4.10.5

Note

Craft now sends no-cache headers for requests that generate/retrieve a CSRF token. If your Craft install is behind a static caching service like Cloudflare, enable the asyncCsrfInputs config setting to avoid a significant cache hit reduction. (#15293, #15281)

• Craft now sends no-cache headers for any request that calls craft\web\Request::getCsrfToken(). (#15293, #15281)
• Fixed a bug where structures’ Max Levels settings weren’t being enforced when dragging elements with collapsed descendants. (#15310)
• Fixed a bug where craft\helpers\ElementHelper::isDraft(), isRevision(), and isDraftOrRevision() weren’t returning true if a nested draft/revision element was passed in, but the root element was canonical. (#15303)
• Fixed a bug where focus could be trapped within slideout sidebars. (#15314)

5.2.5

• Craft now sends no-cache headers for any request that generates a CSRF token. (#15281, verbb/formie#1963)
• Fixed a JavaScript error that occurred when creating a new custom element source, preventing the Default Sort and Default Table Columns fields from showing up.
• Fixed a bug where the control panel was getting asynchronous CSRF inputs if the asyncCsrfInputs config setting was enabled.
• Fixed a bug where Craft’s Twig implementation wasn’t respecting sandboxing rules for object properties. (#15278)
• Fixed a bug where assets that the user wasn’t permitted to view could have a “Show in folder” action.
• Fixed focus management with element select inputs after elements were added or removed.
• Fixed a bug where it wasn’t possible to set title values on nested Matrix entries, when saving section entries via GraphQL. (#15270)
• Fixed a SQL error that could occur if a DECIMAL() expression was passed into a query’s select() or groupBy() methods. (#15271)
• Fixed a bug where the “Delete (with descendants)” element action wasn’t deleting descendants. (#15273)
• Fixed an error that could occur when upgrading to Craft 5 if the database user didn’t have permission to disable foreign key constraints. (#15262)

4.10.4

• Craft now sends no-cache headers for any request that generates a CSRF token. (#15281, verbb/formie#1963)
• Fixed a JavaScript error that occurred when creating a new custom element source, preventing the Default Sort and Default Table Columns fields from showing up.
• Fixed a bug where the control panel was getting asynchronous CSRF inputs if the asyncCsrfInputs config setting was enabled.
• Fixed a bug where Craft’s Twig implementation wasn’t respecting sandboxing rules for object properties. (#15278)

5.2.4.1

• Fixed a JavaScript error. (#15266)

5.2.4

• Improved the styling of inactive users’ status indicators. (#15195)
• Added Garnish.once() and Garnish.Base::once(), for registering event handlers that should only be triggered one time.
• Fixed a bug where Ajax requests stopped working after a user session expired and then was reauthenticated.
• Fixed an error that occurred if an element select input was initialized without a name value.
• Fixed a bug where Selectize inputs could be immediately focused and marked as dirty when opening an element editor slideout, if they were the first focusable element in the field layout. (#15245)
• Fixed a bug where other author indicators weren’t shown for Craft Team.
• Fixed a bug where the Recent Entries widget wasn’t showing authors’ usernames for Craft Team.
• Fixed a bug where asset edit page URLs contained spaces if the asset filename contained spaces. (#15236)
• Fixed a bug where element select inputs with single set to true would set existing elements’ input names ending in [].
• Fixed a bug where element indexes could display “Nothing yet” at the bottom of populated table views. (#15241)
• Fixed a bug where element edit pages initially showed the canonical element’s chip in the crumb bar, for provisional drafts. (#15244)
• Fixed an error that occurred when opening an element’s editor slideout via its “Edit” action menu item, if the element had provisional changes. (#15248)
• Fixed a bug where recursively-nested Matrix entries could be lost if multiple of them were edited, and not immediately saved. (#15256)
• Fixed an error that could occur when upgrading to Craft 5 if the database user didn’t have permission to disable foreign key constraints. (#15262)
• Fixed a bug where expanded sidebar navigations could overlap the main content on small screens. (#15253)

4.10.3

• Previewing PDF/video assets without public URLs now displays a “Preview not supported.” message. (#15235)
• Added Garnish.once() and Garnish.Base::once(), for registering event handlers that should only be triggered one time.
• Fixed a bug where Edit Asset pages showed a “View” button for assets without URLs. (#15235)
• Fixed a bug where asset indexes attempted to link to assets without URLs. (#15235)
• Fixed a bug where queue job tracking and element activity tracking could stop working after a user session expired and then was reauthenticated.
• Fixed an error that occurred if an element select input was initialized without a name value.
• Fixed a bug where Selectize inputs could be immediately focused and marked as dirty when opening an element editor slideout, if they were the first focusable element in the field layout. (#15245)

5.2.3

• Fixed MariaDB support. (#15232)
• Fixed a potential vulnerability with TOTP authentication.
• Deprecated craft\helpers\Db::prepareForJsonColumn().

5.2.2

• Added craft\base\conditions\BaseNumberConditionRule::$step.
• Added craft\helpers\Db::parseColumnPrecisionAndScale().
• Added Garnish.muteResizeEvents().
• Fixed a JavaScript performance degradation bug. (#14510)
• Fixed a bug where scalar element queries weren’t working if distinct, groupBy, having, or union params were set on them during query preparation. (#15001)
• Fixed a bug where Edit Asset screens would warn about losing unsaved changes when navigating away, if the file was replaced but nothing else had changed.
• Fixed a bug where Edit Asset screens would show a notification with a “Reload” button after the file was replaced.
• Fixed a bug where Number fields’ condition rules weren’t allowing decimal values. (#15222)
• Fixed a bug where Number field element query params didn’t respect decimal values. (#15222)
• Fixed a bug where asset thumbnails weren’t getting updated after using the “Replace file” action. (#15217)

4.10.2

• Added craft\base\conditions\BaseNumberConditionRule::$step.
• Added Garnish.muteResizeEvents().
• Fixed a JavaScript performance degradation bug. (#14510)
• Fixed a bug where scalar element queries weren’t working if distinct, groupBy, having, or union params were set on them during query preparation. (#15001)
• Fixed a bug where Edit Asset pages would warn about losing unsaved changes when navigating away, if the file was replaced but nothing else had changed.
• Fixed a bug where Edit Asset pages would show a notification with a “Reload” button after the file was replaced.
• Fixed a bug where Number fields’ condition rules weren’t allowing decimal values. (#15222)

5.2.1

• Element index table views now show provisional drafts’ canonical elements’ values for the “Ancestors”, “Parent”, “Link”, “URI”, “Revision Notes”, “Last Edited By”, and “Drafts” columns.
• Improved the styling of disabled status indicators. (#15195, #15206)
• Added craft\web\View::getModifiedDeltaNames().
• craft\web\View::registerDeltaName() now has a $forceModified argument.
• Fixed a bug where changed field values could be forgotten within Matrix fields, if a validation error occurred. (#15190)
• Fixed a bug where the graphql/create-token command was prompting for the schema name, when it meant the token name. (#15205)
• Fixed a bug where keyboard shortcuts weren’t getting registered properly for modals and slideouts opened via a disclosure menu. (#15209)
• Fixed a styling issue with the global sidebar when collapsed. (#15186)
• Fixed a bug where it wasn’t possible to query for authors via GraphQL on the Team edition. (#15187)
• Fixed a bug where it wasn’t possible to close elevated session modals. (#15202)
• Fixed a bug where element chips and cards were displaying provisional draft data even if the current user didn’t create the draft. (#15208)
• Fixed a bug where element indexes weren’t displaying structured elements correctly if they had a provisional draft. (#15214)