• Minimum system requirement: PHP 5.2.
• Modern default site theme (responsive, HTML5, CSS3).
• Choice of HTML5 or XHTML document type as a preference.
• Textile 2.4.1. See full changelog at http://textpattern.com/textile-changelog.
• User interface realignment and clean-up.
• Additional admin theme (Hive).
• Beautified setup process.
• Write, Plugin and Section panels save some changes without page refreshes (AJAX).
• WordPress import tool imports image media attachemnts as article images, can use 'utf8' or 'latin1' source databases.
• New advanced preference "Login info email address" allows to define a 'From:' address from which a new user's login info is sent.
• Check for new Textpattern version moved from Preferences to Diagnostics panel.
• Removed raw PHP support in pages and articles.
• Plugin status is preserved across plugin updates.
• <txp:link_to_prev> and <txp:link_to_next> adhere to the sort order set by <txp:article>.
• Deprecated escape attribute for <txp:search_term />.
• Removed align attribute for <txp:image />, <txp:thumbnail />, <txp:article_image />.
• <txp:css /> accepts a comma-separated list of style-sheet names for the name attribute.
• <txp:txp_die />: New attribute url. Specifies location target for HTTP stati 301, 302, 307.
• <txp:article_custom>, <txp:file_download_list> preserve sorting order from id attribute.
• <txp:images /> preserves sorting order from article image ids.
• <txp:file_download> may be used as a container tag.
• <txp:comment_form />: New attributes previewlabel, submitlabel, rememberlabel, forgetlabel.
• New <txp:author_email> tag.
• <txp:linklist /> accepts a comma-separated list of link ids in the new id attribute.
• <txp:images /> uses the sort order of images from the id attribute if present.
• Developer: Introduce gTxtScript() to help with the l10n of client-side strings.
• Developer: Introduce txpspecialchars() as a recommended HTML5-safe alternative to htmlspecialchars().
• Developer: New events article_saved, article_posted, comment.saved, article_ui'.'partials_meta, 'article_ui'.'validate_save, image_ui'.'fullsize_image, image_ui'.'thumbnail_image, admin_criteria'.'author_list, admin_criteria'.'author_list, admin_criteria'.'css_list, admin_criteria'.'discuss_list, admin_criteria'.'file_list, admin_criteria'.'form_list, admin_criteria'.'image_list, admin_criteria'.'link_list, admin_criteria'.'list_list, admin_criteria'.'log_list, admin_criteria'.'page_list, admin_criteria'.'section_list (NB: image_ui'.'image_edit and image_ui'.'thumbnail_edit changed).
• Developer: Introduce textpattern.Relay, a pub/sub hub for client-side events.
• Developer: Introduce txpAsyncForm (a jQuery plugin for asynchronous posts from forms) and txpAsyncHref (a jQuery plugin for asynchronous posts from links)
• Developer: Introduce safe_escape(), Constraint() and Validator() classes plus their descendents, callback_event_ref(), theme::announce_async().
• Developer: Restrict plugin type '3' to load only at non-AJAX requests. Introduce plugin type '4' to be loaded on the admin side for both AJAX and non-AJAX requests. Introduce plugin type '5' to be loaded on the public side and on the admin side for both AJAX and non-AJAX requests.
• Developer: Run custom post-update code from txpath.'/update/custom/post-update*.php' if this glob() exists.
• Developer: Include custom code like page-caches before the page is assembled by setting $txpcfg['pre_publish_script'] to a valid filename.
• Developer: Modified plugin type '1': Load only on non-AJAX requests on the admin-side.
• Developer: Additional plugin types '4' (admin-side, only for AJAX requests), and '5' (public side; admin-side, only for AJAX requests).
• Security: Admin-side disallows framing, sends "X-Frame-Options: SAMEORIGIN" header.
• Security: The txp_login cookie is set with a HttpOnly attribute.
• Security: Fixed a persistent XSS vulnerability in Textile discovered by Mauro Gentile.
• Security: Fixed a XSS vulnerability in the setup process discovered by Jonathan Claudius of Trustwave SpiderLabs.
• Security: Fixed a persistent XSS vulnerability in the access log panel discovered by Sasha Zivojinovic.
• Bug and security fixes.
• jQuery 1.7.2.