What's Changed
🚀 Features
- Added ImpressCMS/codemirror-integration to default installation & fixed installer bug for installing from there @MekDrop (#1051)
- Added asset-packagist repo to composer for installing frontend assets as composer packages (if there is a need) @MekDrop (#1019)
- Added phpseclib/bcmath_compat to make it possible to install without bcmath extension @MekDrop (#1000)
- Remove all editors from core @MekDrop (#800)
- PARTIAL use editor contracts from imponeer to make editors plugable @MekDrop (#1007)
- Do not show module version for unreleased modules in modules admin @MekDrop (#1012)
- Available modules list function now uses module describers @MekDrop (#1011)
- Added possibility for module to copy assets from vendor/ @MekDrop (#1005)
- Use criteria lib from Imponeer @MekDrop (#927)
- Using Composer 2.x API for internal operations @MekDrop (#796)
- Most of Smarty plugins now implemented as composer libraries from @imponeer + xoops_link smarty function removed @MekDrop (#919)
- add install instructions to readme for 2.0 @fiammybe (#917)
- Added smarty 'trans' block and 'trans' variable modifier for translations @MekDrop (#874)
- Added ping to extend sessions automatically @MekDrop (#869)
- Fix/Improvement for cases when a theme was selected but than removed @MekDrop (#855)
- Removed reflex theme from core @MekDrop (#854)
- Site closed view functionality as dynamic SiteClosedMiddleware @MekDrop (#725)
- Code about multi_login moved from common.php into separate HTTP Middlware @MekDrop (#724)
- Session moved from container to middleware + theme changing now from HTTP middleware @MekDrop (#723)
- Added possibility to describe themes (also support for composer themes!) @MekDrop (#770)
- Added possibility to load modules definitions from different type of info files (like icms_version.php or composer.json) @MekDrop (#768)
- Smarty plugins can now be defined as services in container @MekDrop (#752)
- System waiting block is now can be expanded with services defined in container @MekDrop (#750)
- Upgraded middlewares/referrer-spam to 2.0.2 for PHP 8.0 and Composer 2.0 supporr @MekDrop (#826)
- Replace "ICMS_URL . '/modules/' -> ICMS_MODULES_URL . '/'" and "ICMS_ROOT_PATH . '/modules/' -> ICMS_MODULES_PATH . '/'" @MekDrop (#749)
- Using properties instead of setVar when setting database object properties everywhere where is possible @MekDrop (#745)
- Added new translator service @MekDrop (#801)
- Use league/mime-type-detection for dealing with mimetype detection & deprecated icms_Utils @MekDrop (#738)
- Using object property instead of getVar everywhere where is possible @MekDrop (#744)
- Fixed #733: Rename using the proper naming convention (This is a public var) @MekDrop (#736)
- Removed some old openid related code + migration to update openid related fields @MekDrop (#747)
- Added Roave Security Advisories to composer [dev] @MekDrop (#742)
- Encrypt cookies automatically with middleware if such preference is set @MekDrop (#740)
- Timers visible as Server-Timing header (using HTTP Middleware) @MekDrop (#727)
- Messengers fields from user settings where removed @MekDrop (#746)
- Fixed 'Rename using the proper naming convention (this is a public var)' for #731 @MekDrop (#737)
- Removed old style redirect @MekDrop (#726)
- Using FireWall middleware for bad ips checking instead of Security class @MekDrop (#720)
- Replaced DB_SALT env variable with APP_KEY @MekDrop (#739)
- Removes textsanitizer plugins and default DHTMLEditor @MekDrop (#735)
- Removed checkSuperGlobals from Security class @MekDrop (#721)
- Checks referers with HTTP middleware instead of security class @MekDrop (#719)
- Upgraded phpunit to 9.4 and test to make sure PHP 8.0 compatible @MekDrop (#802)
- Changed way how paths in subfolder would be handled @MekDrop (#797)
🐛 Bug Fixes
- Added ImpressCMS/codemirror-integration to default installation & fixed installer bug for installing from there @MekDrop (#1051)
- Fixes few installer errors @MekDrop (#1020)
- Fixed template file source resolving for tplsets @MekDrop (#1018)
- Use editor contracts (second part) @MekDrop (#1017)
- Fixed wrong constant for uptating module config data @MekDrop (#1016)
- Fixes bug with constants translations for console @MekDrop (#1015)
- Fixed bug when module model couldn't load unreleased module info @MekDrop (#1014)
- If database was already initialized, do not go back in installer without message @MekDrop (#1009)
- Better non installed icms detection @MekDrop (#1008)
- Added phpseclib/bcmath_compat to make it possible to install without bcmath extension @MekDrop (#1000)
- Remove all editors from core @MekDrop (#800)
- Available modules list function now uses module describers @MekDrop (#1011)
- Fixed bug when composer.json module describer failed with unreleased modules due release date @MekDrop (#1010)
- Fixed bug when there are no editors of type @MekDrop (#1006)
- Fixed a bug for templates during installation @MekDrop (#1003)
- Fix bug with mindplay/composer-locator old version @MekDrop (#1001)
- Fixed few security issues with packages @MekDrop (#974)
- Fixed tuupola/server-timing-middleware requirements @MekDrop (#975)
- CacheClearSetup steps moved to same namespace/path as other steps @MekDrop (#892)
- Smiles in misc.php now are escaped @MekDrop (#891)
- Fixed bug when was not possible to automatically resolve correct Route Strategy service due missing escape character in beginning @MekDrop (#870)
- Fix/Improvement for cases when a theme was selected but than removed @MekDrop (#855)
- Fixed includeq not working in smarty anymore bug @MekDrop (#849)
- Fixed null response bug for root path instalations @MekDrop (#844)
- Fixed bug with too long cookie names for Table component @MekDrop (#842)
- Upgraded middlewares/referrer-spam to 2.0.2 for PHP 8.0 and Composer 2.0 supporr @MekDrop (#826)
- Fixed #733: Rename using the proper naming convention (This is a public var) @MekDrop (#736)
- Remove whitesource config @MekDrop (#837)
- Removed some old openid related code + migration to update openid related fields @MekDrop (#747)
- Messengers fields from user settings where removed @MekDrop (#746)
- Fixed 'Rename using the proper naming convention (this is a public var)' for #731 @MekDrop (#737)
- Fixed short if bug for newer PHP in BlockHandler @MekDrop (#798)
- Prevents using submitted filenames with ../ for modelcontroller @MekDrop (#813)
- Fixed possible file system exposing due language cookie on installer (reported by hackerone_success) @MekDrop (#822)
- switch to a more explicit form of comparison @fiammybe (#809)
- Changed way how paths in subfolder would be handled @MekDrop (#797)
- Fix '0.0.0/composer-include-files 1.5.0 requires composer-plugin-api ^1.0 -> found composer-plugin-api[2.0.0] but it does not match the constraint.' with newer composer @MekDrop (#787)
- Fixes deprecation 'Array and string offset access using curly braces' @MekDrop (#786)
🧰 Maintenance
- Bump monolog/monolog from 2.3.2 to 2.3.4 @dependabot (#995)
- Bump symfony/translation from 5.3.7 to 5.3.9 @dependabot (#996)
- Bump league/mime-type-detection from 1.7.0 to 1.8.0 @dependabot (#997)
- Bump phpunit/phpunit from 9.5.4 to 9.5.10 @dependabot (#998)
- Bump .homestead from
42def2e
toee603d7
@dependabot (#994) - Bump .homestead from
7192301
to42def2e
@dependabot (#986) - Bump symfony/translation from 5.2.6 to 5.3.7 @dependabot (#987)
- Bump symfony/console from 5.2.6 to 5.3.7 @dependabot (#988)
- Bump phpmailer/phpmailer from 6.5.0 to 6.5.1 @dependabot (#991)
- Bump lulco/phoenix from 1.9.0 to 1.10.0 @dependabot (#989)
- Bump league/flysystem from 1.1.4 to 1.1.5 @dependabot (#990)
- Bump lulco/phoenix from 1.7.0 to 1.9.0 @dependabot (#980)
- Bump league/container from 3.3.5 to 3.4.1 @dependabot (#982)
- Bump http-interop/http-factory-guzzle from 1.0.0 to 1.2.0 @dependabot (#983)
- Bump monolog/monolog from 2.2.0 to 2.3.2 @dependabot (#981)
- Bump .homestead from
cb987fb
to7192301
@dependabot (#979) - Bump symfony/polyfill-iconv from 1.22.1 to 1.23.0 @dependabot (#984)
- Bump actions/stale from 3.0.19 to 4 @dependabot (#977)
- Bump phpmailer/phpmailer from 6.4.1 to 6.5.0 @dependabot (#976)
- Fixed few security issues with packages @MekDrop (#974)
- Fixed tuupola/server-timing-middleware requirements @MekDrop (#975)
- Bump .homestead from
47ce122
tocb987fb
@dependabot (#973) - Use criteria lib from Imponeer @MekDrop (#927)
- Bump .homestead from
51bc66d
to47ce122
@dependabot (#970) - Bump actions/cache from 2.1.5 to 2.1.6 @dependabot (#969)
- skip vulnerable versions of composer/composer @fiammybe (#968)
- Bump actions/stale from 3.0.18 to 3.0.19 @dependabot (#964)
- Bump phpmailer/phpmailer from 6.4.0 to 6.4.1 @dependabot (#963)
- Bump middlewares/base-path from 2.0.1 to 2.1.0 @dependabot (#960)
- Bump defuse/php-encryption from 2.2.1 to 2.3.1 @dependabot (#961)
- Bump symfony/console from 5.2.3 to 5.2.6 @dependabot (#959)
- Bump league/mime-type-detection from 1.5.1 to 1.7.0 @dependabot (#957)
- Bump actions/cache from v2.1.4 to v2.1.5 @dependabot (#956)
- Bump .homestead from
9923e00
to51bc66d
@dependabot (#958) - Bump lulco/phoenix from 1.5.0 to 1.7.0 @dependabot (#962)
- Bump phpunit/phpunit from 9.5.2 to 9.5.4 @dependabot (#951)
- Bump symfony/translation from 5.2.3 to 5.2.6 @dependabot (#952)
- Bump phpmailer/phpmailer from 6.3.0 to 6.4.0 @dependabot (#953)
- Bump league/container from 3.3.3 to 3.3.5 @dependabot (#954)
- Bump .homestead from
455252c
to9923e00
@dependabot (#950) - Bump symfony/polyfill-iconv from 1.20.0 to 1.22.1 @dependabot (#955)
- Bump actions/stale from v3.0.17 to v3.0.18 @dependabot (#938)
- Bump symfony/translation from 5.2.2 to 5.2.3 @dependabot (#931)
- Bump league/route from 4.5.0 to 4.5.1 @dependabot (#930)
- Bump phpmailer/phpmailer from 6.2.0 to 6.3.0 @dependabot (#932)
- Bump symfony/console from 5.2.1 to 5.2.3 @dependabot (#933)
- Bump phpunit/phpunit from 9.5.1 to 9.5.2 @dependabot (#934)
- Bump .homestead from
29b731f
to455252c
@dependabot (#929) - Bump smarty/smarty from 3.1.36 to 3.1.39 @dependabot (#928)
- Bump actions/stale from v3.0.16 to v3.0.17 @dependabot (#926)
- Bump actions/stale from v3.0.15 to v3.0.16 @dependabot (#921)
- Bump actions/cache from v2.1.3 to v2.1.4 @dependabot (#920)
- Bump smottt/wideimage from 1.1.3 to 1.1.4 @dependabot (#911)
- Bump symfony/translation from 5.2.1 to 5.2.2 @dependabot (#909)
- Bump phpunit/phpunit from 9.5.0 to 9.5.1 @dependabot (#908)
- Bump vlucas/phpdotenv from 3.6.7 to 3.6.8 @dependabot (#910)
- Bump lulco/phoenix from 1.4.0 to 1.5.0 @dependabot (#907)
- Bump .homestead from
9244785
to29b731f
@dependabot (#906) - Bump actions/stale from v3.0.14 to v3.0.15 @dependabot (#902)
- Fixed release drafter config to use correct GitHub labels when sorting tickets @MekDrop (#865)
- Bump actions/stale from v1 to v3.0.14 @dependabot (#873)
- Bump actions/cache from v1 to v2.1.3 @dependabot (#872)
- Added dependabot v2 config @MekDrop (#868)
- Added filter-by-commitish option in release drafter config @MekDrop (#866)
- Bump .homestead from
b2b3f19
to9244785
@dependabot-preview (#867) - Bump phpunit/phpunit from 9.4.4 to 9.5.0 @dependabot-preview (#858)
- Bump league/mime-type-detection from 1.4.0 to 1.5.1 @dependabot-preview (#860)
- Bump lulco/phoenix from 1.3.0 to 1.4.0 @dependabot-preview (#861)
- Bump symfony/console from 5.2.0 to 5.2.1 @dependabot-preview (#864)
- Bump symfony/translation from 5.2.0 to 5.2.1 @dependabot-preview (#863)
- Bump middlewares/encoder from 2.1.0 to 2.1.1 @dependabot-preview (#859)
- Bump monolog/monolog from 2.1.1 to 2.2.0 @dependabot-preview (#857)
- Bump middlewares/firewall from 2.0.1 to 2.0.2 @dependabot-preview (#862)
- Bump middlewares/client-ip from 2.0.0 to 2.0.1 @dependabot-preview (#856)
- Code Climate steps are now not required in GitLabCI test action @MekDrop (#851)
- Remove whitesource config @MekDrop (#837)
- Added Roave Security Advisories to composer [dev] @MekDrop (#742)
- Temp fix: use composer v1.0 for tests @MekDrop (#823)
- Bump middlewares/referrer-spam from 2.0.0 to 2.0.1 @dependabot-preview (#816)
- Bump symfony/console from 5.1.8 to 5.2.0 @dependabot-preview (#817)
- Bump cerdic/css-tidy from 1.7.2 to 1.7.3 @dependabot-preview (#818)
- Bump phpmailer/phpmailer from 6.1.8 to 6.2.0 @dependabot-preview (#819)
- Bump phpunit/phpunit from 9.4.3 to 9.4.4 @dependabot-preview (#820)
- Upgraded phpunit to 9.4 and test to make sure PHP 8.0 compatible @MekDrop (#802)
- Bump cerdic/css-tidy from 1.7.1 to 1.7.2 @dependabot-preview (#794)
- Bump phpmailer/phpmailer from 6.1.7 to 6.1.8 @dependabot-preview (#792)
- Bump symfony/polyfill-iconv from 1.18.1 to 1.20.0 @dependabot-preview (#793)
- Bump symfony/console from 5.1.6 to 5.1.8 @dependabot-preview (#791)
- Bump simplepie/simplepie from 1.5.5 to 1.5.6 @dependabot-preview (#790)
- Remove greetings actions due actions/first-interaction#23 bug @MekDrop (#788)