Commit Graph

  • 0e4f37eca7 fix of setEscaper move in Twig 3.9+ 1.8 Andy Miller 2025-12-22 21:43:10 -07:00
  • 6b54b32140 fix for user editing causing hashed_password to be removed Andy Miller 2025-12-17 14:36:53 -07:00
  • 368982cb46 fix for nested config changes Andy Miller 2025-12-17 12:06:59 -07:00
  • b086561160 fix for unusual format SVGs Andy Miller 2025-12-15 15:08:15 -07:00
  • 15cb068f95 fix for grav not picking up config + page changes Andy Miller 2025-12-12 16:29:43 -07:00
  • d34213232b avoid mail in twig content trigger security error Andy Miller 2025-12-12 16:20:35 -07:00
  • 7a6b8a90d4 prepare for beta release 1.8.0-beta.28 Andy Miller 2025-12-08 20:46:53 -07:00
  • 2813ea0701 Merge branch 'develop' into 1.7.51 1.7.51 Andy Miller 2025-12-08 20:30:32 -07:00
  • 97af1bc35b checkout correct version develop Andy Miller 2025-11-11 15:16:47 +00:00
  • 306f33f4ae fixes for twig3 loader + improve recovery mode Andy Miller 2025-12-08 18:07:32 -07:00
  • 6cb8229806 fix for missing file Andy Miller 2025-12-08 10:58:46 -07:00
  • 95e285efa4 Merge branch 'performance-part-3' into 1.8 Andy Miller 2025-12-05 21:00:33 -07:00
  • 80410dae13 opcache fix in CompiledFile Andy Miller 2025-12-05 20:59:46 -07:00
  • fae70e5fc9 fixes #4002 - Backups blocking /var/www Andy Miller 2025-12-03 19:30:32 -07:00
  • 9d9247a32f fix false positives in Security with on_events Andy Miller 2025-12-03 14:17:17 -07:00
  • 94d85cd873 add support for environment in grav scheduler Andy Miller 2025-12-03 10:41:29 -07:00
  • 58002f4903 Bump the github-actions group with 2 updates (#3997) dependabot[bot] 2025-12-02 05:35:16 -07:00
  • 19a9fafe37 fix(ci): remove outdated travis config (#3864) Rotzbua 2025-12-01 16:23:10 +01:00
  • 8ad4c006a2 feat(ci): add dependabot to keep GH Actions up to date (#3866) Rotzbua 2025-12-01 16:21:08 +01:00
  • 0f879bd1d4 prepare for beta.27 release 1.8.0-beta.27 Andy Miller 2025-11-30 16:17:37 -07:00
  • fd828d452e trim down default user/config/system.yaml Andy Miller 2025-11-30 16:14:35 -07:00
  • 63bbc1cac6 flex-objects caching fix Andy Miller 2025-11-30 16:06:31 -07:00
  • 528032b11a update changelog Andy Miller 2025-11-29 21:18:57 -07:00
  • a4c3a3af6d Add isindex to XSS dangerous tags (CVE-2023-31506 / GHSA-h85h-xm8x-vfw7) Andy Miller 2025-11-29 21:07:23 -07:00
  • b7e1958a6e Merge branch 'fix/GHSA-4cwq-j7jv-qmwg-title-email-leak' into 1.8 Andy Miller 2025-11-29 18:29:39 -07:00
  • 0c38968c58 Fix email disclosure in user edit page title (GHSA-4cwq-j7jv-qmwg) Andy Miller 2025-11-29 18:27:08 -07:00
  • 9d11094e41 Merge branch 'fix/GHSA-x62q-p736-3997-GHSA-gq3g-666w-7h85-admin-security' into 1.8 Andy Miller 2025-11-29 17:52:03 -07:00
  • ed640a1314 Merge branch 'fix/GHSA-p4ww-mcp9-j6f2-GHSA-m8vh-v6r6-w7p6-GHSA-j422-qmxp-hv94-file-path-security' into 1.8 Andy Miller 2025-11-29 17:45:33 -07:00
  • e37259527d Merge branch 'fix/GHSA-662m-56v4-3r8f-GHSA-858q-77wx-hhx6-GHSA-8535-hvm8-2hmv-GHSA-gjc5-8cfh-653x-GHSA-52hh-vxfw-p6rg-ssti-sandbox' into 1.8 Andy Miller 2025-11-29 17:30:39 -07:00
  • 3462d94d57 Merge branch 'fix/GHSA-h756-wh59-hhjv-GHSA-cjcp-qxvg-4rjm-username-validation' into 1.8 Andy Miller 2025-11-29 17:29:15 -07:00
  • 19c2f8da76 Fix path traversal and uniqueness vulnerabilities in username validation Andy Miller 2025-11-29 13:09:49 -07:00
  • a161399c84 Fix DoS via cron expressions and password hash exposure Andy Miller 2025-11-29 15:51:51 -07:00
  • 5f120c328b Fix file read, DoS, and path traversal vulnerabilities Andy Miller 2025-11-29 14:27:09 -07:00
  • db924c4a26 Expand SSTI sandbox blacklist to block known attack vectors Andy Miller 2025-11-29 13:16:34 -07:00
  • 9fc1b42d59 prepare beta release 1.8.0-beta.26 Andy Miller 2025-11-29 11:02:20 -07:00
  • c8878dfc80 upgrade to symfony 7.4 stable Andy Miller 2025-11-29 10:58:03 -07:00
  • 779661ab8a more improvements for JS minification and now pulls any broken JS out of pipeline Andy Miller 2025-11-27 20:56:07 +00:00
  • 3985638a8f more debug in the Pipeline.php to identify issues Andy Miller 2025-11-27 19:19:02 +00:00
  • 52fd9a6e7b update gitignore Andy Miller 2025-11-25 09:47:28 +00:00
  • 45e6ed941f Fix double execution of preflight checks during self-upgrade Andy Miller 2025-11-20 11:16:07 +00:00
  • 2c2b2fc2e4 Optimize preflight Monolog checks by skipping vendor directories Andy Miller 2025-11-20 11:12:03 +00:00
  • b0301beee3 Fix slow SafeUpgradeServiceTest by optimizing snapshot pruning Andy Miller 2025-11-20 10:51:45 +00:00
  • ce6a1b3bcb Ensure file permissions are preserved during safe-upgrade copy operations Andy Miller 2025-11-18 18:28:46 +00:00
  • d42adcd593 Fix safe-upgrade snapshot creation (copy vs move) and implement pruning Andy Miller 2025-11-18 18:21:34 +00:00
  • bcd93c321b try again Andy Miller 2025-11-24 22:18:43 +00:00
  • 8bd711f6b1 fixes for versions Andy Miller 2025-11-24 21:42:03 +00:00
  • fa707eb7eb vendor updates Andy Miller 2025-11-24 21:38:55 +00:00
  • 18d285ec36 Merge branch 'develop' of github.com:getgrav/grav into develop Andy Miller 2025-11-24 21:06:07 +00:00
  • 04c6bdf287 disallow xref/xhref in SVGs Andy Miller 2025-11-24 21:04:44 +00:00
  • a78789b291 upgrade compoer libs Andy Miller 2025-11-24 21:05:46 +00:00
  • caa127cd53 disallow xref/xhref in SVGs Andy Miller 2025-11-24 21:04:44 +00:00
  • 3ddc548d51 Add new Twig filter/function array_group_by for grouping arrays and collections (#3970) pmoreno.rodriguez 2025-11-23 19:09:12 +01:00
  • 48343d7714 fix range requests for partial content in Utils::downloads() - Fixes #3990 Andy Miller 2025-11-23 17:55:28 +00:00
  • 5f087d3a43 fix range requests for partial content in Utils::downloads() - Fixes #3990 Andy Miller 2025-11-23 17:55:28 +00:00
  • 1bc6e5e13a prepare for beta release 1.8.0-beta.25 Andy Miller 2025-11-22 11:17:37 +00:00
  • f339bb83c5 update composer Andy Miller 2025-11-22 11:16:08 +00:00
  • 27789991ae prepare for beta release 1.8.0-beta.24 Andy Miller 2025-11-21 12:45:03 +00:00
  • 114aebae7c more robust deferred logic + deprecated fixes Andy Miller 2025-11-21 12:25:58 +00:00
  • 370dfd6016 updated vendor libs Andy Miller 2025-11-21 11:37:28 +00:00
  • 1d05e6bdc4 pages rebuild optimization Andy Miller 2025-11-21 11:16:34 +00:00
  • 3acff8a9f8 update changelog Andy Miller 2025-11-20 11:18:20 +00:00
  • ea59bdb1d4 Fix double execution of preflight checks during self-upgrade Andy Miller 2025-11-20 11:16:07 +00:00
  • 02330b96d9 Optimize preflight Monolog checks by skipping vendor directories Andy Miller 2025-11-20 11:12:03 +00:00
  • 2b1d73fd26 fix for slow tests Andy Miller 2025-11-20 10:54:24 +00:00
  • 4e11ca7c8e Fix slow SafeUpgradeServiceTest by optimizing snapshot pruning Andy Miller 2025-11-20 10:51:45 +00:00
  • 591e2e4563 revert missing line Andy Miller 2025-11-19 22:26:59 +00:00
  • 2161ffeb5e gated the debugger addEvent call Andy Miller 2025-11-18 21:55:55 +00:00
  • b856978211 reuse regex for better optimization Andy Miller 2025-11-18 21:50:35 +00:00
  • 19ee2d883e lazy load page optimization Andy Miller 2025-11-18 21:24:50 +00:00
  • 93089241c3 Ensure file permissions are preserved during safe-upgrade copy operations Andy Miller 2025-11-18 18:28:46 +00:00
  • 3b1c332932 Fix safe-upgrade snapshot creation (copy vs move) and implement pruning Andy Miller 2025-11-18 18:21:34 +00:00
  • 7fd614f8b6 Add Twig 3 compatibility transformations for raw, divisibleby, and none Andy Miller 2025-11-18 17:46:20 +00:00
  • 5567a5a1cd twig3 compatibility fixes + tests Andy Miller 2025-11-18 17:25:07 +00:00
  • 334e1dcabc prepare for beta release 1.8.0-beta.23 Andy Miller 2025-11-14 14:42:09 +00:00
  • cbf5ec57c6 test fixes + major/minor plugin warnings Andy Miller 2025-11-12 13:05:37 +00:00
  • 9f33e247cf added configurable snapshot pruning amount Andy Miller 2025-11-11 19:30:05 +00:00
  • 8c7e970603 some installer fixes Andy Miller 2025-11-11 17:55:14 +00:00
  • 360b418c97 checkout correct version Andy Miller 2025-11-11 15:16:47 +00:00
  • af0db0c2a1 preflight integration for cli Andy Miller 2025-11-11 15:03:48 +00:00
  • 4c74192191 ui things Andy Miller 2025-11-10 19:42:16 +00:00
  • ee5fccd2c8 added back snapshots in Install.php Andy Miller 2025-11-10 19:34:46 +00:00
  • 5bc89bf32b simplified safe-upgrade Andy Miller 2025-11-10 11:40:13 +00:00
  • 0b021e2114 more simplification Andy Miller 2025-11-09 21:55:01 +00:00
  • 15c1b1cc06 simplify copy/permission process + fix safe-upgrade check Andy Miller 2025-11-09 21:25:34 +00:00
  • 9c27496cc1 test fixes + major/minor plugin warnings Andy Miller 2025-11-12 13:05:37 +00:00
  • fd51d33d3f added configurable snapshot pruning amount Andy Miller 2025-11-11 19:30:05 +00:00
  • 7304612d3a some installer fixes Andy Miller 2025-11-11 17:55:14 +00:00
  • 35f5dd74fe checkout correct version 1.7.49.5 Andy Miller 2025-11-11 15:16:47 +00:00
  • e6025670ea checkout correct version Andy Miller 2025-11-11 15:16:47 +00:00
  • 92b3d5b1f8 preflight integration for cli Andy Miller 2025-11-11 15:03:48 +00:00
  • 2ee3ff074c ui things Andy Miller 2025-11-10 19:42:16 +00:00
  • 4fab5f99bb added back snapshots in Install.php Andy Miller 2025-11-10 19:34:46 +00:00
  • 1d5d1357b8 simplified safe-upgrade Andy Miller 2025-11-10 11:40:13 +00:00
  • eb649c35a3 more simplification Andy Miller 2025-11-09 21:55:01 +00:00
  • 9b75d96bbf simplify copy/permission process + fix safe-upgrade check Andy Miller 2025-11-09 21:25:34 +00:00
  • 41d771da7c Merge tag '1.7.50.9' into develop Andy Miller 2025-11-09 15:55:30 +00:00
  • 7e3fccce54 Merge branch 'release/1.7.50.9' Andy Miller 2025-11-09 15:55:30 +00:00
  • 48c6d2eb93 prepare for release Andy Miller 2025-11-09 15:55:20 +00:00
  • e86820d438 update changelog Andy Miller 2025-11-09 15:54:44 +00:00
  • ee1b55e929 don’t error when trying to force —safe Andy Miller 2025-11-09 15:50:42 +00:00