6.1.7

Note: this release includes a security-related fix! Many thanks to @johnweeklys for reporting it to use responsibly!

• GHSA-m2j9-f9xw-xxgw / 9795d39

What's Changed

• Bump axios from 1.16.1 to 1.18.0 by @dependabot[bot] in #3755
• Reduce PHPStan baseline: fix generic object types and invalid array keys by @Vondry in #3758
• Use Symfony HTTP utils to generate an always valid redirect response by @bobvandevijver in #3768
• XLIFF format normalisation: convert remaining 1.2 catalogues to 2.0 by @Vondry in #3770
• Fix validator placeholders that never interpolate by @Vondry in #3771
• Correct French validator placeholders and typo from PR #3771 review thread by @bobvandevijver with @Copilot in #3772
• Fix failing Cypress E2E suite: login redirect (cookie_secure) by @Vondry in #3757
• Add explicit type definition by @bobvandevijver in #3774
• fix(translations): correct broken Czech strings in messages, security and validators by @Vondry in #3779
• Fix: keep the save button enabled after previewing (#3778) by @Vondry in #3791
• fix: repair broken Makefile targets and stale server docs by @Vondry in #3777
• fix(translations): replace unresolved %url% in built-with-bolt string by @Vondry in #3785
• fix(translations): restore dropped placeholders in bg/de/es/hu by @Vondry in #3784
• fix(translations): restore English placeholder names in de/uk by @Vondry in #3783
• fix(translations): correct srcLang in 7 XLIFF files by @Vondry in #3780
• fix(translations): correct compared_value placeholder in ru/uk validators by @Vondry in #3781
• fix(translations): remove stray whitespace inside placeholders (ru/uk) by @Vondry in #3782
• feat(translations): add Slovak (sk) catalogues for messages, validators and security by @Vondry in #3786
• chore(assets): modernise frontend lint tooling (ESLint 10 flat config, Prettier 3, Stylelint 17) by @Vondry in #3775
• chore(deps-dev): bump undici from 6.27.0 to 6.28.0 by @dependabot[bot] in #3787
• chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.5 by @dependabot[bot] in #3788
• chore(deps-dev): bump svgo from 2.8.2 to 2.8.3 by @dependabot[bot] in #3762
• chore(deps): bump immutable from 5.1.6 to 5.1.9 by @dependabot[bot] in #3759
• chore(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 by @dependabot[bot] in #3761
• chore(deps-dev): bump ip-address from 10.2.0 to 10.5.0 by @dependabot[bot] in #3776
• chore(deps): bump phin and node-vibrant by @dependabot[bot] in #3766
• Show content validation errors when Saving Ajaxy by @mindaugasjackunaspcin #3793

Full Changelog: 6.1.6...6.1.7