Cms Laravel Package

What's fixed

• Allow ueberdosis/tiptap-php ^2.1.2 #15620 by @jasonvarga

What's new

• Add placeholder support to code fieldtype #15519 by @daun
• Implement includes_any field condition #13135 by @miicah
• Make actions available in a collection tree view #14331 by @Devsome
• Augment video fields to a value object carrying the provider #15458 by @edalzell
• Add id and privacy hash to augmented video values #15553 by @jasonvarga

What's fixed

• Make Outpost resolve lazily #15520 by @daun
• Memoize version read #15521 by @daun
• Invalidate static cache when an asset is reuploaded #15514 by @lazerg
• Avoid marking entries dirty when the assets fieldtype reloads #15518 by @lazerg
• Delete revisions when an entry is deleted #15499 by @ecomunicare
• Fix Bard read-only background #15053 by @daun
• Use the fieldtype's config() when building the publish array #15148 by @duncanmcclean
• Pass validation replacements when storing and updating terms #15352 by @duncanmcclean
• Prevent logging GitHub bypassed rule violations as git errors #15525 by @lazerg
• Fix computed property "saving" is readonly warnings on publish forms #14871 by @duncanmcclean
• Improve performance of data reference updates #15089 by @daun
• Short-circuit a Value wrapping null before it reaches a modifier #15540 by @joshdaugherty
• Only recreate the fake Stache directory when it's gone #15538 by @joshdaugherty
• Fail contains field conditions against an object instead of throwing #15535 by @joshdaugherty
• Invert custom field conditions only once under unless and hide_when #15533 by @joshdaugherty
• Match contains_any values literally in field conditions #15531 by @joshdaugherty
• Fix booleans being considered empty by field conditions #15529 by @joshdaugherty
• Give unsaved entries their own blueprint cache key #15509 by @lwekuiper
• Augment appended form config fields in emails #15510 by @lwekuiper
• Measure ArrayableString values as strings in the length modifier #15543 by @jasonvarga
• Show actions on the root page in collection tree view #15547 by @duncanmcclean
• Harden impersonation action #15545 by @duncanmcclean
• Only count published entries in augmented entries fields #15546 by @duncanmcclean
• Apply search index query scope alongside filter when saving items #15544 by @duncanmcclean
• Give each Stache traversal its own filter #15551 by @joshdaugherty
• Forget the structure's memoized collection on collection save and delete #15549 by @joshdaugherty
• Make the video Embed method based and add trackable embed urls #15554 by @jasonvarga
• Don't translate validation rule labels #15558 by @helloDanuk
• Add info fieldtype title to translator #15555 by @helloDanuk
• German translations #15559 by @helloDanuk

What's new

• Add a way to opt out of popper z-index control #15227 by @jaygeorge
• Add a "compact mode" for the array fieldtype #15219 by @jaygeorge
• Let sites check in from CLI, scheduler, and front-end requests #15208 by @jackmcdade
• Add safe option to to_json modifier #15260 by @edalzell

What's fixed

• Fix Antlers identifiers erroring before the parser has been resolved #15221 by @lazerg
• Support taggable comboboxes when multiple is false #15064 by @duncanmcclean
• Improve tooltips #15211 by @jaygeorge
• For links in tooltips, open them in a new tab if external #15213 by @jaygeorge
• Fix nocache TypeError when rendered outside a matched route #15215 by @lazerg
• Fix localized dates leaking into later template usages #15224 by @duncanmcclean
• Add missing tooltips to global header #15234 by @heidkaemper
• Augment nav blueprint fields onto manual-URL nav items #15235 by @lazerg
• Fix reordering a paginated orderable collection corrupting the tree #15238 by @marcorieser
• Fix nav entry links across sites losing their domain #15239 by @lazerg
• Ensure REST API authentication errors return consistent JSON #15077 by @daun
• Fix Link field's Asset mode height #15242 by @jackmcdade
• Encode asset URLs #15146 by @duncanmcclean
• Improve Asset fieldtype UI in smaller spaces #15243 by @jackmcdade
• Fix is_external for anchor, mailto and tel links in navs #15082 by @duncanmcclean
• Reduce publish form and Live Preview overhead #15251 by @jasonvarga
• Dedupe concurrent Control Panel asset requests #15252 by @jasonvarga
• Small PHP CP performance improvements and UTF-8 fix #15254 by @jasonvarga
• Bard server-side performance improvements #15258 by @jasonvarga
• Memoize the Replicator flattened sets config Blink key #15259 by @jasonvarga
• Resolve NoCache session via app() in StaticCaching hydrated callback #15256 by @petemolinero
• Memoize resolved field conditions #15262 by @jasonvarga
• Only generate Bard's HTML when reading time is enabled #15263 by @jasonvarga
• Avoid layout thrashing from Reka's aria-label fallback #15264 by @jasonvarga

What's new

• Configurable live preview debounce duration #15150 by @FlxRobole
• Allow multi-column config layout in user globals #14994 by @daun
• Add option to reserve field space #14655 by @jaygeorge

What's fixed

• Fix save button hanging forever when a save hook fails #15194 by @jasonvarga
• Allow unique rule validation messages to be overridden at the app level #15197 by @duncanmcclean
• Deprecate the theme tag #15200 by @duncanmcclean
• Return the fallback when reading a file from a disk that throws #15185 by @duncanmcclean
• Fix ensuring config on fields from imported fieldsets #15187 by @duncanmcclean
• Don't save group-inherited roles as explicit roles #15188 by @duncanmcclean
• Fix uri index for new entries in orderable collections #15189 by @duncanmcclean
• Give nested sets and rows new ids when duplicating #15190 by @duncanmcclean
• Multisite improvements - entry vs global #15191 by @jaygeorge
• Multisite - turn stacked sites into a table view for larger viewports #15202 by @jaygeorge
• Fix Checkbox & Radio label click capturing and useId prop binding #15139 by @ibrokemycomputer
• Fix toasts being replayed on partial reloads #15210 by @heidkaemper
• Resolve dictionary fieldtype permissions via the CP guard #15209 by @duncanmcclean
• Improve info icons in grid headers #15218 by @jaygeorge
• Allow Inertia v3 alongside v2 #15065 by @duncanmcclean
• French translations #15193 by @ebeauchamps
• Add Italian translations #15195 by @sbellesis

What's fixed

• Hash URL in static caching lock key #15061 by @david-windsock
• Tighten get modifier #15138 by @jasonvarga
• Harden SVG sanitization #15137 by @jasonvarga
• Fix CP nav breaking when a form has no title #15144 by @jasonvarga
• Fix template scanning on Windows junctions #15145 by @jasonvarga
• Tighten Antlers variable path resolution #15154 by @jasonvarga
• Fix page tree border radius #15157 by @jaygeorge
• Some CSS rendering performance optimisations #15156 by @jaygeorge
• Update extraValues state in PublishContainer when prop is updated #15159 by @duncanmcclean
• Resolve [@statamic](https://github.com/statamic)/cms types under legacy module resolution #15160 by @duncanmcclean
• Respect collection permissions in the navigation page selector #15163 by @jasonvarga
• Fix non-localizable button group fields being editable in localizations #15151 by @lazerg
• Serve HEAD requests from the static cache #15168 by @lazerg
• Make form email view fields clearable #15167 by @lazerg
• Optimize site loading with hundreds of sites #14988 by @lazerg
• Use a unique temporary path when reading image attributes #15171 by @duncanmcclean
• Keep marked and DOMPurify out of the front-end helpers bundle #15174 by @lazerg
• Add min and max validation rules when configured as zero #15175 by @duncanmcclean
• Fix count() TypeError when entries collections config is a string #15177 by @jackmcdade
• Bump pdfjs-dist from 5.6.205 to 6.2.108 #15141 by @dependabot
• Bump the npm_and_yarn group across 1 directory with 2 updates #15153 by @dependabot

What's fixed

• Hash URL in static caching lock key #15061 by @david-windsock
• Tighten get modifier #15138 by @jasonvarga
• Harden SVG sanitization #15137 by @jasonvarga
• Tighten Antlers variable path resolution #15154 by @jasonvarga

What's fixed

• Fix hidden fieldtypes ignoring their field conditions #15132 by @lazerg
• Fix users select dropdown not searching by email #15128 by @edalzell
• Exclude private ($__) variables from cache context to resolve serialization exception #15130 by @martyf
• Fix Combobox trigger classes not reacting to prop changes #15133 by @duncanmcclean
• Reset memoized Stache state between jobs instead of disabling it process-wide #15126 by @edalzell
• Fall back to the default site when sites.yaml is empty #15135 by @lazerg
• Prevent reordering from showing a false badge on the filter button #15079 by @lazerg

What's new

• Add config to disable HandleEntrySchedule job #15103 by @duncanmcclean
• Ability to configure search index update job timeout #15093 by @edalzell
• Add config for textarea fieldtype rows #15100 by @jackmcdade
• Export Inertia's usePage composable via [@statamic](https://github.com/statamic)/cms/inertia #15123 by @duncanmcclean

What's fixed

• Prevent errors when Stache indexes contain keys without files #15052 by @joshuablum
• Handle download responses in Inertia requests #15050 by @duncanmcclean
• Prevent bogus content when dragging inside a node-selected Bard set #15049 by @duncanmcclean
• Use correct types in Tags class #15059 by @daun
• Use correct parameter name in Scope class #15060 by @daun
• Resolve delete redirects from the configured CP route #15107 by @lazerg
• Ensure fields are added to the first section of a tab instead of the last #15091 by @mynetx
• Stop re-checking index existence on every Algolia write #15090 by @edalzell
• Add autocomplete attribute to confirm password screen #15101 by @mytchallb
• Bundle Control Panel icons into a single chunk #15112 by @duncanmcclean
• Fix Outpost rate limiting #15114 by @duncanmcclean
• Don't navigate between assets when typing in a field #15111 by @duncanmcclean
• Fall back to default site on password-protected sites #15086 by @daun
• Revert throw on mixed pipe/shorthand modifier syntax #15073 by @marcorieser
• Remove stale [@param](https://github.com/param) from wildcard() docblocks #15119 by @darkdi
• Fix [@param](https://github.com/param) names that do not match the signatures #15120 by @darkdi
• Only preload meta for the selected link type #15113 by @duncanmcclean
• Prevent blueprint field rows from overflowing #15122 by @duncanmcclean
• Move testing traits into Statamic\Testing\Concerns #15115 by @duncanmcclean
• Use standard console output helpers in commands #15092 by @duncanmcclean
• Fix Eloquent user data setting roles and groups as model attributes #15125 by @lazerg
• Fix Link fieldtype preventing Cmd+S keyboard shortcut in Entry mode #14986 by @lazerg
• French translations #15094 by @ebeauchamps
• Fix typo in Dutch translation for 'Move to Folder' #15121 by @Skullsneeze
• Bump the github-actions group across 1 directory with 2 updates #15080 by @dependabot
• Bump svgo from 3.3.3 to 3.3.4 #15071 by @dependabot
• Bump the npm_and_yarn group across 1 directory with 4 updates #15110 by @dependabot

What's new

• Add support for custom link types #15004 by @duncanmcclean
• Add support for public dictionaries #15029 by @duncanmcclean

What's fixed

• Harmonize label customization config text #15034 by @duncanmcclean
• Fix Custom Invalidator background recache #15031 by @marcorieser
• Fix grid min_rows breaking CP navigation #15033 by @duncanmcclean
• Do not hide the primary save button for mobile #15041 by @jaygeorge
• Show an entry selector when filtering by an entries field #15043 by @duncanmcclean
• Fix customized listing columns being overridden by default preferences #15040 by @mynetx
• Fix origin() on null when fetching nav tree with origin_id field #15042 by @duncanmcclean
• Pass field prefix to custom conditions #15044 by @duncanmcclean
• Ensure application cache honours static_cache store #15045 by @ryanmitchell
• German translations #15036 by @helloDanuk
• Bump the github-actions group with 2 updates #15032 by @dependabot
• Bump axios from 1.16.0 to 1.18.1 #15038 by @dependabot

What's new

• Allow taxonomy create button customization #14997 by @efc
• Make Files fieldtype temporary upload storage configurable #14733 by @duncanmcclean
• Support Glide 4 and Intervention Image 4 #15019 by @joshuablum

What's fixed

• Hide permissions covered by a broader permission #14970 by @jasonvarga
• Prevent vertical focus clipping on listing pages #14978 by @jaygeorge
• Fix Control Panel not scrolling to top on navigation #14965 by @duncanmcclean
• Fix video thumbnail generation logging an error on success #14971 by @lazerg
• Preserve unregistered permissions when saving a role #14975 by @jasonvarga
• Use form handle in key #14974 by @edalzell
• Improve recursive behavior when using route data in computed values #11855 by @JohnathonKoster
• Fix global variables being lost when migrated alongside addon update scripts #14963 by @duncanmcclean
• Fix filter badge showing the term title in the wrong site #14973 by @lazerg
• Pass the configured index name to the search insert job #14949 by @ajnsn
• Hide unauthorized sections in nav #14990 by @lazerg
• Fix English CP locale showing fallback locale translations #15000 by @jasonvarga
• Fix performance issue when duplicating entries in large collections #14995 by @duncanmcclean
• Update site:clear config stubs to match current defaults #14991 by @lazerg
• Fix error on out-of-range pagination page number #14981 by @mynetx
• Fix malformed URLs with duplicate leading slashes resolving to home page #14982 by @lazerg
• Throw parser error when mixing pipe and shorthand modifier syntax #14892 by @marcorieser
• Fix link fieldtype ignoring sometimes validator #14985 by @lazerg
• Fix range date fields ignoring the configured timezone on save #15001 by @lazerg
• Fix stache:refresh flattening structured collection trees #15003 by @mynetx
• Fix save crash after deleting a Bard set containing a hidden field #15008 by @werner-freytag
• Update link to permission docs #15012 by @duncanmcclean
• Fix nested Bard data loss when reordering sets #15013 by @mynetx
• Fix toasts breaking when sessions are serialized as JSON #15015 by @mynetx
• Fix runtime assignment in a partial blanking a later partial's slot #15014 by @mynetx
• Fix Replicator field labels hidden when nested in Grid #14987 by @lazerg
• Fix blueprint assignment of entries using custom entry class #15017 by @daun
• Fix session-expiry modals being dismissible and silently re-extending sessions #15020 by @jasonvarga
• Fix validation rules being lost when saving without pressing enter #15022 by @mynetx
• Fix search:update ignoring the index argument when index names are customized #15024 by @edalzell
• Fix errors rendering blueprints & publish components when logged out #15027 by @duncanmcclean
• Fix control panel text direction on RTL sites #15023 by @jasonvarga
• Bump ws from 8.20.0 to 8.21.1 #15011 by @dependabot

What's fixed

• Convert date bindings to app timezone in raw SQL dump #14937 by @marcorieser
• Fix errors when a structure tree contains a null item #14941 by @mynetx
• Fix timezone handling in whereDate and whereTime #14940 by @marcorieser
• Fix dictionary single-select showing the raw id instead of the label #14935 by @mynetx
• Do not set the Inertia root view globally #14942 by @lazerg
• Fix asset filters not applying the first time #14943 by @duncanmcclean
• Prevent the focus box on filters from being clipped #14953 by @jaygeorge
• Fix incorrect update badges in the Control Panel updater #14890 by @aaronbushnell
• Fix global variable references not resolving through the data repository #14938 by @lazerg
• Tighten front-end form upload validation #14958 by @jasonvarga
• Escape submitted values in automagic email #14959 by @jasonvarga
• Fix broken asset reference when discarding a duplicate upload #14947 by @lazerg
• Fix relationship-based fields showing raw ids after saving #14948 by @mynetx
• Fix Bard set disappearing after save #14956 by @eminos

What's fixed

• Escape submitted values in automagic email #14959 by @jasonvarga
• Tighten front-end form upload validation #14958 by @jasonvarga

What's fixed

• Do not show a disabled cursor for start/end of pagination #14921 by @jaygeorge
• Fix Bard link entry selector not showing pre-selected entry #14917 by @duncanmcclean
• Fix required validation on empty code fields #14918 by @duncanmcclean
• Fix fieldtype picker showing wrong list after switching blueprint modes #14919 by @duncanmcclean
• Fix roles/groups select being empty for non-super users #14889 by @mynetx
• Fix Glide route double slash for path-prefixed sites #14908 by @lwekuiper
• Fix amber and default badge button hover background shade #14924 by @lazerg
• Default the create user wizard super toggle to false #14927 by @stoffelio
• Fix progress bar triggering excessive recursion #14931 by @jasonvarga
• French translations #14926 by @ebeauchamps

What's fixed

• Fix roles/groups select being empty for non-super users #14889 by @mynetx

What's new

• OAuth Improvements #14899 by @jasonvarga
• Add JSON language modes to code editor #14904 by @daun

What's fixed

• Remove v6. subdomain from documentation links #14870 by @duncanmcclean
• Define emits in PublishActions component #14872 by @duncanmcclean
• Style the list of blueprints as badges instead, improving legibility #14878 by @jaygeorge
• Prevent browser re-sort of dictionary options with integer keys #14875 by @helloiamlukas
• Improve the customize columns button layout so it no longer clashes with overflowing filters #14885 by @jaygeorge
• Fix kebab-cased props not binding on Blade components in Antlers #14891 by @marcorieser
• Tolerate a folded X-Statamic-Pagination header when warming #14882 by @mynetx
• Fix icon fieldtype error when stored icon is missing #14881 by @mynetx
• Fix user wizard authorization check #14905 by @jasonvarga
• Pass active query scope handles to relationship index scopes #14883 by @mynetx
• Fix nav authorization checks #14906 by @jasonvarga
• Fix stale Stache entry order when reordering structured collection #14896 by @joshuablum
• Tighten up dynamic method resolution #14911 by @jasonvarga
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group #14894 by @dependabot

What's fixed

• Tighten up dynamic method resolution #14911 by @jasonvarga
• Fix nav authorization checks #14906 by @jasonvarga
• Fix user wizard authorization check #14905 by @jasonvarga
• Fix failing Guzzle tests #14897 by @jasonvarga
• Fix OAuth #14887 by @jasonvarga

What's new

• Add explicit package param to the installed tag #14858 by @daun

What's fixed

• Prevent rare case of the container scrolling when focusing on the container #14854 by @jaygeorge
• Handle linked field comboboxes when the text is long #14863 by @jaygeorge
• Prevent the link field group from exceeding 50% of the container #14864 by @jaygeorge
• Apply as-config prop to top-level container only #14855 by @daun
• Hide "Live Preview" button while live preview is active #14866 by @duncanmcclean
• French translations #14856 by @ebeauchamps

What's new

• Chips #14766 by @jaygeorge
• Crop images server-side #14841 by @jasonvarga

What's fixed

• Give precognitive form requests a separate rate limit bucket #14810 by @jasonvarga
• Fix nested Bard data loss when editing a set #14808 by @joshuablum
• Always render Control Panel exceptions as JSON for XHR requests #14812 by @jasonvarga
• Make the whole radio/checkbox item clickable #14821 by @duncanmcclean
• Fix mobile nav button failing #14673 by @jaygeorge
• Render asset editor video player with dimensions #14813 by @daun
• Handle external links in empty-state component #14814 by @daun
• Fix inconsistent dark mode text colours #14830 by @jaygeorge
• Autopopulate email on password reset form #14834 by @jackmcdade
• Avoid loading the revisions store when finding a working copy #14847 by @jasonvarga
• Retain current tab hash in URL when switching localization #14846 by @duncanmcclean
• Translate untranslated CP page titles #14848 by @jasonvarga
• Don't show selection checkboxes when bulk actions are disabled #14850 by @jasonvarga
• Avoid widget table overflow #14851 by @daun
• German translations #14818 by @helloDanuk
• Bump the github-actions group with 2 updates #14817 by @dependabot
• Bump vite from 8.0.7 to 8.0.16 #14824 by @dependabot
• Bump form-data from 4.0.5 to 4.0.6 #14825 by @dependabot
• Bump markdown-it from 14.1.1 to 14.2.0 #14827 by @dependabot
• Bump dompurify from 3.4.0 to 3.4.9 #14826 by @dependabot
• Bump esbuild and storybook #14828 by @dependabot
• Bump dompurify from 3.4.9 to 3.4.11 in the npm_and_yarn group across 1 directory #14845 by @dependabot

What's new

• Add default sorting support for taxonomies #14772 by @finnjsmith
• Add default initial option configuration option for Link fieldtype #14698 by @martyf
• Add exclude param to stache commands #14788 by @edalzell

What's fixed

• Fix Modify::__toString() throwing TypeError for non-string scalar values #14674 by @VerburgtJimmy
• Speed up Stache warming for large structured collections #14781 by @o1y
• Implement permissions cache on eloquent users #14661 by @ryanmitchell
• Adjust listing skeleton to match configured features #14796 by @daun
• Fix docs for Listing component #14798 by @duncanmcclean
• Don't reserve space when a field's display label is hidden #14803 by @jasonvarga
• Bump web-auth/webauthn-lib to ^5.3.0 #14727 by @sstraakenbroek
• Prevent overlapping git commit jobs #14672 by @aerni
• French translations #14789 by @ebeauchamps

What's fixed

• Trigger the grid table mode at lower viewports because it's more useful #14792 by @jaygeorge
• Fix permission for Live Preview #14791 by @jasonvarga

What's fixed

• Drop support for Laravel 10/11 #14793 by @jasonvarga
• Fix permission for Live Preview #14791 by @jasonvarga

What's fixed

• Fix GraphiQL #14770 by @joshuablum
• Fix TypeError when elevated_session_duration is a string #14771 by @duncanmcclean
• Fix asset selection in Markdown fieldtype #14715 by @duncanmcclean
• Fix configure navs permission not working properly #14775 by @joshuablum
• Resolve Entry::descendants() N+1 query #14773 by @SteveEdson
• Fix asset editor prev/next buttons and "Edit Image" button in Bard #14728 by @joshuablum
• Apply regenerate handle pattern for replicator sections #14745 by @jaygeorge
• Fix static cache invalidation stripping trailing slashes #14713 by @duncanmcclean
• Add impersonation permission description #14776 by @jasonvarga
• Fix field filters returning all results when filtering by 0 #14747 by @joshuablum
• Render PDF viewer pages lazily #14764 by @daun
• Add support for Collection in last modifier #14778 by @JonKaric
• Fix share_errors breaking nocache regions on error responses #14780 by @joshuablum
• Fix date picker inconsistencies #14732 by @jaygeorge
• Avoid version inertia prop #14783 by @jasonvarga

What's fixed

• Avoid crop aspect ratios select being truncated #14712 by @duncanmcclean
• Stop excessive logging of ElevatedSessionAuthorizationException #14725 by @joshuablum
• Remove pt-4 as the default padding for a Group fieldtype #14708 by @martyf
• Fix Cached Pages count for multi-site setups #14726 by @joshuablum
• Hash URL in static caching lock key #14716 by @duncanmcclean
• Fix entry revision localizations to filter unauthorized sites #14714 by @duncanmcclean
• Date scrollbar fix #14730 by @jaygeorge
• Remove custom scrollbar from date fields #14731 by @jaygeorge
• Fix form box-shadows being clipped by expanding/collapsing sections #14736 by @jaygeorge
• Improve modal text formatting and dark mode background #14740 by @jaygeorge
• Handle replicator handle overflow #14746 by @jaygeorge
• More elegantly mask horizontal overflow for sets #14753 by @jaygeorge
• Improve collapsible section trigger #14758 by @jaygeorge
• Fix asset fieldtype icon #14720 by @jasonvarga
• Escape formula characters in form submission CSV exports #14760 by @jasonvarga
• Harden remote URL validation #14761 by @jasonvarga
• Scope shared static cache errors to sites #14763 by @joshuablum
• Fix share_errors breaking nocache regions on successful responses #14729 by @joshuablum
• Truncate full measure static cache files before writing #14755 by @joshuablum
• Fix current augmentation handling in users fieldtype #14724 by @joshuablum
• Fix clipboard pasting of validation rules #14754 by @joshuablum
• Fix Bard/Link Blink cache type collision #14739 by @simonerd
• French translations #14738 by @ebeauchamps
• Bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 in the github-actions group #14722 by @dependabot
• Bump qs from 6.15.0 to 6.15.2 #14721 by @dependabot
• Bump js-cookie from 3.0.5 to 3.0.7 #14705 by @dependabot
• Bump league/csv #14768 by @jasonvarga

What's fixed

• Escape formula characters in form submission CSV exports #14760 by @jasonvarga
• Harden remote URL validation #14761 by @jasonvarga
• Fix Bard/Link Blink cache type collision #14739 by @simonerd

What's new

• Date picker today shortcut #14651 by @jaygeorge
• When enabling Pro, prompts for license key #14686 by @jackmcdade
• Include is_pdf in augmented asset data #14699 by @jacksleight

What's fixed

• Make active nav anchor position more accurate #14675 by @jaygeorge
• Don't show unsaved changes warning when switching tabs #14678 by @jasonvarga
• Better collapsible sections #14679 by @jaygeorge
• Swap image dimensions when EXIF orientation indicates a 90° rotation #14685 by @jasonvarga
• Hook up "Add Row" config for List fields #14689 by @jackmcdade
• Harden DataCollection sort value resolution #14693 by @duncanmcclean
• Fix token path traversal #14700 by @duncanmcclean
• Authorize relationship fieldtype data #14718 by @jasonvarga
• Relationship UI adjustments #14719 by @jasonvarga
• Update Italian translations #14683 by @sbellesis
• French translations #14680 by @ebeauchamps
• Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group #14682 by @dependabot

What's fixed

• Harden DataCollection sort value resolution #14693 by @duncanmcclean
• Fix token path traversal #14700 by @duncanmcclean
• Authorize relationship fieldtype data #14718 by @jasonvarga
• Fix asset fieldtype icon #14720 by @jasonvarga

What's new

• Show crop dimensions in the crop editor #14654 by @jasonvarga
• Add configurable [@blueprint](https://github.com/blueprint) template base path #11632 by @o1y
• Add Blade field templates for statamic-forms publish command #14639 by @martyf

What's fixed

• Fix layout shift in Entries Fieldtype mode switcher #14646 by @jackmcdade
• Fix /index.php request poisoning Site::absoluteUrl #14647 by @jasonvarga
• Remove overscroll-behavior-x: contain on panels #14642 by @jaygeorge
• Fix nav:breadcrumbs for multi-site #13789 by @nopticon
• Fix date time overflow #14652 by @jaygeorge
• Fix scrollbars showing all the time on the calendar view #14653 by @jaygeorge
• Fix grid header overlapping nav #14640 by @wiktorm12
• Collapse equal range endpoints in NumberFormatter #14657 by @jasonvarga
• Don't show Visit URL for terms that aren't routable #14658 by @edalzell
• Cap CP perPage query parameter to configured ceiling #14668 by @jasonvarga

What's fixed

• Tone down scheduled status badge in dark mode #14641 by @jasonvarga
• Fix date fieldtype input disappearing with underscore locales #14643 by @jasonvarga
• Harden remote URL validation #14645 by @jasonvarga

What's fixed

• Harden remote URL validation #14645 by @jasonvarga

What's new

• Customizable crop ratios #14630 by @jackmcdade
• Add --preset option to assets:generate-presets #14626 by @ryanmitchell

What's fixed

• Fix CP login bouncing after Inertia auto-follow #14632 by @jasonvarga
• Fix flaky TracksLastModified file timestamp test #14634 by @jasonvarga
• Hide redundant 'This field' timezone row in date pickers #14635 by @jasonvarga
• Simplify crop aspect ratio config formats #14633 by @jasonvarga

What's new

• Add configurable timezone for date fields in the Control Panel #14554 by @duncanmcclean
• Add disabled and readOnly props to TimePicker component #14620 by @duncanmcclean
• Add Timezones components #14612 by @jasonvarga
• Allow overriding date format preset options #14600 by @jasonvarga

What's fixed

• Dirty state fixes #14592 by @jackmcdade
• Localize timezone tooltip in DatePicker #14596 by @jasonvarga
• Fix asset browser actions inside selector stack #14565 by @duncanmcclean
• Fix date-only formats shifting days due to timezone conversion #14552 by @duncanmcclean
• Avoid rendering time for dates in listings when appropriate #14599 by @jasonvarga
• Display timezone in DateRangePicker #14601 by @jasonvarga
• Fix date-only index fieldtype shifting across timezones #14602 by @jasonvarga
• Memoize preprocessed fields in Validator #14605 by @jasonvarga
• Show date fieldtype when searching for range #14606 by @jasonvarga
• Fix error when typing in a required date range field #14607 by @jasonvarga
• Fix HoverCard arrow not displaying #14611 by @jasonvarga
• Adjust translation method usage #14610 by @jasonvarga
• Fix stale asset listings across queued jobs #14617 by @ryanmitchell
• Fix replicator fields using wrong site context #14616 by @ryanmitchell
• Fix read-only/disabled states in Radio component #14621 by @duncanmcclean
• Lazy-load actions for collections, submissions & terms #14097 by @duncanmcclean
• Fix dated entries not syncing with origin revisions #14216 by @duncanmcclean
• Fix DateRangePicker crash when selecting first date in a range #13512 by @andrii-trush
• Fix moving custom section to 1st position in CP Nav #12993 by @duncanmcclean
• Fix read-only state in publish forms #14623 by @duncanmcclean
• Fix perPage limit in relationship stack listings #14629 by @wiktorm12
• Bump postcss from 8.5.9 to 8.5.13 #14595 by @dependabot
• Bump axios from 1.15.0 to 1.16.0 #14613 by @dependabot

What's new

• Add support for strict null coalescence (???) in Antlers parsing #14545 by @marcorieser
• Add hooks to asset listings #14566 by @edalzell
• Show license key status in about and support:details commands #14574 by @jasonvarga
• Support icon sets in names #14579 by @jasonvarga

What's fixed

• Fix Comb search index delete() rewriting JSON when ref absent #14550 by @SUXUMI
• Include missing time chars in DateFormat::containsTime #14555 by @jasonvarga
• Update setup-cp-vite to install Vite 8 #14559 by @jasonvarga
• Fix cache invalidation when using custom fields in URI route #14564 by @duncanmcclean
• Fix validation bypass via spoofed Precognition-Validate-Only header #14557 by @duncanmcclean
• Restore selected site when resuming session #14562 by @duncanmcclean
• Fix relationship selector footer not sticking to bottom of stack #14569 by @duncanmcclean
• Fix asset selector drag-to-upload covering footer but not handling drops #14551 by @duncanmcclean
• Field margin balance #14567 by @jaygeorge
• Harden OrderBys #14572 by @jasonvarga
• Fix Asset field set to "Read-only" clipping filename #14575 by @jackmcdade
• Fix login redirects #14560 by @jasonvarga
• Design a better empty, read-only state for asset fields #14578 by @jackmcdade
• Avoid per-icon requests in the Icon storybook #14580 by @jasonvarga
• Fix updater crash when addon has no license #14573 by @duncanmcclean
• Lazy load Inertia page components #14582 by @jasonvarga
• Fix LivePreview listener leak and simplify Grid row updates #14583 by @jasonvarga
• Fix SavePipeline initial debounce delay #14586 by @jasonvarga
• Debounce LinkFieldtype URL writes #14584 by @jasonvarga
• Extract fieldtype update debounce to shared constant #14587 by @jasonvarga
• Wrap FieldAction instances with markRaw #14589 by @jasonvarga
• Color swatches get borders for contrast #14591 by @jackmcdade
• Deduplicate RelationshipInput in-flight item-data requests #14590 by @jasonvarga
• German translations #14561 by @helloDanuk
• French translations #14585 by @ebeauchamps

What's new

• Frontend Elevated Sessions #14424 by @duncanmcclean
• Frontend Two-Factor Authentication #14525 by @duncanmcclean
• Add config for disabling Elevated Sessions #14464 by @1stevengrant

What's fixed

• Better Collaboration Avatars #14511 by @jackmcdade
• Fix addon settings blueprint cache collision with field settings blueprint #14509 by @duncanmcclean
• Show dashed border in assets fieldtype when field is read-only #14507 by @duncanmcclean
• Fix duplicate slugs allowed with depth-conditional routes #14508 by @duncanmcclean
• Combobox 2.0 #13843 by @duncanmcclean
• Persist active tab in URL hash on globals publish form #14515 by @duncanmcclean
• Always display time zone in DatePicker #14518 by @jasonvarga
• Fix blank page when visiting CP routes with invalid items #14517 by @jasonvarga
• Improve rate limiting #14475 by @ryanmitchell
• Hide default Statamic logo on frontend auth pages #14522 by @jasonvarga
• Update currencies dictionary #14520 by @tdrayson
• Allow extending asset preset generation command #14521 by @daun
• Fix NavBuilder crash when nav item has an unresolved children Closure #14523 by @v-Woody
• Fix Eloquent user merge setting roles and groups as model attributes #14526 by @duncanmcclean
• Fix /!/nocache and /!/csrf CSRF exemption on Laravel 13 #14533 by @ynamite
• Improve Link fieldtype in listings #14535 by @duncanmcclean
• Fix TypeError when asset last_modified meta is null #14530 by @v-Woody
• Fix Live Preview iframe becoming unscrollable after resizing in Chromium #14542 by @duncanmcclean
• Fix CP auth error when using multiple user providers #14543 by @andjsch
• Fix blank term edit screen and JS error for restricted users #14537 by @joshuablum
• Fix durationForHumans deprecation warning and rounding #14541 by @duncanmcclean
• Fix elevated session redirect for POST endpoints #14544 by @jasonvarga
• Always show success when using forgot password form #14539 by @jasonvarga
• Publish container tweaks #14548 by @jasonvarga
• Fix updateChildPageUris empty check never short-circuiting #14547 by @duncanmcclean
• French translations #14514 by @ebeauchamps

What's fixed

• Always show success when using forgot password form #14539 by @jasonvarga

What's new

• Fieldset sections #14297 by @jackmcdade
• Collaboration support #13974 by @joshuablum

What's fixed

• Use he-tree i18n prop for tree aria instructions #14499 by @jasonvarga
• Rename Add Block back to Add Set in replicators #14503 by @joshuablum
• Resolve Cascade content closure before checking content #14502 by @marcorieser
• Fix nocache database driver failing on MySQL with invalid UTF-8 #14505 by @jasonvarga
• Fix bard undos #14506 by @jackmcdade
• Fix collection listing search case insensitivity #14486 by @joshuablum
• Bump follow-redirects from 1.15.11 to 1.16.0 #14498 by @dependabot
• Bump dompurify from 3.3.3 to 3.4.0 #14500 by @dependabot

What's new

• Frontend Passkeys #14453 by @duncanmcclean
• Allow control over who can be impersonated in UserPolicy #14469 by @ryanmitchell

What's fixed

• Fix Bard arrow keys/undo #14467 by @jackmcdade
• Fix visible he-tree accessibility text in tree view #14465 by @duncanmcclean
• Append to Bard Entry links #11468 by @edalzell
• Disable broadcast provider when broadcasting driver is null #14471 by @jasonvarga
• Make the collapsible section icon smaller to fit in with the rest of UI #14478 by @jaygeorge
• Add .npmrc file #14477 by @duncanmcclean
• Fix SVG sanitization tests #14483 by @duncanmcclean
• Use cursor: pointer when selecting from asset grid #14487 by @joshuablum
• Remove negative assertions from TestCase #14458 by @duncanmcclean
• Harden OrderBys #14474 by @duncanmcclean
• Harden query value resolution #14476 by @duncanmcclean
• French translations #14479 by @ebeauchamps
• Bump axios from 1.14.0 to 1.15.0 #14473 by @dependabot

What's fixed

• Harden query value resolution #14476 by @duncanmcclean
• Harden OrderBys #14474 by @duncanmcclean
• Remove negative assertions from TestCase #14458 by @duncanmcclean

What's new

• Add support for filtering conditions in Assets Tag #13936 by @jackmcdade

What's fixed

• Add padding around 2FA QR code for dark mode scanning #14460 by @duncanmcclean
• Fix form submissions with non-UTF-8 data crashing the CP listing #14461 by @duncanmcclean
• Remove deprecated function calls #14457 by @justindantzer
• Upgrade to Vite 8 #14459 by @jasonvarga
• Nested fields should respect read-only state #14351 by @duncanmcclean

What's new

• Add support for public properties to PathDataManager #11697 by @marcorieser
• Add ability to filter submission exports #14432 by @jasonvarga
• Add elevated session guards to AssignGroups and AssignRoles actions #14450 by @jasonvarga

What's fixed

• Fix Stache index re-entrancy causing null URIs on cold stache #14181 by @o1y
• Fix form submission types #14430 by @daun
• Support decimal values in Range fieldtype #13096 by @hastinbe
• Add link tag to allowed Antlers tags #14438 by @edalzell
• Add [@default](https://github.com/default) support to Antlers content allowlists #14440 by @jasonvarga
• Centralize SVG sanitization and sanitize CSS in style tags #14442 by @jasonvarga
• Fix serializable_classes issues #14443 by @jasonvarga
• Fix addon settings always showing as migratable #14444 by @duncanmcclean
• Fix creating passkeys with JSON session serialization #14448 by @duncanmcclean
• Stop auto-logging in users after password reset #14454 by @jasonvarga
• Fix sync/desync on localizable nested fields #14335 by @duncanmcclean
• French translations #14431 by @ebeauchamps
• Bump defu from 6.1.4 to 6.1.6 #14434 by @dependabot
• Bump vite from 7.1.12 to 7.3.2 #14441 by @dependabot

What's fixed

• Add link tag to allowed Antlers tags #14438 by @edalzell
• Add [@default](https://github.com/default) support to Antlers content allowlists #14440 by @jasonvarga
• Fix Stache index re-entrancy causing null URIs on cold stache #14181 by @o1y
• Fix form submission types #14430 by @daun

What's new

• Default values can be computed #14279 by @edalzell
• Ability to add to the filename replacements list #14316 by @edalzell

What's fixed

• Harden OrderBys #14421 by @jasonvarga
• Serialize nocache regions before storing in cache #14422 by @jasonvarga
• Fix invalid HTML lang attribute #14427 by @duncanmcclean
• Add serializable classes to allowlist #14416 by @duncanmcclean
• Filter invalid UTF-8 locales from dictionary #14426 by @duncanmcclean
• Fallback to option key in listings when label is missing #14429 by @duncanmcclean
• Ensure moved/removed entries are statically invalidated #14386 by @ryanmitchell
• Catch axios errors in blueprint builder #14428 by @duncanmcclean
• Improve error handling when requiring starter kits #14411 by @duncanmcclean
• Ensure empty addon settings get default blueprint values #14384 by @ryanmitchell
• Bump lodash-es from 4.17.23 to 4.18.1 #14425 by @dependabot

What's fixed

• Harden OrderBys #14421 by @jasonvarga

What's new

• Add a Text component #14247 by @jaygeorge
• Emit asset.saved event from asset editor #14392 by @duncanmcclean

What's fixed

• Fix collection whereStatus logic #14380 by @jackmcdade
• Implement whereStatus() on search query builder #14387 by @ryanmitchell
• Blueprint button order changes #14365 by @jaygeorge
• Fix address bar overlapping bottom of content (typically on iOS) #14399 by @jaygeorge
• Fix nested Bard toolbar focus issues #14396 by @jaygeorge
• Fix nav section border radius #14409 by @jaygeorge
• Fix conditional field borders #14407 by @thomasvantuycom
• Fix collection listing dates from wrapping #14415 by @jaygeorge
• Fix Parameters make method #14418 by @jasonvarga
• Prevent npm packages from executing malicious code via postinstall #14417 by @duncanmcclean
• French translations #14393 by @ebeauchamps
• Bump brace-expansion from 2.0.2 to 2.0.3 #14383 by @dependabot

What's new

• GraphQL API Authentication #14292 by @duncanmcclean
• Ability to disable two-factor authentication #14263 by @duncanmcclean
• Ability to select the date formatting locale #14372 by @jasonvarga
• Number formatter #14373 by @jasonvarga

What's fixed

• Omit application name and URL from support:details #14359 by @jasonvarga
• Fix CP Nav active state when trailing slashes are enforced #14363 by @duncanmcclean
• Only change date for localizations with an explicit date set #14362 by @duncanmcclean
• Bring back responsive button groups #13336 by @daun
• Merge external class attrs through twMerge in UI components #14379 by @jasonvarga
• Reduce amount of data provided in Assets fieldtype meta #14366 by @duncanmcclean
• Filters can only be removed by clicking cross #14220 by @jaygeorge
• Bump reka-ui #14368 by @jasonvarga
• Bump picomatch from 2.3.1 to 2.3.2 #14360 by @dependabot

What's fixed

• Fix header z-index when creating a new nav #14337 by @jaygeorge
• Remove fixed height from SVGs in UI labels to prevent flickering #14338 by @jaygeorge
• Correct the Bard full-screen width #14348 by @jaygeorge
• Fix duplicate translation for "Edit Fieldset" #14349 by @duncanmcclean
• Delete unused moment translations #14354 by @duncanmcclean
• Revert "Fix translator locale" #14358 by @jasonvarga
• French translations #14339 by @ebeauchamps
• German translations #14352 by @helloDanuk

What's fixed

• Fix term revisions error #14347 by @duncanmcclean

What's fixed

• DatePicker dates can't be strings #14295 by @edalzell
• Fix updated widget badge alignment #14303 by @jackmcdade
• Fix PHP sanitization edge cases #14300 by @duncanmcclean
• Fix Replicator Drag & Drop when multiple fields share the same handle #14310 by @duncanmcclean
• Fix live preview token scope #14304 by @jasonvarga
• Handle more cases in external url detection #14315 by @jasonvarga
• Allow external redirects from Form::getSubmissionRedirect #14318 by @jasonvarga
• Fix closure validation rules with Files fieldtype #14319 by @duncanmcclean
• Relationship fieldtype authorization tweaks #14307 by @duncanmcclean
• Add CSP header to svg route #14325 by @jasonvarga
• Add authorization to revision routes #14301 by @duncanmcclean
• Restrict markdown preview endpoint #14326 by @jasonvarga
• Sanitize password reset form redirect value #14327 by @jasonvarga
• Fix config through Antlers views #14328 by @jasonvarga
• Long dropdowns should be scrollable #14333 by @duncanmcclean
• Fix set picker position #14332 by @duncanmcclean
• Fix various timezone issues #14322 by @duncanmcclean
• Fix translator locale #14323 by @jasonvarga
• Fix 2FA setup modal not re-opening #14309 by @duncanmcclean
• Fix logo z-index in Outside.vue #14299 by @SteveEdson
• Fix translator error with Symfony Console 8 #14330 by @duncanmcclean
• Don't autofocus on non-root fields with "title" or "alt" name #14329 by @hivokas

What's fixed

• Fix config through Antlers views #14328 by @jasonvarga
• Sanitize password reset form redirect value #14327 by @jasonvarga
• Restrict markdown preview endpoint #14326 by @jasonvarga
• Add authorization to revision routes #14301 by @duncanmcclean
• Add CSP header to svg route #14325 by @jasonvarga
• Relationship fieldtype authorization tweaks #14307 by @duncanmcclean
• Allow external redirects from Form::getSubmissionRedirect #14318 by @jasonvarga
• Handle more cases in external url detection #14312 by @jasonvarga
• Fix live preview token scope #14304 by @jasonvarga
• Fix PHP sanitization edge cases #14300 by @duncanmcclean

What's fixed

• Hide "Duplicate Set" when max sets limit has been reached #14275 by @duncanmcclean
• Fix missing top border in read-only Assets fields #14277 by @duncanmcclean
• Hide set bodies when there are no fields #14282 by @jackmcdade
• Fieldset editing improvements #14283 by @jackmcdade
• Harden URL::isExternalToApplication() #14287 by @duncanmcclean
• Prevent opening set picker when max_sets limit has been reached #14290 by @duncanmcclean
• Harden password reset #14294 by @jasonvarga

What's fixed

• Harden password reset #14296 by @jasonvarga
• Add additional URL::isExternalToApplication() tests #14288 by @duncanmcclean

What's new

• Add Asset::moveUnique() method #14236 by @lwekuiper

What's fixed

• Sanitize SVGs on reupload #14258 by @duncanmcclean
• Fix error saving preferences when theme translations exist #14266 by @duncanmcclean
• Prevent logging git dependabot errors #14257 by @aerni
• Fix incorrect variable in return doc #14265 by @indykoning
• Fix error on CreateForm component in Storybook #14264 by @duncanmcclean
• Allow using SVGs from vendor/node_modules directories #14261 by @duncanmcclean
• Fix date formats #14256 by @jasonvarga
• Ensure images are refreshed properly after cropping #14260 by @duncanmcclean
• Handle validation rules on Files fieldtype #14262 by @duncanmcclean
• Make stacks smoother #14210 by @jaygeorge
• Fix TimePicker resetting to AM when typing #14259 by @duncanmcclean
• Rename to security #14276 by @jasonvarga
• Prevent path traversal in file dictionary #14272 by @duncanmcclean
• Prevent term creation via fieldtype without permission #14274 by @duncanmcclean

What's fixed

• Prevent term creation via fieldtype without permission #14274 by @duncanmcclean
• Prevent path traversal in file dictionary #14272 by @duncanmcclean
• Sanitize SVGs on asset reupload #14270 by @jasonvarga

What's fixed

• Alphabetically order listing/publish container context lists & document isDirty() #14245 by @duncanmcclean
• Relationship endpoint authorization #14254 by @jasonvarga
• Replicator fieldtype endpoint hardening #14255 by @jasonvarga
• Show "Drop to Upload" on top when dragging file onto Asset field #14250 by @duncanmcclean
• Avoid globe cursor when dragging & dropping Bard sets #14248 by @duncanmcclean

What's fixed

• Relationship endpoint authorization #14254 by @jasonvarga
• Fix ensure field has config #14195 by @marcorieser
• Removed a comment from the js code output of the StaticCacher #14233 by @micahhenshaw
• Acquire stache-warming lock in Duplicates::find #14176 by @mmodler

What's fixed

• Fix color mode preference values #14242 by @jasonvarga
• Add outside class to outside layout #14240 by @duncanmcclean
• Only remove Bard set when backspace key is hit #14189 by @duncanmcclean
• Removed a comment from the js code output of the StaticCacher #14233 by @micahhenshaw
• French translations #14243 by @ebeauchamps

What's fixed

• Add "Content Search" string to translator's $additionalStrings array #14226 by @duncanmcclean
• Make image manipulation presets more readable #14230 by @jaygeorge
• Fix undefined variable in Bard fieldtype #14238 by @duncanmcclean
• French translations #14232 by @ebeauchamps
• Bump tar from 7.5.10 to 7.5.11 #14231 by @dependabot

What's new

• Image transparency checkerboard #13975 by @jaygeorge
• Support reference updates for custom fieldtypes and working copies #13693 by @morhi
• Asset listing filters #14025 by @daun
• Ability to save/reset changes to filter presets #13956 by @duncanmcclean

What's fixed

• Improve tables in Bard fields, particularly dark mode #14158 by @jaygeorge
• Add MiddleEllipsis component to Storybook #14215 by @duncanmcclean
• Update ip_address protector to use request()->ips() #14063 by @gavynd6
• Fix $isNew detection after Asset::move() #14140 by @lwekuiper
• Avoid escaping dictionary fieldtype labels #13845 by @duncanmcclean
• Force full width on asset grid to account for smaller SVGs #14164 by @jaygeorge
• Avoid opening Command Palette when Bard field is focused & text is selected #14019 by @duncanmcclean
• Asset cropper fixes #14173 by @jaygeorge
• External URLs in the nav should render as anchor tags #14174 by @duncanmcclean
• Cancel inflight requests #14178 by @macaws
• Performance: Reduce duplicate cache reads on nav #14179 by @macaws
• Performance: memoize outpost #14180 by @macaws
• Memoize marketplace cache #14182 by @macaws
• Fix outline focus briefly showing as the stack comes in #14187 by @jaygeorge
• Use amber for update badges #14175 by @duncanmcclean
• Fix copy to clipboard input in light mode #14186 by @duncanmcclean
• Handle stop words case insensitive #14201 by @marcorieser
• Critical updates visibility #14202 by @jasonvarga
• Tiny border-radius fix from the checkerboard PR by @jaygeorge
• Collapse the assets fieldtype to its mobile layout at a higher breakpoint #14212 by @jaygeorge
• Fix expanding Bard sets in localized entries #14214 by @duncanmcclean
• Handle CarbonInterval instances in Localize middleware #14209 by @duncanmcclean
• Handle cancelled requests when generating slugs #14211 by @duncanmcclean
• Allow dev stability for local starter kit installations #14208 by @marcorieser
• Refresh CodeMirror instance when switching tabs #14199 by @duncanmcclean
• Update bulk action selections when individual row is deleted #14196 by @duncanmcclean
• Add skeleton ui to lazy loaded actions #14217 by @jaygeorge
• Various drag & drop fixes #14219 by @duncanmcclean
• Avoid sanitizing target attribute in markdown() helper #14221 by @duncanmcclean
• Fix create entry translations #14223 by @duncanmcclean
• Acquire stache-warming lock in Duplicates::find #14176 by @mmodler
• French translations #14163 by @dadaxr
• German translations #14165 by @helloDanuk
• French translations #14166 by @ebeauchamps
• Bump minimatch and dompurify #14161 by @jasonvarga
• Bump svgo from 3.3.2 to 3.3.3 #14153 by @dependabot
• Bump tar from 7.5.9 to 7.5.10 #14156 by @dependabot

What's new

• Add configuring callback functionality to statamic.js #13811 by @maurice-ellis
• Add min, max, sum and avg methods to Stache query builder #13894 by @duncanmcclean
• Laravel 13 #13870 by @duncanmcclean
• Image cropping #13875 by @jackmcdade
• Add option to show widget table headers #14128 by @jackmcdade
• Clean Asset Meta Command #13934 by @jackmcdade

What's fixed

• Ignore toolbar shortcuts while inside menus #14111 by @daun
• Revert floating toolbar buttons inadvertently affected by 14036 #14118 by @jaygeorge
• When sets are expanded, add isolation to force a new stacking context #14121 by @jaygeorge
• Remove z-index from replicator #14108 by @jaygeorge
• Don't force an SVG aspect ratio in the asset preview thumbnails #14107 by @jaygeorge
• Fix replicator preview text merging during reorder #14072 by @dannyuk1982
• Show asset editor toolbar in more situations #14127 by @jasonvarga
• Fix query scopes in asset fieldtype #14091 by @duncanmcclean
• Minor adjustment to label margin #14139 by @jaygeorge
• Fix pjpg format being used as file extension in AssetUploader #14134 by @lwekuiper
• Updates section tweaks #14129 by @duncanmcclean
• Fix addon settings permissions #14130 by @duncanmcclean
• Apply existing container width breakpoints #13910 by @daun
• Prevent dropping nav item with children into root position #13861 by @duncanmcclean
• Antlers config backwards compatibility #14146 by @jasonvarga
• Config parsing exclusion #14152 by @jasonvarga
• Fix Antlers parser state restoration #14151 by @jasonvarga
• Remove pdf css #14141 by @jasonvarga
• More Antlers defaults #14125 by @jasonvarga
• Dutch translations #14149 by @JasperWelsing
• Dutch translations #14143 by @lwekuiper
• French translations #14113 by @dadaxr
• Bump storybook from 10.2.0 to 10.2.10 #14112 by @dependabot
• Bump rollup from 4.44.1 to 4.59.0 #14106 by @dependabot

What's fixed

• Antlers config backwards compatibility #14146 by @jasonvarga
• Config parsing exclusion #14152 by @jasonvarga
• Fix Antlers parser state restoration #14151 by @jasonvarga
• Support Laravel Debugbar 4 #14142 by @jasonvarga
• Remove pdf css #14141 by @jasonvarga
• More Antlers defaults #14125 by @jasonvarga

What's fixed

• Revert caching of parsed items during Stache warming #14104 by @jasonvarga

This release contains a potentially breaking change for the sake of security.

What's new

• Floating toolbar keyboard shortcuts #14036 by @jaygeorge
• Add disabled prop to Button component #14047 by @duncanmcclean
• Provide extra values through container and publish form #14041 by @jasonvarga
• Make more colors themeable #14013 by @jaygeorge

What's fixed

• Antlers hardening (Breaking: See PR for upgrade notes) #14092 by @jasonvarga
• Fix missing site name on Statamic Solo sites #14038 by @duncanmcclean
• Make red text values a consistent 600 #14037 by @jaygeorge
• Fix horizontal content card overflow #14032 by @daun
• Consistent Updates Widget Padding #14030 by @JohnathonKoster
• Cache parsed items during Stache warming #14031 by @o1y
• Avoid overflowing hint in relationship selector #14033 by @daun
• Remove invisible "link" space that could be accidentally clicked #14040 by @jaygeorge
• Widen google2fa constraint to support ^9.0 #14027 by @robbiekibler
• Removes trailing slash when building relative Site URLs #14029 by @JohnathonKoster
• Block methods in Antlers by default #14042 by @JohnathonKoster
• Mention extra provided values in PublishContainer docs #14044 by @duncanmcclean
• Fix Firefox not receiving text selection in nested Bards #14021 by @jaygeorge
• Fix empty dropdowns on collection show page #14054 by @duncanmcclean
• Clear progress bar when unmounting listing #14046 by @duncanmcclean
• Throw UnableToReadFile for invalid images in ImageGenerator #14043 by @mmodler
• Fix CSRF token on pages excluded from static caching #14056 by @duncanmcclean
• Improve PDF Viewer #14064 by @jasonvarga
• Antlers user content and config #14065 by @jasonvarga
• Sanitize SVGs in Icon component #14075 by @duncanmcclean
• Fix user name and email logic #14079 by @jasonvarga
• Fix elevated sessions #14076 by @jasonvarga
• Remove some unneeded z-indexes from the CodeMirror gutter #14069 by @jaygeorge
• Handle many tabs for both the blueprint and entry view #14073 by @jaygeorge
• Fit more filename characters into asset grid #13979 by @daun
• Fix user fieldtype search #14084 by @duncanmcclean
• Fix asset browser sorting #14086 by @duncanmcclean
• Harden auth redirects #14093 by @jasonvarga
• Harden redirects #14099 by @jasonvarga
• External Glide URL validation #14101 by @jasonvarga
• Clarify that character_limit option is only a recommendation #14102 by @duncanmcclean
• Fix error caused by empty globals #14098 by @duncanmcclean

This release contains a potentially breaking change for the sake of security.

What's fixed

• Antlers hardening (Breaking: See PR for upgrade notes) #14092 by @jasonvarga
• External Glide URL validation #14101 by @jasonvarga
• Harden redirects #14099 by @jasonvarga
• Harden auth redirects #14089 by @duncanmcclean
• Fix user fieldtype search #14084 by @duncanmcclean
• Fix user name and email logic #14079 by @jasonvarga
• Sanitize SVGs #14077 by @jasonvarga
• Fix CSRF token on pages excluded from static caching #14056 by @duncanmcclean
• Improve PDF Viewer #14045 by @duncanmcclean
• Throw UnableToReadFile for invalid images in ImageGenerator #14043 by @mmodler
• Antlers user content and config #14058 by @jasonvarga
• Block methods in Antlers by default #14059 by @jasonvarga

What's fixed

• Fix shouldUpdateUris regex adding additional brackets to Antlers #13995 by @martyf
• Increase inline padding of badges #14002 by @jaygeorge
• Avoid stretching images to 100% height #14003 by @jaygeorge
• Adjust SVG dimensions #14005 by @jaygeorge
• Fix clipped floating bard toolbar in replicators #14007 by @jaygeorge
• Fix Starter Kit make:user command #14000 by @joshuablum
• Fix some field filters not being applied #14015 by @daun
• Fix external url logic #14016 by @jasonvarga
• Validate password reset url #14023 #14008 by @jasonvarga
• Harden html rendering #14011 by @jasonvarga
• Fix saving nested Bard fields #14017 by @duncanmcclean
• Fix hidden field filters when applying to all fields #14020 by @daun
• Avoid calling ->startOfDay() on date range dates #13865 by @duncanmcclean
• French translations #14004 by @ebeauchamps

What's fixed

• Fixes shouldUpdateUris regex adding additional brackets to Antlers #13995 by @martyf
• Validate password reset url #14023 #14008 by @jasonvarga
• Harden html rendering #14006 by @jasonvarga

What's fixed

• Grid child fields should never use inline config style #13964 by @jackmcdade
• Remove deprecated errors #13971 by @martinoak
• Fix sidebar not showing after quick resize #13969 by @duncanmcclean
• Fix emojis: false not persisting on countries dictionary field #13968 by @duncanmcclean
• Fix Bard debounce race condition, Set move error, and Firefox scroll jumps #13849 by @o1y
• Fix new grid rows shared reference of previous row #13955 by @morhi
• Bard toolbar interactions #13970 by @JayGeorge
• Preload replicator meta/defaults when blueprint doesn't have a FQH #13951 by @duncanmcclean
• Prevent nested Bard Sets from being dropped outside their instance #13851 by @o1y
• Replicator Display Fixes #13670 by @JayGeorge
• Backdrop blur for modals #13984 by @JayGeorge
• Fix Spacer fieldtype collapse behaviour #13985 by @JayGeorge
• Fix folders not displaying in Bard link stack selector #13986 by @duncanmcclean
• Fix toasts from asset folder actions #13988 by @duncanmcclean
• Sanitize html in html fieldtype #13990 by @jasonvarga
• Don't use motion-vue for bard/replicator set animations #13973 by @duncanmcclean
• Prevent horizontal overflow on create form pages #13866 by @duncanmcclean
• Add always-on checkerboard for SVGs, and transparency button #13982 by @JayGeorge
• French translations #13977 by @ebeauchamps
• Bump tar from 7.5.7 to 7.5.9 #13978 by @dependabot

What's fixed

• Correct test namespaces to avoid PSR-4 warnings #13989 by @duncanmcclean
• Sanitize html in html fieldtype #13992 by @jasonvarga

What's fixed

• Avoid replacing nocache regions in initial full-measure response #13953 by @duncanmcclean
• Fix Icon fieldtype augment error when value is empty #13966 by @jhhazelaar
• Fix whereIn()/whereNotIn() error for booleans #13952 by @duncanmcclean

What's fixed

• Fix full width setting field widths #13937 by @jasonvarga
• Fix Bard grid set picker closing on reopen #13941 by @jackmcdade
• Fix table height changes on grid line hover in Bard #13943 by @jackmcdade
• Disambiguate toggles #13942 by @efc
• Tweak modelValue descriptions for DatePicker components #13860 by @duncanmcclean
• Fix dotted lines on Prefs screen #13944 by @jackmcdade
• Fix StackFooter dark mode #13947 by @jackmcdade
• Correct issues with Directive Node parsing #13938 by @JohnathonKoster
• Fix race condition in blueprint Apply & Save #13950 by @jackmcdade
• Fix asset Windows path issue #13945 by @jackmcdade
• Select display input when adding tabs/sections to blueprint #13957 by @duncanmcclean
• Fix issue with PHP tag and assignments #13939 by @JohnathonKoster
• Improve file upload handling when max_files: 1 #13962 by @duncanmcclean
• Fix asset pagination when first page only contains folders #13961 by @duncanmcclean
• Prevent replicator restyle loop #13963 by @jasonvarga
• Fix whereIn()/whereNotIn() error for booleans #13952 by @duncanmcclean

What's new

• GraphQL introspection config #13880 by @TimHaerkens
• Add support link to header #13889 by @duncanmcclean
• Dotted settings #13929 by @edalzell
• Add inputs to edit focal points #13935 by @jackmcdade

What's fixed

• Apply default pagination size in control panel listings #13893 by @daun
• Ensure sets in imported fields can be overridden #13790 by @duncanmcclean
• Sort form widget submissions by most recent first #13890 by @duncanmcclean
• Use separate hot file for Control Panel Vite #13920 by @duncanmcclean
• Fix error when closing stacks #13926 by @duncanmcclean
• Use tinted blacks for filled variants #13919 by @daun
• Fix error in relationship select field #13925 by @duncanmcclean
• Ensure cache store is empty AFTER files have been removed #13907 by @indykoning
• Improve Publish Container docs #13912 by @duncanmcclean
• Fix Command Palette recents not updating when navigating #13908 by @duncanmcclean
• Fix base css overriding addons #13885 by @jasonvarga
• Make RunsUpdateScripts trait usable in addon tests #13898 by @duncanmcclean
• Wire up allow fullscreen configs #13932 by @jasonvarga
• Prevent layout change when reordering grid rows #13862 by @duncanmcclean
• Stack config publish fields on mobile #13847 by @duncanmcclean
• Update docblock comment for system.date_format option #13838 by @duncanmcclean
• Focus input when creating/renaming filter views #13848 by @duncanmcclean
• Revert etags #13933 by @jasonvarga
• Improve Listing docs #13867 by @duncanmcclean
• Dutch translations #13897 by @Casb02
• French translations #13903 by @ebeauchamps
• Bump axios from 1.12.1 to 1.13.5 #13899 by @dependabot
• Bump markdown-it from 14.1.0 to 14.1.1 #13930 by @dependabot
• Bump qs from 6.14.1 to 6.14.2 #13931 by @dependabot

What's fixed

• Revert etags #13933 by @jasonvarga

What's fixed

• Fix typo in static_caching.php #13857 by @duncanmcclean
• Update instructions for Heading component's level prop #13868 by @duncanmcclean
• Add docblocks for some store, stache and permission methods #13877 by @NeoIsRecursive
• Arguments should be ordered alphabetically in Storybook #13871 by @duncanmcclean
• Handle trailing slashes in CP Nav #13846 by @duncanmcclean
• Only trap stack's focus when its the top portal #13858 by @duncanmcclean
• Fix debugbar helper binding #13873 by @martyf
• Correct name of PayPal icon #13891 by @duncanmcclean
• Convert PHPUnit metadata to attributes #13895 by @duncanmcclean
• Fix after_save preference not persisting when default preferences override 'listing' #13879 by @el-schneider
• Asset auth fix #13883 by @duncanmcclean
• Account for custom fields when checking if entry URIs should be updated #13859 by @duncanmcclean
• German translations #13864 by @helloDanuk
• French translations #13840 by @ebeauchamps
• Dutch translations #13841 by @JasperWelsing

What's fixed

• Fix after_save preference not persisting when default preferences override 'listing' #13879 by @el-schneider
• Asset auth fix #13883 by @duncanmcclean
• Account for custom fields when checking if entry URIs should be updated #13859 by @duncanmcclean

What's fixed

• Starter kit install with dev stability #13824 by @jasonvarga
• Replace uniqid with nanoid #13833 by @jasonvarga
• Switch from browser tests to storybook tests #13313 by @duncanmcclean
• Fix entry date shifting on save #13837 by @jasonvarga
• Fix entry publish permission #13827 by @PatrickJunod
• Russian translations #13834 by @dragomano

What's fixed

• Fix error when publishing webauthn migration #13814 by @duncanmcclean
• Localize time picker #13820 by @jasonvarga
• Store passkey last login in metadata #13808 by @jasonvarga
• Escape html in command palette #13825 by @jasonvarga

What's fixed

• Add auth to asset routes #13810 by @jasonvarga

What's fixed

• Add auth to asset routes #13810 by @jasonvarga

• Fix markdown fieldtype error when theres no container #13809 by @jasonvarga

What's new

• Show collection tree in navigation page selector #13643 by @duncanmcclean
• Max width control for the CP (Expand/Constrain Layout) #13647 by @JayGeorge
• Permissions Check/Uncheck All buttons #13762 by @jackmcdade
• Ctrl+k to open bard link stack #13759 by @jasonvarga
• Time field enhancements #13799 by @jasonvarga
• Copy to clipboard improvements and fixes throughout the CP #13791 by @joshuablum
• Support Laravel Debugbar 4 #13781 by @duncanmcclean

What's fixed

• Fix asset selector padding #13737 by @duncanmcclean
• Fix adding sets stored in the legacy format #13743 by @duncanmcclean
• Nested bard fixed toolbars - remove sticky stacking approach #13750 by @JayGeorge
• Fix the z-index of the sticky markdown toolbar, plus position on mobile #13751 by @JayGeorge
• Improve focus on page load #13357 by @JayGeorge
• Only show site in search result badge when using multiple sites #13752 by @jasonvarga
• Fix asset index fieldtype slice length #13757 by @jasonvarga
• Fix TypeError with CarbonImmutable in Timezone Support #13760 by @ajnsn
• Hide the expand layout control when the content is small and it has no effect #13761 by @JayGeorge
• Hide "Collapsible" option for bard/replicator sets #13763 by @duncanmcclean
• Antlers Blade Components: Correct extra parenthesis in output #13765 by @JohnathonKoster
• Fix webauthn migration created by update script #13769 by @duncanmcclean
• Remove the inset style for relationship fields to make dark mode more consistent #13784 by @JayGeorge
• Fix Textarea component story missing an end tag #13787 by @joshuablum
• Fix Textarea component resize #13788 by @joshuablum
• Add missing tooltips import #13783 by @duncanmcclean
• Fix uploading assets via Markdown fieldtype #13782 by @duncanmcclean
• Avoid searching server results with fuzzysort #13792 by @duncanmcclean
• Clearing a required date field should set the date/time to now #13794 by @duncanmcclean
• Override z-index of DatePicker inside modals #13802 by @duncanmcclean
• Normalize collection listing mode preference #13798 by @jasonvarga
• Update itemActions state when switching localization #13804 by @duncanmcclean
• Avoid animation when loading Bard field with collapse: true #13805 by @duncanmcclean
• Disable Bard debouncing #13797 by @jasonvarga
• Fix login and passkeys #13807 by @jasonvarga
• French translations #13738 by @ebeauchamps

What's fixed

• Handle 0 values in text fields and null string in slugs #13786 by @joshuablum
• Fix multi-site URL invalidation in ApplicationCacher #13793 by @joshuablum

What's fixed

• Avoid showing large number of assets in listing #13758 by @jasonvarga
• Abort 404 when asset is not found in AssetsController #13741 by @mynetx

What's new

• Add duration column to asset browser #13331 by @daun
• Search instructions when searching sets #13727 by @duncanmcclean
• Add "mod+s" shortcut to save blueprint order #13729 by @heidkaemper
• Add "mod+s" shortcut to save collection order #13724 by @duncanmcclean

What's fixed

• Improve the text fieldtype icon and the number icons #13713 by @JayGeorge
• Fix error when searching assets via the Command Palette #13718 by @duncanmcclean
• Fix "Icons" code example for buttons in Storybook #13719 by @duncanmcclean
• Bump tar from 7.5.6 to 7.5.7 #13721 by @dependabot
• Fix Invalid ISO 8601 date time string error from Date Fieldtype #13701 by Copilot
• Fix missing Live Preview componentUpdated function #13733 by @o1y
• After creating the assets folder, it keeps the last folder name #13722 by @nopticon
• Floating toolbar pointer improvements #13712 by @JayGeorge
• Fix adding sets to replicators nested inside Grid/Group fields #13723 by @duncanmcclean
• Use ResolveValues to resolve values in EloquentQueryBuilder::pluck() #13726 by @duncanmcclean

Read First

Be sure to read the Upgrade Guide first as manual changes may be necessary. You can also read the Statamic 6 Launch Announcement blog post to learn about many of the new features in depth!

What's new

• A completely redesigned Control Panel
• UI Component library
• Control Panel themes
• Vue 3
• Inertia.js
• Tailwind 4
• Command Palette
• Elevated sessions
• Two-factor authentication
• Passkeys
• Antlers component tag syntax
• Smart view scaffolding
• Addon settings
• Better date and timezone support
• Replicator/Bard sets can have image previews
• Laravel Boost Guidelines
• Publish form overhaul
• Collapsible publish form sections
• Publish form site locale-aware text direction
• Background Static Cache re-caching
• Collection calendar view
• Live Preview hot-reload
• REST API Authentication
• Improved JS and addon workflow
• Vue Composition API support in Fieldtypes

What's changed

• Dropped support for Laravel 11 and PHP 8.2.
• There are a number of breaking changes. Consult the 6.0 upgrade guide.

What's fixed

• Remove background blur from many places #13663 by @JayGeorge
• Make the stack hover effect a little less twitchy #13662 by @JayGeorge
• Delay bulk actions until ready #13450 by @JayGeorge
• Fix passkeys differently #13666 by @jasonvarga
• Remove negative assertions from TestCase #13674 by @duncanmcclean
• Update orchestra/testbench constraint in make:addon stub #13675 by @duncanmcclean
• Code gutter improvements #13677 by @JayGeorge
• Revision improvements #13676 by @JayGeorge
• Fix bard graphql test #13678 by @jasonvarga
• Move resources/lang directory to project root #13679 by @duncanmcclean
• Fix default: now on date fields #13044 by @duncanmcclean
• Reload actions after Publish/Unpublish in entry listing #13672 by @heidkaemper
• Fix adding Bard sets #13669 by @duncanmcclean
• Fix various console warnings #13671 by @duncanmcclean

What's fixed

• Revert AssetContainer::accessible() visibility change #13673 by @duncanmcclean
• Fix: Prevent 304 responses without client cache headers #13654 by @mynetx
• Fix uninitialized property error from HandleEntrySchedule job #13648 by @duncanmcclean
• Bump lodash from 4.17.21 to 4.17.23 #13628 by @dependabot
• Avoid updating Bard value unless content has actually changed #13645 by @duncanmcclean

What's fixed

• Hide actions in entry fieldtype tree view #13649 by @duncanmcclean
• Command Palette: Display site in search result badge #13650 by @duncanmcclean
• Fix Bard Link Toolbar #13306 by @duncanmcclean
• French translations #13653 by @ebeauchamps
• Kill sibling transitions #13658 by @JayGeorge
• Restoring a revision should force a hard-reload of the page #13656 by @duncanmcclean
• Ensure replicator lines show after reaching max_sets limit #13657 by @
• Improve Bard/Replicator performance during page load #13427 by @duncanmcclean
• Bard image button defaults #13661 by @jasonvarga
• Improve Combobox performance #13625 by @duncanmcclean
• Wrap STATAMIC_REVISIONS_PATH env value in base_path() #13629 by @duncanmcclean

What's new

• Laravel Boost Guidelines #13587 by @duncanmcclean
• Alert component #13599 by @JayGeorge

What's fixed

• Improve assets without filenames #13584 by @JayGeorge
• Fix CodeEditor previews in Storybook #13588 by @duncanmcclean
• Prevent linebreak for selected assets message #13582 by @JayGeorge
• German translations #13581 by @helloDanuk
• Opaque badges #13586 by @JayGeorge
• Run update scripts when updating to 6.0.0-beta.4 #13594 by @duncanmcclean
• Dynamic floating toolbar #13597 by @JayGeorge
• Prevent "Type / to insert a set" clashing with nodes #13583 by @duncanmcclean
• Fix missing preset tab container border under "New View" button #13603 by @jackmcdade
• Fix danger disabled button in dark mode #13585 by @JayGeorge
• Fix error when calculating stack depth for non-existent stack #13606 by @duncanmcclean
• Storybook - closer match Statamic branding #13612 by @JayGeorge
• Make parent_uri and other entry data available in static caching invalidation rules #10233 by @duncanmcclean
• Add default config option to Date fieldtype #13546 by @duncanmcclean
• Combobox Scrollbar tweaks #13453 by @duncanmcclean
• Fix incorrect index name passed to InsertMultipleJob job #13617 by @duncanmcclean
• Fixes UI inconsistencies #13505 by @kjetilhole
• Avoid generating slug for localization when field isn't localizable #13549 by @duncanmcclean
• Fix nested revealer fields #12362 by @duncanmcclean
• Run migration update scripts when updating to 6.0.0-beta.4 #13631 by @duncanmcclean
• Make PreventsSavingStacheItemsToDisk work with Pest PHP #13640 by @aerni
• Focus search input when opening relationship selector #13642 by @duncanmcclean
• Fix error when adding nested replicator set #13630 by @duncanmcclean
• npm audit fix #13646 by @jasonvarga
• Fix error when restoring revision #13626 by @duncanmcclean
• Avoid "Maximum recursive updates exceeded" error from tooltips #13605 by @duncanmcclean
• Hash URLs when saving nocache regions in database #13152 by @duncanmcclean
• Correct recursive form data merging #13413 by @mikemartin
• Group fieldtype gets padding only when border enabled #13109 by @martyf

What's fixed

• Revert config values in forms #13632 by @jasonvarga