11.23.5

What's Changed

• Decode remote url path before stripping directory in addMediaFromUrl by @bunlongheng in #3961

New Contributors

• @bunlongheng made their first contribution in #3961

Full Changelog: 11.23.4...11.23.5

11.23.4

What's Changed

• docs: fix HasMedia interface import in custom image generator by @latent-9 in #3960
• docs: fix outdated class namespaces in consuming events guide by @latent-9 in #3959
• Fix media-library:clean when conversions live on a separate disk by @AdzerKI in #3958

New Contributors

• @latent-9 made their first contribution in #3960
• @AdzerKI made their first contribution in #3958

Full Changelog: 11.23.3...11.23.4

11.23.3

What's Changed

• Remove period from the command description by @kminek in #3953
• Keep the just-added media when enforcing a collection size limit by @freekmurze in #3955

Full Changelog: 11.23.2...11.23.3

11.23.2

What's Changed

• Bump actions/checkout from 6 to 7 by @dependabot[bot] in #3946
• test: remove real sleep(1) from regenerate command tests by @nikolauspschuetz in #3951
• Fix double URL encoding for getTemporaryUrl() with non-ASCII filenames on local disk by @maeandrew in #3950

New Contributors

• @nikolauspschuetz made their first contribution in #3951
• @maeandrew made their first contribution in #3950

Full Changelog: 11.23.1...11.23.2

11.23.1

Fixed

• Strip path-traversal (..) segments from the zip_filename_prefix custom property so MediaStream can no longer emit ZIP archives with traversal entries (zip-slip defense-in-depth) #3947

11.23.0

What's Changed

• Update Retrieving converted images documentation to include getAvailableTemporaryUrl by @Orrison in #3936
• Fix flaky S3 temporary-URL tests by comparing without timing params by @freekmurze in #3940
• Harden filename validation against malicious extensions by @freekmurze in #3939
• Add opt-in conversions_disk_name config for default conversions disk by @patrickweh in #3938

New Contributors

• @patrickweh made their first contribution in #3938

Full Changelog: 11.22.1...11.23.0

11.22.1

What's Changed

• Removed stray 3MB speaking-page.png from the repo root, accidentally committed in a previous "wip" commit. Reduces the size of the package archive downloaded by Composer.

Full Changelog: 11.22.0...11.22.1

11.22.0

What's Changed

• Bump dependabot/fetch-metadata from 2 to 3 by @dependabot[bot] in #3931
• Add deferred() conversion option by @ziadoz in #3922

New Contributors

• @ziadoz made their first contribution in #3922

Full Changelog: 11.21.2...11.22.0

11.21.2

What's Changed

• fix: skip URL encoding for S3 disk to prevent double encoding by @moemadeldin in #3934

Full Changelog: 11.21.1...11.21.2

11.21.1

What's Changed

• Fix docs bugs: 'to the where' typo and 'how to working with conversio… by @tareq-halaby in #3928
• Fix awkward phrasing: 'want to not move, but copy' -> clearer wording by @tareq-halaby in #3927
• fix: encode percent signs in filenames when generating URL by @moemadeldin in #3930

New Contributors

• @tareq-halaby made their first contribution in #3928
• @moemadeldin made their first contribution in #3930

Full Changelog: 11.21.0...11.21.1