ClassicPress 2.7.0

ClassicPress 2.7.0 is available now - use the "Source code (zip)" file below.

Here are the highlights from this release:

Notable changes since ClassicPress 2.7.0-rc1

New Features

• Added core support option for APCu object cache
• Converted core widgets to vanilla JavaScript
• Introduced more Performant Translations
• Add view transitions throughout Admin

Security Fixes

• A Blind SSRF issue reported by sibwtf, and subsequently by several other researchers while the fix was being worked on
• A regex DoS weakness in numeric character references reported by Dennis Snell of the WordPress Security Team
• A stored XSS in nav menus reported by Phill Savage
• An AJAX query-attachments authorization bypass reported by Vitaly Simonovich
• A stored XSS via the data-wp-bind directive reported by kaminuma
• An XSS that allows overridding client-side templates in the admin area reported by Asaf Mozes
• A PclZip path traversal issue reported independently by Francesco Carlucci and kaminuma
• An XXE in the external getID3 library reported by Youssef Achtatal

Minor changes and bugfixes since 2.6.0

• Fixed typo in deprecated argument message
• Ensure custom comment form fields appear for logged-in users
• Show audio and video files when loaded to widgets by URL
• Updated CA bundle to v1.5.10
• Fixed text in Media library grid view Help tab
• Fixed The ClassicPress Theme mobile nav menu and add i18n
• Upgraded SimplePie to 1.9.0
• Improved clone ID handling in widget drag-and-drop
• Refactored APCu object cache setting with handler class
• Added polyfills for two block-related functions
• Added admin notice to use ClassicPress directory plugin
• Added focus check before hiding theme actions
• Revise logic for plugin compatability notices and consider tags
• Reverted inadvertent changes to plupload.js
• Fixed console errors in Customizer file selectors
• Enable APCu caching when cp_object_cache option is created
• Added Link Manager and APCu options in schema.php
• Instantiate JavaScript in inactive Text and Custom HTML widgets
• Added visibility to WP hosted plugins tagged "ClassicPress"
• Removed unnecessary dependency handling for non-included packages
• Fixed Attachment Details Modal layout when ACF plugin is active
• Show categories and tags by name in Media modals
• Fixed backward compatibility of fetch_feed()
• Updated PHPMailer to 7.0.0
• Improved contextual help in Menu, Settings and Upgrade screens
• Updated CodeMirror to latest v5 version
• Added polyfill for do_blocks()
• Fixed display issue of Attachment Details modal on small screens
• Show Directory Integration message in About screen conditionally
• Show categories and tags name in Edit screen media modals
• Fixed strings for Autosave type in Revisions
• Fixed warning in Media when attached post is deleted
• Fixed WP-CLI issues with APCu object cache enabled
• Updated position input field after Menu item drag and drop
• Fixed blocks compatibility notices on Win filesystem
• Fixed ID column display in Revisions page on small screens
• Fixed string in recovery mode email
• Updated footer layout in revisions modal
• Moved search box above tables in admin on small screens
• Prevent scaling issues on featured images in Twenty Seventeen
• Added homepage widget area in The ClassicPress Theme
• Updated The ClassicPress Theme template files
• Bumped The ClassicPress Theme version to v1.2.0
• Respect reduced motion settings in View Transitions in admin
• Initialize Thickbox variables to prevent ReferenceError
• Improved Theme Search bar placement in admin on small screens
• Updated template files in The ClassicPress Theme
• Bumped Twenty Seventeen Theme version to 99.3.1
• Fixed HTML in search and 404 templates in The ClassicPress Theme

Build and Testing Changes

• Exclude legacy certificate file from release checks
• Introduced FileSystem unit tests
• Refactored and simplified webpack build processes
• Reduced thresholds for object cache threshold tests
• Extended eslinting to webpack files
• Switched to shogo82148/actions-setup-mysql GitHub Action
• Added MariaDB testing and introduced reusable testing

More information

See the release announcement post on our forums for more details, or have a look at the full changelog here on GitHub:

ClassicPress/ClassicPress@2.7.0-rc1+dev...2.7.0+dev

ClassicPress 2.7.0-rc1

ClassicPress 2.7.0-rc1 is available now - use the "Source code (zip)" file below.

Here are the highlights from this release:

Notable changes since ClassicPress 2.6.0

• Added core support option for APCu object cache
• Converted core widgets to vanilla JavaScript
• Introduced more Performant Translations
• Add view transitions throughout Admin

In addition, this version also includes security fixes, library dependency updates and several other enhancements and bug fixes.

More information

See the release announcement post on our forums for more details, or have a look at the full changelog here on GitHub:

ClassicPress/ClassicPress@2.6.0+dev...2.7.0-rc1+dev

ClassicPress 2.6.0

ClassicPress 2.6.0 is available now - use the "Source code (zip)" file below.

Here are the highlights from this release:

Notable changes since ClassicPress 2.5.0

New Features

• Added polyfills for PHP 8.5 functions array_first and array_last

• Added strategy parameter support for wp_enqueue_script()

• Added support for inline attachments in wp_mail

• Enabled the enqueueing of JavaScript modules

• Updated Twemoji support to v16

• Added support for PHP 8.5

• Introduced ability to delete post and page revisions

Minor changes and bugfixes since 2.5.0

• Backport of security fixes from WordPress 6.8.3
• Fixed initialization of imgAreaSelect when cropping a header image or a site icon or logo.

• Ensure password is reverted to password input type upon submission

• Set correct canonical admin URL
• 
Added post-migration notification to Welcome screen
• Prevent TinyMCE duplication in Customizer text widgets
• Use HTML5 for display of date and time on Edit Comment screen

• Copy attachment properties on site icon crop

• Improved Theme Editor menu label

• Improved compatibility notices for plugins

• Improved Help tab content in several admin areas

• Improved option descriptions in Media Settings page

• Optimized SQL for custom field retrieval on editing screens

• Refactored translation domain iteration for updates
• Added User Groups to admin menu

• Added i18n support for FilePond uploader modal
• Update About and Freedoms screens

• Fixed logged undefined array key warning in Revisions

• Added i18n support for screen reader text in FilePond uploader
• Restored Theme file editing on Windows servers
• Removed duplicate id names in HTML elements on Page tables
• Improved tests for mail embeds using a dataProvider
• Update site health and privacy settings pages to use HTML5
• Keep revisions timeline within screen boundaries
• Removed unused reference to nav menu template in CP Theme

• Fixed upload rename loop in FilePond uploader
• Moved L10n strings for media-grid and Filepond to script-loader

• Corrected media grid order and display after page manually chosen
• Fixed box-shadow when Plugin list contains block information

• Eliminated 404 for mediaelement icon sprite

• Moved .mejs-overlay-button padding to wp-mediaelement.css
• Applied optional chaining in media.js to avoid console errors

• Added null checks in autosave.js for content, title, and excerpt

• Refactored widget title assignment with conditional check
• Ensure Encoding is reset to 8-bit in wp_mail()

• Fixed use of null as an array offset in WP_Date_Query

• Updated mediaelement dependency to v7.1.0

• Improved multipart message handling in wp_mail()
• Removed en_US locale from core update link
• Backported several PHP 8.5 coding enhancements
• Removed wp-pointer dependency for widgets CSS in script-loader
• Check mediaCatSelect exists before adding styling

• Ensured Update URI cannot be bypassed

• Fixed category selector in Editor

• Keep Clear Inactive Widgets button active when appropriate

• Dynamically initialize Audio widgets in admin

Build and Testing Changes

• Updated caniuse-lite in package-lock.json
• Added coverage check to external-http PHPUnit job
• List distributed dependencies correctly
• Introduced Grunt task for updating Root Certificates

• Added mediaelement as dependency and introduced build steps

• Refactored emoji build to use async API calls
• 
Updated CONTRIBUTING.MD documentation

• Added PHP 8.5 test jobs

• Updated ECMAScript version to 11 in lint configurations

• Updated precommit workflow action

Deprecation notices

• wp-pointer stylesheet will be removed in a future version

More information

See the release announcement post on our forums for more details, or have a look at the full changelog here on GitHub:

ClassicPress/ClassicPress@2.5.0+dev...2.6.0+dev

ClassicPress 2.5.0

ClassicPress 2.5.0 is available now - use the "Source code (zip)" file below.

Here are the highlights from this release:

Notable changes since ClassicPress 2.4.1

New Features

• Introduced polyfills for new array functions in PHP 8.4
• Enabled touch navigation in Media Grid
• Add core translation file update checks and updates
• Rewrote Media Image widget in vanilla JavaScript
• Rewrote Media Gallery widget in vanilla JavaScript
• Rewrote Media Audio widget in vanilla JavaScript
• Rewrote Media Video widget in vanilla JavaScript
• Rewrote Playlist widget in vanilla JavaScript
• Added ‘Initials’ and ‘Color’ Gravatar support and enforced HTTPS

Minor changes and bugfixes since 2.4.1

• Updated a few instances of WordPress to ClassicPress
• Updated layout of freedoms and URL link
• Updated plugin compatibility string in update-core.php
• Fixed FilePond dropzone bottom border styling
• Fixed URL link to update information in dashboard
• Fixed attachment id extraction when deleting in Media Grid
• Fixed Media grid default number of items for pagination
• Updated core theme Theme URI locations for the Directory
• Fixed core theme jQuery deprecation console notice
• Frontend styling enhancements for The ClassicPress Theme
• Added text domain for localization in CP-Pepper plugin
• Enhanced Media Grid file data display for mobile devices
• Widget enabled the footer area of The ClassicPress Theme
• Update Media Grid after successful file uploads
• Updated upload.php to add ID for aria-describedby attribute
• Respect user permissions when editing and deleting in Media Grid
• Refactored Media image widget to vanilla JavaScript and PHP
• Refactored Media gallery widget to vanilla JavaScript and PHP
• Refactored Media audio widget to vanilla JavaScript and PHP
• Refactored Media video widget to vanilla JavaScript and PHP
• Restored use of parent class update() function in Image Widget
• Fixed 404 for default favicon
• Use consistent link name to Support Forums in admin Help tab
• CSS updates for The ClassicPress Theme
• Improved formatting of user taxonomy terms on user-edit page
• Updated privacy information in Admin
• Update internal links to Privacy information
• Restore visibility to maximum upload file size in Filepond
• Improvements to Media Quick Edit Layout
• Remove unnecessary escaping from Block Compatibility tests
• Make media grid attachment details modal header sticky
• Updated gallery.js to correct JavaScript typo
• Fixed workflows status badges in README.md
• Ensure video can be added to media video widget
• Pattern-based HTML5 validation for date/time text inputs
• Applied consistent whitespace in Quick Edit admin screens
• Applied “box-sizing” for radio inputs in media dialog
• Fix ID column display in tables on mobile devices
• Ensured post__(not_)in is an array in wp_ajax_query_attachments()
• Multiple Fixes for Quick Edit in Media Library
• Simplified user capability checks in upload.php
• Added attachment ID as data element in media grid
• Replaced an empty foreach loop in wp_replace_in_html_tags()
• Protect comments in editor content when switching tabs
• Improved keyboard navigation in Themes modal
• Button enhancements to stylesheet for The ClassicPress Theme
• Updated and improved editor styling for The ClassicPress Theme
• Updated Site Health page with Block Compatibility information
• Prevent multiple AJAX submissions in Quick Edit
• Updated information URL for Custom Login images
• Removed tags from Customizer modal for new WP themes
• Updated PHPMailer to v6.10.0
• Fixed font loading in Editor for The ClassicPress Theme
• Added metadata into wp_prepare_attachment_for_js() array
• Re-enabled the Media Library for the text widget
• Improved uploaded file handling in FilePond
• Updated some plugin compatibility strings for consistency
• Ensured TinyMCE is always displayed in Text widget
• Fixed color picker sliders in Customizer
• Fixed PHP warnings in Media widgets when content has been deleted
• Limit loading of widgets.css in Admin
• Fixed content attribution dropdown when a user is deleted
• Improved HTML markup implementation on the plugin install page
• Abstracted core update logic into classicpress_has_update()
• Implemented Revisions without backbone.js dependency
• Updated password checks for compatibility with WordPress 6.8
• Implemented Theme screen without backbone.js dependency
• Ensured Code Mirror loads in Custom HTML widget
• Replaced $cp_needs_update with $cp_has_update in themes.php
• Replaced $cp_needs_update with $cp_has_update in ajax-actions.php
• Removed redundant function from media widgets
• Enhancements and fixes for the ClassicPress Theme
• Attempted tighter file permissions for wp-config.php at install
• Fixed PHP notice in Activity widget for inactive CPT content
• Fixed for images deleted from Media Library in Gallery Widget
• Selectively updated for Twenty Seventeen theme fork
• Fixed empty primary menu display in The ClassicPress Theme
• Protected against unnecessary polyfilling for FAIR plugin
• Fixed PHP notices for Comments in inactive Custom Post Types
• Limited API calls in class-wp-plugins-list-table.php
• Updated some ClassicPress documentation links
• Fix core CSS layout for media playlists * Track length layout adjustments for core themes
• Bundle Google Fonts locally in TwentySeventeen theme
• Check for development builds the ClassicPress way
• Added $cp_version to development build check
• Fixed custom media tag autocomplete
• Bumped The ClassicPress Theme version to 1.1.1
• Fixed playlist hover display in TwentySeventeen theme
• Fixed empty Media Category dropdown
• Further track length layout adjustments for core themes
• Disabled installation of incompatible themes
• Enabled keyboard scrolling in The ClassicPress Theme
• Fixed alignment of caret in tags input field
• Fix “Activate” theme link and success notice
• Fixed aria-label in theme page
• Prevent activation of incompatible installed theme
• Set max_upload_size to 2MB if filter is not an integer
• Prevent upload by Media Category if category is unselected
• Improved display of warnings for incompatible theme updates
• Fixed menu and misc minor changes in The ClassicPress Theme
• Added backporting info to readme file of TwentySeventeen Theme
• Bumped stylesheet version in The ClassicPress Theme
• Fixed playlist shortcode when first playlist is broken
• Fixed plugin display borders for block notices

Build and Testing Changes

• Addressed skipped PHPUnit tests and warnings
• Excluded languages directory from phpcs checks
• Updated two GitHub tests to use current PHP version
• Extended JavaScript linting to more core files
• Added SortableJS as package dependency
• Updated PHPUnit workflow runs to use concurrency
• Updated bug report template to account supported PHP version
• Updated inline documentation in .github folder
• Updated Coding Standards workflow to use PHPUnit installed by composer
• Tightened workflow access permissions
• Separate multisite testing in PHPUnit workflows

More information

See the release announcement post on our forums for more details, or have a look at the full changelog here on GitHub:

ClassicPress/ClassicPress@2.4.1+dev...2.5.0+dev

ClassicPress 2.4.1

ClassicPress 2.4.1 is available now - use the "Source code (zip)" file below.

Here are the highlights from this release:

Notable changes since ClassicPress 2.4.0

This is a maintenance release.

Minor changes and bugfixes since 2.4.0

• Fixed broken sprintf() call when deleting a backup
• Fixed postboxes is not defined console error
• Fixed fatal PHP error when listing incompatible plugins
• Bootstap ClassicPress earlier for WP-CLI so $cp_version is scope in time
• Remove unnecessary extra 10px width for images in HTML5
• Restored drag & drop functionality in media galleries
• Fixed editor woff2 file location in The ClassicPress Theme

Build and Testing Changes

• Updated to use official grunt-sass package release

More information

See the release announcement post on our forums for more details, or have a look at the full changelog here on GitHub:

ClassicPress/ClassicPress@2.4.0+dev...2.4.1+dev

ClassicPress 2.4.0

ClassicPress 2.4.0 is available now - use the "Source code (zip)" file below.

Here are the highlights from this release:

Notable changes since ClassicPress 2.3.1

New Features

• Added Support for AVIF image format
• Added “Copy” button to “All Settings” screen
• Added a user option to enable Link Manager

Minor changes and bugfixes since 2.3.1

• Upgraded PHPMailer to version 6.9.3
• Added d.m.Y to date format presets on General Settings screen
• Updated edit.css to correctly align headings in List Manager
• Backport of grouped PHPStan fixes
• Restore Comment_Walker::comment function
• Updated copyright year in license.txt
• Removed usage of mysql2date in generate_postdata method
• Improved _load_textdomain_just_in_time() logic when there are no translation files
• Create a temporary backup of plugins and themes before updating
• Automatically add fetchpriority="high" to hero image to improve load time performance
• Updated jQuery libraries & fixed notice in QUnit tests
• Backported *_admin_notice() functions
• Removed default Sortable.js outline on some admin pages
• Improve plugin compatibility notice wording
• Declare The ClassicPress theme as a default theme
• Eliminated erroneous restore backup notice
• Ensure images are displayed in Media List View
• Preserve post_author when bulk editing media attachments
• Preserve metabox classes when defining open attribute
• Enable image sorting in gallery widget via drag and drop
• Update social menu icons and header info in TwentySeventeen
• Ensure LOGGED_IN_COOKIE is not validated when installing
• Added “plugins” link in admin bar menu
• Corrected some admin strings for accuracy and clarity
• Fixed display of wrong author in media grid mode
• Corrected alignment of input boxes in media list quick edit
• Improvements to Media Quick Edit Functionality
• Improved callback efficiency in Walker_Nav_Menu
• Updated the 4 freedoms in freedoms.php
• Resolved console errors when deactivating all dashboard widgets
• Prevented multiple race conditions in Media Library
• Simplified error message on password reset email failure
• Amended contextual help information on plugin install screen
• Enabled saving of posts and pages by keyboard shortcuts
• Fixed incorrect web links in credits.php
• Several enhancements for The ClassicPress Theme
• Replaced jQuery with vanilla JavaScript in wp-medialement.js
• Made Media dialog pagination and navigation screen responsive
• Ensured Imagick quality is set correctly
• Added invalid password message for post passwords
• Fixed a JavaScript syntax error in media-grid.js
• Update object_relationships when changing featured image
• Fixed pagination in grid mode when Media Library is empty
• Prevent media grid collapse on bulk-selection
• Fix undefined index warning when uploaded files have no author
• Addressed bugs in Arrow navigation within Media Grid modal

Build and Testing Changes

• Ensured pepper.php is not included in builds
• Updated release builder script to update Docs site
• Updated release builder script to new Magic command syntax
• Added Docker Login step to Workflow action
• Restore skipped test resizing avif image

More information

See the release announcement post on our forums for more details, or have a look at the full changelog here on GitHub:

ClassicPress/ClassicPress@2.3.1+dev...2.4.0+dev

ClassicPress 2.4.0-rc1

ClassicPress 2.4.0-rc1 is available now - use the "Source code (zip)" file below.

Here are the highlights from this release:

Notable changes since ClassicPress 2.3.1

This version introduces:

• Support for AVIF image format
• A “Copy” button to “All Settings” screen
• A user option to enable Link Manager

In addition, this version also includes fixes and enhancements to the Media Library and Meta boxes in the Dashboard and content editing pages.

Please test these areas and help us shake out any final bugs!

More information

See the release announcement post on our forums for more details, or have a look at the full changelog here on GitHub:

ClassicPress/ClassicPress@2.3.1+dev...2.4.0-rc1+dev

ClassicPress 2.3.1

ClassicPress 2.3.1 is available now - use the "Source code (zip)" file below.

Here are the highlights from this release:

Notable changes since ClassicPress 2.3.0

Minor changes and bugfixes since 2.3.0

• Fixed TypeError passing jQuery object when element expected

Build and Testing Changes

• Updated several build dependencies

More information

See the release announcement post on our forums for more details, or have a look at the full changelog here on GitHub:

ClassicPress/ClassicPress@2.3.0+dev...2.3.1+dev

ClassicPress 2.3.0

ClassicPress 2.3.0 is available now - use the "Source code (zip)" file below.

Here are the highlights from this release:

Notable changes since ClassicPress 2.2.0

New Features

• Added option in General Options to disable XML-RPC
• Added option in General Options to disable Emoji
• Replaced the media library grid view
• Added core support for PHP 8.4

Minor changes and bugfixes since 2.2.0

• Upgraded SimplePie to 1.8.0
• Improved string representation for translators in AJAX
• Ensure required file system functions are available when using CP Pepper plugin
• Fixed link to volunteer information in Dashboard
• Removed excessive branding in Privacy Policy Guide
• Updated file list for release integrity checks
• Add placeholders to i18n strings in object-relationships.php
• Populated cp_db_version on new installations
• Ensured that Safari indicates when a button has focus
• Restrict range input control styling on the Revision screen
• Prevent Firefox reporting that Autosave contains a later version
• Add a README to CP Pepper Password Plugin for directory listing
• Fix undefined variable error in Customizer from common.js
• Updated file size meta data when editing images
• Updated saving and updating of widgets to use the Fetch API
• Removed Safari fallbacks from SortableJS
• Fixed for PHP error for password reset cookie
• Enabled background images for non-image files in Media Library
• Ensured trailing slash in get_pagenum_link() is not forced
• Upgraded PHPMailer to version 6.9.2
• Allow uploads to have empty filesizeHumanReadable property
• Updated the Requests library to version 2.0.11
• Added Ajax pagination in the new Media Library grid view
• Ensured Custom panels show as intended in the theme Customizer
• Increased setTimeout to locate tabbable elements in Image Editor
• Modernised SCSS structure to avoid deprecation warnings
• Minify FilePond JS and CSS during build
• Updated media-grid.css to change selector from class to id
• Fixed errors in Media Grid when no files have been uploaded
• Set wp-video CSS height to auto to prevent vertical stretching
• Fixed console error in Media Grid when variables are undefined
• Rebuilt Text and Custom HTML Widgets in vanilla JS and PHP
• Implemented password rehash checks at point of password use
• Instantiate widget title inputs before enabling sorting
• Depopulated Update Services list for new installs
• Fixed “Show Details” button in admin Updates page
• Fixed filename data attribute in the media grid view
• Added polyfill for get_block_theme_folders() for plugin compatibility
• Ensured image details correctly updated in Media Grid

Build and Testing Changes

• Added PHPUnit 9 as developer dependency
• Run PHPUnit tests on PHP 8.4
• Update readme.html and supported version tests
• Changed to non-resolving URL for PHPUnit tests

Deprecation Notices

• wp-api library is deprecated and will be removed in a future version
• Moment.js library is deprecated and will be removed in a future version
• Contributors

More information

See the release announcement post on our forums for more details, or have a look at the full changelog here on GitHub:

ClassicPress/ClassicPress@2.2.0+dev...2.3.0+dev

ClassicPress 2.2.0

ClassicPress 2.2.0 is available now - use the "Source code (zip)" file below.

Here are the highlights from this release:

Notable changes since ClassicPress 2.1.1

New features

• Added a Media Categories Dropdown on the Media Library List page
• Enable uploading of Media by media category taxonomy
• Backported and introduced wp_trigger_error() function
• Added Attachment Pages Toggle to Media Settings
• Added an Object Relationships Database Table
• Added relationships between posts and attachments/featured images
• Added ability to Quick / Bulk Edit Media Attachments
• Added new columns in Media List View

Minor changes and bugfixes since 2.1.1

• Use cp_ table prefix for new installs
• Fixed a spelling mistake in maybe_upgrade_translations()
• Disabled attachment pages on new installations and add new option
• Removed “Hello Dolly” plugin from core
• Removed translation data from update url query
• Added ClassicPress database version to handle updates
• Use css data url for admin menu CP logo
• Upstream security enhancements - WP-r58479
• Deprecated ClipboardJS library and replace its usage in core
• Deprecated hoverIntent library and replace its usage in core
• Fixed HTML paragraphs for backport information
• Strengthen password encryption and add pepper via filter
• Fixed JS error in plugin pages when esc is pressed
• Added a return value for wp_delete_file() in the Filesystem API
• Prime notoptions cache when deleting options - WP-r58782
• Added new functions to check if serving a REST API request - WP-r57312
• Added two polyfill functions to support Query Monitor v3.16.4
• Protected composer.json from over-writing if customised
• Simplified implementation of auto-update message
• Fixed wp-tinymce.min.js build process and enqueuing
• Improved CSS on Post Edit and Dashboard Screens
• Ensured correct focus in Edit Image modal from the Media Library

Build and Testing Changes

• Updated dependency from node-sass to sass
• Updated Contributing guide about Window Subsystem for Linux

Deprecation Notices

• Post by Email feature will be removed in a future release
• XML-RPC server feature will be disabled by default in a future release
• Emoji javascript functionality will be disabled by default in a future release
• ClipboardJS and hoverIntent libraries are deprecated
• Several core scripts and style are deprecated, see PR1427

More information

See the release announcement post on our forums for more details, or have a look at the full changelog here on GitHub:

ClassicPress/ClassicPress@2.1.1+dev...2.2.0+dev