Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.
This version brings with it many bug fixes and UI improvements reported and/or patched by community users and core developers since the April 23rd RC 4 release. It also contains a clean-up and simplification of the reporting features such that version information is now all that gets reported to Ubercart.org when enabled, and a full preview of the data sent is now shown.
A functional bug that has been fixed involves sweeping changes to credit card settings and processing. This means any site accepting credit card payments should update carefully, making sure to setup the Ubercart encryption and to ensure the new settings don't disrupt your current checkout process. If at all possible, you should demo the update on a development site before rolling the change into your production site so you are the most comfortable with the new settings.
The changes were made to address the fact that it was difficult for store owners in the past to ensure their checkout process was fully PCI compliant. As of this release, if you're accepting credit card payments through the Ubercart checkout form over HTTPS, you will be fully compliant and most secure with the default settings.
In node/259187, joachim posted an issue about removing IP addresses. This is now fixed in this release. Also, joachim suggested adding a description in the administration menu. I've added the description and have moved the ipAuthenticator from the settings section to the user's section in the administration page.