Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.
Although still a work-in-progress, this release includes the code that's been running on Drupal.org for quite some time. Since we're about to do a weekend of sprinting and hopefully getting closer to an official 7.x-2.0 release, I wanted to cut a new set of releases as an initial starting point. Changes since 7.x-2.0-unstable1:
Apologies to all the users of this module -- it's been far too long since we've done an official release! The drupal.org redesign, Git migration, the ability to package both .tar.gz and .zip files, and a number of other significant changes have all happened since alpha4. We're gearing up to do another round of fixes and improvements, so before we start merging all of that into the mainline branch we wanted to ship this release (which has been running quite happily on drupal.org for months).
#635892 by dww: Initial commit of the project_package module to track what items are included in package releases. At this point, it's just a database table populated by the packaging script, and Views support.
#642106 by dww: Initial native support for a "Release type" vocabulary.
#642110 by dww: Initial native support for a "Security update" term.
#642112 by dww: Added a denormalized latest_security_release column to {project_release_supported_versions} to facilitate #642114, simplify queries, and to expose this information to Views.
#642114 by dww: Compute and maintain the update status for every release node.
Added views support for the release update status code.
#645076 by dww: Properly set {prn}.update_status in the case of packages.
#642096 by dww: Added a {project_release_nodes}.version_extra_weight column to provide a better mechanism for sorting releases with version_extra defined.
First official release compatible with Drupal 6 core (note that the alpha1 and alpha2 releases were tagged months ago but never officially released -- they were used internally for initial deployment on drupal.org). There are still a number of known issues before we're ready to release an official 6.x-1.0 release. There will almost certainly be more schema and API changes.
Initial port to Drupal 6 API. Views (6.x-2.5 or higher) is now required to run project*. This code is mostly working, but there's no guarantee that the upgrade path is stabilized. There are still a number of known bugs we need to resolve before an official release, particularly in the project browsing views. Production sites should not upgrade until there's an official release.
This release fixes two security vulnerabilities described in DRUPAL-SA-CONTRIB-2009-001. Sites are urged to upgrade immediately. In addition to these security updates, this release includes the following changes since version 5.x-1.2:
Project module
Bug fixes
#235037 by aclight and dww: Fixed critical bugs in project_page_overview() query and logic. It wasn't using the {project_release_supported_versions} table, so download links were sometimes pointing to the wrong releases.
#239240 by aclight and hunmonk: Fixed bug where browse by date only worked with project_release and taxonomy modules (for no good reason).
#211188 by aclight: Fixed bug where project node teasers were different when filtering by a version which was caused by the node type not being included in the query for the project browsing pages.
#233052 by aclight: Fixed bug with hook_project_page_link_alter() when a project disables its issue tracker.
#327285 by dww: Fixed bug introduced in #218571 where release-related links were added to project nodes that had disabled releases.
NOTE: Unless critical bugs are uncovered, this will be the last official release for the 4.7.x-1.* series. All users are strongly encouraged to upgrade to at least 4.7.x-2.*, or better yet, 5.x-1.*, as soon as feasible. Support for this release series is basically over.
This release addresses an access bypass security issue, DRUPAL-SA-2007-020. Sites that try to restrict access to projects based on the 'access projects' or 'access own projects' permissions should upgrade immediately.
This release addresses an access bypass security issue, DRUPAL-SA-2007-020. Sites that try to restrict access to projects based on the 'access projects' or 'access own projects' permissions should upgrade immediately.
This release addresses an access bypass security issue, DRUPAL-SA-2007-020. Sites that try to restrict access to projects based on the 'access projects' or 'access own projects' permissions should upgrade immediately.
This release fixes a security vulnerability, all users of project-4.7.x-1.x (or 4.7.0 from before the new release system) are urged to upgrade. For more details, see DRUPAL-SA-2007-004.
Besides the security fix, the only other changes in this release are bug fixes since project-4.7.x-1.1:
#100901: there was 1 more call to project_project_set_location() which i missed when backporting this fix to DRUPAL-4-7. :( This causes undefined function errors when you try to add a release in 4.7.x-1.*.
This release fixes a security vulnerability, all users of project 5.x-0.x-dev from before 2007-01-23 are urged to upgrade. For more details, see DRUPAL-SA-2007-004.
NOTE: The upgrade path from 4.7.x-1.* version of the Project module is still very confusing, undocumented, and error prone. Sites that use the project module are strongly recommended to not upgrade to Drupal core 5.x until the official 5.x-1.0 release of this module is available.
Besides the security fix, other changes in this release include:
This release fixes a security vulnerability, all users of project 4.7.x-2.0 are urged to upgrade. For more details, see DRUPAL-SA-2006-031.
This release includes new database updates. After you upgrade, you should run update.php for your site:
project_release_update_1(): Adds the {project_release_default_versions} table for branch-aware default versions and populates it the best it can. See #89538 for details.
project_release_update_2(): Adds a new column to the {project_release_projects} table that determines if the development snapshot table should be shown on project nodes. See #101887 and #89539 for details.
Other changes since project 4.7.x-2.0:
Bugs fixed:
#97173: Download link targets other project's tarball. We were missing an unset() from #93471 and that's causing the wrong download links to be used since we're always using the same project identifier.
#96986: Minor bug in breadcrumb on releases (patch by Gurpartap, modified by dww to be slightly more clear, and to fix the $breadcumb[] element for the release itself, since we were using $node not $release).
This release fixes a security vulnerability, all users of project (4.7.x-1.0 or 4.7.0 from before the new release system) are urged to upgrade. For more details, see DRUPAL-SA-2006-031.
Besides the security fix, the only other changes in this release are bug fixes since project-4.7.x-1.0:
The initial release of the 4.7.x-2.x series which implements the new release system. Note: if you are currently running the 4.7.x-1.x series, you should not update to the 4.7.x-2.x series until i've had a chance to write up documenation on the conversion process. If you have releases currently on your system, you will almost certainly need to modify some of the code in the conversion script included in this release to properly convert the releases on your site.