drupal 8.7.0-alpha2

This release fixes security vulnerabilities present in 8.7.0-alpha1. Sites are urged to upgrade immediately after reading the security announcement and notes below:

• Drupal core - Cross-Site Scripting- SA-CORE-2019-004

This is an alpha release for the next feature release of Drupal 8. Alpha releases are good testing targets for developers and site builders who are comfortable reporting (and where possible, fixing) their own bugs. Alpha releases are not recommended for non-technical users, nor for production websites. More information on alpha releases.

Minor releases provide new improvements and functionality without breaking backward compatibility (BC) for public APIs. There may be changes in internal APIs and experimental modules that require updates to contributed and custom modules and themes per Drupal core's backwards compatibility and experimental module policies.

Important update information

For important update information and a full list of important changes since 8.6.x, see the 8.7.0-alpha1 release notes.

Third-party library updates
 

The following third-party libraries are updated in this release. (Additional library updates may be made prior to Drupal 8.7.0-beta1.)

• Stylelint has been updated from 9.1.1 to 9.10.1.

Known issues

• #3026560: After upgrade to 7.63, 8.5.10, 8.6.7, 9.4.0 get TYPO3 phar error for drush
• #3026443: \Drupal\Core\Security\PharExtensionInterceptor is incompatible with GeoIP and other libraries that use phar aliases or Phar::mapPhar()
• #3031128: Update from 8.6.7 to 8.6.8 warnings - Drupal\Core\Extension\Extension has no unserializer
• #2554235: Make the content entity storage and entity query use the last installed definitions instead of the ones living in code

All changes since 8.7.0-alpha1

• SA-CORE-2019-004 by alexpott, larowlan, greggles, drumm, mlhess, David_Rothstein, pwolanin
• #2977510 by kjay, shaal, markconroy, finnsky, Vidushi Mehta, Eli-T: Refactor/improve Umami demo's search form CSS for better responsive support
• #3036787 by yongt9412, Berdir: media_post_update_enable_standalone_url() should only set TRUE if not already set
• #3038378 by vadim.hirbu, jhodgdon: README.md in core/tests is badly formatted
• #3035350 by claudiu.cristea: Remove usages of drupal_static() from field_test.module
• #3019115 by tamer.kamel, Waldoswndrwrld, anantjain60, gnuget, Berdir, alexpott: TwigExtensionTest::testFormatDate() doesn't make much sense
• #3023797 by seanB, webchick, lauriii, ckrina, phenaproxima, andrewmacpherson, rainbreaw, Gábor Hojtsy, jhodgdon, jrockowitz, worldlinemine, benjifisher: Let users choose what to do after selecting and/or adding items in the media library
• #3035383 by andypost, martin107, Berdir: Replace deprecated usages of entityManager in list builder classes
• #3030902 by Krzysztof Domański, amateescu, xjm: Random fail in EntityReferenceAdminTest
• #3016807 by seanB, FeyP, phenaproxima, andrewmacpherson, lauriii, rainbreaw, larowlan: Improve refocus on submit buttons of Media Library Widget modals
• #3038926 by Berdir: Add @trigger_error() to deprecated EntityManager->EntityDisplayRepository methods
• #2999893 by penyaskito, shaal, markconroy, mpp: Ensure umami views filter content by content negotiated language
• #2868725 by msankhala, Krzysztof Domański, xlin, cilefen, dagmar, dawehner, alexpott, joachim: Refactor how dblog module is rendering links in event details
• #3023801 by seanB, DamienMcKenna, lauriii, phenaproxima, Berdir, Pancho, marcoscano, Wim Leers, rainbreaw, larowlan, webchick, jrockowitz, andrewmacpherson, ckrina: Allow newly uploaded files to be deleted from the media library without saving them
• #3039256 by kjay, shaal, smaz: Improve Umami demo blockquote layout on smaller screen sizes
• #3028771 by shaal, Not Real, pawandubey, kjay, smaz, Eli-T: Add some missing RTL css for the umami demo
• #2599228 by tstoeckler, Taran2L, poornachandran, catch, vacho, johan.s, Berdir, hchonov, osman, tim.plunkett, GoZ, Voidtek, neetu morwani, psf_, alexpott, dxvargas, nkoporec, plach, andy@andyhawks.com, joey-santiago: Programmatically created translatable content type returns SQL error on content creation
• #3040241 by bnjmnm, lauriii, DyanneNova: Add section and add block section doesn't have sufficient color contrast for text
• #3039081 by claudiu.cristea: Remove reset of user_role static cache in UserRoleAdminTest::testRoleWeightOrdering()
• #3026434 by tedbow, tim.plunkett, xjm, phenaproxima, plach, Kristen Pol, alexpott: Ensure that Layout Builder Inline Blocks doesn't assume section storage internals
• #3039572 by Lendude, Mile23: Prevent tests with multiple groups running multiple times
• #3037129 by tim.plunkett, andrewmacpherson, phenaproxima: Use distinct accessible names for the configure-section buttons in Layout Builder UI
• #3038413 by bnjmnm, lauriii, DyanneNova: Replace editable-area negative-offset outline with something that IE11 can handle
• #3038562 by alexpott, markconroy: Update stylelint to 9.10.1
• #3037121 by bnjmnm, andrewmacpherson, tim.plunkett: Disclosure triangle is missing in details/summary groups in off-canvas dialog in Firefox