Release Notes

What's fixed

• Fix header z-index when creating a new nav #14337 by @jaygeorge
• Remove fixed height from SVGs in UI labels to prevent flickering #14338 by @jaygeorge
• Correct the Bard full-screen width #14348 by @jaygeorge
• Fix duplicate translation for "Edit Fieldset" #14349 by @duncanmcclean
• Delete unused moment translations #14354 by @duncanmcclean
• Revert "Fix translator locale" #14358 by @jasonvarga
• French translations #14339 by @ebeauchamps
• German translations #14352 by @helloDanuk

What's fixed

• DatePicker dates can't be strings #14295 by @edalzell
• Fix updated widget badge alignment #14303 by @jackmcdade
• Fix PHP sanitization edge cases #14300 by @duncanmcclean
• Fix Replicator Drag & Drop when multiple fields share the same handle #14310 by @duncanmcclean
• Fix live preview token scope #14304 by @jasonvarga
• Handle more cases in external url detection #14315 by @jasonvarga
• Allow external redirects from Form::getSubmissionRedirect #14318 by @jasonvarga
• Fix closure validation rules with Files fieldtype #14319 by @duncanmcclean
• Relationship fieldtype authorization tweaks #14307 by @duncanmcclean
• Add CSP header to svg route #14325 by @jasonvarga
• Add authorization to revision routes #14301 by @duncanmcclean
• Restrict markdown preview endpoint #14326 by @jasonvarga
• Sanitize password reset form redirect value #14327 by @jasonvarga
• Fix config through Antlers views #14328 by @jasonvarga
• Long dropdowns should be scrollable #14333 by @duncanmcclean
• Fix set picker position #14332 by @duncanmcclean
• Fix various timezone issues #14322 by @duncanmcclean
• Fix translator locale #14323 by @jasonvarga
• Fix 2FA setup modal not re-opening #14309 by @duncanmcclean
• Fix logo z-index in Outside.vue #14299 by @SteveEdson
• Fix translator error with Symfony Console 8 #14330 by @duncanmcclean
• Don't autofocus on non-root fields with "title" or "alt" name #14329 by @hivokas

What's fixed

• Hide "Duplicate Set" when max sets limit has been reached #14275 by @duncanmcclean
• Fix missing top border in read-only Assets fields #14277 by @duncanmcclean
• Hide set bodies when there are no fields #14282 by @jackmcdade
• Fieldset editing improvements #14283 by @jackmcdade
• Harden URL::isExternalToApplication() #14287 by @duncanmcclean
• Prevent opening set picker when max_sets limit has been reached #14290 by @duncanmcclean
• Harden password reset #14294 by @jasonvarga

What's new

• Add Asset::moveUnique() method #14236 by @lwekuiper

What's fixed

• Sanitize SVGs on reupload #14258 by @duncanmcclean
• Fix error saving preferences when theme translations exist #14266 by @duncanmcclean
• Prevent logging git dependabot errors #14257 by @aerni
• Fix incorrect variable in return doc #14265 by @indykoning
• Fix error on CreateForm component in Storybook #14264 by @duncanmcclean
• Allow using SVGs from vendor/node_modules directories #14261 by @duncanmcclean
• Fix date formats #14256 by @jasonvarga
• Ensure images are refreshed properly after cropping #14260 by @duncanmcclean
• Handle validation rules on Files fieldtype #14262 by @duncanmcclean
• Make stacks smoother #14210 by @jaygeorge
• Fix TimePicker resetting to AM when typing #14259 by @duncanmcclean
• Rename to security #14276 by @jasonvarga
• Prevent path traversal in file dictionary #14272 by @duncanmcclean
• Prevent term creation via fieldtype without permission #14274 by @duncanmcclean

What's fixed

• Alphabetically order listing/publish container context lists & document isDirty() #14245 by @duncanmcclean
• Relationship endpoint authorization #14254 by @jasonvarga
• Replicator fieldtype endpoint hardening #14255 by @jasonvarga
• Show "Drop to Upload" on top when dragging file onto Asset field #14250 by @duncanmcclean
• Avoid globe cursor when dragging & dropping Bard sets #14248 by @duncanmcclean

What's fixed

• Fix color mode preference values #14242 by @jasonvarga
• Add outside class to outside layout #14240 by @duncanmcclean
• Only remove Bard set when backspace key is hit #14189 by @duncanmcclean
• Removed a comment from the js code output of the StaticCacher #14233 by @micahhenshaw
• French translations #14243 by @ebeauchamps

What's fixed

• Add "Content Search" string to translator's $additionalStrings array #14226 by @duncanmcclean
• Make image manipulation presets more readable #14230 by @jaygeorge
• Fix undefined variable in Bard fieldtype #14238 by @duncanmcclean
• French translations #14232 by @ebeauchamps
• Bump tar from 7.5.10 to 7.5.11 #14231 by @dependabot

What's new

• Image transparency checkerboard #13975 by @jaygeorge
• Support reference updates for custom fieldtypes and working copies #13693 by @morhi
• Asset listing filters #14025 by @daun
• Ability to save/reset changes to filter presets #13956 by @duncanmcclean

What's fixed

• Improve tables in Bard fields, particularly dark mode #14158 by @jaygeorge
• Add MiddleEllipsis component to Storybook #14215 by @duncanmcclean
• Update ip_address protector to use request()->ips() #14063 by @gavynd6
• Fix $isNew detection after Asset::move() #14140 by @lwekuiper
• Avoid escaping dictionary fieldtype labels #13845 by @duncanmcclean
• Force full width on asset grid to account for smaller SVGs #14164 by @jaygeorge
• Avoid opening Command Palette when Bard field is focused & text is selected #14019 by @duncanmcclean
• Asset cropper fixes #14173 by @jaygeorge
• External URLs in the nav should render as anchor tags #14174 by @duncanmcclean
• Cancel inflight requests #14178 by @macaws
• Performance: Reduce duplicate cache reads on nav #14179 by @macaws
• Performance: memoize outpost #14180 by @macaws
• Memoize marketplace cache #14182 by @macaws
• Fix outline focus briefly showing as the stack comes in #14187 by @jaygeorge
• Use amber for update badges #14175 by @duncanmcclean
• Fix copy to clipboard input in light mode #14186 by @duncanmcclean
• Handle stop words case insensitive #14201 by @marcorieser
• Critical updates visibility #14202 by @jasonvarga
• Tiny border-radius fix from the checkerboard PR by @jaygeorge
• Collapse the assets fieldtype to its mobile layout at a higher breakpoint #14212 by @jaygeorge
• Fix expanding Bard sets in localized entries #14214 by @duncanmcclean
• Handle CarbonInterval instances in Localize middleware #14209 by @duncanmcclean
• Handle cancelled requests when generating slugs #14211 by @duncanmcclean
• Allow dev stability for local starter kit installations #14208 by @marcorieser
• Refresh CodeMirror instance when switching tabs #14199 by @duncanmcclean
• Update bulk action selections when individual row is deleted #14196 by @duncanmcclean
• Add skeleton ui to lazy loaded actions #14217 by @jaygeorge
• Various drag & drop fixes #14219 by @duncanmcclean
• Avoid sanitizing target attribute in markdown() helper #14221 by @duncanmcclean
• Fix create entry translations #14223 by @duncanmcclean
• Acquire stache-warming lock in Duplicates::find #14176 by @mmodler
• French translations #14163 by @dadaxr
• German translations #14165 by @helloDanuk
• French translations #14166 by @ebeauchamps
• Bump minimatch and dompurify #14161 by @jasonvarga
• Bump svgo from 3.3.2 to 3.3.3 #14153 by @dependabot
• Bump tar from 7.5.9 to 7.5.10 #14156 by @dependabot

What's new

• Add configuring callback functionality to statamic.js #13811 by @maurice-ellis
• Add min, max, sum and avg methods to Stache query builder #13894 by @duncanmcclean
• Laravel 13 #13870 by @duncanmcclean
• Image cropping #13875 by @jackmcdade
• Add option to show widget table headers #14128 by @jackmcdade
• Clean Asset Meta Command #13934 by @jackmcdade

What's fixed

• Ignore toolbar shortcuts while inside menus #14111 by @daun
• Revert floating toolbar buttons inadvertently affected by 14036 #14118 by @jaygeorge
• When sets are expanded, add isolation to force a new stacking context #14121 by @jaygeorge
• Remove z-index from replicator #14108 by @jaygeorge
• Don't force an SVG aspect ratio in the asset preview thumbnails #14107 by @jaygeorge
• Fix replicator preview text merging during reorder #14072 by @dannyuk1982
• Show asset editor toolbar in more situations #14127 by @jasonvarga
• Fix query scopes in asset fieldtype #14091 by @duncanmcclean
• Minor adjustment to label margin #14139 by @jaygeorge
• Fix pjpg format being used as file extension in AssetUploader #14134 by @lwekuiper
• Updates section tweaks #14129 by @duncanmcclean
• Fix addon settings permissions #14130 by @duncanmcclean
• Apply existing container width breakpoints #13910 by @daun
• Prevent dropping nav item with children into root position #13861 by @duncanmcclean
• Antlers config backwards compatibility #14146 by @jasonvarga
• Config parsing exclusion #14152 by @jasonvarga
• Fix Antlers parser state restoration #14151 by @jasonvarga
• Remove pdf css #14141 by @jasonvarga
• More Antlers defaults #14125 by @jasonvarga
• Dutch translations #14149 by @JasperWelsing
• Dutch translations #14143 by @lwekuiper
• French translations #14113 by @dadaxr
• Bump storybook from 10.2.0 to 10.2.10 #14112 by @dependabot
• Bump rollup from 4.44.1 to 4.59.0 #14106 by @dependabot

What's fixed

• Revert caching of parsed items during Stache warming #14104 by @jasonvarga

This release contains a potentially breaking change for the sake of security.

What's new

• Floating toolbar keyboard shortcuts #14036 by @jaygeorge
• Add disabled prop to Button component #14047 by @duncanmcclean
• Provide extra values through container and publish form #14041 by @jasonvarga
• Make more colors themeable #14013 by @jaygeorge

What's fixed

• Antlers hardening (Breaking: See PR for upgrade notes) #14092 by @jasonvarga
• Fix missing site name on Statamic Solo sites #14038 by @duncanmcclean
• Make red text values a consistent 600 #14037 by @jaygeorge
• Fix horizontal content card overflow #14032 by @daun
• Consistent Updates Widget Padding #14030 by @JohnathonKoster
• Cache parsed items during Stache warming #14031 by @o1y
• Avoid overflowing hint in relationship selector #14033 by @daun
• Remove invisible "link" space that could be accidentally clicked #14040 by @jaygeorge
• Widen google2fa constraint to support ^9.0 #14027 by @robbiekibler
• Removes trailing slash when building relative Site URLs #14029 by @JohnathonKoster
• Block methods in Antlers by default #14042 by @JohnathonKoster
• Mention extra provided values in PublishContainer docs #14044 by @duncanmcclean
• Fix Firefox not receiving text selection in nested Bards #14021 by @jaygeorge
• Fix empty dropdowns on collection show page #14054 by @duncanmcclean
• Clear progress bar when unmounting listing #14046 by @duncanmcclean
• Throw UnableToReadFile for invalid images in ImageGenerator #14043 by @mmodler
• Fix CSRF token on pages excluded from static caching #14056 by @duncanmcclean
• Improve PDF Viewer #14064 by @jasonvarga
• Antlers user content and config #14065 by @jasonvarga
• Sanitize SVGs in Icon component #14075 by @duncanmcclean
• Fix user name and email logic #14079 by @jasonvarga
• Fix elevated sessions #14076 by @jasonvarga
• Remove some unneeded z-indexes from the CodeMirror gutter #14069 by @jaygeorge
• Handle many tabs for both the blueprint and entry view #14073 by @jaygeorge
• Fit more filename characters into asset grid #13979 by @daun
• Fix user fieldtype search #14084 by @duncanmcclean
• Fix asset browser sorting #14086 by @duncanmcclean
• Harden auth redirects #14093 by @jasonvarga
• Harden redirects #14099 by @jasonvarga
• External Glide URL validation #14101 by @jasonvarga
• Clarify that character_limit option is only a recommendation #14102 by @duncanmcclean
• Fix error caused by empty globals #14098 by @duncanmcclean

What's fixed

• Fix shouldUpdateUris regex adding additional brackets to Antlers #13995 by @martyf
• Increase inline padding of badges #14002 by @jaygeorge
• Avoid stretching images to 100% height #14003 by @jaygeorge
• Adjust SVG dimensions #14005 by @jaygeorge
• Fix clipped floating bard toolbar in replicators #14007 by @jaygeorge
• Fix Starter Kit make:user command #14000 by @joshuablum
• Fix some field filters not being applied #14015 by @daun
• Fix external url logic #14016 by @jasonvarga
• Validate password reset url #14023 #14008 by @jasonvarga
• Harden html rendering #14011 by @jasonvarga
• Fix saving nested Bard fields #14017 by @duncanmcclean
• Fix hidden field filters when applying to all fields #14020 by @daun
• Avoid calling ->startOfDay() on date range dates #13865 by @duncanmcclean
• French translations #14004 by @ebeauchamps

What's fixed

• Grid child fields should never use inline config style #13964 by @jackmcdade
• Remove deprecated errors #13971 by @martinoak
• Fix sidebar not showing after quick resize #13969 by @duncanmcclean
• Fix emojis: false not persisting on countries dictionary field #13968 by @duncanmcclean
• Fix Bard debounce race condition, Set move error, and Firefox scroll jumps #13849 by @o1y
• Fix new grid rows shared reference of previous row #13955 by @morhi
• Bard toolbar interactions #13970 by @JayGeorge
• Preload replicator meta/defaults when blueprint doesn't have a FQH #13951 by @duncanmcclean
• Prevent nested Bard Sets from being dropped outside their instance #13851 by @o1y
• Replicator Display Fixes #13670 by @JayGeorge
• Backdrop blur for modals #13984 by @JayGeorge
• Fix Spacer fieldtype collapse behaviour #13985 by @JayGeorge
• Fix folders not displaying in Bard link stack selector #13986 by @duncanmcclean
• Fix toasts from asset folder actions #13988 by @duncanmcclean
• Sanitize html in html fieldtype #13990 by @jasonvarga
• Don't use motion-vue for bard/replicator set animations #13973 by @duncanmcclean
• Prevent horizontal overflow on create form pages #13866 by @duncanmcclean
• Add always-on checkerboard for SVGs, and transparency button #13982 by @JayGeorge
• French translations #13977 by @ebeauchamps
• Bump tar from 7.5.7 to 7.5.9 #13978 by @dependabot

What's fixed

• Fix full width setting field widths #13937 by @jasonvarga
• Fix Bard grid set picker closing on reopen #13941 by @jackmcdade
• Fix table height changes on grid line hover in Bard #13943 by @jackmcdade
• Disambiguate toggles #13942 by @efc
• Tweak modelValue descriptions for DatePicker components #13860 by @duncanmcclean
• Fix dotted lines on Prefs screen #13944 by @jackmcdade
• Fix StackFooter dark mode #13947 by @jackmcdade
• Correct issues with Directive Node parsing #13938 by @JohnathonKoster
• Fix race condition in blueprint Apply & Save #13950 by @jackmcdade
• Fix asset Windows path issue #13945 by @jackmcdade
• Select display input when adding tabs/sections to blueprint #13957 by @duncanmcclean
• Fix issue with PHP tag and assignments #13939 by @JohnathonKoster
• Improve file upload handling when max_files: 1 #13962 by @duncanmcclean
• Fix asset pagination when first page only contains folders #13961 by @duncanmcclean
• Prevent replicator restyle loop #13963 by @jasonvarga
• Fix whereIn()/whereNotIn() error for booleans #13952 by @duncanmcclean

What's new

• GraphQL introspection config #13880 by @TimHaerkens
• Add support link to header #13889 by @duncanmcclean
• Dotted settings #13929 by @edalzell
• Add inputs to edit focal points #13935 by @jackmcdade

What's fixed

• Apply default pagination size in control panel listings #13893 by @daun
• Ensure sets in imported fields can be overridden #13790 by @duncanmcclean
• Sort form widget submissions by most recent first #13890 by @duncanmcclean
• Use separate hot file for Control Panel Vite #13920 by @duncanmcclean
• Fix error when closing stacks #13926 by @duncanmcclean
• Use tinted blacks for filled variants #13919 by @daun
• Fix error in relationship select field #13925 by @duncanmcclean
• Ensure cache store is empty AFTER files have been removed #13907 by @indykoning
• Improve Publish Container docs #13912 by @duncanmcclean
• Fix Command Palette recents not updating when navigating #13908 by @duncanmcclean
• Fix base css overriding addons #13885 by @jasonvarga
• Make RunsUpdateScripts trait usable in addon tests #13898 by @duncanmcclean
• Wire up allow fullscreen configs #13932 by @jasonvarga
• Prevent layout change when reordering grid rows #13862 by @duncanmcclean
• Stack config publish fields on mobile #13847 by @duncanmcclean
• Update docblock comment for system.date_format option #13838 by @duncanmcclean
• Focus input when creating/renaming filter views #13848 by @duncanmcclean
• Revert etags #13933 by @jasonvarga
• Improve Listing docs #13867 by @duncanmcclean
• Dutch translations #13897 by @Casb02
• French translations #13903 by @ebeauchamps
• Bump axios from 1.12.1 to 1.13.5 #13899 by @dependabot
• Bump markdown-it from 14.1.0 to 14.1.1 #13930 by @dependabot
• Bump qs from 6.14.1 to 6.14.2 #13931 by @dependabot