commons 7.x-3.10

For full release notes and upgrade instructions, please see http://docs.acquia.com/commons.

Drupal Commons 3.10 (Drupal 7.27 core) contains the following updates, fixes, and security patches:

Features

• More easily upload and use images and video with the updated Media module
• Improved groups performance for large Drupal websites

Resolved security alerts

• SA-CORE-2014-002 - Drupal core - Information Disclosure
• SA-CONTRIB-2014-045 - Drupal Commons - Multiple Vulnerabilities
• SA-CONTRIB-2014-043 - Custom Search - Cross Site Scripting
• SA-CONTRIB-2014-042 - Internationalization - Access Bypass
• SA-CONTRIB-2014-034 - Custom Search - Cross Site Scripting

Drupal core, module, and theme updates

• Updated Drupal core to 7.27
• Updated Acquia Network Connector to 7.x-2.14 (#2246415 by Devin Carlson)
• Updated Adaptive Themes to 7.x-3.2-dev, updated 2014-Mar-25 (by Jakob Perry)
  • Updated Sky sub-theme to 7.x-3.0 (by Jakob Perry)
• Updated Custom Search to 7.x-1.16 (by Jakob Perry)
• Updated Email Registration to 7.x-1.2 (by Jakob Perry)
• Updated Entity API to 7.x-1.5 (#2246409 by Devin Carlson)
• Updated Entityreference prepopulate to 7.x-1.5 (by Jakob Perry)
• Updated Flag to 7.x-2.2 (#2222449 by Devin Carlson)
• Updated Flag Abuse to 7.x-2.0 (#2246651 by Devin Carlson)
• Updated Localization update to 7.x-1.0 (#2246449 by Devin Carlson)
• Updated Lingotek Translation to 7.x-5.04 (#2222259 by Devin Carlson)
• Updated Media to 7.x- ( by Devin Carlson)
• Added Media: oEmbed 7.x-2.1 (#2246433 by Devin Carlson)
• Updated Message Subscribe to 7.x-1.0-rc2 (by Jakob Perry)
• Updated Mollom to 7.x-2.9 (#2222201 by Devin Carlson)
• Removed oEmbed
• Updated Organic groups to most recent 7.x-2.6 git hash (by Jakob Perry)
• Updated Radioactivity to most recent git hash (by Jakob Perry)
• Updated Real Name to 7.x-1.2 (#2224831 by Devin Carlson)
• Updated ShareThis to 7.x-2.6 (by Jakob Perry)

Fixed issues

• Enabled the Media: WYSIWYG module by default.
• Update Commons Radioactivity to reflect changes in 'history' key for radioactivity module
• Make the content moderation view only accessible by administrators.
• Update wikis to properly allow access to edit revisions or nodes only when a user is a member or the group is public
• Restored the oEmbed module for update purposes and enabled the Commons: Media module by default.
• Accommodated Ajax form page callback changes required by Drupal 7.27.
• Updated the Media module to the latest commit hash.
• #2234815 by japerry: gracefully fail if a trusted contact link is broken prematurely.
• #2173637 by japerry, ezra-g: Limit the # of Trusted Contacts each user can have
• Devin Carlson: Added general behavioural tests.
• Devin Carlson: Added behavioural testing of the upgrade path.
• Devin Carlson: Added behavioural test notification settings.
• Devin Carlson: Refactored behavioural tests.
• #2235179 by slowflyer, japerry: Add flag checks to commons follow UI to only show tabs a user can actually use.
• #2233863 by japerry: Add flag field filter for commons_follow_user
• #2233631 by japerry use solr page limit instead of a hardcoded limit on solr user people page.
• Devin Carlson: Added test for admin user login.
• Devin Carlson: Updated the CKEditor library.
• Devin Carlson: Run all tests using selenium.
• Devin Carlson: Run failing tests using selenium.
• Devin Carlson: Fixed file path.
• Devin Carlson: Fixed warnings for entities that don't have bundles.
• Devin Carlson: Incorporated latest Media UX improvements.
• Devin Carlson: Added a patch to Media: oEmbed in order to improve thumbnail performance and prevent errors.
• Devin Carlson: Updated to the latest commit hash of Commons.
• Devin Carlson: Limited oEmbed alterations to only video and rich resources.
• Devin Carlson: Switched to the latest commit hash of the Ember theme.
• Devin Carlson: Hid the upload button when a file is not present.
• Devin Carlson: Added patch to File Entity in order to fix undefined index errors when updating remote files.
• Devin Carlson: Automatically upload selected files.
• Devin Carlson: Restored responsive media functionality.
• Devin Carlson: Disabled the Noembed provider by default.
• #1995834 by japerry: Refactor attendee_count to remove php 5.4 errors
• #2225889 by japerry: Include patch for realname to eliminate og index errors on profile edit page
• #1872134 by japerry: Include, but don't enable gravatar with the profile
• #2206861 by Zarabadoo: Add a content type icon to posts.
• Devin Carlson: Altered the Media Internet embed code description.
• #2225583 by Devin Carlson: Updated the Localization update module to 7.x-1.0-rc2. (superseded)
• #2222389 by Zarabadoo, rosemeria: Disable textarea resizing when the quickpost form is collapsed.
• Devin Carlson: Updated to the latest commit hash of Message Subscribe.
• #2222589 by japerry: Change menu alter for wikis access
• #2224931 by Devin Carlson: Updated the Flag Abuse module to 7.x-2.0-alpha2. (superseded)
• #2225549 by Zarabadoo: Sync up the media browser styles from Ember.
• #2224615 by Devin Carlson: Updated the Entity API module to 7.x-1.4. (superseded)
• #1792644 by japerry: Support groups of node types other than group
• #2222977 by Devin Carlson: Updated patch to Flag in order to fix fatal error.
• #2209727 by japerry: Enable title_field by default and re-scan node types to bring them in line with commons titles.
• #2217131 by Zarabadoo: Clean up the media widget on node forms.
• Devin Carlson: Updated the Media module to the latest commit hash.
• #2222163 by Devin Carlson: Updated the CKEditor library to 4.3.3.
• Devin Carlson: Corrected doxygen.
• Devin Carlson: Accommodated the latest changes to the Media module.
• Devin Carlson: Removed ellipsis from media element browse button title.
• #2094153 by japerry: Fix answer button to display for users with access to answer.
• #2215695 by Zarabadoo: Add one last piece that needed to be ported from the css files.
• #2135785 by japerry, umtj, arski: Make commons_groups a dependency of commons_bw
• #2215695 by Zarabadoo: Add missed scss file. Oops.
• #2215695 by Zarabadoo: Resync css and sass.
• #2215571 by Devin Carlson: Updated the timeago jQuery library to v1.4.0.
• Devin Carlson: Added ellipsis to media element browse button title.
• Devin Carlson: Updated Media to the latest commit hash.
• #2138771 by Sumeet.Pareek | rosemeria: Activity stream, node teaser date submitted format.
• #2201909 by japerry: Fix commons_follow count to use new message_subscribe API
• #2210387 by fun.boojum: Fixed translation of group contributor count by removing unnecessary call to t().
• #2152935 by japerry: Suppress notice error when loading more views.
• #2206099 by ezra-g: Duplicative node access clauses in activity stream views.
• Devin Carlson: Added latest Media changes.
• #2204763 by slowflyer: Enable checkbox when viewing own notifications tab
• #2195755 by japerry, WebSinPat: Automatically remove queue_default_class variable if its set to advancedqueue.
• ezra-g: Merge branch "7.x-3.x" of git.drupal.org:project/commons into 7.x-3.x
• #2202363 by Devin Carlson: Updated patch to CKEditor in order to fix CSS issues.
• #2204255 by ezra-g: Include recent Core & Views node access patches
• #2184905 by meba, ezra-g, Devin Carlson: Fixed example event content does not appear in the Events directory by dynamically determining its start and end date during installation.
• #2200191 by helmo: Fix notices appearing in commons events
• Devin Carlson: Removed tests that failed due to lack of default content.
• Devin Carlson: Removed authenticated user tests.
• Devin Carlson: Added general behavioral tests.
• Devin Carlson: Added styling for media browser title bar.
• Devin Carlson: Coding standards.
• #2196983 by helmo: Fixed typo in drupal-org.make.