1.29.0

The Backdrop community is proud to release version 1.29 of Backdrop CMS, following our 4-month release cycle. 🎉

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Changes since version 1.28.3 are listed below.

New features

• Automatically download translation files at install time. #6660
• Add layout configuration options to the content type admin area. #2894
• Add a visibility condition for 200/403/404 response codes. #6016
• Add new file type icon views field handler. #6588

Usability Improvements

• Display conditions for menu items on the layout overview page. #1929
• Clarify visibility conditions vs access conditions in Layout interfaces. #6705
• Improve form item label text for new SVG icon views field handler #6701
• Fix outside-right styles so text doesn't overlap #6687

Miscellaneous changes

• Update jQuery UI to 1.14 #6677
• Update CKEditor 5 to v42.0.2 #6481
• Update jquery.ui.touch-punch.js to latest version #6696

1.28.3

Maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements only.

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Changes since version 1.28.2

Bug fixes

• Private files security hardening. #6709
• Rename to-date token to end-date. #6707
• Remove call to backdrop_wrap_mail() from MailTestCase::format(). #6690
• Fix link to classify file types if installed in subdirectory. #6678
• Fix Admin bar collapse with jQuery 3 for certain settings and narrow windows. #6666
• Options Element settings override should check if allowed_values_function and default_value_function are set. #6654
• Fix theme information provided by Entity Reference's Views integration. #6627
• Fix the order in which templates are selected for Node, User, and Term. #6564
• Remove call to backdrop_wrap_mail() from DefaultMailSystem::format(). #6471
• Following a password reset link while authenticated should allow a password change without the current password. #6426
• Fix Inconsistent use of styles on Flexible Template Builder UI. #6325
• Fix mysql or mariadb version for Telemetry and the Status Report. #5447
• Fix PHP Notice: Undefined index: User roles in config_export_single_form(). #4795

Documentation updates

• Document equivalent function to deprecated file_create_htaccess(). #6665
• Remove any reference to the theme process layer from theme() documentation. #5990

Miscellaneous changes

• Use #empty for the message to display when a table does not have any row. #6333
• Avoid revealing another user's name while using a one-time log-in link. #6018
• Use human-readable labels for modules and permissions in user_filters(). #6456

1.29.0-preview

This is the preview release of Backdrop 1.29.0. Please use this version if you would like to help us test the features in the new version of Backdrop prior to the official release on September 15th, 2024.

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• It will be necessary to run the update script (located at /core/update.php) for this release.

Changes since version 1.28.x are listed below.

New features

• Automatically download translation files at install time. #6660
• Add new file type icon views field handler. #6588
• Add a visibility condition for 200/403/404 response codes. #6016
• Add layout configuration options to the content type admin area. #2894

Usability Improvements

• Display visibility conditions for menu items on the layout overview page. #1929

Miscellaneous changes

• Update jQuery UI to 1.14 #6677
• Update CKEditor 5 to v42.0.2 #6481
• Update jquery.ui.touch-punch.js to latest version #6696

1.28.2

Security release for Backdrop CMS. This release fixes 1 security vulnerability:

• BACKDROP-SA-CORE-2024-001

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• It is not necessary to run the update script (located at /core/update.php) for this release.

Other changes since version 1.28.1 are listed below.

Bug fixes

• Fixed: telemetry_cron() should wait for the interval rather than running with every cron run. #6632
• Fixed: Field aliases break the Views "Add Field" functionality. #6630
• Fixed: Restore missing help text from Admin Bar settings. #6640

Miscellaneous changes

• Add a "Drupal 7 upgrade" state. #6633

1.27.3

Security release for Backdrop CMS. This release fixes 1 security vulnerability:

• BACKDROP-SA-CORE-2024-001

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

1.28.1

Maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements only.

Notes for updating

This release includes changes to robots.txt. It is recommended that you copy the new lines from Backdrop core's robots.txt file, or replace the robots.txt file with the one from this release if you have made no customizations to that file.

No changes have been made to the .htaccess or default settings.php files in this release. Updating customized versions of those files is not necessary.

It will be necessary to run the update script (located at /core/update.php) for this release.

Changes since version 1.28.0 are listed below.

User Experience Improvements

• Admin bar: Add an option to move "Add new X" to the bottom of each fly-out menu #4586
• Running cron via the Admin Bar should stay on same page #3973
• Indicate what backend is used for config storage in the status page #6520
• Views "Add fields" modal: Split item title/category/description into separate columns, and streamline JS used #6355
• Rephrase "database updates" so that it is clear that they also perform config updates #5630
• Clear the "5 failed login attempts" security message when a user resets their own password #6425

Bug fixes

• Fixed font-size and admin bar height CSS that caused problems in some themes #6526
• Fixed image_add_svg_attributes() use of DOMDocument::prepend() that did not work on older versions of PHP #6577
• Fixed CKEditor sometimes not activating the editor when minor markup changes occurred #6591
• Fixed management menu links not getting the default icons after 1.28 upgrade if they were customized #6609
• Fixed the header color gradient not working with assigned colors in Bartik theme #6606
• Added missing Views argument handler views_handler_argument_file_type advertised #6614
• Improved translation of strings within file_display_form() #6581
• Removed unnecessary formatter options from file_display_form() that display only a link #6580
• Allow more SVG elements in theme_icon(). #6576
• Removed use of element_sort from core function. #6565
• Updated documentation for MENU_CALLBACK constant #6518
• Updated deprecated jQuery 3.7 methods #6248

1.28.0

The Backdrop community is proud to release Backdrop CMS version 1.28.0!

This release includes several major new features, including a new icon system that bundles the Phosphor Icon Collection, in both "regular" and "filled" variants. The new icon system is used in the admin bar, dashboard, and admin landing pages. The new icons will start being used throughout core in the next few minor releases. They're also available for contrib developers and themers to use through the new Icon API (see the documentation for Icon API here).

Uploading SVG images is now supported directly in image field uploads. SVGs also are integrated into the image library and image style systems. Note that if you have previously used the SVG Image module, this module can now be removed as core provides equivalent functionality.

For sites that run on specialized hosting platforms (such as Pantheon, Acquia, or AWS), Backdrop 1.28.0 now allows your site to store configuration in the database instead of on the file system. This may be beneficial on systems where the file system is not as fast or reliable as database access. It also may help work with existing tools for creating backups, as the configuration will be backed up as part of the database instead of needing to be backed-up separately. Initial benchmarking has indicated database configuration is slightly slower than hosting configuration on a local SSD. Performance will vary based on your hosting configuration.

Notes for updating

• It will be necessary to run the update script (located at /core/update.php) for this release.
• No changes have been made to the .htaccess or robots.txt files. Updating customized versions of those files is not necessary.
• This release does modify the settings.php file located outside the core directory. Updating your customized copy of this file is optional. If you would like to update your copy of settings.php to include the new documentation on using different config storage systems, copy the new section on Configuration Storage from the latest version to your copy.

New features

• Allow configuration storage in alternative locations (for example: the database). #2277 (change notice)
• Add an Icon API and SVG library to core. #364 (change notice, documentation)
• Add support for SVG images. #5541 (change notice)
• Add a report with copy/paste debugging information #5791

Bug fixes

• Fixed: Install fails when using the dynamic config folder paths. #6499
• Fixed: Prevent the last item from showing up twice in the new Debug Report. #6514
• Fixed: Polish admin bar display now that it's using SVGs. #6488
• Fixed: Add an icon to the language switcher in the admin bar. #6503
• Fixed: Remove the default icon from the admin bar alert dot. #6501

Miscellaneous changes

• Add permission for managing files to the Editor role by default. #4961
• Restore theme_node_preview() for theming and compatibility #6129
• Upload Simpletest Results as an Artifact in GHA #6458

1.27.2

This is a maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements only.

Notes for updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Changes since version 1.27.1 are listed below.

Bug Fixes

• Fixed: JavaScript formatPlural regular expression for '@count' not working properly. #6525
• Fixed: Broken link in the layout templates installation success message. #6474
• Fixed: Pasting from Google Docs in CKEditor 5 in Chrome makes everything bold. #6472
• Fixed: All PRs failing ImageStylesPathAndUrlUnitTest. #6459
• Fixed: DatabaseSchema_mysql::fieldExists() does not escape the column name. #6450
• Fixed: Empty search results gives error re mini pager. #6437
• Fixed: Remove use of constant "LOG_LOCAL0" in system_update_1017(). #6432
• Fixed: url filter extended settings are lost when saving the form without changes. #6431
• Fixed: Summary text exists, but is empty when using CKeditor5. #6423
• Fixed: Nonexistent HTML5Shiv library still being added. #6419
• Fixed: Wrong display of some float values in Views. #6412
• Fixed: Flush the layout cache when switching the node_admin_theme option. #6374
• Fixed: < gets encoded to < by libxml >v2.9.14, causing broken HTML in generated summaries. #6327
• Fixed: Functional tests: LayoutUpgradePathTest fails too often in GHA. #6293
• Fixed: Fatal error when submit an empty required date field with popup widget. #6275
• Fixed: Remove MySQL 5.0 hacks. #6120
• Fixed: array to string conversion in views_arg_load(). #5869
• Fixed: An additional empty value gets saved for Multi-value Long Text fields. #5153

Documentation updates

• Fixed: Remove missed instance of "white-listed". #6465

Security Improvements

• [Security] Fixed: Strengthen one-time login links. #6420
• [Security] backdrop_http_request() fails to strip Cookie or Authorization headers on HTTP downgrade #5963

User Experience Improvements

• Fixed: Reduce Update Status module's red messages on admin/* pages. #5083
• Fixed: Add better help text for Date fields. #4249
• Fixed: Set the default value for "Layout template" to what is in use on the default layout. #6479
• Fixed: Do not link an email address if the domain name does not contain a TLD. #6448
• Fixed: Hide the email verification checkbox when only admins can create accounts. #3170
• Fixed: Add a cancel link in the views UI. #2516
• Fixed: Provide views definitions for the uid column in the file_managed table. #6440
• Fixed: Use consistent styles for details summaries and fieldset legends in Seven theme. #5509

Miscellaneous changes

• Update Archive_Tar to release 1.5.0. #6446
• Add a JSON delivery callback for Entity Reference autocomplete. #6486
• Add jQuery version usage to telemetry data. #6537
• Add Drupal compatibility layer status to telemetry data. #6443
• Ignore the contents of core/modules/ckeditor5/lib/ckeditor5 directory for CSpell. #6536

1.28.0-preview

This is the preview release of Backdrop 1.28.0. Please use this version if you would like to help us test the features in the new version of Backdrop prior to the official release on May 15th, 2024.

This preview release includes several major new features, including a new icon system that bundles the Phosphor Icon Collection, in both "regular" and "filled" variants. The new icon system is used in the admin bar, dashboard, and admin landing pages. The new icons will start being used throughout core in the next few minor releases. They're also available for contrib developers and themers to use through the new Icon API. Additional documentation and change records are being worked on for the release. In the mean time, see issue #364.

Uploading SVG images is now supported directly in image field uploads. SVGs also are integrated into the image library and image style systems.

For sites that run on specialized hosting platforms (such as Pantheon, Acquia, or AWS), Backdrop 1.28.0 now allows your site to store configuration in the database instead of on the file system. This may be beneficial on systems where the file system is not as fast or reliable as database access. It also may help work with existing tools for creating backups, as the configuration will be backed up as part of the database instead of needing to be backed-up separately. Initial benchmarking has indicated database configuration is slightly slower than hosting configuration on a local SSD. Performance will vary based on your hosting configuration. More information about converting sites from file configuration to database configuration will be available as we approach the 1.28.0 release.

Dozens of other small bugs and user experience issues are included in this release. See the 1.27.2 milestone for issues that have been fixed in this release that will be bundled into both 1.28.0 and 1.27.2 when they are released.

Notes for updating

This release does modify the settings.php file located outside the core directory. Updating your customized copy of this file is optional. If you would like to update your copy of settings.php to include the new documentation on using different config storage systems, copy the new section on Configuration Storage from the latest version to your copy.

No changes have been made to the .htaccess or robots.txt files. Updating customized versions of those files is not necessary.

When updating from 1.27.1, the database update script does not need to be run. However, the caches do need to be cleared. Visit admin/config/development/performance to clear the caches, or use the admin toolbar under the home icon.

New features

• Add an icon library to core #364
• Support uploading and viewing SVGs in the Image Library #5541
• Make config storage swappable (store config in the database) #2277
• Provide an easy way to get ready-to copy/paste debugging information #5791

Miscellaneous changes

• Editors should have permission to manage files #4961
• Restore theme_node_preview() for theming and compatibility #6129

1.27.1

Maintenance release for Backdrop CMS. This update contains bug fixes and usability improvements only.

Notes for Updating

• No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
• The database update script does not need to be run.

Usability Improvements

• Add "Translate" link to contextual content links. #6410
• Add the complete file path to the manage file form. #4175
• Fixed: "Create new revision by default" checkbox behavior is confusing. #6103

Bug fixes

• Fixed: Adding a link on image with a caption removes the alignment on the tag. #6384
• Fixed: PHP notice after update from 1.26.3 to 1.27.0. #6372
• Fixed: Fixed: The line break filter adds extra
  tags within headings. #6371
• Fixed DatabaseConnection_mysql::$utf8mb4Supported is never initialized. #6370
• Fixed: Pageless node titles still link to the node page even when access is denied. #5181
• Fixed: Views exposed filter with autosubmit and AJAX loses keyboard focus. #3166

Miscellaneous changes

• Rename default Contact category from "Website feedback" to "General" #4703
• Remove legacy hook from Testing module. #6350
• Security hardening for jQuery form. #6417