Releases for JSON:API

Fixes a regression introduced in the highly critical security release: 8.x-1.25

This resolves issues described in SA-CORE-2019-003 for this module.

See SA-CORE-2019-003 for details.

Important Update:

This release contains a regression which may break some applications. Please upgrade to at least 8.x-1.26 instead. The regression is not security related and does not put applications already on 8.x-1.25 (this version) at risk.

If you're updating from a 1.x version of JSON:API, we recommend you first read the 2.0 release notes: https://www.drupal.org/project/jsonapi/releases/8.x-2.0

JSON:API - Moderately critical - Access bypass - SA-CONTRIB-2018-081

This release candidate:

• Eliminates a major performance bottleneck that was introduced in 2.0
• Polishes up more abstractions in the filtering syntax
• Fixes a few edge-case bugs
• Further prepares the module for the JSON:API 1.1 spec.

Contributors (9)

gabesullice, Wim Leers, dagmar, e0ipso, ndobromirov, yobottehg, olexyy.mails@gmail.com, keesee, caseylau

Changelog

Issues: 11 issues resolved.

This the first release candidate for JSON API 2.0!

The JSON API maintainers strongly believe that this version will suffer absolutely no further breaking changes before the final stable release of JSON API 2.0. 2.x is the version which is proposed for inclusion in Drupal core. In other words, the only changes to the 2.x branch from this point forward will be bug fixes, stability improvements and new features.

A release candidate means that it is your last chance to find and report issues which might cause BC breaks! It's now or never!

This is the first release of JSON API 2.x 🎉

Unlike many module major version bumps, 2.x does not mean that we rewrote the module! In fact, we've increased the stability of this module 💯🤘💥

So, why has the major version been bumped? While making the module more specification compliant, and while adding more tests, and while covering more edge cases, we ran into a few things that we couldn't make better without breaking some things...

This is the final release of JSON API 1.x.

This release fixes every known bug that could be addressed in the 1.x branch of JSON API while maintaining backwards-compatibility.

It includes full, comprehensive test coverage of all features of the module. We believe the 1.x branch has reached a point of stability and maturity that it can remain as-is for current users of the module for some time.

Fixes a regression introduced in 1.19. Adds comprehensive relationship CRUD tests 🎉

Contributors (2)

gabesullice, Wim Leers

Changelog

Issues: 3 issues resolved.

Changes since 8.x-1.19:

Bug fixes and internal housekeeping. No new features.

Contributors (6)

Wim Leers, Grimreaper, gabesullice, e0ipso, das-peter, pwolanin

Changelog

Issues: 7 issues resolved.

Changes since 8.x-1.17:

Summary: 8.x-1.16

Contributors: (6) e0ipso, dawehner, gabesullice, Wim Leers, bwinett, caseylau

Issues: 6 issues resolved.

Changes since 8.x-1.15:

Starting development branch.

Issue #2921257 by Wim Leers, e0ipso, gabesullice, larowlan: On Drupal 8.5, JSON API should respect Typed Data's new ::isInternal(), and JSON API Extras should use ::setInternal()

6dc53cb by wimleers (G)

Issue #2949635 by e0ipso: Make the resource type aware of the resource path

4b5b103 by e0ipso (G)

:100644 100644 dd2b97e... 30bcd3f... M src/EntityToJsonApi.php
:100644 100644 a5ba25a... f2257dd... M src/ResourceType/ResourceType.php
:100644 100644 8a95960... 5740ef5... M src/Routing/Routes.php

Issue #2949632 by e0ipso: Make ResourceTypeRepository aware of the path prefix

d5581d8 by e0ipso (G)

Fixes SA-Contrib-2018-15

Issue #2933615 by e0ipso: Fix related and relationships endpoints for disabled resources

9889be7 by e0ipso (G)

:100644 100644 c5f8cec... 3ab534b... M src/Controller/EntityResource.php
:100644 100644 5f20bff... 840aee0... M src/Controller/RequestHandler.php
:100644 100644 a77441b... 5b24124... M src/Normalizer/RelationshipNormalizer.php
:100644 100644 62c41af... 15b4816... M tests/src/Kernel/Controller/EntityResourceTest.php

Issue #2917260 by e0ipso: improve path building for schema

75633ec by e0ipso (G)

Issue #2917260 by Wim Leers, gabesullice, e0ipso: Validate against specific JSON Schemas if Schemata is present

0a56ad4 by gabesullice (G)

:100644 100644 e54e7e5... ee8fa15... M composer.json
:100644 100644 3702756... 94bf7e3... M jsonapi.info.yml
:100644 100644 9e5d3c7... 6a0e7a2... M jsonapi.services.yml
:100644 100644 17b1327... 46087af... M src/EventSubscriber/ResourceResponseSubscriber.php
:100644 100644 823b11d... 06da13c... M tests/src/Unit/EventSubscriber/ResourceResponseSubscriberTest.php

feat(DX): Introduce ResourceTypeRepositoryInterface to support polymorphism (#2909461 by e0ipso)

b992ce6 by Mateu Aguiló Bosch (G)

• view commit • fix(Spec): Throw an error when the input relationship is not formatted correctly (#2831035 by pcambra, sergesemashko)
• view commit • docs(Comments): Minor typos (#2876064 by DamienMcKenna, ak.incaendo, Jigar.addweb)

fix(Serialization): Implement the interface correctly on NullFieldNormalizerValue (#2870131 by marti

b4c3437 by e0ipso (G)

:100644 100644 e11b9d1... a092237... M src/Normalizer/Value/NullFieldNormalizerValue.php

fix(Images): Turn download path into a text field type (#2867106 by e0ipso)

72be762 by e0ipso (G)

:100644 100644 df5bc5c... 302fc99... M jsonapi.module
:100644 100644 876e099... 121f80d... M src/ResourceType/ResourceTypeRepository.php

fix(Serialization): Type cast supported JSON format (#2858023 by Wim Leers, dawehner, skyredwang)

8df3e73 by skyred (G)

:100644 100644 477aa57... 00b0b58... M src/Normalizer/FieldItemNormalizer.php

fix(DX): Remove the need for ?_format: assume the format for routes managed by JSON API (#2831137 by e0ipso, Wim Leers, dawehner)

84c0ba0 by e0ipso (G)

feat(Errors) Create a custom EntityAccessDeniedHttpException (#2844130 by dawehner, e0ipso)

088c9cd by dereine (G)

Issue #2823404 by e0ipso: [BUGFIX] Use polymorphism to adapt to core's change

9068d2c by e0ipso (G)

:100644 100644 a269353... d524d9c... M src/LinkManager/LinkManager.php

Issue #2821554 by e0ipso, dawehner: [FEATURE] Deprecate jsonapi_docson in favor of Schemata

bbd7378 by e0ipso (G)