April 4th, 2013Major changes since 7.21:
· Allowed the drupal_http_request() function to be overridden so that additional HTTP request capabilities can be added by contributed modules.
· Changed the Simpletest module to allow PSR-0 test classes to be used in Drupal 7.
· Removed an unnecessary "Content-Disposition" header from private file downloads; it prevented many private files from being viewed inline in a web browser.
· Changed various field API functions to allow them to optionally act on a single field within an entity (API addition: http://drupal.org/node/1825844).
· Fixed a bug which prevented Drupal's file transfer functionality from working on some PHP 5.4 systems.
· Fixed incorrect log message when theme() is called for a theme hook that does not exist (minor string change).
· Fixed Drupal's token-replacement system to allow spaces in the token value.
· Changed the default behavior after a user creates a node they do not have access to view. The user will now be redirected to the front page rather than an access denied page.
· Fixed a bug which prevented empty HTTP headers (such as "0") from being set. (Minor behavior change: Callers of drupal_add_http_header() must now set FALSE explicitly to prevent a header from being sent at all; this was already indicated in the function's documentation.)
· Fixed OpenID errors when more than one module implements hook_openid(). The behavior is now changed so that if more than one module tries to set the same parameter, the last module's change takes effect.
· Fixed a serious documentation bug: The $name variable in the taxonomy-term.tpl.php theme template was incorrectly documented as being sanitized when in fact it is not.
· Fixed a bug which prevented Drupal 6 to Drupal 7 upgrades on sites which had duplicate permission names in the User module's database tables.
· Added an empty "datatype" attribute to taxonomy term and username links to make the RDFa markup upward compatible with RDFa 1.1 (minor markup addition).
· Fixed a bug which caused the denial-of-service protection added in Drupal 7.20 to break certain valid image URLs that had an extra slash in them.
· Fixed a bug with update queries in the SQLite database driver that prevented Drupal from being installed with SQLite on PHP 5.4.
· Fixed enforced dependencies errors updating to recent versions of Drupal 7 on certain non-MySQL databases.
· Refactored the Field module's caching behavior to obtain large improvements in memory usage for sites with many fields and instances (API addition: http://drupal.org/node/1915646).
· Fixed entity argument not being passed to implementations of hook_file_download_access_alter(). The fix adds an additional context parameter that can be passed when calling drupal_alter() for any hook (API change: http://drupal.org/node/1882722).
· Fixed broken support for translatable comment fields (API change: http://drupal.org/node/1874724).
· Added an assertThemeOutput() method to Simpletest to allow tests to check that themed output matches an expected HTML string (API addition).
· Added a link to "Install another module" after a module has been successfully downloaded via the Update Manager (UI change).
· Added an optional "exclusive" flag to installation profile .info files which allows Drupal distributions to force a profile to be selected during installation (API addition).
· Fixed a bug which caused the database API to not properly close database connections.
· Added a link to the URL for running cron from outside the site to the Cron settings page (UI change).
· Fixed a bug which prevented image styles from being reverted on PHP 5.4.
· Made the default .htaccess rules protocol sensitive to improve security for sites which use HTTPS and redirect between "www" and non-"www" versions of the page.
All changes since 7.21:
· #1821906 followup by David_Rothstein: Validate that the new $options parameter in various Field API public API functions is actually an array, to prevent conflicts with contrib modules.
· #1664784 by effulgentsia, mikeytown2: Allow drupal_http_request() to be overridden.
· #1693398 by donquixote, pounard, sun, Sylvain Lecoy: Allow PSR-0 test classes to be used in D7.
· #1952354 by robertcharlesfox | laurence_m: Fixed Typo in drupal_add_html_head() API doc.
· #1797506 by dcam, xjm, Lars Toomre, sivaji: Remove t() from assertion messages in tests for the rdf module.
· #1945066 by chertzog, dcam | joachim: Fixed node_theme() doesn't declare the file for theme_node_admin_overview() .
· #1049050 by mfb, TwoD, David_Rothstein, jpsoto: Removed dead code in file_stream_wrapper_uri_normalize().
· #946118 by droplet, lyricnz, dcam | rvilar: Fixed The machine name isn't updating correctly when the user selects a previous input value.
· #799356 by vijaycs85, m1n0, jaffaralia, effulgentsia: Fixed _form_set_class() is too aggressive in assigning the 'error' class.
· #1575060 by Spleshka, andypost, serm, mcjim, nod_: Fixed ajax_html_ids() are broken for forms with file element (encoding=multipart/form-data).
· #1728122 by rymo | HonoredMule: Fixed Sticky Table header tables don't inherit parent table's outer width.
· #1229014 by bfroehle, jackbravo, illmasterc: Fixed Content-Disposition header makes private files show open/save prompts, but public files show inline.
· #1821906 by Wim Leers, nod_: Allow more Field API public API functions to act on a single field within an entity.
· #985642 by kiamlaluno, Berdir, Damien Tournoud, Deciphered, B-Prod, galooph, David_Rothstein, drzraf, yched: Add back field_attach_load() to file_field_update() under certain circumstances in Drupal 7.
· #124689 by cck | Dio: Fixed hook_user()/hook_user_presave() documentation needs clarification on how to modify values.
· #1915088 by openminds, bfroehle: Fixed SkipDotsRecursiveDirectoryIterator not skipping dot-files when they are the first entry.
· #1937860 by mikeytown2: Fixed seven_css_alter() does not set the type.
· #1940404 by danpros: Fix URL typo in PHP module filter tips.
· #1096208 by zambrey, mr.baileys: Fixed PHP notices when creating menu link '#'.
· #1564996 by greggles: Added Make one-time login link watchdog more useful for auditing.
· #1705536 by pfrenssen: Fixed typo in docblock block_block_list_alter().
· #1716036 by larowlan, xjm: Use range() to create option list for forum block options.
· #1886876 by IRuslan, swentel: Fixed Useless variable assignment in node_feed().
· #1723828 by hass: Fixed incorrect log message when theme() is called for a theme hook that does not exist.
· #1648004 by dcam, Devin Carlson, Rob Loach: Removed inaccurate code comment about using l() in update_helpful_links().
· #1035292 by Désiré, vijaycs85, wizonesolutions, oriol_e9g, ACF, achton, darkadept: Fixed Dynamic tokens can't have spaces.
· #1901476 by caiosba | mstef: Fixed Uncaught TypeError: Cannot read property 'command' of undefined in ajax.js.
· #1242602 by swentel, JvE, babruix | Chi: Fixed Notices in taxonomy_autocomplete().
· #771036 by ojohansson, Albert Volkman, Gábor Hojtsy: Fixed Overlay overwrites existing target attribute.
· #1429442 by Jody Lynn, mathankumarc, gnuget, nrambeck, dcam | sun: Fixed Access denied page shown after submitting form that creates a unpublished node.
· #1605040 by TravisCarden, mitron | EdgarPE: Fixed drupal_send_headers() ignores headers with valid but falsy values.
· #1907704 by acrollet, ultimateboy, totten: Restrict temporary files created by text editors.
· #1379056 by Barrett: Fixed if more than one hook_openid() implementation returns a given parameter, the resulting value is an array and request is invalid.
· #1926758 by balsama, mitron: Fix code comment in system.module
· #1797514 by disasm, dicam, Gaelan, Lars Toomre: Remove t() from test assert messages in simpletest module
· #1884840 by Pix, pwolanin: Remove reference to md5 in ajax code comments
· #1920340 by yched: Fixed Update URL of change notification for '_field_info_collate_fields() memory usage'.
· #1324058 by isay, barraponto, shameemkm: Fixed forum-rtl.css does not overide #forum div.indent from margin-left to margin-right.
· #1886812 by kiamlaluno: theme_form_element() initialize a variable that is never used.
· #1215404 by brianV, pillarsdotnet: Fixed Remove assignment to unused variable $export_data from book_export_html() function.
· #1886796 by kiamlaluno: Fixed theme_checkbox() initialize a variable that is never used.
· #1886870 by IRuslan: Fixed Useless node_type_get_type() call in node_validate().
· #1848774 by IshaDakota, kiamlaluno: Fixed search_view() initializes a variable that is never used.
· #1898314 by droplet | xjm: Rename $user to $account in WebTestBase::drupalLogin().
· #1751054 by borisbaldinger, Berdir, vomiand: Fixed serious documentation problem with the $name variable in taxonomy-term.tpl.php (incorrectly documented as being sanitized when in fact it is not).
· #1586542 followup by andypost: Workaround for an issue where system update #7061 fails due to a memory leak and can't be run again.
· #1475342 by iamEAP | Kasper Souren: Fixed D6->D7 upgrade: system_update_7007() fail.
· #1827136 by amatzies, patrickd, posulliv | earnie: Add severity index to watchdog table.
· #1848464 by scor | jneubert: Fixed Make RDFa markup upward compatible with RDFa 1.1.
· #1890754 by Berdir, pwolanin, tim.plunkett: [Tests] Private Images visible by url.
· #1932354 by Alexander Pyle: Fix up documentation for image_scale()
· #1916928 by Alexander Pyle, YesCT, twistor: Document that clickLink is case sensitive
· #1347914 by Albert Volkman, Lars Toomre, batigolix, NROTC_Webmaster, xjm, sven.lauer: Fix up API docs for Filter module
· #1923554 by David_Rothstein, pwolanin, mitron | alfaguru: Fixed New anti-DoS measure breaks for some file URIs.
· #1266572 by znerol, joshf: Fixed Workaround in UpdateQuery_sqlite() for affected rows count causes certain updates to be suppressed.
· #1012620 by Berdir, kbasarab, YesCT: Fixed Unique key on date_formats().(format|type) is problematic for case insensitive collations.
· #1792380 by theo_: Fixed DatabaseCondition not cloning SelectQuery value object.
· #1794012 by dcam, Crell, Lars Toomre: Remove t() from asserts in database system tests
· #1908192 by mitron: Document what happens in drupal_get_filename() if the file is not found
· #1908194 by richard.c.allen2386: Document what happens in drupal_get_path if the file is not found
· #1889738 by andybroomfield: Add information to documentation of hook_custom_theme
· #1397346 by Albert Volkman, kristiaanvandeneynde, larowlan, bobbyaldol, tim-e, shiff2kl, FatGuyLaughing: Add and fix up documentation in image and node module files
· #1885000 by cck: Add link in hook_theme docs to theme layer page
· #1879022 by omegamonk: Fixed Enforced dependencies errors updating to recent versions of Drupal 7.
· #1040790 by yched, swentel, geerlingguy, justin.randell, Berdir | catch: Fixed _field_info_collate_fields() memory usage.
· #1893530 by alippai: Document that bundles element is not required for one-bundle entities in hook_entity_info
· #1894850 by ben.bunk: Fix typo in code example in drupal_prerender_links docs
· #1875858 by j.slemmer, cck: Fix documentation for a couple of menu hooks
· #1317628 by Albert Volkman, Gaelan, disasm, mjonesdinero, xjm: Clean up API docs for include files n-z
· #1888454 by kiamlaluno: Remove irrelevant information from form_process_vertical_tabs() documentation
· #1807556 by Albert Volkman, Lars Toomre: API docs fixup for Aggregator module
· #1807688 by Albert Volkman, Lars Toomre: API docs fixes for Book module
· #1156576 by pixelite, Ryan Weal, jhodgdon, plach, Albert Volkman: Better documentation for language negotiation
· #1851788 by cck, blake.thompson: Add docs for hook_menu for expanded property
· #1870612 by David_Rothstein, plach, greggles: Add tests for SA-CORE-2012-004 - Drupal core - Arbitrary code execution via file upload.
· #1565322 by Jorrit: Fixed Notice in locale_languages_edit_form_validate().
· #1857956 by catch, David_Rothstein: Do not re-prepare comment update timestamp if it's the same as the created timestamp (performance improvement).
· #1815930 by slashrsm, gbrands, amontero: Fixed Update watchdog message in file_unmanaged_copy() with correct string/variable replacement values.
· #1143460 by WorldFallz, Dave Reid, colette, typhonius, David_Rothstein | localhost: Fixed hook_file_download_access_alter() missing entity argument (by allowing an additional context argument to be passed to drupal_alter()).
· #1862198 by plopesc: Make it clearer where to find placeholder docs for t
· #1873608 by David_Rothstein: Clarify documentation on when to use t vs format_string
· #1333400 by Albert Volkman, Chi: Add parameter docs for hook_install_tasks
· #1864216 by larowlan, marvin_B8: Fixed No docblock for several functions in user.module.
· #1864360 by oadaeh: Fixed Clean up some inconsistencies with @link...@endlink.
· #1864188 by johnshortess | hefox: Fixed user_filters() invokes hook_permission() with argument 'permission' ($function('permission')).
· #1741386 by lazysoundsystem, rasmusluckow, andypost, Lars Toomre, dcam: Removing t() from asserts in simpletests in book module.
· #1534674 by plach, slowflyer: Fixed Comment field language is completely broken.
· #1874342 by erikwebb: Fixed Undefined constant STEAM_WRAPPERS_LOCAL used in file_get_stream_wrappers() documentation.
· #1873608 by David_Rothstein: Improve documentation of format_string() to emphasize that it is used to prepare variables for HTML display.
· #1854620 by marvin_B8, droplet: Fixed hook_menu_local_tasks_alter() help texts.
· #1629994 by Aron Novak, oadaeh, yurtboy, jhodgdon, kingandy: Fixed Mail functions reference obsolete RFC.
· #1606946 follow-up by David_Rothstein: Remove note about const from D7 docs since we don't require PHP 5.3.
· #1868206 by kiamlaluno: Fixed Word is repeated.
· #1847382 by thehong, pingwin4eg, 63reasons: Fixed Undefined index: access in includes/menu.inc (when custom access_callback() does not exist or does not get included).
· #1706878 by tim.plunkett, lazysoundsystem: Added DrupalWebTestCase::assertThemeOutput() to allow modules to test theme function output.
· #1446650 by superspring | drupalsven: Added After installing module display link to 'install another module'.
· #1727430 by tedbow, webchick, fubhy | amontero: Added 'exclusive' flag to install profiles to auto-select them during installation.
· #843114 by sun, quicksketch, Berdir | c960657: Fixed DatabaseConnection::__construct() and DatabaseConnection_mysql()::__construct() leaks $this (Too many connections).
· #1117780 by amontero, naxoc | ogi: Display cron url in admin/config/system/cron page.
· #1494676 by Liam Morland, cam8001: Removed unused variable $http_protocol in drupal_settings_initialize().
· #1672694 by Devin Carlson, JulienD, jibran, kalabro: Fixed Field UI continues to use t() for $instance['label'] in field_ui().admin.inc.
· #1550892 by david.mckay | fgm: Fixed reset() on function call in image_update_7002() to avoid an E_STRICT notice.
· #1833028 by michaelmol | rmfleet: Fixed bug which prevented image styles from being reverted on PHP 5.4.
· #1817680 by haydeniv | netol: Fixed Update notification is printed more than one time.
· #1733476 by greggles, BMDan: Fixed Make default htaccess rules protocol sensitive to avoid man-in-the-middle-attacks if users don't fully customize the rule.
· #1851886 by Albert Volkman: Fix up documentation for cache_set() function
· #1247812 by Albert Volkman, jzacsh: Add docs for user_admin() function
· #1853050 by Jerenus: Fix up docs for drupal_send_headers()
· #1857984 by Ivan Zugec: Fix sample code for hook_field_widget_form so it would actually work
· #1858508 by TravisCarden: Add see also to hook_theme docs
· #1856142 by kiamlaluno: Fix typo in node_query_node_access_alter() comment
· #1606946 by Albert Volkman: Fix grammar in docs in update.php
· #1853574 by Albert Volkman: Fix spelling error in drupal_mail_system() docs
· #1787876 by Albert Volkman, cirage, BrockBoland: Add return docs for drupal_get_token() function
· #1606946 by Albert Volkman, udaksh, bunthorne: Fix up API docs for top-level PHP files
· #1851538 by willkaxu: Fix docs typo in cache.inc
· #1313980 by Albert Volkman, Lars Toomre, jn2, xjm, jhodgdon: Clean up API docs for Node module
· #1846510 by Tor Arne Thune: Remove duplicate that in code comment
· #1846510 by larowlan, kim.pepper: Fix spelling error in field UI module comment
· #1848516 by IshaDakota: Fix coding style in hook_schema() example function body
· #1423090 by Albert Volkman: Fix invalid function see reference in field.module
· #1837840 by amontero, tstoeckler: Add clarification to l() docs as to when to use t() instead
· #1326600 by dcam, Lars Toomre, batigolix, kid_icarus, xjm: Clean up API docs for dblog module
· #1492378 by kbasarab: follow-up docs correction on autocomplete paths
· #1831408 by kotnik: Fix spelling of entity in docs
· #1829366 by gcassie: Fix up grammar and caps in default settings.php file
March 12th, 2013· Drupal 7.20 fixed a fundamental security flaw in the Drupal core Image module and therefore introduced incompatibilities with a number of contributed modules and sites (see the Drupal 7.20 release notes). To help mitigate the effect of these changes, an optional 'image_allow_insecure_derivatives' variable was provided, which sites could use to turn off the security fix.
· Drupal 7.21 adds additional security protection for sites that use this variable. Although they will still not receive the full benefit of the security fix, they will now have protection against the most damaging and easiest-to-inflict vulnerabilities that were addressed in Drupal 7.20.
If you encountered problems when upgrading or attempting to upgrade to Drupal 7.20, then you should upgrade to Drupal 7.21 following the instructions below:
· First check if upgrading to Drupal 7.21 (and applying any patches or fixes recommended in the Drupal 7.20 release notes) allows you to upgrade your site without any issues. Unset the 'image_allow_insecure_derivatives' variable if you previously set it while upgrading to Drupal 7.20.
· If your site experiences problems that do not yet have a fix (and the problems are severe enough that you are unable to tolerate them on your site), set the 'image_allow_insecure_derivatives' variable to TRUE. This can be done using Drush, or by placing code such as $conf['image_allow_insecure_derivatives'] = TRUE; in your settings.php file. (There is also an experimental module you can install which will provide a user interface for turning the variable on.)
· If you choose to set this variable, understand that your site is not fully secure; it will still be vulnerable to some forms of denial-of-service attacks which use image derivatives as described in SA-CORE-2013-002 (although not the most serious and easiest-to-inflict ones). You should therefore monitor the issue queues of any modules which were giving you trouble and remove the variable from your site as soon as fixes become available which you are able to apply.
· There is one behavior change introduced in this release for sites using the 'image_allow_insecure_derivatives' variable. Previously, setting the variable would allow you to generate any image derivative without including a token in the URL. Now, although tokens will still be optional for most image derivatives, they will be required in the unlikely case of an image derivative which was itself generated from an image derivative (for example, if you first generate a thumbnail image by visiting http://example.com/sites/default/files/styles/thumbnail/public/field/image/example.png, and then want to take that thumbnail image and generate a "medium" image based off of it by visiting http://example.com/sites/default/files/styles/medium/public/styles/thumbnail/public/field/image/example.png, the second case will require a token in the URL in order to work). This change was necessary in order to provide the security improvements and is not believed to have a practical effect in realistic scenarios.
February 22nd, 2013· This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement...
· SA-CORE-2013-002 - Drupal core - Denial of service
· No other fixes are included.
January 17th, 2013· This release fixes security vulnerabilities. Sites are urged to upgrade immediately!
December 20th, 2012· This release fixes security vulnerabilities.
November 13th, 2012· Changed the default value of the '404_fast_html' variable to have a DOCTYPE declaration.
· Made it possible to use associative arrays for the 'items' variable in theme_item_list().
· Fixed a bug which prevented required form elements without a title from being given an "error" class when the form fails validation.
· Prevented duplicate HTML IDs from appearing when two forms are displayed on the same page and one of them is submitted with invalid data (minor markup change).
· Fixed a bug which prevented Drupal 6 to Drupal 7 upgrades on sites which had stale data in the Upload module's database tables.
· Fixed a bug in the States API which prevented certain types of form elements from being disabled when requested.
· Allowed aggregator feed items with author names longer than 255 characters to have a truncated version saved to the database (rather than causing a fatal error).
· Allowed aggregator feed items to have URLs longer than 255 characters (schema change which results in several columns in the Aggregator module's database tables changing from VARCHAR to TEXT fields).
· Added hook_taxonomy_term_view() and standardized the process for rendering taxonomy terms to invoke hook_entity_view() and otherwise make it consistent with other entities (API change: http://drupal.org/node/1808870).
· Added hook_entity_view_mode_alter() to allow modules to change entity view modes on display (API addition: http://drupal.org/node/1833086).
· Fixed a bug which made database queries running a "LIKE" query on blob fields fail on PostgreSQL databases. This caused errors during the Drupal 6 to Drupal 7 upgrade.
· Changed the hook_menu() entry for Drupal's rss.xml page to prevent extra path components from being accidentally passed to the page callback function (data structure change).
· Removed a non-standard "name" attribute from Drupal's default Content-Type header for file downloads.
· Fixed the theme settings form to properly clean up submitted values in $form_state['values'] when the form is submitted (data structure change).
· Fixed an inconsistency by removing the colon from the end of the label on multi-valued form fields (minor string change).
· Added support for 'weight' in hook_field_widget_info() to allow modules to control the order in which widgets are displayed in the Field UI.
· Updated various tables in the OpenID and Book modules to use the default "empty table" text pattern (string change).
· Added proxy server support to drupal_http_request().
· Added "lang" attributes to language links, to better support screen readers.
· Fixed double occurrence of a "ul" HTML tag on secondary local tasks in the Seven theme (markup change).
· Fixed bugs which caused taxonomy vocabulary and shortcut set titles to be double-escaped. The fix replaces the taxonomy vocabulary overview page and "Edit shortcuts" menu items' title callback entries in hook_menu() with new functions that do not escape HTML characters (data structure change).
· Modified the Update manager module to allow drupal.org to collect usage statistics for individual modules and themes, rather than only for entire projects.
· Modified the node listing database query on Drupal's default front page to add table aliases for better query altering (this is a data structure change affecting code which implements hook_query_alter() on this query).
· Improved the translatability of the "Field type(s) in use" message on the modules page (admin-facing string change).
· Fixed a regression which caused a "call to undefined function drupal_find_base_themes()" fatal error under rare circumstances.
· Numerous API documentation improvements.
· Additional automated test coverage.
May 3rd, 2012· This is a maintenance release to fix 17 miscellaneous bugs.
February 2nd, 2012· This version fixes a wide variety of miscellaneous bugs.
December 6th, 2011· Fixed Content-Language HTTP header to not cause issues with Drush 5.x.
· Reduce memory usage of theme registry (performance).
· Fixed PECL upload progress bar for FileField
· Fixed running update.php doesn't always clear the cache.
· Fixed PDO exceptions on long titles.
· Fixed Overlay redirect does not include query string.
· Fixed D6 modules satisfy D7 module dependencies.
· Fixed the ordering of module hooks when using module_implements_alter().
· Fixed "floating" submit buttons during AJAX requests.
· Fixed timezone selected on install not propogating to admin account.
· Added msgctx context to JS translation functions, for feature parity with t().
· Profiles' .install files now available during hook_install_tasks().
· Added test coverage of 7.0 -> 7.x upgrade path.
· Numerous notice fixes.
· Numerous documentation improvements.
· Additional automated test coverage.
July 1st, 2011· Drupal 7.4 fixes other issues reported through the bug tracking system.
May 27th, 2011· Get CHANGELOG.txt caught up to speed with changes in Drupal 6 and Drupal 5 in the past three years.
· #1137074 by plach, Jose Reyero: notices and wrong links on translation tab for unpublished nodes.
· #1021270 by larowlan, wojtha: Fixed Blocks for custom menus are impossible to theme.
· #1096340 by plach, fietserwin, sun: Fixed Stale language types/negotation info after enabling/disabling modules.
· #1019352 by Jody Lynn: delete blog module's variable on hook_uninstall().
· #1019292 by TR, Jody Lynn: remove random nbsp characters.
· Merge branch '7.x' of git.drupal.org:project/drupal into 7.x
· #1164226 by TR: token_find_with_prefix() has typos, token.inc not up to doc standards.
· #1154822 by lyricnz, Starminder: Fixed User Schema mismatch after upgrade D6 to D7.
· #1154820 by lyricnz, marcingy, Starminder: Fixed System Schema mismatch after upgrade D6 to D7.
· #1154812 by lyricnz, Starminder: Fixed Poll Schema mismatch after upgrade D6 to D7.
· #1154808 by lyricnz, Starminder: Fixed Node Schema mismatch after upgrade D6 to D7.
· #1154802 by lyricnz, Starminder: Fixed Block Schema mismatch after upgrade D6 to D7.
· #1154806 by lyricnz, marcingy, Starminder: Fixed Comment Schema mismatch after upgrade D6 to D7.
· #1089174 follow-up by plach: Fix notices and expand tests.
· #1017832 by benjifisher, droplet, aspilicious, tim.plunkett, johnv, Jeff Burnz: fieldset CSS for node forms needs to be more specific.
· #1120412 by skwashd: comment_save() doesn't support additional columns added by hook_schema_alter().
· Merge branch '7.x' of git.drupal.org:project/drupal into 7.x
· #1078980 by plach: language neutral not available when there are disabled languages.
· #1038788 by wojtha, sign: drupal_find_theme_functions() removes all theme 'prefix_' occurences.
· #1013864 by agentrickard, JimmyAx: book navigation block fails with Node Access modules.
· #1096446 by plach: Fixed entity_label() is not passing along the () parameter.
· Rollback of #1076366. This is not quite ready to go yet, because it depends on another issue (#1120290).
· #1089174 by plach: Fixed Prepare view hooks do not receive the language parameter.
· #1001146 by edhaber, droplet: Fixed Cannot theme links in a menu when menu_name() contains a hyphen.
· #1105848 by cafuego: Fixed Unsafe query comments possible via UI.
· #999004 by pillarsdotnet, fago, sun, marcingy: user_save() relies on edit instead of account.
· #1017672 by catch, q0rban: Fixed D6 to D7 update process permanently deletes comment bodies and other data, and throws fatal SQL errors.
· Rolled back.
· #784856 by dmitrig01: menu_get_names() is dead code, remove it.
· #1132364 by CrookedNumber, David_Rothstein: hook_modules_enabled() could be less ambiguous.
· #1149002 by droplet, hansfn: 'Machine name' not translatable on the content type overview page .
· #705912 by jherencia, bleen18: template_preprocess_node() makes an useless comprobation.
· #1158730 by TR: documentation problem with hook_user_load().
· #843162 by pwolanin, Scott Falconer, Berdir, jhodgdon, a.mikheychik, mtift: creating vocabularies with machine-names 'List' or 'Add' breaks links in taxonomy overview admin area. .
· #1157426 by Gábor Hojtsy: field system uses t() incorrectly and inconsistently.
· #1119158 by skwashd: Added user_role_save() doesn't implement a presave hook.
· #1149912 by grendzy, sun: recent comments block displays old, out-of-order comments.
· #1034248 by jhodgdon, drewish, jn2: hook_block_view() example should return a render array.
· #876282 by tim.plunkett, amateescu: small layout glitch on 'Password match' line during installation.
· #1150340 by aspilicious: CSS gradient background doesn't work with newest opera and IE versions.
· #988030 by mr.baileys, linclark: document correct sequence of hooks in node deletion.
· #759844 by jpmckinney, dixon_, plach, ksenzee, fabsor, pillarsdotnet: overlay does not work with prefixed URL paths.
· #802856 by catch, pillarsdotnet: make lock_wait() wait less.
· #936844 by bleen18: cannot override comment author to or from Anonymous.
· #843162 by pwolanin, Scott Falconer, Berdir, jhodgdon, a.mikheychik, mtift: creating vocabularies with machine-names 'List' or 'Add' breaks links in taxonomy overview admin area.
· #834848 by Berdir: warning message regarding hook_update_last_removed() is not displayed.
· #1029606 by fago, bojanz, Damien Tournoud: hook_menu() should not be called during uninstallation.
· #1060246 by plach: translation alters language switch links even if node translation is disabled.
· #690544 by bleen18, andypost, marcvangend, dbeheydt, rschwab, robertom: blocks admin (admin/structure/block) requires menu_rebuild() to display settings for current theme.
· #761648 by lyricnz, andypost, ksenzee, Jody Lynn, Gábor Hojtsy, Damien Tournoud, Shawn DeArmond, David_Rothstein: menu items disappear after upgrade or manual menu entry.
· Merge branch '7.x' of git.drupal.org:project/drupal into 7.x
· Hm. Rollback of previous patch. I think I just broke testbot. NOOB.
· Merge branch '7.x' of git.drupal.org:project/drupal into 7.x
· #1017672 by catch, q0rban: D6 to D7 update process permanently deletes comment bodies and other data, and throws fatal SQL errors.
· #534594 by catch, Frando: add registry_rebuild() to update.php.
· #1076366 by wojtha: OpenID discovery spec violation - fragments are removed from claimed id .
· #1017672 by catch, q0rban: D6 to D7 update process permanently deletes comment bodies and other data, and throws fatal SQL errors.
· #1003308 by andypost: further forum module fix.
· #958850 by bellHead: Postgres password containing backslashes don't work.
· #1076414 by wojtha, c960657: Openid discovery - OpenID v1 OP service with lower priority is chosen instead OpenID v2 Claimed id service.
· #1055234 by jhodgdon, linclark: field_bundle_settings() doc example is wrong.
· #1024684 by linclark: omit & in @param statements (for consistency).
· #796692 by dman, cross, andypost, aaronbauman, yched, BarisW: only show the term heading if the term has a description.
· #1060304 by plach: misleading help text for the translation support settings.
· #1086066 by drewish, Mile23: get_t() should describe what it does and why.
· #852120 by cygri: batch operations example doesn't do proper sanitizing.
· #1063046 by guidocecilio, linclark: hook_requirements() API documentation needs doc on 'update' phase.
· #1051870 by boombatower: remove unused variable initialization.
· #1099396 by Désiré, droplet, plach: language_count() is never decremented when removing a language.
· #711650 by marcvangend, cha0s: when index.php appears in the URL (or is automatically added by the server) users get a 'page not found' message.
· #1139638 by DamZ: the SQLite driver cannot update a column to NULL.
· #61856 by bfroehle, jredding, andypost, blakehall, Pancho: in user.module, trim() user-submitted email address before validation.
· #716348 by mikey_p: fixed description.
· #1097538 by davidtrainer: update drupal_set_message() docs.
· #1067806 by starsinmypockets: _field_info_prepare_instance() calls, but does not use, field_info_field_types().
· #917492 by kvanderw, rfay, claar, Bok Choy: add a sensible .gitignore file.
· #817482 by Stevel, bfroehle: user_save() issues a warning when saving without changing mail attribute.
· #908282 by jbrown, pillarsdotnet: add width and height attributes to increase front-end performance.
· #1003308 by bfroehle: Fix upgrade path for Forum module by hard-coding vocabulary machine name (with tests).
· #1111288 by yched: Fix file permissions on field_ui tests.
· #1110810 by JohnAlbin, TR: CVS $ tag lurks in .htaccess file (and other dank corners of Drupal).
· #733192 by pillarsdotnet, Sutharsan, Letharion, clemens.tolboom: tokens enclosed in [ ] are not recognized.
· #1032024 by grendzy: comment_form_submit() overwrites author/visitor cookie when moderating/administering comments.
· #1008410 by droplet: forum list header sorting broken.
· #183435 by gregmac, TR: drupal_http_request() and malformed responses.
· #1122880 by jn2: DatabaseConnection::defaultOptions has incorrect php.net link.
· #1111288 by droplet: wrong instance definition in field_ui().test.
· #1107384 by droplet: wrong instance definition in node.module.
· #1126370 by kim-day, jn2: menu_link_save() needs more detail.
· #1097538 by davidtrainer: update drupal_set_message() docs.
· #1026058 by plach, droplet add back Language switcher block help message.
· #1132364 by CrookedNumber: hook_modules_enabled() could be less ambiguous.
· #965272 by larowlan, bellHead, TR: items defined with type MENU_CALLBACK show 'Home' as a title.
· #1048006 by jyyna, wojtha, David_Rothstein: name of vocabulary (Tags) created during install cannot be localized.
· #919596 by boombatower: -MultiViews in .htaccess requires odd AllowOverride Options=All,MultiViews.
· #984456 by Dave Reid, bfroehle: cleanup file_field_widget_uri() and its token replacement.
· #1096842 by nanotube: typo in EntityFieldQuery documentation.
· #1127312 by niklas: undefined variable items in theme_user_list() when displaying empty user/new block.
· #1043552: fixed typo in comment inside theme_disable().
· #1043566: fixed typo on BlockAdminThemeTestCase description.
· #545518 by bfroehle: move Locale module specific code out of module.inc and system.module.
· #1066118 by Barrett: hook_field_widget_form() has punctuation error.
· #1107376 by jhedstrom: weight not a property of a field instance, so doc shouldn't say it is.
· #1110064 by jeffschuler: two @defgroup comment fixes.
· #1095498 by ohnobinki: toolbar toggle link rendered without escaping ampersand as an html entity.
· #766624 by aspilicious: dashboard lacks rtl styling.
· #766624 by aspilicious: dashboard lacks rtl styling.
· #1017882 by Gábor Hojtsy: required elements buggy with #states.
· #1118502 by pwolanin: path module should use a different weight than search module on admin/config.
· #1120928 by catch: {history} table is owned by system module.
· #1012768 by agentrickard: fire hook_menu_link_delete() before removing the data row.
· #1023190 by Berdir: wrong merge query in aggregator_save_item().
· #839556 by dalin, jrchamp, effulgentsia, dmitrig01, David_Rothstein: fix isset regression in tablesort, add tests, and cleanup theme_process_registry().
· #999538 by Josh The Geek: default.settings.php still refers to 'aggressive caching'.
· #1031148 by Berdir: select-all checkbox is not added when updating a table with #ajax.
· #985982 by iLLin: overlay resizes toolbar after closing.
· #935258 by Stevel, Josh Waihi: defaults not changed in changeField on postgresql.
· #998612 by longwave: drupal_render() doesn't render 0 when set into #markup property.
· #1062370 by mikeryan: vocabulary machine_name() length limited to 21, in UI only.
· #1032024 by grendzy: comment_form_submit() overwrites author/visitor cookie when moderating/administering comments.
· #1037358 by sanduhrs, Azol: locale.datepicker.js minor fixes (js consistency).
· #1099254 by hansfn: typo in modules/system/system.admin.inc.
· #897140 by fgm: system.methodSignature returns incorrect and incomplete data.
· #1120698 by skwashd, Dave Reid: typo in MAINTAINERS.txt.
· #1065020 by Berdir: fixed E_STRICT warning when downloading/viewing a file or image.
· #733306 by atchijov, carlos8f: add static caching for drupal_parse_info_file().
· #1075886 by franz: typo on help text.
· #598586 by grendzy, deekayen: watchdog() assumes is defined.
· #608478 by David_Rothstein: remove leftover code and variables
· #1050686 by David_Rothstein: theme region names are no longer translated.
· #722920 by andypost: slightly optimize the block upgrade path.
· #1110862 by Reidsy: remove reference to search-theme-form.tpl.php in search.module.
· #1089430 by manarth: improved code comment.
· #749992 by jhodgdon: menu system / menu module distinction is not obvious to folks new to Drupal.
· #988318 by jhodgdon: translation_form_node_form_alter() doc says it implements the wrong hook.
· #1106528 by joachim: field_attach_form_validate() documentation indentation is incorrect.
· #1106636 by pwolanin: use system_get_info() API function instead of unserializing from DB to get module names.
· #1105384 by claar: system_admin_menu_block_page() description not one line.
· #1021406 by ygerasimov: fixed typo in documentation
· #1037352 by David_Rothstein: clarified usage of 'warning' parameter.
· #1097972 by boombatower: Fixed hook_field_extra_fields_display_alter() incorrect example code.
· #1041440 by jhodgdon: hook_cron() falsely claims it will only be called if cron.php is run.
· #1041902 by jhodgdon: hook_entity_info() doc header has a couple of omissions.
· #1037352 by jhodgdon: hook_permission() is missing doc about 'warning'.
· #1082624 by Barrett: hook_form() doc references example project and shouldn't in D7/8.
· #1031692 by jhodgdon: entity_load() doc should not say to use for more than one load only.
· #1022924 by yched, chx: Fixed critical bug: Updates are broken for deleted fields in installs upgraded from rc1.
· #1087092 by danillonunes: Fix documentation for drupal_map_assoc() function
· #1065968 by droplet: fixed function node_get_recent().
· #1076394 by pillarsdotnet: improved test code.
· #1071494 by Takafumi: typo in menu.module.
· Stripping CVS keywords
· #1064212 by catch: page caching performance has regressed by 30-40%.
· #1068184 by bfroehle: _openid_get_math_library() should not use drupal_static().
· #1067662 by mfb: optimize file_uri_scheme().
· #1059184 by yched: warnings in list_update_7001 (edge cases).
· #545518 by sun, Xano: move Locale module specific code out of module.inc and system.module.
· #953010 by steinmb, droplet: locale.css causes vertical tabs to overlap the language selection drop-down menu in node edit forms.
· #1067980 by Takafumi, Damien Tournoud: missing t() in image.admin.inc.
· #1051164 by betz: remove unnecessary ['submitted'] override in template.php.
· #1006838 by coltrane: upgrade to 7 glaring timezone invalid notice.
· #1062616 by benanderson: failed integration with Amazon's Simple Email Service (SES).
· Rollback of accidentical commit #1064882.
· #1024806 by Jody Lynn: Fixed dblog_uninstall() needed.
· #1025372 by rschwa: hook_block_info() should document max length of delta/array key.
· #880278 by RoboPhred: cleanup _locale_import_read_po().
· #892864 by pwolanin, pounard: remove drupal_static() in _drupal_bootstrap_full().
· #1019596 by RoboPhred: field_read_instance() doc says it will not return deleted instance, but that is a parameter option.
· #1020906 by RoboPhred: differentiate process/preprocess hook documentation.
· #942006 by jhodgdon, heyrocker: documentation for drupal_write_record() doesn't state what happens to missing values on existing records.
· #1014130 by catch, carlos8f, David_Rothstein: install_profile_info() does a file system scan on every request to admin/config (and etc.).
· #1051184 by mr.baileys: fix doxygen formatting and punctuation in documentation for drupal_parse_info_file().
· #1063178 by Haza: line break filter will ignore everything following a xxx.
· #1058762 by montesq: hook_user_delete doc has wrong order of operations
· #1064264 by rfray: get the tests ready for the Great Git Migration.
· #847324 by jhodgdon, yang_yi_cn: fix formatting of documentation.
· #1056108 by 1V: consistent use of 'JavaScript' and 'Ajax'.
· #1046784 by Dave Reid: strings in simpletest_requirements() are not using ().
· #1042706 by 1V: clean up INSTALL.txt and update links.
· #1052364 by agentrickard: documentation error in hook_modules_uninstalled().
· #1049528 by sreynen: change script example for drupal_parse_info_file() from .css to .js.
· #859602 by catch, bfroehle: #cache does not record the #attached declared in child elements.
· ##1041474 by 1V: Fixed INSTALL.pgsql.txt and INSTALL.mysql.txt cleanup of various grammatical errors.
· #1020642 by amateescu: improved coding standards for toolbar.css.
· #1031686 by rschwab: User_load() documentation should reference drupal_save_session(), not session_save_session().
· #1027578 by droplet: missing period in the documentation for drupal_convert_to_utf8().
· #1045606 by droplet, montesq: hook_block_info() doc should use visibility constants.
· #1029346 by David_Rothstein: Changed INSTALL.txt and UPGRADE.txt should mention that you can download Drupal as a .zip file also.
· #1025124 by catch, jbrown: remove cruft from theme_image_style() and image_style_url(). Should be faster too.
· #1049116 by solotandem, David_Rothstein: module_enable() doesn't account for version strings in dependencies[].
· #1049144 by boombatower: remove unnecessary return statements.
· #933498 by eojthebrave, aaron: image effects table created with incorrect table name in upgrade path.
· #1019710 by stephenh: Changed Standardize @file comments in .test files.
· #1051038 by mr.baileys: incorrect return info on image_style_create_derivative().
· #690980 by Dave Reid, grendzy, cwgordon7: Security hardening: Ensure password fields are empty on display.
· #321063 by eMPee584, Kars-T: Fixed book/export/html/N with a non-book nid should abort and return 404 not found.
· #932584 by duellj: Fixed Forum has two 'select' options
· #1022172 by montesq: Fixed Missing return in example hook_menu code
· #1027454 by amateescu, montesq, jhodgdon: Fixed _aggregator_parse_opml() documentation contains escaped HTML tags that should be removed.
· #1029358 by benjifisher: Fixed blockquote messes up ol lists in Bartik.
· #934726 by yched, jinglemansweep: Fixed Undefined index: taxonomy_term in taxonomy_field_formatter_view()
· #740182 follow-up: Committing new shortcut.png image.
· #1024608 by yched: Move help text setting above field-specific settings on field UI page.
· #1026654 by amateescu: Fix regression with background colours in Bartik maintenance page.
· #1019834 by bfroehle: Fixed No .info files reported on theme upload when zip created with certain programs
· #936620 by reglogge, aspilicious: Fixed Vertical tabs broken in Seven theme for RTL
· #1038934 by tsi: Add missing RTL styling for system messages.
· #1040190 by 1V: Fix typo in comment for cookie_domain in settings.php
· #789186 follow-up by eojthebrave: Better documentation for drupalPostAJAX()
· #1041484 by 1V: INSTALL.sqlite.txt cleanup of documentation.
· #1041512 by 1V: Add .zip mention in README.txt.
· #932426 by duellj: Fix second file uploaded is displayed when display option is unchecked.
· #1018714 by effulgentsia: Fixed Image Upload Widget Not Working in IE8
· #1036718 by montesq: incorrect watchdog log messages.
· #1036246 by Jody Lynn: typo in ajax.inc comment.
· #1024898 by ilo, amateescu: wrong definition of Bartik's fieldset description in css.
· #1016930 by joachim: too much space above vertical tabs fieldsets.
· #1001624 by pillarsdotnet: avoid 'Undefined index' notice in field_info_max_weight() function of modules/field/field.info.inc.
· #1037416 by Jody Lynn: typos in user-picture.tpl comment.
· #1027630 by jhodgdon: unclear documentation for 'custom' and 'locked' attributes for content type.
· #488062 by David_Rothstein: fixed some broken English.
· #973328 by gopherspidey, amateescu: special characters are encoded twice in taxonomy term title.
· #1024840 by Jody Lynn: whitespace fixes for field module.
· #1027762 by droplet: remove non necessary space.
· #740182 by aspilicious, tsi, yoroy, casey, realityloop, Jeff Burnz: toolbar and shortcuts lack RTL styling.
· #1014708 by bfroehle, thekevinday: hook_field_read_field() reference parameter problem.
· #460448 follow-up by ridgerunner: Further optimize CSS aggregation regex.
· #1015012 by sun: Fix URL filter so that it recognizes valid URLs with # in them, e.g. twitter.
· #488062 by catch, walkah, spiderman, paul.lovvik, klausi: speed up OpenID by using GMP instead of BCMath if available.
· #1015150 by redndahead: clean-up 'getsize' remnants since it has been removed.
· #997884 by jhodgdon: improved t() documentation.
· #1019922 by Jody Lynn: corrections to the comment_access() function description.
· #674352 by jersu: correct variable name.
· #1016458 by Jody Lynn: code style cleanup of aggregator.module.
· #1015650 by droplet: use of example domain(s) in CHANGELOG.txt.
· #971812 by mfb: aggregator should interpret Atom entry id as equivalent to RSS item guid.
· #930000 by jhodgdon, bleen18: show(), hide(), and render() documentation is misleading.
· #375064 by c960657, catch: Performance: Multilanguage checking on admin/content/node slow.
· #1023742 by pillarsdotnet: remove cruft from user_save().
· #1014762 by jhodgdon: hook_entity_info() documentation outdated.
· #924982 by swentel: alignment of dashboard block titles.
· #1021724 by droplet: documentation problem with forum-icon.tpl.php.
· #1022426 by bfroehle: _registry_update() invalid arguments to ->rollback().
· #1001242 follow-up by bfroehle, Steven Jones: Fix EXISTS tests for SQLite and PostgreSQL.
· Back to 7.0-dev
January 5th, 2011· #1006302 by aspilicious, bfroehle: Fixed can't install projects packed as zip in Update Manager.
· #971120 by bec, dereine, bojanz, chx: Fixed Radio button values get run through check_plain() twice
· #986992 follow-up by yched, saintiss: Fix to field_sql_storage_update_7001().
· #1001242 by agentrickard, pwolanin, Crell, chx: Add DBTNG support for EXISTS conditions.
· #1008628 by plach: Fixed Fatal error: Call to undefined function language_negotiation_get_switch_links() when using only one language
· #1010376 by danillonunes: Fixed drupal_add_js() documentation makes reference to drupal_add_css()
· #1011496 by danillonunes: Fixed Duplicate comment line for drupal_render_cid_parts()
· #1003828 by rfay: Fixed Drupal.ajaxError may itself throw an exception, causing silent 'AJAX Error 0' events
· #1011308 by droplet: Fixed Call to undefined function decode_entities IN common.inc
· #1003968 by David_Rothstein, jhodgdon: Fixed Explain in INSTALL.txt that on some servers, the automated settings.php creation isn't expected to work
· #761212 follow-up by jbrown: Better method of changing to DRUPAL_ROOT.
· #1006478 follow-up by Stevel: Fix table prefixes to prevent random testbot failures.
· #987384 by h_peter, jhodgdon: Fixed Topics/groups in D7 need cleanup
· #1012822 by dww: Fixed exception handling while downloading/verifying a tarball in update manager.
· #1005934 by rfw, dww: Fixed UpdateTestUploadCase->testUploadModule() raises an exception during testing with E_STRICT
· #936490 by dww, fago: Fixed Update module should verify downloaded tarballs and propagate errors correctly
· #754760 by sun, chx, dmitrig01, manarth, EvanDonovan, derjochenmeyer, joachim: Fixed all possible problems with comment links, using new generatePermutations testing function.
· #1009862 by neclimdul, threewestwinds: Update to jQuery UI 1.8.7
· #1008022 by droplet, jhodgdon, aspilicious: Fixed search-block-form.tpl.php refers to ['submit'], which no longer exists
· #994870 by sun: Fixed Custom #type machine_name 'exists' callbacks cannot access other form elements/values
· #1012138 by tstoeckler: Fixed hook_init() example violates what doc says to do
· #969456 follow-up by effulgentsia, threewestwinds: Upgrade jQuery Form library to 2.52.
· #997802 by David_Rothstein, dww: Fixed Update manager doesn't allow you to install a project if it finds a single 'broken' module in it
· #1010506 by dww, chx, hgurol: Fixed FileTransfer doesn't properly handle any advanced settings nor the ssh username
· #1013058 by bfroehle: Fixed SSH connection class has wrong port in error string.
· #686060 by Crell, David_Rothstein, dww, yoroy, carlos8f, et al: Fixed Explain that the Update manager only works if you have FTP or SSH access to your server
· #976328 by bfroehle, dww: Fixed Update manager should not take you out of maintenance mode unless you asked it to
· #904214 by moshe weitzman: Fixed administer comments does not respect node access.
· #295697 by boombatower, maartenvg, agentrickard, bfroehle, beeradb: Fixed warn of PHP memory limit < 64MB for Testing module.
· #989366 by jhodgdon: Improved documentation of hook_date_formats()
· #925398 by ptrl: Fixed Overlay title jumps when active
· #746470 by follow-up by aspilicious, Jacine, jbrown, sgabe, et al: Add border-radius for IE9 / Opera 10.50
· #589440 by Booba, willmoy, JanZ, pwolanin, mlncn: Fixed Reordering fails with more than 31 book pages in a book
· #992376 by larowlan: Fixed Paths containing a hyphen aren't compatible with page theme_hook_suggestions
· #1007488 by Gábor Hojtsy, plach, droplet: Fixed Drupal cannot be installed in a non-predefined language
· #987384 follow-up by h_peter, jhodgdon: Further clean-ups to group topics.
· #989886 by bfroehle: Fixed _system_date_format_types_build improper use of in_array()
· #989366 follow-up by jhodgdon: EVEN better docs for format_date() and friends.
· #1013496 by Dave Reid: Remove Dave Reid as update.module maintainer. :(
· #1000610 by markabur, Jeff Burnz: Fixed borked Bartik comment layout.
· #1012914 by dww: Fix regex in Updater classes.
· #884960 follow-up by bfroehle: Remove phantom empty column on date settings.
· #932846 by bfroehle, dww: Fixed authorize.php connection settings form broken (doesn't degrade, pointless fieldset)
· #988026 by Jeff Burnz: Fixed Move background color from body to #page-wrapper in Bartik
· #916086 by mcarbone, jhodgdon: Fixed search_excerpt() doesn't highlight words that are matched via search_simplify()
· #1013808 by threewestwinds, redndahead: Fixed update.php displays misleading messages for modules that return no messages.
· - Patch #1014096 by chx: don't load schema on every page view.
· - Patch #1000674 by Jeff Burnz, jensimmons: Bartik comment submit form is a bit janky.
· #1014170 by rooby: Fixed East Timor is now Timor-Leste.
· #994870 follow-up by eaton: Add missing element argument to machine name exists callback.
· #1014714 by janusman: Fixed Installer-created Home item on main-menu not translatable
January 2nd, 2011· We are proud to present to you the fourth (and likely final) release candidate of Drupal 7.0. This is a bug fix release for some critical upgrade path issues.
· We're back down to 0 critical issues again!
· We've announced a January 5 release date for Drupal 7!
· There are release parties being thrown worldwide on January 7. Please set one up in your town! (tips)
· So. It's officially GO time for final testing!
· Since the last release candidate a week ago, we have fixed numerous bugs, including bugs with PostgreSQL and a critical issue with the password upgrade path which corrupts password hashes. Affected sites' users will need to reset passwords after their second log-in. Sorry about that!
December 27th, 2010· Since the last release candidate two weeks ago, we have fixed numerous bugs, improved the AJAX framework, field UI etc. Also alternate database systems have seen serious improvement thanks to http://ci.drupal.org/. PostgreSQL 9.0 now installs without errors, and we have 100% tests passing on SQLite! And files[] is no longer required in .info files for each file! Only if the file in question registers a class or interface. $cruft--;
June 3rd, 2010· Our fourth Drupal 7 alpha version was released just over a month ago. Today, we're proud to announce the release of the fifth alpha version of Drupal 7.x for your further testing and feedback. The first alpha announcement provided a comprehensive list of improvements made since Drupal 6.x, so in this announcement we'll concentrate on how you can help ensure that Drupal 7 is released as soon as possible and is as rock solid as the previous Drupal releases that you've grown to love!
· This release includes many critical bug fixes, especially around the upgrade path, security issues, JavaScript, performance, and other areas.
June 3rd, 2010· Drupal 6.17, a maintenance release fixing issues reported through the bug tracking system, is now available for download. There are no security fixes in this release. Upgrading your existing Drupal 6 sites is recommended. For more information about the Drupal 6.x release series, consult the Drupal 6.0 release announcement.
· Highlights of changes in this release include improvements of session cookie handling, better processing of big XML-RPC payloads, improved PostgreSQL compatibility, better PHP 5.3 and PHP 4 compatibility, improved Japanese support in search module, better browser compatibility of CSS and JS aggregation and improved logging for login failures. An incompatibility of Drupal 6.16's new lock subsystem with some contributed modules was also resolved. In total there were about 55 patches committed to improve Drupal 6.
· The full list of changes between the 6.16 and 6.17 releases can be found by reading the 6.17 release notes. A complete list of all bug fixes in the stable DRUPAL-6 branch can be found at http://drupal.org/project/cvs/3060/?branch=DRUPAL-6.
· Given enough bug fixes (not just bug reports) more maintenance releases will be made available.
May 10th, 2010· Color module now usable by themes other than Garland.
· Usability improvements including re-weightable roles and saner Forum module defaults.
· A variety of optimizations made to data import-related functions to make migrations faster.
· Lots of previously missing documentation for hooks has now been documented. Hooray!
· Increased test coverage, particularly core Tokens.
· Lots of smaller bug fixes, security patches, and improvements.
January 17th, 2010Revamped User Interface:
· An incredible amount of work has gone into improving the user experience and administration interface. The new administration theme "Seven", the overlay module, the dashboard and the configurable shortcut bar, all lead to a much more user-friendly interface. In-place editing is enabled for blocks and nodes by default, so modifying the content of a site becomes much simpler.
Custom Fields:
· Drupal 7 bundles in the ability to add custom fields, similar in functionality to the Content Construction Kit (CCK) module. However, fields are no longer limited only to content types; they can be added to users, taxonomy terms, and other entities. Fields also have support for translations.
Image Handling:
· Drupal 7 brings native image handling to core. Image fields may be added to content, and have image styles applied to them, such as scaling, cropping, and other effects.
Update Manager:
· Building on Drupal 6's Update module, which keeps site administrators informed when new module and theme releases are available, the new Update Manger module can also install and upgrade modules and themes.
Front-end "under-the-hood" improvements:
· A new render API allows for highly granular theming, core template files have been revamped to provide more semantic markup, Drupal 7 now has built-in RDFa support, includes jQuery UI and a new AJAX framework, and a new core theme "Stark" which exposes Drupal's markup directly for those who want to dive in and start theming.
· In addition, Drupal 7 has several major accessibility enhancements, making it the most accessible release of Drupal to date!
Back-end "under-the-hood" improvements:
· A revamped database layer resolving nearly all limitations in the Drupal 6 database layer, automated testing framework, new PHP stream-based file API that supports private and public files simultaneously, revamped node access system, new hooks for more flexible system interaction, an Entity API, a job queue API, and many, many, many more improvements.
· Drupal 7 is also the most scalable release to date, with features such as built-in proxy server support, advanced caching techniques, and Content Delivery Network support for static files.
December 17th, 2009· Maintenance release which fix issues reported through the bug tracking system, as well as non critical security vulnerabilities, are now available for download. Both releases fix other smaller issues as well.
September 17th, 2009· This release fixes security vulnerabilities. Sites are urged to upgrade immediately.
In addition to this security vulnerability, the following bugs have been fixed since the 6.13 release:
· #482646 follow up by Dave Reid: only check the db prefix for simpletest if it was a string (not running a multisite)
· #284392 by Passionate_Lass, Anselm Heaton, tassoman, agentrickard: DISTINCT handling in db_distinct_field()'s MySQL implementations was resulting in bogus queries
· #310139 by fonant, c960657, pwolanin: drupal_urlencode() and Drupal.encodeURIComponent was used to encode query strings and other components it should not have been used for
· #499254 by chx: Drupal lacked support for positive integer values in database queries, beyond PHP_INT_MAX; caused issues with twitter integration and big numbers in general
· #392688 by will_in_wi, jeffschuler, jhodgdon: document type argument on action_save()
· #293322 by minorOffense: Incorrectly documented parameter name on flood_is_allowed()
· #265265 by neochief, jhodgdon: missing phpdoc @code tags on PHP code examples in form.inc and actions.inc
· #409994 by Wesley Tanaka, jhodgdon: better documentation on how the cid and wildcard arguments interact on cache_clear_all()
· #495964 by jhodgdon: theme_admin_block_content() had wrong argument name documented
· #506096 by axjo: node.tpl.php mistakenly mentions theme_user(); should reference theme_username() instead
· #280240 by skiminki, casperbiering, anypost, pwolanin: Only add Content-Length if we actually have any content or if it is a POST or PUT request.
· #359276 by lyricnz, Heine, Frando: Fix named entity handling in filter_xss(), so it does not clash with other entities and result in wrong encoding
· #454462 by JohnAlbin: MODULE_preprocess_maintenance_page() functions were never called, even if the database is online
· #276615 by JacobSingh, Robin Monks, mikeytown2: drupal_clear_css_cache() should not be called on all invocations to the themes admin page; should be called only on submit - consistent with the modules admin page
· #295895 by Michelle, JohnAlbin: Garland mistakenly used phptemplate_comment_wrapper() to override comment-wrapper.tpl.php; should use a preprocess function instead to complement the core comment-wrapper.tpl.php
· #517606 by jerdiggity, JuliaKM: minimal whitespace fix in user.module
· #107824 by Frando, heyrocker, Dave Reid, AlexisWilke, andypost: the dblog referer and the statistics url columns were not in line with how we store URLs elsewhere (like the dblog location column); could result in data loss due to length truncation
· #480044 by JohnAlbin: fix system component listing lookup priorities, so the sites/all/* items will override the profile shipped items as documented
· #107824 follow up by myself: ensure that the newly added updates are in the 6.x-extra group and not disguised as 5.x to 6.x updates
· #302240 by fago: forms were rebuilt on validation errors and when #ahah was used #cache was turned on, but form storage was not actually stored
· #395132 by jhodgdon: Fix phpdoc comment on poll_node_form_submit(); there is no hook_submit() in Drupal 6 and this gets called based on the form's key
· #232321 by munzirtaha, brianV: There is no body field in the node table, so fix misleading example in database.inc to query for node.nid instead
· #315047 by Island Usurper, Crell, brianV, Josh Waihi: names of database columns were not escaped when changed; caused problems with using reserved words
· #334826 by maartenvg, Dave Reid, brianV: when editing an anonymous comment, the uid was set to NULL, which is not valid as a database value for the uid; set to zero
· #346450 by snoble, Damien Tournoud, Dave Reid, Josh Waihi, neilnz: the 'length' Schema API property was documented to be only applicable to string types but was applied to others nonetheless; should only apply to char, varchar and text
· #318453 by svdoord and ahmed.othman, slightly modified: ensure that the user registration guidelines show above form fields added by the profile module by setting a low enough weight
· #371458 by Gerhard Killesreiter, David Strauss, Damien Tournoud, smk-ka, catch, febbraro: add index on tab_root, weight and title in menu_router to improve performance of retrieving tabs
· #537276 by tic2000, alex.k: feed titles in blog_feed_user() and blog_feed_last() were concatenated English strings, lacked translatability
· #336627 by EliseVanLooij, Tresler, jhodgdon: node_type_form_validate() was documented to implement hook_form_validate() but is just a function called back due to how it is named after the form ID, no such hook exists
· #332890 by Alan D., sharda_ram, andypost: slightly better documentation for base_url in settings.php
· #530950 by catch, andypost: use !isset() instead of is_null() in user_access() to be consistent and more performant
· #215080 by robertDouglass, jaydub, drifter, Dave Reid, andypost: added index on system table's name and type column to improve bootstrap performance
· #470998 by cwgordon7, bleen18, Psicomante: Fix top padding for logo in Garland, so the logo is placed at the right position with the background
· #550770 by dww: bump year numbers in COPYRIGHT.txt to 2009
· #538032 by Gerhard Killesreiter, webchick: document the pcre limitation which might result in empty looking posts; include examples to fix on a Drupal deployment
· #493678 by threexk, tic2000: fix issue with disappearing Garland tabs in Internet Explorer
· #551574 by ramsey, emmajane: cross-link variable_*() functions via phpdoc @see comments
· #534480 by solotandem, jhodgdon: fix phpdoc documentation of what $delimiter means in drupal_get_content()
· #360830 by sammys: fix block update query in system_update_6027() which was casting block deltas to integers when filling in the cache values so did not apply to string deltas; fixed PostgreSQL incompatibility of the update
· #489762 by JohnAlbin: include subtheme and base theme list with processed theme .info file data; prerequisite to improve theme security and fix a possible WSOD on theme selection
· #292565 second follow up by John Morahan: fix login destination again on 403/404 pages and make the search form work there if displayed
· #290887 by atuyo60, Wanjee, Dave Reid: fix stale blog module permission that was left untouched in one place only, but renamed elsewhere
· #193383 by JirkaRybka, Arancaytar, Bart Jansens, gpk, TheRec: check correctly for function_exists() on set_time_limit() instead of infering that safe_mode has an effect on it or that that is the only thing which might disable time limit setting
· #228971 by maq0r, JuliaKM: as of December, 2007, Venezuela is GMT/UTC-0430, but that timezone was not in the list of our supported zones
· #555128 by Dave Reid: Fix node_access() return value to work how it is documented and include a slight performance improvement
· #447916 by jhodgdon: fix minor spelling error on taxonomy_check_vocabulary_hierarchy()'s phpdoc
· #228971 follow up by drumm: forward port -2.5h timezone from Drupal 5, made time zone list consistent with Drupal 5
· - Patch #578470 by jbrauer, Gabor, Dries: XML-RPC error handling was incomplete.
· #360605 by Berdir et al.: make Drupal core work with PHP 5.3.0 out of the box (fixes for incompatibilities introduced with PHP 5.3.0)
· #193366 follow up (rollback) by Anthony Hersey, Senpai, moshe weitzman: remove all cache clearing feature of the system module listing page; instead point to the performance page where we have a dedicated button for this; the trick caused lots of issues with speed
· #460594 by nonsie, LiliVG, elliotttf: node_assign_owner_action_form() limited username input to 7 characters, while usernames are limited to 60 chars
May 14th, 2009· This release fixes security vulnerabilities.
· SA-CORE-2009-006 - Drupal core - Cross site scripting
In addition to this security vulnerability, the following bugs have been fixed since the 6.11 release:
· #353328 by catch, BrianV: When a new commment is added, the redirection path should point to page, where the new comment is.
· #239945 by Xano, JeremyFrench, Damien Tournoud, andypost: Should not iterate over the children in taxonomy_get_tree() anymore if we reached max_depth.
· #292565 by grendzy, John Morahan, Jody Linn: remove path munging on 403/404 pages, which caused problems for login redirects
· #448268 by dww: Make sure that submitting the themes admin form clears out the update status cache, just like the modules admin form does.
February 26th, 2009· - Patch #298722 by pwolanin: _menu_translate returns FALSE before to_arg is available. Drupal.org upgrade blocker.
· #310863 by bangpound, dboulet, catch, lee20: Locale variable results in locale module install, so skip adding empty variable when not needed.
· #275796 by Gribnif, Damien Tournoud, Dave Reid, vaish: module_list() should set its static variable to NULL instead of unset()-ing it, so it does not retain its value
· #328110 by marcingy, swentel, Damien Tournoud, pwolanin, David_Rothstein: the link argument is passed by reference to menu_link_save(), so avoid overwriting local variables in menu_enable().
· #62926 by karschsp: increase the free tagging field maximum length to 1024; the database limits are per-tag.
· #220559 by eMPee584, Desbeers, Damien Tournoud: only ever add the active class to links in l() and theme_links(), if the language was set and is the current language or if the language was not set on the link
· #365183 by Eaton: node_feed() did not use the same API functions as node_view() did, so custom fields were missing from the output
· #356721 by c960657, Dave Reid: remove static caching of the clean URLs setting in url() to help automated tests; the setting is cached through variable_get(), which however allows altering of the setting
· #290282 by kratib, jvandyk, ainigma32: Only track/limit the recursive invocations of actions_do(), instead of tracking/limiting them all.
· #320395 by qutoz, swentel: Set node format to 0 in node_submit() if the body was turned off to avoid a minor notice.
· #359918 by Dave Reid: database.inc documents the 'unique key' key, while it should be 'unique keys'
· #152098 by hunthunthunt, mgifford, Dave Reid: add 'for' attribute to 'label' tags on checkboxes and radio buttons, even if the 'label' wraps the element - accessibility best practice
· #314286 backport of some of #229129 by assimonds: disbaled checkboxes did not receive their values properly from the default value set
· #243524 by christefano, chx: our phpinfo page was very limited; give all info possible instead
· #203323 by JirkaRybka, robertgarrigos, lilou, thePanz, c960657, sun: move the LANGUAGE_* constants to bootstrap.inc and remove several defined() checks on them now that they are always defined
· #276174 by nbz, John Morahan, slightly modified: do not escape username more then once at multiple places in blog.module
· #310768 by bob_hirnlego, cdale: missing primary table and field specification in db_rewrite_sql() when called from taxonomy_overview_terms()
· #363262 by catch, chx: in Drupal 6, the url_alias table introduced a language column, but did not extend its index to that; though queries are formed on src and language
· #326210 by AlexisWilke, grendzy, jhedstrom: Take the menu item in its first submission and menu_nodeapi() by reference, so that any modifications of the item in the saving process will carry over to other submit handlers; making itpossible to write modules extending menu item manipulation
· - Patch #383318 by mr.baileys: incorrect memory shortage warning when memory limit is unlimited.
· #337162 by midkemia and ainigma32: keep the Drupal 5 menu items descriptions when upgrading to Drupal 6
· - Patch #381438 by drumm: do not use page cache for drupal.sh requests.
· #109588 by fago, cdale: use the existing user account objects instead of arg() checks, as well as fix use of where it should be
· #296082 by jandd, stefanor, nigel: avoid table aliasing in UPDATE query in system_update_6001() since PostreSQL does not support that
· #376408 by ajevans85, pwolanin: Prevent an empty anchor tag and parenthesis appearing in the output for the search index in search_nodeapi()
· #383724 by Heine, bjaspan: SA-CORE-2009-003
Find us on Google+
