drupal 8.5.0-rc1

This is a release candidate for the next feature release of Drupal 8. Release candidates are not supported for production sites, but they are intended for widespread testing in preparation for the upcoming stable release. More information on release candidates. This release also includes security fixes, so any sites already using 8.5.0-alpha1, 8.5.0-beta1, or 8.5.x-dev should update immediately!

This minor release provides new improvements and functionality without breaking backward compatibility (BC) for public APIs. There may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies.

Minor releases may include string changes and additions. Translators can review the latest translation status on localize.drupal.org.

Important update information

For a full list of important changes since 8.4.x, also see the 8.5.0-alpha1 release notes and 8.5.0-beta1 release notes.

Site update and module owners planning to update to this release should take note of the following important issues:

• This release includes security updates. Sites are encouraged to update immediately after reading the notes below and the security announcements:

  • Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2018-001

  Sites on 8.4.x should update to 8.4.5 instead, which includes the same security fixes without any additional changes.

• This release flags the node access system for automatic rebuild in order to update certain records for certain configurations. If a site includes a contributed or custom access control module and has multilingual functionality, administrators may see a prompt to rebuild node access. Be aware that this can take some time, but is necessary to ensure correct node access grants for all scenarios.

• If you have a contributed or custom module that deals with pending revisions or loading different revisions, be aware that new validation was introduced to limit the allowed changes for untranslatable fields. See the related change record about this revision API change for details.

• Important: If you have not already upgraded to 8.4.0, read the Drupal 8.4.0 release notes before upgrading to 8.5.0-beta1. Drupal 8.4 includes major version updates for Symfony, jQuery, and jQuery UI and is no longer compatible with older versions of Drush. Drupal 8.3 and earlier are no longer supported.

• A bug in Symfony 3.4 causes parsing to fail on certain YAML files that contain comments. Drupal core is working around this issue, but custom services.yaml files or other custom YAML formats may need to implement their own fixes until the issue is fixed upstream in Symfony (hopefully before Drupal 8.5.0). See the Symfony 3.4 change record for details.

• Several JavaScript build packages have been updated to their latest versions in Drupal 8.5.0-beta1. Most changes are backwards-compatible, but review the change record for changes that may affect custom JavaScript code.

Critical bug fixes

The following critical issues are fixed in Drupal 8.5.0-rc1:

• #2937850: Mark revision_default as internal for REST consumers
• #2915175: Duplicating a Page to Block after changing the display id and then saving the view destroys the Page

Known issues

• #2937942: REST views: regression in 8.5.x: view with display using 'csv' format now returns a 406 response, need to add ?_format=csv to URL to make it work

Search the issue queue for all known issues.

All changes since 8.5.0-beta1

• Issue #2885583 by drpal, keeganstreet, Dinesh18, naiduharish, sim_1, idebr, larowlan, Gábor Hojtsy, nick_schuch, droplet: Close button in tour module lacks descriptive text
• Issue #2944658 by neerajsingh, cilefen: Creating distributions link should point to the version specific documentation
• Issue #2899392 by idebr, neclimdul, rgpublic: user_hook_toolbar() makes all pages uncacheable
• Issue #2915175 by vaplas, Phonoman, Lendude: Duplicating a Page to Block after changing the display id and then saving the view destroys the Page
• Issue #2937850 by Wim Leers, plach: Mark revision_default as internal for REST consumers
• Issue #2778167 by Wim Leers, arunkumark: Build link in Statistics block with toRenderable()
• Issue #2932083 by Lendude, andreyjan, siva_drupal: Views Table style plugin breaks dynamic cache
• Issue #2934960 by marcoscano, mycw1991, seanB, evankay, chr.fritsch, andrewmacpherson, jefuri, Jeroen Witte: Clean up icons that ship with Media
• Issue #2945369 by Pasqualle: Wrong variable name in \Drupal\node\Form\DeleteMultiple
• Issue #2945041 by heddn, maxocub: Categorize derived migrations according to their type
• Issue #2711099 by heddn, Jo Fitzgerald, edysmp, edgewl2, alexpott, Charlotte17, mikeryan, masipila, quietone, maxocub, phenaproxima: Categorize migrations according to their type
• Issue #2938643 by markconroy, andrewmacpherson, David_Rothstein, yoroy: Umami Banner Block does not have accessible text alternative at wide viewport
• Issue #2938194 by markconroy, andrewmacpherson: Focus styles should meet accessibility guidelines in Umami theme
• Issue #2941647 by markconroy, JayKandari, cehfisher, smaz, andrewmacpherson: Link hover styles unintentionally applied to administration toolbar
• Issue #2938800 by markconroy, David_Rothstein, ckrina, smaz, Eli-T, cehfisher, larowlan: Finalize wording for Toolbar warning message
• Revert "Issue #2942769 by alexpott, Eli-T: Consolidate umami .htaccess files and testing"
• Issue #2661542 by Mile23, Mixologic: Isolate Drupal\Tests\Component\Plugin\DefaultFactoryTest from core test module
• Issue #2942769 by alexpott, Eli-T: Consolidate umami .htaccess files and testing
• Issue #2942590 by tim.plunkett: Layout Builder defaults should work regardless of the ability to provide overrides
• Issue #2921367 by ApacheEx, xjm, effulgentsia, drpal, webchick, justafish, dawehner: Add the JS modernization initiative to MAINTAINERS.txt
• Issue #2942600 by tim.plunkett: SectionComponent::toRenderArray() runs access checks even when not needed
• Issue #2936085 by tim.plunkett, Kristen Pol, larowlan: Remove 'display title' or make it unchecked by default for Field Block
• Issue #2713073 by harsha012, Mile23, dawehner, webflo, jibran: Add required php extensions to composer.json
• Issue #2933620 by masipila, mpdonadio, heddn, quietone, phenaproxima, maxocub, kay_v, cilefen: Polish migrate.api.php API documentation
• Issue #2944524 by wundo: Typo in Drupal\Core\Routing\UrlGenerator
• Issue #2942388 by alexpott, quietone: Ensure d7_url_alias migration works for paths without a slashes
• Issue #2887161 by Mohit Malik, joelpittet: Ensure argument order is correct for assertSame() assertions
• Issue #2784015 by amateescu, jlbellido, Gogowitsch, krknth, ibustos: Widget validation crashes on ItemList violations for widgets with a custom errorElement() implementation
• Issue #2944291 by jibran, Mixologic: Upgrade behat/mink-selenium2-driver to 1.3.x-dev
• Issue #2943860 by Mixologic, alexpott: Add a LICENSE.txt to Serialization and Transliteration components
• Issue #2944215 by jeqq, alexpott: Aliases generated by PathItem::generateSampleValue() should start with a slash
• Issue #2943226 by droplet: Remove droplet from MAINTAINERS.txt
• Issue #2942497 by scott_euser, timmillwood, malcomio, Berdir: Using content moderation block in preview mode causes EntityStorageException
• Issue #2941106 by droplet, idebr: Site email address in the install profile form is no longer copied to the user email address
• Issue #2939988 by bn_code, xjm, Sam152: Remove content moderation exclusion from StableLibraryOverrideTest
• Issue #2933099 by Sam152, sathish.redcrackle, amaisano, Berdir: "Default Revision cannot be deleted." But it's not the default revision
• Issue #2943209 by gabesullice, amateescu, Wim Leers: Mark at least one entity_test entity type as 'internal'
• Issue #2866801 by harsha012, joelpittet, BrightBold, droplet, Akshay kashyap, arunkumark, bmx269: Update stylelint rules color-hex-length to be consistent with Drupal's CSS standards
• Issue #2942068 by kim.pepper, jibran: FileTestSaveUploadFromForm incorrectly counts messages
• Issue #2914503 by jibran, tim.plunkett, samuel.mortenson: Determine if serializing blobs is safe for use in Layout Builder
• Issue #2943445 by VitaliyB98: Incorrect path to icons in stable/settings_tray CSS files