This is a release candidate for the next feature release of Drupal 8. Release candidates are not supported for production sites, but they are intended for widespread testing in preparation for the upcoming stable release. More information on release candidates.

Minor releases provide new improvements and functionality without breaking backward compatibility (BC) for public APIs. Note that there may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies.

For a full list of the API and feature additions included in the 8.3.0 release candidate, see the 8.3.0-alpha1, and 8.3.0-beta1 release notes.

Translators should take note of the string changes since the last minor release. Developers can review the change records for this release.

Backwards compatibility break to correct Serialization module output

#2751325: All serialized values are strings, should be integers/booleans when appropriate corrects a bug that would output all scalar values as strings rather than the correct data type in serialized output, including REST responses. This fix may require some client application updates if the application relies on these values being strings.

An opt-in backwards compatibility mode is configurable at the site level, but not enabled by default. Read the change record for more information on this change and on configuring the backwards compatibility mode.

Other important issues resolved since 8.3.0-beta1

• #2075889: Make Drupal handle incoming paths in a case-insensitive fashion for routing resolves a usability, DX, and migration path bug where case variants of the same path would result in 404s for routes. Path aliases in Drupal 8 were already case-insensitive, but route paths were not. With this change, exact matches are still supported for route paths with different cases, but the normal behavior is changed to be case-insensitive for consistency with Drupal 7, path aliases, and user expectations.
• #2770921: Convert chunk of WTB to BTB by just moving classes, changing use statements adding traits updates many core tests to use a more modern testing API.
• #2840832: Add layout templates based on Panels layouts to core
• #2852636: Update jQuery to version 2.2.4

Known issues

Drupal 8 currently has a number of known issues related to incorrect tracking of file usage, which can result in files being unexpectedly deleted from a site. Site owners experiencing unexplained file loss should consider setting "Delete orphaned files" to "Never" on /admin/config/media/file-system until these issues are resolved, and note the following issues:

• #2801777: Give users the option to prevent Drupal from automatically marking unused files as temporary
• #2708411: File usage not incremented when adding new translation
• #1239558: Deleting a node with revisions does not release file usage
• #2666700: User profile images unexpectedly deleted
• #2810355: Images lost when changing node language

Search the issue queue for all known issues.

All changes since 8.3.0-beta1

• #2751325 by damiankloip, Grayside, dawehner, Wim Leers, catch, tedbow, alexpott, himanshu-dixit, Jo Fitzgerald, xjm, andrewbelcher, skyredwang, effulgentsia, hampercm, eelkeblok: All serialized values are strings, should be integers/booleans when appropriate
• #2075889 by pwolanin, kgoel, alexpott, catch, mpdonadio, YesCT, himanshu-dixit, dawehner, xjm, johnshortess, Crell, jhodgdon, Wim Leers, mradcliffe, attiks, tstoeckler, webchick: Make Drupal handle incoming paths in a case-insensitive fashion for routing
• Revert "Issue #2855428 by Sam152, jhedstrom, timmillwood: Workflow state and transition add/edit form IDs have a '-' in them"
• #2855428 by Sam152, jhedstrom, timmillwood: Workflow state and transition add/edit form IDs have a '-' in them
• #2854830 by Wim Leers: Move rest/serialization module's "link manager" services to HAL module
• #2799603 by Mukeysh, josephdpurcell, Mixologic: .csslintrc file format is invalid and results in "important is not a valid option"
• #2737805 by klausi, Jo Fitzgerald, tameeshb, larowlan, dawehner: Convert web tests to browser tests for forum module
• #2853684 by tameeshb, wturrell, chiranjeeb2410, krknth, Wim Leers, eojthebrave, leolando.tan, xjm: Update grammar of inline comments in \Drupal\Core\Render\Renderer::doRender
• #2855260 by hchonov, tameeshb, klausi: Cannot make static method PHPUnit_Framework_Assert::assertFileExists() non static in class Drupal\Tests\file\Functional\FileFieldTestBase
• Revert "Issue #2587063 by quietone, Jo Fitzgerald, jhodgdon, phenaproxima, alexpott, mikeryan: Variable to config: search_active_modules [d7]"
• #2587063 by quietone, Jo Fitzgerald, jhodgdon, phenaproxima, alexpott, mikeryan: Variable to config: search_active_modules [d7]
• #2854926 by xjm, himanshu-dixit, borisson_, boaloysius, alexpott: Remove unneeded control structures in ContentEntityBase
• #2854851 by chrisrockwell, Chi: Max width and min height change to status page affects installer screens as well, but shouldn't
• #2855267 by daffie: "Larry" should not use $GLOBALS in Drupal\KernelTests\Core\Database\UpdateComplexTest
• #2585821 by blazey, marvin_B8, sdstyles, benelori, GoZ, DuaelFr: ConfigurableLanguageManager language_switch_links alter use undefined path variable
• #2854249 by GoZ, himanshu-dixit, boaloysius, xjm: Default message for linkNotExists and linkByHrefNotExists is wrong
• #2854586 by NonProfit: Stark's helptext link redirects to D7 theme guide
• Revert "Issue #2854926 by xjm, borisson_, boaloysius: Remove unneeded control structures in ContentEntityBase"
• #2854926 by xjm, borisson_, boaloysius: Remove unneeded control structures in ContentEntityBase
• #2853592 by Lendude, dawehner: Cacheability metadata can't be set from within argument default handlers
• #2831630 by quietone, Jo Fitzgerald, Kifah Meeran, phenaproxima, gaurav.kapoor, mikeryan, heddn, xjm, claudiu.cristea: Add documentation to download process plugin
• #2852636 by gnuget, kporras07: Update jQuery to version 2.2.4
• #2854560 by Wim Leers, boaloysius, dawehner: \Drupal\Core\Routing\RequestFormatRouteFilter::filter() is too HTML-centric
• #2808335 by hchonov, tstoeckler, anish.a, Wim Leers, catch, Berdir: Changed time not updated when only non-translatable fields are changed on a translated entity
• #2561115 by michaellenahan, alexpott, Lendude, cilefen, lomasr, amit.drupal, Gábor Hojtsy, ifrik, dawehner: Rollback: Use 'Filter' for exposed filter button text in new views and new installations (instead of 'Apply')
• #2846643 by mpdonadio, bkosborne, jhedstrom, alexpott: DateFormatter should not attempt to load a format from storage if the format is "custom"
• #2770921 by dawehner, klausi, Mile23, mpdonadio, xjm, claudiu.cristea: Feb 21st: Convert chunk of WTB to BTB by just moving classes, changing use statements adding traits
• #2852515 by dawehner, timmillwood: $interface is still set from the previous loop in tagged services compilation
• #2854012 by vegantriathlete: Typo in Doc block for data provider
• #2845480 by Jo Fitzgerald, quietone, phenaproxima, ultimike, xjm: Add documentation to FileCopy process plugin
• #2853984 by klausi: Remove unused use statement in AuthorFormatter.php
• #2850540 by Gábor Hojtsy et al: Remove multilingual initiative from MAINTAINERS.txt as completed
• #2851746 by Berdir, Wim Leers: Support xdebug header in ResourceTestBase and move htttpClient property to right place
• #2852992 by arshadcn: EntityResourceTestBase: only assert presence of Link headers for entity types that have link templates
• #2701777 by quietone, gaurav.kapoor, ifrik, heddn, maxocub, xjm, ekes: Edit hook_help text for Drupal Upgrade UI module
• #2845491 by Jo Fitzgerald, quietone, phenaproxima, ultimike: Add documentation to UrlEncode process plugin
• #2853163 by douggreen: ThemeInstaller is missing protected variable declaration for injected themeHandler
• #2853509 by alexpott: Don't render status messages if there are no messages
• #2851761 by MariaDenysyuk, andypost: Comment logs messages under both 'content' and 'comment' loggers; make it consistent
• #2832264 by mpdonadio, jhedstrom: DateTimeItemTest is not valid
• #2853138 by tameeshb, FlorisMoriceau: Incorrect documentation of hook_views_plugins_pager_alter()
• #2853296 by Wim Leers: Follow-up for #2820743: address remaining @todo
• Revert "Issue #2843565 by Berdir, swentel, yched: getViewBuilder('node')->viewMultiple() bypasses render cache"
• #2840832 by tim.plunkett, DickJohnson, yoroy, DyanneNova, webchick: Add Panels layouts to core
• #2845484 by Jo Fitzgerald, quietone, Kifah Meeran, Winthropian, phenaproxima, tstoeckler: Add documentation to MachineName process plugin
• #2845490 by Jo Fitzgerald, wturrell, quietone, phenaproxima, xjm: Add documentation to Substr process plugin

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcements:

• Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2017-001

This release also includes a security-related update for the phpunit dev dependency. Since 8.2.3, packaged Drupal releases no longer contain development PHP libraries. See Drupal 8 will no longer include dev dependencies in release packages for more information. This update ensures that Drupal core requires the most secure version of phpunit available, so you should update any sites that do include dev dependencies with this version. Using dev dependencies in production is still not recommended. Be sure to follow the update instructions completely, including removing old files.

No other fixes are included.

No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues

A regression was found in this release.

• #2861127: Useful Class Removed From Search Block

See the list of the known issues for the 8.2.x branch.

This is a release candidate for the next feature release of Drupal 8 and includes security fixes since the previous release candidate. Release candidates are not supported for production sites, but they are intended for widespread testing in preparation for the upcoming stable release. More information on release candidates.

This minor release provides new improvements and functionality without breaking backward compatibility (BC) for public APIs. Note that there may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies.

For a full list of the API and feature additions included in the 8.3.0 release candidate, see the 8.3.0-alpha1, 8.3.0-beta1, and 8.3.0-rc1 release notes.

Translators should take note of the string changes since the last minor release. Developers can review the change records for this release.

Important issues resolved since 8.3.0-rc1

This release candidate includes security fixes that were also released in Drupal 8.2.7. See SA-CORE-2017-001 for more information. Sites using 8.3.0-rc1 or earlier should update immediately. (Sites on 8.2.x should update to Drupal 8.2.7).

This release also includes a security-related update for the phpunit dev dependency. Since 8.2.3, packaged Drupal releases no longer contain development PHP libraries. See Drupal 8 will no longer include dev dependencies in release packages for more information. This update ensures that Drupal core requires the most secure version of phpunit available, so you should update any sites that do include dev dependencies with this version. Using dev dependencies in production is still not recommended. Be sure to follow the update instructions completely, including removing old files.

Additional important fixes since RC1:

• The Inline Form Errors experimental module's functionality is now automatically disabled while editing a field with Quick Edit because its method of displaying errors was not compatible with Quick Edit's. (There is a followup to allow any form to opt out of Inline Form Errors.)
• Drupal core itself and the coding standards were updated to now use the short PHP array syntax.
• PHP CodeSniffer was updated to 2.8.1 and Coder was updated to 8.2.11.
• This release candidate resolves #2858852: [8.3.x regression] Extra fields cannot be used with tabledrag in Manage Display, which was a regression following entity display improvements that support the Layout Initiative.

Known issues

Drupal 8 currently has a number of known issues related to incorrect tracking of file usage, which can result in files being unexpectedly deleted from a site. Site owners experiencing unexplained file loss should consider setting "Delete orphaned files" to "Never" on /admin/config/media/file-system until these issues are resolved, and note the following issues:

• #2801777: Give users the option to prevent Drupal from automatically marking unused files as temporary
• #2708411: File usage not incremented when adding new translation
• #1239558: Deleting a node with revisions does not release file usage
• #2666700: User profile images unexpectedly deleted
• #2810355: Images lost when changing node language

A regression was found in this release.

• #2861127: Useful Class Removed From Search Block

Search the issue queue for all known issues.

All changes since 8.3.0-rc1

• SA-CORE-2017-001 by alexpott, benjy, Berdir, casey, cilefen, dawehner, Heine, klausi, larowlan, Mixologic, mlhess, pwolanin, samuel.mortenson, Wim Leers, xjm, YesCT
• #2701005 by brathbone, gaurav.kapoor, gianani, alexpott, tstoeckler, kristiaanvandeneynde, Yogesh Pawar: Improve documentation of EntityTypeInterface label functions
• #2860096 by alexpott, GoZ, jhodgdon: Remove api doc groups for updates eg. updates-8.2.x-to-8.3.x
• #2860277 by ritzz, gaurav.kapoor, vaplas: update_language_list() should be removed
• #2860308 by geerlingguy: Fix typo in Drupal\Tests\views\Kernel\Plugin\Display\ViewsMenuLinkTest
• #2855927 by daffie, Jo Fitzgerald: Drupal\KernelTests\Core\Database\RangeQueryTest does not have to add the module "database_test"
• #2615016 by hchonov, Jo Fitzgerald, Pavan B S, tstoeckler, mkalkbrenner, plach, amateescu, Berdir: ContentEntityBase::hasTranslationChanges should exclude the "changed" fields from the comparison
• #2858109 by amateescu: The BlockContent entity type does not specify its revision data table
• #2846428 by othermachines, michielnugter, vaplas, dagmar, John Cook, Lendude, droplet: Views add dialog filter searches on label instead of title
• #2824267 by quietone, shashikant_chauhan, faline, mikeryan, OnkelTem, ohthehugemanatee: Highwater condition isn't added (on remote databases)
• #2857502 by Jo Fitzgerald, shashikant_chauhan, quietone, heddn: Comment out migration of D6 file size to sync with D7
• #2756689 by tameeshb, geertvd, arunkumark, claudiu.cristea, Berdir: Label of contact form message field is not hidden
• #2828092 by dmsmidt, gaurav.kapoor, s.d.sirois, andrewmacpherson, Gábor Hojtsy, tstoeckler, jules., Wim Leers, SKAUGHT, marcvangend, yoroy, catch: Inline Form Errors not compatible with Quick Edit
• #2858852 by tim.plunkett: [8.3.x regression] Extra fields cannot be used with tabledrag in Manage Display
• #2687977 by claudiu.cristea, alexpott, prics: Comment::preSave() unconditionally sets hostname to client host
• #2845488 by Jo Fitzgerald, gerzenstl, Pavan B S, Yogesh Pawar, gaurav.kapoor, quietone, phenaproxima, mikeryan: Add documentation to SkipOnEmpty process plugin
• #2845487 by Jo Fitzgerald, quietone, phenaproxima: Add documentation to Route process plugin
• #2857725 by Jo Fitzgerald, boaloysius, klausi: Improve assertNoFieldByName() compatibility for empty strings
• #2718655 by dawehner, Jo Fitzgerald, Wim Leers: #type actions with dropbutton loses bubbleable metadata
• #2846002 by Jo Fitzgerald, joachim: Pipeline failure exceptions should say which plugin they failed at
• #2859308 by Jo Fitzgerald: Improve assertNoFieldById() compatibility for empty strings
• #2819477 by Sam152, timmillwood, dawehner, jibran, xjm: Views integration incorrectly joins content_moderation_state entities with matching IDs, but different entity types
• #2479377 by dpi, edurenye, tstoeckler, andypost, mgifford, RajabNatshah, mglaman, jespermb, hitfactory, meramo, lluvigne, amateescu: content_translation_page_attachments() should check for a canonical link before generating a URL to it
• #2858598 by danielnv18, chiranjeeb2410, jhodgdon: hal.install has @defgroup instead of @addtogroup
• #2742995 by Jo Fitzgerald, claudiu.cristea, naveenvalecha, klausi, dawehner, bighappyface: Convert web tests to browser tests for contact module
• #2859618 by lauriii: Add Gábor Hojtsy, Roy Scholten (yoroy) and Lauri Eskola (lauriii) as provisional maintainers for Drupal 8
• #2782663 by Jo Fitzgerald, klausi: Convert web tests to browser tests for syslog module
• #2757007 by claudiu.cristea, tameeshb, Jo Fitzgerald, Sam152, himanshu-dixit, jibran, klausi, dawehner: Convert all book web tests to BrowserTestBase
• #2548061 by hussainweb, alexpott, klausi, Crell, dawehner, Berdir: Fix Drupal\Tests\accept_header_routing_teste\Unit\Routing\AcceptHeaderMatcherTest::testNoRouteFound
• #2314513 by joelpittet, larowlan: Add test coverage for DiffFormatter not double escaping  
• #2857953 by xjm, dmsmidt: Add dmsmidt as maintainer for IFE
• #2859013 by mpdonadio: DateTestBase inadvertently coupled to datetime_range module
• #2855977 by blazey: LanguageNegotiationUrl::processInbound removes path prefix even when detection is based on domain
• Revert "Issue #2225781 by quietone, Jo Fitzgerald, Gábor Hojtsy, mikeryan: Migrate D6 i18n taxonomy vocabularies"
• #2671058 by Jo Fitzgerald, hchonov, tstoeckler, tameeshb, Munavijayalakshmi, pguillard: OverviewTerms doesn't respect the current content language when building the form and term urls and names are generated based on the terms default language
• #2832859 by vaplas, webflo, harings_rob, Wim Leers: Write EntityResourceTestBase subclasses for: MenuLinkContent
• #2225781 by quietone, Jo Fitzgerald, Gábor Hojtsy, mikeryan: Migrate D6 i18n taxonomy vocabularies
• #2712835 by Leksat: Plain text field default value is not translatable
• #2808321 by vaplas, Jo Fitzgerald, Lendude, alexpott, xjm, Chi, benqwerty: Fix default value "EQUAL" in $query_operator param of BooleanOperator::queryOpBoolean()
• #2821711 by Wim Leers: Apache always sets Content-Type: text/html, even for DELETE requests
• #2575535 by bighappyface, heykarthikwithu, rodrigoaguilera, prasad_gogate: Custom language settings configuration is not saved when you have a language selector enabled for any content
• #2858081 by gaurav.kapoor: Constructor Shouldn't have a return statement
• #2823963 by vaplas, Andrej Galuf, dawehner: Views StringFilter using 'Contains any word' or 'Contains all words' breaks query on strings containing only characters that will be trimmed
• #2856364 by drpal, Wim Leers: Reposition Quickedit overlay on toolbar orientation change
• #2666166 by jsst, Lendude, Andrej Galuf: View with not required relationship and aggregation enabled fails to execute
• #2851149 by hchonov, amateescu, Wim Leers: Exceptions on setting entity reference field with integer target ID and entity object
• #2844046 by Wim Leers, dawehner, tedbow: REST Resource config entities do not respect the status (enabled/disabled)
• #2745123 by drugan, Mile23, mpdonadio, alexpott, slasher13, Jo Fitzgerald, drunken monkey, nikolas.costa, Yogesh Pawar, blazey, benjifisher, dawehner, mondrake, penyaskito, fietserwin, othermachines: Simpletest module crashes on cleanup, uninstall
• #2857909 by chiranjeeb2410, dagmar: DbLogController needs some updates on the comments
• #2857846 by swentel: Remove obsolete get call in ViewsBulkTest
• #2852242 by Jo Fitzgerald: Merge the two files testing the file_copy process plugin
• #2854529 by alexpott, xjm, klausi, Chi, Mixologic: Fix Drupal.Scope.MethodScope - all methods should have scopes
• #2857714 by klausi, andypost, Mile23: Upgrade Coder to 8.2.11
• #2668752 by mr.baileys, chx, tim.plunkett, Berdir: DefaultPluginManager::setCacheBackend has wrong information about language suffix
• #2857780 by vegantriathlete: Correct typo in comment in TagTest.php
• #2802663 by mpdonadio, Berdir, jibran, jhedstrom, amateescu: Exceptions due ChangedItem, CreatedItem, and TimestampItem implicit dependencies on datetime module
• #2600836 by balagan, Sagar Ramgade, Chi, anil280988, joshi.rohit100, Jo Fitzgerald, vaplas, dawehner, alexpott, klausi: Make protected Simpletest test methods public for consistency
• #2845731 by ashish-deynap, vaplas, chiranjeeb2410, Munavijayalakshmi, tramsaal, xjm: Theming guide links are wrong
• #2857410 by tim.plunkett, DamienMcKenna: Adding a page-level #prefix or #suffix causes it to be output twice on one-col layout
• Followup to remove unused use.
• #2857822 by alexpott, klausi: Fix coding standards issues introduced mostly by array syntax conversion
• #2776975 by joelpittet, dawehner, tim.plunkett, xjm, klausi, pfrenssen, eojthebrave: March 3, 2017: Convert core to array syntax coding standards for Drupal 8.3.x RC phase
• #1918994 by Tim Bozeman, mgifford, mpdonadio, vprocessor, sun, xjm, falcon03, nabiyllin, rteijeiro, cwarsaw, yoroy, andymartha, jessebeach, lauriii, jhedstrom, andypost, Bojhan, cilefen, aaronbauman, sugaroverflow: Improve Datetime and Daterange Widget accessibility
• #2850984 by maxocub: Fix path alias migration of translated nodes [D7]
• #2857258 by ritzz, Munavijayalakshmi, shashikant_chauhan, xjm: Replace documentation references to token_replace()
• #2845151 by Sam152, timmillwood, tstoeckler: ContentModerationStateFormatter pretends it's for the moderated entity, but it is for the content moderation state entity
• #2855428 by Sam152, jhedstrom, timmillwood: Workflow state and transition add/edit form IDs have a '-' in them
• #2857245 by klausi, pwolanin: Security update for PHPCS

Update: Drupal 8.3.1 is available and fixes a security vulnerability. After updating to Drupal 8.2.8 for the security fix and then reading the release notes below, you should update directly to 8.3.1 instead of 8.3.0.

This is a minor version (feature release) of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for a summary of changes and improvements since the last minor release. Learn more about Drupal 8 and the Drupal 8 release cycle.

If you encounter errors when updating to this release, see the known issues listed below. If you use Drush, update to Drush 8.1.10 prior to using it to update Drupal. There are known issues updating to Drupal 8.3.0 using older versions of Drush.

This minor release provides new improvements and functionality without breaking backward compatibility (BC) for public APIs except where noted below. Note that there may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies.

See the Drupal core change records for additional information on API changes. Translators should take note of a handful of minor string changes since the last release.

Backwards compatibility break to correct Serialization module output

#2751325: All serialized values are strings, should be integers/booleans when appropriate corrects a bug that would output all scalar values as strings rather than the correct data type in serialized output, including REST responses. This fix may require some client application updates if the application relies on these values being strings.

An opt-in backwards compatibility mode is configurable at the site level, but not enabled by default. Read the change record for more information on this change and on configuring the backwards compatibility mode.

Important bug fixes since 8.2.x

The following important bugs have been resolved since the final 8.2.x bugfix release:

• #2640496: Revision ID in {node} and {node_revision} can get out of sync as well as a blocking issue #2640496: Store revision ID in originalRevisionId property to use after revision id is updated are resolved to address data integrity issues with the revisioning system.
• #2606772: Long Twig cache directories can cause failures on some filesystems shortens directories to a predictable length, prevents installs to directories that are too deep, and warns on existing and moved sites where the files directory is too deep. This will mitigate errors on Windows/IIS and some other environments.
• #2665152: Simplify module form structure and fix bugs when Suhosin is used resolves an issue where some modules (including experimental modules) could not be enabled on sites using Suhosin.
• #2846782: Bulk operation actions might not act on the selected items resolves a recently discovered issue where the wrong data might be deleted by Views bulk forms on high-traffic sites.
• #2822190: PathValidator validates based on a RequestContext leaked from the current request, resulting in false negatives during CLI requests and POST submissions

New stable features

The BigPipe module has become stable in 8.3.0. This module provides an advanced implementation of Facebook's BigPipe page rendering strategy, leading to greatly improved perceived performance for pages with dynamic, personalized, or uncacheable content. See the BigPipe handbook page.

Improved authoring features

• #2831442: Switch to CKEditor 4.6's new "Moono-Lisa" skin
• #2421427: Can now drag and drop images into image fields in Quick Edit mode.
• #2307451: Improved usability for image fields on mobile devices.
• #2239419: CKEditor now utilizes the AutoGrow plugin to better take advantage of larger screen sizes.

Improved site building and administrative features

• #665790: Redesign the status report page
• #2656278: Convert "Limit allowed HTML tags" input field to a textarea
• #2574767: Standardized display of Views overview page to more closely match that of other administrative overview pages.
• #2830449: Views filter order now matches the table column order below in Content and People overview pages.
• #2840832: Add layout templates based on Panels layouts to core
• Resolved #2858852: [8.3.x regression] Extra fields cannot be used with tabledrag in Manage Display, which was a regression following entity display improvements that support the Layout Initiative.
• #2075889: Make Drupal handle incoming paths in a case-insensitive fashion for routing resolves a usability, DX, and migration path bug where case variants of the same path would result in 404s for routes. Path aliases in Drupal 8 were already case-insensitive, but route paths were not. With this change, exact matches are still supported for route paths with different cases, but the normal behavior is changed to be case-insensitive for consistency with Drupal 7, path aliases, and user expectations.
• #2826728: Block layout action removes instance, but contextual link deletes all instances.

Improved web services features

Drupal 8.3.0 significantly improves REST and API-first support with the following new features, API and developer experience improvements, and bug fixes.

• #2808233: REST 403 responses don't tell the user *why* access is not granted: requires deep Drupal understanding to figure out
• #2815845: Importing (deploying) REST resource config entities should automatically do the necessary route rebuilding
• #2291055: REST API now supports the registering of users.
• #2807501: Anonymous REST API performance increased by 60% by utilizing the internal page cache.
• Improved the response bodies and status codes for requests with incorrect request headers or request bodies, in dozens of situations.
• #2737719: Massive overhaul of the test coverage
• #2808233: 403 responses now return reason why access was denied

Improved performance and scalability

• #2556025: Optimized class loader detection made more generic to support class loaders other than ApcClassLoader.
• #1446932: Improve statistics performance by adding a swappable backend.
• #2824548: Move token info cache to data cache bin and #2824547: Change ViewsData to use the default cache bin instead of discovery move caches to the default cache bin to prevent APCu memory from being filled too quickly.

Testing improvements

• #2605664: Align TestDiscovery and bootstrap.php's non-permissive loading of PSR-4 namespaces for traits
• #2809117: Integrated PHPUnit verbose output in SimpleTest UI.
• Improved backward compatibility between BrowserTestBase and WebTestBase.
• Expanded automated test coverage for JavaScript.
• #2294731: Simpletest fails to run PHPUnit on Windows
• #2849222: settings.testing.php / testing.services.yml not picked up by BrowserTestBase
• #2770921: Convert chunk of WTB to BTB by just moving classes, changing use statements adding traits updates many core tests to use a more modern testing API.

Experimental modules

The modules listed in this section are considered experimental for this release. Experimental modules are provided with Drupal core for testing purposes, but are not yet fully supported.

New experimental modules

Workflows (alpha stability)

This module abstracts the transitions and states system from Content Moderation into a separate component so that it can be reused by modules that implement non-publishing workflows (such as for users or products) as well as content publishing workflows. The module also includes support for default workflow states and transitions.

Layout Discovery (alpha stability)

Provides an API for modules or themes to register layouts as well as five common default layouts. By providing this API in core, we help make it possible for core and contributed layout solutions to be compatible with each other. The following contributed modules already have development versions that support the new API:

• Display Suite 8.3.x (beta version available).
• Panels 8.4.x (in development).
• Panelizer 8.4.x (beta version available).

See the layout roadmap for the next steps for this module.

Field Layout (alpha stability)

This module provides the ability for site builders to rearrange fields on content types, block types, etc. into new regions, for both the form and display, on the same forms provided by the normal field user interface. See the entity display layout roadmap for the next steps for this module.

Updated experimental modules

Migrate (beta stability)

As of 8.3.0, the Migrate API now has beta stability, meaning that no future backwards-incompatible API changes are anticipated, so developers can leverage these APIs in custom migrations. Migrate will be considered completely stable after the issues tagged Migrate critical are resolved, to ensure the base API fully supports critical functionality.

Migrate Drupal and Migrate Drupal UI (alpha stability)

• This release adds configuration translation support to migrations.
• Core provides migrations for most Drupal 6 data and can be used for migrating Drupal 6 sites to Drupal 8. A critical issue with user picture IDs is addressed in this release, and the Drupal 6 to 8 migration path is nearing beta stability. Some gaps remain, such as for dates, references, and some internationalization data. (Outstanding issues for the Drupal 6 to Drupal 8 migration)
• The Drupal 7 to Drupal 8 migration is incomplete, but is suitable for developers who would like to help improve the migration, and can be used to test upgrades especially for simple Drupal 7 sites. This release adds support for migration of Drupal 7 core node translations and most high-priority migrations are available. (Outstanding issues for the Drupal 7 to Drupal 8 migration)
• Drush support is currently only available in the Drupal Upgrade contributed module. (See the pull request to add support to Drush.)

Content Moderation (alpha stability)

Content Moderation allows content workflow states such as Draft, Archived, and Published, and now depends on the new experimental Workflows module (described above) to supply workflows and transitions for these states. See the Workflows change record for more information.

Important: If you previously installed Content Moderation in 8.2.x, you must uninstall it before upgrading to 8.3.0 or you will encounter fatal errors. You will need to reconfigure and reapply your workflows and transitions with the new module after upgrading and re-enabling Content Moderation, so be sure to back them up beforehand. (No upgrade path is supplied since the module is still alpha stability.)

Content Moderation includes many additional improvements in this release:

• #2787881: Non-translatable entity types can now be moderated.
• #2799785: Entity types without bundles can be moderated, as long as they have revisions.
• #2809123: When reverting a moderated revision, the moderation state is now reverted too.
• The module now publishes any entity type that implements EntityPublishedInterface, not just Nodes.
• #2830581: Fix ContentModeration workflow type to calculate correct dependencies
• #2850601: ContentModeration workflow type plugin incorrectly preserves bundle keys on sorting and does not sort entity types

See the Content Moderation roadmap for the next steps for this module. Both Workflow and Content Moderation must reach beta stability within six months for Content Moderation to remain in core.

Settings Tray (alpha stability)

This is a prototype of Dries's proposed Outside-In usability enhancements. It allows configuring page elements such as blocks and menus from the frontend of your site. See the roadmap of outstanding issues, which includes both planned improvements and known accessibility and interaction bugs. The module is more polished in this release, but still considered alpha stability. It needs to become stable within the next six months to remain in core.

DateTime Range (alpha stability)

The DateTime Range module provides a field type that allows end dates. This is important for contributed modules like the Calendar module to work with Drupal 8 core. The DateTime Range module plan is mostly complete and DateTime Range is expected to be beta stability soon, with only a couple of usability issues remaining. This module needs to become stable within the next six months to remain in core.

Place Block (alpha stability)

This feature allows the user to place a block on any page and see the region where it will be displayed, without having to navigate to a backend administration form. The Place Block module needs to reach stability within the next six months to remain in core.

Inline Form Errors (alpha stability)

This provides a proof-of-concept for showing form errors inline for improved accessibility. Since the last minor release, Inline Form Errors has improved significantly, including usability and accessibility fixes as well as underlying fixes to the form system. The Inline Form Errors experimental module's functionality is now automatically disabled while editing a field with Quick Edit because its method of displaying errors was not compatible with Quick Edit's. (There is a followup to allow any form to opt out of Inline Form Errors.) See the outstanding issues for Inline Form Errors for additional issues that remain before Inline Form Errors can become stable.

Package management improvements

• #2758737: Add a packages.drupal.org to root composer.json
• #2866109: Composer/installers update to 1.2.0 adding support for installing custom modules and themes to directories other than /vendor
• #2809477: Added Package.json enabling new JavaScript language features

Other API improvements

Modules requiring Drupal 8.3.0 or later can take advantage of these additional API improvements:

• #2810303: Deprecated several routing services in favor of two unified services.
• #2287073: Allow Views contextual filters to expose the context using argument validation plugins
• #2721179: Replaced the deprecated Symfony ExecutionContextInterface for better Symfony compatibility
• #2789315: EntityPublishedInterface and #2810381: EntityPublishedTrait have been added to give a #2812811: generic publishing API, and are being used by Node and Comment entity types.
• #2767025: Add entity type label for a collection of entities

Third-party library updates

In addition to the vendor updates and coding standards changes described below, PHP CodeSniffer and Drupal Coder have been added as development requirements: #2744463: Add phpcs/coder to dev requirements. (As a reminder, dev dependencies should never be added to production or Internet-facing sites. See Drupal 8 will no longer include dev dependencies in release packages for more information.)

• #2804365: Update Twig to 1.25
• #2763787: Upgraded random_compat to 2.0.2 and then to 2.0.10 (see below).
• Provided upstream fixes for Mink and Symfony for #2808085: Pipe char in locators break Mink and Symfony element search, and updated dependencies accordingly.
• #2852636: Update jQuery to version 2.2.4
• #2848215: Update CKEditor library to 4.6.2
• #2859772: Update Symfony components to ~2.8.18
• Finally, #2862254: Update non-Symfony dependencies before 8.3.0 adds patch-level updates to the latest versions for all dependencies wherever possible. Minor updates are also included for the Symfony PSR-7 Bridge and Zend Stdlib, which Drupal does not depend on directly.

Changed coding standards

Drupal 8.3.0 has adopted the following coding standards changes:

• Drupal core itself and the coding standards were updated to now use the short PHP array syntax.
• Most global constants in Drupal 8 have been deprecated in favor of class constants. As a best practice, use appropriate class constants rather than global constants.

Known issues

We've received reports of the following issues with this release:

1. Sites that have the HAL module enabled and are upgrading from 8.1.x have encountered #2867444:
   Configuration schema errors whilst updating to 8.3.0. Possible workarounds include updating to 8.2.7 first and then to 8.3.0, or (for sites using Drush) updating to Drush 8.1.10. (Note that 8.1.x has been end-of-life since September 2016, so we generally do not provide full support for updates that skip minor releases.)
2. Some users have reported #2867253: Upgrade to 8.3.0: Call to a member function get() on array in CacheCollector.php. If you encounter this error, please provide a list of installed contributed modules and any other information about your site on the linked issue.
3. There is a small BC break in statistics_get() when it is used with an invalid node ID. #2867493: Error: Call to a member function getTotalCount() on boolean in statistics_get() provides a fix for this issue.

Drupal 8 currently has a number of known issues related to incorrect tracking of file usage, which can result in files being unexpectedly deleted from a site. Site owners experiencing unexplained file loss should consider setting "Delete orphaned files" to "Never" on /admin/config/media/file-system until these issues are resolved, and note the following issues:

• #2801777: Give users the option to prevent Drupal from automatically marking unused files as temporary
• #2708411: File usage not incremented when adding new translation
• #1239558: Deleting a node with revisions does not release file usage
• #2666700: User profile images unexpectedly deleted
• #2810355: Images lost when changing node language

Search the issue queue for all known issues.

All changes since 8.3.0-rc2

• #2846830 by wturrell, Gábor Hojtsy, timmillwood, Wim Leers, webchick, cilefen, anavarre, dawehner, dagmar, naveenvalecha, xjm, jibran, effulgentsia, drpal: Add changelog for Drupal 8.3.0
• #2867113 by Berdir, Wim Leers: Fatal error in serialization_update_8302() when updating to 8.3.0-rc2
• Revert "Issue #2861745 by Yutaro Ohno: Detailed cron log description is not translatable"
• #2861745 by Yutaro Ohno: Detailed cron log description is not translatable
• #2865757 by kristiaanvandeneynde: Fix wrong example for chained tokens in hook_tokens()
• #2866109 by Eric_A: Add composer installer-paths for drupal-custom-modules/themes before 8.3.0
• #2862947 by michielnugter, Jo Fitzgerald, boaloysius, klausi, alexpott, GoZ: Incorrect field assertions in AssertLegacyTrait
• #2865413 by Jo Fitzgerald, GoZ, klausi: Move RegisterSerializationClassesCompilerPassTest.php to correct location
• #2865829 by mpdonadio: DateTimePlus test of validate_format = FALSE
• #2864257 by GoZ, Jo Fitzgerald, klausi: Convert web tests AssertNoPattern to Browser Test
• #2861622 by alexpott: Running \Drupal\KernelTests\Config\DefaultConfigTest creates a directory called : in DRUPAL_ROOT
• #2857580 by vegantriathlete: Correct documentation on assertLinkByHref
• #2851759 by FeyP: Properly document pathProcessor property of PathBasedBreadcrumbBuilder class
• #2854909 by arshadcn: Update documentation for \Drupal\Core\Render\ElementInfoManagerInterface
• #2843752 by arshadcn, Wim Leers: EntityResource: Provide comprehensive test coverage for Item entity
• #2843750 by vaplas, sumanthkumarc, Wim Leers: EntityResource: Provide comprehensive test coverage for Shortcut entity
• #2843786 by arshadcn: EntityResource: Provide comprehensive test coverage for ImageStyle entity
• #2650910 by drpal, Anishnirmal, markdorison, Tom Robert, psend, yannickoo, rachel_norfolk, Wim Leers, droplet: Contextual links button is always rendered even when no links are available (with warm client-side cache)
• #2843693 by droplet, michielnugter, xjm, Mixologic, klausi: Random test failure in CKEditor AjaxCss
• #2843777 by arshadcn, Wim Leers: EntityResource: Provide comprehensive test coverage for NodeType entity
• #2843775 by arshadcn, Wim Leers: EntityResource: Provide comprehensive test coverage for CommentType entity
• #2843759 by vaplas, Wim Leers: EntityResource: Provide comprehensive test coverage for SearchPage entity
• Revert "Issue #2843756 by vaplas, brentschuddinck, Wim Leers: EntityResource: Provide comprehensive test coverage for FieldStorageConfig entity"
• #2826047 by heddn, Jo Fitzgerald, mikeryan, catch, alexpott: 6-8 user picture migration must create new fids, which can conflict with fids used by other migrations
• #2853211 by vaplas, Wim Leers, arshadcn: EntityResource::post() incorrectly assumes that every entity type has a canonical URL
• #2843756 by vaplas, brentschuddinck, Wim Leers: EntityResource: Provide comprehensive test coverage for FieldStorageConfig entity
• #2843761 by vaplas, Wim Leers: EntityResource: Provide comprehensive test coverage for ConfigurableLanguage entity
• #2843762 by vaplas, Wim Leers: EntityResource: Provide comprehensive test coverage for Action entity
• #2822837 by vaplas, martin107, chiranjeeb2410, klausi, dawehner: Replace @expectedException @expectedExceptionMessage with $this->setExpectedException
• #2843757 by vaplas, Wim Leers, alexpott: EntityResource: Provide comprehensive test coverage for FilterFormat entity
• #2847664 by tedbow, drpal, ifrik, lauriii: Edit mode behaves differently if entered in by clicking "quick edit" vs toolbar
• Revert "Issue #2847664 by tedbow, drpal, ifrik, lauriii: Edit mode behaves differently if entered in by clicking "quick edit" vs toolbar"
• #2498291 by Jo Fitzgerald, neclimdul, quietone, KarenS, mikeryan, mitrpaka, phenaproxima: Fields hidden in some view modes abort migration (D6)
• #2863993 by slv_: Convert web tests to browser tests for path module
• #2863969 by GoZ: Convert web tests to browser tests for options module
• #2862254 by slasher13, jibran, pwolanin: Update non-Symfony dependencies before 8.3.0
• #2831924 by tedbow, samuel.mortenson, drpal, Devin Carlson, tim.plunkett, droplet: Outside In is intermittently unable to bind dialog events to the window
• #2504607 by juanjesustrigo, sasanikolic, mgifford, dawehner: Change the return of fieldFilterXss to FieldFilteredMarkup
• #2863411 by alexpott: Adding symfony/dom-crawler with a version limit like ">=2.8.13 <3.0" is problematic
• #2538956 by HeyLodyM, Wim Leers: Document that MemoryBackend::prepareItem()/::set() uses unserialize()/serialize() to break references
• #2862630 by xjm: Syslog maintainer list still incorrect after removing inactive maintainers
• #2862634 by xjm: Add dagmar as maintainer for Database Logging module
• #2667716 by dagmar, YoyoS, Lendude, swentel: Cannot sort a large group of filters items when using the Exposed Grouped information
• #2845482 by Jo Fitzgerald, Yogesh Pawar, quietone, phenaproxima, ultimike: Add documentation to Get process plugin
• #2862470 by Jo Fitzgerald, klausi: Add assertOptionByText() to AssertLegacyTrait for better browser test compatibility
• #2795049 by Jo Fitzgerald, boaloysius, legovaer, borisson_, klausi, dawehner: Convert web tests to browser tests for history module
• #2862463 by hchonov, Jo Fitzgerald, tstoeckler: Cloning an entity with initialized translations leaves $values pointing to the old entity object
• #2795111 by Jo Fitzgerald, GoZ, dawehner, klausi: WTB to BTB, add getRawContent() in BTB
• #2862494 by klausi, GoZ, Jo Fitzgerald: Convert web tests to browser tests for basic_auth module
• #2860663 by mpdonadio, xjm, Mile23: UserTimeZoneTest fails on PHP 7.0.x-dev and 7.1.x-dev
• #2828073 by hchonov, tstoeckler: Cloning an entity with initialized translations leaves $entityKeys and $translatableEntityKeys pointing to the old entity object
• Revert "Issue #2527866 by andypost, larowlan: Investigate why comment.manager service doesn't exist when comment_entity_storage_load() is fired in ConfigImportAllTest"
• #2527866 by andypost, larowlan: Investigate why comment.manager service doesn't exist when comment_entity_storage_load() is fired in ConfigImportAllTest
• #2856808 by amateescu, catch: Break out the 'entity_test_update' entity type into its own module and add additional test db dumps
• #2492513 by JeroenT, Nitesh Pawar, wturrell, Jo Fitzgerald, rashidkhan, alx_benjamin, gaurav.kapoor, NikitaJain, amit.drupal, Shabbir, alexpott, xjm, cilefen: Cannot edit the user/login menu link as an admin
• #2859772 by slasher13, jibran: Update Symfony components to ~2.8.18
• #2811887 by Lendude, sdstyles, DeFr, louisnagtegaal, d.olaresko, _Archy_, mpdonadio: Exposed date filter leads to a notice
• #2858295 by mpdonadio, GoZ, Wim Leers, alexpott: DateTimePlus doesn't track errors properly
• #2369119 by Lendude, olli, mpdonadio, alexpott, dagmar, mikeker, vprocessor, tlyngej, rakesh.gectcr, herved, Blanca.Esqueda, lomasr, anavarre, tacituseu, ronaldtebrake, aleevas, dawehner, Grayside: Fatal error when trying to save a View with grouped filters using other than string values
• #2763013 by Jo Fitzgerald, claudiu.cristea, klausi: Convert web tests to browser tests for link module
• #2861793 by klausi, Mile23, martin107: Upgrade Coder to 8.2.12
• #2861127 by lauriii, themeninja, Berdir: Useful Class Removed From Search Block
• #2857853 by vegantriathlete: Correct typos in DefaultConfigTest.php
• #2859502 by chiranjeeb2410, joachim: class docblock is badly worded and could use more detail
• #2853823 by Jo Fitzgerald, claudiu.cristea, Munavijayalakshmi, phenaproxima, alexpott, heddn: Explode processor is too strict regarding to the input value
• #2615496 by amateescu, joseph.olstad, amcgowanca, alexpott, Fabianx, djdevin, greggles, tstoeckler: A serial/primary key field can not be added to an existing table
• #2820238 by ultimike, Jo Fitzgerald: Remove ultimike from migration in MAINTAINERS.txt
• #2817745 by Wim Leers: Add test coverage to prove that REST resource's "auth" configuration is also not allowing global authentication providers like "cookie" when not listed

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcements:

• Drupal Core - Critical - Access Bypass - SA-CORE-2017-002

No other fixes are included.

No changes have been made to the .htaccess, web.config, robots.txt, or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

After upgrading to Drupal 8.2.8, the site's "Available updates" page may still list Drupal 8.3.1 as an additional required security update, but this information is incorrect and can be ignored; both Drupal 8.2.8 and Drupal 8.3.1 contain the same security fix. However, the 8.2.x series is end-of-life and will not receive further updates, so you should also plan to update to Drupal 8.3.1 or later once you have had a chance to test thoroughly. See the Drupal 8.3.0 release notes for more information on the new minor release, including requirements for updating from 8.2.x releases.

Known issues

There are no known regressions in this release since 8.2.7.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcements:

• Drupal Core - Critical - Access bypass - SA-CORE-2017-002

No other fixes are included.

No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Important: If you are running Drupal 8.2.7 or earlier, update to Drupal 8.2.8 instead of 8.3.1 to apply the security fix as safely as possible. (You should still plan to update to this release at a later date, as the 8.2.x series is end-of-life and will not receive further updates.)

Minor releases like Drupal 8.3.0 may include changes to internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies. See the Drupal 8.3.0 release notes for more information on the new minor release, including requirements for updating from 8.2.x releases.

Known issues

See the 8.3.0 release notes and the known issues for the 8.3.x branch. There are no known regressions in this release since 8.3.0.

This is a patch release of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for a summary of changes and improvements since the last minor release. Learn more about Drupal 8.

This release only contains bug fixes, along with documentation and testing improvements.

The following important issues are resolved in 8.3.2 (in addition to the dozens of other fixes listed at the end of this post):

• #2867493: Error: Call to a member function getTotalCount() on boolean in statistics_get()
• #2867887: statistics_get() test mashes 0 too much
• #2753971: ContentEntityStorageBase::deleteRevision() function does not remove node_field_revision entries

Update instructions

Beginning with 8.2.3, packaged Drupal releases no longer contain development PHP libraries. See Drupal 8 will no longer include dev dependencies in release packages for more information.

Known issues

There are no known regressions in this release.

There was a temporary problem affecting Drupal 8 sites built with Composer, #2875446: Drupal 8.3.2 installed via composer reports version 8.3.3-dev in UI. If you are affected by this issue, clear the Composer cache and try again.

Updating from versions older than 8.3.0

We've received reports of the following issues with the 8.3.0 release that may affect those updating from older versions of Drupal 8:

• A few sites have reported #2869449: PluginNotFound exception after update to Drupal 8.3 where the plugin name mentioned in the exception may vary. Administrators of affected sites should check the issue queues of contributed modules in use. Comment on #2869449 if necessary.
• Sites that have the HAL module enabled and are upgrading from 8.1.x have encountered #2867444: Configuration schema errors whilst updating to 8.3.0. Possible workarounds include updating to 8.2.7 first and then to 8.3.0, or (for sites using Drush) updating to Drush 8.1.10. (Note that 8.1.x has been end-of-life since September 2016, so we generally do not provide full support for updates that skip minor releases.)

File usage tracking causes unexpected file deletion

Drupal 8 currently has a number of known issues related to incorrect tracking of file usage, which can result in files being unexpectedly deleted from a site. Site owners experiencing unexplained file loss should consider setting "Delete orphaned files" to "Never" on /admin/config/media/file-system until these issues are resolved, and note the following issues:

• #2801777: Give users the option to prevent Drupal from automatically marking unused files as temporary
• #2708411: File usage not incremented when adding new translation
• #1239558: Deleting a node with revisions does not release file usage
• #2666700: User profile images unexpectedly deleted
• #2810355: Images lost when changing node language

Search the issue queue for all known issues.

All changes since the last release

Changes since 8.3.1:

• #2871541 by Wim Leers, dagmar, e0ipso: Add API-first initiative to MAINTAINERS.txt
• Revert "Issue #2867700 by erozqba, mondrake, mradcliffe, cilefen: ConnectionUnitTest::testConnectionOpen fails if the driver is not implementing a PDO connection"
• #2867700 by erozqba, mondrake, mradcliffe, cilefen: ConnectionUnitTest::testConnectionOpen fails if the driver is not implementing a PDO connection
• #2868841 by erozqba, Sam152, kristiaanvandeneynde, mikeker: \Drupal\user\Plugin\views\filter\Roles::calculateDependencies breaks when using the empty/not empty operators
• #2844874 by jp.stacey: Improve documentation for ChainedFastBackendFactory
• #2864938 by fenstrat, timmillwood, Sam152: Content moderation form doesn't appear on new entities
• #2855636 by idebr, Pavan B S, chiranjeeb2410, nikunjkotecha, NikitaJain, hugovk, krknth, xjm: Regression: incorrect human-readable name for content type
• Revert "Issue #2868019 by michielnugter, dawehner, Lendude: AssertLegacyTrait field assertions not compatible with Simpletest assertions"
• Revert "Issue #2863416 by zviryatko, michielnugter, Jo Fitzgerald: Convert web tests to browser tests for filter module"
• #2847685 by semiuniversal, tameeshb, benjifisher: Update doc blocks for configureEntityFormDisplay() and configureEntityViewDisplay()
• #2854454 by Maouna, hchonov: EntityReferenceFormatterBase::view() is applying the cacheability metadata but it should be merging it in order to preserve already present cacheability metadata
• #2863416 by zviryatko, michielnugter, Jo Fitzgerald: Convert web tests to browser tests for filter module
• Revert "Issue #2863416 by zviryatko, Jo Fitzgerald, michielnugter: Convert web tests to browser tests for filter module"
• #2872562 by kala4ek, arunkumark, Chi: Drupal\views\Plugin\views\style\StylePluginBase::renderGroupingSets() incorrect documentation
• #2871097 by zaporylie, LoMo: Malformed HTML in translatable string (block_content_help)
• #2868019 by michielnugter, dawehner, Lendude: AssertLegacyTrait field assertions not compatible with Simpletest assertions
• #2863416 by zviryatko, Jo Fitzgerald, michielnugter: Convert web tests to browser tests for filter module
• #2864121 by Lendude, GoZ, dawehner: Convert web tests to browser tests for statistics module
• #2871400 by dagmar: Make ViewsListingTest more readable
• #2782555 by marcoscano, YesCT, Berdir: FileUsageInterface::add() and ::delete() have incorrect param documentation
• #2862625 by Maxfire, tedbow, gaurav.kapoor, drpal, lauriii: Rename offcanvas to two words in code and comments.
• #2843774 by jamesdesq, vaplas: EntityResource: Provide comprehensive test coverage for BlockContentType entity
• #2869904 by tstoeckler: Config schema missing for less common HTTP methods in REST resources configured using 'method' granularity
• #2870410 by tim.plunkett: Field UI should show fields with unknown regions in the "Disabled" section
• #2872793 by peaton, rakesh.gectcr, phenaproxima, heddn, vasi: Create Entity Exists Process Plugin
• #2607210 by malavya, Maninders, jwilson3, prateekS, jordana, ameymudras, Shabbir, Manjit.Singh, Cottser, EdgarPE, Nitesh Pawar, mikeohara, timisoreana, emma.maria, joelpittet, alexpott, kostyashupenko, Vidushi Mehta, jhodgdon: Visual regression: Sidebar menus are missing indentation styles
• #2862752 by Jo Fitzgerald, phenaproxima: Add documentation to PerComponentEntityFormDisplay destination plugin
• #2640668 by sathish.redcrackle, shashikant_chauhan, claudiu.cristea, Goodmood: Fix TermInterface::getVocabularyId() method return type in documentation
• #2620364 by quietone, bburg, Jo Fitzgerald, Yogesh Pawar, amoebanath, phenaproxima, Gábor Hojtsy, catch: Variable to config: theme settings [d7]
• #2845486 by Jo Fitzgerald, quietone, gaurav.kapoor, ohthehugemanatee, heddn, Yogesh Pawar, catch, shabana.navas, phenaproxima, mikeryan: Rename Migration process plugin and add documentation
• #2870146 by droplet, Lendude, michielnugter: Even more random fails in \Drupal\Tests\outside_in\FunctionalJavascript\OutsideInBlockFormTest
• #2824610 by quietone, Jo Fitzgerald, ohthehugemanatee, heddn, catch: Rename DedupeBase/DedupeEntity process plugins to MakeUnique and add documentation
• #2566779 by quietone, hussainweb, keithm, heddn, kekkis, Shawn DeArmond, Jo Fitzgerald, mlbrgl, phenaproxima, mikeryan, 13jupiters, Gábor Hojtsy: Migration D6 > D8 of CCK date fields
• #2837013 by benjifisher, leslieg, alexpott: clean_class Twig filter does not work with Views rewriting
• #2867749 by pfrenssen, claudiu.cristea: Parsing an URL with another URL in the query arguments throws undefined offset notice
• #2665196 by rakesh.gectcr, quietone, Manuel Garcia, Jo Fitzgerald, webflo, mikeryan, phenaproxima, heddn: Migration for email fields is missing
• #2862751 by Jo Fitzgerald, phenaproxima: Add documentation to PerComponentEntityDisplay destination plugin
• #2683435 by quietone, Jo Fitzgerald, hussainweb, mikeryan, Steven Jones, alexpott, phenaproxima, Sam152, Pavan B S, michael_wojcik, Prashant.c, heddn, benjy: CCK does not exist in Drupal 7, rename Migrate's cckfield plugins to field plugins
• #2869570 by AdamPS: Missing dependency of drupal.ckeditor on drupal.displace
• #2685097 by damiankloip, Wim Leers: Fatal error: Call to a member function normalize() on a non-object in XmlEncoder when encoding into xml and there are embedded objects in the response
• Revert "Issue #2665196 by rakesh.gectcr, quietone, Manuel Garcia, Jo Fitzgerald, webflo, mikeryan, phenaproxima, heddn: Migration for email fields is missing"
• #2849861 by masipila, joelpittet, jeffwpetersen, xjm: D6 text area formatting settings not respected when migrating to D8
• #2867340 by Jo Fitzgerald, boaloysius, Cottser: Improve readability of Migration process plugin tests
• #2744069 by kristiaanvandeneynde, achton, dawehner, ohthehugemanatee: views_query_views_alter() does not handle IN queries
• #2753971 by dagmar, alexpott, hampercm, Berdir, generalredneck, xjm, catch: ContentEntityStorageBase::deleteRevision() function does not remove node_field_revision entries
• #2869120 by penyaskito, Mixologic, Berdir: run-tests.sh ignores classes if they have whitespace before the declaration using --directory
• #2781819 by subson, chetan.s: EntityListBuilder::load() doesn't say what the return array is keyed by
• #2869881 by sahilsharma011, quietone: Misnamed migrate test module
• Merged 8.3.1.
• #2843754 by rogierbom, Wim Leers, gaurav.kapoor, vaplas: EntityResource: Provide comprehensive test coverage for Feed entity
• #2333985 by quietone, jarsenx, ultimike, heddn: Migrate menu_default_node_menu setting
• #2850034 by hampercm, dawehner, Wim Leers: CORS allow-origin '*' not possible because of cached headers
• #2724903 by rocketeerbkw, gaurav.kapoor, Jo Fitzgerald, phenaproxima: Migrated custom block body field is hidden on form and display
• #2863996 by nlisgo, Jo Fitzgerald, scuba_fly, dawehner: Convert web tests to browser tests for ckeditor module
• #2869741 by edwardaa: FIx http_middleware priority explanation
• #2786193 by tedbow, gaurav.kapoor, fabian.marz, tkoleary, Bojhan, tim.plunkett, larowlan: Differentiate 2 "Quick edit" links for custom blocks
• #2784567 by tedbow, 20th, dmsmidt, miteshmap, dbjpanda, bendev, crasx, tkoleary: List "Quick edit" before "Configure" in contextual links while in Edit mode
• #2870315 by klausi: Klausi stepping down from all leadership positions
• #2861067 by vaplas: Random fail in Drupal\aggregator\Tests\FeedAdminDisplayTest::testFeedUpdateFields
• #2865537 by nlisgo: Convert web tests to browser tests for minimal profile
• #2863336 by hchonov, tstoeckler, alexpott: Default revision flag doesn't propagate to all entity translation objects
• #2422229 by quietone, ultimike, vprocessor, anish.a, Jo Fitzgerald, phenaproxima: D6->D8 Core block migrations missing settings tests
• #2852886 by Wim Leers, pdenooijer, lauriii: Comment improvement CKEditorPluginButtonsInterface
• #2780063 by mpdonadio, Jo Fitzgerald, GoZ, boaloysius, Lendude, klausi: Convert web tests to browser tests for datetime and datetime_range modules
• #2863268 by nlisgo, Lendude, michielnugter: Convert web tests to browser tests for tracker module
• #2864177 by xjm, droplet: Random failure in FormErrorHandlerCKEditorTest
• #2843763 by arshadcn, Wim Leers: EntityResource: Provide comprehensive test coverage for ContentLanguageSettings entity
• #2843766 by arshadcn: EntityResource: Provide comprehensive test coverage for FieldConfig entity
• #2843773 by Wim Leers: EntityResource: Provide comprehensive test coverage for RestResourceConfig entity
• #2850353 by timmillwood, Pavan B S, Sam152: Test content_moderation with a non-bundleable content entity
• #2864060 by nlisgo, Lendude, alexpott: ModerationStateNodeTypeTest::testEnablingOnExistingContent assertion is misleading
• #2858159 by Artusamak, Lendude: The "User has a revision" views argument handler generates a SQL error
• #2862988 by timmillwood, catch: EntityOperations::entityPresave doesn't always set the correct default revision
• #2359245 by Wim Leers, clemens.tolboom, marthinal, dawehner: REST resource plugin annotation class misses some properties
• #2865295 by JayKandari: $menuLinkManager property on MenuLinkTree is undocumented
• #2862006 by quietone, Jo Fitzgerald, phenaproxima: MigrateSourceTestBase returns false positives for most plugin tests
• #2866656 by alexpott, yoroy, timmillwood: Clicking on "New Draft" tab allows you to archive the content
• #2858607 by c.nish2k3, RenatoG, jhodgdon, yoroy: Non-accessible and D7 link in _update_manager_check_backends()
• #2655154 by generalredneck, claudiu.cristea, gaurav.kapoor, olegel, Jo Fitzgerald, mikeryan, phenaproxima: Optionally log messages for skip_on_empty and skip_row_if_not_set
• #2807913 by quietone, erozqba, Jo Fitzgerald, svendecabooter, phenaproxima: Convert Migrate_drupal's Migrate source tests to new base class
• #2867570 by alexpott: Drupal 8.3.0 is not compatible with Drush <8.1.10 - lets declare that in composer.json
• #2862672 by Jo Fitzgerald, quietone, heddn: Add documentation to EmbeddedDataSource source plugin
• #2820490 by mpdonadio, heddn, Manuel Garcia, Jo Fitzgerald, shabana.navas, mikeryan, tstoeckler, quietone, Grayside, phenaproxima, damondt: FormatDate process plugin
• #2344045 by jhodgdon, EclipseGc, chx, CocoaBean, andrei.dincu, tim.plunkett, fago: ContextInterface needs documentation
• #2108243 by Wim Leers, prics, linclark, YesCT: Document that HAL's RelationLinkManager(Interface) also supports registered link relation types
• #2725081 by quietone: Previous versions of Drupal allow vocabulary machine names longer than 32 characters
• #2701795 by quietone, Jo Fitzgerald, rakesh.gectcr, ifrik, hauruck, yoroy, heddn, mikeryan: Provide menu links for Drupal Upgrade UI pages
• #2826407 by Wim Leers, dawehner, Jo Fitzgerald: PATCH + POST allowed format validation happens in RequestHandler::handle(), rather than in the routing system
• #2868442 by Adita: Wrong namespace in StatisticsSettingsForm constructor docblock
• #2807875 by quietone, Jo Fitzgerald, erozqba, phenaproxima: Convert Comment's Migrate source tests to new base class
• #2782221 by Grimreaper, dawehner, Lendude, alexpott: Result summary Area plugin not displayed when there is no result
• #2845489 by Jo Fitzgerald, quietone, phenaproxima, ultimike: Add documentation to StaticMap process plugin
• #2816307 by GoZ, himanshu-dixit, james.williams, Jo Fitzgerald, dawehner, claudiu.cristea, catch: array_unique notice from List unmet configuration dependencies instead of just failing
• #2851661 by alexpott, dawehner, xjm: Ensure that we're using the right ruleset for coding standards checking
• #2866056 by vaplas, mpdonadio, Wim Leers, dawehner: ResourceTestBase should not have a timeout
• #2864690 by renatog, sandeepscs, cilefen: Fix typos in core README files
• #2867887 by xjm: statistics_get() test mashes 0 too much
• #2867599 by tim.plunkett, DyanneNova: Add DyanneNova to MAINTAINERS.txt for the Layout Initiative
• #2867493 by xjm, alexpott, connectedrobots, webchick: Error: Call to a member function getTotalCount() on boolean in statistics_get()
• #2857681 by Jo Fitzgerald, quietone: Comments not starting with a capital letter in d6_file.yml & d7_file.yml

This is a patch release of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for a summary of changes and improvements since the last minor release. Learn more about Drupal 8.

This release only contains bug fixes, along with documentation and testing improvements.

The following important issues are resolved in 8.3.3 (in addition to the dozens of other fixes listed at the end of this post):

• #2302137: Improve performance when menu link value matches with the original value
• #2804391: Resaving menu links that points to a non-node entity changes the type to node and breaks the link

Changes to the update process since Drupal 8.2.3

Beginning with 8.2.3, packaged Drupal releases no longer contain development PHP libraries. See Drupal 8 will no longer include dev dependencies in release packages for more information. See UPDATE.TXT in the Drupal download for full instructions on how to update.

Known issues

There are no known regressions in this release.

Updating from versions older than 8.3.0

We've received reports of the following issues with the 8.3.0 release that may affect those updating from older versions of Drupal 8:

• A few sites have reported #2869449: PluginNotFound exception after update to Drupal 8.3 where the plugin name mentioned in the exception may vary. Administrators of affected sites should check the issue queues of contributed modules in use. Comment on #2869449 if necessary.
• Sites that have the HAL module enabled and are upgrading from 8.1.x have encountered #2867444: Configuration schema errors whilst updating to 8.3.0. Possible workarounds include updating to 8.2.7 first and then to 8.3.0, or (for sites using Drush) updating to Drush 8.1.10. (Note that 8.1.x has been end-of-life since September 2016, so we generally do not provide full support for updates that skip minor releases.)

File usage tracking causes unexpected file deletion

Drupal 8 currently has a number of known issues related to incorrect tracking of file usage, which can result in files being unexpectedly deleted from a site. Site owners experiencing unexplained file loss should consider setting "Delete orphaned files" to "Never" on /admin/config/media/file-system until these issues are resolved, and note the following issues:

• #2801777: Give users the option to prevent Drupal from automatically marking unused files as temporary
• #2708411: File usage not incremented when adding new translation
• #1239558: Deleting a node with revisions does not release file usage
• #2666700: User profile images unexpectedly deleted
• #2810355: Images lost when changing node language
• #2884025: Uploading a managed file on a custom form that allows multiple files also triggers the remove button which results in a duplicate temporary record and results in the file being deleted

Search the issue queue for all known issues.

All changes since the last release

Changes since 8.3.2:

• Revert "Revert "Issue #2870453 by Lendude, michielnugter, dawehner: Convert web tests to browser tests for node module""
• #2863267 by Lendude, Jo Fitzgerald, michielnugter, dawehner, klausi: Convert web tests of views
• Revert "Issue #2870453 by Lendude, michielnugter, dawehner: Convert web tests to browser tests for node module"
• #2870453 by Lendude, michielnugter, dawehner: Convert web tests to browser tests for node module
• #2447729 by phenaproxima, heddn: Migrate D6 user reference fields to D8 entity reference field storage config entities
• #2848508 by timmillwood, dragos-dumi, Sam152, Pavan B S, pradeep22saini, catch, Manuel Garcia, Postovan Dumitru: Reverting a revision causes validation error on edit form submit
• #2864807 by droplet, Wim Leers, amateescu, cilefen, CatsFromStonehenge: Autocomplete textfield surrounds titles with double quotes
• #2785135 by tedbow, RajeevK, effulgentsia, alexpott: Rename protected property SystemMenuOffCanvasForm::$entity to $menu?
• #2745009 by DamienGR, Mile23: Locale doc - Wrong return value key
• #2784881 by tedbow, bnjmnm, RajeevK: Update Outside-In Javascript based tests to test against all core themes
• #2862885 by dagmar, Lendude, martin107, Jo Fitzgerald, dawehner, larowlan, alexpott: Batch: Convert system functional tests to phpunit
• #2843756 by vaplas, Wim Leers, brentschuddinck, jamesdesq: EntityResource: Provide comprehensive test coverage for FieldStorageConfig entity
• #2879942 by cilefen, xjm, Dries: Make cilefen a full core committer for Drupal 8 (release manager)
• #2881884 by pk188, Devaraj johnson, vijaycs85, dawehner: Docblock of configFactory property in ControllerBase is wrong
• #808416 by lostchord, daniels220, gaurav.kapoor, jp.stacey, JacobSanford, er.pushpinderrana, jhodgdon, oriol_e9g, kiwimind, Dries: Document that clock drift will cause lock system to fail
• #2843779 by vaplas, Yogesh Pawar: EntityResource: Provide comprehensive test coverage for ShortcutSet entity
• #2865498 by jhedstrom, timmillwood, alexpott: Latest revision tab should respect 'view own unpublished content' permission
• #2880911 by Mile23, dawehner: Remove unused KernelTestBase::getCompiledContainerBuilder()
• #2864020 by Maouna, amateescu, alexpott: Entity autocomplete displays default value's entity labels only in the default entity language
• #2826505 by quietone, pen, Yogesh Pawar, mikeryan, drzraf, mglaman: Undefined index: allowed_html FilterSettings.php:45
• #2872812 by rakesh.gectcr, cosmicdreams, mikeryan: Create process plugin to log a message
• #2873775 by josephcheek, gaurav.kapoor, John Cook, cilefen: Add Change record to @deprecated for all deprecated functions in file.inc
• #2303409 by damiankloip, Grimreaper, dawehner: Resave all the views
• #2880645 by Gun5m0k3: Incorrect cache class in DefaultPluginManager
• #2881200 by Manuel Garcia: Incorrect syntax on content_moderation.permissions.yml and workflows.permissions.yml
• #2877913 by Sam152, timmillwood, amateescu, Wim Leers: Bring content_moderation library definition into line with the rest of core
• #2881012 by Lendude, dawehner, michielnugter: Move generatePermutations out of testbase into a trait
• #2851786 by LoMo, alexrayu, arshadcn: Path validation sets error on wrong element
• #2873738 by sorabh.v6, vrwired, edwdeapri, heddn: Add Change record to @deprecated for LinkUri
• #1952926 by Lendude, shyam kumar kunkala, alexpott, Leon Kessler, Mirnaxvb, portico, finne, gigabates, tadityar: NumericField.php does not support negative value rendering in range -0.xx
• #2865213 by acbramley, Sam152, timmillwood: Moderation form submission does not set revision author
• #2868429 by Sam152, timmillwood, Adita, catch, RaisinBranCrunch: ModerationStateWidget depends on EntityTypeInterface::getBundleEntityType despite content moderation supporting entity types without a bundle
• #2843767 by arshadcn, Wim Leers, tstoeckler: EntityResource: Provide comprehensive test coverage for BaseFieldOverride entity + add missing access control handler
• #2843771 by arshadcn, Wim Leers: EntityResource: Add an admin permission to RdfMapping entity and provide comprehensive test coverage
• #2880480 by er.pushpinderrana, joachim: ObjectWithPluginCollectionInterface::getPluginCollections() shouldn't mention entities
• #2836384 by chr.fritsch, phenaproxima, Munavijayalakshmi: Field UIs operations array is broken for entities with restricted access
• #2873742 by heddn, DrupalMattS, Adita, jhood, mikeryan: Add Change record to @deprecated for Term
• Revert "Issue #2876210 by Lendude, michielnugter: Convert \Drupal\views\Tests\ViewElementTest and \Drupal\views\Tests\Plugin\StyleGridTest to kernel tests"
• #2876210 by Lendude, michielnugter: Convert \Drupal\views\Tests\ViewElementTest and \Drupal\views\Tests\Plugin\StyleGridTest to kernel tests
• #2875443 by pankajsachdeva, pritish.kumar, brentgees: Remove D7 links from D8 Render API documentation
• #2862661 by heddn, Jo Fitzgerald, phenaproxima: Add documentation to EntityConfigBase destination plugin
• #2862655 by Jo Fitzgerald, heddn, phenaproxima: Add documentation to Config destination plugin
• #2839844 by chaitanya17, tomasnagy: Notice: Undefined index: package in system_requirements() (line 60 of core\modules\system\system.install).
• #2302137 by alexpott, dawehner, pwolanin, xjm, kgoel, catch: Improve performance when menu link value matches with the original value
• #2795051 by legovaer, Lendude, dawehner: Move \Drupal\simpletest\WebTestBase::drupalBuildEntityView into a trait and make it available in BTB
• #2852608 by Manuel Garcia, DyanneNova, markconroy, tim.plunkett, joelpittet, DickJohnson, Scorpid: Review layout CSS and markup
• #2874073 by dagmar: Add dagmar as maintainer for Syslog module
• #2844595 by ohthehugemanatee, Jo Fitzgerald, heddn, moshe weitzman: SQLBase breaks GROUP BY queries
• #2874878 by zengenuity, LoMo, alexpott: Status Report is not clear when cron job is not running or PHP memory limit too low
• #2876740 by c.nish2k3, gaurav.kapoor, dagmar, alexpott: Cleanup Logger\SysLog constructor
• #2879385 by vijaycs85: Move workflow entity handlers to entity annotation
• #2826268 by Lendude, LoMo, dawehner: Don't fatal on rss feeds when the page display is disabled
• #2878369 by mfernea: Tests for local tasks in Manage Display are not correct
• #2804391 by Jo Fitzgerald, Berdir, amateescu, gaurav.kapoor, arunkumark, wolffereast: Resaving menu links that points to a non-node entity changes the type to node and breaks the link
• #2876357 by michielnugter, Lendude, jonathan1055: Incomplete test coverage on AssertLegacyTrait field assertions
• #2831598 by idebr, alexpott, Dane Powell, LoMo: Two SVG icons have crlf line endings
• #2878529 by c.nish2k3, joachim: broken @see in docs for hook_ckeditor_plugin_info_alter()
• #2848120 by kristiaanvandeneynde, tim.plunkett, Pavan B S, tstoeckler: Short term fix: Make ContentTranslationController recognize 'add' and 'edit' form handlers
• #2865497 by quietone, pritish.kumar, Jo Fitzgerald, moshe weitzman, phenaproxima: Fix high-water condition for new migrations
• #2873832 by josephcheek: Add Change record to @deprecated in EntityInterface
• #2199829 by dpi: Missing documentation for some variables in template_preprocess_username()
• #2877259 by pfrenssen: Remove outdated remark in documentation of ContextDefinition
• #2814949 by phenaproxima: Support migration of node reference field values from Drupal 6
• #2845364 by Wim Leers, EAnushan: Test coverage to show that as a non-administrator, you're able to modify the 'name' field, but only if you have the 'change own username' permission
• #2876408 by Mile23, Eric_A: Update wikimedia/composer-merge-plugin to ~1.4
• #2862749 by Jo Fitzgerald, phenaproxima, quietone: Add documentation to EntityViewMode destination plugin
• #2761639 by Leksat, Wim Leers, Berdir, hitfactory, stella: PageCache should not use $request->getUri()
• #2878166 by Sam152: Remove deprecated ModerationStateTestBase from core
• #2870513 by michielnugter, alexpott, xjm, dawehner, dagmar, Lendude, Gábor Hojtsy: New initiative leads for the PHPUnit initiative
• Revert "Issue #2870513 by michielnugter, xjm, dawehner, dagmar, Lendude, Gábor Hojtsy: New initiative leads for the PHPUnit initiative"
• #2877593 by alexpott, Berdir, Wim Leers: Improve \Drupal\hal\LinkManager\RelationLinkManager::getRelations() documentation
• #2868362 by Berdir, Ginovski, dawehner, Wim Leers, alexpott: HAL RelationLinkManager caches and returns entity type definition object instead of id
• #2878030 by dagmar: Use testing profile for NodeRevisionsAllTest
• #2869415 by Wim Leers, tstoeckler, dawehner: EntityResourceTestBase::getUrl() overrides BrowserTestBase::getUrl(), yet offers different functionality
• #2876428 by hardik.p, joachim, c.nish2k3: Documentation for LocalTaskManager::getLocalTasks() is incorrect
• #2875796 by diamondsea: Small typo in file test
• #2742953 by Jo Fitzgerald, mikeryan, Adita: SqlBase::mapJoinable() should not join across databases with PostgreSQL
• #2746253 by borisson_, Leksat, eiriksm, alexpott: Configuration translation save triggers an undefined index notice
• #2876145 by michielnugter, Mile23, Lendude, dawehner, alexpott: ConfigTranslationViewListUiTest is a WTB test in the Functional namespace
• #2870451 by andypost, snetcher, michielnugter, dawehner: Convert web tests to browser tests for menu_link_content module
• #1827854 by jamesrward, dman, superspring, joseph.olstad, legolasbo, anrikun, bceyssens, mdeletter, Damien Tournoud: W3C HTML5 Validation error with PHP array-based query-strings built with url() containing [ ] characters (eg views filters)
• #2821716 by flocondetoile, anish.a, amateescu, Thew: Fatal error when viewing node with content moderation enabled if a module which implements hook_node_grants() is enabled
• #2843782 by arshadcn: EntityResource: Provide comprehensive test coverage for Editor entity
• #2864008 by nlisgo: Convert web tests to browser tests for content_moderation module
• Revert "Issue #2868429 by Sam152, timmillwood, Adita, RaisinBranCrunch, catch: ModerationStateWidget depends on EntityTypeInterface::getBundleEntityType despite content moderation supporting entity types without a bundle"
• #2876630 by Manuel Garcia: Add test coverage for saving a node after a revision has been reverted
• #2868429 by Sam152, timmillwood, Adita, RaisinBranCrunch, catch: ModerationStateWidget depends on EntityTypeInterface::getBundleEntityType despite content moderation supporting entity types without a bundle
• #2859704 by alexpott, tacituseu, xjm, vaplas, mpdonadio, catch, Mixologic: Intermittent segfaults on DrupalCI (some did
• Revert "Issue #2853509 by alexpott: Don't render status messages if there are no messages"
• #2876633 by drpal: Add drpal to MAINTAINERS.txt for JavaScript subsystem
• #2597680 by stimalsina, neclimdul, paryank, Derimagia, timodwhit, Dries, vinothg, heddn, benjy, effulgentsia: Some migrations have warnings when node types don't exist
• #2817835 by timmillwood, Sam152, alexpott: When enabling moderation apply a relative state
• #2873749 by pritish.kumar, kwhite, dietric@gmail.com, davidneedham, cosmicdreams, johnshortess, catch: Add Change record to @deprecated in bootstrap.inc
• #2876224 by droplet: Make Drupal.tableDrag.restripeTable 10x faster
• #2824671 by mikeryan, heddn, quietone: Document dangers of preserving IDs on migration
• #2867700 by erozqba, mondrake, mradcliffe, cilefen: ConnectionUnitTest::testConnectionOpen fails if the driver is not implementing a PDO connection
• #2779931 by Sam152, alexpott, timmillwood, Wim Leers, catch, dawehner: Add storage exception that enforces unique content_entity_type_id and content_entity_id on the content moderation state content entity, and add access control handler to forbid all access
• #2809519 by martin107, gaurav.kapoor, michielnugter, dawehner, alexpott: Convert AJAX part of \Drupal\system\Tests\Ajax\AjaxFormPageCacheTest to JavascriptTestBase
• #2870513 by michielnugter, xjm, dawehner, dagmar, Lendude, Gábor Hojtsy: New initiative leads for the PHPUnit initiative
• #2811717 by tedbow, drpal, RajabNatshah, droplet, alexpott: [outsidein] Uncaught TypeError: Cannot read property 'addEventListener' of null
• #2872660 by phenaproxima: Migrate D6 node reference fields to D8 entity reference field definitions
• #2863542 by quietone: Refactor MigrateDefaultLanguageTest to be consistent with other migration tests
• #2698023 by Jo Fitzgerald, mitrpaka, mohit_aghera, gaurav.kapoor, heddn, edysmp, mikeryan: Get sourceid values sorted from Row
• #2874043 by naveenvalecha, timmillwood, phenaproxima, mpdonadio: Node module should have a listed maintainer
• #2875102 by c.nish2k3: Alphabetize the initiatives

Maintenance release of the Drupal 7 series. Includes a variety of improvements and bug fixes (no major, non-backwards-compatible new functionality).

No security fixes are included in this release.

No changes have been made to the web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

There are two changes to the .htaccess file in this release:

• A change to support services such as Let's Encrypt by making Drupal not block the .well-known directory defined by RFC 5785 (see #2847325).
• A change to allow Drupal sites to work correctly on Apache 2.4 when the mod_access_compat Apache module is disabled (see #1599774).

Upgrading custom versions of .htaccess to incorporate these changes is recommended, but not required.

Known issues:

There are no known regressions in this release.

Major changes since 7.54:

• #2877243: Fixed incompatibility with PHP versions 7.0.19 and 7.1.5 due to duplicate DATE_RFC7231 definition.
• #2847325: Allowed services such as Let's Encrypt to work with Drupal on Apache, by making Drupal's .htaccess file allow access to the .well-known directory defined by RFC 5785.
• #1599774: Made new Drupal sites work correctly on Apache 2.4 when the mod_access_compat Apache module is disabled.
• #2289867: Fixed Drupal's URL-generating functions to always encode '[' and ']' so that the URLs will pass HTML5 validation.
• Made Drupal core pass all automated tests on PHP 7.1.

All changes since 7.54:

• #1858486 by idebr, David_Rothstein, trawekp, joseph.olstad, MrHaroldA, jhedstrom: Ajax call breaks Password Reset
• #2853160 by hgoto, smaaz: Variable $name is defined but not used in file_get_content_headers()
• #2042239 by lucaslg, tbradbury, snehi, pkiraly, pjonckiere, oriol_e9g, ivanchaer, jhodgdon, chx, cilefen, David_Rothstein: Fix DeleteQuery::execute() return value documentation and DeleteQuery_sqlite documentation
• #2851725 by Jigar.addweb, tameeshb: Fix typos in various code comments in the includes directory
• #2451449 by drumm: User's contact setting reverts to default when saving
• #348815 by twistor, aerozeppelin, xjm, PROMES, nileema.jadhav, Jill L: Remove category from feed and feed items when category is deleted
• #1611430 by Berdir, brad.bulger, Stevel, sun, catch: Verbose debug output in unit tests relies on the database
• #1599774 by longwave, ben.bunk, Rob C, stefan.r, David_Rothstein, BTMash, kristofferwiklund, marcingy, mpdonadio, DuneBL, serundeputy, Letharion, quicksketch, alexpott, J-Lee, Morbus Iff: Drupal fails to boot with 503 error and .htaccess protections do not work on Apache 2.4 without mod_access_compat
• #1823504 by axel.rutz, michalis.kambi, Sylvain Lecoy: Unit tests (descendants of DrupalUnitTestCase) do not work when default site language is not English
• #1851530 by JvE, jcovington, tatarbj: Notice: Undefined index: status in _block_rehash()
• #2182265 by Sweetchuck, joseph.olstad, nod_, andrejsmuzikovs, Gábor Hojtsy, droplet, mr.baileys: Drupal.t() placeholder substitution doesn't always work correctly
• #2289867 by joseph.olstad, jamesrward, dman, superspring, legolasbo, bceyssens, mdeletter, anrikun, Damien Tournoud: W3C HTML5 Validation error with PHP array-based query-strings built with url() containing [ ] characters
• #2807393 by armrus, joseph.olstad, pankajchaudhari: Console error on Firefox due to redeclared function argument in Drupal.formatPlural
• #2883202 by David_Rothstein: Statistics module subtracts an empty string from an integer, causing PHP 7.1 test failures
• #2870289 by markcarver: file_ajax_upload() causes malformed Drupal.settings
• #1854074 by jp.stacey, jhodgdon, kiwimind: Docblock in field.tpl.php needs clarification in its reference to theme_field
• #2851665 by tameeshb: In the database schema.inc file, the class DatabaseSchema has no class documentation block
• #1886868 by IRuslan, zvse: Unused $original_destination variable in file_unmanaged_copy()
• #2819787 by chiranjeeb2410, shashikant_chauhan, stefan.r, Kartagis, naveenvalecha: The install message referencing insufficient PDO drivers links to the wrong documentation page
• #2847325 by sammuell, John Morahan, mfb, sanduhrs, D34dMan, C_Logemann, xumepadismal, serg2, walterebert, David Grudl: Support RFC 5785 on Apache by whitelisting the .well-known directory
• #2850773 by alexpott: Fix tempnam() usage in PHP 7.1
• #2880700 by David_Rothstein, cilefen, mpdonadio, xjm, Mile23: UserTimeZoneFunctionalTest fails on recent versions of PHP 7 and 7.1
• #2877243 by David_Rothstein, karoop, joseph.olstad, deminy: DATE_RFC7231 already defined in PHP 7.0.19 and 7.1.5

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcements:

• Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2017-003

No other fixes are included.

No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues

See the list of the known issues for the 8.3.x branch. There are no known regressions in this release.

Maintenance and security release of the Drupal 7 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

• Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-003

No other fixes are included.

No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues:

• When a site updates to this release, an anonymous user who is currently in the process of creating content and has already uploaded a private file (but not yet submitted the content) will lose the ability to view a preview of that file. This is a transient issue only, and it will not occur for future file uploads.
• Certain file-related contributed modules (such as Multiupload Filefield Widget and FileField Sources) may have a minor regression related to this release, which will cause anonymous users who upload private files to lose the ability to view a preview of that file before it is submitted. Affected modules will need to update their code to fix the regression. For more information, see the issues for the individual modules:
  • Multiupload Filefield Widget: #2888307: Previews of private files uploaded by anonymous users don't work in Drupal 7.56
  • FileField Sources: #2888308: Update custom version of file_save_upload() to match Drupal 7.56

This is a patch release of Drupal 8 and is ready for use on production sites. See the CHANGELOG.txt for a summary of changes and improvements since the last minor release. Learn more about Drupal 8.

This release only contains bug fixes, along with documentation and testing improvements. Translators should take note of a handful of minor string changes since the last release.

Changes to the update process since Drupal 8.2.3

Beginning with 8.2.3, packaged Drupal releases no longer contain development PHP libraries. See Drupal 8 will no longer include dev dependencies in release packages for more information. See UP.TXT in the Drupal download for full instructions on how to update.

Known issues

There are no known regressions in this release.

Updating from versions older than 8.3.0

We've received reports of the following issues with the 8.3.0 release that may affect those updating from older versions of Drupal 8:

• A few sites have reported #2869449: PluginNotFound exception after update to Drupal 8.3 where the plugin name mentioned in the exception may vary. Administrators of affected sites should check the issue queues of contributed modules in use. Comment on #2869449 if necessary.
• Sites that have the HAL module enabled and are upgrading from 8.1.x have encountered #2867444: Configuration schema errors whilst updating to 8.3.0. Possible workarounds include updating to 8.2.7 first and then to 8.3.0, or (for sites using Drush) updating to Drush 8.1.10. (Note that 8.1.x has been end-of-life since September 2016, so we generally do not provide full support for updates that skip minor releases.)

File usage tracking causes unexpected file deletion

Drupal 8 currently has a number of known issues related to incorrect tracking of file usage, which can result in files being unexpectedly deleted from a site. Site owners experiencing unexplained file loss should consider setting "Delete orphaned files" to "Never" on /admin/config/media/file-system until these issues are resolved, and note the following issues:

• #2801777: Give users the option to prevent Drupal from automatically marking unused files as temporary
• #2708411: File usage not incremented when adding new translation
• #1239558: Deleting a node with revisions does not release file usage
• #2810355: Images lost when changing node language
• #2884025: Uploading a managed file on a custom form that allows multiple files also triggers the remove button which results in a duplicate temporary record and results in the file being deleted

Search the issue queue for all known issues.

All changes since the last release

• #2884894 by amateescu, tstoeckler: Remove obsolete + duplicate EntityTestUpdate class
• #2867882 by vegantriathlete, Dinesh18, naveenvalecha, Gábor Hojtsy, Berdir: Expand @deprecated docblocks in EntityManager.php
• #2890824 by Wim Leers: Some HAL module functional tests are tagged "@group rest" instead of "@group hal"
• #2872322 by lcontreras, Jo Fitzgerald, Manuel Garcia, Lendude, rroose, catch: Views preview title is double escaped
• #2543796 by mikeker, therealssj, mariagwyn: Using token views to rewrite css output causes Twig_Error_Syntax, "Unexpected token "end of template" of value " in Twig/ExpressionParser.php line 190
• #2889803 by mpdonadio: Add test coverage for default time zone in tests
• #2850312 by heddn, Charlotte17, ohthehugemanatee, Gribnif, mikeryan, kubrt, Jo Fitzgerald, michaelmallett, phenaproxima: d6_filter_format is hard coded, causing dependent migration to fail
• #2873789 by ponies, Wim Leers, xjm: Add change record to @deprecated for TypeLinkManagerInterface
• #2888689 by pk188, Pavan B S, dhruveshdtripathi, naveenvalecha, tstoeckler: Fix description for StylePluginBase::$usesRowPlugin property
• #2854046 by andypost: Only call getDerivativeId() when needed
• #2870464 by naveenvalecha, Antonnavi, dawehner, Lendude: Convert web tests to browser tests for update module
• #2889350 by naveenvalecha, Lendude, dawehner: Convert BookRelationshipTest web tests to BrowserTestBase
• #2889352 by naveenvalecha, jibran, dawehner, Lendude: Convert ContactFieldsTest & ContactLinkTest web tests to browser tests for contact module
• #2889433 by pramodga, pk188, Chi: Fix incorrect plugin variable names in AddRoleUserTest
• #2889353 by naveenvalecha, Lendude: Convert ForumIntegrationTest web tests to browser tests for forum module
• #2505283 by quietone, maxocub, Jo Fitzgerald, mikeryan, Pavan B S, penyaskito, chriscalip, phenaproxima: Handle import of private files
• #2870440 by naveenvalecha, andypost, snetcher, michielnugter, dawehner: Convert web tests to browser tests for config_translation module
• #2862791 by mitrpaka, Jo Fitzgerald, RajeevK, quietone, harings_rob: LanguageContentSettings source plugin needs tests
• #2864005 by naveenvalecha, GoZ, Jo Fitzgerald, Lendude: Convert web tests to browser tests for block_content module
• #2870459 by naveenvalecha, Lendude, zahord, Jo Fitzgerald, dawehner, larowlan, claudiu.cristea: Convert web tests to browser tests for taxonomy module
• #2888296 by jalpesh: Incorrect filename in INSTALL doc
• #2886801 by phenaproxima: Migrate D6 user reference values to D8
• Merged 8.3.4.
• #2872059 by naveenvalecha, mpdonadio, dawehner, Lendude: Convert web tests to browser tests for locale module
• #2870441 by naveenvalecha, dawehner, Lendude: Convert web tests to browser tests for content_translation module
• #2883921 by vinothkannan, dharizza: Place migrate sections in alphabetical order in MAINTAINERS.txt
• #2873867 by kwhite, Calystod: Add Change record to @deprecated for config.storage.staging in core.services.yml
• #2784371 by Jo Fitzgerald, quietone, phenaproxima, Gábor Hojtsy, mikeryan, jhodgdon: Migrate D6 i18n taxonomy terms
• #2225781 by quietone, alexpott, Jo Fitzgerald, RajeevK, mikeryan, Gábor Hojtsy, mpp, xjm: Migrate D6 i18n taxonomy vocabularies
• Revert "Issue #2887114 by alauzon, Balu Ertl: Misleading text on automatic/manual update"
• #2887114 by alauzon, Balu Ertl: Misleading text on automatic/manual update
• #2886365 by kiamlaluno: Comments for the UserData::get() code are unclear and wrongly use "was" instead of "were"
• #2873761 by sorabh.v6, Wim Leers: Add Change record to @deprecated for ResourcePluginManager
• #2757023 by claudiu.cristea, naveenvalecha, GoZ, jibran, Jo Fitzgerald, dawehner, klausi: Convert all aggregator web tests to BrowserTestBase
• #2886198 by acbramley: Refactor \UserLoginHttpTest::testLogin() to use a protected method and remove the nested loops
• #2862641 by martin107, boaloysius, Jo Fitzgerald, dawehner, alexpott: Image: Convert system functional tests to phpunit
• #2873825 by josephcheek: Add Change record to @deprecated in SafeMarkup
• #2868759 by dpagini: ConditionInterface::conditionGroupFactory API documentation typo AND/OR
• #2885522 by kiamlaluno: ModuleHandler::loadInclude() example contains a syntax error
• #2885878 by tim.plunkett: Threecol layout 33/34/33 is only 33/33/33
• #2884715 by timmillwood, Sam152, larowlan, tstoeckler: Initial Content Moderation transitions are not correct
• #2883699 by prajaankit, ahmad.h.khalil, cilefen: hook_theme_suggestions_HOOK() is not clear enough about what should be returned
• #2884769 by tim.plunkett, larowlan, tedbow: \Drupal\Core\Block\BlockManager::getGroupedDefinitions() triggers a notice on every call
• #2867304 by maxocub, michielnugter, Jo Fitzgerald, dawehner, quietone: Convert web tests to browser tests for migrate_drupal_ui module
• #2835586 by Grayside, heddn, tjh: Allow customization of stub rows from Migration process plugin
• #2872151 by Lendude, phenaproxima, dawehner: Database/DrupalKernel: Convert system functional tests to PHPUnit
• #2883646 by shashikant_chauhan, Dinesh18: Fix incorrect mention of getBaseInfo() on BaseFormIdInterface to getBuildInfo()
• #2884887 by jibran: Add Lee Rowlands as a provisional framework manager to MAINTAINERS.txt
• #2747167 by michielnugter, dawehner, Lendude, mglaman, Mac_Weber, Jo Fitzgerald, klausi: Convert first part of web tests of views_ui
• #2828912 by tedbow, RajeevK, tim.plunkett, a-fro: Offcanvas width is not reset if tray is open with different width and not closed