Upstream changes:
Drupal 8.5.6 Release notes
Maintenance and security release of the Drupal 8 series.
This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:
Drupal Core - 3rd-party libraries -SA-CORE-2018-005
No other fixes are included.
Upstream changes:
Release notes
This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.
This release only contains bug fixes, along with documentation and testing improvements. Translators should take note of a minor string change since the last release.
Known issues
View with user/% path breaks login/logout on 8.5.x - a regression from 8.4.x
Important: If you have not already upgraded to 8.5.0, read the Drupal 8.5.0 release notes before upgrading to 8.5.5.
Search the issue queue for all known issues.
Changes since 8.5.4:
#2921661 by heddn, maxocub, alexpott, phenaproxima, Jo Fitzgerald, badmetevils, quietone: Add support to migrate multilingual revisions
#2977945 by awm: typo in test_node_revision_links views yml file
Revert "Issue #2971338 by Jo Fitzgerald, quietone, joachim: MigrationLookupTest::testMultipleSourceIds() uses wrong class for mocking"
#2971338 by Jo Fitzgerald, quietone, joachim: MigrationLookupTest::testMultipleSourceIds() uses wrong class for mocking
#2887490 by michaellenahan, cilefen, rOprOprOp, catch: Activity Tracker cannot be enabled if there are unpublished nodes
#2982042 by progga: UUID component's composer.json has wrong description
#2860760 by Jo Fitzgerald, heddn, quietone, alexpott: Match setup() functionality of MigrateFileTest with MigratePrivateFileTest
#2979813 by Wim Leers, TwoD: Add TwoD as maintainer for the editor.module component
#2581557 by dawehner, mxh, xjm, sorabh.v6, JeroenT: Add ltrim($path, '/') in drupalGet method
#2635046 by neclimdul, dawehner, alexpott: run-test.sh doesn't work in directories with spaces
#2950158 by Vidushi Mehta, ankitjain28may, Shiva Srikanth T, ckrina, markconroy, Eli-T: Choose policy for defining font-weight on Umami theme
#2875679 by mondrake, daffie: BasicSyntaxTest::testConcatFields fails with contrib driver
#2933413 by Graber, alexpott, joelpittet, chanderbhushan, jchand: Improve test coverage of using bulk actions when the view has an exposed form using AJAX
#2978596 by visshu007, Chi: views_add_contextual_links() references to non existent views_preprocess_page() function
#2977175 by borisson_, PieterJanPut, tstoeckler, msankhala: DataDefinition::setConstraints() should be on DataDefinitionInterface
#2822611 by Mile23, Wim Leers, alexpott, Berdir, catch, dawehner, xjm, tstoeckler, borisson_: Document why UserInterface + FileInterface + MenuLinkContentInterface + … extend \Drupal\Core\Entity\ContentEntityInterface
#2969598 by msankhala, joachim: badly formatted sample code in docs for Select::orderBy()
Revert "Issue #2886609 by quietone, Jo Fitzgerald, jhodgdon, masipila, heddn, Gábor Hojtsy, mikeryan: Migrate D6 i18n loacalized translations of taxonomy terms"
#2975751 by msankhala, leolando.tan, joachim, claudiu.cristea: incorrect @return for Tables::getTableMapping()
#2927723 by longwave, artreaktor, chiranjeeb2410, ankitjain28may, cilefen, dawehner: The URL "/ " with trailing space is not getting recognized as
#2737773 by antongp, wturrell, pcambra, cilefen, Darvanen, cwells, manningpete, alexpott: Proper way to install Drupal, missing vendor folders, example.gitignore
#2943107 by mherchel, NicholasS, jordana, finnsky, tomphippen, smaz, markconroy, andrewmacpherson, kjay: Umami support for Internet Explorer 11
#2979166 by RajeevK, lomasr: Wrong documentation on SiteCacheContext class
#2749901 by MaskyS, kleog, priya.chat, harsha012, rakesh.gectcr, shobhit_juyal, snehi, SenthilMohith, neerajpandey, gawaksh, thompsizzle, ecrown, mohit1604, andrewmacpherson, surbz, rahulrasgon, riddhi.addweb: Add README.txt to Bartik theme
#2886609 by quietone, Jo Fitzgerald, jhodgdon, masipila, heddn, Gábor Hojtsy, mikeryan: Migrate D6 i18n loacalized translations of taxonomy terms
#2772251 by msankhala, markpavlitski, joachim: description for EntityForm::actions() could use rewording
#2978848 by claudiu.cristea, amateescu: EntityReferenceFieldItemList::referencedEntities() doesn't work for computed fields
#2073467 by maxocub, Jo Fitzgerald, pobster, masipila, plach, heddn, phenaproxima, catch: Migrate Drupal 7 Entity Translation settings to Drupal 8
#2877828 by msankhala, joachim: FormInterface::getFormId() should state restrictions on the returned ID string
#2855054 by alexpott, LoMo, wesleydv, Artusamak, gawaksh, xjm: User cancel link doesn't redirect to the homepage
#2936821 by msankhala, joachim, lomasr, marxjohnson: unclear docs in MigrateProcessInterface
#2951715 by dravenk, marvil07, rakesh.gectcr, davidsonjames, heddn, Jo Fitzgerald, quietone, alexpott, maxocub: Log message if static_map plugin skips the row
#2932777 by mondrake, borisson_, alexpott, daffie: Risky count() in SQLite Statement
#2951163 by nkoporec, Parvateesam, joachim: CachePluginBase::cacheGet()/::cacheSet() doesn't document @params or @return
Performing substitutions during post-patch breaks tools such as mkpatches,
making it very difficult to regenerate correct patches after making changes,
and often leading to substituted string replacements being committed.
Upstream changes:
Releases for Drupal core
API version
drupal 8.5.4
Posted by catch on 6 June 2018
Release notes
This is a patch release of Drupal 8 and is ready for use on production sites
Upstream changes:
Drupal-8.5.3:
Release notes
Maintenance and security release of the Drupal 8 series.
This release fixes critical security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:
Drupal core - Critical - Remote Code Execution - SA-CORE-2018-004
No other fixes are included.
Drupal-8.5.2:
This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:
Drupal core - Moderately Critical - Cross Site Scripting- SA-CORE-2018-003
No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.
What's new in Drupal 8.5.0?
This new version makes Media module available for all, improves
migrations significantly, stabilizes the Content Moderation and
Settings Tray modules, serves dynamic pages faster with BigPipe enabled
by default, and introduces a new experimental entity layout user
interface. The release includes several very important fixes for
workflows of content translations and supports running on PHP 7.2.
Upstream changes:
8.4.5
Security release of the Drupal 8 series.
This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcements:
Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2018-001
No other fixes are included.
Upstream changes:
The following important issues are resolved in 8.4.4 (in addition to the dozens of other fixes listed at the end of this post):
[PHP 7.2] count() parameter must be an array or an object that implements Countable. Drupal 8.4.4 still has one remaining critical bug on PHP 7.2 which will be fixed by Drupal 8.5.0, to be released March 7 2018.
Concurrently editing two translations of a node may result in data loss for non-translatable fields
Known issues
There are no known regressions in this release.
Important: If you have not already upgraded to 8.4.0, read the Drupal 8.4.0 release notes before upgrading to 8.4.4. Drupal 8.4 includes major version updates for Symfony, jQuery, and jQuery UI and is no longer compatible with older versions of Drush.
Drupal 8 currently has one remaining critical bug on PHP 7.2 which will be fixed by Drupal 8.5.0, to be released March, 7 2018.
Search the issue queue for all known issues.
All changes since the last release
#2894068 by Jo Fitzgerald, davidsickmiller, alexpott, heddn, Yogesh Pawar, quietone, xjm: datetime_type is not set correctly when migrating datetime fields from D7
#2930715 by alexpott, dawehner: Recursive rebuild caused by installing admin_toolbar_tools module
#2837022 by hchonov, xjm, vlad.dancer, plach, matsbla, Gábor Hojtsy: Concurrently editing two translations of a node may result in data loss for non-translatable fields
#2933125 by Tessa Bakker: Case mismatch in ExportForm.php
#2323459 by harsha012, jhodgdon, joachim: Change wording of annotation keys to properties
#2840257 by kiamlaluno: The documentation makes reference to a function that doesn't exist
#2779921 by kiamlaluno, alexpott: hook_field_widget_form_alter() still reference a hook that is not used anymore
#2931294 by claudiu.cristea, Wim Leers: Timestamp field type misses schema for value
#2923884 by mfernea: Fix 'Squiz.WhiteSpace.SemicolonSpacing' coding standard
#2899708 by gaurav.kapoor, tan33sh, tedbow, droplet, Wim Leers: `quote` should be `blockquote` in off-canvas.base.css
#2932154 by jhedstrom: ModerationInformation::getLatestRevisionId returns access-specific results
#2932551 by jeqq: Error when calling ModerationStateFieldItemList::updateModeratedEntity() if the entity doesn't have workflow
#2346893 by lauriii, idebr, slashrsm, RavindraSingh, Rade, Fabianx, alexpott, swentel, gauravjeet, darrenwh, deepak_zyxware, joelpittet, Wim Leers, Yogesh Pawar, Vj, ivan.chavarro, josephdpurcell, josmera01, rloos289, kattekrab, Tanvish Jha, csakiistvan, xjm, larowlan, akalata: Duplicate AJAX wrapper around a file field
#2921033 by Jo Fitzgerald, masipila, phenaproxima, xjm, Wim Leers: Improve API documentation of DrupalSqlBase source plugin
#2862671 by masipila, Jo Fitzgerald, kleog, phenaproxima, quietone: Add documentation to SqlBase source plugin
#2930072 by vaplas, Lendude: Module: Convert system functional tests to phpunit
#2913864 by Jo Fitzgerald, chiranjeeb2410, matslats, phenaproxima: badly constructred link in drupal_set_message
#2928846 by alexpott, Berdir: [PHP 7.2] count() parameter must be an array or an object that implements Countable
#1489692 by Liam Morland, pfrenssen, YesCT, geekinpink, sudishth, josmera01, David_Rothstein: Incorrect handling of file upload limit exceeded - file widget disappears
#2914938 by timmillwood, RajabNatshah, xjm, Manuel Garcia, amateescu, Wim Leers: Preview of content - Notice: Undefined offset: 0 in _quickedit_entity_is_latest_revision() (line 196 of core/modules/quickedit/quickedit.module)
#2880445 by pjcdawkins, japerry, gargsuchi, q0rban: Config sync should not throw a warning when not being writable
#2927636 by alexpott, Mile23, Mixologic: Backport --supress-deprecations to run-tests.sh 8.4.x
#2928778 by plach: Exception when trying to save a new revision after manually setting the original revision ID
#2929464 by tedbow, mpdonadio: Tests under "core/modules/ckeditor/tests/modules/src/Kernel" are in the wrong folder and do not get tested
#2795317 by hswong3i, alexpott, Lendude, bircher, dawehner, martin107, Jo Fitzgerald, mondrake: Allow PHPUnit 6+ support for object mocking
#2862745 by masipila, quietone: Add documentation to EntityFieldInstance destination plugin
#2862746 by masipila, quietone, phenaproxima: Add documentation to EntityFieldStorageConfig destination plugin
#2927844 by Jo Fitzgerald, quietone, heddn: Correct references to 'iterator' plugin to be 'sub_process'
#2927563 by tstoeckler, amateescu: Aggregator feed "refresh" field should have a default value
#2927569 by tstoeckler, amateescu: Various tests do not set values for required field when creating entities
#2862207 by kalpaitch, jmmarquez, jeetendrakumar: Config import change profile message
#2923886 by mfernea: Fix 'Squiz.WhiteSpace.LanguageConstructSpacing' coding standard
Revert "Issue #2929076 by marcoscano: Fix wrong \Drupal\Core\Entity\EntityTypeInterface::getBundleLabel() docblock"
#2929076 by marcoscano: Fix wrong \Drupal\Core\Entity\EntityTypeInterface::getBundleLabel() docblock
#2927758 by Wim Leers, dagmar: Update DbLogResourceTest to use the ResourceTestBase base class instead of the deprecated RESTTestBase
#2717965 by Yogesh Pawar, pguillard, alexpott, Liam Morland, skylord, oxy86, cilefen, balagan, Anthony Fok: Site name is not UTF-8 encoded in email headers
Drupal is a free web Content Management System (CMS) that allows an
individual or a community of users to easily publish, manage and organize a
wide variety of content on a website.
Drupal is ready to go from the moment you download it. It even has an
easy-to-use web installer! The built-in functionality, combined with dozens
of freely available add-on modules, will enable features such as: Content
Management Systems, Blogs, Collaborative authoring environments, Forums,
Peer-to-peer networking, Newsletters, Podcasting, Picture galleries, File
uploads/downloads and much more.
