drupal 7.93

Maintenance release of the Drupal 7 series. Includes bug fixes and small API/feature improvements only (no major, non-backwards-compatible new functionality).

No security fixes are included in this release.

Changes have been made to default.settings.php. More details in the Change Records for major changes below.

No changes have been made to .htaccess, web.config or robots.txt files in this release, so upgrading custom versions of those files is not necessary.

This is the first Drupal 7 release to pass tests in PHP 8.2! However there may still be problems not revealed by Drupal core's test suite, especially on sites with contrib (and custom) modules. Please test, and report any problems in the appropriate issue queue.

As always, many thanks to everyone that contributed to this release of Drupal 7.

Major changes in 7.93:

• Drupal 7 now has a user action "unblock current user"
• Drupal 7's hook_comment_unpublished is now invoked
• New hook_valid_email_address_alter() in Drupal 7
• The time limit for cron locks in Drupal 7 has been increased to 15 minutes, and is configurable from settings.php
• SameSite attribute set to Lax on various Drupal 7 cookies
• Drupal 7's minimum PHP version is now PHP 5.3
• Permissions-Policy header is removed since Google has retired FLoC (D7)
• Drupal 7's EntityFieldQuery uses $ordered_results instead of the declared $orderedResults property
• Optional $mail parameter added in user_pass_rehash()

All changes:

• #3316901 by poker10, solideogloria, mcdruid: hash(): Passing null to parameter #2 ($data) of type string is deprecated in check_markup()
• #2070807 by pounard: book_node_load() ignores the 'book_allowed_types' and does excessive SQL queries
• #3306390 by poker10, catch, Fabianx, pwolanin, rvtraveller: [D7] Changing email address should invalidate one-time login links
• #2891346 by berliner, Ayesh, jpablus, gapple, Fabianx, poker10, mcdruid: tableheader.js: Source: call to eval() or related function blocked by CSP
• #512042 by vbouchet, kbasarab, stefanos.petrakis, poker10, felribeiro, ryan.gibson, scottrigby, Caligan, tim.plunkett, perarnet, stpaultim, bojanz, xjm, Fabianx, David_Rothstein, mcdruid: Add user action "unblock current user" to user.module
• #2248177 by poker10, sulav: Image dimensions should accept only positive values
• #2927466 by poker10, loziju, mcdruid: "Conflicting" validators for user picture leads to confusing form error message
• #2554965 by poker10, AjitS, rashid_786, owenbush, GBurg, joshi.rohit100, cilefen: hook_comment_unpublish is never invoked
• #2956127 by MustangGB: Use cronRun() in tests
• #2966195 by mpaler, poker10, ravi.shankar, chrisolof, klonos: valid_email_address() should be easily overridable
• #2925487 by poker10, karivolas, ioannis.cherouvim: svg element is rendered broken in Full HTML format
• #3308929 by poker10, swentel, fago, catch, alexpott, Berdir: [D7] Cron lock time limit is too short and does not prevent multiple, concurrent cron runs
• #2871459 by mcdruid, Stevel, MustangGB, poker10, brad.bulger: Simpletest does not reset the $theme* globals
• #1504544 by Valentine94, poker10, mrinalini9, jthorson, Chi, brad.bulger, Berdir: Strict warning: Only variables should be passed by reference in run-tests.sh
• #2901466 by Yago Elias, ciss: Comment in field_default_form() is missing a "not", inverting its statement
• #2397691 by alexpott, poker10, Sivaji_Ganesh_Jojodae, webchick: Random fail in testNodeTermCreationAndDeletion()
• #2903330 by apaderno: Documentation page for hook_field_storage_info_alter() contain a reference to hook_field_field_storage_info()
• #3101859 by Liam Morland, longwave: Remove redundant return statements
• #3085861 by Liam Morland: Fix typos in simpletest comments
• #674354 by joseph.olstad, tadityar, wretched sinner - saved by grace, arhak: dblog CSS selectors get overridden
• #3284269 by mcdruid, poker10: Fix samesite attribute on Drupal.toolbar.collapsed and other similar cookies
• #3319435 by mcdruid, poker10: Update system requirements (including INSTALL.txt) for D7
• #3292743 by mcdruid, poker10: Remove FLoC header from D7 as google has abandoned it
• #3322003 by poker10: [D7 PHP 8.2] Fix Deprecated function: Creation of dynamic property in tests
• #1292930 by disasm, bxtaylor, poker10, loganfsmyth, ACF: EntityFieldQuery uses incorrect ordered_results instead of orderedResults
• #3322011 by poker10: [D7 PHP 8.2] Deprecated function: Creation of dynamic property EntityFieldQuery::$alterMyExecuteCallbackPlease
• #3322009 by poker10: [D7 PHP 8.2] Deprecated function: Creation of dynamic property in FileTransfer class
• #3322008 by poker10: [D7 PHP 8.2] Deprecated function: Creation of dynamic property in Updater class
• #3308466 by poker10, solideogloria: [D7] HtaccessTest - access_test module displayed in the modules list
• #3312970 by jan kellermann: Wrong image size because of bug in 7.91
• #3304883 by mcdruid, poker10: [D7 PHP 8.2] Deprecated function: Creation of dynamic property in PDOException class
• #3310081 by mcdruid: javascript links in contrib broken since 7.92
• #3304886 by poker10: [D7 PHP 8.2] Deprecated function: Creation of dynamic property in SelectQuery class
• #3304885 by poker10: [D7 PHP 8.2] Deprecated function: Creation of dynamic property DatabaseCondition::$stringVersion
• #3304884 by poker10: [D7 PHP 8.2] Deprecated function: Creation of dynamic property MergeQuery::$condition
• #3304882 by poker10: [D7 PHP 8.2] Deprecated function: Creation of dynamic property in DrupalWebTestCase->prepareEnvironment()