Maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements only.

Notes for updating

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

Changes since version 1.xx.x are listed below.

Bug fixes

• Fixed: Views query/distinct settings issues when setting "This page (override)" in PHP8. #5854
• Fixed: Exports of flexible templates throw PHP 8 error when System language is not English. #5853
• Fixed: node_cron_last state is stored as a string. Similar dates are stored as integer. #5849
• Fixed: HTML5 date field widget produces a fatal error on a Paragraph. #5847
• Fixed: Files lose permanent status when in edited in CKEditor link dialog. #5843
• Fixed: misspelling of dialog's "resizable" JS setting option in system_token_output(). #5842
• Fixed: Token browser disappears below viewport when resized. #5841
• Fixed: Existing Image library popup does not show all images. #5835
• Fixed: Deprecated function: preg_replace(): Passing null to parameter no 3. #5832
• Fixed: Upgrade from Drupal 7 should respect UTF8-MB4 variable. #5818
• Fixed: Layouts and Taxonomy Term view context conflict. #5809
• Fixed: Preview of menu machine name is inaccurate while adding a menu. #5807
• Fixed: Table alias missing in query condition in taxonomy_select_nodes(). #5806
• Fixed: Method DatabaseCondition::__toString() must return a string value. #5805
• Fixed: Some tests throw stat failed exceptions. #5799
• Fixed: Apache setup failure in the php 5.6 runners for GitHub Actions. #5790
• Fixed: File Access Checks Fail if no Type is defined. #5777
• Fixed: Forms user_register_form and user_pass hard-code the page title. #5731
• Fixed: node_type_delete() doesn't check the value returned from node_type_get_type(). #5726
• Fixed: _views_tokenized_clean_css_identifier() should clean the complete class. #5561
• Fixed: Possible Drupal 7 upgrade regression caused by user/1 path alias update hook. #5497
• Fixed: Language field can't be moved around reliably (terms). #5060

User Experience Improvements

• Improve field block labels when copying the Layout title from a block. #5704
• Add "Flush all caches > Views" to admin bar. #5737
• Add welcome message to help people find the Dashboard. #5624
• Improve File Type configuration form. #4014

Documentation updates

• Update all documentation URLs in core. #5706
• Fix minor spelling mistake in views plugins documentation. #5772
• Remove $settings from docblock for hook_block_view_MODULE_DELTA_alter(). #5827
• Remove the reference to the files property from image.inc documentation. #5717

Miscellaneous changes

• Remove the messages about the GD toolkit being installed or the missing GD extension from image_gd_settings(). #5723
• Place all term tokens together in taxonomy_token_info(). #5709

The Backdrop community is proud to release version 1.23.0 of Backdrop CMS, following our 4-month release cycle.

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• It will be necessary to run the update script (located at /core/update.php) for this release.
• This release includes an API Change. While we try hard to maintain compatibility as much as possible between releases, this change was needed to facilitate the inclusion of Entity Reference module in core. Please see the change record File::uri() Now Returns Path to File Entity Page, Not the File Path for more information.

Changes since version 1.22.3 are listed below.

New features

• Added Entity Reference module to core. #1301
• Added new setting to allow the comment title to be hidden. #4569
• Added new Date field widget to utilize HTML5 #date input type. #4255
• Added a "Taxonomy term: Depth" Visibility condition for blocks and layouts. #2955

API Changes

• Fixed: File::uri() is not consistent with other Entity types. #2300

API Enhancements

• Added form API properties to support custom validation and error messages for required fields. #5348
• Added config->getData() to match config->setData(). #3902
• Added 'bundle cache' property to support enabling/disabling entity caching on a per-bundle basis. #5632

Documentation updates

• Include the NOT operator in documentation for backdrop_process_states(). #4228

User Experience Improvements

• Added vertical tabs to clean up the user account edit form. #3872
• Fixed: Don't convert fieldset to vertical tab if there is only one in the group. #5747

Miscellaneous changes

• Fixed: Standardize on the spelling of "email" across all interfaces. #4521
• Fixed: Remove blank lines before @file docblocks. #4824

Maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements only.

Notes for updating

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

Changes since version 1.22.2 are listed below.

Bug Fixes

• Fixed: second value of Datestamp stays empty when defaults have value2 same as value. #5744
• Fixed: PHP 8.1 error: strlen() Passing null to parameter #1 ($string) of type string is deprecated in backdrop_random_bytes(). #5727
• Fixed: Docblock should reference $settings['page_cache_invoke_hooks'] (not $settings['invoke_page_cache_hooks']). #5700
• Fixed potentially broken installer.settings.json configuration file. #5696
• Fixed: Missing Views handler: watchdog reports "Missing join" with relationship+contextual filter+taxonomy term. #5695
• Fixed: Make path_autocomplete() alterable queries more robust against column ambiguity. #5684
• Fixed: Remove duplicate files when moved (but not deleted) by previous core update. #5650
• Fixed: Server 500 error on image resource for Promoted Card in view. #5631
• Fixed: Remove comment "Ensure the current toolkit supports the effect." from image_effect_definitions(). #5720
• Fixed: The title for the ui.menu library was mistakenly set to "jQuery UI: Mouse" (already used by the ui.mouse library). #5714
• Fixed: Views filters and/or positioning makes logic unclear. #1598

User Experience improvements

• [UX] Fixed: Node deletion message references "posts" when not Posts: "Deleted @count posts". #5724
• [UX] Fixed: Time picker in Date Pop-up calendar does not respect time format. #5703
• [UX] Fixed: Path should not autocomplete for the source field on "Add URL Alias" page. #5686
• [UX] Fixed: Export links are shown even when the Configuration Manager module is disabled. #5294
• [UX] Fixed: Group name "Node types" in the "Configuration group" should be "Content types" instead. #5736
• [UX] Fixed typo in Date module admin help text. #5713

Miscellaneous changes

• [A11Y] Fixed: Issues and Confusion with "You are here" screen reader heading for breadcrumbs. #5269
• Added: Collect the name of the installation profile for Telemetry module. #5187

The Backdrop community is happy to offer the 1.23.0-preview release. This release includes all the new features that will be shipped in the upcoming 1.23.0 release on September 15, 2022. This preview release is intended to allow for testing by a wider audience. It is not recommended to run the preview release in production environments.

Notes for updating

Important to note that this release includes an API Change. See the change record at the Docs site: File::uri() Now Returns Path to File Entity Page, Not the File Path. While we try hard to maintain compatibility as much as possible between releases, this change was needed to facilitate the inclusion of Entity Reference module in core. Please see that change record for more information.

No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

It will be necessary to run the update script (located at /core/update.php) for this release.

Changes since version 1.22.2 are listed below.

New features

• Add entity reference module to core #1301
• Allow admin to hide the title on comments #4569
• Add new Date field widget to utilize HTML5 #date input type #4255
• Add a "Taxonomy term: Depth" Visibility condition to Layout blocks #2955
• Clean up account edit page with vertical tabs #3872

API Changes

• Make File::uri() consistent with other Entity types #2300

API Enhancements

• Allow forms to set custom validation error messages on required fields #5348
• Add config->getData() to match config->setData() #3902
• Add a 'bundle cache' property to support enabling/disabling entity caching on a per-bundle basis. #5632

Documentation updates

• Mention NOT operator in backdrop_process_states() #4228

Miscellaneous changes

• Don't convert fieldset to vertical tab if there is only one in the group #5747
• Remove blank lines before @file docblocks #4824
• Standardize on the spelling of "email" across Backdrop #4521

Maintenance release for Backdrop CMS. This update contains bug fixes only. An update hook was incorrectly included in the 1.22.1 version that advised removing Entity Reference module. That update was intended to be part of Backdrop 1.23.0, which will be released September 15, 2022. The incorrect update message was removed in this version.

Please see the release notes for 1.22.1 if you have not previously updated to that version.

Notes for updating

• The database update script does not need to be run.
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

Changes since version 1.22.1 are listed below.

• Fixed: Update hook in 1.22.1 mistakenly recommends removing entity reference.
• Fix type hint in doc block for function arg().
• Fix Error 1002 missing schema on project installer.

Security release for Backdrop CMS. This release fixes 1 security vulnerability:

• Backdrop core - Moderately critical - Information Disclosure - BACKDROP-SA-CORE-2022-004

Notes for updating

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No crucial changes have been made to the .htaccess, robots.txt or default settings.php files in this release. However, examples and documentation about how to use the new file_additional_public_schemes configuration value have been added to the default settings.php file. Updating your site settings.php with this documentation is optional.

Important information

Sites that use modules that provide alternative file systems (or "stream wrappers"), such as the S3 or remote file system module, may be affected by changes in this release. Backdrop now treats these alternative file systems as private by default. If a module intentionally wishes to serve files with no access checking or management by Backdrop, the module must now implement hook_file_download().

Since contributed modules that provide alternative stream wrappers might not be updated immediately for this security release, site owners may also specify which stream wrappers should be treated as public stream wrappers (with no access control). If content from a stream wrapper on your site stops working after this update, you can add the following line to settings.php:

$config['system.core']['file_additional_public_schemes'] = array('example');

...where example is replaced by the name of the affected stream wrapper. (For example, s3 or https.) The name of the stream wrapper will depend on the affected module and its configuration.

If you encounter this problem, please also verify or submit an issue in the module's queue to implement hook_file_download() for this security advisory.

Changes since version 1.22.0 are listed below.

Bug fixes

• Fixed: Custom logo/favicon should have 'permanent' status. #5660
• Added flood protection to the Password Reset form. #5659
• Fixed: PHP Notice: Undefined index: header in bartik_preprocess_layout(). #5652
• Fixed: PHP Notice: Undefined variable: links in node_revision_overview(). #5649
• Fixed: When upgrading from Drupal 7, the required File module should be automatically enabled. #5648
• Fixed: Unable to removing custom contexts from layouts. #5645
• Fixed: PHP Notice: Undefined offset: 0 in views_many_to_one_helper->ensure_my_table. #5643
• Fixed: Display the 'broken block' notice when fields blocks for deleted fields are displayed. #5627
• Fixed: Bulk Operations displayed should always match the entity selected for the operations. #5603
• Fixed: The configuration diff page throws an error if visited directly (which not intended). #5559
• Fixed: Views hooks are not invoked without a defined path in hook_views_api(). #5512
• Fixed: PHP 8.1 support for Default layouts (when path is NULL). #5501
• Fixed: Incorrect context data passed by LayoutRelationshipAuthorFromNode. #5482
• Fixed: Only print class attributes when attribute values are provided (no more class=""). #4977
• Fixed: Drupal 7 upgrade path must include setting for 'Error messages to display'. #4364
• Fixed: PHP notice: Undefined index in theme_get_setting(). #3981

User Experience Improvements

• A11y: Remove automatic focus on node form title fields. #5386
• People without permission to "Administer Book Outlines" can see the "Book outline" tab. #5626
• Change cursor to a hand when hovering over a button #5601
• Update hook descriptions should not have special characters removed. #4610
• Style "The update process was aborted prematurely..." message, as an error. #5392
• Choose better names for Admin Bar components, and add descriptions. #5284
• Choose a better default value for the 'Site name' setting, when installing Backdrop. #4675

Documentation and Developer Experience Improvements

• Fixed function description in docblock for system_theme_settings(). #5315
• Updated documentation for hook_schema_alter(). #3129
• Update docblock for template_preprocess_page(): correct the reference to system_element_info(). #4779

Miscellaneous changes

• Update the html5shiv library to version 3.7.3. #3880
• Add a views field for Menu link ID for books. #5565
• Optimize path_admin_form(): Avoid calling url() multiple times. #4963

Security release for Backdrop CMS. This release fixes 1 security vulnerability only:

Changes since version 1.21.5

• Backdrop core - Moderately critical - Information Disclosure - BACKDROP-SA-CORE-2022-004

Notes for updating

• The database update script does not need to be run.
• No crucial changes have been made to the .htaccess, robots.txt or default settings.php files in this release. However, examples and documentation about how to use the new file_additional_public_schemes configuration value have been added to the default settings.php file. Updating your site settings.php with this documentation is optional.

Important information

Sites that use modules that provide alternative file systems (or "stream wrappers"), such as the S3 or remote file system module, may be affected by changes in this release. Backdrop now treats these alternative file systems as private by default. If a module intentionally wishes to serve files with no access checking or management by Backdrop, the module must now implement hook_file_download().

Since contributed modules that provide alternative stream wrappers might not be updated immediately for this security release, site owners may also specify which stream wrappers should be treated as public stream wrappers (with no access control). If content from a stream wrapper on your site stops working after this update, you can add the following line to settings.php:

$config['system.core']['file_additional_public_schemes'] = array('example');

...where example is replaced by the name of the affected stream wrapper. (For example, s3 or https.) The name of the stream wrapper will depend on the affected module and its configuration.

If you encounter this problem, please also verify or submit an issue in the module's queue to implement hook_file_download() for this security advisory.

The Backdrop community is pleased to present the 1.22.0 release.

Notes for updating

• Note that the .htaccess file has been modified in this release compared with 1.21.4. It is suggested to copy changes from this latest version into your copy.
• No changes have been made to the robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• It will be necessary to run the update script (located at /update.php) for this release.

Very important: This version of Backdrop now requires PHP 5.6 or higher. Previous versions of Backdrop supported anything from 5.3 or higher, so if your site is running one of these very old installations of PHP, you will need to upgrade your server prior to upgrading.

Changes since version 1.21.4 are listed below.

New features

• Provide "Cards" by default – a new hidden-path content type (for new installations). #4903
• Add a new component to the Admin Bar with information about the current page. #2626
• Allow blocks to be disabled in Layouts. #1936
• Configure default date formats based on timezone/country (for new installations). #4645
• Add a new cropped image style specifically for cards (for new installations). #5607
• Add the ability to enable Backdrop-only required modules during an upgrade from Drupal 7. #5499
• Add a warning flag in the Status report if there are duplicate copies of a module. #5464
• Add various UI improvements in the Book module. #5331
• Add a link in the module browser to each module's BackdropCMS.org project page. #5003
• Add a setting to specify which Views display(s) get created by default. #2978

Bug fixes

• Fix incorrect links to GitHub in module browser for core modules. #5623
• Fix views-related tests after recent changes for default Cards functionality. #5615
• Fix default sort order for front page card view. #5608
• Fix extraneous gray stripe left over when removing Cards grid. #5599
• Fix output buffer notices. #5594

Miscellaneous changes

• Add new screenshot for Basis which includes the new Cards content. #5621
• Remove unnecessary path pattern for Cards. #5597
• Add description text to the 'Administer custom blocks' permission. #5544
• Drop support for PHP versions less than 5.6. #3992
• Separate "Administer comments and comment settings" into two distinct permissions. #336

Maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements only.

Notes for updating

• Note that the .htaccess file has been modified in this release compared with 1.21.4. It is suggested to copy changes from this latest version into your copy.
• No changes have been made to the robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Changes since version 1.21.4 are listed below.

Bug fixes

• Fixed: ViewsUpgradeTestCase is (partly) obsolete. #5620
• Fix main class and add more space to bottom of admin theme (Seven). #5600
• Fix: Contextual menu blocks access to dismiss link on notifications. #5595
• Fixed: Backdrop fails to alert admin user to rebuild content access permissions. #5589
• Fixed: 'Page not found' when trying to delete field attached to a non-node entity type. #5580
• Fixed: Generated .htaccess file missing newline at EOF. #5579
• Fixed: Documentation clarification on system_settings_form. #5574
• Fixed: deprecated function taxonomy_get_term_by_name() does not return any value. #5570
• Fixed: Admin bar's 'search' component doesn't work if 'menu' component is disabled. #5567
• Add better description text for administer layouts. #5552
• Fixed: Views cache causes validation errors. #5551
• Fixed: The layout context system is called way too many times. #5483
• Fixed: [UX] Clean up English on number form validation failure. #5264
• Fixed: Dashboard: Either hide the "Check manually" button, or the entire "Available updates" block, if user doesn't have the required permission. #5213
• Fixed: Number field #max values allow settings impossible to save in the database, causing exceptions. #4751
• Fixed: [UX] Admin Bar drop-downs go off-screen. #4549
• Fixed: With multiple image fields, only one thumbnail shows up per save. #4284
• Fixed: File Settings form supports tokens but doesn't display them. #4257
• Fixed: Redirect from cron.php to core/cron.php is too greedy (.htaccess change). #3903
• Fixed: [UX] Increase the width of the admin bar search results list (so that fewer results wrap in two lines). #1001

Documentation updates

• Add Documentation for hook_schema_0(). #5560

User Experience improvements

• Added: Improve the styling of color input elements in the admin theme. #4155
• Add: Modify .htaccess to allow backdrop to serve .well-known URIs. #5583
• [UX] Provide details about why a permission 'has security implications'. #5536
• Added: "Show as Expanded" help text needs revising. #5397
• Added: Distinguish layout-created/module-provided/missing-callback paths on the layout listing page. #5077
• Added: [UX] Show a message when viewing hidden/pageless content. #3339
• Added: [UX] Views: Update help text for option to create exposed form block. #1322

The Backdrop community is pleased present the 1.22.0 preview release. This version of Backdrop is intended for developers who would like to try out the latest version of Backdrop, try new features, and check for bugs prior to the final release of 1.22.0, which will be May 15, 2022.

Note that the .htaccess file has been modified in this release compared with 1.21.4. It is suggested to copy changes from this latest version into your copy.

Very important: This version of Backdrop now requires PHP 5.6 or higher. Previous versions of Backdrop supported anything from 5.3 or higher, so if your site is running one of these very old installations of PHP, you will need to upgrade your server prior to upgrading.

New features

• Provide a new hidden-path ("Card") content type in core #4903
• Create a new cropped image style specifically for cards #5607
• Layout UI: Allow blocks to be disabled/hidden instead of removed. #1936
• Add links for quick access to editing things like the layout, theme, etc. of the current page #2626
• Configure default date formats based on timezone/country. #4645
• Enabling Backdrop-only required modules (e.g., Entity Plus) during upgrade from D7 #5499
• Status Report should flag duplicate module installs #5464
• UI improvements to Book module #5331
• Add a link to the BackdropCMS.org page on module list for each module #5003
• Customize "Add Block" and "Add Page" defaults when creating a new View #2978

Miscellaneous changes

• Drop support for PHP lower than 5.6 (or establish best-effort policy) #3992
• "Administer comments and comment settings" should be split into two permissions #336
• Add better description text for administer blocks #5544

Security release for Backdrop CMS. This release includes several bug fixes, and fixes 1 security vulnerability:

• SA-BACKDROP-CORE-2022-003

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Changes since version 1.21.3 are listed below.

• Fixed: Administrator Role form saves wrong value on sites with numeric role machine name #5528
• Fixed: Cached anonymous page and "background fetch" cause site rendering issues for LiteSpeed server #5525
• Fixed grammar error in Views row class description text #5143
• Fixed TaxonomyTerm Not Creating Term Hierarchy Reference #5540
• Fixed: Detect LightSpeed/OpenLightSpeed and IIS servers for telemetry data #5524
• [UX] Moved the 'Clear log messages' button to the bottom of the page #5484
• Removed duplicate selectors in Seven's Vertical Tabs CSS file #4834

Security release for Backdrop CMS. This release fixes 1 security vulnerability:

• SA-BACKDROP-CORE-2022-003

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Security release for Backdrop CMS. This release fixes 1 security vulnerability:

• BACKDROP-SA-CORE-2022-002

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Changes since 1.21.2

• Fixed: The "langcode" column in the node table should not be emptied when upgrading from Drupal 7

Security release for Backdrop CMS. This release fixes 1 security vulnerability:

• BACKDROP-SA-CORE-2022-002

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Security release for Backdrop CMS. This release fixes 1 security vulnerability:

• BACKDROP-SA-CORE-2022-001

Notes for updating:

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

Additional changes since version 1.21.1 are listed below.

Bug fixes

• Fixed PDOException: SQLSTATE[42S02]: Base table or view not found: 1146 Table variable doesn't exist. #5495
• Fixed functional tests: Several tests never run - class not found for tests in system.test. #5490
• Fixed messy indentation in node.actions.inc. #5488
• Fixed typo in user_cancel_user_action(). #5487
• Fixed Taxonomy terms: createAccess() should include per-vocabulary check. #5481
• Fixed menu_update_1006() on pgsql (Upstreaming Silkscreen patch) #5472
• Fixed fatal error on node save after disabling the comment module. #5470
• Fixed Files directory .htaccessdoes not match text in core/includes/file.inc. #5466
• Fixed Remove duplicate instances of cron_queue_test.module and cron_queue_test.info files. #5465
• Fixed View mode not accessible from user or comment template files. #5280
• Fixed broken handlers for textgroup in Locale module. #4838
• Fixed PHP Notice: Undefined property: view::$exposed_input in attach_to(). #4075
• Fixed Undefined variable '$values' in token.test. #4062
• Fixed ambiguous wording in filter module comment. #4061
• Fixed API documentation inconsistency re adding JS to every page. #3650

Documentation updates

• Add documentation for hook_taxonomy_term_page_alter(). #4635
• Update documentation for filter_format_save(). #2962

Miscellaneous changes

• Provide $original vocabulary to presave and update vocabulary hooks. #5475
• [UX] Separate descriptions for book navigation block settings. #5462
• Added PHP 8.1 support. #5398
• [D9][SR] Added better logging to User module flood controls. #5035
• Make the reminder message about update_free_access a proper warning. #4804

Security release for Backdrop CMS. This release fixes 1 security vulnerability:

• BACKDROP-SA-CORE-2022-001

Notes for updating:

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

No additional changes are included in this release.

Maintenance release for Backdrop CMS. This update contains an important regression fix that was included in the 1.21.0 release.

Notes for Updating

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

Changes since 1.21.0

Bug fixes

• Fixed: Regression in 1.21.0 that causes duplicate Menu Links #5460

Usability Improvements

• Fixed: Use the text "User accounts" in new token description text. #5459

The Backdrop community is proud to release version 1.21.0 of Backdrop CMS, following our 4-month release cycle.

Notes for updating

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

New features

• Add crop anchor point for Scale and Crop image effect. #5080
• Add additional CSS classes on regions in Flexible layout templates. #5044
• Add a "negate" option to the visibility condition for roles. #4689
• Add settings for which parts of the book navigation to display. #5430
• Add filters for ClassName to the Interface for listing available tests. #5257

User Experience improvements

• Separate help text for publishing options #3122
• Place breadcrumbs above the page title for new installs. #4113
• Add Date format tokens for date fields. #2069
• Remove all instances of "please contact an administrator" from messaging #4802
• Remove item from text on the Add another item button. #5235
• Changed "path alias" to "URL alias" throughout code and interface. #5405
• Make the default home page path required #3343

Developer Experience improvements

• Add entity_view() into core #1739
• Provide a helper function to prevent a layout from wrapping around content. #1728
• Add an 'empty' option to theme_item_list() #5380

Bug fixes

• Fixed: Don't send Telemetry data from PR Sandboxes. #5444
• Fixed: Fatal error: Argument 1 passed to file_icon_url() when using custom File display modes. #5370
• Fixed: Added missing 2nd asterisk to code comment opener for system_update_1079(). #5451

Miscellaneous changes

• Remove all instances of "blacklist" and "whitelist" from core #4441
• Update jQuery UI to 1.13.0 #5401
• Optimize menu_navigation_links_rebuild() #5389
• Remove Zen.CI from the core repository. #5197
• Enable telemetry module on new installs #5253

Maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements.

Notes for updating:

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

changelog since last version:

New features

• Collect Telemetry data on Web Server. #5423

User Experience improvements

• Add help text on the Layout listing page to explain order and grouping. #4868
• Improve the description for the Path field on the configure layout page. #5399
• Add help text to the roles listing that explains how the order is used. #4504
• Increase contrast for "required" asterisk in all core themes. #5425
• Improve descriptions for the "dangerous" tokens cancel-url and one-time-login-url. #5445
• Make "Add another item" buttons easier to distinguish from the field label. #3520
• Switch to using '#type'=>'help' instead of wrapping #markup in <p>. #5412
• Permissions matrix should scroll horizontally when too wide for vertical tab. #5384
• Add a success message after clicking "Save and exit" when creating a Views page display. #3848

Bug fixes

• Fixed: Simpletest doesn't handle empty or malformed .tests.info files well. #5415
• Fixed: Add default value for options in system_transliterate_machine_name(). #5365
• Fixed: Dependencies version check not working for modules that use three digits (e.g. 1.0.14) #5356
• Fixed: cache_entity_* tables must be dropped before running update.php when upgrading from Drupal 7. #5340
• Fixed: node--type templates are not used when placed via the "existing content" block. #5311
• Fixed: Add sameSite attribute to Backdrop tableDrag cookie. #4718
• Fixed: Undefined property originalLanguageDefault in simpletest. #4679
• Fixed: Login form throws SQL error when two usernames or passwords are sent in POST. #4240
• Fixed blocked dependencies in Project Installer. #4120
• Fixed: Prevent flickering on formatting options fieldset during expand/collapse animation. #3596
• Fixed: Add numeric validation on entity IDs for visibility conditions. #2668
• Fixed: Prevent PHP Notice: Undefined index: quantity in views_plugin_pager_full->options_form(). #1435
• Fixed: Create a URL alias for the first user account. #1417

Miscellaneous changes

• Fixed: Improve description for theme_head_tag() function. #5452
• Fixed: Move "Search" buttons into "Actions" group to inherit action button styles. #5387
• Fixed: Remove mention of global theme settings from docblock on theme_get_setting(). #451
• Fixed: Typos in README.md #5119

This is the preview release of Backdrop 1.21.0. Please use this version if you would like to help us test the features in the new version of Backdrop prior to the official release on January 15th, 2022.

Notes for updating

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

New features

• Add crop anchor point for Scale and Crop image effect. #5080
• Add additional CSS classes on regions in Flexible layout templates. #5044
• Add a "negate" option to the visibility condition for roles. #4689
• Add settings for which parts of the book navigation to display. #5430
• Add filters for ClassName to the Interface for listing available tests. #5257

User Experience improvements

• Separate help text for publishing options #3122
• Place breadcrumbs above the page title for new installs. #4113
• Add Date format tokens for date fields. #2069
• Add an 'empty' option to theme_item_list() #5380
• Remove all instances of "please contact an administrator" from messaging #4802
• Remove item from text on the Add another item button. #5235

Developer Experience improvements

• Add entity_view() into core #1739
• Provide a helper function to prevent a layout from wrapping around content. #1728

Miscellaneous changes

• Update jQuery UI to 1.13.0 #5401
• Optimize menu_navigation_links_rebuild() #5389
• Remove Zen.CI from the core repository. #5197
• Enable telemetry module on new installs #5253

Maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements only.

Important update information

• The database update script does not need to be run
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

Bug fixes

• Field name is blank in error message "__ field is required" when a required field set to 2 or more #5377
• Notice: Undefined index: file_field_file_table in file_view_file() (line 3441 of /app/core/modules/file/file.module). #5371
• Fix errors in views_style_jump_menu.inc caused by null absolute element #5366
• Flexible layouts: "Row" label/indicator rendered in the frontend #5343
• PHP7.4 and empty entity_keys for taxonomy term result in notices #5290
• [DX] Form API: Adding #attributes to fields of type container breaks #states #5157
• Project Installer UI: Sub-modules that are hidden should not be shown #5054
• [UX] When adding a new Text (short) field, the textfield widget should be the default #4717
• [UX] Modal popups jump to the top of the page when opened #4342
• Views UI: Fix "Replacement patterns" visibility for Global: Custom Text #1928
• Views writes log to watchdog about files[] - update for new autoloader #1559

Miscellaneous changes

• Add Views handler for term aliased path #5338
• Remove all implementations of hook_help() #3758

Security release for Backdrop CMS. This release fixes a security vulnerability in a third party library. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

Backdrop core - Moderately Critical - Third Party Libraries - SA-BACKDROP-CORE-2021-006

Important update information

• The database update script does not need to be run
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

This release also contains a number of small bug fixes and improvements:

Bug fixes

• Fixed: Update cache flush doesn't work #5326
• Fixed style issues with Flexible layout template UI and make it more consistent with the layout/blocks UI #5149
• Fixed: Save button missing from theme settings form #5308
• Fixed Date Theme automated test fails from 23:00 to 23:59 UTC #5303
• Fixed: Form cache test not properly ported from Drupal #5304
• Fixed Context validation error on Configure Layout page (and empty page output on cancel) #5065
• Fixed performance on the Modules listing page /admin/modules #5046
• Fixed Random test failures with PathPatternBulkUpdateTestCase #4862
• Fixed: PHP 8: Fix test failures in Form element validation #5310
• Fixed: PHP 8: Database: Transaction test failure #5325
• Fixed: PHP 8: Broken test locale_get_plural() - ArgumentCountError in intval() #5319
• Fixed: PHP 8: Views Plugins: Cache / Views fields for Field API #5314
• Fixed: PHP 8: Views Handlers: Filter: in_operator - Array to string conversion #5313
• Fixed: PHP 8: Layout interface broken - Unknown named parameter $id #5312
• Fixed: PHP 8: Get views exposed filters with checkbox working #5305

Documentation updates

• Update documentation for theme() to state direct usage is acceptable #5232

Miscellaneous changes

• Full PHP 8 Support #5076
• Added 1Password to the list of projects that support us #5324
• Added backwards-compatible wrapper views_ui_build_form_url() #5323
• Added the ability to clone a views display while changing the display plugin #5246

Regressions

• This release introduced a small bug in the flexible layout template. This issue provides a small fix which can be applied while waiting until next patch release.

Security release for Backdrop CMS. This release fixes a security vulnerability in a third party library. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

Backdrop core - Moderately Critical - Third Party Libraries - SA-BACKDROP-CORE-2021-006

Important update information

• The database update script does not need to be run
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

This upgrades the CKEditor library to version 1.17.2. No other changes are included.

This is a maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements only.

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script (/core/update.php) does not need to be run.

Bug fixes

• Fix the broken table output on the custom blocks admin page #5251
• Syntax error in file.test prevents File tests from running. #5293
• PHP warning on upgrade from Drupal 7 in system_get_date_formats() #5288
• Fix the display of test failure output in GitHub Actions #5236
• The help text in "String contains" field in "User interface translation" says that search is case-sensitive, when it's not #4677
• Views: Incorrect filter group OR behavior, LEFT JOIN changed to INNER JOIN #3415

User Experience Improvements

• Add a 'Save and set permissions' button to the 'Add role' form #5208
• Highlight "New" Dashboard Notifications #5098

Miscellaneous changes

• Upgrade from ubuntu-18.04 to ubuntu-20.04 for GitHub Actions #5209

The Backdrop community is proud to release version 1.20.0 of Backdrop CMS, following our 4-month release cycle.

This release contains several new features, user experience improvements, and a few bug fixes for these recent improvements.

Notes for updating

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

Changes since 1.19.4

New features

• Add Better Taxonomy permissions #382
• Add the HTML details element to core form API #324
• Add a Telemetry module to (anonymously) collect useful data #285
• Add the ability to make messages dismissible #4571
• Standardize Label and machine name usage in admin listings #3402

User Experience Improvements

• Add a new icon for "Structure" in the admin bar #4427
• Add a summary text next to the CKEditor formatting options link, showing the active format #3595
• Add an exposed filename filter for the media library #3293

Bug fixes

• Fixed: Missing update description for system_update_1076() #5203
• Fixed: Shorthand [] for array() breaking PHP 5.3 tests #5200
• Fixed: Insufficient access to Taxonomy Block on Dashboard #5198
• Fixed: Module config is not automatically synced on install #3224
• Remove the option for configuring the admin theme to always be the same as the default theme. #4461

Miscellaneous changes

• Added: GitHub Actions for automated tests #4753
• Fixed: Node preview layout code should live in node module via hook_layout_layouts_alter() #5067

This is a maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements only.

Notes for updating

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

Accessibility Improvements

• Remove 'navigation' role from 'nav' elements #4032
• Use Backdrop.announce() when using Block drag and drop rearrangement #5021
• Backdrop Admin Bar Menu Search Input Field - Accessibility Suggestion #4997

User Experience Improvements

• Provide more guidance on password strength required #5095
• Basis: Remove underline from Delete button #4206
• Update the dated icons for sorting tables #3906
• Remove search block default title #3476
• Improve the message about theme color.module support. #3458
• Remove ordering/weight from the vocabularies listing page & style the page consistently with the Views listing page #2029
• Add a 'Save and add terms' button to the 'Add vocabulary' form. #999
• Config import should list all invalid configs, not just the first one #5146
• Button colors inconsistent when Basis used as admin theme #5130

Bug fixes

• Render function in views_handler_field_file_filemime passes bad info to file_icon_url() #5227
• Views: initial setting "Use a pager" ignored #5224
• Simpletest FilterEditorLinkValidateTestCase silently broken on PHP 5.3 #5215
• Spelling mistake: langauges #5211
• Random failures or timeouts in BatchProcessingTestCase (race condition in all batch processing) #5205
• Example in help text for current-page args tokens is wrong #5194
• Random failures in CommentInterfaceTest - Link with label 1 new comment not found. #5189
• Database update fails when Backdrop is set to another language than English and the string "Apply pending updates" has a translation #5168
• BootstrapPageCacheTestCase failing in mod_proxy Apache environments #5126
• Wrong url to update.php if language prefix in use #5092
• Field UI: (Almost) empty page titles on display settings pages for user and comment #4901
• Unable to save link to node with non-ascii characters in title when transliteration is off #4630
• Non standard property “zoom” [CSS] #4276
• Symlink to document root causing several update and install issues #3008
• Random test failure: Locale: Translation import (LocaleImportFunctionalTest) #2611
• Initialize the return array in path_get_info() #5137

This is a preview release of Backdrop 1.20. Please use this version if you would like to help us test the features the new version of Backdrop prior to the official release on September 15, 2021.

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• It will be necessary to run the update script (located at /core/update.php) for this release.

New features

• [A11Y] Add the HTML details element to core form API [#324])https://github.com/backdrop/backdrop-issues/issues/324)
• [META] Telemetry: (anonymously) collect useful data #285
• [UX] Better Taxonomy permissions #382
• [UX][DX] Provide the ability to make messages dismissible #4571
• [UX] Add filename filter for media library dialog #3293

Bug fixes

• Module config in /config is not synced on install #3224

Miscellaneous changes

• Move node preview layout code into node module via new hook in layout module #5067
• Replace the icon for "Structure" in the admin bar #4427

Security release for Backdrop CMS. This release fixes a security vulnerability in a third party library. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

Backdrop core - Moderately Critical - Third Party Libraries - SA-BACKDROP-CORE-2021-005

Important update information

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.

This release also contains a number of small bug fixes and improvements.

• Fixed several incorrect calls to backdrop_static() #5142
• Fixed repeating icons on main Configuration page #5138
• Fixed: Views wizard button text says 'edit' and not 'configure' #5131
• Fixed tests on newer environments when the profile cache is enabled #4392
• Fixed: selected file is lost when a form is submitted anonymously with an un-uploaded file that fails validation #1678
• Add the 'Permissions-Policy' header to block Google FLoC #5103

Security release for Backdrop CMS. This release fixes a security vulnerability in a 3rd party library. Sites are urged to upgrade immediately after reading the notes below, and the security announcement:

Backdrop core - Moderately Critical - Third Party Libraries - SA-BACKDROP-CORE-2021-005

No other changes are included in this release.

Important update information

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Backdrop 1.19.2

Security release for Backdrop CMS. This release fixes a security vulnerability. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

Backdrop core - Critical - Third Party Libraries - SA-BACKDROP-CORE-2021-004

Important update information

• The default robots.txt file has changes. It is recommended to update your robots.txt file to include the new changes. See #5122 for more information.
• No changes have been made to the .htaccess or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

This release also contains a number of small bug fixes and improvements.

Bug fixes

• Views exposed grouped filter of numeric field doesn't show "value" input fields #5127
• Remove trailing slashes from robots.txt #5122
• Change admin/people dropbutton operation from "Cancel" to "Cancel account" #5118
• Potential regression for contrib (backup_migrate) caused by initial php 8 support #5094
• Trying to sort NULL array in field_ui_widget_type_options() #5037
• Disable Brotli for pre-compressed CSS and JS #4748

Documentation updates

• Better documentation for dependencies when enabling, disabling or uninstalling modules #4872
• Documentation for adding keys along with fields is confusing. #3759

Miscellaneous changes

• [A11Y] Dashboard: incorrect semantic structure in heading tags on the "Welcome to Backdrop" block #5038
• Update Copyright information in License section of README.md #5029
• Rename 'Enable' buttons for display modes #4890
• Change page title name to Configuration Manager #4711
• [UX] Automatically clear caches when making changes to the "Who can register accounts?" setting. #4500