Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github May 8, 2025

Bumps craftcms/cms from 3.7.39 to 4.15.3.

Release notes

Sourced from craftcms/cms's releases.

4.15.3

  • Return URLs are now sanitized before being saved to the PHP session.
  • Fixed a bug where admin tables’ pagination footers could be positioned incorrectly in slideouts. (#17187)
  • Fixed a SQL error that could occur when running garbage collection. (#17197)
  • Fixed a PHP error that could occur if malformed UTF-8 data was passed to craft\helpers\StringHepler::replaceMb4(). (#17202)
  • Fixed a bug where “Applying new propagation method” jobs weren’t propagating elements to newly-supported sites. (#17207)
  • Fixed a bug where _includes/forms/button.twig wasn’t rendering labels set to '0'. (#17225)
  • Fixed a styling issue.

4.15.2

  • Fixed a bug where control panel-generated URLs could be malformed. (#17157, #17161)
  • Fixed a bug where the forms.checkboxField macro wasn’t respecting fieldset and checkboxLabel keys passed into its config.
  • Fixed an error that could occur when backing up the database, if the database password contained special characters. (#17158)
  • Fixed a PHP deprecation error that could occur when applying the replace Twig filter to a null variable. (#17159)

4.15.1

  • Fixed a bug where static relational field inputs weren’t showing the related elements’ hierarchy. (#17127)
  • Fixed a bug where some system screens shown on the front end were sent without no-cache headers. (#17129)
  • Fixed a bug where the default notificationDuration value per the accessibilityDefaults config setting wasn’t being respected for users who hadn’t saved their preferences yet.
  • Fixed a bug where control panel JavaScript-generated URLs weren’t formatted correctly if the omitScriptNameInUrls and usePathInfo config settings were both disabled. (#17147)

4.15.0.2

  • Fixed a bug where Time field values weren’t saving properly. (#17114)

4.15.0.1

  • Fixed an error that could occur when running “Updating search indexes” jobs.

4.15.0

Content Management

  • Condition rules for Checkboxes, Dropdown, Multi-select, and Radio Buttons fields now include “has a value” and “is empty” operators. (#17015)
  • The Assets index page now prompts for confirmation when moving more than 50 assets, or assets totalling more than 50MB, at once. (#16908)
  • The success notification displayed after an asset move now includes an “Undo” button, if less than 50 assets/50MB were involved in the move. (#16908)
  • Window scrolling is now blocked when a modal window is open. (#16768)

Administration

  • Added the db/repair command. (#16812)
  • Added the --batch-size option for resave/* commands. (#16586)
  • The plugin/install command now accepts an edition argument, and prompts for the default edition if none is specified. (#17030)
  • The plugin/uninstall command now reports if no plugin is installed with the provided handle. (#17030)
  • The users/create command now prompts to send an activation email, or outputs an activation URL. (#16794)
  • Dragging headings within the Customize Sources modal now also drags any subsequent sources. (#16737)
  • When switching field types, any field settings which are defined by the same base class are now preserved. (#16783)

Development

  • Added the searchTermOptions GraphQL query argument. (#16979)
  • Added the revisionNotes GraphQL entry mutation argument. (#16943)

Extensibility

  • Global nav items and breadcrumbs can now have aria-label attributes via an ariaLabel property.
  • Added craft\base\ElementInterface::getSerializedFieldValuesForDb().

... (truncated)

Changelog

Sourced from craftcms/cms's changelog.

4.15.3 - 2025-05-06

  • Return URLs are now sanitized before being saved to the PHP session.
  • Fixed a bug where admin tables’ pagination footers could be positioned incorrectly in slideouts. (#17187)
  • Fixed a SQL error that could occur when running garbage collection. (#17197)
  • Fixed a PHP error that could occur if malformed UTF-8 data was passed to craft\helpers\StringHepler::replaceMb4(). (#17202)
  • Fixed a bug where “Applying new propagation method” jobs weren’t propagating elements to newly-supported sites. (#17207)
  • Fixed a bug where _includes/forms/button.twig wasn’t rendering labels set to '0'. (#17225)
  • Fixed a styling issue.

4.15.2 - 2025-04-23

  • Fixed a bug where control panel-generated URLs could be malformed. (#17157, #17161)
  • Fixed a bug where the forms.checkboxField macro wasn’t respecting fieldset and checkboxLabel keys passed into its config.
  • Fixed an error that could occur when backing up the database, if the database password contained special characters. (#17158)
  • Fixed a PHP deprecation error that could occur when applying the replace Twig filter to a null variable. (#17159)

4.15.1 - 2025-04-22

  • Fixed a bug where static relational field inputs weren’t showing the related elements’ hierarchy. (#17127)
  • Fixed a bug where some system screens shown on the front end were sent without no-cache headers. (#17129)
  • Fixed a bug where the default notificationDuration value per the accessibilityDefaults config setting wasn’t being respected for users who hadn’t saved their preferences yet.
  • Fixed a bug where control panel JavaScript-generated URLs weren’t formatted correctly if the omitScriptNameInUrls and usePathInfo config settings were both disabled. (#17147)

4.15.0.2 - 2025-04-17

  • Fixed a bug where Time field values weren’t saving properly. (#17114)

4.15.0.1 - 2025-04-16

  • Fixed an error that could occur when running “Updating search indexes” jobs.

4.15.0 - 2025-04-15

Content Management

  • Condition rules for Checkboxes, Dropdown, Multi-select, and Radio Buttons fields now include “has a value” and “is empty” operators. (#17015)
  • The Assets index page now prompts for confirmation when moving more than 50 assets, or assets totalling more than 50MB, at once. (#16908)
  • The success notification displayed after an asset move now includes an “Undo” button, if less than 50 assets/50MB were involved in the move. (#16908)
  • Window scrolling is now blocked when a modal window is open. (#16768)

Administration

  • Added the db/repair command. (#16812)
  • Added the --batch-size option for resave/* commands. (#16586)
  • The plugin/install command now accepts an edition argument, and prompts for the default edition if none is specified. (#17030)
  • The plugin/uninstall command now reports if no plugin is installed with the provided handle. (#17030)
  • The users/create command now prompts to send an activation email, or outputs an activation URL. (#16794)
  • Dragging headings within the Customize Sources modal now also drags any subsequent sources. (#16737)
  • When switching field types, any field settings which are defined by the same base class are now preserved. (#16783)

Development

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [craftcms/cms](https://github.com/craftcms/cms) from 3.7.39 to 4.15.3.
- [Release notes](https://github.com/craftcms/cms/releases)
- [Changelog](https://github.com/craftcms/cms/blob/4.15.3/CHANGELOG.md)
- [Commits](craftcms/cms@3.7.39...4.15.3)

---
updated-dependencies:
- dependency-name: craftcms/cms
  dependency-version: 4.15.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels May 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant