Bolt 3.7.1

[0] Fix | Delete

----------

[1] Fix | Delete

[2] Fix | Delete

Released: 2020-05-07. Notable changes:

[3] Fix | Delete

[4] Fix | Delete

- Security: Check CSRF on Preview page, and prevent renaming files to blacklisted filetypes [#7853](https://github.com/bolt/bolt/pull/#7853)

[5] Fix | Delete

- Change: Add hreflang to allowed_attributes [#7855](https://github.com/bolt/bolt/pull/#7855)

[6] Fix | Delete

- Chore: Updating dependencies [#7842](https://github.com/bolt/bolt/pull/#7842)

[7] Fix | Delete

- Fixed: Fix tag cloud, update NPM deps [#7856](https://github.com/bolt/bolt/pull/#7856)

[8] Fix | Delete

- Fixed: Select field with multiple contenttypes and display values results in a `ContextErrorException` [#7849](https://github.com/bolt/bolt/pull/#7849)

[9] Fix | Delete

- Fixed: Trying to access array offset on value of type `null` with PHP 7.4 [#7843](https://github.com/bolt/bolt/pull/#7843)

[10] Fix | Delete

[11] Fix | Delete

Special thanks go out [Sivanesh Ashok](https://stazot.com/) for responsibly disclosing the two fixed security issues to us.

[12] Fix | Delete

[13] Fix | Delete

Bolt 3.7.0

[14] Fix | Delete

-----------

[15] Fix | Delete

[16] Fix | Delete

Released: 2019-11-12. Notable changes:

[17] Fix | Delete

[18] Fix | Delete

- Change: Dropped support for PHP 5.5, 5.6 and 7.0. [#7826](https://github.com/bolt/bolt/pull/7826)

[19] Fix | Delete

[20] Fix | Delete

This means the minimum requirement for Bolt 3.7 is now PHP 7.1. Because of this,

[21] Fix | Delete

the default distributions will now include more recent versions of libraries,

[22] Fix | Delete

providing better support for more recent versions of PHP 7.1 and higher

[23] Fix | Delete

out-of-the-box. This is most noticeable with Doctrine, our database library.

[24] Fix | Delete

[25] Fix | Delete

If you're stuck on an older PHP version, you can keep using Bolt 3.6 for the

[26] Fix | Delete

foreseeable future.

[27] Fix | Delete

[28] Fix | Delete

Bolt 3.6.11

[29] Fix | Delete

-----------

[30] Fix | Delete

[31] Fix | Delete

Released: 2019-11-10. Notable changes:

[32] Fix | Delete

[33] Fix | Delete

- Fixed: Fix tags in non-english languages and firefox caching selected options [#7822](https://github.com/bolt/bolt/pull/7822)

[34] Fix | Delete

- Fixed: Fix typo in `AccessControlListener.php` [#7809](https://github.com/bolt/bolt/pull/7809)

[35] Fix | Delete

- Security: Fix CRSF issues in file operations [#7823](https://github.com/bolt/bolt/pull/7823)

[36] Fix | Delete

- Updated: Add `download` to `allowed_attributes` in HTML cleaner [#7808](https://github.com/bolt/bolt/pull/7808)

[37] Fix | Delete

- Updated: Added comment about required IP in `trustProxies` [#7807](https://github.com/bolt/bolt/pull/7807)

[38] Fix | Delete

- Updated: Export improvements [#7812](https://github.com/bolt/bolt/pull/7812)

[39] Fix | Delete

- Updates: Update tests for Doctrine 2.10 compatibility [#7824](https://github.com/bolt/bolt/pull/7824)

[40] Fix | Delete

[41] Fix | Delete

Special thanks go out f4h4dbt for responsibly disclosing the CSRF issue to us.

[42] Fix | Delete

[43] Fix | Delete

Bolt 3.6.10

[44] Fix | Delete

----------

[45] Fix | Delete

[46] Fix | Delete

Released: 2019-08-15. Notable changes:

[47] Fix | Delete

[48] Fix | Delete

Security: Prevent XSS in system log (for authenticated users) #7802

[49] Fix | Delete

Security: Prevent XSS in image alt/title (for authenticated users) #7801

[50] Fix | Delete

Security: Prevent XSS in "Create file" in file manager (for authenticated users) #7800

[51] Fix | Delete

Fixes: Prevent update of guzzlehttp/psr7 to 1.6, fixes tests #7798

[52] Fix | Delete

Fixed: Fix taxonomy name collision #7799

[53] Fix | Delete

Fixed: Rebuilding assets, fixing tags cloud #7794

[54] Fix | Delete

[55] Fix | Delete

Bolt 3.6.9

[56] Fix | Delete

----------

[57] Fix | Delete

[58] Fix | Delete

Released: 2019-06-24. Notable changes:

[59] Fix | Delete

[60] Fix | Delete

- Added: Add abbreviations to CKeditor, using `<abbr>`-tag. [#7783](https://github.com/bolt/bolt/pull/7783)

[61] Fix | Delete

- Fixed: Use isIterable over Traversable [#7778](https://github.com/bolt/bolt/pull/7778)

[62] Fix | Delete

- Updated: Select2 updated to 4.0.7, since it _finally_ works on IE 11 again. [#7783](https://github.com/bolt/bolt/pull/7783)

[63] Fix | Delete

ssss

[64] Fix | Delete