5.1.5 (2024-03-22)

Contributors

Jerôme Bakker (7)
Jeroen Dalsem (1)

Bug fixes

core:
- improved friendly title for multibyte characters 6d80fa23f closes #14577
- no longer set dynamic property on exceptions 21b41a6a6
ckeditor: do not limit html elements in ckeditor 01bacfc51
plugins: improved handling of composer version constraints 8dd38c0b7 closes #14580
pages: correctly disable parent page option 02a4f3bfa

5.1.4 (2024-01-12)

Contributors

Jerôme Bakker (3)
Jeroen Dalsem (2)

Bug fixes

comments: only load comment form when needed 1eaa55b48
session: allow samesite cookie configuration 1dcb96c26
notifications: prevent unneeded content subscriptions 3ffedc0ad closes #14301

5.1.3 (2023-12-15)

Contributors

Jeroen Dalsem (5)
Jerôme Bakker (2)

Bug fixes

cli: database seed command no longer queues notifications 7fb4139fe
uservalidationbyemail: only allow confirm link for logged out users 89ba96f5d
users: prevent ban/unban notifications for users during disable 623a2fe6a

5.1.2 (2023-11-30)

Contributors

Jeroen Dalsem (4)
Jerôme Bakker (4)

Bug fixes

output: link must have discernible text 8ed45c12d
web_services: only create new tokens on initial save a1904fc7c closes #14516
developers: removed metadata enabled column in entity explorer 4256e4dd7

5.1.1 (2023-11-17)

Contributors

Jerôme Bakker (9)
Jeroen Dalsem (5)

Bug fixes

webservices: no longer expose parts of the system during an error a0db26a40
cli: provide readable feedback when using incorrect cron interval c658dd2b7
pages: don't allow a page to be its own parent f029d1e69
views: don't output a summary title if no display name 385475469
css: improved elgg-level behaviour on limited viewports a1482000f
routes: correctly deprecate the comment/edit route 04bed5687

5.1.0 (2023-10-24)

Contributors

Jeroen Dalsem (37)
Jerôme Bakker (36)

Features

ckeditor:
- updated to v40.0.0 441c0f442
- ctrl+enter in the editor field will submit the form 5b0bd6a8d
css: allow theme variables to be configured by the site admin 3eb7fe354
cron: added custom cron logger class 6535d386b
a11y:
- added menu aria labels 19869cfc9
- added aria search forms 091202e4a
- added header, main, footer aria landmarks 61315fe7e
views: support a title on an imprint element 2ebfccb09
breadcrumbs:
- improved usability of elgg_push_collection_breadcrumb 68c6d069e
- last item pointing to current page will be removed 95b305458
- added a home icon as a first item e78e7ee68
blog: prevent double submit of the blog form 0a23cd09b
cli:
- interactively set number of seeded items per seeder 337b1bd71
- added database seeders command 12baa7c68
- activate plugins CLI command supports plugin priority 160fcaf69
- installer now has the option to prevent plugin activation 1a20e79ef
security: add support for security.txt 2709c2db4 closes #14315
admin: reorganized admin and configure utilities menu items de1959ad5
widgets: the widget edit form now shows in a lightbox 15e68df90
input: the value output view for an userpicker can be set 585903bb9
developers:
- the theme sandbox is now a separated plugin 22cd62e89
- added inspection page for the database CLI seeders e8255d3f6
html: added a scroll to top button 58b1ae7d1
js: client side validate max file size for file input 3b19a7071 closes #7059

Bug fixes

css: fixed some margin issues on elgg-field form elements 1565a6d47 closes #14354
a11y:
- topbar sub menu items are now keyboard accessible 6326c3902 closes #6759
- make sure widget edit/delete actions are keyboard accessible d7b61ed15 closes #14471
- tab to first item in opened dropdown menu 487d7370a
- edit comment form sets focus to comment textarea 477646730
- keep focus on toggled menu item a18ad0057
cache: report HTTP 410 Gone on stale cache urls cfd488361 closes #14086
views:
- prevent duplicate ids on widget layouts b17877975 closes #14428
- do not use rel to track related hover menu placeholders 972f40873 closes #14430
breadcrumbs: no longer add a breadcrumb if link to self is false 7a44a533c

Deprecations

views: resource and route for comment edit are not in use 84deb0e54

5.0.7 (2023-10-10)

Contributors

Jeroen Dalsem (5)
Jerôme Bakker (2)

Bug Fixes

forms: prevent double submit on comment forms (1b057186)
icons: retry icon resize after failure (e04e396b)

5.0.6 (2023-09-07)

Contributors

Jerôme Bakker (2)
Nikolai Shcherbin (1)

Bug Fixes

ckeditor: early abort object mentions on closing bracket (b397601c)
docs: document correct function (e9ba84a1)

5.0.5 (2023-08-16)

Contributors

Jeroen Dalsem (1)
Jerôme Bakker (1)

Bug Fixes

rss: invalid atom link href in rss channel (0467cf87)

5.0.4 (2023-07-26)

Contributors

Jerôme Bakker (9)
Jeroen Dalsem (1)

Bug Fixes

ckeditor: added all block level image alignments to toolbar (6fff9429)
icons: prevent racing condition when saving cropping coordinates (b4993528)
notifications: processing delayed emails could cause OOM issues (5e0fcab1)
views:
- input/button and output/url must have discernible text (924b2cdc)
- make sure the icon cropper img has an alt text (0cc105c8)
- allow mobile devices to zoom (1cee1be1)
- correctly set iframe width for PHPInfo (e72f476e)
- only generate listing ID when using pagination (ffe94eab)

5.0.3 (2023-07-14)

Contributors

Jerôme Bakker (7)
Jeroen Dalsem (3)

Bug Fixes

admin: admin layout now gets correct layout class (f0c348c0)
composer: no longer try to symlink the mods on Windows (5319f0ea)
database: execute delayed queries immediately during CLI (d2d23209)
email: image styles will be converted to attributes if possible (f306388b)
http: maintain set redirect code in response (c4ad5037)
icons: make sure transparent images have a white background (25d039b2)
settings: prevent setting changes from being added to the systemlog (708cb7ff)
site_notifications: return correct actor (a2ee148f)
user: prevent logging of changes to last_login and prev_last_login (ba28f760)

5.0.2 (2023-07-03)

Contributors

Jerôme Bakker (5)

Performance

site_notifications: simplify site_notification removal query (ad8bd918)

Bug Fixes

thewire: improved hashtag matching (67277b2f)
user: return correct type for getOwnerGuid (72856546)
views: correctly handle errors in mention parsing (92dc5d6d)

5.0.1 (2023-06-19)

Contributors

Jeroen Dalsem (6)
Jerôme Bakker (4)

Bug Fixes

cropper: only register tab change fixes when cropper is ready (33feb185)
db:
- allow passing only relationship_ids to fetch relationships (ad06ace9)
- querying relationships with only relationship_guid now works (8bfe76e7)
js: use native scrollIntoView to respect element scroll margin (9b1b1850)
registration: send the new user notification to email (b845f475)
river: always return a string for RiverItem->getView() function (10437cf5)
seeder: validate commentable and likeable capability during seeding (fb151710)

5.0.0 (2023-06-01)

Contributors

Jerôme Bakker (10)
Jeroen Dalsem (4)

Features

ckeditor: confirm page navigation on unsaved editor changes (789c27b0)

Bug Fixes

ckeditor:
- use pixels instead of percentages when resizing images (4bd4e629)
- image upload progress and icon are beter visible (7c44af72)
cropper: fixed issue when the cropper is on a hidden tab (7b7dcfae)
plugins: correct layout when a plugin can't be (de)activated (35a36232)
views: validate elgg_list_entities getter return type (b349f367)

Breaking Changes

core: metadata value no longer magically turns into an array (b0f4695f)

5.0.0-rc.1 (2023-05-22)

Contributors

Jerôme Bakker (11)
Jeroen Dalsem (8)

Features

ckeditor:
- strip empty paragraphs when outputting longtext fields (dfd24629)
- added the simpleButton plugin (9334b61e)

Bug Fixes

icons: show cropper messages for header images (a09f7d36)
output: correctly format 0 byte output (1a27a14c)

5.0.0-beta.1 (2023-04-05)

Contributors

Jeroen Dalsem (108)
Jerôme Bakker (62)

Features

access_collection: trigger 'create', 'update' and 'delete' events (8a8e89a5)
actions: action registration can support additional middleware (90c786e1)
activity: commenting bumps related river activity last action (00868b68)
admin:
- added a widget for admins with a feed with latest Elgg news (697481f1)
- moved page menu items to the topbar (535d0eb2)
- admin account menu is now more in line with front end (405b114e)
- moved plugin settings menu items to own section (6098f150)
ckeditor: replaced ckeditor4 with ckeditor5 (52ea3488)
core:
- added download response (12204ccd)
- upgrade batches now have access to upgrade entity (5cc3a108)
- event and hook deprecation now have a default message (992e7ef3)
db: private settings are merged into metadata (cb9951a5)
entities: create event has been split into before and after event (432b4dad)
events: event sequences have a unique ID (0febd638)
files:
- file plugin files are now stored with the entity (9df0cd0a)
- no longer show file type icons in regular listings (fe263adf)
forms: automatically support sticky forms (320a8110)
garbagecollector: cleanup orphaned data in the database (230a8ee9)
gatekeepers:
- added PageOwner gatekeeper middleware (443c6f27)
- pageownercaneditgatekeeper now requires a pageowner (6553b9a2)
http: added helper function to get a Http Guzzle Client (d2f60974)
icons: icon cropping is now default enabled in entity/edit/icon (a845ce04)
plugins: it is now allowed to set arrays as private settings (de415231)
reportedcontent: added detail view for reports with comments (90fc1195)
routes: added the ability to influence priority for similar routes (d257f024)
tests: allow easier testing with multiple installations (ac3035e0)
users: if configured a river activity is for a new user (d5a1d944)
views: page header now has support for header image (84929789)
web_services:
- API methods can be registered in the elgg-plugin.php (6357e73e)
- allow different callbacks depending on HTTP request (d67507e0)
widgets:
- it is now possible to filter the widgets in the add panel (7d95d87c)
- target column and position can now be configured (97d657c4)

Documentation

events: added some additional information about migrating hooks (6d607025)

Bug Fixes

core: prevent issues with unsaved data and system log (4048eeec)
filestore: improved removal of a directory (a6c09c81)
forms: draw fieldset legend on correct location (c1a012ac)
likes: use variable in translation string (d39e33da)
search: use correct container type title (ba742d1f)
views: output/url now returns nothing if there is no url (db8b6e06)

Breaking Changes

hooks: hooks and events system has been merged (720a38a5)
menus: elgg_register_title_button has its first argument removed (ddb25972)

Removed

blogs:
- no longer show a delete button on blog edit form (8274c0e8)
- auto save draft functionality has been removed (bb71b807)
core:
- InvalidParameterException as removed (aedb914c)
- the REFERER constant is removed in favor of REFERRER (a3137340)
- it's no longer possible to set site secret in elgg-config (80e91091)
files: file plugin no longer uses custom file type icons (92c50dd1)
plugins: the embed plugin has been removed (31a443c5)
widgets: class function saveSettings has been removed (3c58daee)

4.3.10 (2023-11-17)

Contributors

Jerôme Bakker (2)

Bug Fixes

session: correctly invalidate session on privilege elevation (6357da49)

4.3.9 (2023-07-26)

Contributors

Jerôme Bakker (2)
Nikolai Shcherbin (1)

Bug Fixes

admin: use correct params for memcache and redis server information (6ee26b94)

4.3.8 (2023-04-04)

Contributors

Jerôme Bakker (3)

Bug Fixes

core: prevent fatal exception when opening a file (07951e89)

4.3.7 (2023-02-10)

Contributors

Jerôme Bakker (4)

Bug Fixes

icons: improved handling of invalid cropping coordinates (db7cf911)
upgrades: use correct function to report upgrade failure (a860911e)

4.3.6 (2023-01-20)

Contributors

Jerôme Bakker (5)

Bug Fixes

cache: correctly load simplecache from database (0f92673f)
comments:
- no longer add duplicate html ID in threaded comments (242d9a5d)
- correctly remove threaded comments (65817a0e)
discussions: correctly handle last comment (bfc1700c)

4.3.5 (2022-12-07)

Contributors

Jerôme Bakker (7)

Bug Fixes

account: improved valid username detection (0115b714)
developers: correctly show metadata boolean values (189370c3)
icon: improved handling of multiple icon uploads on the same page (d7da537a)
register: set correct middleware on registration action (39648e30)
webservices: pass authentication failure message to api result (5d852205)

4.3.4 (2022-10-27)

Contributors

Jerôme Bakker (8)
Jeroen Dalsem (2)

Bug Fixes

groups: correctly detect default access based on input parameters (4a8a05c9)
users: correctly redirect after user deletion (b5b35701)

4.3.3 (2022-10-07)

Contributors

Jerôme Bakker (3)

Bug Fixes

db: correctly handle sort_by clauses on more tables (1c7d6392)
session: show correct login error message for unvalidated accounts (713fde5d)

4.3.2 (2022-09-23)

Contributors

Jeroen Dalsem (1)

Bug Fixes

output: allow mailto and tel scheme if used directly via output/url (bad4de81)

4.3.1 (2022-08-26)

Contributors

Jerôme Bakker (5)

Bug Fixes

icons: correctly remove all icons (85f4ba0f)
plugins: sanitize plugins path (66a066ab)

4.3.0 (2022-08-05)

Contributors

Jeroen Dalsem (7)
Jerôme Bakker (7)
Nikolai Shcherbin (1)

Features

relationships: added ->getRelationship() (31a03961)

Bug Fixes

cache: separated cache namespaces should not interfere (0a2e40ca)
developers: gear settings popup works again (8ba956dc)
navigation: correctly merge multiple link classes for menu items (3f94a30b)

4.3.0-rc.1 (2022-07-21)

Contributors

Jeroen Dalsem (50)
Jerôme Bakker (31)
Ally Petitt (1)
Nikolai Shcherbin (1)

Features

admin: open recent cron log in lightbox instead of in widget (db25a973)
ckeditor: updated to ckeditor v4.19.0 (d0e47c05)
core:
- add path sanitization function (c7abf151)
- implement generic namespace of exceptions (0fd13f0e)
- move the PAM handlers to a service (4cb55938)
discussions: added group selection when starting a global topic (dfe38f67)
forms: added class to fields that have been disabled (b95821f6)
groups: moved group tool field into its own view (77ff14cc)
html: added SRI validation to local scripts and stylesheets (516412e4)
icons:
- added config flag to enabled/disable webp icons (c2a78165)
- added FontAwesome zip upload so admins can update icons (02a4030a)
menus: added support for a custom tag name for section headers (a3c521c3)
notifications:
- allow to provide a notification actor (a314571f)
- notification handlers can controll e-mail mute link (422019b9)
- added triggers to track en/dequeue events (9569225e)
registration: allow to register with a valid invitation code (04127336)
system_log:
- added event type to the event action logged (eb4273cf)
- improved logbrowser features (4a7b350c)
user: added internal cache for profile data (7be4ca64)
users:
- allow filtering of inactive users (6ca3d63a)
- added confirmation form when deleting a user (2234de28)
views:
- added widget_more element to entity listings (6ca4c78a)
- added html5 video support to the file plugin (d713749e)

Performance

core: added config flag to disable file exist check in classloader (234e9891)

Documentation

release: update core release documentation (600b7517)
support: added 4.3 to the support page (9216020e)

Bug Fixes

annotations: save/update annotations return false on null values (4947ede8)
core: generate correct URLs in special request cases (8f602520)
notifications: handle exceptions during notification processing (d94cb193)
user: only show language completeness on user settings for admins (65205220)
users: briefdescription icon should be false by default (f40750cc)

Deprecations

annotations: annotate event is deprecated (072ca669)
config:
- changed the way config variables are protected (3a53a6cd)
- deprecated some more config variables (c8190587)
- do not use config->elgg_settings_file (14b8073c)
core:
- renamed various user related lib functions (0f1d15fb)
- prefix relationship functions with elgg_ (4467cb8b)
- renamed various session related lib functions (82b6ffe4)
- prefix core functions with elgg_ (517e9d25)
- various lib functions and hooks deprecated (22fe011a)
db:
- old style database configuration (5c5d2394)
- using order_by_[metadata|annotation] is deprecated (ae12730d)
forms: clear a single sticky form value (d950a3d3)
friends: Friends trait functions (1221d6ce)
hooks: old or obsolete hooks have been deprecated (d46f320a)
icons: replaced the 'classes', 'icon' hook (0acb87fc)
js: toggle and popup now init with a class instead of rel (97ba1790)
metadata: delete metadata by id (d7b3c1fb)
views: (un)register external views (2aa22ba7)

4.2.3 (2022-07-04)

Contributors

Jeroen Dalsem (2)
Jerôme Bakker (2)

Bug Fixes

blogs: preview opens in blank window to prevent history issues (39a99376)
forms: datepicker should show correct prev/next characters (48bff527)

4.2.2 (2022-06-17)

Contributors

Jeroen Dalsem (8)
Jerôme Bakker (5)

Bug Fixes

cache: make sure the CLI and webserver use the same cache path (fda6463e)
db: support passing relationship guid when sorting by relationship (21b9f1e6)
groups: groupprofile rss feed should show recent searchable content (54353859)
icons: check filesize when checking if entity has icon (50989148)
menus:
- allow detecting selected sorting parent from view var (822ac99c)
- sorting parent detection should respect menu item priority (19fbbcb7)
search: improved search result presentation (8959c933)

4.2.1 (2022-05-31)

Contributors

Jeroen Dalsem (17)
Jerôme Bakker (4)

Documentation

entities: added info about singular sort_by options (0340ecea)

Bug Fixes

bookmarks: always detect document title for bookmarks link (6b8e7cb3)
ckeditor: replaced deprecated get_current_language js function (036c532d)
db: ignore unsupported sort_by property types instead of crashing (9eb1e3ba)
forms: do not draw container_guid subtext if empty (127352ee)
groups:
- enable cropper on group profile icon (a0a61cf8)
- replaced deprecated sort options in owner transfer (5b787372)
icons: only generate webp urls if server supports it (fbf76c11)
js: unable to check for logged in user in javascript (72d89a96)
menus: make sure title-menu-toggle is always available (f81a21e6)
navigation: user hover menu was missing the admin toggle (06433212)
pages:
- allow saving with an empty description (3001a307)
- check field config for all required fields on save (7f72d186)
search: allow passing sort_by through query params (4104a828)
site_notifications: prevent possible deadloops with seeded entities (8ea5e3ce)

4.2.0 (2022-05-13)

Contributors

Jerôme Bakker (16)

Performance

batch: retain query cache during ElggBatch (8dcebb26)

Bug Fixes

composer: postinstall script correctly creates /mod folder (f2568298)
likes: use correct values to check likeable capability (74b43e15)
session: make sure to cache the logged in user in the entity cache (9145183a)
stats: correctly show the number of unvalidated users (cae13aa1)

4.2.0-rc.1 (2022-04-22)

Contributors

Jeroen Dalsem (62)
Jerôme Bakker (27)
Nikolai Shcherbin (1)

Features

accounts: admins can set duplicate email addresses for other users (4e6f7803)
actions: added logged_out access level to action registration (29679c37)
activity: added link to activity widget title (54b2c580)
admin:
- improved user management (084a57cc)
- added queue statistics (2a34737a)
- added database row count statistics (a7cc7b23)
bookmarks: added link to bookmarks widget title (d5ab59a2)
cache:
- added option to system cache to set TTL for an item (45e2f2c7)
- replaced stash with phpfastcache (6637015f)
config: added a setting to control the system message delay (289fb2ba)
db: metadata and annotation boolean values keep their type (c6775bd3)
discussions:
- added a discussions widget for profile and dashboard (8d2ccea0)
- added a group setting to control topic notifications (72c2674c)
entities: add generic sort options (2216bb01)
friends: added link to friends_of widget (09ad7dae)
groups: added imprint to indicate group owner/membership (b84f4535)
icons: serve webp icons if accepted by the browser (b0188aba)
js: updated jquery-ui to v1.13.1 (f1874a90)
menu: ability to set the output view of a menu item (5a210df5)
messageboard: added link to messageboard widget title (ffad7512)
plugins: login as features are now part of core (55a0c0f9)
reportedcontent:
- site admins get notification about new reports (0536f60e)
- separate active/archive listing (451fce64)
tests: added testing and support for MariaDB (29b3ec2a)
user: if unvalidated allow a user to update email address (aa43b04b)
users: automatically remove unvalidated users (3eeed1f9)
view: url input will auto prepend http protocol if missing (771a1847)
views:
- added placeholder support for autocomplete fields (889882f2)
- added more features to the system messages (000b92ba)
- entity imprint now shows time updated if appropriate (049fb14c)
- login form title indicates forward from protected page (0946daf9)

Bug Fixes

composer: updated imagine for PHP 8.1 compatibility (33d1c594)
db: prevent entity subtype queries without a type provided (3f63e4f9)
developers: do not disable display errors if enabled from htaccess (929806c9)
entity: prevent deadloops during recursive entity delete (139998f5)
forms: corectly ignore empty form body (4cdb56fa)
groups: correctly report failure when inviting users (85814c0b)
js: user picker should respect if default event is prevented (ce6dab00)
plugins: don't show plugin (user)settings form if no content (bee2f1e2)
views: limit long entity titles in url and page titles (02ed01c3)

Deprecations

js:
- introduced elgg/i18n module for js translations (e5e67955)
- ElggUser and ElggEntity classes have been deprecated (bcd6a515)
- elgg.security related functions moved to AMD (c7c9a44b)
- elgg.system_message related functions moved to AMD (f0781727)
- unused and unwanted javascript lib functions (1982af30)

Removed

js: no longer need the prototypes.js helper functions (09fca863)
tests: TestSeeder class (e1ca7c84)

4.1.6 (2022-04-08)

Contributors

Jeroen Dalsem (2)
Jerôme Bakker (2)

Performance

input: only filter input params once (66107ced)

Bug Fixes

custom_index: added missing activity module content (ed4575bd)
js: security tokens are refreshed automatically (26fc2206)

4.1.5 (2022-03-25)

Contributors

Jerôme Bakker (3)
Jeroen Dalsem (1)

Bug Fixes

di: fetch timer from the correct DiContainer (abc25bd9)
pages: prevent warning when trying to access guid on bool (8ff80f9e)

4.1.4 (2022-03-11)

Contributors

Jeroen Dalsem (1)
Jerôme Bakker (1)

4.1.3 (2022-02-25)

Contributors

Jerôme Bakker (14)
Jeroen Dalsem (1)

Performance

site_notifications: cleanup speed-up on large databases (baf9f0b0)

Bug Fixes

account: user settings form is no longer ajax based (22b41305)
core: correctly suppress notices when asked (b5ef29c7)
forms: styling of horizontal aligned fields not always correct (8ca0872f)
i18n: double translation (36bbf27d)
route: detect page owner with ignored access (d7f5d35b)
session: correctly apply session garbage collection (d14350c8)

4.1.2 (2022-02-11)

Contributors

Jerôme Bakker (8)
Jeroen Dalsem (1)

Bug Fixes

composer: install symfony/mime (bd2832c5)
core: correctly compare urls with array query params (f94d3290)
database: return documented return type (75d08731)

4.1.1 (2022-02-01)

Contributors

Jerôme Bakker (4)

Bug Fixes

cache: improved cache path parsing (fb18efb1)

4.1.0 (2022-01-14)

Contributors

Jeroen Dalsem (7)
Jerôme Bakker (5)
Nikolai Shcherbin (1)

Features

css: added helper class to wrap horizontal fieldset content (c0853ae7)

Bug Fixes

groups: only select groups to check group invites (17bedb9b)

Removed

tests: IntegratedUnitTestCase (65f007e6)

4.1.0-beta.1 (2021-12-24)

Contributors

Jeroen Dalsem (93)
Jerôme Bakker (36)

Features

activity: index page will show registration form if possible (c5b84221)
admin:
- server requirements warning for session garbage collection (460134fd)
- user validation by admin notify user about validation (ab5b3624)
- added link to add new user form on newest users listing (98d55ca7)
- admin control panel menu items always visible in title menu (204fd65d)
blog: added logic to pass archive menu options to sidebar views (221172c7)
cache: replaced mrclay/minify with matthiasmullie/minify (fd99fccc)
capabilities: canComment now uses canWriteToContainer logic (f4c3890d)
comments:
- added threaded comments capabilities (0875b898)
- commentable is now an entity capability (475cb0b6)
- added a site config to control comments on group content (bde859da)
- show a notice for logged out users to login to comment (60f79376)
- show that a comment was created by the content owner (32af360d)
config: added site setting to control who can change language (164965b6)
core:
- improved default index pages (f22c071a)
- replaced internal service provider with PHP-DI (8d997600)
css:
- added helper class to stretch a field in a fieldset (be05225c)
- added helper class for horizontal labels in elgg-field (df095c13)
- added phone up media query css crush variable (18de6788)
custom_index:
- added settings to control homepage modules (54bbf7c0)
- Front Page Demo plugin is now enabled on new sites (f95afdab)
db: the required mysql version for new installations now is 5.7 (65c292e0)
developers: control how elgg_echo strings are displayed (8eb2afb6)
entities: added entity capabilities service (e93d1c5d)
forms:
- elgg_make_sticky_form() now supports ignored field names (5febfa9e)
- the container has a dedicated input view with more context (6761e981)
install: admin notice for new installs now mention front page demo (a30ebdfa)
javascript: sortable features now also work on touch devices (fe2421d5)
likes: likable now is part of the entity capabilities systems (a149422d)
menus: added flag to menu items to hide if it has no children (24b05c70)
notifications:
- added option to disable subscription filtering (1e58e96e)
- control over detailed notification configuration (2ae90bf2)
page_owner: page owner middleware forces page owner detection (829bce49)
profile: user display name edit is now a separate view (4b485be8)
routes:
- add function to get a route based on an url/path (17370a6a)
- add function to get current route name (7c2a2991)
site: added the ability to upload a site icon (149f1258)
site_notifications: allow to configure the cleanup interval (77642349)
system_log: improved archived log cleanup (024c7aae)
tests:
- static config test now check correct upgrades registration (5d146320)
- logged in user is now always logged out by base test class (c1a97363)
- entities created during tests are automatically removed (3ec2d614)
upgrades: the finished upgrades list now has pagination (09a1ea54)
views: added menu section in elgg_view_messages header output (d9023fcf)

Performance

comments: added comments count preloader logic (2b6da920)
site_notifications: cron cleanup uses direct database queries (36969685)

Documentation

core: added a guide on how to use the entity capabilities service (b8f226ab)

Bug Fixes

admin: server information now reports correct minimal php version (a2fb0a96)
collection: correctly implement unset of collection item (3684df75)
file: prevent path traversal in ElggFile (0a50b762)
js: no longer close popups on scroll (9b4d2621)
menus: removed link from topbar account menu item (e1104cf5)
router: admin gatekeeper reports status code 403 instead of 401 (05340f54)
tests: custom config values always persist over db values (49ef293b)

Deprecations

core:
- ElggEntity->getAccessID() is deprecated (3a9a9e5b)
- elgg_get_version has been replaced by elgg_get_release (cc71881c)
i18n: the public DI proxy for elgg()->echo is deprecated (2f65c1ab)
page_owner: legacy page owner detection has been deprecated (6fec812f)
views: elgg_does_viewtype_fallback has been deprecated (1e2a135a)

Removed

admin: control panel widget has been removed (4e8d1cff)

4.0.6 (2021-12-23)

Contributors

Jerôme Bakker (3)

4.0.5 (2021-12-03)

Contributors

Jerôme Bakker (6)

Bug Fixes

blog: show future access level for draft blogs (68d86899)
install: correctly determine database installation completion (96a4a469)
upgrade: correctly interpret database results before migration (b8dcc903)

4.0.4 (2021-11-19)

Contributors

Jerôme Bakker (2)

4.0.3 (2021-11-05)

Contributors

Jerôme Bakker (4)
Jeroen Dalsem (2)

Bug Fixes

core: access collection members should always be users (6de21dbe)
discussion: comment actor on group discussion no longer notified (41ac24aa)
views: correctly support passing tagify options to input/tags (7e121f96)

4.0.2 (2021-10-25)

Contributors

Jerôme Bakker (21)
Jeroen Dalsem (6)

Features

site_notifications: notification byline shows container entity (9f43720d)

Bug Fixes

blog: don't supply full $vars to the blog/save form (2e23f9dd)
core: use route generation instead of fixed url (565ae3a7)
i18n: catch too few arguments provided in elgg_echo() (28609f02)
js: do not click on parent menu item of tabs with children (9b5d3073)
messages: use list out of bounds helper (487c174a)
notifications:
- continue when no object is found in html output (86eb13cd)
- set notification url for all ElggData objects (b2ebf498)
- settings show correct entity icons (27dfac30)
routes: correctly detect page owner in certain routes (e003a4e9)
site_notifications:
- only mark as read when the owner clicks url (16eb05e9)
- cleanup oldest notifications first (897cc5f5)
- use list out of bounds helper (b39c55bc)
views:
- unset value for tag url (1cf8d2b2)
- replace unsupported attribute (f0473ca1)

4.0.1 (2021-10-08)

Contributors

Jerôme Bakker (11)
Jeroen Dalsem (7)

Bug Fixes

blog: use route name as page title (ead3647b)
comments: no longer disable save button after form submission (03651f26)
core: do not respond with redirect on failure of ajax requests (4222ac92)
notifications:
- mute page of a comment shows relevant entities (e297bda2)
- disable subscribe button if you can't subscribe (ea612bb4)
- (un)subscribe buttons only for logged in users (824291fb)
site_notifications: prevent input limit reached in bulk actions (e83df87c)
systemlog: only log before and after events if there are handlers (5fb8189a)
thewire: output of the new wire notification in HTML e-mail (c161429b)
views: correct default behaviour for showing entity menu on PHP 8 (8f9f3827)

4.0.0 (2021-09-24)

Contributors

Jerôme Bakker (11)
Jeroen Dalsem (4)

Bug Fixes

cli: allow batch upgrades to run indefinitely (5b6b4419)
i18n: allowed languages returns filtered language keys (ff574222)
upgrade: content owner subscription is now an async upgrade (d8abe11c)

4.0.0-rc.1 (2021-09-10)

Contributors

Jerôme Bakker (59)
Jeroen Dalsem (3)

Features

cli: upgrade command supports force option (8fb44c7f)
delayed_email: add intro text to notification (c3750286)
developers: added link to entity on the entity explorer page (cd1f3753)
groups: groups edit form tabs navigation help (bd2f94d9)
notifications: added option to exclude subscribers (e43ae547)
system_log: allow elgg_call to disable system logging (7f85fd18)

Performance

db: disable system_log during cleanup of entity properties (4576dff6)

Bug Fixes

activity: don't show responses on index page when logged out (eaa5c28b)
bookmarks:
- don't show filter menu when viewing a bookmark (1a5c9478)
- unable to save bookmark on PHP 8 (81392414)
db: use QueryBuilder in query execution (2f2050cb)
delayed_email: prevent empty notification (ee6bc376)
developers: theme sandbox is now only available for admins (19bcb892)
mail: correctly encode ( and ) in e-mail headers (0560c379)
notifications:
- serialization exception during delayed enqueue (72b65143)
- use correct actor for admin notification (6b8d37a0)
pagination:
- don't updated browser history on ajax appended lists (823283bd)
- allow control over base url during Ajax requests (edad75a7)
- use correct jquery selector during ajax replace (e750622b)
river: show river responses again on all pages (9e90d95b)
session: prevent PHP warning when regenerating session (dfe73773)
site_notifications:
- limit cleanup to 30 minutes (7229e7e1)
- prevent deadloop when marking as read (c4467a2c)
statistics: show readable entity type/subtype (99a68a47)

4.0.0-beta.3 (2021-08-06)

Contributors

Jeroen Dalsem (20)
Jerôme Bakker (17)

Features

friends: added friends_of widget (05fea8a0)
i18n: added a config flag to disable browser language detection (00b612dc)
notifications:
- notification events are configurable (55c7c909)
- subscribers to owner will receive notifications (2b0f2bb2)
- setting to delay notification queue processing (7942f7e0)
pagination: js loaded listdata triggers a change event (aa478518)
views: allow custom title to be passed to output/friendlytime (4c88d2d3)

Bug Fixes

admin: drag/drop plugin ordering has been fixed (7b5fe7df)
email: added mute link to html email footer (85268538)
groups: make sure retrieving group tool option always uses hook (1e9ae2b6)
install:
- make sure user is logged in during installer (b6248ec7)
- allow some vendor files to be included (3f857850)
likes: correctly toggle count badge (fa2be687)
metadata: elgg_get_tags uses correct default for tag_names (4e8d5326)
phinx: correctly check for indexes by name during upgrades (22ccaea9)
plugins: position and required state of plugins are now asserted (948927a3)
site_notifications: moved buttonbank to top of the list (c158e810)
tags: always have tags css available (3f9b5a63)
upgrades: improved completion reporting (863e2627)
views: prevent incidental incorrect id generation (c2d77bd1)
webservices: register correct PAM handlers for API authentication (51ebcabb)
widgets: only update title on non empty href string (7b147a61)

4.0.0-beta.2 (2021-07-09)

Contributors

Jeroen Dalsem (13)
Jerôme Bakker (13)

Features

discussions: added quick status toggle entity menu item (1b78dc00)

Bug Fixes

activity:
- always show tabs on activity index page (3aa6605b)
- added missing breadcrumbs (db7e2ce3)
cache: invalidate caches on plugin (de)activate (8bca339c)
core:
- prevent exceptions on session save (90345bae)
- do not draw exception content if there already is output (91d4f03a)
- correctly handle exceptions in error log formatter (6d6328f1)
icons: update site menu icons (7292b4c0)
js: always process error messages in ajax calls (cf070072)
navigation: prevent pluginsettings menu item name conflicts (cbe3ef6d)
notifications:
- dont pass recipient user to default message body (91d45a26)
- show correct notification labels (9a285350)
search: do not show social and entity menu in search results (33413407)
settings: english and site language not correctly disabled (76a099e3)
views: number formatter not always returning expected results (f5d25392)

4.0.0-beta.1 (2021-06-11)

Contributors

Jeroen Dalsem (193)
Jerôme Bakker (144)
RiverVanRain (1)
dnovikov (1)

Features

actions: added generic actions for (un)subscribe and (un)mute (2f7e1702)
comments: added ability to configure number of comments per page (100e6881)
config:
- added configuration option for sendmail in settings.php (91f476ba)
- added proxy settings to the settings.php (37c1966d)
core:
- added first login event for when user logs in the first time (19a2d384)
- users are automaticly subscribed to content they comment on (a5373f14)
- added PHP 8 support (11e42800)
- ElggBatch supports reporting failures (ba601973)
database: add generic registration function for seeders (a11047b3)
db: updated to doctrine/dbal 3.1 (32152f3f)
discussions: the site menu item is now always present (2d19025a)
email:
- from address will show original sender name (6fa8fcf0)
- added html formatted mail template (76b21538)
- added config setting to limit subject length (4e82113f)
- Elgg now supports multiple to, cc and bcc recipients (0f24a524)
forms: entity field config can be requested from a service (c6b1771a)
git: extra allowed types for commit messages (c9f1757c)
groups:
- allow group specific plugin settings (28f7e6e6)
- group edit form now uses tabs for different sections (a9103dee)
js:
- updated to jQuery 3.5.1 (b9f8a8c5)
- jquery ui updated to v1.12.1 and can now supports AMD (4914dc8f)
- allow lightbox to load JS dependencies (fa00e132)
menu: the title menu will be expanded with the entity menu (a91a7cc7)
menus: more granular register and prepare hooks (bc6a5e2f)
messages: allow users to send messages friends only (94208336)
navigation: more control over the pagination rendering (a9b0680c)
notifications:
- plugins can control notification with eventhandler (87ebad4e)
- added mute notification page (2d724e6e)
- temporarily disable notifications (2770d4d9)
- added delayed email to bundle notifications (d522a53e)
- split salutation and sign-off from message body (5741a414)
- more detailed notification subscriptions (b018d1a8)
page_owner: add page owner detection to route definition (f52e4227)
pagination:
- added 'infinite lists' pagination options (d8aa00ff)
- listings are now updated without page reloads (1f3322c2)
plugins:
- added ability to configure notification events in config (e3e77234)
- added ability to register view options in elgg-plugin.php (522feeb6)
- added ability to register group tools in elgg-plugin.php (9acc7d88)
reportedcontent: added menu item to report entities (13f07c58)
router: public API to get the route of the current request (8e3736e8)
search: moved result formatting logic into views (fe63196f)
seeder:
- add option to spread creation time of seeded entities (30385b79)
- force create new entities during seeding (a21eccf8)
- limit (un)seeding to a given content type (0485722a)
site_notifications:
- site notifications are enabled for new users (51238b15)
- configure cleanup of site notifications (55ce9da4)
- split read/unread notifications (9df9bc19)
- remove notification when content is removed (792705a8)
subscriptions: added muting possibility to entity subscriptions (6ad73185)
tags: tags input is now assisted by tagify (bc9d2566)
thewire:
- added getParent function to ElggWire entity class (46f406aa)
- allow database seeding (70a29ddc)
users:
- newly created users always have a validation status (04cc3395)
- uniform storage of notification settings (6fcccafe)
views:
- added helpers functions for outputting urls (a23a3ff1)
- added 'show_owner_block' variable to prevent owner_block output (29cc3323)
webservices: option to enable / disable API keys (4c5b33cb)
widgets: dashboard widgets created on first login (9bf117d9)

Performance

db:
- add index to annotations table (7c728671)
- add index to annotations table (af34641a)

Bug Fixes

collections: corrected implementation of SeekableIterator (a7e70382)
core: remove_entity_relationships triggers delete event (73626bee)
css: wide select inputs do not run out of screen (6af60e27)
db:
- check for entity existence during metadata creation (0a07fe8d)
- check for entity existence during relationship creation (d23e7351)
groups: use guid instead of container_guid in add:group:group route (57146fbe)
invite_friends: friendship delayed until invited friend validated (2c212dd1)
js: userpicker stores match_on information in data attribute (1b30d349)
relationship: saving unchanged relationships won't trigger events (549ee02c)
river: show less duplicate comments (d172ce94)
site_notifications: save more notification data (2603e4cd)
tests: testAccessCaching now makes more sense (466ce221)

Deprecations

core:
- drop support for handler in elgg_register_title_button (0529986f)
- forward() has been deprecated (9497be28)
database: use QueryBuilder instead of raw sql queries (8aa74ef9)

Breaking Changes

This update is a major update of the jQuery library. Update your code if needed. (b9f8a8c5)
If you need jquery ui related functionality like sortables, make sure to add the correct dependencies to your own javascript (4914dc8f)
You now can only use the elgg/Ajax async module.

fixes #13175 (5bca9af9)

when validating the container write permissions the type and subtype of the content need to be provided.

fixes #12684 (13070985)

composer: replace deprecated Zend with Laminas (bef90a8c)
core:
- admin and banned metadata of a user is now protected (ef54acd0)
- protected some ElggEntity attributes (aaa6da50)
- ElggData::save() returns bool (627c2e7a)
- move exceptions to own namespace (88e12e89)
i18n: removed some hardly used i18n lib functions (5e768e41)
icons: old icon names are no longer supported / converted (a00b2599)
menu: menu vars are required for preparing vertical and dropdown (10125160)
menus: removed elgg_get_filter_tabs() (37340f99)
notifications: moved notifications plugin to core (0f141b73)
web_services: rewrite of the web services plugin (fceb9130)
widgets: change default widgets event registration (2340f47b)

Removed

core:
- support for the composer project as a 'plugin' (f52f167c)
- the Friendable interface has been replaced by a trait (7f5ea445)
- legacy plugin hook / event callback parameters (ab19e9e9)
- some hardly used functions have been removed/replaced (b37e34c0)
developers: webservices inspection (588534c0)
diagnostics: the plugin has been removed (4050e21a)
discussions: no longer add an item to the groups filter menu (c9d36b82)
navigation: helper view for menu item deps has been removed (a2ed60fa)
notifications:
- pre Elgg 1.9 notification support is dropped (949825a9)
- NotifcationService::getMethodsAsDeprecatedGlobal (835a7218)
plugins:
- plugins no longer work with manifest files (a17c8cec)
- various plugins no longer listen to ECML hooks (d5d922c5)
system_log: various lib functions have been removed (12108c9d, closes #13089)
tags: functions related to metadata tag names have been removed (4ca58372)
upgrades: removed obsolete upgrades (1f0c968c)
users: replaced validation methods with service functions (821ccd95)
views: removed elgg_prepend_css_urls is no longer available (53cb8819)

3.3.25 (2022-10-07)

Contributors

Jerôme Bakker (2)

3.3.24 (2021-12-23)

Contributors

Jerôme Bakker (1)

Bug Fixes

reported_content: sanitize report URLs (c30b17bf)

3.3.23 (2021-12-03)

Contributors

Jerôme Bakker (1)

Bug Fixes

ajax: forms in the admin namespace are protected (572d210e)

3.3.22 (2021-11-19)

Contributors

Jerôme Bakker (3)

Bug Fixes

groups: prevent misuse of group membership actions (d9fcad76)

3.3.21 (2021-08-03)

Contributors

Jeroen Dalsem (1)

Bug Fixes

http: always disable cache if cookie is being set (30c17f06)

3.3.20 (2021-07-09)

Contributors

Jerôme Bakker (4)

Bug Fixes

admin: allow admins to be added from the admin listing page (8d94877f)
database: use correct port number in Phinx migrations (0ee77635)

3.3.19 (2021-06-10)

Contributors

Jerôme Bakker (3)

Bug Fixes

output: use correct number seperators (536e2b26)

3.3.18 (2021-05-18)

Contributors

Jerôme Bakker (3)
Robert Cochran (1)

Documentation

install: mention necessary SELinux changes (912ca440)

Bug Fixes

account: use consistent user throughout the account settings (9e59117f)
search: make sure entity_subtype is a string during search options (94f110c6)
webservices: correctly evaluate truthy values (86459670)

3.3.17 (2021-04-16)

Contributors

Jeroen Dalsem (2)
Jerôme Bakker (2)
Nikolai Shcherbin (1)

Bug Fixes

groups: don't show 'Invite friends' menu item on the group's members page when 'Friends' plugin is deactivated (5d2f8a32)
river: river options annotation_ids now work as expected (e1d61594)
thewire: do not put unlimited description in notification summary (657be642)

3.3.16 (2021-02-12)

Contributors

Jerôme Bakker (4)
Jeroen Dalsem (1)
Nikolai Shcherbin (1)

Bug Fixes

cache: disable filecache if path isn't writeable (dc807d44)
likes: don't provide likes data in non default type ajax requests (07d63d43)
menu: don't show 'invite friends' menu item on the group profile when 'Friends' plugin is deactivated (2783492a)

3.3.15 (2021-01-15)

Contributors

Jerôme Bakker (4)

Bug Fixes

db: pass previous database exception (20e07d23)
icon: use different icon size to check in icon remove (8c42bf4f)
icons: prevent auto generation of icons during entity updates (918a1193)

3.3.14 (2020-12-18)

Contributors

Jeroen Dalsem (8)
Jerôme Bakker (3)

Bug Fixes

cache: keep server cache in a local file storage (0569862d)
database: correctly order metadata (32fe6955)
http: allow access to client IP behind proxy server (159e70ee)
search: prevent duplicate extras matches in search results (1211ae4d)
widgets: correctly update widget title after widget update (95535d24)

3.3.13 (2020-11-20)

Contributors

Jeroen Dalsem (3)
Jerôme Bakker (2)

Performance

users: entities metadata preloader logic now works for users (74bfd360)

Bug Fixes

tests:
- compare objects that are both serialized and deserialized (1af78826)
- entity preloader is clean before tests (35a96147)

3.3.12 (2020-10-30)

Contributors

Jeroen Dalsem (4)
Jerôme Bakker (1)
Nikolai Shcherbin (1)
RiverVanRain (1)

Bug Fixes

admin: invalid admin section should report 404 not found (bd4eb40f)
developers: do not log to screen in cli (b1a06491)
github: make sure we use composer v1 during codecoverage tests (25022dfd)
river: "created", "river" event trigger regression (718d79c8)
widgets: content widget shows correct owner content (c3c663d3)

3.3.11 (2020-10-02)

Contributors

Jeroen Dalsem (3)
Jerôme Bakker (1)

Bug Fixes

core: do not save session for serve-file and CLI requests (cf8ee303)
database: use compatible DBAL version (c5ca05f1)
likes: comment listings are now correctly preloaded with likes info (f348802a)
session: correctly set httponly flag for remember_me cookie (91034947)

3.3.10 (2020-09-04)

Contributors

Jerôme Bakker (12)
Team Webgalli (1)

Features

htaccess: added hardening rules to prevent file access (08ea7f7a)

Bug Fixes

comments: validate canComment in comments save action (883be474)
composer: define correct autoload namespace (6f874ae2)
developers: inspect annotations menu no longer crashes (096118a7)
uservalidationbyemail: show correct login error message (db3cddd6)

3.3.9 (2020-08-17)

Contributors

Jerôme Bakker (14)
Jeroen Dalsem (1)

Bug Fixes

db: handle empty dbprefix in join normalization (fe3d1684)
search: allow only unique field names to be searched (4e540518)
tests:
- set config value in correct location (05c0ff6e)
- improved access array testing in walled garden mode (c58a1543)
- validate correct widget id for active plugin (7ddc7743)
- get correct plugin for deactivation testing (f058db5d)
- use language keys to validate (e16b0166)

3.3.8 (2020-07-10)

Contributors

Jerôme Bakker (4)
iionly (1)

Bug Fixes

cache: support javascript source map files (5ec82f20)
uservalidationbyemail: corrected error in EN language file (5e5adca4)
webservices: implement missing cache functions (deba4203)

3.3.7 (2020-06-30)

Contributors

Jeroen Dalsem (2)
Jerôme Bakker (2)
RiverVanRain (1)
Team Webgalli (1)

Documentation

webservices: how to generate HMAC headers for authentication (1a74457f)

Bug Fixes

comments:
- allow group owners to edit comments in their group (835478f8)
- use correct logic to apply default comments list length (c556969e)
css: admin menu header (01e72dd1)
navigation: allow configuration of max display items site menu (cbede32e)

3.3.6 (2020-05-29)

Contributors

Jerôme Bakker (5)
Jeroen Dalsem (3)

Performance

likes: bulk delete likes annotations on entity delete (0b1d536c)

Bug Fixes

db: default case_sensitive not applied for single pair in root (1ecd214c)
notifications: only register group menu item if member of group (a3a707ef)
redis: admin information page now works if authorized (7db8bbd8)

3.3.5 (2020-05-15)

Contributors

Jerôme Bakker (6)
RiverVanRain (2)
Dennis Ploeger (1)
Jeroen Dalsem (1)

Features

cli: Adds a –refresh option to the list command (#13201) (eed99bfa)

Bug Fixes

file:
- validate uploaded file for new files (a3f4ed52)
- correctly remove icons when updating a file (d215defa)
friends_collection: display menu items correctly in full view (b170b1f4)
input: no longer use double submit prevention on widget edit forms (ced827d5)
mail: improved handling of email recipients name formatting (ff8a425a)
plugins: disabled plugins should not get a priority (b856c449)
views: prevent PHP notice during registering views (6b1bf6e4)

3.3.4 (2020-04-24)

Contributors

Jerôme Bakker (4)
Jeroen Dalsem (1)

Bug Fixes

core:
- use correct input for password reset (5ceaed52)
- log exceptions by default (3d085449)
developers: remove entity button in explorer now works (fed4809a)
logger: correctly support legacy value 'OFF' (df80433c)

3.3.3 (2020-03-27)

Contributors

Jerôme Bakker (4)
Jeroen Dalsem (2)

Bug Fixes

livesearch: use correct relationship options to find groups (dc82fd9e)
mail: additional library for SMTP e-mail support (d69b90df)

3.3.2 (2020-03-13)

Contributors

Jeroen Dalsem (6)
Jerôme Bakker (4)

Bug Fixes

notifications: listing of settings now contain a link to the item (4a2ae1de)
webservices: use correct query string for hmac authorisation (1dc4cae9)

3.3.1 (2020-02-14)

Contributors

Jeroen Dalsem (6)
Jerôme Bakker (5)

Bug Fixes

blog: double submit protection prevented correct saving (2460d178)
file: correctly set forward url (10f48139)
likes: likes popup will show recent likes first (9b0bf45d)
plugins:
- reindex plugins if there is a gap in the priority (ce2d4bfb)
- default all plugins are listed (5888aa89)
- correctly flush caches after plugin (de)activation (7a6465b5)
route: correctly handle route generation for unicode usernames (58766e37)
views: input/autocomplete correctly passes match_target (1fe233d2)

3.3.0 (2020-01-23)

Contributors

Jeroen Dalsem (58)
Jerôme Bakker (34)
Josh Santos (1)

Features

access: added generic container logic check for group tool option (eb129203)
admin:
- plugin list is default filtered by active state (e3adc687)
- added site setting to control allowed languages (663fb447)
annotations: added generic annotation delete action (1ebeafb4)
cache: added more cache interactions (8dbc51ce)
cli:
- added upgrade:list command to list all upgrades in the system (364d0016)
- added command to execute a single upgrade (ed14adf0)
- added option to set language for cli command (d11d0581)
- all core cli commands use translation keys (5355f270)
- question defaults are automatically added to question (b2cdf54a)
core:
- you can now configure the default sort order of comments (573d416d)
- added mimetype detection service (54e2574b)
- container last_action is updated when entities are created (9f0a706b)
css: walledgarden background image can be set as a css variable (939bf26e)
developers: added entity explorer link to every entity (0c580432)
discussions:
- add page to view discussions in my groups (81c1cab0)
- added setting to allow site wide discussions (5f4dc826)
github: added codeclimate coverage action (e695efe5)
i18n: added user agent language detection (e5778f5d)
input:
- forms now have the ability to prevent double submit (f4e21fd2)
- added confirm option to input/submit (60a67b55)
list: we provide a way back if you reach a page without content (b3ee54c5)
mail: add smtp support (ada8bb7d, closes #12938)
notifications: unregister specific notification action (19f3571b)
plugins:
- you can change/add theme variables in elgg-plugin.php (f698d00a)
- added the ability to (un)extend views in elgg-plugin.php (d16fb845)
- add ability to remove all plugin settings (28cb247d)
- cli commands can now be registered in elgg-plugin.php (d0858cc8)
tests: added MySQL 8 test job (63235d90)
views:
- added site setting to control if comment box collapses (043d6789)
- info type added to elgg_view_message (006151fa)
- seperate annotation view into subparts (b080fd25)
- input/button now supports icon_alt (18425695)
- added ability to elgg_view_page to pass layout vars (002ba980)

Performance

js: refresh_token now uses a partial boot of the engine (23846134)

Documentation

views: rewrite of the page structure guide (a5272a66)

Bug Fixes

blog: no longer validate container permissions on existing blogs (e3b1c6c6)
cli: improved error handling during command execution (c548e95b)
core: no longer default to client file mime type (73f44c03)
http: prevent content type sniffing by browsers (62743b8f)
js: prevent clicks until related js is loaded (9e638c9e)
views: moved user element to correct subviews (2a96a19a)

Deprecations

core:
- function generate_action_token is deprecated (11020308)
- functions to get ordered event/hook handlers (3a47f381)
- various functions have been deprecated (0f47534e)
plugins:
- using a start.php in you plugin is deprecated (b744960f)
- function elgg_unset_all_plugin_settings() (36aa2e41)
views:
- the function elgg_view_entity_annotations (5f2b1bf3)
- deprecated the usage of some old layout names (79a373dd)

3.2.4 (2020-01-23)

Contributors

Jeroen Dalsem (5)
Jerôme Bakker (2)

Bug Fixes

cron: allow configuration for custom cron intervals (8e969a67)
developers: set correct default value for menu hooks (d3bc28d6)
installer: escape some special chars in db password (9923e173)
search: do not try a search with invalid query (28cd2ead)
user: user hover menu uses local data array of request params (6a0f28f2)

3.2.3 (2019-12-20)

Contributors

Jerôme Bakker (7)
Jeroen Dalsem (3)

Features

groups: add limited group creation middleware (9ea474e1)

Documentation

actions: updated action documentation (3e90769f)

Bug Fixes

icons: always use default viewtype when using fallback icons (b2c666b7)
search: search result extras are formatted correctly (3fd1355d)
views: use correct summary classes in relationship elements (30ef1c87)

3.2.2 (2019-12-06)

Contributors

Jeroen Dalsem (8)
Jerôme Bakker (1)

Documentation

database: document the need and usage of manual Phinx migrations (3d8d5ac4)

Bug Fixes

core: plugin reports version of elgg_release (f86e898a)
css: vertical align horizontal aligned fields in fieldset (78bb72f3)
groups: added missing gatekeepers to content pages (ecb9fb8f)
input: htmlawed will no longer check for duplicate ids (cbad1c25)
tests: moved integration test to correct suite (8b4e0d40)
theme_sandbox: changed aside modules to info modules (ba6bccf4)

3.2.1 (2019-11-25)

Contributors

Jerôme Bakker (13)
Jeroen Dalsem (6)
Dennis Ploeger (1)

Features

tests: allow testing of tool protected group pages (5b465453)

Documentation

cli: added link to symfony (dbb3d32c)

Bug Fixes

admin: use correct function for unvalidated users notifications (bbce4ca0)
file:
- use correct submit label on upload/update of file (07ef13d1)
- use correct view in old group module (56a46f94)
- added group tool gatekeeper to owner resource (4667d9fe)
friends: supply correct link for friend request notification (21e231a0)
groups:
- set menu item classes the correct way (dc161621)
- show a no result text on the group membership request page (db601b71)
input: select now supports passing int values to options_values (4563eed4)
installer: allow empty database table prefix during installation (622b47c0)
seeder: use available users during seeding (716e02fb)
system_log: check archive engine availability before changing (99e3c928)

3.2.0 (2019-10-24)

Contributors

Jerôme Bakker (40)
Jeroen Dalsem (18)

Features

admin: added a site setting to require admin approval of accounts (2882da61)
core:
- added elgg_list_relationships (9b54398c)
- added elgg_get_relationships function (21d3c697)
database: clauses support invokable classes (75653f24)
files: download urls can be configured to not expire (f61c5578)
friends: add plugin setting to enable the need for friend approval (25b87858)
groups:
- added option to hide group owner tranfer (4a072e88)
- allow groups to set default content access (9f701b77)
- membership requests and invitations use relationship views (afff8d9f)
- add invited users page for group owners (82310d78)
- added membership requests tab to group members listing (019745f0)
- add invite button on group members page (9e164221)
- show user already a member/invited for the group (57d38cca)
- member listing now uses elgg_list_relationship (783f22a6)
install: allow user to change language during installation (5f23eff1)
livesearch: added ability to set custom item_view (8c1df6e8)
middleware: added page owner can edit middleware (b81fc729)
redis: added the ability to set redis database and password (e0c9d953)
request: allow access to the http request (7e86f576)
security: allow password requirement to be configured (ccca6897)
system_log: allow logbrowser to filter on object id (de0e6171)
upgrades: track upgrade start time (f37d03bc)
webservices:
- added api token management (b146d097)
- added webservices listing (5d2026de)

Documentation

routing: added some extra middleware documentation (b1c123ca)

Bug Fixes

access: allow plugin to register write access array subtypes (6db1d505)
ckeditor: do no convert html entities in the editor (e977bf99)
core:
- ElggRelationship int attributes are casted to ints (d3604557)
- make accesscollection save and rename work like documented (c3acbb1a)
css: buttons in some menus keep correct styling (3eb49098)
embed: no longer require a plugin with file_uploading provided (3925c647)
js: deep merge the elgg.data (197bfb49)

Deprecations

river: no longer use the enabled property of river items (59ebfb3d)

3.1.6 (2019-10-23)

Contributors

Jeroen Dalsem (5)
Jerôme Bakker (1)

Documentation

database: document innodb recommended settings (7cfaf39a)

Bug Fixes

access: do not add default access level if missing in input/access (58efbbc1)
js:
- only trigger open event when new content is loaded (83f67a81)
- if no tabs are selected click the first tab (66c9e9ba)
views: only add a link in summary title if entity can provide one (b9b70f7a)

3.1.5 (2019-10-11)

Contributors

Jeroen Dalsem (7)
Jerôme Bakker (2)

Documentation

plugins: added some info about class structures in plugins (03536970)
webservices: document the result structure of webservice calls (9a6221a7)

Bug Fixes

core: allow passing only name or value into name/value pairs (e2e26677)
js: stop refreshing tokens if session changed (bb4a7894)
pages: correctly validate write permissions (a3fbc109)

3.1.4 (2019-09-27)

Contributors

Jerôme Bakker (5)
Jeroen Dalsem (2)

Bug Fixes

messageboard: use the correct annotation_name for listings (95429878)
tests: correctly validate response headers (2ccd1833)

3.1.3 (2019-09-13)

Contributors

Jeroen Dalsem (4)
Jerôme Bakker (4)

Features

ajax: added option to suppress messages from ajax calls (2b728fe5)

Bug Fixes

admin: do not show ajax success message when removing admin notice (75bf8cbd)
database: updated Phinx to prevent Symfony conflicts (58d778a6)
uservalidationbyemail: correct forwarding during email confirmation (e3ccb067)

3.1.2 (2019-08-28)

Contributors

Jerôme Bakker (7)
Esha Upadhyay (1)

Bug Fixes

admin: prevent fatal error on non Apache servers (3da30342)
cache: invalidating simplecache could break symlinked cache (c8a41062)
comments: block comments on group content for non members (6482879a)
developers: link to site settings section (330676bb)
discussions: no more filter menu on discussion detail page (e8d60f6c)
installer: link to site settings section (f0e3dbe5)

3.1.1 (2019-08-02)

Contributors

Jeroen Dalsem (2)

3.1.0 (2019-07-25)

Contributors

Jeroen Dalsem (81)
Jerôme Bakker (23)
Rohit Gupta (9)
Ismayil Khayredinov (1)
Joe Bordes (1)

Features

admin:
- added requirements information about database server (d9c92dab)
- add email change option to unvalidated users (f09ba7ee)
- add server requirements page (4e5cd057)
- moved Elgg release to page header (f55d0f1d)
- add security recommendations page (e129b307)
- add performance overview page (f1321a2f)
- admin user lists now have the ability to search by email (c34789f4)
- add admins directly from the administrators page (78027dda)
- basic and advanced settings are merged into one form (aedaa0e1)
ckeditor:
- updated to ckeditor v4.12.x (33b44604)
- updated ckeditor version to 4.11.x (d6061b3f)
core:
- error resources now have access to the exception (fac3141e)
- added function to convert large numbers into short form (de9d2ef8)
- admin notices now have their own class (a627d4ef)
- manifest.json is now a cacheable simplecache resource (ef98f420)
db: allow configuration of the database port number (058db755)
developers:
- wrap input and output views (cafdb455)
- display view location in view wrapping (e6ba1ecf)
- added acl information to entity explorer (9c465a1a)
entities: added helper function elgg_count_entities (7e00cbc7)
gatekeeper: flag to validate user edit access (8becf0ea)
groups: support content based on type/subtype in tool module (fa897bcb)
icons: add icon cropper (deb5d212)
input: add support for more input types (048704e2)
menus: added menu param to set a selected menu item (74d50561)
notifications: Elgg knows about sender and recipient (539437b0)
page_owner: moved page owner logic to a service (bc35cf5a)
pages:
- page navigation now uses default page menu behaviour (89976121)
- replaced treeview js and css with default menu behaviour (18be2699)
phinx: updated phinx version to 0.10.x (52ebe588)
plugins: hooks and events can be declared in elgg-plugin.php (c1cc12c4)
profile: new input types for custom profile fields (59c1a4ba)
router: add SignedRequestGatekeeper middleware (54e050a3)
routes:
- added required plugins param to route config (8f4c1957)
- added route config to mark route as deprecated (53d8f433)
security:
- request confirmation on email change (53017104)
- notify the user about a password change (8692ac32)
site_notifications: topbar menu item now has a unread count badge (a1d1fddc)
upgrades: completed upgrades are sorted by completion time (beebaecd)
users:
- unify set/get/delete profile data functions (906c25b7)
- added a site setting to allow users to change the username (3e2a476e)
views:
- add additional page menu and owner block controls (5cf80c8c)
- password inputs now set correct autocomplete behaviour (929f7bc5)
- show_add_form view var is now supported in responses (7bd0f0da)

Performance

db: added some extra indexes to the entities table (0395d99b)

Documentation

core:
- added a spam guide (2ac20105)
- added documentation about the usage of elgg_call (8beef28f)
- added upgrade notices page for 3.0 to 3.x (456e4fba)

Bug Fixes

admin: different user counters in admin stats (73c86726)
core:
- updated PHP version checks to check correct version (dbb02710)
- elgg_call will now also restore when an error is thrown (54964f59)
css:
- spacing between profile-field and widgets (a281ac45)
- prevent jquery-ui bug related to sortables (fa840b53)
discussions: no longer call unavailable sidebar views (afe83c96)
forms: added missing entity info in widget access input (8f1770d1)
pages:
- no longer register page_nav menu if there is just one item (a7f7359d)
- removed the pages navigation sidebar from some resources (08f3df26)
- no longer show history sidebar on revision page (3c91022d)
system_log: correctly fetch non default object classes (3f0a10d4)

Deprecations

access:
- elgg_set_ignore_access is deprecated (6d0d99ec)
- access_show_hidden_entities is deprecated (33b3e5ac)
actions: replaced several delete actions with entity/delete (192d01ac)
core:
- legacy hook/event callback arguments are deprecated (563f4492)
- various unused lib functions have been deprecated (792bd362)
- elgg_instanceof is now deprecated (2602c801)
- replaced delete_directory with elgg_delete_directory (f61471dc)
css: use elgg_require_css instead of elgg_register_css (b0c014f3)
js: use elgg_require_js instead of elgg_register_js (e3d4a13c)
page_owner: don't set page_owner via elgg_get_page_owner_guid (b1089824)
plugins:
- usage of the views.php file in plugins is deprecated (95592b04)
- no longer use the (de)activate.php plugin files (d89c2474)
- plugin screenshots are no longer supported (0f7fe379)
tests: the simpletest cli command is deprecated (f17a8cd9)
thewire: the route previous:object:thewire is now deprecated (677d9129)

3.0.7 (2019-08-02)

Contributors

Jerôme Bakker (2)
Jeroen Dalsem (1)

Bug Fixes

js: improved elgg.normalize_url to handle more site cases (57af9e2b)
routes: use absolute url as base for route url generation (244854af)

3.0.6 (2019-07-24)

Contributors

Jeroen Dalsem (11)
Jerôme Bakker (9)
Ismayil Khayredinov (1)

Documentation

code: added note about low-level functions that should throw (03417897)
composer: document composer autoloader optimization (fee62f05)
css: added some best practices about css files and classnaming (daa55646)

Bug Fixes

cache:
- improved handling of values (db7c8864)
- prevent timeout during cache flush (ab8c759b)
ckeditor: no need to remove plugins as they are not loaded (55b95e7a)
comments: popup menu will close itself when inline editing comments (9a7ecc73)
core:
- literal order by clauses are no longer deprecated (e77e4898)
- unset on ElggData will always use magic setter (a0b442ad)
- always show success message when upgrade has finished (0afb29d8)
http: request validation now correctly reads payload (c5e18f45)
js: validate arguments in elgg.get_simplecache_url (91f7c143)
pages: correctly check who can edit (write) access (a87ec78f)
routes: route url generation will always return a normalized url (d0b2503a)

3.0.5 (2019-07-08)

Contributors

Jerôme Bakker (8)
Jeroen Dalsem (2)
Ismayil Khayredinov (1)

Documentation

compatibility: explain