• Fixed security issue on public-side (XSS) (thanks zarathu).
• Fixed path disclosure issue (thanks zarathu).
• Search for posted and last modifed dates in article list.
• New tag: <txp:hide /> as a container for comments and other internal content.
• Changed tags: <txp:comments />, <txp:category_list />, <txp:section_list /> and <txp:image_index /> support sort attribute.
• Distribute jQuery 1.1.2 as a default JavaScript library.
• Keep image properties on replacement.
• Add 'delete thumbnail' function.
• Support back end branding: customisable logo and colour bar.
• Table sort indicators.
• Textile improvements.
• Fix non-utf8 mails (iso 8859-1).
• better wrapping in admin-interface to prevent horizontal scrollbar.
• Add comment status to comment notification mails.
• Fix 'infinite' pagination in rare edge cases.
• Work around apache bug for file-downloads (in connection with mod_deflate).
• Fix error messages on wrong logins for older MySQL versions.
• Fix comment spam blacklist false positives (see FAQ for 4.0.4).
• Fix file_download-tag from showing the same URL for different downloads (see FAQ for 4.0.4).
• Fix disappearing comment preferences in certain ciscumstances (see FAQ for 4.0.4).
• Fix 'active class' in section_list, category_list.
• Better cooperation with some proxies (and other HTTP/1.0 clients).
• Smarter comment submit button emphasises preview step.
• Optionally hide spam comments in back end list.
• Truncate longish article category titles in the write screen.
• Handle thumbnailing of larger images.
• Better MoveableType import.
• Fix some more IIS issues.
• New callback event: textpattern_end.
• New callback event: ping.
• New tag: <txp:article_url_title />.
• Changed tag: <txp:permlink /> loses default title attribute.
• Changed tag: <txp:file_download_link /> returns filename as an additional URL part.
• Many, many minor improvements, see: http://dev.textpattern.com/log/development/4.0/?action=stop_on_copy&rev=2443&stop_rev=1963.