drupal 10.1.3

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

Drupal 10.1.x will receive security coverage until June 2024.

Important update information

If you are updating from Drupal 9, refer to Preparing your site to upgrade to a newer major version for tools you can use to check the Drupal 10 compatibility of modules, themes and sites. Then, upgrade from Drupal 9 to 10. You should also check the Drupal 10.0.0 release notes.

Important changes in this release

• CKEditor 5 has been updated to 39.0.1. This fixes a long-standing data loss critical bug: until now, CKEditor 5 stripped all inline empty elements, which are typically used for inline icons using markup such as <i class="icon icon-druplicon"></i> or <span class="icon icon-druplicon"></span>. Going forward, this is supported, but requires the Source Editing plugin to be configured to allow <i class> or <span class>, respectively. This must be configured manually, which is better than in CKEditor 4, where it required custom code.
• A new DeprecationHelper API has been added to enable contributed modules to support multiple versions of core more easily. Contributed modules may add a minimum dependency on Drupal 10.1.3 if they want to start using this API.

All changes in this release

• Issue #3384667 by Gábor Hojtsy, quietone: Add Gábor Hojtsy as facilitator to MAINTAINERS.txt
• Issue #3384764 by fjgarlin, longwave: ImageUrlTest fails on GitlabCI integration
• Issue #2010368 by fjgarlin, Pancho, poker10, daffie: Installer can't create new database on PostgreSQL
• Issue #3100826 by ilya.no, mwilbur, nikita_tt, smustgrave, quietone: AJAX pager doesn't work with exposed filter which has a default value
• Issue #3311469 by Rajeshreeputra, Internetter, fjgarlin, skyredwang: Absolute path for oembed iframe
• Issue #2986962 by fjgarlin, ppseftogiannis, smustgrave, Sut3kh: BrowserTestBase::drupalGet() does not appear to be handling base url properly
• Issue #3344789 by acbramley, Berdir, fenstrat, benjifisher, borisson_: Return early in EntityPermissionsForm::access if the user does not have "administer permissions"
• Issue #2514960 by Aki Tendo, catch: \Drupal\Core\Theme\Registry->build() does not always return \Drupal\Core\Utility\ThemeRegistry
• Issue #3381097 by catch, b_sharpe, TwoD: Need to catch Peast exceptions
• Issue #3327294 by poker10, alexpott: Username enumeration via one time login route when logged in as another user
• Issue #3355381 by catch, drewcking, stewest, bnjmnm, lmoeni, fngatia, kevinquillen, Danny Englander, Ambient.Impact, gapple, manikandank03, lucasvm: Investigate better ways to add anti-flicker JS
• Issue #3382123 by catch, smustgrave, nicxvan: Update Peast to 1.15.4
• Issue #3379430 by nlisgo, kostyashupenko, Chi, smustgrave: Umami theme should declare dependency on SDC
• Issue #3378341 by gapple, acbramley: claro.jquery.ui css assets may be added the page multiple times
• Issue #3381660 by chesn0k: Documentation problem with node_is_page
• Issue #3371619 by bbrala, andypost, dww, mglaman, Kingdutch, catch, mondrake, heddn, Charlie ChX Negyesi: Implement utility method for invoking backward compatible code
• Issue #3378657 by dineshkumarbollu, gorkagr, smustgrave: Duplicate declaration of $context in WidgetBase
• Issue #3377318 by Spokje, longwave, znerol: Remove cruft from LanguageNegotiationMethodManager
• Issue #3218087 by nlisgo, Gribnif, Lendude, smustgrave: Views MysqlDateSql::getDateFormat() should translate PHP's 'o' format to MySQL's '%x'
• Issue #3212759 by Lendude, ckaotik: Ensure views Translate tabs are visible when editing
• Issue #3368509 by Spokje, Wim Leers, quietone: [Random test failure] Random failure in CKEditor5AllowedTagsTest::testMediaElementAllowedTags
• Issue #3380637 by lauriii, Wim Leers: Update CKEditor 5 to 39.0.1
• Issue #3326261 by juanolalla, Wim Leers, lauriii, smustgrave, witeksocha, jwilson3, ChrisSnyder, ericras, Reinmar, jds1, Luke.Leber: [Style] Add tests for inability to apply styles to div, ul, ol, table etc. in CKEditor 5 — and a allows applying it to all elements
• Issue #3379525 by quietone, smustgrave: Convert enable/disable to install/uninstall in exception text
• Issue #3379089 by nlisgo, elgandoz, smustgrave: Hardcoded color class for site branding when using RTL
• Issue #3377562 by Wim Leers, Spokje, longwave, witeksocha, Reinmar: Update CKEditor 5 to 39.0.0
• Issue #3374253 by TwoD, smustgrave, catch, lauriii: The renderer throws away cache metadata from access result if it is not allowed
• Issue #2559961 by angrytoast, Krzysztof Domański, drup16, Lendude, vasike, Leksat, sam711, tar_inet, mlncn, JordiK, adinac, Pascal-, joshua.boltz, froboy, oriol_e9g, alison, codesmith, luenemann, specky_rum, daffie: ManyToOneHelper ignores group configuration for some cases
• Issue #3377131 by longwave, smustgrave: File mode check in commit-code-check.sh is too strict