v1.7.2

v1.7.2

Fixed

• empty string displayed as SelectDropdown title (#3773)

v1.7.1

Fixed

• missing parameter names in token title translation. (#3752)
• hardcoded language strings in StatusWidget (#3754)
• hide developer tokens section in if there is nothing to display or create (#3753)
• improve sessions user UI on mobile (dd868ab44e11e892d020e3b9412553c6a789e68d)

v1.7.0

v1.7.0

Added

• PHP 8.2 Support [#3709]
• (seo) Do not use h3 header for poster author in posts stream [#3732]
• (seo) Use h2 header for discussions on discussions list [#3731]
• (seo) shift h1 tag from logo to discussion title [#3724]
• Admin User Search [#3712]
• access tokens user management UI [#3587]
• add display name column to admin users list [#3740]
• allow push additional items to the end of the poststream [#3691]
• allow using utf8 characters in tag slugs [#3588]
• expose queue driver, schedule status [#3593]
• expose {time} to eventPost data, fix renamed tooltip [#3698]
• frontend Model extender [#3646]
• global logout to clear all sessions, access tokens, email tokens and password tokens [#3605]
• improved page navigation for users list [#3741]
• introduce frontend extenders [#3645]

Fixed

• 3 digit hex color value in color input not supported [#3706]
• column id can be ambiguous in group filter with extensions [#3696]
• disallow certain dangerous LESS features (1761660)
• evaluated page title content [#3684]
• invalid translation key for scheduler dashboard [#3736]
• load actor.groups on showforumcontroller [#3716]
• make go-to-page input number-like [#3743]
• normal logout affects all sessions [#3571]
• permissions table on mobile is unusable [#3722]
• post dropdown opens all dropdowns in .Post-actions [#3675]
• typo in Formatter extender docblock [#3676]
• undefined showing in dropdown active title [#3700]

Changed

• Add missing states exports to compat.ts [#3683]
• Indicate cross-origin request in generic error message [#3669]
• Merge branch 'release/v1.6.2' (e0b9dcf)
• The negate field doesn't get used, which means you cant exclude tags [#3713]
• Update forum.less to fix the misalignment of the choose tags button [#3726]
• yarn audit-fix (8ddb0fe)
• yarn (ee1e04c)
• convert Dropdown components to TS [#3608]
• fix php 8.1 on preg_match 2nd argument being null, which also optimizes slightly (d7b9a03)
• remove use of deprecated phpunit assertion (3af0481)
• update JS dependencies [#3695]

v1.6.3

Fixed

• Post mentions can be used to read any post on the forum without access control (a50dbb8).
• Notifications can leak restricted content (57fb786).
• Any user including unactivated can reply in public discussions whose first post was permanently deleted (e42b577).

v1.6.2

v1.6.2

Fixed

• XSS Vulnerability in core (flarum/framework#3684).

v1.6.1

Fixed

• JS dependencies update breaks some utilities.

v1.6.0

Fixed

• (regression) bad import (5f2d7fb)
• apply flex for AppearancePage colors input [#3651]
• larastan v1 incompatible with phpstan v1.9.0 [#3665]
• password reset leaks user existence [#3616]

Changed

• Apply fixes from StyleCI (267f675)
• Fix tag discussion count decreased by 2 when hiding before deleting [#3660]
• Log migration path when up/down keys are missing [#3664]
• Make it possible to extend SetupScript [#3643]
• Setup PHPStan Level 5 [#3553]
• yarn format (c5c312d)
• add missing last period to custom date ranges [#3661]
• add priorities to profile settings page [#3657]
• allow specifying php extensions in workflow (b0b47a0)
• format js (06963df)
• remove styleci from changelog (b2fa28e)
• set flarum version to dev for 1.6.0 (fc743ba)
• throw an exception when no serializer is provided to the controller [#3614]

Added

• Allow additional login params, Introduce LogInValidator [#3670]
• Allow additional reset password params, introduce ForgotPasswordValidator [#3671]
• add statistics chart export button [#3662]
• allow specifying extensions when installing an instance [#3655]
• contrast util with yiq calculator [#3652]
• customizable session driver [#3610]
• replace ColorPreviewInput for GroupModal color input [#3650]
• send notifications of a new reply when post is approved [#3656]

v1.5.0

Fixed

• (a11y) add accessible labels to notification grid options [#3520]
• (a11y) present post streams as feeds [#3522]
• (a11y) set aria-busy when editing a post stream item [#3521]
• (compilation) versioner not inject into compilers [#3589]
• Move guzzle requirement to core [#3544]
• MyISAM tables for extensions during installation (75aaef7, f926c58)
• Set the translator locale to user preference for email notifications [#3525]
• $events property declared dynamically [#3598]
• core settings header has no priority (33bf228)
• html entities shown raw in page title [#3542]
• incorrect centring of deleted user avatars in notification list [#3569]
• intellisense imports defaulting to absolute path from src folder [#3549]
• minor backward compatible fix for php 8.1 in st_replace (07b2f86)
• post query wildcard selection causes ambiguity [#3621]
• potential static caching memory exhaustion [#3548]
• prepare release workflow has invalid layout (70e483d)
• remove deprecation warning for decoding null values (590639f)
• replace .fa() mixin usage with .fas() [#3537]
• return type hint static is php 8+ (b01b75e)
• sticky nav content displays below post stream [#3575]
• titles positioned wrongly with custom header height [#3550]
• typo in error message (1a189f4)
• unread notifications are globally cached between users. [#3543]
• update workflow name (628c281)
• user has wrong discussion read status [#3591]

Changed

• Add loading="lazy" attribute for avatars [#3578]
• Create CODEOWNERS (6e48a03)
• MyISAM tables for extensions during installation" (f128190)
• convert AlertManager IndexPage and UserPage components to TS [#3536]
• convert Badge Checkbox and Navigation components to TS [#3532]
• convert core modals to TypeScript [#3515]
• convert page components to TypeScript [#3538]
• debug line slipped in while rebasing a PR [#3580]
• don't pass password field between auth modals [#3626]
• fix github issue templates (d3e456a)
• format code (4954621)
• getting the release workflow in (5530400)
• link logo at the top with the official website [#3552]
• prevent running both push and pull_request actions at the same time [#3597]
• refactor prefix matrix and add MySQL 8.0 & PHP 7.3 to workflows [#3595]
• relying on a third-party for avatar URL tests is unreliable [#3586]
• require guzzle 6 or 7 (46b3b7a)
• split FA imports into separate Less file for easy overriding [#3535]
• unify JS actions into one (rewritten flarum/action-build) [#3573]
• update version constant during cycle 22 (d864405)
• use isCollapsed instead of rangeCount [#3581]
• use github issue template forms [#3526]

Added

• (modals) support stacking modals, remove bootstrap modals dependency [#3456]
• Add custom class for email confirmation alert [#3584]
• Admin debug mode warning [#3590]
• Delete all notifications [#3529]
• Queue package manager commands [#3418]
• Restart the queue worker after cache clearing, ext enable/disable, save settings [#3565]
• add createTableIfNotExists migration helper [#3576]
• add new workflow for generating release meta (0901e59)
• clear password & email tokens when appropriate [#3567]
• discussion UTF-8 slug driver [#3606]
• expose assets base url to frontend forum model [#3566]
• extender to add custom less variables [#3530]
• publish assets on admin dashboard cache clear [#3564]
• throttle email change, email confirmation, and password reset endpoints. [#3555]

Full changelog: https://github.com/flarum/framework/blob/main/CHANGELOG.md#v150

v1.4.1

Fixes

• Link extender uses PHP 8 return types (flarum/framework@b01b75e)

v1.4.0

Added

• created_at and updated_at columns added to several tables (flarum/framework#3435)
• Priorities added to AdminNav links (flarum/framework#3453)
• app.translator allows retrieving and setting locale (flarum/framework#3451)
• Extensions can now declare custom settings components for use with buildSettingComponent (flarum/framework#3494)
• Implement extensibility on rel and target attributes on links (flarum/framework#3455)

Changed

• Split boot script for Flarum in HTML footer into two parts for CSP hashing (flarum/framework#3461)
• Split asset compilation by giving assembling compilers its own method (flarum/framework#3446)
• Increase visibility of Component typescript class for better extensibility (flarum/framework#3437)

Fixed

• CLI based installations don't exit with an error code on failure (flarum/framework#3452)
• Tabbing through dropdown controls doesn't make them visible (flarum/framework#3450)
• Long topic titles in the notification list don't overflow (flarum/framework#3500)
• assertAdmin tests access based on wrong gate ability (flarum/framework#3501)
• Increasing the composer header size causes elements to slip underneath (flarum/framework#3502)