Releases for Varbase - The Ultimate Drupal CMS Starter Kit (Bootstrap Ready)

• Issue #3085390: Updated [Drupal core] from 8.7.7 to 8.7.8 (~8.7.0 ) and remove applied patches

• ---

  Switched CSS management for all Varbase Components from LESS to SCSS with Gulp as the task manager and made use of the (RFS) Responsive Font Size SCSS library

  as we had shifted our responsive media breakpoints to the Bootstrap 4 breakpoints

  So it's the same number for the breakpoint but under the new label name for the breakpoint

  The Idea we should stop thinking in Bootstrap 3 and think and style with Bootstrap 4
  It is better to make the change in all CSS, TWIG, and yml configs with logical code too.
  Thinking in Bootstrap 4 and how we could have a full migration of old lead developers

  

• Issue #3077909: Switched CSS management for [Varbase Media Hero Slider] from LESS to SCSS with Gulp as the task manager and make use of the (RFS) Responsive Font Size SCSS library
• Issue #3080019: Switched CSS management for [Varbase Bootstrap Paragraphs] from LESS to SCSS with Gulp as the task manager and make use of the (RFS) Responsive Font Size SCSS library, which comes with Bootstrap 4

• Issue #3073370: Updated [Drupal core] from 8.7.4 to 8.7.6 ( ~8.7.0 ) by removing already applied or committed patches in drupal/core
• Issue #3075805: Updated [Metatag] module from 8.1.8 to 8.1.9
• Issue #3075851: Updated [Paragraphs] module from 8.1.8 to 8.1.9

• Varbase 8.6.12 is the last version for the 8.6.x branch, We recommend to upgrade to Varbase 8.7.0 the first version for the 8.7.x branch

• Issue #3062092: Have [Varbase Update Helper] module as a dependency with [Varbase Core] module
• Issue #3057151: Enabled [Redirect domain] module in the [Varbase seo] module
• Issue #3062258: Changed Varbase Dashboard to work with C3 Charts and without warning

• Issue #3053839: Update [Drupal core] from 8.6.15 to 8.6.16

  Drupal core - Moderately critical - Third-party libraries - SA-CORE-2019-007

• Issue #3053828: Changed drupal/core ~8.6 to ~8.6.0 to let composer update to 8.6.16 and more 8.6.x versions and not to update to 8.7.x

• Issue #3046616: Switched of using [Responsive image styles] only to use [Blazy loading with responsive image styles] for most media view mode sizes of ( Image, Video, Remote Video) media types
• Issue #3043881: Added [Varbase Update Helper] to the List of default varbase components, which they will be installed when we install varbase
• Issue #3043869: Added [Varbase Email] module to the List of default varbase components, which it will be installed when we install varbase.
• Issue #3047359: Removed enabling the [smtp] module as we have switched to use swiftmailer ~1.0 and Varbase emailing configs switched to [Varbase Email] module.

• Cleaned up number of modules with hash commits so that vardot/varbase-project template and the composer.json looks clean.
• Issue #3033630: Renamed Google+ to Google in installer.
• Issue #3034471: Updated [Google Analytics Reports] module from 3.x-dev 2b6bb8e to (~3.0) as 8.x-3.0-beta2 went out.
• Issue #3034567: Changed [Social Auth Google] Google+ logo to Google accounts as Google shutdown Google+
• Issue #3032661: Changed [Varbase Internationalization] not to use the [Localization client] module by disabling it for old sites and not to install it in new Varbase installations.
• Issue #3033768: Fixed W3C standards for element div not allowed as child of element h2.

Now you can install most Varbase components with any Drupal 8 site. Even if installed with the Minimal or Standard profile.

However, using them with Varbase distro and Vartheme theme gives you way much more cool stuff!

For an example of how to require them in Drupal 8 site you can have a look at Varbase Media, Varbase Editor, ...

• Issue #3017555: Changed [Varbase 8.6.x] Components dependencies on install: enable or dependencies: enable of modules in the .info.yml and composer.json to have tilde Version Range (~)
• Issue #3020808: Updated scripts settings for [Create new vartheme subtheme] generator command to use Bootstrap library 3.4.0
• [varbase-project] template: Added Varbase Updater for Managing Varbase updates #43 #45

• [varbase-project] template: Added composer-patches to repositories type vcs for vardot/composer-patches repository#44

  NOTICE: We're now using composer patches from Vardot repository to suggest
  several fixes and better handling of patches in your Drupal project.
  You'll notice that we have included (https://github.com/vardot/composer-patches)
  in the this composer.json repositories. This will replace the original
  library (cweagans/composer-patches) with our own from (vardot/composer-patches).
  See https://github.com/cweagans/composer-patches/pull/243 and more details
  on our changes on the composer-patches package. Once our changes get merged,
  we will revert to using (cweagans/composer-patches) without this override.

  To follow with the latest work on this subject you could have a look at our Varbase Project template file:
  https://github.com/Vardot/varbase-project/blob/8.6.x/composer.json

• Issue #3017645: Updated [Varbase 8.4.x profile] to use Drupal ~8.6 with tilde Version Range (~) for a step preparation for the upgrade to Varbase 8.6.x

• Issue #3012231: Updated [Drupal core] from 8.6.2 to 8.6.3

• Issue #3009782: Updated [Paragraphs] module from 8.1.3 to 8.1.5
  Paragraphs - Moderately critical - Access Bypass - SA-CONTRIB‌-2018-073
• Issue #3008794: Changed the patch for [Drupal 8.6.x core] to Allow profiles to define a base/parent profile and load them in the correct order

• Issue #3003340: Switched [Varbase Media] to use [Remote Video] with oEmbed from Drupal 8.6.x core.
• Issue #3006742: Added a hint description for which remote source we can embed in the [Embed] tab in the Varbase Entity Browsers.
• Issue #3005535: Enabled an OPTIONAL [Layout Builder] configs to use with the [Default] view mode for the [Basic page] content type by default and allow each content item to have its layout customized.
• Issue #3008320: Updated the Automated Functional Acceptance Testing to cover the new media and media library and browser updates.

• Issue #3007519: Updated [Drupal core] from 8.5.7 to 8.5.8
  It’s a follow up to the Drupal Core - Multiple Vulnerabilities - SA-CORE-2018-006

• Issue #2959483: Changed [Varbase Profile] modules and config to work with [Media] Drupal core module.
• Issue #2974100: Added the asset composer repository [asset-packagist.org], and switched all used libraries to use asset packaging.
• Issue #2956295: Departed modules and themes from Varbase 8.x-5.x Profile as stand-alone projects.
• Issue #2967640: Added storage [Field Video] and [Field Media] to [Varbase Core] to let developers create fields for video media types of (local), (embed) and use the [Video Browser] from [Varbase Media].
• Issue #2978726: [Varbase Blog] Changed [Main Image] field to [Main Media] to use [Field Media] from [Varbase Core] for images and video posts, and use the [Media Browser] from [Varbase Media] as the default Media browser for the [Blog Post] content type.
• Issue #2975920: Added [Varbase Video Player] library, along with varbase_media/youtube_player and varbase_media/vimeo_player libraries to have play External and locally hosted videos.
• Issue #2978723: [Varbase Media] Added [Media Browser] as a general image and video browsers for the [Field media] in Varbase core.
• Issue #2978725: [Varbase Media Hero Slider] Switched to use [Media Browser] from [Varbase Media] as the default Media browser for hero slider content type. and removed not needed views and the custom hero slider media browser.
• Issue #2979168: Optimized configs of responsive images for media [Size 8] and [Edge to Edge] on (auto, standard, traditional, and square), and Have no revision information or revision log message for media types, and added Varbase Auto Fill Media data Behaviours.
• Issue #2983378: Added [data entity embed display settings] TO LINK entity image with a target link when we embed the image in the CKEditor.
• Issue #2997498: Added [Component title] to most component paragraph types
• Issue #2978726: Change [Main Image] field to [Main Media] to use [Field Media] from [Varbase Core] for images and video posts, and use the [Media Browser] from [Varbase Media] as the default Media browser for the [Blog Post] content type.
• Issue #2995514: Switched from restricted composer require to open, only for not patched modules And add the composer.lock in the varbase-project template.
• Issue #2986808: Removed [panelizer] module with all used configs.
• Issue #2987364: Changed [Varbase Bootstrap Paragraphs] colors to use background-color
• Issue #2987365: Changed [Vartheme][vbp-colors] paragraphs colors to use background-color
• Issue #2999006: Change the [Field Media] og:image metatags for [Varbase blog] to use our custom social token [node:field_media:entity:social_large]

• Issue #2995514: Switched from restricted composer require to open, only for not patched modules And add the composer.lock in the varbase-project template.

• Issue #2990103: Updated [Drupal core] module from 8.5.5 to 8.5.6
  

  Drupal Core - 3rd-party libraries -SA-CORE-2018-005

  https://www.drupal.org/SA-CORE-2018-005

  CVE-2018-14773: Remove support for legacy and risky HTTP headers

  https://symfony.com/blog/cve-2018-14773-remove-support-for-legacy-and-ri...

  Zend Security Advisory: ZF2018-01 ZF2018-01: URL Rewrite vulnerability

  https://framework.zend.com/security/advisory/ZF2018-01

• Issue #2986808: Removed [panelizer] module with all used configs.
• Issue #2988835: Added the 2936358-64 patch for Drupal core 8.5.x to have [Layout Builder] with opt-in per display (entity type/bundle/view mode)
• Issue #2987364: Changed [Varbase Bootstrap Paragraphs] colors to use background-color
• Issue #2987365: Changed [Vartheme][vbp-colors] paragraphs colors to use background-color
• Issue #2987366: Changed [Vartheme Material][vbp-colors] paragraphs colors to use background-color

• Issue #2979378: Updated [View Modes Inventory - Bootstrap Ready] module from 8.1.0 to 8.1.1
• Issue #2977148: Updated [Paragraphs] module from 8.1.2 to 8.1.3
• Issue #2977536: Updated [Entity browser] module from 8.1.4 to 8.1.5
• Issue #2980408: Fixed [Media entity] issue when we update media image, it still retrieves the old image instead of the updated one.

• Issue #2959483: Changed [Varbase Profile] modules and config to work with [Media] Drupal core module.
• Issue #2974100: Added the asset composer repository [asset-packagist.org], and switched all used libraries to use asset packaging.
• Issue #2956295: Departed modules and themes from Varbase 8.x-5.x Profile as stand-alone projects.
• Issue #2967640: Added storage [Field Video] and [Field Media] to [Varbase Core] to let developers create fields for video media types of (local), (embed) and use the [Video Browser] from [Varbase Media].
• Issue #2978726: [Varbase Blog] Changed [Main Image] field to [Main Media] to use [Field Media] from [Varbase Core] for images and video posts, and use the [Media Browser] from [Varbase Media] as the default Media browser for the [Blog Post] content type.
• Issue #2978723: [Varbase Media] Added [Media Browser] as a general image and video browsers for the [Field media] in Varbase core.
• Issue #2978725: [Varbase Media Hero Slider] Switched to use [Media Browser] from [Varbase Media] as the default Media browser for hero slider content type. and removed not needed views and the custom hero slider media browser.
• Issue #2979168: Optimized configs of responsive images for media [Size 8] and [Edge to Edge] on (auto, standard, traditional, and square), and Have no revision information or revision log message for media types, and added Varbase Auto Fill Media data Behaviors.

• Issue #2962237: Updated [Drupal core] from 8.5.1 to 8.5.2
  Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2018-003

• Issue #2956819: Updated [Drupal core] from 8.5.0 to 8.5.1
  Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002

• Issue #2950672: Updated [Drupal core] from 8.4.5 to 8.5.0

Only updated [Drupal core] from 8.4.5 to 8.5.0
Keeping the use of media_entity module in Varbase 8.x-4.x
Planned to have Varbase 8.x-5.x branch, to use the media module in Drupal 8.5.x core.

Added since Varbase 8.4.16:

• Issue #2953394: Added custom [media html twig] template file with no contextual links to [Vartheme Admin] and [Vartheme Material Admin] administration themes.
• Issue #2953398: Added custom [media html twig] template file with no contextual links to [Vartheme] front-end theme.
• Issue #2953411: Added custom [media html twig] template file with no contextual links to [Vartheme Material] front-end theme.

This release fixes security vulnerabilities in Drupal core

• Drupal core - Critical - Multiple Vulnerabilities - SA-CORE-2018-001

No other changes are included, only the SPDX license identifier from GPL-2.0+ to GPL-2.0-or-later.

• Issue #2946845: Updated [Drupal Core] from 8.4.4 to 8.4.5
• Issue #2937949: Changed composer SPDX license identifier from GPL-2.0+ to GPL-2.0-or-later
• Issue #2946846: Varbase 8.4.15: Updated [CHANGELOG.md, UPDATE.md] files and filtered the code for Drupal 8 Coding Standard

• Issue #2928269: Changed the UI/UX for [Styling Settings] of paragraphs at the back-end form display.
• Issue #2925242: Added Paragraphs classes, and [Remove Container] option to [Styling settings] in all paragraph types.
• Issue #2924949: Added Webform as an option for all paragraphs with the type of container.
• Issue #2928711: Added [Column Wrapper] paragraph type to be able to have components in rows under nested columns.
• Issue #2928092: Changed Browser in [behat.varbase.yml, and .travis.yml] to work with selenium on [Travis-ci].
• Issue #2929996: Updated [Drupal Core] from 8.4.2 to 8.4.3