3.9.7

🎉 Features

Adds support for whoops.blocklist config option to mask variables that are displayed when showing errors with Whoops. (thanks to @HYR)

return [
  // mask everything
  'whoops' => [
    'blocklist' => [
      '_COOKIE' => array_keys($_COOKIE),
      '_SERVER' => array_keys($_SERVER),
      '_ENV' => array_keys($_ENV),
    ]
  ]
];

return [
  // mask specific things
  'whoops' => [
    'blocklist' => [
      '_SERVER' => [
        'AWS_ACCESS_KEY_ID',
        'AWS_SECRET_ACCESS_KEY',
      ],
    ]
  ]
];

✨ Enhancements

• Prevent kirby as user id #5514
• Supports passing callable to Database\Query::fetch() #5651 (thanks @adamkiss)
• Str::pool(): New base32 and base32hex pools (useful when a Str::random() needs to be printed in a human-readable way without easy to confuse 0/O and 1/I). #5715

🐛 Bug fixes

• Use k-text-input for text field if no specific component exists for its type #5369
• Invalid cached UUIDs are now corrected when index lookup succeeds #5430
• Allow plugin assets with the .mjs extension #5473
• Fixed $page->isUnlisted() which falsely would return true for drafts #5506
• List field: fix disabled writer #5526
• Fix $collection->group() for case-sensitive #5631
• Calling a single database row when using a fetch closure works now #5640 (thanks @adamkiss)
• Fix layout dropdown in structure field #5267

📚 Docs

• Add note on dist files to contributing guide #5480