3.3.4

New features

• New sticky option for columns in blueprints getkirby/ideas#284

columns: 
  - width: 1/3
    sticky: true
    sections: ...

• New Korean Slug Rules (a huge thank you to: Min Guhong)
• New $fileCache->root() method getkirby/ideas#390
• New themeless mode for info sections and info fields

fields: 
  info: 
    type: info
    text: Some info text
    theme: none

Enhancements

• Fixed excerpt method with support for unicode chars #2420
• Cache blueprint extends #2364
• Disabled fields have a lower opacity now
• The icon option in the tags field does now also set the icon in the dropdown #2438

Fixes

• Structure field: Fixed preview for the value 0 #2423
• Search: fixed upper- and lowercase characters for languages with diacritics #2408
• Tags field: fixed smaller issues around backspace delete and arrow navigation #2403
• Fixed disabled status icon position on card layouts in the Panel #2412
• Clear lock if user not found for locked page #2333
• Fix language path for pattern #2345
• Fix decimals float on number field #2372
• The language name is now correctly validated when updating a language #2436
• The missing page title error message in the page creation dialog is now correctly translated #2441

Stats

• 35 commits
• 29 closed tickets & PRs
• Days since last release: 22
• Contributors: @afbora, @bastianallgeier, @distantnative, @lukasbestle

3.3.3

Enhancements

• The files blueprint preset has a new image option #2272
• We've updated all our JS dependencies for the panel
• We've added Japanese slug rules #2334
• You can now replace files with the same extension but different mime types #1783
• We've normalized greyscale, grayscale and bw as thumb options. You can now also use $image->greyscale(), $image->grayscale() or $image->bw() to achieve the same. Keep the typos coming :) #2384
• We've switched from Zend Framework to Laminas for the Escaper class #2390
• Our translators updated Danish (da), Swedish (sv_SV) and Korean (ko)

Fixes

• The timezone bug in date fields is fixed #2349
• We've added fallbacks for the grab cursor on drag handles #2354
• Links with anchors are now handled correctly on multi language sites #2280
• The correct path is used when you drag files into textareas #2366
• Kirby uses a more reliable way to load roles #2383
• The search in the filepicker for textareas is fixed #2388

3.3.2

New Features

• PHP 7.4 support
• Support for address names when sending email getkirby/ideas#42

Enhancements

• Updated translations
• Sticky headers for structure tables #2328
• Remote class: Enhancements to headers #2322
  • Support associative arrays for the headers option ('Accept' => 'application/json' should become 'Accept: application/json' automatically)
  • Add support for the CURLOPT_USERPWD option with a new basicAuth option
• Mime class: add missing text/csv mime type #2316
• F class: Option to disable base64 encoding in dataUri() method #2276
• Clicking on the language in the Settings view now opens the edit dialog #2264
• The k-link component now allows passing a callback function as to prop. ListItem and Cards support passing callback function as link prop

Fixes

• Fixed pattern validation in text inputs
• Manually sorted pages can now be deleted reliably in a foreach loop #2323
• Entering space in the multiselect field works again #2340
• Content sorting by date no longer fails on multilingual site #2256

3.3.1

• Fixed typo in Pull Request template
• Added missing @since information to inline docs, which gets reflected on our site
• Fixed class references in inline docs (for better IDE support and docs)
• The app state is updated immediately on user login/logout #2267
• Fixed slug generation issues #2282
• Fixed asteriks issue in the slug helper #2293
• Fixed sortBy option in structure fields #2279
• Fixed text option in users field #2278
• Fixed mailto null linking in email field #2254
• Fixed toggle preview in structure field #2291
• The session handler is now accessible in the $kirby object #2294
• New getManually() method in the AutoSession class
• Use new translation locale in API code #2233
• Added translations for image validations #2300
• Fixed multiselect field issues #2302
• Decimals are no longer removed automatically in the number field by default #2306
• Empty values in the number field are now saved correctly again #2288
• We no longer test PHP 7.1. Security support ends in 4 days and we plan to stop supporting it in 3.4

3.3.0 – Trioceros

New features

The new Kirby Editor plugin

Together with this release, we also release the very first version of our new Kirby Editor plugin.

Kirby Editor is a new visual writing and layout field for Kirby. Compose long-form text with consistent inline styles. Add images, videos, quotes and more. Bring your own block types and always rest assured that the output will be valid, customizable HTML.

The new editor is a major step forward for Kirby and we are very excited about it!

You can find this new plugin and the documentation for it here: https://github.com/getkirby/editor

See all unsaved changes

When you edit pages, files or user accounts, you will see a new "unsaved changes" icon in the topbar. The overview of unsaved changes makes it a lot easier to keep track of content that is still work-in-progress. #1979
Read more …

New icons

We added a set of new icons that have been requested by our users and that we consider "essential". #2209

The following new icons are now available:

- bell
- book
- bookmark
- box
- bug
- car
- cart
- chart
- chat
- credit-card
- folder
- heart
- home
- layers
- linkedin
- map
- question
- star
- strikethrough
- underline
- vimeo
- whatsapp
- wheelchair
- youtube

All available icons …

New toggle field preview

Toggle fields in structures come with a great new preview and are even usable right from the structure overview #2126

You can also switch off the toggle text in structure columns entirely with the text option #2244:

fields: 
    links: 
        type: structure
        columns: 
            url: true
            featured: 
                text: false
        fields: 
            url: 
                type: url       
            featured: 
                type: toggle      

Language-specific Smartypants configuration

You can change the Smartypants configuration for quotes and other typographical details, based on the current language. #2037

<?php

// /site/languages/de.php
return [
    'code' => 'de',
    'direction' => 'ltr',
    'locale' => 'de_DE'
    'name' => 'Deutsch',
    'smartypants' => [
        'doublequote.open' => '„',
        'doublequote.close' => '“',
    ]
];

Read more …

New ErrorPageException

With the new ErrorPageException you can stop your code in your controllers, templates or plugins immediately and render the error page instead of the current page. This makes reacting to fatal errors a lot easier. #1887

Here's a controller example:

return function ($page) {

    $filters = ['latest', 'featured', 'deprecated'];

    if (in_array(param('filter'), $filters)) {
        throw new ErrorPageException('The filter is not accepted');
    }

    return ['filter' => $filter];

};

Search and pagination in files, users, and pages fields

You can search and paginate pages, files and users in the dialogs of the users, files and pages fields. #2208

Read more …

New subpages option for the pages field

Enable or disable subpage navigation in the pages field with the new subpages option
getkirby/ideas#217

fields: 
  related: 
    type: pages
    query: site.find("blog").children
    subpages: false

Read more …

CSS variables for plugin developers

We are introducing the first set of css variables for plugin developers. This will make it a lot easier to follow Kirby's panel design by using the right colors, font sizes, etc. The following variables are available.

/** Colors **/
--color-backdrop
--color-background
--color-border
--color-focus
--color-focus-light
--color-focus-outline
--color-negative
--color-negative-light
--color-negative-outline
--color-notice
--color-notice-light
--color-positive
--color-positive-light
--color-positive-outline
--color-text
--color-text-light

/** Font families **/
--font-family-mono
--font-family-sans

/** Font sizes **/
--font-size-tiny
--font-size-small
--font-size-medium
--font-size-large
--font-size-huge
--font-size-monster

/** Shadows **/
--box-shadow-dropdown
--box-shadow-item
--box-shadow-focus

Read more …

New ready callback

Register last-minute options with the new ready callback. This callback is executed when Kirby's instance is ready to be fully used and you can use all roots, urls and other stuff from Kirby to set additional options accordingly. #1724

<?php 

// site/config/config.php
return [
    'ready' => function ($kirby) {
        return [
            'db' => [
                'database' => $kirby->root('site') . '/db/database.sqlite',
                'type' => 'sqlite'
            ]
        ];
    }
];

Read more …

Extendable dump() helper

Overwrite our dumper with your own implementation or an implementation from a framework
getkirby/ideas#339

Kirby::plugin('my/dumper', [
    'components' => [
        'dump' => function ($kirby, $variable, bool $echo = true) {
            // dump that var
        }
    ]
]);

Read more …

Collection::when()

Use the new when() method for any collection to simplify your code when filtering or sorting items getkirby/ideas#349

$size  = get('size');
$color = get('color');
$price = get('price')

$products = $page->children()
    ->when($size, function ($size) {
        return $this->filterBy('size', $size);
    })
    ->when($color, function ($color) {
        return $this->filterBy('color', $color);
    })
    ->when($price, function ($price) {
        return $this->filter(function ($child) use ($price) {
            return $child->price()->toFloat() <= $price;
        });
    });

Read more …

$library and $helper

All plugin developers have full access to the helpers and libraries that we use in the panel with the new $library and $helper objects in Vue.js. #1846

Here's an example of how to use our slug helper inside a Vue component:

const slug = this.$helper.slug("Mötorhead rulez!!");

The following helpers and libraries are available:

// helpers
this.$helper.clone 
this.$helper.isUploadEvent 
this.$helper.debounce 
this.$helper.pad
this.$helper.ratio
this.$helper.slug
this.$helper.sort
this.$helper.string.ucfirst
this.$helper.string.lcfirst
this.$helper.upload

Read more …

// libraries
this.$library.autosize
this.$library.dayjs

Read more …

New hooks

The following new hooks are available for your plugins getkirby/ideas#350, getkirby/ideas#23

- system.loadPlugins:after
- user.login:before
- user.login:after
- user.logout:before
- user.logout:after

All hooks …

Additional new features

• You can search by username in the global search
• Collection::intersection() and Collection::intersects() getkirby/ideas#214
• New $pages->notTemplate() method
• New Visitor::preferredMimeType() method
• New Visitor::prefersJson() method
• New Mime::matches() method
• New ::panelOptions method for all models (Page, User, File) #1951
• New flip option for pages and files sections getkirby/ideas#97
• New $field->inline() method
• New $field->nl2br() method
• New $kirby->nonce() which can be used in custom CSP settings
• The svg helper now accepts Kirby’s File objects

Breaking changes

• The pagination object is now immutable and all setters are disabled by default #1887
• The Vuex form store module in the panel has been refactored and is now called content. If your panel plugin works with the form store module, please check out the refactored module. Conversion won't be difficult. We made lots of thinks a lot cleaner. But you need to rename the actions or getters that you use from the old module.
• The v-tab directive is no longer available. Tabbable elements should use the tab mixin

Deprecated methods

• The deprecated $kirby->root('translations') root is no longer available. Use $kirby->root('i18n:translations') instead

We've also added deprecation warnings to additional core methods. You will run into an exception if the debug mode is active. You can keep th...

3.2.5

Features

• The panel can now be extended with your own icon plugins 🎉

panel.plugin('my/icons', {
  icons: {
    'my-icon': '<path d="M7,3V13H5v2H8a1,1,0,0,0,1-1V4h2V2H8A1,1,0,0,0,7,3Z" /><circle cx="2" cy="14" r="2" /><polygon points="12 0 12 6 16 3 12 0" />'
  }
});

• You can now use query templating in more blueprint options (help, default, label, empty and headline) (#1823, #1862)

fields: 
  text: 
    label: "Notes for {{ page.title }}"
    type: textarea
    help: "You can fill in some notes for {{ page.title }} here"   

• To create a custom response in your custom API routes, you can now return a Response object (#2076)
• Content locking can be switched off with the new content.locking option (#2000)

return [
  'content' => [
    'locking' => false
  ]
];

• New F::relativepath() method

echo F::relativepath('/Users/secret/www/site/templates/default.php', '/Users/secret/www');
// result: '/site/templates/default.php'

• New $options argument in Json::encode() (#2111)

echo Json::encode('здравей', JSON_UNESCAPED_UNICODE);

• Added yml and yaml extensions to F::$types (#2018)

echo F::type('yaml');
// result: code

• Added application/yaml and text/yaml to Mime::$types (#2018)

echo Mime::fromExtension('yml');
// result: application/yaml

Enhancements

• Clicking the Today button in the calendar dropdown will now immediately set the date (#1736)
• More detailed PHP CS settings now result in even cleaner source code
• Changing a user role is now completely disabled if there's just one role (#1948)
• The parent option in sections is now validated correctly and a readable error message is thrown when incorrect objects or values are given (#1938)
• The current user's role is used as the default when creating new users (#2038)
• The panel default language is now used as default in the installer and when a new user is created (#1940)
• Improved pull request template
• We now use absolute class names in doc blocks for better IDE support
• A custom panel css file has now a cache-buster timestamp (#1729)
• New detailed error messages on uploads, including php.ini setup issues (#1812)
• The image preview in structure fields now uses srcset and proper thumbnails (#2039, #2040)
• Updated contributing guide
• Invalid structure field data now throws a human-readable error message (#2046)
• Enhanced structure field preview for multiselect fields (#1996)
  
• We reduced the content locking frequency to make locking less resource-intensive (#2000)
• Updated translations
• Translated options in blueprints have better fallbacks now, if the language is not available (#1876)
• An invalid field section setup is now throwing a more readable error (#1935)

Fixes

• Show radio buttons in the files, pages and users pickers, when the max option is set to 1 (#2109)
• Fixed panel jumps on opening the file dialog from textareas (#1879)
• Fixed unicode replacements in Slug generator (#1903)
• The correct locale is now set in API calls from the panel, which fixes localised dates and other localisation issues (#1872)
• Forbidden user roles no longer appear in the user dialogs, when creating a new user or changing user roles (#1917)
• Default values in structure fields no longer block saving checkboxes and other fields correctly (#1950)
• Adding files to the textarea now creates correct absolute paths when necessary (#2003)
• Users without an admin role can now change the roles of other users if they have permissions to do so (#1919)
• Keyboard navigation through dropdowns now skips disabled options correctly (#1661)
• Routing in the panel no longer shows broken fields (#2007)
• The pattern validation in text fields is now working correctly (#2041)
• Fixed Page siblings in page.update:after hook (#1401)
• Consistent $collection->append() and $collection->prepend() methods (#2078)
• The Vuex user store is now correctly updated when the email, language or name of the current user is changed (#1957)
• Untranslatable fields in multi-language installations are now never stored (#2001)
• Files in the files section are now sorted explicitly by the sort field to fix a wrong order (#2020)
• Invalid fractions in structure fields are now handled correctly (#1930)
• Focusing a disabled structure field no longer throws an error (#1960)
• A duplicated page is now properly indexed when the page.duplicate:after hook is triggered (#1923)
• Better range input behaviour when the field is empty (#2044)
• Fixed layout of the empty box, when there's a lot of text (#2065)
• The info option in the users field is now working correctly (#2050)
• Fixed unclickable links in the help text of a disabled field (#1965)
• The disabled toggle field now displays its state correctly (#2004)
• Fixed a bug in the time field, which always set the time to 12:00 AM (#1781)
• The file field in API error responses is now showing the correct file path on Windows (#1937)
• Spellchecking in textareas is now enabled by default again (#2047)
• Fixed Page siblings collection in page.changeSlug:after hook (#1952)
• A newly created user can now be impersonated directly (#2021)
• Fixed widont() helper when the last word contains a dash (#1902)
• Some nested array options in the config didn't work reliably. This is now fixed (#1944)
• The $position parameter in the page.changeStatus:before hook is now filled in correctly at all times (#1982)

3.2.4

• Page titles, filenames and usernames are now trimmed before they will be saved (#1836)
• Custom slug rules no longer fail with + symbol (#1946)
• Better slug conversion from Cyrillic (#1903)
• Multiple default languages will now throw an exception (#1849)
• Improved textarea field docs
• Added missing since info for field options to improve the docs on the website
• Added spellcheck option to the textarea field
• File models have been removed again until we can implement them in a reliable and performant way (#1971)
• Fixed panel redirect after page deletion (#1984)
• Fixed space and escape key shortcuts in the search input of the multiselect field (#1983)
• Fixed broken checkboxes when an object has been passed (#1670)
• Fixed num: date when the date handler is set to strftime (#1882)
• Fixed num: date with translations (#1886)
• Created a new SECURITY.md file to provide relevant information in case of security issues
• Dropping multiple files into a textarea does now create the correct number of KirbyTags (#1850)
• Fixed select inputs in Edge (#1712)
• Fixed jump when clicking/focussing on checkboxes (#1657)
• Fixed typos in CONTRIBUTING.md
• Emails can now be send with custom transport props
• Added translation for missing panel view access permissions (#1997)
• Fixed access for non-existing options
• Fixed broken panel plugins by adding required semicolons when bundling js files (#1931)
• Added Lithuanian and Russian translations
• Return to regular tab widths (#1999)

3.2.3

Improved brute-force protection

This release improves the brute-force protection of the Panel. Unfortunately the protection didn't trigger when a valid email address, but an invalid password was passed. This bug is now fixed.

We have also made further improvements to the brute-force protection. It now also applies to requests with HTTP Basic Auth. Additionally, it protects better from brute-force attacks carried out by botnets. You can read more about this feature and its limitations in the docs.

It is recommended to upgrade your Kirby 3 installation to Kirby 3.2.3 to benefit from the improved protection.

Thanks to Clemens Prill for reporting the issue.

---

Changes

• Fixed user models (#1892)
• Fixed dimension detection for webp files
• Fixed Str::split with multi-char separator (#1753)
• Fixed blueprint option for site title (#1899)
• Fixed cache prefix with a port in the host address
• Fixed issue with session cache (#1932)
• Fixed access of dotted keys in queries (#1939)
• Email addresses with umlauts are now correctly validated by V::email() and thus also in the panel (#1895)
• Fixed width and height attributes in video tags (#1875)
• The manual locale setup warning is now translatable (#1897)
• Updated translations
• Support for sorting constants in the sortBy option in sections (#1913)
• New Collection::sortArgs() method to create sortBy arguments from a string
• Fixed API error handling on errors without route
• Optional content lock for virtual pages (#1539
• Media files are now correctly generated again in multi-site setups
• Brute-force protection improvements (see above)

3.2.2

This is a hotfix release for two regressions in 3.2.1. We are really sorry for missing them during the test phase!

• Editing your own account works reliably again (#1910)
• The Panel installation no longer throws an error (#1909)

3.2.1

• Min and max options in the date and datetime fields are now properly validated (#1801)
• Tags in the autocomplete dropdown can now be selected with the mouse in Safari (#1646)
• The upload dialog in files fields prevents selecting wrong MIME types (#1877)
• Snippets can now be loaded from a content field value again (#1883)
• Fixed image settings in pages field (#1891)
• Only admins are able to create admin accounts and change their own role (#1843)
• Fixed styling of long tabs (#1711)
• Fixed PHP code style issues
• Dialogs are now reset properly after they have been closed (#1858)
• The font weight in select inputs is now fixed in Safari (#1884)
• Updated translations (tr, fr, de, ca, en)