drupal 8.2.0-rc2

This is a release candidate for the next feature release of Drupal 8. Release candidates are not supported for production sites, but they are intended for widespread testing in preparation for the upcoming stable release. More information on release candidates.

This minor release provides new improvements and functionality without breaking backward compatibility (BC) for public APIs. Note that there may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies. Note that both policies have been updated for the 8.1.x release.
For a full list of the API and feature additions included in the 8.2.0 release candidate, see the 8.2.0-beta1, 8.2.0-beta2, 8.2.0-beta3, 8.2.0-rc1 release notes.

Translators should take note of the string changes since the last minor release. Developers can review the change records for this release.

Important changes in this release

8.2.0-rc2 fixes security vulnerabilities described in SA-CORE-2016-004. Sites running 8.2.0-rc1 or earlier should update immediately to get the latest security fixes.

8.2.0-rc2 also provides a number of fixes for critical regressions from 8.1.x that blocked contributed projects for 8.2.x, as well as other critical and major bugfixes. Of note:

• #2796953: [regression] Plugins extending from classes of uninstalled modules lead to fatal error
• #2803179: [regression] rest_update_8201() can fail and break things
• #2773333: Form validation errors, status messages on form submission are shown after page refresh when form is rendered in block
• #2787479: Anon users can access editor dialogs because all users have plain_text
• #2539634: PathItem::delete() never runs because the path field type is a computed field in disguise

The release fixes two long-standing bugs that caused automated testing failures as well:

• #2791163: Random automatic testing failures on SQLite with PHP 5.5
• #2762549: Drupal\field\Tests\Update\FieldUpdateTest, Drupal\views\Tests\Update\EntityViewsDataUpdateTest and Drupal\comment\Tests\CommentFieldsTest fail on 8.1.x

Outside In renamed to Settings Tray

The Outside In module has been renamed from its development name to Settings Tray, so that users can identify its purpose from the name. The module's machine name and code have not changed, so sites running this module on 8.2.0-beta2 or later do not need to take any special steps for updating.

Third-party updates

The RC includes one vendor library update: #2797427: Update CKEditor library to 4.5.11

Known issues

There are no known regressions in this release.

The following issues may affect people running Drupal 8.2.0-rc2 on specific hosting environments:

• Windows/IIS environments may encounter site errors due to the following issues:
  • #2606772: Long Twig cache directories can cause failures on Windows
  • #2783079: DRUPAL-SA-CORE-2016-003 Completely broke IIS drupal deployments
• There is not yet per-commit testing for MySQL 5.7.9 or MariaDB 10.1.8 (both released October 2015), but there are no known issues with them. We intend to add per-commit testing on one of these databases in the future.
• Particular Apache configurations may have issues with serving public file assets. Issue: #2619250: Disabling -MultiViews in .htaccess can cause 500 errors
  
• Installs on php-fpm environments may see fatal errors on enabling modules, due to #2572285: Module enabling and router rebuilding should be done in one transaction

Search the issue queue for all known issues.

All changes since 8.2.0-rc1

• SA-CORE-2016-004 by alexpott, andypost, antongp, cashwilliams, catch, Chi, dawehner, dsnopek, Heine, kierheyl, Pere Orga, pwolanin, larowlan, q2u, stefan.r, xjm
• #2782803 by tkoleary, tedbow, xjm, cilefen, yoroy, davidhernandez, prestonso, David_Rothstein, Gábor Hojtsy, nod_, Dries: Rename Outside-in module to "Settings Tray" in the UI and in comments
• #2803179 by Wim Leers, MKorostoff, Berdir, dawehner: [regression] rest_update_8201() can fail and break things
• #2796953 by Wim Leers, mondrake, effulgentsia, catch, mikeryan, ayalon, chx, Fabianx, tim.plunkett, jibran, xjm, slashrsm, phenaproxima, borisson_: [regression] Plugins extending from classes of uninstalled modules lead to fatal error
• #2782885 by tedbow, rakesh.gectcr, xjm, webchick, tkoleary, drpal: No indication what page element is being configured with Outside In
• #2781577 by tim.plunkett, tkoleary, Bojhan, rickvug, Wim Leers: Properly style outside-in off canvas tray
• #2763787 by nerdstein, rlhawk, slasher13, therealssj, TravisCarden: Upgrade random_compat to latest version
• #2801259: Remove include from TestDabase class
• #2794249 by alexpott: Move file_directory_os_temp() to a class in Drupal\Component\FileSystem
• #2799959 by Shashwat Purav: incorrect summary line for menu_ui_form_node_type_form_validate()
• #2797427 by thpoul: Update CKEditor library to 4.5.11
• #2790855 by tedbow, drpal, xjm, tkoleary, tim.plunkett, Wim Leers, Cottser: Rework animation for standard dialog system
• Revert "Issue #2785589 by nod_, tedbow, drpal, droplet: Fix js and jsdoc of outside-in module"
• #2784465 by naveenvalecha, martin107: Update help text for the Outside In module
• #2784513 by drpal, tedbow, nod_: Off-canvas tray requires feedback on load
• #2799053 by sanduhrs: Environment is not preserved running phpunit with a different user
• #2762549 by alexpott, Fabianx, Mixologic, xjm: Drupal\field\Tests\Update\FieldUpdateTest, Drupal\views\Tests\Update\EntityViewsDataUpdateTest and Drupal\comment\Tests\CommentFieldsTest fail
• #2791163 by alexpott, dawehner: Random automatic testing failures on SQLite with PHP 5.5
• #2755677 by Mile23: Fix 'Drupal.WhiteSpace.OpenTagNewline' coding standard
• #2801883 by claudiu.cristea: Add an empty $modules property in BrowserTestBase
• #2785589 by nod_, tedbow, drpal, droplet: Fix js and jsdoc of outside-in module
• Revert "Issue #2485385 by phenaproxima, quietone, Berdir, blazey, hussainweb, mikeryan, benjy, alexpott: Move highwater field support to the source plugin, and do not expose its internals on MigrationInterface"
• #2485385 by phenaproxima, quietone, Berdir, blazey, hussainweb, mikeryan, benjy, alexpott: Move highwater field support to the source plugin, and do not expose its internals on MigrationInterface
• #2798335 by naveenvalecha: Menu.api.php references a renamed class
• #2799021 by dawehner, Wim Leers: Ensure a failing PHPUnit test shows enough information via run-tests.sh
• #2773333 by Berdir, Juterpillar, Wim Leers, Fabianx, renukakulkarni: Form validation errors, status messages on form submission are shown after page refresh when form is rendered in block
• #2657978 by maxocub, quietone, Gábor Hojtsy, Kristen Pol, alexpott: Variable to config: language_default [d6]
• #2793731 by mikeryan: Obsolete destination properties in d6_file/d6_user_picture_file
• #2785657 by mathieso, dishabhadra, ifrik, dawehner, YesCT, tim.plunkett: Misleading text in block visibility pages description
• #2787479 by Wim Leers, Sam152, quicksketch: Anon users can access editor dialogs because all users have plain_text
• #2791211 by cilefen: Cache::getBins should explain the returned data types implement CacheBackendInterface
• #2785891 by xjm, dawehner, tim.plunkett, alexpott, catch, YesCT, daffie, webchick: The distinctions between modules, themes, and other subsystems are not relevant in MAINTAINERS.txt or the issue queue component field
• #2539634 by Berdir, dawehner, cilefen, mpp, claudiu.cristea, amateescu, kristiaanvandeneynde: PathItem::delete() never runs because the path field type is a computed field in disguise
• #2797943 by jmuzz, claudiu.cristea, dawehner: Add support for clickLink()'s second argument to BrowserTestBase
• #2794715 by Mile23, klausi: TestSuiteBaseTest cannot be executed as standalone test
• Revert "Issue #2793443 by dawehner: Make private functions protected in BrowserTestBase/KernelTestBase"
• #2797173 by joshmiller: Fix typo in CurrentUser.php