socialfeed 4.1.x-dev

Development branch for 4.1.x: Drupal 12 support, bug fixes and security hardening. It is a drop-in update from 4.0.x: configuration names, block plugins and templates are unchanged.

Requirements

• Drupal 11.3+ or 12. Drupal 10 is no longer supported; Drupal 10 sites should stay on 4.0.x.
• PHP 8.3+ (8.5+ on Drupal 12).
• No third-party PHP libraries. facebook/php-business-sdk, noweh/twitter-api-v2-php and nesbot/carbon are removed; all APIs are called with core's HTTP client.

Changes

• Drupal 12: OOP #[Hook] implementations, #[Block] attributes, initial preprocess callbacks and PHPUnit attributes. CI also tests against the next major version.
• Feed caching: each network has a Refresh interval. If a refresh fails, the last fetched posts keep showing and the error is logged with credentials removed. Saving a network's settings clears its cached posts.
• Instagram: uses Business Login for Instagram (instagram_business_basic), so enter the Instagram app ID and secret. The login is protected by a state check, the access token is no longer shown on screen, and cron refreshes the token after 50 days.
• Blocks: site-wide credentials are no longer copied into block configuration, which is exported with config. A database update removes existing copies from blocks that don't customize their feed. Block cache metadata is fixed.
• X: post HTML is built from the API entities after trimming. Only the Bearer token is used; the OAuth 1.0a keys are marked as legacy.
• Facebook: post text is escaped, the settings test uses the Graph API client, and unused settings are removed.
• Instagram template fixes, and a logger.channel.socialfeed logger.

Updating

Run composer require 'drupal/socialfeed:4.1.x-dev@dev', then drush updb.