getkirby/kirby 4.0.0-rc.1 on GitHub

✨ Enhancements

Exclude UI docs and lab from regular bundle #5909
k-stat supports new icon prop #5908
Tweaked style of Toggle input #5916
k-header: add warning for removed tabs support #5918
New activation tooltip and better design for the activation button in the menu. #5921
Switch to “Activate” wording instead of “register” #5922
Dom: New allowHostRelativeUrls sanitization option (true by default) to perform less strict checks when the HTML <base> element is used
Dom: Custom sanitization callbacks for attributes, elements and the doctype now also receive the $options array
Sane: New $isExternal mode specifically for external files that may be accessed directly

Calendar input dropdown doesn't close without effect on click
Calendar input dropdown stays open when selecting a date
Calendar input dropdown: when clicking today button, also update the dropdown to show that date
Clicking a button in the textarea no longer changes the scroll position #5906
The textarea restores the size again after reverting changes #5871
The textarea scrolls to a new line again #5868
Removes breaking change: this.$library.autosize is back
Fix grid and border radius in the TOTP dialog #5911
Fix drag to empty blocks list #5910
UUID permalinks added via the link dialog of the writer field are no longer removed in subfolder setups #5208
Structure fields with gap fields can be added again
The pagination dropdown no longer disappears before a selection can be made #5940
Fix field states without options #5947
Page move dialog: fix currently selected #5573
Highlight selected values in multiselect field instead of hiding them #5744
Fix keyboard navigation in the Tags field filter input #5741
Proper scrolling overflow in the Multiselect and Tags dropdown #5627
Fixed overflow issue for the Multiselect and Tags dropdown on mobile #5629
Fixed tags field focus issue #5939

When sanitizing DOM objects (e.g. in the writer field, but not
during the sanitization/validation of uploaded files), host-relative
URLs that point outside the site root are now allowed as the use of the
HTML <base> element is assumed for sites in a subfolder. To revert to the old, strict behavior, set the allowHostRelativeUrls option to false.
New $isExternal argument for the Sane\Handler::sanitize() and ::validate() methods that custom Sane handlers need to implement; it allows to
differentiate between strings from external files that may be accessed
directly and strings that will end up directly on the page