Workspace toolbar item fails WCAG Use-of-color at narrow breakpoint
  • #2974657 by leolando.tan, spitzialist, borisson_, neclimdul, alexpott: Improve FilterIdTest provider keys
  • #2809535 by Lendude, alexpott, martin107, dawehner, borisson_: Convert AJAX part of \Drupal\system\Tests\Ajax\MultiFormTest to JavascriptTestBase
  • #3002011 by Mile23, Wim Leers, Berdir, gabesullice: Remove @trigger_error() for 8.6.x Drupal\field\Tests\EntityReference\EntityReferenceTestTrait deprecation
  • #2704597 by Neograph734, Berdir, izus, alexpott, TR: Relative URLs in mails should be converted to absolute ones
  • #2809535 by Lendude, martin107, dawehner, borisson_, alexpott: Convert AJAX part of \Drupal\system\Tests\Ajax\MultiFormTest to JavascriptTestBase
  • #3001573 by Lendude: System: Convert Condition tests to PHPUnit
  • #2954825 by rakesh.gectcr, tresti88, gnuget, borisson_, DamienGR, Prashant.c, amietpatial, alexpott, joachim, Berdir: Update the user.api.php documentation and add the correct type hints in the user's hooks implementations
  • #2846379 by alexpott, esolitos, casey: Processing paths in LanguageNegotiationUserAdmin causes 404s while accessing private files
  • #2992113 by alexpott, jibran, larowlan, catch: Update core dependencies before 8.6.2
  • #2484693 by mjpa, dww, DuaelFr, vaplas, kyvour, benjy, JinX-Be, wengerk, thamas, FMB, ndf, jcnventura, catch: Telephone Link field formatter InvalidArgumentException with 5 digits or fewer in the number
  • #2635712 by bendeguz.csirmaz, DeFr, redgluten, swentel, SylvainM, Wim Leers, SiliconMind, dbyers55, catapipper: Cannot use Quick Edit to delete an image
  • #2996789 by Mile23, Lendude, longwave, dawehner: Deprecate Drupal\field\Tests\EntityReference\EntityReferenceTestTrait
  • #2995405 by amateescu: Media entity needs its own entity reference selection handler
  • #2918295 by quietone, heddn, Jo Fitzgerald, phenaproxima, maxocub: Move i18n query to a trait
  • #2829185 by vaplas, Jo Fitzgerald, anmolgoyal74, chipway, gaurav.kapoor, mark_fullmer, amit.drupal, cilefen, longwave, xjm, wturrell, anavarre: Fix spelling errors in Drupal core comments
  • #2995231 by hardik.p, msankhala, joachim, alexpott: outdated docs for testViewsGetHandler()
  • #2999754 by ifrik: Update the Workspaces module description
  • #2954776 by neclimdul, tim.plunkett, zenimagine, tedbow: Can not uninstall Field Layout while Layout Builder is installed
  • #3000958 by virajrajankar, michaellenahan: Grammar error in FormState.php documentation comment for $rebuild
  • #2999387 by iuana, tashaharrison80, fgm, mradcliffe: Types documented for method returns on ConfirmFormInterface are mostly wrong
  • #2916589 by wengerk, Wim Leers: Extend the CKEditorIntegrationTest for DrupalImageCaption
  • #2874640 by martin107, Lendude, Utkarsh_Mishra, NickWilde, alexpott: Convert DialogTest to a FunctionalJavascript test
  • #2983970 by ApacheEx, Mile23, scuba_fly: Convert system functional tests to phpunit /Routing/DestinationTest.php
  • #2994398 by tim.plunkett, phenaproxima, vmilic, Berdir, Wim Leers, tedbow, bradjones1: Not properly clearing EntityFieldManager's fieldMap leads to fatals, often after migration or bundle creation
  • #2998483 by longwave, iuana, tstoeckler, Eli-T: Remove config-editing parts from demo_umami_install() in favor of exported configuration
  • #2860341 by heddn, juampynr, seanB, RumyanaRuseva, ephod, stephsem23: PrivateTempStore->getOwner Attempts to access possibly unset Request Session
  • #3000059 by kiamlaluno: "the session" is repeated twice in the documentation comment
  • #2809505 by Lendude, dawehner, borisson_, Mixologic, alexpott: Convert AJAX part of \Drupal\file\Tests\FileManagedFileElementTest::testManagedFile to JavascriptTestBase
  • #2887869 by navneet0693, ApacheEx, Lendude, Dinesh18, dawehner, naveenvalecha, borisson_: Convert web tests to browser tests for user module part-2
  • #2986898 by kswamy, seanB, anmolgoyal74, tstoeckler: Can't delete the translation of a media
  • #2872603 by vaplas, Lendude, m1r1k, Jo Fitzgerald, borisson_, alexpott, martin107: Drupal\system\Tests\Ajax\CommandsTest break in unit and FunctionalJavascriptTests
  • #2972442 by spitzialist, Mukeysh, imalabya, markconroy, cilefen, volkswagenchick, Eli-T, longwave, andrewmacpherson: Add README.txt to Umami theme
  • #2999150 by mikelutz: MigrationLookup::skipOnEmpty docblock and typehint mismatch
  • #2995578 by claudiu.cristea, jhedstrom, alexpott: [regression] Check first if views data exists in datetime_range module
  • #2998565 by amateescu, Sam152, jeqq: Workspaces' form alters break all AJAX interaction on entity forms
  • #2876211 by Lendude, dawehner, michielnugter: Convert \Drupal\views\Tests\Plugin\StyleOpmlTest and \Drupal\views\Tests\Plugin\DisplayFeedTest to PHPUnit tests
  • #2999012 by LOBsTerr: Action plugins have the wrong comments for contructors
  • #2986539 by alexpott: \Drupal\user\Plugin\EntityReferenceSelection\UserSelection::entityQueryAlter() should escape the fake condition column on replacement
  • #2956949 by volkerk, mic79, robindh, lauriii, Gvert, Eli-T, markconroy: Umami styles leaking to Settings Tray
  • #2999014 by rajeevgole, kjay, Eli-T, casaran, dimitri1972: Replace the link in the body field on Umami's About page
  • #2991563 by captainpants, MaddieC, Eli-T, pazhyn, volkswagenchick: Add description to Umami Recipe Category vocabulary
  • #2974654 by jarodriguez, Vj, quietone: Migrate upgrade shows errors in green
  • #2809553 by Lendude: Convert AJAX part of \Drupal\views_ui\Tests\RowUITest to BrowserTestBase
  • Revert "Issue #2975957 by Sam152, amateescu: Convert the Workspace entity to use EntityOwnerTrait"
  • #2996030 by Lendude, Mile23: Convert web tests to browser tests for node module - round 2
  • #2975957 by Sam152, amateescu: Convert the Workspace entity to use EntityOwnerTrait
  • #2993330 by msankhala, joachim: invokeHook() missing mention of 'create' op
  • #2984185 by scuba_fly, Lendude: Convert system functional tests to phpunit for page and pager
  • #2990535 by Lendude: Convert remaining WebTestBase tests in the Statistics module
  • #2990531 by Lendude: Convert remaining WebTestBase tests in the Link module
  • #2994976 by martin107, MaddieC, markconroy: Search icon: Remove A11y issue on landing page
  • #2991473 by markconroy, rahulrasgon, Vidushi Mehta, JayKandari, Eli-T, NickWilde: Remove the field_author from Umami recipe content type
  • #2970801 by tedbow, tim.plunkett, likin, sugaroverflow: If you add block then try to Revert the layout it doesn't revert
  • #2998215 by tim.plunkett, Ronak.addweb, bkosborne: PHP notices/warnings when managing display for non-default view mode when LB is enabled w/ overrides
  • #2998802 by Quentin Massez, Berdir: menu_ui_form_node_form_alter() loads all menus
  • #2938951 by tstoeckler, amateescu, alexpott: The primary key is not correctly re-created when updating the storage definition of an identifier field
  • #2142107 by drunken monkey, gilsbert, David_Rothstein, mondrake, Kristi Wachter: Complex cloned query dependent on __toString() call
  • #2558645 by almaudoh, Vidushi Mehta, alexpott: Malformed module.info.yml prevents install with a confusing error
  • #2960486 by tanc, johnny_aroza, phaedrus, Mukeysh, thehuffman, cferthorney, kjay, rachel_norfolk, mjoneill, John Cook, Eli-T, borisson_, dmacgrue, esod, steveparks, xjm: Add an article to Umami - Oatmeal
  • #2991573 by Laura Johnson, imalabya, Eli-T, joachim, msankhala: Improve help text for field_tags in Umami
  • #2926122 by Adameue, zaporylie, BartoszUrbaniak, borisson_, idebr: Use lower-case, PEAR style, primitive data types
  • #2887134 by Mile23, nlisgo, Lendude, naveenvalecha: Convert web tests to browser tests for taxonomy module Part -2
  • #2997982 by longwave, plach, johns996: Orphan term hierarchy records can cause taxonomy_update_8502 to enter an infinite loop
  • #2986560 by kaythay, catch, mpdonadio: UnroutedUrlAssembler sorts Query params in buildExternalUrl()
  • #2809543 by Lendude, Tessa Bakker: Convert AJAX part of \Drupal\user\Tests\UserPasswordResetTest to WebDriverTestBase
  • Revert "Issue #2887134 by Mile23, nlisgo, naveenvalecha, Lendude: Convert web tests to browser tests for taxonomy module Part -2"
  • #2887134 by Mile23, nlisgo, naveenvalecha, Lendude: Convert web tests to browser tests for taxonomy module Part -2
  • #2912399 by wengerk, tedbow, Wim Leers: Extend the CKEditorIntegrationTest for DrupalImage
  • #2912363 by tim.plunkett, pwolanin: LocalTaskDefault/LocalActionDefault ignore parameters when raw parameters are not present
  • #2905109 by iainp999, gawaksh, msankhala, joachim, borisson_, alexpott: DrupalKernel::guessApplicationRoot() should document what the assumptions are and what it's doing
  • #2848529 by ApacheEx, dagmar, dawehner: Move DbLogTest::verifyCron to a kernel test
  • #2907546 by johndevman, Falco010: User's language preference is not applied!
  • #2996313 by th_tushar: Remove mortendk from MAINTAINERS.txt
Download Size md5 hash drupal-8.6.3.tar.gz 15.61 MB 3a3b8e4326b493ed6c29188db40031ff drupal-8.6.3.zip 25.2 MB 50a21bf6f49225757777cc72ef5f4ce0 Last updated: 7 Nov 2018 at 14:58 UTCOfficial release from tag: 8.6.3Core compatibility: 8.xRelease type: Bug fixesShort description: This is a patch release of Drupal 8 and is ready for use on production sites.Packaged Git sha1: 29c2941b8610cee425621c7e601196f5a9539069

drupal 8.6.2

Wed, 10/17/2018 - 18:46
Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

Sites on 8.5.x should update immediately to Drupal 8.5.8 instead, and plan to update to the latest 8.6.x release before May 2019.

Important update information

Site update and module owners planning to update to this should take note of the following important changes.

For site owners
  • Previously, users who didn't have access to use any Content Moderation transitions were granted implicit access to update content provided the state of the content did not change. This access has been removed. Site owners should ensure that all content editor roles have access to appropriate transitions for moderated content types (including published to published where appropriate).
  • There are no database updates in this release, but site owners will need to run update.php to ensure a cache clear.
  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.
For contributed and custom module developers
  • \Drupal\Core\EventSubscriber\RedirectResponseSubscriber::sanitizeDestination() has been removed. If you have extended that class or are calling that method, you should review your implementation in line with the changes in the patch.
  • An additional method has been added to StateTransitionValidationInterface. Implementations should review the new method and ensure compatibility with it.
  • ModerationStateConstraintValidator now has two additional service dependencies. Subclasses will need to update their constructor to inject the new services.
Download Size md5 hash drupal-8.6.2.tar.gz 15.49 MB 46a42d70047dafd4b05e3dd050cea887 drupal-8.6.2.zip 25.02 MB ed03376167765b6ee5759029655f8811 Last updated: 17 Oct 2018 at 22:43 UTCOfficial release from tag: 8.6.2Core compatibility: 8.xRelease type: Security updateShort description: The next patch release of Drupal 8 is ready for new development and use on production sites.Packaged Git sha1: 47b600aa928a57c8e16cd5726b3587e60651b194

drupal 7.60

Wed, 10/17/2018 - 18:44
Release notes

Maintenance and security release of the Drupal 7 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues:
  • When combined with particular configurations of the Domain Access module, this release can cause fatal errors on certain pages of the site. See this issue for more discussion and a possible patch.
Download Size md5 hash drupal-7.60.tar.gz 3.13 MB ba14bf3ddc8e182adb49eb50ae117f3e drupal-7.60.zip 3.62 MB 3771cac9ec51adc3a521258645b9ff02 Last updated: 17 Oct 2018 at 22:43 UTCOfficial release from tag: 7.60Core compatibility: 7.xRelease type: Security updateShort description: If you need stability and features from the widest variety of contributed modules and themes, this is the version for you.Packaged Git sha1: 08b4bce5841b938a3bdb24e3f4b246ae56ff91e7

drupal 8.5.8

Wed, 10/17/2018 - 18:43
Release notes

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

Versions of Drupal 8 prior to 8.5.x are end-of-life and do not receive security coverage. Sites on 8.5.x will receive security coverage until May 2019.

Important update information

Site update and module owners planning to update to this should take note of the following important changes.

For site owners
  • Previously, users who didn't have access to use any Content Moderation transitions were granted implicit access to update content provided the state of the content did not change. This access is been removed. Site owners should ensure that all content editor roles have access to appropriate transitions for moderated content types (including published to published where appropriate).
  • There are no database updates in this release, but site owners will need to run update.php to ensure a cache clear.
  • No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.
For contributed and custom module developers
  • \Drupal\Core\EventSubscriber\RedirectResponseSubscriber::sanitizeDestination() has been removed. If you have extended that class or are calling that method, you should review your implementation in line with the changes in the patch.
  • An additional method has been added to StateTransitionValidationInterface. Implementations should review the new method and ensure compatibility with it.
  • ModerationStateConstraintValidator now has two additional service dependencies. Subclasses will need to update their constructor to inject the new services.
Download Size md5 hash drupal-8.5.8.tar.gz 15.06 MB 9642e018a0b0ed7bd8a3472fa0b64ccd drupal-8.5.8.zip 24.25 MB d208afc76ffac8fbdd0fbb84f149fcec Last updated: 17 Oct 2018 at 22:43 UTCOfficial release from tag: 8.5.8Core compatibility: 8.xRelease type: Security updateShort description: The next patch release of Drupal 8 is ready for new development and use on production sites.Packaged Git sha1: 6bc4e6a25f10d631dc1c279c6e90ab915003c7b5