This is a patch release of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for a summary of changes and improvements since the last minor release. Learn more about Drupal 8.

This release only contains bug fixes, along with documentation and testing improvements.

The following important issues are resolved in 8.1.4 (in addition to the dozens of other fixes listed at the end of this post):

Known issues

Due to a mistake in the release process, this release will report itself as 8.1.4-dev rather than 8.1.4. There are no other known regressions.

The following issues may affect people running Drupal 8.1.4 on specific hosting environments:

• There is not yet per-commit testing for MySQL 5.7.9 or MariaDB 10.1.8 (both released October 2015), but there are no known issues with them. We intend to add per-commit testing on one of these databases in the future.
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors
  

Search the issue queue for all known issues.

All changes since the last release

• #1266748 by swentel, Berdir, jcnventura, arlinsandbulte, yched, droplet, amateescu: Changing cardinality lower than highest existing delta causes data loss upon save
• #2744639 by vasi, mikeryan, boromino, stevector: Taxonomy term hierarchy migration incomplete
• #2605594 by daffie, pukku, catch, yngens2: Change minimum required sqlite version to 3.7.11
• #2675648 by Bès, Haza, dawehner, chx: Code after hook_link_alter() invocation does not use the altered data
• #2698811 by danmuzyka, Wim Leers, jhedstrom, Fabianx: BigPipe unnecessarily renders and sends multiple-occurrence placeholders multiple times when using JS — can cause JS errors
• #2757427 by alexpott, Xano: Array was modified by the user comparison function in ConfigDependencyManager::getDependentEntities()
• #2686931 by Mirroar: system_requirements should not call Renderer::render()
• #2744421 by andypost, Wim Leers: QueryArgsCacheContext::getContext() may return NULL, violates the interface
• #2756209: Add the new Drupal 7 co-maintainers to MAINTAINERS.txt
• #2757139 by pfrenssen: Fix visibility of AssertLegacyTrait::buildXPathQuery()
• #2754477 by alexpott, jonathan1055, mr.baileys, swentel: Unexpected config entity delete due to dependency calculations
• #2750941 by dawehner, klausi, jibran: Additional BC assertions from WebTestBase to BrowserTestBase
• #2755667 by marthinal: Fix typo error in WebTestBase
• Revert "Issue #2664530 by Lendude: Views Combined fields filter with "Contains any word" or "Contains all words" operator results in an incorrect SQL query and a fatal error"
• #2657110 by claudiu.cristea: ResponsiveImageFormatter should define dependencies to responsive image style entity
• #2752315 by Eric_A, pfrenssen, RoySegall: Fix visibility of AssertLegacyTrait::assertNoEscaped()
• Revert "Issue #2675010 by hchonov: Cloned entity will point to the same field objects if the clone was created after an entity translation has been initialized"
• #2698083 by quietone, Sam152, Mac_Weber, vasi: D6->D8: Migrating links without leading slash leads to fatal error
• #2664530 by Lendude: Views Combined fields filter with "Contains any word" or "Contains all words" operator results in an incorrect SQL query and a fatal error
• #2751583 by tstoeckler: Entity::urlRouteParameters() calls getRevisionId() for non-revisionable entities
• #2751121 by tstoeckler, kiamlaluno: class StatusMessages documentation page contains incorrect markup
• #2275519 by Nephele, daffie: Unable to use Condition objects with joins
• #2687003 by alexpott, mikeryan, eojthebrave, xjm, benjy, quietone, catch: Update migrate.api.php to reflect the current API
• #2751395 by tstoeckler, dawehner: Rewrite EntityUrlTest
• #2735199 by klausi, naveenvalecha, Eric_A, dawehner, jhodgdon: Convert web tests to browser tests for help module
• #2752127 by jalpesh, Eric_A: drupal/core-assertion is missing from the drupal/core replace section
• #2700581 by mikeryan, benjy, heddn, vasi: Destination bundle set in destination plugin, not in process
• #2384459 by mikran, mbovan, slashrsm, chx, Berdir, yched: Add entity query condition for delta in EFQ
• #2499239 by Mile23, neclimdul, alexpott, jhedstrom, Mixologic, Crell, Xano, dawehner: Use test suite classes to discover different test types under phpunit, allow contrib harmony with run-tests
• #1390580 by mohit_aghera, heliogabal, Chernous_dn, andrewmacpherson, mgifford, droplet, Everett Zufelt: Add comments for skip link and main-content anchor in templates
• #2684213 by amateescu, larowlan, josephdpurcell, dawehner: Preview on forward node revisions throws an error
• #2754541 by webflo, YesCT: Fix folder location in BrowserTestBase docs
• #2675010 by hchonov: Cloned entity will point to the same field objects if the clone was created after an entity translation has been initialized
• #2753905 by Lendude: Add javascript testing for the Views creation wizard
• #2676552 by justAChris, mbovan, chr.fritsch, gaborpeter, mariancalinro, alexpott, Berdir: File usage view breaks if an entity uses a file that has no canonical link template
• #2742103 by ekes, dawehner, amateescu: SqlContentEntityStorageSchema::getDedicatedTableSchema() ignores 'unique keys' from the schema definition
• #2708735 by amateescu, dawehner, markdorison: Creating a draft removes published node from taxonomy view
• #2723115 by Stefan Freudenberg, mayurjadhav: Count cache configuration does not work as expected
• #2736109 by klausi, Eric_A, dawehner: Convert web tests to browser tests for action module
• #2648956 by lokapujya, dawehner, Lendude, sidharrell, jibran, catch, alexpott: Editing a view leaves old keys hanging, results in invalid schema
• #1377740: revert unintentional theme.inc changes.
• #2724813 by alexpott, dawehner, jibran, catch: ToolbarIntegrationTest fails randomly on postgres
• #2464077 by webflo, s_leu, dawehner, Lendude: Menu link overrides are lost after cache rebuild
• #2728789 by tlyngej: Wrong @see link in CckFieldPluginBase docblock
• #2711101 by rocketeerbkw: Migrated menu blocks aren't configurable [d7]
• #2751875 by klausi: BrowserTestBase must enable cache tags in responses
• #2752645 by sidharth_k: Update masterminds/html5 dependency in composer.lock
• #1377740 by jbrown, bvanmeurs, catch, anrikun, Jorrit, rpayanm, mvc, mikeytown2, chx: file_unmanaged_move() should issue rename() where possible instead of copy() & unlink()
• #2691641 by Jo Fitzgerald, benjy: D7 taxonomy description format not migrating
• #2748553 by mikeryan: Remove unused migration template_test module
• #2225271 by penyaskito, quietone, svendecabooter, benjy, vasi: Migrate content type language settings from Drupal 6 & 7
• #2655346 by quietone, benjy: i18n Variable to config: user settings [d6]
• #2637182 by quietone: i18n Variable to config: system site settings [d6]
• #2662844 by penyaskito, dawehner, catch: cache.backend.chainedfast misbehaves in some situations
• #2655336 by quietone: i18n Variable to config: site offline message [d6]
• #2747269 by chishah92, talhaparacha: Incorrect parameter documentation for FormBuilder::submitForm
• #2743463 by pcambra, tstoeckler: ImageFormatter calculates cache tags incorrectly
• #2650812 by Wim Leers, Fabianx, Gábor Hojtsy, chx, dawehner, alexpott: Container::has() doesn't work for service aliases (consequently, decorating services doesn't work)
• #2464053 by marcoscano, Fabianx: Remove @todo to Improve YamlFileLoader so that we can cache built service definition objects and not just the raw data
• #2751537 by chx: Race condition in \Drupal\Core\Database\Driver\pgsql\Install\Tasks breaks the testbot
• #2723123 by agoradesign, milesw: Last imported timestamps not set in map tables
• #2691659 by Sam152, Jo Fitzgerald: d7 filter weights not migrating to d8
• #2747723 by mayurjadhav, pashupathi nath gajawada, ccjjmartin: Too many closing parentheses in checkboxes example
• #2742497 by klausi, naveenvalecha: Convert web tests to browser tests for ban module
• #2462653 by chx, alexpott, daffie, neclimdul: Connection::getDriverClass doesn't support non-core drivers
• #2749819 by Fabianx, dawehner: OptimizedPhpArrayDumper does not resolve references via aliases correctly
• #2685869 by Sam152, Jo Fitzgerald: d7 filter_format weights not migrating to d8
• #2663758 by Lendude, Chi, no_angel: Broken/missing handler on Custom Block Library view
• #2686651 by quietone: Same nid in two content types in d6_dump
• #2744379 by juampynr: Fix typos in documentation of \Drupal\dynamic_page_cache\EventSubscriber\DynamicPageCacheSubscriber
• #2674508 by Mile23, tim.plunkett: Improve docs for how to properly add container injection into a class that extends FormBase
• #2742211 by jsdix: Doxygen typo for $cache variable
• #2744357 by rajeshwari10, pashupathi nath gajawada, chishah92, Eric_A: drupal/core-* components Symfony requirements conflict with drupal/core
• #2653318 by Wim Leers, aneek, marthinal, dawehner: While in maintenance mode, REST routes respond with HTML instead of XML/JSON/…
• #2575725 by alexpott, lokapujya, rajeshwari10, Torenware, andrewbelcher, pashupathi nath gajawada, jonathan1055: Uncaught PHP Exception when selecting too many PHPunit tests in UI
• #2714989 by dawehner, jibran: Views which load the same entity type as entity and non default revision cause fatal in Sql::getCacheTags()
• #2658438 by kristiaanvandeneynde, Torenware, dawehner, alexpott: Array valued 'extra' values generate invalid SQL in Views joins
• #2631736 by quietone, jmuzz, Sam152, svendecabooter, benjy: Cckfield Plugins must distinguish core versions
• Back to dev.
• Updated version constant for 8.1.3.
• Drupal 8.1.3, SA-CORE-2016-002 by catch, dawehner, dsnopek, greggles, Plazik, stefan.r, xjm, klausi, mlhess
• #2706201 by edumarbest: Use $this->connection->query instead of db_query in \Drupal\Core\Database\Driver\sqlite\Schema::findTables
• #2720077 by rajeshwari10, Vinay15, snehi, gaurav.pahuja, Sonal.Sangale, jhodgdon, joachim, klausi: EntityTypeBundleInfo::getBundleInfo() @return needs more detail
• #2667574 by dagmar: sqlite/Schema::introspectSchema should throw the created exception
• #2737743 by anoopjohn, Mile23: node_revision_delete() not returning bool in node.module
• #2746761 by gabesullice, Wim Leers: QueryArgsCacheContext does not support nested parameters
• #2734423 by dawehner, jibran: Convert the remaining old kernel tests over
• #2748467 by Sam152: Allow children of migration test bases to substitute their own fixtures
• #2747945 by mayurjadhav, Beakerboy: Extra semicolons in QueryInterface example
• #2744383 by chishah92, Eric_A: drupal/core-dependency-injection is missing from the drupal/core replace section
• #2744881: jhodgdon stepping away from MAINTAINERS.txt
• #2729211 by catch, Wim Leers: node_query_node_access_alter() should only add cacheability on GET/HEAD
• #2705977 by heddn, edysmp: D6/7->D8 migration: User role based block visibility settings doesn't filter missing roles
• #2732091 by damiankloip: Boolean exposed filter value widget just shows 'True' label
• #2745915 by tim.plunkett, Wim Leers, davidhernandez, tedbow: StableLibraryOverrideTest does not respect experimental modules
• #2748375 by stefan.r: BrowserTestBase fatals before showing exceptions
• #2598038 by alexpott, sethcardoza, quietone, Jaesin: Invalid passwords after D7 to D8 migration
• #2573635 by Wim Leers, Mac_Weber, lluvigne, dawehner, dimaro, ConfuciusDa1st, rootwork, BR0kEN, unstatu: Url::fromUri() should accept protocol-relative URLs
• #2742541 by klausi: ApcuBackendTest is skipped in phpunit because of wrong @requires
• #2744647 by chishah92: \Drupal\block\Entity\Block::conditionPluginManager as pointless line
• #2744375 by juampynr: Fix typo at OutputStrategyInterface.php
• #2722621 by anoopjohn: Fix Drupal.Commenting.FunctionComment.InvalidReturn and Drupal.Commenting.FunctionComment.VoidReturn
• #2744089 by pfrenssen: Fix visibility of AssertLegacyTrait::assertLink()
• #2714607 by neclimdul: Use phpunit's requires to require some extensions
• #2705921 by jmk61, Vinay15, chgasparoto, jhodgdon, vegantriathlete, kjl16, joachim: docs for postCreate() should clarify create does not mean save
• #2740499 by nesta_, lluvigne, rajeshwari10, jhodgdon, er.pushpinderrana, joachim: parameter to DiscoveryTrait::doGetDefinition() is incorrectly documented as optional
• #2731309 by Vinay15, Ashish.Dalvi, joachim, jhodgdon: docs for deprecated functions in core/includes/entity.inc refer to deprecated entityManager()
• #2737607 by generalredneck: Migration Source Plugins are not extendable because of ambiguous database field names
• #2725425 by mfb: Incorrect mime type on generated images
• #2533220 by snehi, pjonckiere, mirom, chx, jhodgdon, dawehner: RouteBuilderInterface has no docblock
• Revert "Issue #2735235 by neclimdul: BrowserTestBase standards cleanup"
• #2735235 by neclimdul: BrowserTestBase standards cleanup
• #2737825 by markdorison: ESLint error in autocomplete.js
• #2682585 by heddn, dscl, hanoii, willwh, hussainweb: Rename MigrationCreationTrait as it no longer creates migrations - it configures them
• #2735045 by klausi, dawehner, jibran: Convert StandardTest to BrowserTestBase by introducing a AssertLegacyTrait and new assertions on the WebAssert
• #2477899 by dawehner, kevin.dutra, borisson_, bojanz, catch, amateescu: Multiple valued Base fields won't work in Views
• #2718717 by damiankloip: Assertion error when paging a view using an entity autocomplete exposed filter
• #2738575 by lluvigne: Parameters to ModuleHandler::invoke() are incorrect
• #2717483 by pguillard, mikeryan: Empty migration_dependencies gives "Unsupported operand types"
• #2699267 by Chi: Wrong placeholder format in file_managed_file_save_upload()
• #2721909 by anoopjohn: Fix Drupal.Commenting.FunctionComment.ReturnCommentIndentation
• #2722763 by drnikki: Select::extend doc incorrectly says to use base name
• #2561993 by jhedstrom, jonathanjfshaw, yoroy, emma.maria, mpdonadio: Better labelling for Date time form select elements

This is a patch release of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for a summary of changes and improvements since the last minor release. Learn more about Drupal 8.

To update Drupal 8, follow the instructions.

This release only contains bug fixes, along with documentation and testing improvements. It is identical to Drupal 8.1.4, except that Drupal 8.1.4 incorrectly reports it's own version as 8.1.4-dev.

The following important issues are resolved in 8.1.5 (in addition to the dozens of other fixes listed at the end of this post):

Known issues

The following issues may affect people running Drupal 8.1.5 on specific hosting environments:

• It is especially important when updating to this release to follow the instructions when updating core, specifically removing the /core and /vendor directories before replacing files, so that removed files are properly removed. Failure to do so may result in fatal errors after the upgrade.
• There is not yet per-commit testing for MySQL 5.7.9 or MariaDB 10.1.8 (both released October 2015), but there are no known issues with them. We intend to add per-commit testing on one of these databases in the future.
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors
  

Search the issue queue for all known issues.

All changes since 8.1.3

• #1266748 by swentel, Berdir, jcnventura, arlinsandbulte, yched, droplet, amateescu: Changing cardinality lower than highest existing delta causes data loss upon save
• #2744639 by vasi, mikeryan, boromino, stevector: Taxonomy term hierarchy migration incomplete
• #2605594 by daffie, pukku, catch, yngens2: Change minimum required sqlite version to 3.7.11
• #2675648 by Bès, Haza, dawehner, chx: Code after hook_link_alter() invocation does not use the altered data
• #2698811 by danmuzyka, Wim Leers, jhedstrom, Fabianx: BigPipe unnecessarily renders and sends multiple-occurrence placeholders multiple times when using JS — can cause JS errors
• #2757427 by alexpott, Xano: Array was modified by the user comparison function in ConfigDependencyManager::getDependentEntities()
• #2686931 by Mirroar: system_requirements should not call Renderer::render()
• #2744421 by andypost, Wim Leers: QueryArgsCacheContext::getContext() may return NULL, violates the interface
• #2756209: Add the new Drupal 7 co-maintainers to MAINTAINERS.txt
• #2757139 by pfrenssen: Fix visibility of AssertLegacyTrait::buildXPathQuery()
• #2754477 by alexpott, jonathan1055, mr.baileys, swentel: Unexpected config entity delete due to dependency calculations
• #2750941 by dawehner, klausi, jibran: Additional BC assertions from WebTestBase to BrowserTestBase
• #2755667 by marthinal: Fix typo error in WebTestBase
• Revert "Issue #2664530 by Lendude: Views Combined fields filter with "Contains any word" or "Contains all words" operator results in an incorrect SQL query and a fatal error"
• #2657110 by claudiu.cristea: ResponsiveImageFormatter should define dependencies to responsive image style entity
• #2752315 by Eric_A, pfrenssen, RoySegall: Fix visibility of AssertLegacyTrait::assertNoEscaped()
• Revert "Issue #2675010 by hchonov: Cloned entity will point to the same field objects if the clone was created after an entity translation has been initialized"
• #2698083 by quietone, Sam152, Mac_Weber, vasi: D6->D8: Migrating links without leading slash leads to fatal error
• #2664530 by Lendude: Views Combined fields filter with "Contains any word" or "Contains all words" operator results in an incorrect SQL query and a fatal error
• #2751583 by tstoeckler: Entity::urlRouteParameters() calls getRevisionId() for non-revisionable entities
• #2751121 by tstoeckler, kiamlaluno: class StatusMessages documentation page contains incorrect markup
• #2275519 by Nephele, daffie: Unable to use Condition objects with joins
• #2687003 by alexpott, mikeryan, eojthebrave, xjm, benjy, quietone, catch: Update migrate.api.php to reflect the current API
• #2751395 by tstoeckler, dawehner: Rewrite EntityUrlTest
• #2735199 by klausi, naveenvalecha, Eric_A, dawehner, jhodgdon: Convert web tests to browser tests for help module
• #2752127 by jalpesh, Eric_A: drupal/core-assertion is missing from the drupal/core replace section
• #2700581 by mikeryan, benjy, heddn, vasi: Destination bundle set in destination plugin, not in process
• #2384459 by mikran, mbovan, slashrsm, chx, Berdir, yched: Add entity query condition for delta in EFQ
• #2499239 by Mile23, neclimdul, alexpott, jhedstrom, Mixologic, Crell, Xano, dawehner: Use test suite classes to discover different test types under phpunit, allow contrib harmony with run-tests
• #1390580 by mohit_aghera, heliogabal, Chernous_dn, andrewmacpherson, mgifford, droplet, Everett Zufelt: Add comments for skip link and main-content anchor in templates
• #2684213 by amateescu, larowlan, josephdpurcell, dawehner: Preview on forward node revisions throws an error
• #2754541 by webflo, YesCT: Fix folder location in BrowserTestBase docs
• #2675010 by hchonov: Cloned entity will point to the same field objects if the clone was created after an entity translation has been initialized
• #2753905 by Lendude: Add javascript testing for the Views creation wizard
• #2676552 by justAChris, mbovan, chr.fritsch, gaborpeter, mariancalinro, alexpott, Berdir: File usage view breaks if an entity uses a file that has no canonical link template
• #2742103 by ekes, dawehner, amateescu: SqlContentEntityStorageSchema::getDedicatedTableSchema() ignores 'unique keys' from the schema definition
• #2708735 by amateescu, dawehner, markdorison: Creating a draft removes published node from taxonomy view
• #2723115 by Stefan Freudenberg, mayurjadhav: Count cache configuration does not work as expected
• #2736109 by klausi, Eric_A, dawehner: Convert web tests to browser tests for action module
• #2648956 by lokapujya, dawehner, Lendude, sidharrell, jibran, catch, alexpott: Editing a view leaves old keys hanging, results in invalid schema
• #1377740: revert unintentional theme.inc changes.
• #2724813 by alexpott, dawehner, jibran, catch: ToolbarIntegrationTest fails randomly on postgres
• #2464077 by webflo, s_leu, dawehner, Lendude: Menu link overrides are lost after cache rebuild
• #2728789 by tlyngej: Wrong @see link in CckFieldPluginBase docblock
• #2711101 by rocketeerbkw: Migrated menu blocks aren't configurable [d7]
• #2751875 by klausi: BrowserTestBase must enable cache tags in responses
• #2752645 by sidharth_k: Update masterminds/html5 dependency in composer.lock
• #1377740 by jbrown, bvanmeurs, catch, anrikun, Jorrit, rpayanm, mvc, mikeytown2, chx: file_unmanaged_move() should issue rename() where possible instead of copy() & unlink()
• #2691641 by Jo Fitzgerald, benjy: D7 taxonomy description format not migrating
• #2748553 by mikeryan: Remove unused migration template_test module
• #2225271 by penyaskito, quietone, svendecabooter, benjy, vasi: Migrate content type language settings from Drupal 6 & 7
• #2655346 by quietone, benjy: i18n Variable to config: user settings [d6]
• #2637182 by quietone: i18n Variable to config: system site settings [d6]
• #2662844 by penyaskito, dawehner, catch: cache.backend.chainedfast misbehaves in some situations
• #2655336 by quietone: i18n Variable to config: site offline message [d6]
• #2747269 by chishah92, talhaparacha: Incorrect parameter documentation for FormBuilder::submitForm
• #2743463 by pcambra, tstoeckler: ImageFormatter calculates cache tags incorrectly
• #2650812 by Wim Leers, Fabianx, Gábor Hojtsy, chx, dawehner, alexpott: Container::has() doesn't work for service aliases (consequently, decorating services doesn't work)
• #2464053 by marcoscano, Fabianx: Remove @todo to Improve YamlFileLoader so that we can cache built service definition objects and not just the raw data
• #2751537 by chx: Race condition in \Drupal\Core\Database\Driver\pgsql\Install\Tasks breaks the testbot
• #2723123 by agoradesign, milesw: Last imported timestamps not set in map tables
• #2691659 by Sam152, Jo Fitzgerald: d7 filter weights not migrating to d8
• #2747723 by mayurjadhav, pashupathi nath gajawada, ccjjmartin: Too many closing parentheses in checkboxes example
• #2742497 by klausi, naveenvalecha: Convert web tests to browser tests for ban module
• #2462653 by chx, alexpott, daffie, neclimdul: Connection::getDriverClass doesn't support non-core drivers
• #2749819 by Fabianx, dawehner: OptimizedPhpArrayDumper does not resolve references via aliases correctly
• #2685869 by Sam152, Jo Fitzgerald: d7 filter_format weights not migrating to d8
• #2663758 by Lendude, Chi, no_angel: Broken/missing handler on Custom Block Library view
• #2686651 by quietone: Same nid in two content types in d6_dump
• #2744379 by juampynr: Fix typos in documentation of \Drupal\dynamic_page_cache\EventSubscriber\DynamicPageCacheSubscriber
• #2674508 by Mile23, tim.plunkett: Improve docs for how to properly add container injection into a class that extends FormBase
• #2742211 by jsdix: Doxygen typo for $cache variable
• #2744357 by rajeshwari10, pashupathi nath gajawada, chishah92, Eric_A: drupal/core-* components Symfony requirements conflict with drupal/core
• #2653318 by Wim Leers, aneek, marthinal, dawehner: While in maintenance mode, REST routes respond with HTML instead of XML/JSON/…
• #2575725 by alexpott, lokapujya, rajeshwari10, Torenware, andrewbelcher, pashupathi nath gajawada, jonathan1055: Uncaught PHP Exception when selecting too many PHPunit tests in UI
• #2714989 by dawehner, jibran: Views which load the same entity type as entity and non default revision cause fatal in Sql::getCacheTags()
• #2658438 by kristiaanvandeneynde, Torenware, dawehner, alexpott: Array valued 'extra' values generate invalid SQL in Views joins
• #2631736 by quietone, jmuzz, Sam152, svendecabooter, benjy: Cckfield Plugins must distinguish core versions
• Back to dev.
• Updated version constant for 8.1.3.
• Drupal 8.1.3, SA-CORE-2016-002 by catch, dawehner, dsnopek, greggles, Plazik, stefan.r, xjm, klausi, mlhess
• #2706201 by edumarbest: Use $this->connection->query instead of db_query in \Drupal\Core\Database\Driver\sqlite\Schema::findTables
• #2720077 by rajeshwari10, Vinay15, snehi, gaurav.pahuja, Sonal.Sangale, jhodgdon, joachim, klausi: EntityTypeBundleInfo::getBundleInfo() @return needs more detail
• #2667574 by dagmar: sqlite/Schema::introspectSchema should throw the created exception
• #2737743 by anoopjohn, Mile23: node_revision_delete() not returning bool in node.module
• #2746761 by gabesullice, Wim Leers: QueryArgsCacheContext does not support nested parameters
• #2734423 by dawehner, jibran: Convert the remaining old kernel tests over
• #2748467 by Sam152: Allow children of migration test bases to substitute their own fixtures
• #2747945 by mayurjadhav, Beakerboy: Extra semicolons in QueryInterface example
• #2744383 by chishah92, Eric_A: drupal/core-dependency-injection is missing from the drupal/core replace section
• #2744881: jhodgdon stepping away from MAINTAINERS.txt
• #2729211 by catch, Wim Leers: node_query_node_access_alter() should only add cacheability on GET/HEAD
• #2705977 by heddn, edysmp: D6/7->D8 migration: User role based block visibility settings doesn't filter missing roles
• #2732091 by damiankloip: Boolean exposed filter value widget just shows 'True' label
• #2745915 by tim.plunkett, Wim Leers, davidhernandez, tedbow: StableLibraryOverrideTest does not respect experimental modules
• #2748375 by stefan.r: BrowserTestBase fatals before showing exceptions
• #2598038 by alexpott, sethcardoza, quietone, Jaesin: Invalid passwords after D7 to D8 migration
• #2573635 by Wim Leers, Mac_Weber, lluvigne, dawehner, dimaro, ConfuciusDa1st, rootwork, BR0kEN, unstatu: Url::fromUri() should accept protocol-relative URLs
• #2742541 by klausi: ApcuBackendTest is skipped in phpunit because of wrong @requires
• #2744647 by chishah92: \Drupal\block\Entity\Block::conditionPluginManager as pointless line
• #2744375 by juampynr: Fix typo at OutputStrategyInterface.php
• #2722621 by anoopjohn: Fix Drupal.Commenting.FunctionComment.InvalidReturn and Drupal.Commenting.FunctionComment.VoidReturn
• #2744089 by pfrenssen: Fix visibility of AssertLegacyTrait::assertLink()
• #2714607 by neclimdul: Use phpunit's requires to require some extensions
• #2705921 by jmk61, Vinay15, chgasparoto, jhodgdon, vegantriathlete, kjl16, joachim: docs for postCreate() should clarify create does not mean save
• #2740499 by nesta_, lluvigne, rajeshwari10, jhodgdon, er.pushpinderrana, joachim: parameter to DiscoveryTrait::doGetDefinition() is incorrectly documented as optional
• #2731309 by Vinay15, Ashish.Dalvi, joachim, jhodgdon: docs for deprecated functions in core/includes/entity.inc refer to deprecated entityManager()
• #2737607 by generalredneck: Migration Source Plugins are not extendable because of ambiguous database field names
• #2725425 by mfb: Incorrect mime type on generated images
• #2533220 by snehi, pjonckiere, mirom, chx, jhodgdon, dawehner: RouteBuilderInterface has no docblock
• Revert "Issue #2735235 by neclimdul: BrowserTestBase standards cleanup"
• #2735235 by neclimdul: BrowserTestBase standards cleanup
• #2737825 by markdorison: ESLint error in autocomplete.js
• #2682585 by heddn, dscl, hanoii, willwh, hussainweb: Rename MigrationCreationTrait as it no longer creates migrations - it configures them
• #2735045 by klausi, dawehner, jibran: Convert StandardTest to BrowserTestBase by introducing a AssertLegacyTrait and new assertions on the WebAssert
• #2477899 by dawehner, kevin.dutra, borisson_, bojanz, catch, amateescu: Multiple valued Base fields won't work in Views
• #2718717 by damiankloip: Assertion error when paging a view using an entity autocomplete exposed filter
• #2738575 by lluvigne: Parameters to ModuleHandler::invoke() are incorrect
• #2717483 by pguillard, mikeryan: Empty migration_dependencies gives "Unsupported operand types"
• #2699267 by Chi: Wrong placeholder format in file_managed_file_save_upload()
• #2721909 by anoopjohn: Fix Drupal.Commenting.FunctionComment.ReturnCommentIndentation
• #2722763 by drnikki: Select::extend doc incorrectly says to use base name
• #2561993 by jhedstrom, jonathanjfshaw, yoroy, emma.maria, mpdonadio: Better labelling for Date time form select elements

Maintenance release of the Drupal 7 series. Includes a variety of new features, improvements, and bug fixes (no major, non-backwards-compatible new functionality).

No security fixes are included in this release.

Drupal 7.50 is a version jump compared to the previous 7.44 release; this is to indicate that this Drupal 7 point release is a bit larger than past ones and makes a few more changes and new features available than normal. See the release announcement for more information about Drupal 7.50.

Two minor changes have been made to the robots.txt and default.settings.php files in this release:

• Added support for full UTF-8 (emojis, Asian symbols, mathematical symbols) on MySQL when the site and database are configured to allow it
• Robots.txt now allows search engines access to CSS, JavaScript and image files

Upgrading custom versions of these files to incorporate the above changes is recommended, but not required.

In addition, an .editorconfig file has been added:

• Drupal 7 now contains an .editorconfig file

No changes have been made to the .htaccess and web.config files in this release.

Known issues:

There are no known regressions in this release.

Major changes since 7.44:

• #611294: Added a new "administer fields" permission for trusted users, which is required in addition to other permissions to use the field UI (change record).
• #2514136: Added clickjacking protection to Drupal core by setting the X-Frame-Options header to SAMEORIGIN by default (change record).
• #2488180: Added support for full UTF-8 (emojis, Asian symbols, mathematical symbols) on MySQL and other database drivers when the site and database are configured to allow it (change record).
• #1081266: Improved performance by avoiding a re-scan of directories when a file is missing; instead, trigger a PHP warning (minor API change; see the change record).
• #2747679 and #2760609: Made it possible to use any PHP callable in Ajax form callbacks, form API form-building functions, and form API wrapper callbacks (API addition; see the change record).
• #889772: Fixed that following a password reset link while logged in leaves users unable to change their password (minor user interface change; see the change record).
• #2620104 and #2656548: Implemented various fixes for automated test failures on PHP 5.4+ and PHP 7. Drupal core automated tests now pass in these environments.
• #2656548: Improved support for PHP 7 by fixing various problems.
• #2215369: Fixed various bugs with PHP 5.5+ imagerotate(), including when incorrect color indices are passed in.
• #2678822: Fixed a regression introduced in Drupal 7.43 that allowed files uploaded by anonymous users to be lost after form validation errors, and that also caused regressions with certain contributed modules.
• #2502263: Fixed a regression introduced in Drupal 7.36 which caused the default value of hidden textarea fields to be ignored.
• #2364343: Fixed robots.txt to allow search engines to access CSS, JavaScript and image files (change record).
• #2470145: Changed wording on the Update Manager settings page to clarify that the option to check for disabled module updates also applies to uninstalled modules (administrative-facing translatable string change).
• #2418209: Changed the help text when editing menu links and configuring URL redirect actions so that it does not reference "Drupal" or the drupal.org website (administrative-facing translatable string change).
• #2371861: Fixed the locale safety check that is used to ensure that translations are safe to allow for tokens in the href/src attributes of translated strings.
• #1645156: Fixed that URL generation only works on port 80 when using domain based language negotation.
• #1116326: Made method="get" forms work inside the administrative overlay. The fix adds a new hidden field to these forms when they appear inside the overlay (minor data structure change).
• #2578173: Increased maxlength of menu link title input fields in the node form and menu link form from 128 to 255 characters.
• #2646280: Removed meaningless post-check=0 and pre-check=0 cache control headers from Drupal HTTP responses.
• #1713662: Added a .editorconfig file to auto-configure editors that support it (change record).
• #2551981: Added --directory option to run-tests.sh for easier test discovery of all tests within a project.
• #2189345: Made run-tests.sh exit with a failure code when there are test fails or problems running the script.
• #2491353: Fixed that cookies from previous tests are still present when a new test starts in DrupalWebTestCase.
• #2634840: Improved performance of queries on the {authmap} database table.
• #412808: Fixed handling of missing files and functions inside the registry.
• #1458824: Fixed Ajax handling for tableselect form elements that use checkboxes.
• #1327728: Fixed a bug which caused ip_address() to return nothing when the client IP address and proxy IP address are the same.
• #2393461: Added a new option to format_xml_elements() to allow for already encoded values.
• #2633334: Changed the {history} table's node ID field to be an unsigned integer, to match the same field in the {node} table and to prevent errors with very large node IDs.
• #2674028: Added an explicit page callback to the "admin/people/create" menu item in the User module (minor data structure change). Previously this automatically inherited the page callback from the parent "admin/people" menu item, which broke contributed modules that override the "admin/people" page.

All changes since 7.44:

• #2762393 by stefan.r, MustangGB, David_Rothstein: Skip error triggering for missing files if the files are empty or "default"
• #2761285 by MegaChriz: _drupal_session_write() does not always return a boolean
• #2488180 by stefan.r, stovak, pwolanin, David_Rothstein, Noe_, typhonius, KhaledBlah, joelpittet, Fabianx, geerlingguy, nithinkolekar, mikeytown2, jduhls, scuba_fly, travelvc, hass: Support full UTF-8 (emojis, Asian symbols, mathematical symbols) on MySQL and other database drivers when they are configured to allow it
• #2760609: Allow the use of callbacks instead of global functions in the Form API
• #2759899 by Fabianx: drupal_get_schema_versions() does report wrong data the first time a test is run
• #2747679 by david_garcia, pashupathi nath gajawada, izaaksom: Ajax form callbacks can only be global functions
• #2502263 by hgoto, David_Rothstein, klausi, ckng, rhclayto: Drupal 7.36 regression: hidden field textarea #default_value is ignored
• #1645156 by attiks, tstoeckler, talhaparacha, amontero, Carsten Müller, Albert Volkman, Gábor Hojtsy, David_Rothstein, leschekfm, vasi1186, dcam, catch, Sweetchuck, Fabianx, nicrodgers: URL generation only works on port 80
• #1458824 by idebr, JvE, therealssj, mayaz17, cwoky, Henrik Opel, lokapujya, kevinquillen, presleyd, nod_, jbeuckm, botris, mistermoper, gcardinal: Ajax doesn't work with Tableselect with checkboxes
• #1081266 by stefan.r, jeroen.b, mikeytown2, David_Rothstein, tsphethean, mfb, joseph.olstad, marcelovani, Kars-T, joelpittet, Fabianx, catch, fgm, das-peter, alexpott, emcniece, oriol_e9g, sun, corbacho, klausi, mgifford, onelittleant, Peter Bex, Spleshka, beejeebus, Berdir, pwaterz, SocialNicheGuru, sylus, Wim Leers, heyyo, joshtaylor, swentel, alanburke, dagmar, alexmoreno, kenorb, EvanSchisler, Mark Theunissen, bmateus, andypost, Lukas von Blarer, ChristophWeber, nicholas.alipaz, arosboro, askibinski, dawehner, DerekL, ExTexan: Avoid re-scanning module directory when a filename or a module is missing
• #2393461 followup by Sagar Ramgade: format_xml_elements() does not allow unencoded values
• #2393461 followup by nevergone: format_xml_elements() does not allow unencoded values
• #2393461 by David_Rothstein, mpv, maciej.zgadzaj, Sagar Ramgade, davic, Fabianx: format_xml_elements() does not allow unencoded values
• #2578173 by Peacog, David_Rothstein, maximpodorov, marvin_B8, andypost, alexpott, tatisilva: Increase menu title maxlength to 255 in forms containing menu items
• #2371861 followup by David_Rothstein: Strings including tokens in href or src attributes cannot be translated due to safeness check incompatibilities
• #1116326 by s_leu, yannickoo, dawehner, nod_, pwolanin, David_Rothstein, ksenzee, realityloop, miro_dietiker, broeker, mariagwyn, Christian DeLoach: Support admin overlay in exposed forms
• #2749489 by pwolanin: Write test for the User module security issue from SA-CORE-2016-002
• #2563751 by borisson_, rocketeerbkw, cilefen, pietmarcus, NikitaJain, imanol.eguskiza, pjonckiere: Password field errors on user create/edit/login when password is (literally) 0
• #1327728 by Darren Oh, Josh Waihi, cspitzlay, c960657: ip_address() fails when client request IP and proxy IP are the same
• #1388664 by akoepke, chirhotec, klokie, lOggOl: Blog module conflicts with other URL routes beginning with "blog/"
• #1622964 by felribeiro, snehi, ar-jan, Girish-jerk, jhodgdon, joachim, jp.stacey, stefan.r: docs for EntityFieldQuery::fieldCondition are really sparse
• #2676472 by micaelamenara, dagmar, jhodgdon: docs for t() and related functions don't explain how context works
• #2669704 by eiriksm, jhodgdon: Missing function doc comments in user.pages.inc
• #2640888 by IRuslan, kala4ek: Broken link on image toolkits conf page when no toolkits are installed
• #1732906 by peterpoe, Ken Ficara, forestgardener, eesquibel, minax.de: Uninitialized variable in number_field_formatter_settings_form
• #2674028 by catch: Add page callback to admin/people/create menu item
• #2633334 by orbmantell, e._s, catch, TravisCarden: Unsigned int vs. int mismatch between node.nid and history.nid
• #2215369 by fietserwin, Lowell, mondrake, mr.baileys, David_Rothstein, kristofferwiklund, TwoD, bradjones1, svanou, kristiaanvandeneynde, Fabianx: Various bugs with PHP 5.5 imagerotate(), including when incorrect color indices are passed in
• #2660762 by twistor: TrackerTest::testTrackerNewComments() sets the node title incorrectly
• #2660766 by David_Rothstein, twistor: UpgradePathTaxonomyTestCase::testTaxonomyUpgrade() doesn't properly test field settings
• #2660754 by twistor, David_Rothstein: Invalid numeric comparison in OpenIDTestCase::testConversion()
• #412808 by Berdir, rupertj, beejeebus, sun, PieterDC, scottalan, catch: Handling of missing files and functions inside the registry
• #2717633 by mikeytown2, twistor, scor, Fabianx, MustangGB: PHP 7 hook_rdf_mapping() ['mapping']['rdftype'] failing in rdf.test: RDF type is present on post
• #2364343 by damien_vancouver, criz, ksenzee, Neograph734, joegraduate, k_zoltan, droplet, pounard, jp.stacey, ciss, corbacho, TravisJohnston: Fix robots.txt to allow search engines access to CSS, JavaScript and image files
• #2189345 by benjy, sanduhrs, Mile23, joshtaylor, jbekker, David_Rothstein, klausi, sun, zaporylie, pfrenssen, jsacksick, jibran, Mixologic, znerol, Xano, alberto56: run-tests.sh should exit with a failure code if any tests failed
• #2551981 by jthorson, Mixologic, Fabianx, David_Rothstein: Add --directory option to run-tests.sh test discovery
• #2491353 by pfrenssen, pietmarcus, znerol, David_Rothstein: Cookies from previous tests are still present when a new test starts
• #1713662 by nod_, Eric_A, treyhunner, sun, basvredeling: Introduce .editorconfig to auto-configure editors that support it
• #889772 by tuutti, stefan.r, opdavies, Sutharsan, Perignon, pjcdawkins, joachim, das-peter, YesCT, David_Rothstein, Zerdiox, hussainweb, Fabianx, mgifford, xjm: Following a password reset link while logged in leaves users unable to change their password
• #2669568 by soaratul: Docblock typo in file_download_headers
• #1364694 by gielfeldt: MemoryQueue::createItem does not return TRUE
• #2311305 by donutdan4114, stefan.r, Polonium, rpayanm, tadityar, Fabianx, Dave Reid: getPrefixInfo() calls wrong function to get the connection info
• #2634840 by brianV: Add index on uid and module columns to authmap
• #2660744 by twistor: Skip test for decoding invalid numeric entities in 5.4+
• #2371861 by DuaelFr, YesCT, pietmarcus, Gábor Hojtsy, tucho: Strings including tokens in href or src attributes cannot be translated due to safeness check incompatibilities
• #2756209: Add the new Drupal 7 co-maintainers to MAINTAINERS.txt
• #2694731 by nicrodgers: user_access(): incorrect documentation
• #2660240 by Kgaut: Typo in menu.inc
• #376391 by mimran, snehi, pietmarcus, jhodgdon: Document that module_invoke_all / ModuleHandlerInterface::invokeAll reindexes arrays
• #2718323 by Liam Morland, jhodgdon: In drupal_http_request(), mention http_build_query()
• #2718179 by dagmar: Better documentation for suspicious encoded string in dblog tests
• #2663752 by twistor, DamienMcKenna, ParisLiakos, sdstyles, Berdir: Undefined string index 0 in DrupalTestCase::getAbsoluteUrl() in PHP 7
• #2663746 by twistor, MustangGB: Array to string conversion in trigger.test for PHP 7
• #2460833 by jackbravo, colinmccabe, checker, Alan D., twistor: _drupal_session_destroy() should return boolean
• #2712993 by MustangGB, klausi: Can't override the same CSS files multiple times
• Merge tag '7.44' into 7.x
• #2646280 by Elijah Lynn, pietmarcus: Remove IE pre-check and post-check Cache-control headers
• #2395385 by DamienMcKenna: simpletest fatal error when creating a non language neutral node and not specifying a node body
• #2514136 by pwolanin, David_Rothstein, Fabianx, greggles: Add default clickjacking defense to core
• #611294 by swentel, klausi, David_Rothstein, tsphethean, jenlampton, attiks, yched, sun, benjy, dcam: Added a new "administer fields" permission for trusted users to use the field UI.
• #2640344 by rafaolf, mohit_aghera, GrigoriuNicolae, jhodgdon: Document how to make hook_search_info() titles translatable
• #2470145 by David_Rothstein, rbmboogie, tbradbury, johnpicozzi, talhaparacha, ifrik, darol100: Fix text for update manager checkbox for disabled extensions
• #2418209 by chintan.vyas, lucastockmann, jacob.embree: Replace user facing strings that use drupal.org as example of an external url
• #2678822 by DamienMcKenna, David_Rothstein, stefan.r: Drupal 7.43 regression: When an anonymous user submits a form with an un-uploaded file that leads to a validation error, the file is lost on the next correct submission

This is a patch release of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for a summary of changes and improvements since the last minor release. Learn more about Drupal 8.

To update Drupal 8, follow the instructions.

This release only contains bug fixes, along with documentation and testing improvements.

The following important issues are resolved in 8.1.6 (in addition to the dozens of other fixes listed at the end of this post):

When updating from version 8.1.3 or earlier without first emptying the /core and /vendor folders it was possible to run into a fatal error due to code that should have been removed being executed (when following the standard update procedure you should not run into this issue). Otherwise this release is identical to 8.1.5.

Known issues

The following issues may affect people running Drupal 8.1.6 on specific hosting environments:

• It is especially important when updating to this release to follow the instructions when updating core, specifically removing the /core and /vendor directories before replacing files, so that removed files are properly removed. Failure to do so may result in fatal errors after the upgrade.
• There is not yet per-commit testing for MySQL 5.7.9 or MariaDB 10.1.8 (both released October 2015), but there are no known issues with them. We intend to add per-commit testing on one of these databases in the future.
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors
  

Search the issue queue for all known issues.

All changes since 8.1.3

• #1266748 by swentel, Berdir, jcnventura, arlinsandbulte, yched, droplet, amateescu: Changing cardinality lower than highest existing delta causes data loss upon save
• #2744639 by vasi, mikeryan, boromino, stevector: Taxonomy term hierarchy migration incomplete
• #2605594 by daffie, pukku, catch, yngens2: Change minimum required sqlite version to 3.7.11
• #2675648 by Bès, Haza, dawehner, chx: Code after hook_link_alter() invocation does not use the altered data
• #2698811 by danmuzyka, Wim Leers, jhedstrom, Fabianx: BigPipe unnecessarily renders and sends multiple-occurrence placeholders multiple times when using JS — can cause JS errors
• #2757427 by alexpott, Xano: Array was modified by the user comparison function in ConfigDependencyManager::getDependentEntities()
• #2686931 by Mirroar: system_requirements should not call Renderer::render()
• #2744421 by andypost, Wim Leers: QueryArgsCacheContext::getContext() may return NULL, violates the interface
• #2756209: Add the new Drupal 7 co-maintainers to MAINTAINERS.txt
• #2757139 by pfrenssen: Fix visibility of AssertLegacyTrait::buildXPathQuery()
• #2754477 by alexpott, jonathan1055, mr.baileys, swentel: Unexpected config entity delete due to dependency calculations
• #2750941 by dawehner, klausi, jibran: Additional BC assertions from WebTestBase to BrowserTestBase
• #2755667 by marthinal: Fix typo error in WebTestBase
• Revert "Issue #2664530 by Lendude: Views Combined fields filter with "Contains any word" or "Contains all words" operator results in an incorrect SQL query and a fatal error"
• #2657110 by claudiu.cristea: ResponsiveImageFormatter should define dependencies to responsive image style entity
• #2752315 by Eric_A, pfrenssen, RoySegall: Fix visibility of AssertLegacyTrait::assertNoEscaped()
• Revert "Issue #2675010 by hchonov: Cloned entity will point to the same field objects if the clone was created after an entity translation has been initialized"
• #2698083 by quietone, Sam152, Mac_Weber, vasi: D6->D8: Migrating links without leading slash leads to fatal error
• #2664530 by Lendude: Views Combined fields filter with "Contains any word" or "Contains all words" operator results in an incorrect SQL query and a fatal error
• #2751583 by tstoeckler: Entity::urlRouteParameters() calls getRevisionId() for non-revisionable entities
• #2751121 by tstoeckler, kiamlaluno: class StatusMessages documentation page contains incorrect markup
• #2275519 by Nephele, daffie: Unable to use Condition objects with joins
• #2687003 by alexpott, mikeryan, eojthebrave, xjm, benjy, quietone, catch: Update migrate.api.php to reflect the current API
• #2751395 by tstoeckler, dawehner: Rewrite EntityUrlTest
• #2735199 by klausi, naveenvalecha, Eric_A, dawehner, jhodgdon: Convert web tests to browser tests for help module
• #2752127 by jalpesh, Eric_A: drupal/core-assertion is missing from the drupal/core replace section
• #2700581 by mikeryan, benjy, heddn, vasi: Destination bundle set in destination plugin, not in process
• #2384459 by mikran, mbovan, slashrsm, chx, Berdir, yched: Add entity query condition for delta in EFQ
• #2499239 by Mile23, neclimdul, alexpott, jhedstrom, Mixologic, Crell, Xano, dawehner: Use test suite classes to discover different test types under phpunit, allow contrib harmony with run-tests
• #1390580 by mohit_aghera, heliogabal, Chernous_dn, andrewmacpherson, mgifford, droplet, Everett Zufelt: Add comments for skip link and main-content anchor in templates
• #2684213 by amateescu, larowlan, josephdpurcell, dawehner: Preview on forward node revisions throws an error
• #2754541 by webflo, YesCT: Fix folder location in BrowserTestBase docs
• #2675010 by hchonov: Cloned entity will point to the same field objects if the clone was created after an entity translation has been initialized
• #2753905 by Lendude: Add javascript testing for the Views creation wizard
• #2676552 by justAChris, mbovan, chr.fritsch, gaborpeter, mariancalinro, alexpott, Berdir: File usage view breaks if an entity uses a file that has no canonical link template
• #2742103 by ekes, dawehner, amateescu: SqlContentEntityStorageSchema::getDedicatedTableSchema() ignores 'unique keys' from the schema definition
• #2708735 by amateescu, dawehner, markdorison: Creating a draft removes published node from taxonomy view
• #2723115 by Stefan Freudenberg, mayurjadhav: Count cache configuration does not work as expected
• #2736109 by klausi, Eric_A, dawehner: Convert web tests to browser tests for action module
• #2648956 by lokapujya, dawehner, Lendude, sidharrell, jibran, catch, alexpott: Editing a view leaves old keys hanging, results in invalid schema
• #1377740: revert unintentional theme.inc changes.
• #2724813 by alexpott, dawehner, jibran, catch: ToolbarIntegrationTest fails randomly on postgres
• #2464077 by webflo, s_leu, dawehner, Lendude: Menu link overrides are lost after cache rebuild
• #2728789 by tlyngej: Wrong @see link in CckFieldPluginBase docblock
• #2711101 by rocketeerbkw: Migrated menu blocks aren't configurable [d7]
• #2751875 by klausi: BrowserTestBase must enable cache tags in responses
• #2752645 by sidharth_k: Update masterminds/html5 dependency in composer.lock
• #1377740 by jbrown, bvanmeurs, catch, anrikun, Jorrit, rpayanm, mvc, mikeytown2, chx: file_unmanaged_move() should issue rename() where possible instead of copy() & unlink()
• #2691641 by Jo Fitzgerald, benjy: D7 taxonomy description format not migrating
• #2748553 by mikeryan: Remove unused migration template_test module
• #2225271 by penyaskito, quietone, svendecabooter, benjy, vasi: Migrate content type language settings from Drupal 6 & 7
• #2655346 by quietone, benjy: i18n Variable to config: user settings [d6]
• #2637182 by quietone: i18n Variable to config: system site settings [d6]
• #2662844 by penyaskito, dawehner, catch: cache.backend.chainedfast misbehaves in some situations
• #2655336 by quietone: i18n Variable to config: site offline message [d6]
• #2747269 by chishah92, talhaparacha: Incorrect parameter documentation for FormBuilder::submitForm
• #2743463 by pcambra, tstoeckler: ImageFormatter calculates cache tags incorrectly
• #2650812 by Wim Leers, Fabianx, Gábor Hojtsy, chx, dawehner, alexpott: Container::has() doesn't work for service aliases (consequently, decorating services doesn't work)
• #2464053 by marcoscano, Fabianx: Remove @todo to Improve YamlFileLoader so that we can cache built service definition objects and not just the raw data
• #2751537 by chx: Race condition in \Drupal\Core\Database\Driver\pgsql\Install\Tasks breaks the testbot
• #2723123 by agoradesign, milesw: Last imported timestamps not set in map tables
• #2691659 by Sam152, Jo Fitzgerald: d7 filter weights not migrating to d8
• #2747723 by mayurjadhav, pashupathi nath gajawada, ccjjmartin: Too many closing parentheses in checkboxes example
• #2742497 by klausi, naveenvalecha: Convert web tests to browser tests for ban module
• #2462653 by chx, alexpott, daffie, neclimdul: Connection::getDriverClass doesn't support non-core drivers
• #2749819 by Fabianx, dawehner: OptimizedPhpArrayDumper does not resolve references via aliases correctly
• #2685869 by Sam152, Jo Fitzgerald: d7 filter_format weights not migrating to d8
• #2663758 by Lendude, Chi, no_angel: Broken/missing handler on Custom Block Library view
• #2686651 by quietone: Same nid in two content types in d6_dump
• #2744379 by juampynr: Fix typos in documentation of \Drupal\dynamic_page_cache\EventSubscriber\DynamicPageCacheSubscriber
• #2674508 by Mile23, tim.plunkett: Improve docs for how to properly add container injection into a class that extends FormBase
• #2742211 by jsdix: Doxygen typo for $cache variable
• #2744357 by rajeshwari10, pashupathi nath gajawada, chishah92, Eric_A: drupal/core-* components Symfony requirements conflict with drupal/core
• #2653318 by Wim Leers, aneek, marthinal, dawehner: While in maintenance mode, REST routes respond with HTML instead of XML/JSON/…
• #2575725 by alexpott, lokapujya, rajeshwari10, Torenware, andrewbelcher, pashupathi nath gajawada, jonathan1055: Uncaught PHP Exception when selecting too many PHPunit tests in UI
• #2714989 by dawehner, jibran: Views which load the same entity type as entity and non default revision cause fatal in Sql::getCacheTags()
• #2658438 by kristiaanvandeneynde, Torenware, dawehner, alexpott: Array valued 'extra' values generate invalid SQL in Views joins
• #2631736 by quietone, jmuzz, Sam152, svendecabooter, benjy: Cckfield Plugins must distinguish core versions
• Back to dev.
• Updated version constant for 8.1.3.
• Drupal 8.1.3, SA-CORE-2016-002 by catch, dawehner, dsnopek, greggles, Plazik, stefan.r, xjm, klausi, mlhess
• #2706201 by edumarbest: Use $this->connection->query instead of db_query in \Drupal\Core\Database\Driver\sqlite\Schema::findTables
• #2720077 by rajeshwari10, Vinay15, snehi, gaurav.pahuja, Sonal.Sangale, jhodgdon, joachim, klausi: EntityTypeBundleInfo::getBundleInfo() @return needs more detail
• #2667574 by dagmar: sqlite/Schema::introspectSchema should throw the created exception
• #2737743 by anoopjohn, Mile23: node_revision_delete() not returning bool in node.module
• #2746761 by gabesullice, Wim Leers: QueryArgsCacheContext does not support nested parameters
• #2734423 by dawehner, jibran: Convert the remaining old kernel tests over
• #2748467 by Sam152: Allow children of migration test bases to substitute their own fixtures
• #2747945 by mayurjadhav, Beakerboy: Extra semicolons in QueryInterface example
• #2744383 by chishah92, Eric_A: drupal/core-dependency-injection is missing from the drupal/core replace section
• #2744881: jhodgdon stepping away from MAINTAINERS.txt
• #2729211 by catch, Wim Leers: node_query_node_access_alter() should only add cacheability on GET/HEAD
• #2705977 by heddn, edysmp: D6/7->D8 migration: User role based block visibility settings doesn't filter missing roles
• #2732091 by damiankloip: Boolean exposed filter value widget just shows 'True' label
• #2745915 by tim.plunkett, Wim Leers, davidhernandez, tedbow: StableLibraryOverrideTest does not respect experimental modules
• #2748375 by stefan.r: BrowserTestBase fatals before showing exceptions
• #2598038 by alexpott, sethcardoza, quietone, Jaesin: Invalid passwords after D7 to D8 migration
• #2573635 by Wim Leers, Mac_Weber, lluvigne, dawehner, dimaro, ConfuciusDa1st, rootwork, BR0kEN, unstatu: Url::fromUri() should accept protocol-relative URLs
• #2742541 by klausi: ApcuBackendTest is skipped in phpunit because of wrong @requires
• #2744647 by chishah92: \Drupal\block\Entity\Block::conditionPluginManager as pointless line
• #2744375 by juampynr: Fix typo at OutputStrategyInterface.php
• #2722621 by anoopjohn: Fix Drupal.Commenting.FunctionComment.InvalidReturn and Drupal.Commenting.FunctionComment.VoidReturn
• #2744089 by pfrenssen: Fix visibility of AssertLegacyTrait::assertLink()
• #2714607 by neclimdul: Use phpunit's requires to require some extensions
• #2705921 by jmk61, Vinay15, chgasparoto, jhodgdon, vegantriathlete, kjl16, joachim: docs for postCreate() should clarify create does not mean save
• #2740499 by nesta_, lluvigne, rajeshwari10, jhodgdon, er.pushpinderrana, joachim: parameter to DiscoveryTrait::doGetDefinition() is incorrectly documented as optional
• #2731309 by Vinay15, Ashish.Dalvi, joachim, jhodgdon: docs for deprecated functions in core/includes/entity.inc refer to deprecated entityManager()
• #2737607 by generalredneck: Migration Source Plugins are not extendable because of ambiguous database field names
• #2725425 by mfb: Incorrect mime type on generated images
• #2533220 by snehi, pjonckiere, mirom, chx, jhodgdon, dawehner: RouteBuilderInterface has no docblock
• Revert "Issue #2735235 by neclimdul: BrowserTestBase standards cleanup"
• #2735235 by neclimdul: BrowserTestBase standards cleanup
• #2737825 by markdorison: ESLint error in autocomplete.js
• #2682585 by heddn, dscl, hanoii, willwh, hussainweb: Rename MigrationCreationTrait as it no longer creates migrations - it configures them
• #2735045 by klausi, dawehner, jibran: Convert StandardTest to BrowserTestBase by introducing a AssertLegacyTrait and new assertions on the WebAssert
• #2477899 by dawehner, kevin.dutra, borisson_, bojanz, catch, amateescu: Multiple valued Base fields won't work in Views
• #2718717 by damiankloip: Assertion error when paging a view using an entity autocomplete exposed filter
• #2738575 by lluvigne: Parameters to ModuleHandler::invoke() are incorrect
• #2717483 by pguillard, mikeryan: Empty migration_dependencies gives "Unsupported operand types"
• #2699267 by Chi: Wrong placeholder format in file_managed_file_save_upload()
• #2721909 by anoopjohn: Fix Drupal.Commenting.FunctionComment.ReturnCommentIndentation
• #2722763 by drnikki: Select::extend doc incorrectly says to use base name
• #2561993 by jhedstrom, jonathanjfshaw, yoroy, emma.maria, mpdonadio: Better labelling for Date time form select elements

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcements:

• Drupal Core - Highly Critical - Injection - SA-CORE-2016-003

No other fixes are included.

Third-party dependency updates in this release

This release includes an update for Guzzle, a third-party dependency of Drupal 8, as well as security hardenings for the vulnerability described in SA-CORE-2016-003. If you manage your site's dependencies with Composer, you should update to Guzzle 6.2.1 immediately and review the web server configuration information below. If you installed Drupal 8 from a Drupal.org zip or tar package, the Guzzle update is provided automatically when you update Drupal.

Web server configuration

This release includes changes to .htaccess and web.config. To ensure that your site is secure, use Drupal 8.1.7's default version of these files, or add the following to your custom versions:

.htaccess

<IfModule mod_headers.c>
  # Disable Proxy header, since it's an attack vector.
  RequestHeader unset Proxy</IfModule>

web.config

<system.webServer><rewrite><rules><rule name="Erase HTTP_PROXY" patternSyntax="Wildcard"><match url="*.*" /><serverVariables><set name="HTTP_PROXY" value="" /></serverVariables><action type="None" /></rule></rules></rewrite></system.webServer>

The release also includes a change to instructions in default.settings.php. If you are using a proxy from outbound requests from your web server, the HTTP_PROXY, HTTPS_PROXY, and NO_PROXY environmental variables are no longer supported. You will need to change your settings.php to configure these using the following settings:

• $settings['http_client_config']['proxy']['http']
• $settings['http_client_config']['proxy']['https']
• $settings['http_client_config']['proxy']['no']

If you do not use an outbound proxy, you do not need to make any changes to your settings.php. Most sites do not use an outbound proxy.

See https://httpoxy.org/ for full details on the vulnerability and the required changes on all affected environments.

Known issues

See the list of the known issues for the 8.1.x branch. There are no known regressions in this release.

Development release package for the 8.3.x release.

The 8.3.x branch is open for development and will now include the latest commits. Those interested in testing the development version of Drupal core should continue to work with the 8.2.x branch until the 8.2.0 release on October 5, 2016.

This is a beta release for the next feature release of Drupal 8. Betas are good testing targets for developers and site builders who are comfortable reporting (and where possible, fixing) their own bugs. Beta releases are not recommended for non-technical users, nor for production websites. More information on beta releases.

This minor release provides new improvements and functionality without breaking backward compatibility (BC) for public APIs. Note that there may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies. Both policies have been updated for the 8.1.x release.

This beta release includes the feature and API additions below. A handful of additional beta target issues are being considered for a later beta, including an experimental content moderation module, a sidebar for configuring site elements in place, a new date range field type, and a couple CKEditor enhancements.

New stable features

The following new stable features have been added to Drupal 8.2.0-beta1:

• #2688945: Allow removing a module's content entities prior to module uninstallation
• #2627678: The comment view mode can be configured in the formatter form
• #2490136: Enable revisions by default
• #306662: Add redirect option to site-wide contact forms

Usability improvements

• #2513402: Any time a user creates a thing and saves, display a link to the thing created in the status.
• #2090937: Seven theme: style CKEditor-native dialogs to match Drupal-native dialogs

In addition to the new features listed above, 8.2.0-beta1 includes many small user interface enhancements for usability, especially related to user interface text and form buttons.

REST and API-first improvements

Drupal 8.2.0-beta1 significantly improves REST and API-first support with the following new features, API and developer experience improvements, and bug fixes.

• #2662284: Return complete entity after successful PATCH
• #2724823: Config entities readable via REST: GET support
• #2721595: Simplify REST configuration
• #2403307: RPC endpoints for user authentication: log in, check login status, log out
• #1869548: Opt-in Cross-Origin Resource Sharing (CORS) support
• #2228141: Add authentication support to REST views
• #2308745: Remove rest.settings.yml, use rest_resource config entities
• #2659070: REST requests without Content-Type header: unhelpful response significantly hinders DX, should receive a 415 response
• #2631774: Impossible to update Comment entity with REST (HTTP PATCH): bundle field not allowed to be updated, but EntityNormalizer::denormalize() requires it
• #2310307: File needs CRUD permissions to make REST work on entity/file/{id}
• #2419825: Make serialization_class optional

Other API improvements

Modules requiring Drupal 8.2.0-beta1 or later can take advantage of these additional API improvements:

• #2753681: Move CSRF header token out of REST module so that user module can use it, as well as any contrib module
• #2384459: Add entity query condition for delta in EFQ
• #2753475: Support using the values of another field as initial values when adding a new field
• #2348137: Enable WAL journal mode by default for SQLite database
• #2723393: BlockContent entity has revision_user and revision_created fields, and implements RevisionLogInterface
• #2770845: A collection route is automatically provided for custom entity types
• #1920902: Add a Drupal Yaml wrapper so we can default to PECL Yaml component if it is available

Experimental modules

The following modules are considered experimental for this release. Experimental modules are provided with Drupal core for testing purposes, but are not yet fully supported.

Migrate, Migrate Drupal, and Migrate Upgrade UI (alpha stability)

Use these modules to migrate Drupal 6 or 7 sites onto Drupal 8. See the user guide on upgrading from Drupal 6 or 7 to Drupal 8 for more information.

Always back up your data before performing a migration, and be sure to take note of these outstanding issues:

• The Drupal 6 to Drupal 8 migration is now complete and can be used for migrating Drupal 6 sites to Drupal 8 (now including migrations for core node translations!), but some changes may still be needed as the Migrate API itself is not yet fully stable.
• The Drupal 7 to Drupal 8 migration is incomplete, but is suitable for developers who would like to help improve the migration, and can be used to test upgrades especially for simple Drupal 7 sites. (Outstanding issues for the Drupal 7 to Drupal 8 migration)
• Issues tagged Migrate critical are blockers for these modules being considered stable.

Drush support is currently only available in the Drupal Upgrade contributed module.

BigPipe (alpha stability, nearing beta)

Provides an advanced implementation of Facebook's BigPipe page rendering strategy, leading to greatly improved perceived performance for pages with dynamic, personalized, or uncacheable content. See the BigPipe handbook page.

Place Block (alpha stability)

This new 8.2.x feature allows the user to place a block on any page and see the region where it will be displayed, without having to navigate to a backend administration form.

Inline Form Errors (alpha stability)

This provides a proof-of-concept for showing form errors inline for improved accessibility. This module has outstanding issues, some of which are significant, and may be removed from core in 8.3.x if the issues are not resolved within the next six months.

Third-party library updates

• #2700741: Update jQuery 2.2.3
• #2721351: Upgrade to Twig 1.24
• #1869548: Added Cross-origin resource sharing library and stack middleware (asm89/stack-cors)
• #2712633: Update symfony-cmf/routing to 1.4.0
• #2712637: Update stack/builder for Symfony 3 compatibility

Changed coding standards

Drupal 8.2.0-beta1 has adopted the following coding standards changes:

• #2333243: Relax .gitattributes global rule
• #2648050: [policy, no patch] Stop disallowing camelCase for local variables / parameters
• #2248463: Require a blank line after <?php

Other important issues

Translators should take note of a handful of minor string changes since the last release.

The following important issues are resolved in 8.2.0-beta1 (in addition to the dozens of other fixes listed at the end of this post):

• #2699613: Set a shorter TTL for 404 responses in page_cache module
• #88183: Relative URLs in feeds should be converted to absolute ones

Known issues

There are currently no known regressions from the previous release to this release.

The following issues may affect people running Drupal 8.2.0-beta1 on specific hosting environments:

• Installs on php-fpm environments may see fatal errors on enabling modules, due to #2572293: Do not rebuild router in kernel.terminate.
• There is not yet per-commit testing for MySQL 5.7.9 or MariaDB 10.1.8 (both released October 2015), but there are no known issues with them. We intend to add per-commit testing on one of these databases in the future.
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors
  

Search the issue queue for all known issues.

All changes since the last minor release

See the Drupal 8.2.x issue queue.

This is a patch release of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for a summary of changes and improvements since the last minor release. Learn more about Drupal 8.

To update Drupal 8, follow the instructions.

This release only contains bug fixes, along with documentation and testing improvements.

Known issues

The following issues may affect people running Drupal 8.1.6 on specific hosting environments:

• It is especially important when updating to this release to follow the instructions when updating core, specifically removing the /core and /vendor directories before replacing files, so that removed files are properly removed. Failure to do so may result in fatal errors after the upgrade.
• There is not yet per-commit testing for MySQL 5.7.9 or MariaDB 10.1.8 (both released October 2015), but there are no known issues with them. We intend to add per-commit testing on one of these databases in the future.
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors
  

Search the issue queue for all known issues.

Changes since 8.1.7:

• #2758067 by jhedstrom, Eric_A, xjm, dawehner, pfrenssen: BrowserTestBase::drupalCreateUser() should use UserCreationTrait::createUser()
• #2759879 by klausi, claudiu.cristea, dawehner, xjm, Lendude, jibran: Additional assertions for WebAssert and AssertLegacyTrait, part 2
• #2724363 by martin107, markdorison: The word "abstract" is confusing in documentation for Views handlers that are not abstract
• #2765957 by chanchal2002, Manjit.Singh, brahmjeet789, kostyashupenko, AaronChristian: Core installation page content overflows its background (CSS bug)
• Revert "Issue #2755991 by klausi: Convert web tests to browser tests for telephone module"
• #2776055 by claudiu.cristea: Entity form/view route errors when a non-entity parameter comes first
• #2765385 by Wim Leers: Three minor bugs in BigPipe test coverage
• #2776369 by xjm: Remove docs references to entity_get_bundles()
• #1863898 by jibran, lokapujya, jeqq, pcambra, dawehner, damiankloip, alexpott, tim.plunkett, criscom, jhedstrom, catch: Add test coverage for Views revision link handlers
• #2750167 by dawehner, alexpott, willwh: Config translation synchronization fails
• Revert "Issue #2737805 by klausi, larowlan: Convert web tests to browser tests for forum module"
• #2738667 by andrewmacpherson, Wim Leers, mgifford: Show/hide group names button in CKEditor toolbar config UI is not keyboard operable
• #2671870 by droplet, darketaine, Sumit kumar: Drupal dialogs overflow in small resolutions when vertical toolbar is open
• #88183 by Wim Leers, ahoeben, brianV, alexpott, kylebrowning, marvil07, chx, twistor, dawehner: Relative URLs in feeds should be converted to absolute ones
• #2752325 by Wim Leers, marthinal, dawehner, ericpugh: Automatically provide HEAD support when a REST resource supports GET
• #2506805 by jibran, tstoeckler, chx: Non-revisionable base fields with multiple columns break revisionable entity types
• #2712935 by Wim Leers, Fabianx, catch, alexpott: Messages are not rendered last, meaning those messages set within placeholders only appear on the next request
• #2737781 by juampynr, cilefen, dawehner: Provide helpful message when attempting to run Javascript based test and PhantomJS is not running
• #2697993 by aerozeppelin, Novitsh, makbul_khan8: system_block_ip_action() adding empty IP record in blocked_ips table
• #2694555 by amateescu, vasi, dawehner, heddn, therealssj: Node revisions don't display translated
• #2474273 by mesch: Update Documentation for \Drupal\Core\Field\FieldStorageDefinitionInterface::getSchema()
• #2771331 by johan.gant: drupal/core-uuid composer.json not tested by \Drupal\Tests\ComposerIntegrationTest::testComposerJson()
• #2772979 by hchonov: Enforcing a cloned entity translation to be new propagates to the original entity
• #2730497 by dawehner: REST Views override existing REST routes
• #2702661 by alexpott, nevergone, GoZ, jibran, dawehner, xjm, hgoto, droplet: Make it simple to take screenshots whilst using JavascriptTestBase
• #2760883 by fgm: API docs reference ModuleHandler::install() instead of ModuleInstaller
• #2362435 by hampercm, markdorison, Alienpruts, lokapujya, Wim Leers, deepakaryan1988, amateescu, martin107, alvar0hurtad0, sdelbosc, tadityar, nlisgo, timmillwood, Palashvijay4O, googletorp, kerby70, adamzimmermann, tstoeckler, dawehner, tkoleary, Crell, legolasbo: When viewing a revision, the Quick Edit, Edit, and Delete contextual link operations are available, but should not be
• #2759247 by Wim Leers: Request attribute removed from DynamicPageCacheSubscriber, but comment was not updated
• #2749955 by alexpott, claudiu.cristea: Random fails in UpdatePathTestBase tests
• Revert "Issue #2771733 by joelpittet: Remove _no_big_pipe: TRUE @todo"
• #2611044 by felribeiro, theMusician, Nikhilesh Gupta, cilefen: SystemInfoController::status - wrong documentation (follow-up to fix whitespace)
• #2611044 by felribeiro, theMusician, Nikhilesh Gupta, cilefen: SystemInfoController::status - wrong documentation
• #2607548 by krknth, Erno: Missing title_prefix, title_suffix, attributes available variables for aggregator twig files
• #2669326 by danielbeeke, Xano, yongt9412, swentel, jmuzz, Sutharsan: FileWidget inside subform can't find its values
• #2771733 by joelpittet: Remove _no_big_pipe: TRUE @todo
• #2223073 by stefan.r, superspring, daffie, Dave Reid, Jalandhar: Calling DatabaseSchema::getPrefixInfo() on a non-default connection returns the wrong database - write tests
• #2704743 by yongt9412, amateescu, Berdir: Remove special case on EntityFormatter for new entities
• #1145076 by daffie, David_Rothstein, johnnydarkko, cbergmann, drewish, rpayanm, somersoft, jhedstrom: UNION queries don't support ORDER BY clauses
• #2754783 by danmuzyka, jhedstrom, alexpott: hook_entity_display_build_alter() only affects final entity in $build_list array
• #2678662 by Wim Leers, mondrake, Fabianx, alexpott: Ensure BigPipe does not break when HTML document contains CDATA sections or inline scripts matching certain patterns
• #2589805 by quietone, chx, benjy: Add documentation on how to find the menu migrations
• #2727545 by Lendude, Sagar Ramgade, dawehner, yvesmarie, xjm: Missing return value in ViewExecutable execute() methods
• #2752413 by danmuzyka, alexpott, jhedstrom: Custom CSS classes added to status messages print on page as content when using Classy theme or subthemes
• Revert "Issue #2762953 by cilefen, gisle, drumm: Select elements should use strict comparison"
• #2725947 by John Cook, mgifford, naveenvalecha, andrewmacpherson, Wim Leers, cmcnally, stella, stevepurkiss: Add Andrew Macpherson to the MAINTAINERS.txt
• #2466197 by alexpott, heddn, Crell, dawehner, pjcdawkins, catch: Staging directory should not have to be writeable
• #2770339 by claudiu.cristea: LocalReadOnlyStream must declare itself LOCAL
• #2729325 by yanniboi, Berdir, Xano, dawehner, YesCT: EntityViewsData adds entity type to multi-value base tables, conflicts with QueryPluginBase::getEntityTableInfo
• #2675470 by Jo Fitzgerald, hussainweb: D7 field instance settings for any fields not on nodes are not migrating
• #2746033 by amateescu, mohit_aghera, kamalrajsahu21, dawehner, xjm, catch, rfay: NodeController::revisionOverview() does not have a pager, which results in unlimited queries
• Revert "Issue #2702661 by alexpott, nevergone, GoZ, jibran, dawehner, hgoto, xjm: Make it simple to take screenshots whilst using JavascriptTestBase"
• #2702661 by alexpott, nevergone, GoZ, jibran, dawehner, hgoto, xjm: Make it simple to take screenshots whilst using JavascriptTestBase
• #1806606 by daffie, Jorrit: Drupal\Core\Database\Query\Select::range() doesn't correctly implement SelectInterface
• #2768953 by alexpott, dawehner, cashwilliams, timmillwood: Prevent insecure Guzzle from being installed when using composer to manager your project dependencies
• #2765207 by juampynr, dawehner: Convert \Drupal\system\Tests\System\CronQueueTest to a kerneltest
• #2706187 by Jo Fitzgerald: Custom view modes not migrating from d7 to d8
• #2752119 by jalpesh, mayurjadhav: drupal/core-render is missing from the drupal/core replace section
• Revert "Issue #2223073 by stefan.r, superspring, Dave Reid, Jalandhar: Calling DatabaseSchema::getPrefixInfo() on a non-default connection returns the wrong database - write tests"
• #2753791 by Lendude: Add javascript testing for the Views listing page
• #2223073 by stefan.r, superspring, Dave Reid, Jalandhar: Calling DatabaseSchema::getPrefixInfo() on a non-default connection returns the wrong database - write tests
• #2762953 by cilefen, gisle, drumm: Select elements should use strict comparison
• #2767269 by claudiu.cristea: LocalReadOnlyStream must declare itself not writeable
• #2674090 by Jo Fitzgerald, benjy, generalredneck, Sam152: Unable to migrate D7 link fields
• #2747083 by Eric_A, Mile23, alexpott: drupal/core-dependency-injection wrongly requires symfony/expression-language
• #2763629 by hussainweb: cckPluginManager not explicitly declared in CckMigration
• #2477381 by mondrake: GDToolkit::getSupportedExtensions returns incomplete list
• #2757475 by samuel.mortenson, marcoscano, Wim Leers: CKEditor's styling forces 16x16px icons, but Drupal's CKEditor toolbar configuration UI doesn't match that restriction, causing visual problems
• #2765751 by thpoul, dinarcon: Update CKEditor library to 4.5.10
• #2572533 by mondrake: Add tests for multiple pagers on a given page
• #2720811 by Eric_A: Fix package names of drupal/core-fileCache and drupal/core-phpStorage
• #2760797 by mondrake, twistor: MIME type guessing fails for remote stream wrapper URIs
• #2751363 by jibran: Don't allow test entities to share base table
• #2749475 by thpoul, Wim Leers, maskedjellybean, Orizontal, bohemier: Duplicate labels for Styles dropdown causes Styles to not render: add validation to prevent this
• #2561049 by phenaproxima, quietone: Add proper unit tests for the Migration process plugin
• #2648996 by tstoeckler, quietone, chx, therealssj, webflo, benjy: Optimize menu link migration
• #2737805 by klausi, larowlan: Convert web tests to browser tests for forum module
• #2723705 by Wim Leers, catch: Reduce the 200ms BigPipe placeholder interval to 50ms and make it overridable
• #2751835 by tstoeckler: Entity::urlRouteParameters() is broken for add-page and add-form link templates
• #2759839 by jalpesh, Eric_A: Rename drupal/core-httpFoundation, add it to drupal/core replace section
• #2759859 by klausi: Implement getDrupalSettings() on BrowserTestBase for checking JS settings
• #2594917 by cilefen, mikeker, rakesh.gectcr, ccmorris, dawehener: Views field rewrite for "Content: Path" incorrectly escapes HTML
• #2755991 by klausi: Convert web tests to browser tests for telephone module
• #2760557 by larowlan, jibran: LinkItem::getUrl ignores the value of options
• #2752533 by mikeker: \Drupal\Component\Utility\Crypt::randomBytesBase64 docblock refers to $byte_count instead of $count
• Back to dev.
• Update version constant.
• #2751923 by mohit_aghera, lhuria94, Jeff Burnz, joelpittet: Incorrect documentation, param and code example for hook_element_info_alter() in theme.inc
• #2311219 by Mile23, a_thakur, vadim.hirbu, undertext, xjm, cilefen, damiankloip, daffie: Remove references to function user_format_name() from documentation
• #2767503 by klausi: MigrateAggregatorStubTest typo in test namespace
• #1738622 by Mile23, Cottser, jhodgdon: Documentation cleanup for UUID API
• #2763539 by felribeiro: Bug in doxygen for adding headers to a response via render #attached
• Revert "Issue #2560795 by mikeryan, phenaproxima, penyaskito, willwh, benjy: Source plugins have a hidden dependency on migrate_drupal"
• #2225775 by vasi, quietone, phenaproxima, chx, penyaskito, mikeryan, esclapes, vprocessor, steinmb, Gábor Hojtsy, Marc Angles, bwinett: Migrate Drupal 6 core node translation to Drupal 8
• #2560795 by mikeryan, phenaproxima, penyaskito, willwh, benjy: Source plugins have a hidden dependency on migrate_drupal
• #2752591 by quietone, mallezie, dawehner, mikeryan: Add substr process plugin
• #2434567 by marcoscano, daffie, dawehner: Create PHPUnit tests for Database::convertDbUrlToConnectionInfo() and Database::getConnectionInfoAsUrl()
• #2732111 by damiankloip, Lendude, dawehner: Reset button doesn't work and never gets removed on AJAX enabled views
• #2705809 by juampynr, dawehner, damiankloip, lahoosascoots: Queue garbage collection is not correctly run on cron
• #2764687 by alexpott: IpAddressBlockingTest is failing on DrupalCI
• #2734091 by Sam152: Remove tests specific waitForAjaxToFinish methods, replace with assertSession()->assertWaitOnAjaxRequest
• #2761451 by Wim Leers: Document bootstrap cache bin's purpose
• #2595535 by tstoeckler, swentel, vijaycs85, alvar0hurtad0, esolitos: Show helpful message (do not fatal!) when configuration files have different source language codes and cannot be translated
• #2762347: config_test_no_status has wrong edit route

This is a beta release for the next feature release of Drupal 8. Betas are good testing targets for developers and site builders who are comfortable reporting (and where possible, fixing) their own bugs. Beta releases are not recommended for non-technical users, nor for production websites. More information on beta releases.

This minor release provides new improvements and functionality without breaking backward compatibility (BC) for public APIs. Note that there may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies. Both policies have been updated for the 8.1.x release.

For a full list of the API and feature additions included in the 8.2.0 beta, see the 8.2.0-beta1 release notes.

This release includes two new experimental features in addition to those in 8.2.0-beta1:

Content Moderation (alpha stability)

This new experimental feature allows defining content workflow states such as Draft, Archived, and Published as well as which roles have the ability to move content between one state and another. See the Content Moderation roadmap for the next steps for this module.

Outside In (alpha stability)

This is a prototype of Dries's proposed Outside-In usability enhancements, which allow configuring page elements such as blocks from the front-end of your site. Expect this feature to improve a lot visually between now and release candidate as it's tested in front of more users. See the roadmap of outstanding issues, which includes both planned improvements and known accessibility and interaction bugs.

The following important issue has been resolved since 8.2.0-beta1 (in addition to the numerous fixes listed at the end of this post).

• 8.1.8 and 8.2.0-beta1 introduced #2783749: [regression] Config directories should be created by installer if present in settings.php and if possible, which caused an error that prevented installing Drupal or running update.php on some hosting environments. The issue is resolved in this release.

Known issues

The following issues may affect people running Drupal 8.2.0-beta1 on specific hosting environments:

• Installs on php-fpm environments may see fatal errors on enabling modules, due to #2572293: Do not rebuild router in kernel.terminate.
• There is not yet per-commit testing for MySQL 5.7.9 or MariaDB 10.1.8 (both released October 2015), but there are no known issues with them. We intend to add per-commit testing on one of these databases in the future.
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors
  

All changes since 8.2.0-beta1

• #2740983 by VitalyM, alexpott: Configuration system doesn't allow importing a single item from a non-default collection
• #2702227 by claudiu.cristea, jeroen.b, marco.giaco: Image styles for private files are serving the original instead of derivative
• #2785155 by alexpott: _node_access_rebuild_batch_operation uses queries that check access
• #2781673 by Bambell, Berdir: MenuLinkContent menu links can not be set to no parent once they had one
• #2784463 by martin107, naveenvalecha, tim.plunkett: Convert outside_in_page_(top|bottom)() to a #theme_wrappers
• #2786389 by geerlingguy: Typo in documentation for MigratePreRowSaveEvent
• #2779459: KernelTestBase thinks private file setting is in config
• #2782323 by vpshah86, jhodgdon: Node views wizard has wrong sort direction for Title
• #2070559 by Mile23: Harmonize PHPUnit and run-tests to both scan for themes
• #2781207 by timmillwood, dawehner: Use class resolver for abstracted Content Moderation classes
• #2783819 by Lendude: Update AjaxThemeTest to use assertWaitOnAjaxRequest
• #2783393 by Mile23: Fix 'Drupal.Commenting.FunctionComment.IncorrectParamVarName' coding standard
• #2406533 by alexpott, willzyx, olli, Berdir, DamienMcKenna, Dom., Crell, Wim Leers, mdrummond, mirzu, enjoyiacm, catch: edit-form, delete-form etc.
  tags added on /node/{node} are invalid according to W3C Validator
• #2494221 by david_garcia, dagmar: Slow Log/Watchdog clear when there are lots of data
• #2785913 by tim.plunkett: StableTemplateOverrideTest does not respect experimental modules
• #2784263 by klausi: Move WTB::assertCacheContext() to AssertPageCacheContextsAndTagsTrait
• #2783849 by Shashwat Purav, kiamlaluno: hook_filetransfer_info() documentation has not been updated for Drupal 8
• #2785489 by timmillwood: Add "Outside in" maintainer to Maintainers.txt
• #2784689 by hiramanpatil: Repetitive words in 'block_place' module description
• #2754597 by dawehner: Add Lendude to MAINTAINERS.txt for the views and views_ui module
• #2784341 by alexpott: Remove form functions from ModerationInterface
• #2753941 by tedbow, tim.plunkett, tkoleary, SKAUGHT, drpal, effulgentsia, andrewmacpherson, webchick, xjm, Bojhan, G√°bor Hojtsy, Wim Leers, catch, nod_: [Experimental] Create Outside In module MVP to provide block configuration in Off-Canvas tray and expand site edit mode
• #2783749 by alexpott, bircher: [regression] Config directories should be created by installer if present in setings.php and if possible
• #2779939 by alexpott: Cleanup the ModerationInformationInterface
• #2780549 by andrewbelcher, alexpott, mpdonadio: FormattedDateDiff::$maxAge never applied to caches
• #2765437 by gambry, alexpott: _user_mail_notify() always sends emails even if is FALSE
• #2763283 by naught101, thomas73: Failure on comments with no subject
• Revert "Issue #2780549 by andrewbelcher, alexpott, mpdonadio: FormattedDateDiff::$maxAge never applied to caches"
• #2747073 by Mile23: Fix Drupal CS regressions for Coder 8.2.8
• Revert "Issue #1267508 by fietserwin, lisa.ugray, daffie, chx, Crell: Subselects don't work in DBTNG conditions, except when used as value for IN"
• #2781179 by timmillwood: Remove service from class docblocks
• #2778673 by neclimdul: UnitTestCase::getStringTranslationStub() incorrectly documents its return type
• #2392729 by AlviMurtaza, Sumit kumar, Manjit.Singh, simply021, skippednote, studiozut, Vidushi Mehta, vipulaSD, vova_ob, deepakkumar14, Truptti, Maninders, vsawant, meeli, Cottser, jeffrey.vargas, lamaxi, LewisNyman, emma.maria: Optimize Seven's select boxes for small screens
• #2640464 by samuel.mortenson, Chernous_dn, droplet, Wim Leers: Links styled as buttons not placed inside Dialog's button pane ‚Äî prevents "cancel" link/button from showing up
• #2759863 by klausi: Implement request header support for drupalGet() on BrowserTestBase
• #2781953 by vpshah86, fgm: Update.php still refers to $update_free_access
• #2776071 by damiankloip, neclimdul, Mixologic: run-tests.sh does not return a non zero status when tests fail with exception
• #2579343 by Lendude, drclaw, heddn, mikeryan: Migrate rollback does not rollback failed items
• #2778461 by kiamlaluno, joachim: Update hook_cron() sample code
• #2769529 by thpoul, Wim Leers: EditorFileReference class doc needs a small update
• #2780405 by kiamlaluno: ConfigFormBase::buildForm() comment contain a reference to a theme hook, which is a function that doesn't exist
• Revert "Issue #2780703 by chx: Improve context variable names in Block UI test"
• #2780703 by chx: Improve context variable names in Block UI test
• #2780705 by timmillwood: Fix "Manage moderation" dropbutton on /admin/structure/types
• #2725533 by timmillwood, alexpott, amateescu, webchick, dixon_, larowlan, dawehner, catch, Crell, Bojhan, jibran, Wim Leers, agentrickard, Berdir: Add experimental content_moderation module
• #2611638 by Wim Leers, Nikhilesh Gupta: hook_entity_query_alter() is dead, remove it from entity.api.php
• #2780255 by klausi: Replace incorrect EntityTypeBundleInfo type hints with interface
• #2773389 by martin107, claudiu.cristea, klausi: BrowserTestBase::getTextContent() wrongly returns the raw content
• #2755043 by damiankloip: VIews field relationships break when the field name is too long
• #2553733 by alexpott, dawehner, Wim Leers, jibran: BrowserTestBase should be adding the config schema checker like WebTestBase
• #2776779 by juampynr: Fix code example in QueryInterface::condition()
• #2777323 by timmillwood: Add dixon_ as Workflow Initiative coordinator
• #2778479 by kiamlaluno: ModuleHandler::buildImplementationInfo() comment contains a reference to not existing function
• #2723607 by valthebald, deepakaryan1988: Remove entity_load* usage for dynamic entity types
• #2778809 by chx: _entity_access is actually usable but you'd never tell that from the class doxygen
• Revert "Issue #2776071 by damiankloip: run-tests.sh does not return a non zero status when tests fail with exception"
• #2776071 by damiankloip: run-tests.sh does not return a non zero status when tests fail with exception

This is a beta release for the next feature release of Drupal 8. Betas are good testing targets for developers and site builders who are comfortable reporting (and where possible, fixing) their own bugs. Beta releases are not recommended for non-technical users, nor for production websites. More information on beta releases.

This minor release provides new improvements and functionality without breaking backward compatibility (BC) for public APIs. Note that there may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies. Both policies have been updated for the 8.1.x release.

For a full list of the API and feature additions included in the 8.2.0 beta, see the 8.2.0-beta1 release notes and the 8.2.0-beta2 release notes.

This release includes a new experimental feature in addition to those in 8.2.0-beta1 and beta2:

Datetime Range (alpha stability)

The experimental DateTime Range module provides a new field type that allows end dates. This is important for contributed modules like the Calendar module to work with Drupal 8 core. There are some small presentational, usability, accessibility, and translatability issues with the field, and its API may be refactored somewhat as we improve both it and the stable DateTime module. However, the data model for the field has consensus, so contrib and site authors can begin working with the module so long as they are willing to manage the risks of using an alpha experimental module. You can read the DateTime Range module plan for the next steps to make this useful field a part of the Standard installation.

The other following important issues have been resolved since 8.2.0-beta2 (in addition to the numerous fixes listed at the end of this post).

• #2515050: A valid one-time login link may be leaked by the referer header to 3rd parties
• #2776357: Upgrade path for Config translation synchronization failure

Known issues

The following issues may affect people running Drupal 8.2.0-beta1 on specific hosting environments:

• Installs on php-fpm environments may see fatal errors on enabling modules, due to #2572293: Do not rebuild router in kernel.terminate.
• There is not yet per-commit testing for MySQL 5.7.9 or MariaDB 10.1.8 (both released October 2015), but there are no known issues with them. We intend to add per-commit testing on one of these databases in the future.
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors
  

All changes since 8.2.0-beta2

• #2213671 by jhedstrom, richardcanoe, andypost, david_garcia, Antonnavi, dagmar, aleevas, dawehner, alexpott: Log completely unusable when an entry has corrupt serialized data
• #2706951 by Jo Fitzgerald: Field instance migration rollback fails
• #2706947 by Jo Fitzgerald: Field migration rollback fails
• #2705531 by Jo Fitzgerald: View mode migration rollback fails
• #2788487 by timmillwood: Manage moderation tab not displaying on bundle admin
• #2785241 by quietone, G√°bor Hojtsy: Add a translated node to d7_dump
• #2161337 by mpdonadio, darrick, swentel, effulgentsia, YesCT, xjm, Berdir, tim.plunkett, pguillard, SKAUGHT, sylus, jonathanjfshaw, FluxSauce, DuneBL, jhedstrom, dawehner, generalredneck, pjonckiere, borisson_, G√°bor Hojtsy, webchick, miwayha: Add a Date Range field type with support for end date
• #2783483: Make Scott Reeves (Cottser) a full core committer for Drupal 8
• #2780093 by Mile23: Have simpletest, run-tests.sh enforce their dependency on PHPUnit
• #2705823 by Lendude, Crell: BulkForm reports incorrect count
• #2782967 by mikeker: FormTest::testFieldFormUnlimitedRequired claims to test for visually-hidden, but doesn't
• #2784677 by GoZ: Move core/modules/simpletest/tests/src/Functional/BrowserTestBaseTest.php to core/tests/Drupal/FunctionalTests/BrowserTestBaseTest.php
• #2770817 by Lendude: Add javascript testing for sorting AJAX enabled views
• #2747177 by markdorison, chx, Sonal.Sangale, andypost, joachim, Berdir, eojthebrave: Add docs on possible values of $operation in hook_entity_field_access()
• #2549801 by quietone, balagan, lostkangaroo, pingers, martins.kajins, phenaproxima, scuba_fly, penyaskito: Improve source provider missing exception message
• #2776357 by alexpott: Upgrade path for Config translation synchronization failure
• #2787577 by alexpott, dawehner: When tests use multiple namespaces they should do so in a coding standards compliant way
• #2787655: Fix \Drupal\Tests\Core\Form\FormTestBase to not have multiple namespaces
• #2728403 by timmillwood: Non-revisionable translatable fields on revisionable entities don't translate correctly
• #2777651 by mkalkbrenner: Add coverage for uninstalled modules in Drupal\system\Tests\Module\ClassLoaderTest class loading tests
• #2787567 by alexpott: Refactor \Drupal\Component\Assertion\Handle to not break PSR-0/4 one class per file
• #2786855 by claudiu.cristea: Don't compute the lock name if not necessary when generating image derivatives
• #2787183 by Berdir: LinkItem::getUrl() fails if options are NULL
• #2515050 by alexpott, pwolanin, YesCT, David_Rothstein, prasad_gogate: A valid one-time login link may be leaked by the referer header to 3rd parties
• #2762173 by megansanicki, artinst4, YesCT, mradcliffe, a_thakur, vermauv, cilefen, mathieso, pwolanin, mlhess: Add "composer install" step to install.txt file for when Drupal is downloaded using git

This is a patch release of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for an extensive summary of changes and improvements since Drupal 7! Learn more about Drupal 8.

This is also the final scheduled patch release of the 8.1.x series. The next stable release planned for Drupal 8 will be the Drupal 8.2.0 minor release, which is scheduled for October 5, 2016. Sites should plan to update to 8.2.0 once it is released in order to continue receiving bug and security fixes. A release candidate is available for testing.

This release only contains bug fixes, along with documentation and testing improvements.

• It is especially important when updating to this release to follow the instructions when updating core, specifically removing the /core and /vendor directories before replacing files, so that removed files are properly removed. Failure to do so may result in fatal errors after the upgrade.
• There is not yet per-commit testing for MySQL 5.7.9 or MariaDB 10.1.8 (both released October 2015), but there are no known issues with them. We intend to add per-commit testing on one of these databases in the future.
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors
  

Search the issue queue for all known issues.

Changes since 8.1.8:

• #2787187 by claudiu.cristea, grahl, azinck, Fabianx, dawehner: Data loss: Deleting a translation of an entity deletes all file_usage entries for files referenced by the entity
• Revert "Issue #2787187 by claudiu.cristea, grahl, azinck: Data loss: Deleting a translation of an entity deletes all file_usage entries for files referenced by the entity"
• #2787187 by claudiu.cristea, grahl, azinck: Data loss: Deleting a translation of an entity deletes all file_usage entries for files referenced by the entity
• Revert "Issue #2551785 by roland.molnar, nod_, MattA: Unable to scroll toolbar menu items or show contextual links on mobile browsers"
• #2682461 by arunkumark, jonhattan, quietone, benjy, xjm, RavindraSingh, catch: Add links to documentation in all migrate process plugins
• #2760905 by anavarre, claudiu.cristea, amitaibu, dawehner: The documentation should be more explicit about PHPUnit requesting the webserver user to perform all functional tests
• Revert "Issue #2744197 by Boobaa, Wim Leers: Proper private file support for images uploaded via EditorImageDialog"
• #2744197 by Boobaa, Wim Leers: Proper private file support for images uploaded via EditorImageDialog
• #2794207 by alexpott: sys_get_temp_dir() can return a path with a trailing slash
• #2551785 by roland.molnar, nod_, MattA: Unable to scroll toolbar menu items or show contextual links on mobile browsers
• #2787619 by hussainweb, phenaproxima, alexpott: CckMigration does not type hint CckPluginManager correctly
• #2618332 by phenaproxima, jonhattan, rakesh.gectcr, mikeryan, neclimdul: Better handle replacement of missing filters with filter_null
• #2787639 by hussainweb: MigrateCckFieldPluginManager mixes up its behaviour for creating and loading definitions
• #2788343 by mikeker: Entity Reference error message has "@value (@id)" in it
• #2764699 by catch, lainosantos: class "Drupal\user\UserServiceProvider" not found
• #2783117 by eloiv: views.api.php variable $view->name does not exist
• #2777451 by markdorison, er.pushpinderrana, alexpott: @see references not forming links in documentation
• #2490290 by willzyx, Mile23, alexpott, tim.plunkett: Subclasses of EntityListBuilder incorrectly override the #empty message
• #2786195 by larowlan: Deleted block is not removed from the block list
• Revert "Issue #2786195 by larowlan: Deleted block is not removed from the block list"
• #2782009 by alexpott, swentel, reblutus: Create a field with the same name as one being purged results in data destruction of the new field
• #2706951 by Jo Fitzgerald: Field instance migration rollback fails
• #2706947 by Jo Fitzgerald: Field migration rollback fails
• #2705531 by Jo Fitzgerald: View mode migration rollback fails
• #2785241 by quietone, Gábor Hojtsy: Add a translated node to d7_dump
• #2783483: Make Scott Reeves (Cottser) a full core committer for Drupal 8
• #2747177 by markdorison, chx, Sonal.Sangale, andypost, joachim, Berdir, eojthebrave: Add docs on possible values of $operation in hook_entity_field_access()
• #2740983 by VitalyM, alexpott: Configuration system doesn't allow importing a single item from a non-default collection
• #2787183 by Berdir: LinkItem::getUrl() fails if options are NULL
• #2515050 by alexpott, pwolanin, YesCT, David_Rothstein, prasad_gogate: A valid one-time login link may be leaked by the referer header to 3rd parties
• #2762173 by megansanicki, artinst4, YesCT, mradcliffe, a_thakur, vermauv, cilefen, mathieso, pwolanin, mlhess: Add "composer install" step to install.txt file for when Drupal is downloaded using git
• #2702227 by claudiu.cristea, jeroen.b, marco.giaco: Image styles for private files are serving the original instead of derivative
• #2785155 by alexpott: _node_access_rebuild_batch_operation uses queries that check access
• #2786389 by geerlingguy: Typo in documentation for MigratePreRowSaveEvent
• #2070559 by Mile23: Harmonize PHPUnit and run-tests to both scan for themes
• #2406533 by alexpott, willzyx, olli, Berdir, DamienMcKenna, Dom., Crell, Wim Leers, mdrummond, mirzu, enjoyiacm, catch: edit-form, delete-form etc.
  tags added on /node/{node} are invalid according to W3C Validator
• #2785913 by tim.plunkett: StableTemplateOverrideTest does not respect experimental modules
• #2783849 by Shashwat Purav, kiamlaluno: hook_filetransfer_info() documentation has not been updated for Drupal 8
• #2754597 by dawehner: Add Lendude to MAINTAINERS.txt for the views and views_ui module
• #2783749 by alexpott, bircher: [regression] Config directories should be created by installer if present in setings.php and if possible
• #2780549 by andrewbelcher, alexpott, mpdonadio: FormattedDateDiff::$maxAge never applied to caches
• #2765437 by gambry, alexpott: _user_mail_notify() always sends emails even if is FALSE
• #2763283 by naught101, thomas73: Failure on comments with no subject
• #2747073 by Mile23: Fix Drupal CS regressions for Coder 8.2.8
• #2778673 by neclimdul: UnitTestCase::getStringTranslationStub() incorrectly documents its return type
• #2640464 by samuel.mortenson, Chernous_dn, droplet, Wim Leers: Links styled as buttons not placed inside Dialog's button pane — prevents "cancel" link/button from showing up
• #2579343 by Lendude, drclaw, heddn, mikeryan: Migrate rollback does not rollback failed items
• #2778461 by kiamlaluno, joachim: Update hook_cron() sample code
• #2780405 by kiamlaluno: ConfigFormBase::buildForm() comment contain a reference to a theme hook, which is a function that doesn't exist
• #2611638 by Wim Leers, Nikhilesh Gupta: hook_entity_query_alter() is dead, remove it from entity.api.php
• #2773389 by martin107, claudiu.cristea, klausi: BrowserTestBase::getTextContent() wrongly returns the raw content
• #2755043 by damiankloip: VIews field relationships break when the field name is too long
• #2776779 by juampynr: Fix code example in QueryInterface::condition()
• #2777323 by timmillwood: Add dixon_ as Workflow Initiative coordinator
• #2778809 by chx: _entity_access is actually usable but you'd never tell that from the class doxygen

This is a release candidate for the next feature release of Drupal 8. Release candidates are not supported for production sites, but they are intended for widespread testing in preparation for the upcoming stable release. More information on release candidates.

This minor release provides new improvements and functionality without breaking backward compatibility (BC) for public APIs. Note that there may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies.

For a full list of the API and feature additions included in the 8.2.0 release candidate, see the 8.2.0-beta1, 8.2.0-beta2, and 8.2.0-beta3 release notes.

Translators should take note of the string changes since the last minor release. Developers can review the change records for this release.

BigPipe experimental module enters beta

The BigPipe experimental module (which provides greatly improved perceived performance for pages with dynamic, personalized, or uncacheable content) is now considered beta stability, which means it is ready for use and testing by early adopters, and the API is stable enough for developers to begin using and extending it. One additional key feature is planned for the 8.3.x branch, and other changes may happen as needed to fix bugs.

Known issues

There are no known regressions in this release.

Search the issue queue for all known issues.

All changes since 8.2.0-beta3

• #2787187 by claudiu.cristea, grahl, azinck, Fabianx, dawehner: Data loss: Deleting a translation of an entity deletes all file_usage entries for files referenced by the entity
• Revert "Issue #2787187 by claudiu.cristea, grahl, azinck: Data loss: Deleting a translation of an entity deletes all file_usage entries for files referenced by the entity"
• #2787187 by claudiu.cristea, grahl, azinck: Data loss: Deleting a translation of an entity deletes all file_usage entries for files referenced by the entity
• #2758559 by eporama, leolando.tan, kamalrajsahu21, tstoeckler, larowlan, claudiu.cristea: EntityType::setStorageClass() violates its interface
• #2787641 by pwolanin, YesCT: Add non-UI mechanism for setting block weight through block forms
• #2793443 by dawehner: Make private functions protected in BrowserTestBase/KernelTestBase
• #2790111 by neclimdul, mikeryan: DrupalSqlBase doesn't include missing source in requirements exception
• #2793349 by nod_, droplet: Fix eslint errors
• #2786583 by claudiu.cristea, jhedstrom, effulgentsia: Create a base class for DateTimeFieldTest and DateRangeFieldTest and move common code into it
• #2682461 by arunkumark, jonhattan, quietone, benjy, xjm, RavindraSingh, catch: Add links to documentation in all migrate process plugins
• #2760905 by anavarre, claudiu.cristea, amitaibu, dawehner: The documentation should be more explicit about PHPUnit requesting the webserver user to perform all functional tests
• Revert "Issue #2744197 by Boobaa, Wim Leers: Proper private file support for images uploaded via EditorImageDialog"
• #2744197 by Boobaa, Wim Leers: Proper private file support for images uploaded via EditorImageDialog
• #2794207 by alexpott: sys_get_temp_dir() can return a path with a trailing slash
• #2762715 by pontus_nilsson: Typo in documentation for range form element
• #2459289 by Lendude, dhrjgpt2005, kalistos, dawehner, david_garcia: Boolean default values are not saved
• #2750639 by chx, mikeryan: Gather some migration dependencies automatically
• #2730973 by Wim Leers, larowlan, JonasRMuc, andypost: Comment permalinks are cached incorrectly when multiple pages exist
• #2551785 by roland.molnar, nod_, MattA: Unable to scroll toolbar menu items or show contextual links on mobile browsers
• #2787135 by drpal, xjm, swentel, cashwilliams: Editing mode gets "stuck" after switching between configuration of different blocks
• #2792817 by Wim Leers, dawehner: BigPipe decorates html_response.attachments_processor, but uses an inner name based on the decorated service, which can cause problems
• #2560795 by chx, alexpott, mikeryan, phenaproxima, penyaskito, willwh, generalredneck, benjy: Source plugins have a hidden dependency on migrate_drupal
• #2793091 by alexpott, neclimdul: Refactor EntityFile "unit" test fails
• #2739079 by DyanneNova, akalata, webchick, tkoleary, pwolanin, SKAUGHT, elliotc, lizzjoy, YesCT, yoroy, miwayha: Create a validated design for Block Place module
• #2786459 by tedbow, nod_, martin107, tkoleary, droplet, drpal: "Offcanvas" tray should be using the existing dialog system
• #2787619 by hussainweb, phenaproxima, alexpott: CckMigration does not type hint CckPluginManager correctly
• #2695297 by mikeryan, ohthehugemanatee, quietone, vasi, Sharique, chx, benjy, phenaproxima, heddn, benjifisher: Refactor EntityFile and use process plugins instead
• #2792831 by mkalkbrenner: YamlSymfonyTest must not require PHP yaml extension
• #2618332 by phenaproxima, jonhattan, rakesh.gectcr, mikeryan, neclimdul: Better handle replacement of missing filters with filter_null
• #2642260 by gnuget, gargsuchi, naveenvalecha, dinarcon: Missing URL fragment for the comment's title link
• #2792133: Quickfix: Undo inadvertent aggregator test fixture changes
• #2791955 by larowlan: Convert \Drupal\node\Tests\NodeAccessTest to a KernelTest
• #202783 by evgeny.chernyavskiy, jrdixey, YesCT, subhojit777, adinac, jeet09, gaurav_varshney, alansaviolobo, Devin Carlson, chetan2111, beanworks, phantomvish: Use a consistent name for the aggregator module throughout core
• #2428509 by andypost, rahul.shinde, emma.maria: Comment links weight should be managed by view display
• #2787639 by hussainweb: MigrateCckFieldPluginManager mixes up its behaviour for creating and loading definitions
• #2788343 by mikeker: Entity Reference error message has "@value (@id)" in it
• #2764699 by catch, lainosantos: class "Drupal\user\UserServiceProvider" not found
• #2791335 by pwolanin: Optimize repeated method call in PlaceBlockPageVariant::build, use service instead of direct query string
• #2721901 by Mile23, anoopjohn: Fix Drupal.Commenting.FunctionComment.MissingParamName
• #2783117 by eloiv: views.api.php variable $view->name does not exist
• #2777451 by markdorison, er.pushpinderrana, alexpott: @see references not forming links in documentation
• #2779807 by jhedstrom: Bring RestExport::buildResponse into line with Feed::buildResponse
• #2786195 by larowlan: Deleted block is not removed from the block list
• Revert "Issue #2786195 by larowlan: Deleted block is not removed from the block list"
• #2490290 by willzyx, Mile23, alexpott, tim.plunkett: Subclasses of EntityListBuilder incorrectly override the #empty message
• #2572801 by alexpott, vprocessor, andriyun, andypost, chishah92, Mile23, attiks, hussainweb, klausi, dawehner, pfrenssen: Fix 'Drupal.WhiteSpace.ScopeIndent' coding standard
• #2782009 by alexpott, swentel, reblutus: Create a field with the same name as one being purged results in data destruction of the new field
• #2783395 by Mile23: Fix 'Drupal.Commenting.FunctionComment.InvalidReturn' coding standard
• #2771547 by Lendude, klausi, dawehner, alexpott, pwolanin: In Browser and FunctionalJavascript tests SIMPLETEST_USER_AGENT cookie needs to be set every 5 seconds

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcements:

• Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-004

No other fixes are included.

No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues

See the list of the known issues for the 8.1.x branch. There are no known regressions in this release.

This is a release candidate for the next feature release of Drupal 8. Release candidates are not supported for production sites, but they are intended for widespread testing in preparation for the upcoming stable release. More information on release candidates.

This minor release provides new improvements and functionality without breaking backward compatibility (BC) for public APIs. Note that there may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies. Note that both policies have been updated for the 8.1.x release.
For a full list of the API and feature additions included in the 8.2.0 release candidate, see the 8.2.0-beta1, 8.2.0-beta2, 8.2.0-beta3, 8.2.0-rc1 release notes.

Translators should take note of the string changes since the last minor release. Developers can review the change records for this release.

Important changes in this release

8.2.0-rc2 fixes security vulnerabilities described in SA-CORE-2016-004. Sites running 8.2.0-rc1 or earlier should update immediately to get the latest security fixes.

8.2.0-rc2 also provides a number of fixes for critical regressions from 8.1.x that blocked contributed projects for 8.2.x, as well as other critical and major bugfixes. Of note:

• #2796953: [regression] Plugins extending from classes of uninstalled modules lead to fatal error
• #2803179: [regression] rest_update_8201() can fail and break things
• #2773333: Form validation errors, status messages on form submission are shown after page refresh when form is rendered in block
• #2787479: Anon users can access editor dialogs because all users have plain_text
• #2539634: PathItem::delete() never runs because the path field type is a computed field in disguise

The release fixes two long-standing bugs that caused automated testing failures as well:

• #2791163: Random automatic testing failures on SQLite with PHP 5.5
• #2762549: Drupal\field\Tests\Update\FieldUpdateTest, Drupal\views\Tests\Update\EntityViewsDataUpdateTest and Drupal\comment\Tests\CommentFieldsTest fail on 8.1.x

Outside In renamed to Settings Tray

The Outside In module has been renamed from its development name to Settings Tray, so that users can identify its purpose from the name. The module's machine name and code have not changed, so sites running this module on 8.2.0-beta2 or later do not need to take any special steps for updating.

Third-party updates

The RC includes one vendor library update: #2797427: Update CKEditor library to 4.5.11

Known issues

There are no known regressions in this release.

The following issues may affect people running Drupal 8.2.0-rc2 on specific hosting environments:

• Windows/IIS environments may encounter site errors due to the following issues:
  • #2606772: Long Twig cache directories can cause failures on Windows
  • #2783079: DRUPAL-SA-CORE-2016-003 Completely broke IIS drupal deployments
• There is not yet per-commit testing for MySQL 5.7.9 or MariaDB 10.1.8 (both released October 2015), but there are no known issues with them. We intend to add per-commit testing on one of these databases in the future.
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors
  
• Installs on php-fpm environments may see fatal errors on enabling modules, due to #2572285: Module enabling and router rebuilding should be done in one transaction

Search the issue queue for all known issues.

All changes since 8.2.0-rc1

• SA-CORE-2016-004 by alexpott, andypost, antongp, cashwilliams, catch, Chi, dawehner, dsnopek, Heine, kierheyl, Pere Orga, pwolanin, larowlan, q2u, stefan.r, xjm
• #2782803 by tkoleary, tedbow, xjm, cilefen, yoroy, davidhernandez, prestonso, David_Rothstein, Gábor Hojtsy, nod_, Dries: Rename Outside-in module to "Settings Tray" in the UI and in comments
• #2803179 by Wim Leers, MKorostoff, Berdir, dawehner: [regression] rest_update_8201() can fail and break things
• #2796953 by Wim Leers, mondrake, effulgentsia, catch, mikeryan, ayalon, chx, Fabianx, tim.plunkett, jibran, xjm, slashrsm, phenaproxima, borisson_: [regression] Plugins extending from classes of uninstalled modules lead to fatal error
• #2782885 by tedbow, rakesh.gectcr, xjm, webchick, tkoleary, drpal: No indication what page element is being configured with Outside In
• #2781577 by tim.plunkett, tkoleary, Bojhan, rickvug, Wim Leers: Properly style outside-in off canvas tray
• #2763787 by nerdstein, rlhawk, slasher13, therealssj, TravisCarden: Upgrade random_compat to latest version
• #2801259: Remove include from TestDabase class
• #2794249 by alexpott: Move file_directory_os_temp() to a class in Drupal\Component\FileSystem
• #2799959 by Shashwat Purav: incorrect summary line for menu_ui_form_node_type_form_validate()
• #2797427 by thpoul: Update CKEditor library to 4.5.11
• #2790855 by tedbow, drpal, xjm, tkoleary, tim.plunkett, Wim Leers, Cottser: Rework animation for standard dialog system
• Revert "Issue #2785589 by nod_, tedbow, drpal, droplet: Fix js and jsdoc of outside-in module"
• #2784465 by naveenvalecha, martin107: Update help text for the Outside In module
• #2784513 by drpal, tedbow, nod_: Off-canvas tray requires feedback on load
• #2799053 by sanduhrs: Environment is not preserved running phpunit with a different user
• #2762549 by alexpott, Fabianx, Mixologic, xjm: Drupal\field\Tests\Update\FieldUpdateTest, Drupal\views\Tests\Update\EntityViewsDataUpdateTest and Drupal\comment\Tests\CommentFieldsTest fail
• #2791163 by alexpott, dawehner: Random automatic testing failures on SQLite with PHP 5.5
• #2755677 by Mile23: Fix 'Drupal.WhiteSpace.OpenTagNewline' coding standard
• #2801883 by claudiu.cristea: Add an empty $modules property in BrowserTestBase
• #2785589 by nod_, tedbow, drpal, droplet: Fix js and jsdoc of outside-in module
• Revert "Issue #2485385 by phenaproxima, quietone, Berdir, blazey, hussainweb, mikeryan, benjy, alexpott: Move highwater field support to the source plugin, and do not expose its internals on MigrationInterface"
• #2485385 by phenaproxima, quietone, Berdir, blazey, hussainweb, mikeryan, benjy, alexpott: Move highwater field support to the source plugin, and do not expose its internals on MigrationInterface
• #2798335 by naveenvalecha: Menu.api.php references a renamed class
• #2799021 by dawehner, Wim Leers: Ensure a failing PHPUnit test shows enough information via run-tests.sh
• #2773333 by Berdir, Juterpillar, Wim Leers, Fabianx, renukakulkarni: Form validation errors, status messages on form submission are shown after page refresh when form is rendered in block
• #2657978 by maxocub, quietone, Gábor Hojtsy, Kristen Pol, alexpott: Variable to config: language_default [d6]
• #2793731 by mikeryan: Obsolete destination properties in d6_file/d6_user_picture_file
• #2785657 by mathieso, dishabhadra, ifrik, dawehner, YesCT, tim.plunkett: Misleading text in block visibility pages description
• #2787479 by Wim Leers, Sam152, quicksketch: Anon users can access editor dialogs because all users have plain_text
• #2791211 by cilefen: Cache::getBins should explain the returned data types implement CacheBackendInterface
• #2785891 by xjm, dawehner, tim.plunkett, alexpott, catch, YesCT, daffie, webchick: The distinctions between modules, themes, and other subsystems are not relevant in MAINTAINERS.txt or the issue queue component field
• #2539634 by Berdir, dawehner, cilefen, mpp, claudiu.cristea, amateescu, kristiaanvandeneynde: PathItem::delete() never runs because the path field type is a computed field in disguise
• #2797943 by jmuzz, claudiu.cristea, dawehner: Add support for clickLink()'s second argument to BrowserTestBase
• #2794715 by Mile23, klausi: TestSuiteBaseTest cannot be executed as standalone test
• Revert "Issue #2793443 by dawehner: Make private functions protected in BrowserTestBase/KernelTestBase"
• #2797173 by joshmiller: Fix typo in CurrentUser.php

This is a minor version (feature release) of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for a summary of changes and improvements since the last minor release. Learn more about Drupal 8 and the Drupal 8 release cycle.

This minor release provides new improvements and functionality without breaking backward compatibility (BC) for public APIs. Note that there may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies.

Critical bug fixes

• #2807705: FormattableMarkup::placeholderFormat() can result in unsafe replacements
• #2783079: DRUPAL-SA-CORE-2016-003 Completely broke IIS drupal deployments
• #2773333: Form validation errors, status messages on form submission are shown after page refresh when form is rendered in block
• #2776235: Cached autoloader misses cause failures when missed class becomes available
• #2567715: #markup generated by #pre_render callbacks do not get processed by ensureMarkupIsSafe()
• #2782009: Create a field with the same name as one being purged results in data destruction of the new field
• #2776357: Upgrade path for Config translation synchronization failure
• #2702227: Image styles for private files are serving the original instead of derivative
• #2804675: Tests using TestDatabase class are stuck in an infinite loop in Windows (8.2.0-rc2 only)

Improved authoring features

• #88183: Relative URLs are automatically converted to absolute ones when content is output to an RSS feed.
• #2490136: Enabled revisions by default on new node types.
• #306662: Added a redirect option to site-wide contact forms.
• #2513402: Whenever a new entity is created, a link to it is now provided in a status message, for easy access to it regardless of the form workflow.
• #2090937: Styled CKEditor dialogs to match Drupal dialogs.

Improved site building and administrative features

• #2688945: Added the ability to remove a module's content entities prior to uninstallation.
• #2627678: Made it possible to select the comment view mode in the formatter form.
• Made numerous improvements to user interface text.

Improved web services features

• #2724823: Added support for reading (GET) configuration entities as REST resources
• #2403307: Added dedicated resources for user login, logout and registration
• #2228141: Added support for selecting an authentication mechanism as part of the configuration of a REST Export Views Display
• #1869548: Added a cors.config service parameter for enabling and configuring Cross-origin resource sharing (CORS)
• #2721595: Simplified REST configuration via per-resource configuration entities and an optional less verbose configuration structure for common cases
• #2659070: Improved the response messages and status codes for requests with missing or incorrect headers
• #2662284: Improved responses to PATCH requests to entity resources to contain the updated entity in the response body

Improved performance and scalability

• #2699613: In the internal page cache, 404 responses are now cached for a shorter time (1 hour by default), to consume less space.
• #2699627: Breadcrumbs are now cached by the parent of the path rather than the full path, for fewer cache entries and higher cache hit rates.

Testing improvements

• #2735045: Increased feature parity of BrowserTestBase with WebTestBase, including a deprecated AssertLegacyTrait for easier conversions.
• #2456477: Converted all kernel tests to the PHPUnit-based kernel test API.
• #2707467: Improved error reporting for all PHPUnit tests (including unit, kernel, browser, and JavaScript tests).

See the Drupal core change records for additional information on API changes. Translators should take note of a handful of minor string changes since the last release.

Experimental modules

The modules listed in this section are considered experimental for this release. Experimental modules are provided with Drupal core for testing purposes, but are not yet fully supported.

Increased stability in 8.2.0

BigPipe (beta stability)

Provides an advanced implementation of Facebook's BigPipe page rendering strategy, leading to greatly improved perceived performance for pages with dynamic, personalized, or uncacheable content. (See the BigPipe handbook page.) BigPipe is now considered beta stability, which means it is ready for use and testing by early adopters, and the API is stable enough for developers to begin using and extending it. One additional key feature is planned for the 8.3.x branch, and other changes may happen as needed to fix bugs.

New in 8.2.0

Place Block (alpha stability)

This new 8.2.x feature allows the user to place a block on any page and see the region where it will be displayed, without having to navigate to a backend administration form.

Settings Tray (machine name: outside_in, alpha stability)

This is a prototype of Dries's proposed Outside-In usability enhancements, which allow configuring page elements such as blocks from the front-end of your site. See the roadmap of outstanding issues, which includes both planned improvements and known accessibility and interaction bugs.

Content Moderation (alpha stability)

This new experimental feature allows defining content workflow states such as Draft, Archived, and Published as well as which roles have the ability to move content between one state and another. See the Content Moderation roadmap for the next steps for this module.

Datetime Range (alpha stability)

The experimental DateTime Range module provides a new field type that allows end dates. This is important for helping contributed modules like the Calendar module to work with Drupal 8 core. There are some small presentational, usability, accessibility, and translatability issues with the field, and its API may be refactored somewhat as we improve both it and the stable DateTime module. However, the data model for the field has consensus, so contrib and site authors can begin working with the module so long as they are willing to manage the risks of using an alpha experimental module. You can read the DateTime Range module plan for the next steps to make this useful field a part of the Standard installation.

Still under development

Migrate, Migrate Drupal, and Migrate Upgrade UI (alpha stability)

Use these modules to migrate Drupal 6 or 7 sites onto Drupal 8. See the user guide on upgrading from Drupal 6 or 7 to Drupal 8 for more information. Always back up your data before performing a migration.

• Issues tagged Migrate critical are blockers for these modules being considered stable.
• Drush support is currently only available in the Drupal Upgrade contributed module.
• This release includes an important developer experience improvement for modules providing migrations: #2560795: Fixed the Migrate module to skip over migration sources that require code from uninstalled modules.
• Core now provides migrations for most Drupal 6 data and can be used for migrating Drupal 6 sites to Drupal 8 (now including migrations for core node translations!), but the migration of multilingual functionality is still not complete.
• The Drupal 7 to Drupal 8 migration is incomplete, but is suitable for developers who would like to help improve the migration, and can be used to test upgrades especially for simple Drupal 7 sites. (Outstanding issues for the Drupal 7 to Drupal 8 migration)

Inline Form Errors (alpha stability)

This provides a proof-of-concept for showing form errors inline for improved accessibility. This module has outstanding issues, some of which are significant. This module may be removed from core in 8.3.x if the issues are not resolved within the next six months.

Third-party library updates

• #1869548: Added Stack/Cors 1.0.0.
• #2700741: Updated to jQuery 2.2.3
• #2721351: Updated to Twig 1.24
• #2797427: Updated to CKEditor 4.5.11
• #2712633: Updated to Symfony Routing 1.4.0
• #2712637: Updated to Stack/Builder 1.0.4
• SA-CORE-2016-003: Updated to Guzzle 6.2.1

Changed coding standards

Drupal 8.2.0 has adopted the following coding standards changes:

• #2648050: Local variables and parameters can now use camelCase
• #2248463: A blank line is now required after the <?php opening tag
• #2333243: Relax .gitattributes global rule

Known issues

Drupal 8.2.0 introduces a critical regression for sites using the Rules module that causes blocks to not appear after being placed. Other modules may be affected as well. We are working on a fix for this bug, but in the interim, workarounds are to remain on 8.1.10 until a complete fix is available, or to temporarily disable Rules. Follow #2811519: Blocks do not appear after being placed for more information.

Drupal 8 currently has a number of known issues related to incorrect tracking of file usage, which can result in files being unexpectedly deleted from a site. (These issues also existed in 8.0.x and 8.1.x but have been recently discovered.) Site owners experiencing unexplained file loss should consider setting "Delete orphaned files" to "Never" on /admin/config/media/file-system until these issues are resolved, and note the following issues:

• #2801777: Give users the option to prevent Drupal from automatically marking unused files as temporary
• #2708411: File usage not incremented when adding new translation
• #1239558: Deleting a node with revisions does not release file usage
• #2666700: User profile images unexpectedly deleted

The following issues may affect people running Drupal 8.2.0 on specific hosting environments:

• Windows/IIS environments may encounter site errors due to #2606772: Long Twig cache directories can cause failures on Windows
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors

Search the issue queue for all known issues.

All changes since 8.2.0-rc2

• #2811357 by alexpott, mattlt, jibran: Fix CHANGELOG.txt for 8.2.0 to remove paragonie/random_compat update
• #2795845 by effulgentsia, xjm, dawehner, cilefen, alexpott, timmillwood, Gábor Hojtsy, Wim Leers, chx, Cottser, catch, vaplas: Add changelog for Drupal 8.2.0
• #2807705 by alexpott, dawehner, aburke626: FormattableMarkup::placeholderFormat() can result in unsafe replacements
• #2809853 by joelpittet: Xss::filterAdmin() typo
• #2782309 by samuel.mortenson, martin107: Refactor File and Image related image field creation logic into a new trait
• #2734663 by klausi, jibran, dawehner, naveenvalecha: Update deprecation message for old KernelTestBase in simpletest
• #2801851 by shashikant_chauhan, Yogesh Pawar, phenaproxima, mikeryan: Remove system-of-record APIs from migrate
• #2783079 by david_garcia, alexpott: DRUPAL-SA-CORE-2016-003 Completely broke IIS drupal deployments
• Revert "Issue #2662844 by penyaskito, dawehner, catch: cache.backend.chainedfast misbehaves in some situations"
• #2806827 by shashikant_chauhan, joachim: incorrect sample code in hook_node_links_alter()
• #2808497 by klausi, alexpott: Prophecy mocking broken on PHP 7 because of old phpunit version
• #2485385 by phenaproxima, quietone, alexpott, mikeryan, Berdir, blazey, xjm, hussainweb, catch, heddn, benjy: Move highwater field support to the source plugin, and do not expose its internals on MigrationInterface
• #2805213 by agoradesign: Incorrect documentation for EntityAccessControlHandler::checkFieldAccess()
• #2804525 by shashikant_chauhan, joachim: EntityTypeManager should mention hook_entity_type_build()
• #2807689 by cilefen: Add cilefen as a provisional maintainer to MAINTAINERS.txt
• #2706405 by heddn, edysmp, davidparedes21, mikeryan, phenaproxima: File migrations *always* copy in files, even if the files were off-line copied to destination
• #2807271 by Mile23: run-tests.sh needs to output an exception to stderr for the testbot
• #2807171 by alexpott: Use the correct testing table prefix in simpletest_clean_database()
• #2776235 by mikeryan, alexpott: Cached autoloader misses cause failures when missed class becomes available
• #2674152 by Jo Fitzgerald, hussainweb: D7 User fields content not migrating first time
• #2791119 by phenaproxima, quietone, chx, mikeryan, benjy: Write meaningful Migrate source tests
• #2804675 by alexpott, hideaway: Tests using TestDatabase class are stuck in an infinite loop in Windows (8.2.0-rc2 only)
• #2567715 by marthinal, hgoto, jpd4nt, mr.baileys, Wim Leers, alexpott: #markup generated by #pre_render callbacks do not get processed by ensureMarkupIsSafe()
• #2738567 by jmuzz, mtift, claudiu.cristea, dawehner, samuel.mortenson: Add test trait for drupalGetTestFiles and drupalCompareFile
• #2681869 by mikeryan, benjy: Provide clean way to merge configuration into migration plugins
• #2684567 by gnuget, chx, heddn, vasi, mikeryan: Requiring a migration w/ a source plugin using a generator fatals
• #2773733 by claudiu.cristea, klausi, dawehner: Fix AssertLegacyTrait::assert(No)Text to handle html encoded strings (part 3)
• #2500533 by quietone, phenaproxima: Upgrade path for System 7.x
• #2798097 by klausi, claudiu.cristea: Move all kernel tests to their correct phpunit location
• #2802719 by maxocub: Publishing status option migrate to empty checkbox
• #2753939 by phenaproxima, alexpott: BlockRegion process plugin should be source theme-aware
• #2803117 by chx: JavascriptTestBase catches the wrong exception
• #2785589 by tedbow, nod_, droplet, drpal, alexpott, Wim Leers, xjm: Fix js and jsdoc of outside-in module
• #2798609 by hardik.p, shashikant_chauhan, naveenvalecha, joachim, daffie: field.purge.inc points to php.net delete function
• #2801551 by gianani: getBundleEntityType() can return NULL
• Revert "Issue #2763787 by nerdstein, rlhawk, slasher13, therealssj, TravisCarden: Upgrade random_compat to latest version"
• #2800703 by Shashwat Purav: syntax error in deprecation notice's sample code
• #2773185 by Wim Leers, effulgentsia, dawehner: Fix nits in \Drupal\rest\Entity\ConfigDependencies
• #2798523 by naveenvalecha: missing @param in ContactFormEditForm constructor
• #2797721 by jp.stacey: Custom form handler's submitForm not called when using example in documentation
• #2802301 by tstoeckler: Use route providers for ModerationState(|Transition)
• #2801855 by dbt102: Add_content_moderation_help
• #2795579 by martin107, klausi, dawehner: Adapt assertCacheContexts to not rely on the return value of assertIdentical
• #2771187 by Lendude: Add javascript testing for pagination on AJAX enabled views
• #2690389 by reszli, mikeryan, Gábor Hojtsy, juancasantito, zsofi.major, edgewl2, alexpott, jlbellido, penyaskito: Fix string translation in MigrateUpgradeRunBatch
• #2794735 by harings_rob: Wrong documentation on Drupal\rest\Plugin\rest\resource\EntityResource

Maintenance release of the Drupal 7 series. Includes a variety of improvements and bug fixes (no major, non-backwards-compatible new functionality).

No security fixes are included in this release.

Two change records are associated with the 7.51 release:

• New allow_css_double_underscores variable to allow for double underscores in CSS identifiers
• system_region_list() now takes an (optional) new third parameter

Except for documentation additions, no changes have been made to the .htaccess, web.config, robots.txt, and default settings.php files in this release, so upgrading custom versions of those files is not necessary.

PHP 7 support:

Just a reminder that as of Drupal 7.50, there are no known PHP 7 issues (see #2656548: Fully support PHP 7 in Drupal 7). PHP 7 is officially supported by Drupal 7 and recommended for use where possible.

Known issues:

None.

Major changes since 7.50:

• The Update module now also checks for updates to a disabled theme that is used as an admin theme.
• Exceptions thrown in dblog_watchdog() are now caught and ignored.
• Clarified the warning that appears when modules are missing or have moved.
• Log messages are now XSS filtered on display.
• Draggable tables now work on touch screen devices.
• Added a setting for allowing double underscores in CSS identifiers (https://www.drupal.org/node/2810369).
• If a user navigates away from a page while an Ajax request is running they will no longer get an error message saying "An Ajax HTTP request terminated abnormally".
• The system_region_list() API function now takes an optional third parameter which allows region name translations to be skipped when they are not needed (API addition: https://www.drupal.org/node/2810365).

All changes since 7.50:

• #2497259 by David_Rothstein: Followup for system_region_list() unnecessarily translates region names
• #2762241 by David_Rothstein, wylbur: Missing default.profile from the file system
• #2808789 by hanoii, nod_, heddn, geerlingguy, lokapujya, David_Rothstein, mangy.fox, xurizaemon, timfernihough, jibran, effulgentsia, j0rd, joelpittet, temkin, slashrsm, maxi Todorov, leewillis77, droplet, showrx, orbiteleven, opdavies, rooby, yechuah, shabana.navas, nikunjkotecha, ehj-52n, jhedstrom, sah62, edutrul, rfay, seutje, drupalshrek: Drupal alerts "An AJAX HTTP request terminated abnormally" during normal site operation, confusing site visitors/editors
• #2379947 by ndobromirov, othermachines, hgoto, David_Rothstein: Prevent maximum execution time from being exceeded for large .po files in _locale_import_po()
• #1443342 by joseph.olstad, mikeytown2, LauraRocks, xjm, stefan.r, joelpittet, brianV, effulgentsia, Fabianx, Mac_Weber: Inline file_uri_scheme() in file_stream_wrapper_uri_normalize() and other file.inc functions
• #2009584 by hgoto, jtwalters, rteijeiro, ry5n, emattias, Fabianx: Allow double underscores to pass through drupal_clean_css_identifier as per new CSS standards
• #2720853 by joseph.olstad, donquixote, Fabianx, quicksketch: D7 Improve theme registry build performance by 85%
• #2459339 by hgoto, dagmar, klausi, kporras07, David_Rothstein, Fabianx: Log messages should be XSS filtered on display
• #1261002 by LewisNyman, Pere Orga, nod_, Trey, quicksketch, jessebeach, mglaman, blueshadow2911, sabsbrain, Fabianx: Draggable tables do not work on touch screen devices
• #2672088 by joelpittet, stefan.r, daffie, catch, mikeytown2, Fabianx, dawehner: Add static cache to DatabaseConnection ::escapeDatabase(), ::escapeTable(), ::escapeField() and ::escapeAlias()
• #2497259 by aerozeppelin, catch, tim.plunkett, alexpott: system_region_list() unnecessarily translates region names
• #2774725 by sandip27: Wrong hook is invoked (hook_aggregator_process() rather than hook_aggregator_process_info())
• #2794155 by kiamlaluno: user_save() documentation has a note for Drupal 8 that is not anymore valid
• #2794547: Remove xjm from MAINTAINERS.txt in D7
• #2201615 by hgoto: locale_translate_edit_form_submit() should check is_string(), instead of !empty() for string
• #2764221 by stefan.r, vensires, Fabianx, fietserwin: utf8mb4IsSupported() shouldn't guess that InnoDB is the default engine
• #2776439 by aerozeppelin, Novitsh, makbul_khan8: [D7] system_block_ip_action() adding empty IP record in blocked_ips table
• #1880224 by joelpittet, thedavidmeister, rooby, validoll, monta: Notice: Undefined index: value in theme_status_report() (line 2577 of modules/system/system.admin.inc)
• #2784561 by stefan.r, GoZ, Fabianx: [D7] IpAddressBlockingTest is failing on DrupalCI for PHP 7
• #2468537 by hgoto, cilefen: The update module does not check updates for the admin theme if it is disabled
• #2051453 by hgoto, joyceg, prabhurajn654, Fabianx: syntax error in update_manager_update_form()
• #2764131: Missing modules warning instructions don't make sense for certain situations (such as for old Drupal 6 module entries in the system table)
• #1784548 by btopro, Fabianx, Berdir, rbayliss, xaa: DB Log is missing watchdog table after enabling - Need to catch and ignore exceptions thrown in dblog_watchdog()
• #2738933 by id.medion, chishah92: Remove unused argument in the function call field_cache_clear()
• #2766537 by bhavikshah9, mforbes: Missing asterisk in one line of default.settings.php documentation block

This is a patch release of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for an extensive summary of changes and improvements since Drupal 7! Learn more about Drupal 8.

This release only contains bug fixes, along with documentation and testing improvements. It fixes the following two critical issues in 8.2.0:

Changes since 8.2.0:

• Drupal 8.2.1
• #2811519 by tim.plunkett, dbourrion, cilefen, futurmat: Blocks do not appear after being placed with the Rules module enabled (or other missing schemata for Condition plugins)
• #2811927 by timmillwood, alexpott: Disabling Content moderation on a bundle, removes the ability to perform create content on that bundle
• Back to dev.

Search the issue queue for all known issues.

This is a patch release of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for a summary of changes and improvements since the last minor release. Learn more about Drupal 8.

This release only contains bug fixes, along with documentation and testing improvements.

This release includes an API addition to the taxonomy module to support improved testing: TAXONOMY_HIERARCHY_(DISABLED|SINGLE|MULTIPLE) constants deprecated, use corresponding constants on VocabularyInterface. (All change records for this release)

Known issues

There are no known regressions in this release.

Drupal 8 currently has a number of known issues related to incorrect tracking of file usage, which can result in files being unexpectedly deleted from a site. (These issues also existed in 8.0.x and 8.1.x but have been recently discovered.) Site owners experiencing unexplained file loss should consider setting "Delete orphaned files" to "Never" on /admin/config/media/file-system until these issues are resolved, and note the following issues:

• #2801777: Give users the option to prevent Drupal from automatically marking unused files as temporary
• #2708411: File usage not incremented when adding new translation
• #1239558: Deleting a node with revisions does not release file usage
• #2666700: User profile images unexpectedly deleted
• #2810355: Images lost when changing node language

The following issues may affect people running this release on specific hosting environments:

• Windows/IIS environments may encounter site errors due to #2606772: Long Twig cache directories can cause failures on Windows
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors

Search the issue queue for all known issues.

All changes since the last release

• #2374301 by DuaelFr, YesCT, lomasr: Cannot predict the order of results in taxonomy autocompletion
• #2783715 by claudiu.cristea, chx, mikeryan, heddn, phenaproxima: Entity destination ID schema should match entity ID definition
• #2802593 by arunkumark, er.pushpinderrana, karlosgliberal, joachim: incorrect param for EntityController::loadBundleDescriptions()
• Revert "Issue #2783715 by claudiu.cristea, chx, mikeryan, heddn, phenaproxima: Entity destination ID schema should match entity ID definition"
• #2632434 by yongt9412, EclipseGc, ivanjaros, Berdir: Conditions are not limited by available contexts
• #2788521 by david.gil, SteffenR: hook_options_list_alter sample fails on 8.1.8
• #2669978 by Jo Fitzgerald, arturs.v, phenaproxima: Migrate D7 Menu Links
• #2822757: Remove Scott Reeves (Cottser) from the theme system/theme API maintainers
• #2822665 by martin107: LibraryDiscoveryParserTest::testBuilldByExtensionSimple() passes an unwanted parameter
• #2678612 by Jo Fitzgerald, phenaproxima, benjy: D7 link field instance settings not migrating
• #2804639 by tedbow, drpal, catch: Offcanvas dialog width not respected
• #2675156 by maijs, rocketeerbkw, mitrpaka, quietone: Pipeline using explode and extract fails
• #2811725 by mpdonadio, paulanders, jhedstrom: Error when render Datetime Range field: Error: Unsupported operand types
• #2610436 by Gábor Hojtsy, Cottser, joelpittet, pp, xjm, alexpott: Twig templates incorrectly use % trans % with arbitrary filters
• #2806285 by maxocub, Gábor Hojtsy, quietone, catch: If the default language is not set, the migration log show an error
• #2549839 by quietone, mikeryan, benjy: Removed unused variables from D6 search settings migration
• #2207247 by larowlan, sasanikolic, olli, s_leu, Berdir, joelpittet, mrjmd, rpayanm, dawehner, Truptti, nod_, alexpott, Wim Leers: Dialog titles double escaped for views handlers and delete forms
• #2645164 by kekkis, quietone, heddn, Lars Toomre: Fix use of $sourceValues and $destinationValues local variables
• #2778445 by neclimdul, anish.a, Charlotte17, arturs.v, iMiksu, heddn, mikeryan: Add migration message property to migrate executable
• #2796151 by mpdonadio, jhedstrom, myLies, vijaycs85, lomasr, alexpott, Gábor Hojtsy, penyaskito, catch, xjm: Date range separator should be translatable
• #2783075 by claudiu.cristea: Followup: Add a "download" process plugin, remove remote capability from FileCopy
• Revert "Issue #2745911 by tim.plunkett, pwolanin: Block add links should respect destination"
• #2783075 by phenaproxima, claudiu.cristea, ohthehugemanatee, chx, mikeryan: Add a "download" process plugin, remove remote capability from FileCopy
• #2821709 by tedbow, drpal: Allow links to open content in Offcanvas tray without edit mode being enabled
• #2814141 by tbonomelli, Berdir, Ginovski, tduong: Auto-reply mail attempts to send a mail to an empty e-mail if the e-mail field is not shown
• #2812625 by quietone: contact_category should dedupe contact_form not user_role
• #2785133 by tedbow, effulgentsia: Simplify OpenOffCanvasDialogCommand
• #2621500 by quietone, mikeryan, phenaproxima, chx: Configuration source plugin
• #2820079 by michielnugter, claudiu.cristea, droplet, dawehner, pfrenssen: Convert \Drupal\book\Tests\BookTest::testBookOrdering() to a JavascriptTestBase test
• #2819879 by mikeryan, quietone: Add quietone to MAINTAINERS.txt for Migrate and Migrate (Drupal) subsystems
• #2818031 by phenaproxima, Berdir, alexpott: Trailing slashes can cause FileSystem::mkdir() to return a false negative
• #2820442 by klausi: SimpleTestBrowserTest has random fails when BrowserTestBaseTest gets larger
• #2821497 by felribeiro, joelpittet, JJmonterey: html.html.twig docblock typo
• #2810083 by Mile23, dawehner, Mixologic: Duplicate test results per fail/exception
• #2803923 by gianani, shashikant_chauhan, joachim: Table render element docs don't explain how to do colspan
• #2795601 by jhedstrom, mpdonadio: Convert \Drupal\Tests\system\Functional\Common\FormatDateTest mostly to a kernel test
• #2801409 by jp.stacey, dawehner, tstoeckler: Entity routing via YAML or via a routing provider is ambiguous in docs
• #2811065 by webflo, klausi, anavarre, tstoeckler, rfay: Fix docs around --printer option in phpunit.xml.dist
• #2813971 by cilefen: Remove cilefen from core mentoring coordinators
• #2821774 by tim.plunkett: MigrateUpgradeForm incorrectly using form values for multistep management
• #2821113 by alexpott: eslint 'use strict' rule wrong
• #2819479 by shashikant_chauhan, joachim: Fully qualify the FieldItemListInterface class name in its docs so it links
• #2791375 by shashikant_chauhan: Fix $tableInformation documentation in pgsql and mysql schema.php
• #2821320 by michielnugter, droplet, Lendude: Add test coverage for machine-name.js
• #2819593 by dawehner, webflo: Link title double escaping in Link::preRenderLink
• #2807879 by peaton, phenaproxima, alexpott: Convert Contact's Migrate source tests to new base class
• #2807889 by chipway, phenaproxima, svendecabooter, quietone: Convert File's Migrate source tests to new base class
• #2820875 by chrisfree: Typo within Responsive Image module
• #2807947 by maijs, svendecabooter, quietone: Convert User's Migrate source tests to new base class
• #2807941 by svendecabooter: Convert Taxonomy's Migrate source tests to new base class
• #2807937 by erozqba, svendecabooter, phenaproxima: Convert Shortcut's Migrate source tests to new base class
• #2798941 by mikeryan: Remove dead code in MigratePluginManager
• #2807919 by maijs, svendecabooter: Convert Path's Migrate source tests to new base class
• #2807885 by phenaproxima, svendecabooter: Convert Field's Migrate source tests to new base class
• #2807917 by svendecabooter: Convert Node's Migrate source tests to new base class
• #2818347 by tstoeckler: Make tstoeckler a maintainer of Entity API
• #2815063 by leeotzu, shruti1803, minakshiPh, lomasr, Yogesh Pawar, Chi: Typo in EntityResource::delete()
• #2716133 by quietone, kevinquillen, phenaproxima, mikeryan, Charlotte17: Roles are duplicated instead of updated existing roles
• #2807863 by quietone, phenaproxima: Convert Block_content's Migrate source tests to new base class
• #2798521 by jamesrward, Manuel Garcia, mikeker, Lendude, przemek_leczycki, aklump, dawehner: Views result summary returns float number when using the mini pager
• #2810547 by corbacho, tedbow: Twig spaceless tag is removing whitespace padding from many elements
• #2752463 by tstoeckler: EntityResolverManager::setParametersFromEntityInformation() sets parameter info for non-existing parameters
• #2818871 by claudiu.cristea, mikeryan: Allow logging skip row exception messages
• #2640842 by heddn, quietone, juancasantito, JoshOrndorff: Make related file migration ID configurable in d6_cck_file
• #2818799 by claudiu.cristea: MigrateSkipRowException being TRUE, does not skip silently as should
• #2784951 by Shashwat Purav, er.pushpinderrana: Comment contains a reference to a function that doesn't exist anymore
• #2807939 by erozqba, svendecabooter: Convert System's Migrate source tests to new base class
• #2807871 by phenaproxima, svendecabooter: Convert Book's Migrate source tests to new base class
• #2807855 by phenaproxima, maijs, svendecabooter: Convert Block's Migrate source tests to new base class
• #2807891 by svendecabooter: Convert Filter's Migrate source tests to new base class
• #2807509 by phenaproxima, quietone: Convert Aggregator's Migrate source tests to new base class
• #2807893 by svendecabooter: Convert Image's Migrate source tests to new base class
• #2807943 by phenaproxima, erozqba: Convert Tracker's Migrate source tests to new base class
• #2807845 by quietone: Convert Ban's Migrate source tests to new base class
• #2807905 by svendecabooter: Convert Menu_link_content's Migrate source tests to new base class
• #2784357 by alexpott: Remove ModerationInformationInterface::loadBundleEntity()
• #2810071 by mikeryan: d6_profile_field_values processes rows multiple times
• #2811133 by cilefen, Wim Leers, neclimdul, dawehner: Confusing error response set by ContentTypeHeaderMatcher when forgetting the Content-Type request header
• #2807109 by phenaproxima: Convert Action's Migrate source tests to new base class
• #2817565 by Sam152: Bugs in ModerationStateFieldItemList mean it can never be used with a field formatter
• #2753741 by Wim Leers, dawehner, znerol: Page Cache caches all safe HTTP methods (GET+HEAD), but generates the same cache ID for either: add test coverage to prove this is correct
• #2527324 by Kartagis, naveenvalecha: The install message referencing insufficient PDO drivers links to the wrong documentation page
• #2808123 by dawehner, klausi, xjm: Add a Testing framework component to MAINTAINERS.txt
• #2815497 by andypost: Fix @see references in ListItemBase
• #2814971 by phenaproxima: Remove redundant configuration in d6_field migration
• #2807331 by xjm: Add plach as an Entity API maintainer
• #2806733 by joelpittet: testMultipleLibrariesAreNotLoaded is not asserting anything
• #2795395 by Yogesh Pawar, tresti88, marvin_B8, shashikant_chauhan, tstoeckler, dawehner: PathRootsSubscriber breaks if there are no routes
• #2409453 by quietone, phenaproxima, hussainweb, vprocessor, hosef, chx: Variable to config: statistics.settings [d7]
• #2575829 by znerol: Hash session id before using it as a cache context
• #2815063 by minakshiPh: Typo in EntityResource::delete()
• #2806249 by Pol: Small typo error in the method headers of NegotiationUrlForm
• #2702969 by andrewmacpherson: Module filter does not announce number of results for screenreader when Toolbar module is disabled
• #2702891 by sjsneve: Internet Explorer adds excessive padding to body when toolbar present and page resized after scroll
• #2795539 by Shashwat Purav, shashikant_chauhan: Punctuation issue for Place block module in hook_help
• #2809115 by petiar, Yogesh Pawar, maxocub: When migrating a multilingual D6 site, the overview page says that the translation upgrade path is missing
• #2672668 by jibran, malavya, msankhala, archunan, Wim Leers, willzyx, lokapujya: Page title with HTML tags shows HTML tags in shortcut label in the shortcut toolbar tray
• #2808329 by quietone, phenaproxima: Add default values to Row constructor
• Revert "Issue #2609252 by eiriksm, lokapujya, toncic92, Arla, chx, Berdir: Boolean field with #access FALSE cause EntityStorageException"
• #2798981 by dawehner, Sam152: ListNormalizer fails to pass on context variable to field items
• #2767125 by hchonov, amateescu: EntityFormDisplay::validateFormValues sets form state errors by empty name string instead using the provided form element
• #2664530 by Lendude, slasher13, catch, alexpott, andrew.trebble: Views Combined fields filter with Contains
• #2751223 by maxocub, jeroenbegyn, Gábor Hojtsy, Jo Fitzgerald: D6 & D7 users are migrated into D8 with incorrect langcode
• #2773085 by Sam152, Wim Leers: CKEditor doesn't show elements in the styles dropdown if an input filter alters them
• #2699489 by catch, tim.plunkett: FormBuilder $ajax_form_request check does not check which AJAX form is being requested
• #2810057 by arijits.drush, Lendude: WSOD after renaming and deleting a views display
• #2813661 by evaldask: A fatal error occurred: Field changed is unknown
• #2807263 by Wim Leers: Impossible to write unit tests involving Vocabulary, because TAXONOMY_HIERARCHY_(DISABLED|SINGLE|MULTIPLE) are defined in taxonomy.module instead of VocabularyInterface
• Revert "Issue #2683435 by hussainweb, mikeryan, quietone, alexpott, michael_wojcik, phenaproxima, benjy: Consider renaming Migrate's cckfield plugins"
• #2743183 by szato, nielsvandermolen: Fatal error in Book navigation block for unpublished parent book item
• #2683435 by hussainweb, mikeryan, quietone, alexpott, michael_wojcik, phenaproxima, benjy: Consider renaming Migrate's cckfield plugins
• #2795965 by Wim Leers, neclimdul: REST requests with invalid X-CSRF-Token header get "missing " mesage
• #2788209 by amateescu, Berdir: Entity reference field "Autocomplete matching: Starts with" option does not work
• #2795967 by daffie, Katiemouse: A query with a fetchAll(\PDO::FETCH_COLUMN) will fail for SQLite
• #2804595 by dagmar, Berdir: Sample values for entity references cause Fatal error: Allowed memory
• #2630692 by Lendude, arunkumark: Fatal error when creating taxonomy term glossary view
• #2792205 by fago: Denormalization of entities with translations fails
• #2609252 by eiriksm, lokapujya, toncic92, Arla, chx, Berdir: Boolean field with #access FALSE cause EntityStorageException
• #2806205 by Prashant.c, markdorison: Remove reference to old ListTextItem
• #2672888 by fago: BrowserTestBase fails when the webserver runs as another user
• #2791727 by bhide.nishad, chishah92, tresti88, Chi: Wrong links in tours (eg. Language and Locale)
• #2800799 by aronne, Lendude: Views throws InvalidArgumentException in More Link with external URLs
• #2647916 by Lendude, Wim Leers, dawehner: Views ajax modals stop working in certain scenarios: due to JS settings caching, AJAX responses may set wrong ajaxPageState.libraries, causing problems for subsequent AJAX requests/responses
• #2744517 by webflo: Twig template link() call to accept markup
• #2804375 by Lendude, dawehner: Exception thrown when using [view:url] token when there is no display with a URL in the view
• #2778083 by mpdonadio, YesCT: Default value for Date-Only fields is broken when UTC date is different than user current date
• #2504849 by Berdir, catch, alexpott: User::getAnonymousUser() takes 13ms due to ContentEntityBase::setDefaultLangcode()
• #2608408 by nlisgo, dagmar, aleevas, neclimdul, BR0kEN, gaydabura, pfrenssen, zuuperman: Call to a member function getPath() when installing Profiles with unknown modules as requirement
• #2744197 by Boobaa, Wim Leers, alexpott: Proper private file support for images uploaded via EditorImageDialog
• #2600804 by Lendude, D4K0, dawehner, droplet: AJAXified glossary view arguments fail when Language URL detection enabled
• #2774195 by lauriii, claudiu.cristea: Passing attributes to field element label is not possible
• #2797213 by Simon Georges: Strange useless code in Component/Utility/Random.php
• #2797967 by tim.plunkett: Field UI needlessly resaves each enabled entity display
• #2794089 by Wim Leers, yobottehg, slashrsm: SessionManager::destroy() is incompatible with streamed responses: tries to send response header after headers have already been sent, causing watchdog to fill up with PHP warnings
• #2796329 by Wim Leers: \Drupal\Core\File\MimeType\ExtensionMimeTypeGuesser maps the 'js' extension to the 'application/x-javascript' MIME type instead of 'application/javascript'

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

• Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-005

No other fixes are included.

Update instructions

Beginning with this release, packaged Drupal releases no longer contain development PHP libraries. See Drupal 8 will no longer include dev dependencies in release packages for more information.

No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues

See the list of the known issues for the 8.2.x branch. There are no known regressions in this release.

Maintenance and security release of the Drupal 7 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

• Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-005

No other fixes are included.

No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues:

There are no known regressions in this release.