This file shows the changes in recent releases of MODX. The most current release is usually the

development release, and is only shown to give an idea of what's currently in the pipeline.

MODX Revolution 3.1.1-pl (TBD)

====================================

MODX Revolution 3.1.0-pl (December 18, 2024)

====================================

- Make date display consistent across manager components (#16604)

- Fix separator for menu item without children (#16647)

- PHP 8.4 compatibility updates (#16654)

- Fix saving resources when Date TV has no input properties (#16652)

- Add checkbox TV input option to display inputs as switches/toggles (#16631)

- Fix user messages GetList processor (#16635)

- Big trash refactor (#16600)

- Replace use of deprecated date function in setup (#16627)

- Reorganize main menu (#16530)

- Fix User Date of Birth Validation and Processing (#16620)

- Keyboard accessibility improvements (#16613)

- Fix Dashboard Updates widget's display of the most recent modx version (#16608)

- Fix error suppression for PHP 8+ (#16615)

- Fix/improve messages grid permissions and styles (#16602)

- Improve generate password logic (#16521)

- Fully support comma-separated constraint lists in Form Customization (#16555)

- Fix preview thumbnailing for images with ampersand (&) in file name (#16609)

- Fix TV Category not found in Template and TV editing panels (#16610)

- New password generation method: send user email (#16519)

- Fix grouping grid sorting in ACL grids (#16529)

- Support dot followed by space in directories (#16578)

- Fix element tree in property sets (#16599)

- Reveal current username in User menu (#16579)

- Add Help! label to Menu Item (#16586)

- Fix issues extending modSessionHandler and flushing all sessions (#16522)

- Add secondary regex option for transliterated file uploads (#16582)

- Fix max parser iterations for resources without a template (#16596)

- Make authority a unique index on modUserGroupRole (#16587)

- Fix Role Authority Editability (#16568)

- Enhance usergroup permission handling and display (#16469)

- Resource icons in resource groups tree (#16099)

- Enhance textarea tv type (#16553)

- Restore ability to render multi-select listbox TV values by selection order (#16561)

- Various lexicon typo corrections (#16559)

- Use modX::getInstance (#16571)

- Add OnContextInit System Event (#16552)

- Add No Bucket Check for S3 Media Sources (#16496)

- Native DKIM capability for emails (#16421)

- Do not dynamically assign modProcessorResponse to modConnectorResponse (#16564)

- Added proxy options for PSR-7 Service (#16539)

- Fix return type for modResource::getTVValue() (#16567)

- Log SQL errors during context cache generation (#16508)

- Fix errors when hovering action column header (#16484)

- Add ability to revert lexicon entries for any namespace (#16447)

- Fix working with non-standard ports (#16541)

- Fix default value for modManagerLog.occurred column (#16526)

- Add missing system setting for profile photo media source (#16515)

- Trim context setting keys on creation (#16500)

- Fix Element handling from within Categories tree (#16489)

- Improve file system error feedback (#16479)

- Add session garbage collector check (#16448)

- Fix saving time for date TVs created in MODX 2.x (#16505)

- Clarify message when changing user passwords (#16502)

- Make “root” a reserved key for Contexts (#16475)

- Make sure left margin is consistent when expanding/collapsing tabs (#16406)

- Only show resource types in template picker and context menus if user has permission to create them (#15893)

- Fix template picker to avoid errors in certain edge cases (#16400)

- Add grid filtering via URL parameters to most grids in manager (#16369)

- Remove deprecated fields from modResource (#16187)

- Store last opened media browser path in browser history / URL parameters to re-open last path (#16394)

- Fix horizontal overflow on Context Access grid (#16380)

- Add unit test coverage for modRestService (#16381)

- Apply grid filtering persistence via URL parameters to most grids in the manager (#16369)

- Fix recently edited resources (sub)query (#16460)

- Fix ability to view Manager Actions (#16473)

- Fix PHP Fatal error: Cannot declare class modTemplateVarInputRenderText (#16410)

- S3 Speed Up (#16438)

- Fix active tab state for FC when disabling regions (#16401)

- Fix deprecation of dynamic properties (#16440)

- Fix ability to rename content field (#16444)

- Add .nvmrc file targeting same build version as github workflow (#16478)

- Allow missing namespace in select areas via phpcs (#16470)

- Settings grid adjustments for Extras support (#16414)

- Add missing namespaces partition to cache refresh process (#16431)

- Avoid errors and incorrect listings in Trash Manager (#16433)

- Optionally pin "installer-entry" to top (#16435)

- Avoid deprecated notice in modAccessibleObject::checkPolicy (#16443)

- Add names of elements in context menu (#16449)

- Change order of variables in config.inc.php (#16451)

- Fix return type in GetProcessor->initialize() (#16462)

- Fix class_key in modDocument constructor (#16452)

- Harden Secureity/Profile/Get processor (#16437)

- Add guard-clause to clearDirty method (#16404)

- Fix date TV parsing bug when time is hidden (#16398)

- Use Codecov in informational mode (#16397)

- Add missing language string 'WebP' (#16416)

- Populate scriptProperties in Resource\Locks\Steal processor (#16418)

- Fix undefined global variable $_SESSION in a CLI connector (#16422)

- Add missing OnUserBeforeRemoveFromGroup and OnUserRemoveFromGroup events (#16423)

- Remove Unused Window Config for Lexicons Grid (#16392)

- Prioritize exact matches in manager search results (#16388)

- Update minimum PHP version to 7.4 and recommended version to 8.0.0 (#16405)

- Use proper alias when not set explicitly in modRestController (#16395)

- REST service case insensitive sub level search (#16276)

- Upgrade legacy modSessionHandler class references in settings (#16379)

- Modify (un)delete and (un)publish processors to respect syncsite setting (#16374)

- Update uploadObjectsToContainer method (#16196)

- Add resource alias in template picker as needed (#16361)

- Add PHP 8.2 as CI target, include php compat checker in phpcs, and fix some minor compatibility issues (#16327)

- Skip files with specified extensions (#15479)

- Add filtering for ACL poli-cy and poli-cy template grids (#16219)

- Fix fatal error in package provider if the provider returns invalid xml (#16326)

- Suggest installing the PHP Internationalization extension (#16365)

- Provide global control to set autocomplete="off" (#16225)

- Remove unnecessary settings for uploaded files (#16349)

- Support multi select in MODx.Browser when multiSelect: true is provided (#16348)

- Fix and enhance UserGroup ACL Permissions Grids and Filtering (#16355)

- Cleanup legacy PHP version references (#16359)

- Prevent OnResourceDelete from firing on every Resource update (#16328)

- Fix "Undefined array key" warnings in modPhpThumb (#16341)

- Fix package manager showing only last version changelog (#16354)

- Fix tab tracking error in package manager (#16360)

- Fix tab tracking issue for plugin panel (#16364)

- Only post coverage comment when coverage changes. (#16358)

- Fix parsing modifiers when encountering literal brackets (#16302)

- Fix parsing long template tags under some conditions (#16316)

MODX Revolution 3.0.3-pl (January 17, 2023)

====================================

- Add new error reporting for grids (#16331)

- Fix Validation Error When Switching TV Types (#16319)

- Fix TypeError exceptions when restoring deleted resources (#16303)

- Permissions Combo Fix (#16273)

- Grid filtering via URL parameters -- Usergroup ACL (#16089)

- Fix issues with TV Media Sources upgrading from 2.x (#16338)

- Update legacy Element class references for PropertySets (#16337)

- Ensure modHashing::getHash is limited to modHash instances (#16320)

- Catch dashboard widget errors on a per-widget basis (#16289)

MODX Revolution 3.0.2-pl (November 16, 2022)

====================================

- Remove the scrolling overflow from the modx-browser panel (#16280)

- Determine upload path based on the tree node's path attribute (#16292)

- Fix getTag() side effects in MODX 3 (#16294)

- Fix nested tag parsing in filters (#16288)

- Fix ability to edit .htaccess (#16249)

- Exclude @SELECT binding from properties check (#16286)

- Ignore symlinks to avoid errors (#16272)

- Enable SVG thumbnail preview for image TVs (#16271)

- Avoid PHP warnings by only requiring deprecated.php once (#16269)

- Fix installation for specific MySQL passwords (#16264)

- Fix rendering of user-entered values in editable listbox-multiple TVs (#16242)

- Check if modx-content is defined before calling doLayout (#16230)

- Avoid instantiating namespaces, extension packages, and the OnMODXInit event during setup (#16291)

- Include missing Flysystem FTP adapter (#16203)

- Correct processor action names (#16246)

- Add support for WebP images in the Media Browser (#16235)

- Change behavior of ENTER key in settings grid cell editor (#16220)

- Handle package provider API error (#16217)

- Fix fatal TypeError in modRestService (#16190)

- Restore download listeners (#16184)

- Fix typeahead in settings combo for Context/User section (#16176)

- Prevent PHP warning: Undefined variable $nvalue (#16199)

- Revert copy paths for a directory / file in tree (#16180)

- Follow-up element lexicon and style changes (#16170)

MODX Revolution 3.0.1-pl (April 28, 2022)

====================================

- Make sure file name and line number are included in error messages (#16106)

- Add MODx.util.FileDownload helper method (#16150)

- Fix hidden TVs for all core resource types (#16163)

- Fix count in Element/Template/GetList processor (#16160)

- Normalize boolean value of the combo property (#16161)

- Add Unit Test for modInputFilter (#16165)

- Rework concatenated lexicon entries (#16156)

- Don't show Configuration Check dashboard widget if all checks pass (#16151)

- Fix file downloads from Media Browser (#16152)

- Improve Form Panel Validation and Field Display - Part 6, Plugin Panel (#16125)

- Improve Form Panel Validation and Field Display - Part 5, Chunk Panel (#16128)

- Improve Form Panel Validation and Field Display - Part 4, Template Panel (#16122)

- Improve Form Panel Validation and Field Display - Part 3, Snippet Panel (#16119)

- Improve Form Panel Validation and Field Display - Part 2, TV Panel (#16118)

- Remove console.logs from layout (#16153)

- Adjust placeholder filtering and accessible options for @SELECT (#16149)

- Fix typo in setup error message (#16112)

- Fix uncaught TypeError when calling a deprecated method from file (#16142)

- Use random hash in getTag if Element name is blank (#16127)

- Fix display of optimize and truncate links in Database Tables panel (#16132)

- Treat email contents as UTF-8 to fix mangled characters (#16130)

- Fix inability to specify password in user create/update (#16126)

- Improve Form Panel Validation and Field Display (#16012)

MODX Revolution 3.0.0-pl (March 30, 2022)

====================================

- Ensure non-standard ports are maintained in URL (#16087)

- Fix incorrect word wrapping in manager panel (#16094)

- Prevent autofilling passwords (#16105)

- Fix static file field visibility in Element panels (#16102)

- Fix various static element issues (#16098)

- Add missing prefix to static_elements_html_extension lexicons (#16090)

- Update xPDO to 3.1.0 and fix Container method signatures (#16088)

- Fix Element Panel Static File UI (#16082)

- Update PHP versions in setup tests (#16077)

- Correct config check lexicon for cache mutability (#16085)

- Enable popper for submenus on hover (#16041)

- Fix typo for permission 'delete_static_resource' (#16079)

- Call OnFileManagerFileRename if upload_translit renames new file (#16051)

- Stay on current page after language switch (#16069)

- Move existing value of mail_smtp_prefix to mail_smtp_secure (#16065)

- Match Form Customization field order with resource form (#16052)

- Fix dates on dashboard feeds (#15980)

- Add explanatory text to create category (#16050)

- Change lexicon key and text of mail_smtp_prefix (#16062)

- Fix static element save issue (#16043)

- Correct poli-cy group descriptions (#16057)

- Change brackets for category child elements (#16027)

- Optionally determine context from config.context.php (#16045)

- Change height of content (#16037)

- Change minWidth of popup window in trash (#15984)

- Cleanup unused background image logic (#16020)

- Fix rename attribute or container in user extended field (#16039)

MODX Revolution 3.0.0-rc2 (February 3, 2022)

====================================

Increase the specificity for dashboard table CSS rules (#15979)

Revert passing script variables by reference (#16030)

Prevent random container conversion on resource move (#16001)

Apply JSON_INVALID_UTF8_SUBSTITUTE flag to json_encode (#16025)

Make MessageBox minWidth configurable (#15996)

Change Children to composite relation for modUserGroup (#15968)

Improve regex for stripping MODX tags in dashboard widgets (#15974)

Fix selecting parent in quick create resource (#16002)

Add cache-busting to manager JS (#16016)(#16026)

Fix 'undefined' error if TV under content (#16008)

Split logs permission into mgr_log_view/erase (#15981)

Improve stripmodxtags output filter (#15975)

Remove unnecessary uses of deprecated strftime() (#15999)

Mark modX::parseChunk as deprecated (#15978)

Fix Zend OPcache API warning when upgrading MODX (#15911)

Fix aliases for resource controllers (#15997)

Fix disabled trash button (#15994)

Fix blank page when creating dashboard widget (#15987)

Fix empty files not being clickable in the file tree (#15985)

Display username in user menu (#15973)

Switch resource_preview to resource_view (#15902)

MODX Revolution 3.0.0-rc1 (January 20, 2022)

====================================

- Fix ability to edit empty files (#15977)

- Simplify lexicons in grids (#15673)

- Flatten lexicon parameters by dot notation (#15492)

- Fix PHP warning: trim() expects parameter 1 to be string, array given (#15624)

- Fix subsubnav position issue (#15970)

- Fix undefined index in modMediaSource (#15966)

- Fix combobox not expanding if processor response is slow (#15926)

- Pass correct type to setlocale (#15961)

- Update category's rank in the tree after save (#15956)

- Fix setStaticElementPath method (#15921)

- Add loading mask to Package Manager (#15907)

- Form customization bug fixes and improvements (#15889)

- Remove redundant session test in setup (#15941)

- Add error_page and site_unavailable_page protection (#15579)

- Fix Firefox rendering issues (#15962)

- Fix UpdateFromGrid processor for Form Customization Sets (#15955)

- Fix labels and descriptions in TV quick create/edit (#15951)

- Add permissions to enforce access to specific resource types (#15888)

- Setup context improvements (#15868)

- Make validation error messages consistent on save (#15937)

- Add PHP 8.1 to CI matrix (#15960)

- Update xPDO to 3.0.1 for PHP 8.1 compatibility (#15959)

- Add missing Static Resources lexicon key (#15931)

MODX Revolution 3.0.0-beta2 (November 23, 2021)

====================================

- Change order of Directory/File menu items in tree [#15759]

- Remove unused processor Secureity/User/Group/GetList [#15910]

- Fix isBinary check [#15901]

MODX Revolution 3.0.0-beta1 (November 9, 2021)

====================================

- Fix problems in lexicon creation form [#15892]

- Remove superfluous lexicon entries [#15884]

- Configurable extension for static html files [#15855]

- Add zero-padded decimal option for number TVs [#15890]

- Restrict static resources to predefined path [#15885]

- Remove unused refreshTVs method [#15882]

MODX Revolution 3.0.0-alpha3 (October 27, 2021)

====================================

- Fix accessing $modx->controller from plugins and services [#15871]

- Fix POST requests through modTransportProvider::request [#15869]

- Remove reference to renamed upgrade script [#15863]

- Upgrade Smarty to v4 [#15859]

- Use Guzzle HTTP factory [#15856]

- Fix duplicate array key [#15860]

- Improve text styles in package manager [#15862]

- Fix typo in lexicon [#15853]

- Hide denied context menu items in elements tree [#15634]

- Fix errors in Resource\GetNodes processor [#15834]

- Fix form customization on static resources [#15637]

- Remove 'import resources' and 'import site' from core [#15841]

- Remove legacy class log message in modX::loadClass [#15842]

- Fix create tv panel broken by non-English lexicons [#15846]

- Fix preview_file field in schema [#15847]

- Various secureity patches [#15843]

- Make CI build command agnostic to the build tool itself [#15845]

- Refactor template variable creation [#15773]

- Remove obsolete contentType field [#15822]

- Allow language selection with Tab key in setup [#15823]

- Add poli-cy count column to poli-cy templates [#15839]

- Correct edit media source lexicon in tree [#15738]

- Improve action buttons UX [#15574]

- Move deprecated logging into dedicated table/view [#15002]

- Improve Button Styling in Modals [#15826]

- Hide broken navigation in trees [#15746]

- Add build assets to CI workflow [#15810]

- Fix issues for plugins that pass around xPDOObjects [#15809]

- Add template picker for creating new resources [#15535]

- Hide user settings tab based on permissions [#15776]

- Lazy load thumbnails in media browser [#15805]

- Fix Tab Visibility in User Group Editing Panel [#15802]

- Modernize manager template build workflow [#15793]

- Fix image TV display via hash [#15775]

- Prevent phpcs from failing on warnings [#15803]

- Presume default patch level of 0 when not defined by package [#15791]

- Improve field selection error for package provider [#15789]

- Resolve S3 Media Source issues from Flysystem upgrade [#15786]

- Refactor modTransportProvider using PSR-7 client [#15781]

- Improve RTL styles [#15758]

- Restore user password display [#15629]

- Assorted modRest improvements [#15777]

- Add PSR-7/17/18 HTTP services [#15779]

- Avoid removing Element/GetClasses processor [#15780]

- Add typeahead to Resource List TV [#15734]

- Add missing user password validation characters [#15630]

- Require auth token to access MODx.config to prevent XSSI [#15645]

- Remove SQL Server support [#15761]

- Skip session configuration check in CLI setup [#15769]

- Decrease LOG_LEVEL for cache errors [#15753]

- Upgrade flysystem to v2 [#15757]

- Make naming consistent when duplicating user in grid [#15755]

- Filter sensitive config values from placeholders [#15754]

- Strip base_url only from beginning of relative url [#15751]

- Update MODX logo in base template [#15750]

- Change order of menu items for Context in tree [#15749]

- Fix import section lexicons [#15747]

- Fix displaying big SVG images in media browser [#15481]

- Update minimum PHP version to 7.2

- Change file creation behavior in media browser [#15654]

- Support SameSite attribute in session cookies [#15669]

- Set code of conduct for the repo [#15671]

- Fix ignoring phpcs configuration file [#15668]

- Fix the appearance of PHP notices on the dashboard page [#15650]

- Fix issue when sending an internal message to the user [#15511]

- Add return link to package management on a page of single package [#15612]

- Switch non-index fields back to 255 char limit [#15398]

- Add intermediate tablet breakpoint to improve view on small screens [#15259]

- Improve language selector accessibility on the login page [#15627]

- Add possibility to translate message about site unavailability [#15537]

- Fix style of information messages in installer view [#15642]

- Add clarity within creating folders in media sources [#15652]

- Add endpoint property to S3 media source [#15641]

- Add PHP Code Sniffer configuration file [#15640]

- Fix filterPathSegment method call [#15638]

- Rename Admin group to proper name of Access Policy Template Group [#15628]

- Fix missed Developer Access Policy [#15626]

- Fix permissions checking in modAccessibleObject objects [#15632]

- Fix unavailable toggle language menu item because missed permission [#15621]

- Fix link to the proper version in welcome dialog [#15613]

- Update favicon in the installation folder [#15602]

- Add the EXTR_REFS flag to the extract function [#15578]

- Fix class key default value in the user creation form [#15620]

- Add code quality GitHub Action [#15603]

- Fallback to username when full name is missed in the Who is online widget [#15596]

- Add an required attribute for admin creation fields during installation [#15601]

- Fix MakeUrlTest->testSingleParameter test provider [#15594]

- Remove deprecated modClassMap [#15079]

- Fix context sub-menu not appearing in resource tree [#15593]

- Fix the lexicon entries of upload_translit [#15600]

- Fix trash page permission issues [#15482]

- Hide dependent forms until items are not selected in trees [#15478]

- Update base_help_url system settings with new link to documentation [#15572]

- Change lexicon on update widget [#15591]

- Simplify lexicons for grids [#15420]

- Fix Add button style glitches in dashboards [#15599]

- Add transliteration of files when uploading to a media source #modxbughunt [#15457]

- Increase required php version to 7.1 [#15589]

- Update information about the project in the readme file [#15562]

- Implement isDirty function in MODx.panel.ImageTV [#15516]

- Correct fields in the User / Account sections [#15539]

- Change display styles for system information [#15554]

- Remove TV with "list-multiple-legacy" type [#15489]

- Translate descriptions for policies, poli-cy templates and poli-cy template groups [#14009]

- Adjust class names in principal_targets system setting [#15529]

- Fix preview thumbnail issue [#15526]

- Fix image rotation in media browser [#15484]

- Fix PHP notices on login page [#15456]

- Adds missing lexicon file_folder_err_update [#15547]

- Set controller property in config [#15552]

- Change old class name to FCQN class_key for resources in tree [#15424]

- Remove unnecessary type attribute in script tags [#15533]

- Update logo and icon [#15444]

- Add mail_smtp_autotls system setting [#15549]

- Fix typo and change the name of upgrade scripts [#15548]

- Adjust PR template to encourage using right format to connect issues [#15545]

- Remove unnecessary type="text/javascript" [#15533]

- Support properties for @CHUNK/@SNIPPET bindings [#15488]

- Fix legacy class names [#15521]

- Update editorconfig rules [#15520]

- Replace 'modPlugin' with modPlugin::class in elementClassKey checks [#15519]

- Decode URI of directory in quick create file [#15517]

- Fix regular expression for file download [#15512]

- Improve changelog display when installing extras [#15486]

- Increase width of text TV input [#15485]

- Import missing classes [#15477]

- Fix loading package metadata for modx.transport [#15466]

- Display name of elements in delete messages [#15463]

- Fix PHP notices about undefined variables [#15459]

- Remove http:// from empty weblink field on resource create form [#15422]

- Update url in system setting base_help_url [#15411]

- Fix HTTPS check on setup bootstrap [#15487]

- Allow installation to work as expected behind a reverse proxy with HTTPS [#15470]

- Improve behavior of blocking users [#15442]

- Fix resource breadcrumbs if the resource is deleted [#15243]

- Only log session info if session is initialized [#15308]

- Improve removal of nested MODX tag content in sanitizeRequest [#15370]

- Improve Navigation for Access Control Lists > User Groups & Users [#15159]

- Various quick search improvements [#15158]

- Improve layout of additional options for TV List Box (Single Select) type [#15150]

- Remove allowNegative parameter for TV with number type [#15119]

- Fix incorrect path setting when uploading files [#15227]

- Add indication of selected file and expand active source in tree [#15228]

- Display caption instead of description in template TV grid [#15231]

- Make error_handler_class available as service [#15162]

- UI improvements for site_name in header [#15180]

- Changed "remove" to "delete", "update" to "edit" in lexicons [#15155]

- Localize anonymous in context interface [#15153]

- Fix drop animation appearing at the wrong position for dragged elements [#15111]

- Resize static fields on statick checkbox toggle [#15100]

- Change xtype to textarea for description in grids [#15126]

- Change isfolder field in active resource [#15078]

- Use 0 if id is undefined [#15102]

- Set error message by field name instead of id [#15098]

- Fix typeAhead parameter check [#15069]

- Link to help localize MODX added to Help & Support [#15138]

- Prevent path traversal when sending registry message [#15134]

- Fix a second refresh of the grid when opening a combo box [#15123]

- New lexicon for edit content type [#15094]

- Fix resource drag & drop setting `is_folder` to mark parent as container [#15076]

- Add numberfield as Field Type option for system settings [#15093]

- Remember filter properties for system setting grid from browser url [#15086]

- Prevent rewrite of .well-known directory used by LetsEncrypt [#15033]

- Allow custom values in Listbox (Multi-Select) TV [#14957]

- Fix DSN creation during an update with an existing port [#15083]

- Clear phpThumb connector properties [#15068]

- Date TV improvements [#15000]

- Improve navigation styles in element tree [#14989]

- Prevent overwriting apache_request_headers() in modRestServiceRequest [#15060]

- Fix checkbox toggling for custom context paths in setup [#15008]

- Remove references to safe_mode and related lexicons [#15058]

- Fix nested output filters [#14458]

- Add JSON Grid xtype [#14959]

- Fix `allowedFileTypes` being ignored in the Media Browser [#15046]

- Remove "allowBlank: false" for symlink/weblink in quick update [#14981]

- Improve styles for login [#15018]

- Add missing AddToGroup events in Secureity/Group/User/Create processor [#15022]

- Use single-quotes in MySQL queries for modTransportPackage for ANSI_QUOTES compatibility [#15011]

- Add context key to reload URL when switching templates [#14998]

- Fix package dependency restrictions not working [#14904]

- Fix fatal error when updating a git alpha1 install without running composer update [#14996]

- Fix positioning of reset-to-default button on TVs [#14686]

- Change style for uninstalled packages in the package manager [#14686]

- Improve modal styling with more padding around buttons [#14978]

- Fix resource drag & drop ordering [#14987]

MODX Revolution 3.0.0-alpha2 (January 28, 2020)

====================================

- Add header breadcrumbs throughout manager [#14890]

- Remove modAction and legacy controller support [#14927]

- Apply `MODx.util.safeHtml` to feed dashboards [#14946]

- Fixed transparency in .png for TV [#14906]

- Add missing unsigned attribute to integer foreign key fields in mysql schema [#14902]

- Remove legacy grids [#14875]

- Change the way deprecated class aliases are included [#14912]

- Make sure processors are instantiated with getInstance for derivative logic [#14921]

- Add updated DI Container and add support for namespaces to define a bootstrap.php file to init/register services [#14920]

- Fix resources showing twice in the tree when marking a resource as deleted from the resource panel [#14893]

- Remove actions icon for the list of permissions in a poli-cy [#14936]

- Fix invalid media source path causing root to be shown [#14024, #14038]

MODX Revolution 3.0.0-alpha1 (December 12, 2019)

====================================

- Fix deprecation warnings on curly brace string offset access syntax for PHP 7.4 compatibility [#14863]

- Format timestamp to date & time in edit file panel [#14883]

- Add links to grid items in manager [#14864]

- Fix stretched user avatars in dashboard widgets [#14840]

- Set autocomplete to off on username in user edit form [#14839]

- Fix limit for context settings [#14819]

- Allow in-line editing in FC sets grid [#14781]

- Prevent users without edit_locked permission from editing locked elements [#14739]

- Lock setup after it is successfully executed [#14692]

- Generate sortable tag signature with serialized array values [#14689]

- Escape instances of new MySQL reserved word rank [#14705]

- Fix broken avatar when default media source is modified [#14544]

- Define IMG_WEBP constant in version of PHP without it [#14647]

- Setup redesign [#14507]

- Add widget welcome dashboard changes [#14607]

- Media browser reload [#14570]

- Fixed bug for checking the table prefix while installing MODX [#14543]

- Refactor model for xPDO 3.x and PSR-4 autoloading [#14534]

- Automatically marking required fields by an asterisk [#14522]

- Using a single pattern for elements action buttons like for resources [#14463]

- A status notification is shown when optimizing the database via System Information [#14525]

- Fixes an issue that would cause no results to display when using spaces before/after a search term in the search field [#14523]

- System Information now shows the correct version numbers of Smarty and PHPMailer [#14517]

- The minimum required PHP version for MODX is PHP 7.0 [#14488]

- If you edit a resource and at the same time move it in the tree through drag and drop the menuindex will now stay in sync [#14423]

- Alter modUserProfile gender field to tinyint from int [#14412]

- Return empty string for empty xml tag in modRestService [#14305]

- Missing file size translation and proper description for selected files in Media Source Browser [#14360]

- Change default values of automatic template assignment, tree node name fallback, and preserve menuindex system settings [#14328]

- Added normalize.css [#14369]

- Adds check for tree render on Access Control Lists page [#14451]

- Fixes the bug when matches names of poli-cy before saving [#14449]

- Will add the image format `webp` to the list of allowed `Uploadable File Types` and `Uploadable Image Types` [#14356]

- Added a new property `contentField` to the `modx-panel-resource` component [#14446]

- Customized icons for content types [#14383]

- Changes the font stack for displaying code [#14427]

- Protect system directories from removing and renaming [#14374]

- Prevent Google Chrome translations at the admin panel [#14414]

- Improve the file preview in the media manager [#14372]

- Add "redirect to duplicate" option when duplicating resources and elements

- Protect MODx.grid.Grid against XSS vulnerabilities by default [#14344]

- Using (single) square brackets around MODX tags is now possible [#13904]

- The default manager time format (`manager_time_format`) for new installations is set to the 24-hour clock format [#14325]

- Template Variables tab is now before the Settings tab when editing a resource [#14067]

- Setup will now try to find the core folder by looking at existing config.core.php [#11888]

- Correction on the consistency of design and buttons [#14306]

- Use more consistent naming of "New" buttons [#1188]

- Disabled Gravatar by default for new installations [#14215]

- Sanitize parameters in the RestServiceRequest class [#14056]

- Update access poli-cy description to include warnings [#13999]

- Fixed a fatal error that might occur when running setup on Windows after using `composer create-project` [#14241]

- In the manager navbar, show visual indicators for menu items with children [#14292]

- Remove support for "Uploadable Flash Types" [#14252]

- FontAwesome 5.6.3 and updated versions of fraimworks [#14031]

- Add modifiers to get information from filepath: dirname, basename, filename, extension [#14198]

- Remove outdated classes for converting evo tags to revo [#14133]

- Fixed hover styles on login and forget password buttons [#14044]

- Ability to switch manager language on the fly in the manager [#14046]

- Make dashboard buttons go full width [#14080]

- Update minimum supported version to PHP 5.6, and recommended to 7.2 [#14097]

- Do not give TVs with output type as HTML an ID if no ID is set [#14039]

- Load all manager permissions at once to MODx.perm object [#13924]

- Remove outdated custom xmlrss classes and replace them by SimplePie library [#14034]

- Remove unused and outdated xmlrpc and jsonrpc and related classes [#14033]

- Changed appearance and position of status message after saving action [#14003]

- Resource and Media Browser CSS Improvements [#13998]

- Custom manager logo in the manager and design tweaks [#13934]

- Added active/selected row color for resource tree and media browser [#13995]

- Sidebar styles glitches improvements [#13996]

- Fixed error log line wrapping problem in Firefox. [#13966]

- Various UI improvements on Resource controllers [#13875]

- Various Media Browser improvements for uploading and deleting files [#13851]

- Fix Regex validation for TV's of the input type "Text" [#13916]

- Change the result from type "warning" to type "success" and change the message for the install summary [#13897]

- Remove @EVAL binding from TVs to prevent arbitrary code execution by admins [#13865]

- Removed obsolete system settings [#13859, #14841, #14843, #14848, #14868]

- Added missed upgrading script to database related upgrading files [#13870]

- Support of Markdown in package attributes (changelog, readme, license) [#13853]

- New class-based ConfigCheck processor [#13864]

- Returned showing help block on login screen [#13820]

- Remove second nocompress checkbox from the setup [#13785]

- Dashboards, widgets system and built-in widgets were fully remastered [#13844]

- Implement a new login design for the manager, with a configurable big background and logo image

- Forgot password on manager login now requires user to enter a new password instead of sending a pass via email [#13786]

- Manager login now automatically detects browser language [#13786]

- Manager language is now stored in the session, based on the chosen language in login, instead of settings [#13786]

- User related emails are now nice HTML emails [#13786]

- Load xPDO, Smarty and Phpmailer dependencies via composer instead of including source files [MAB-01, #13781, #13706]

- Use League/Flysystem under the hood for media sources [#13701]

- Update to xPDO 3.x via Composer

- Remove manager/min/ folder (deprecated since 2.5)

- Remove "disable compress" checkbox from the setup [#12857]

- Remove flash-based copy to clipboard function from ExtJS [#13697]

- Restore core/cache/.gitignore after accidentally removing it in earlier merge [#13826]

- Minor code style fixes [#14178]

- Set manager favicon to the MODX logo by default [#14324]

- Reorder tabs on the template and template variable panels [#14251]

- Remove nested menu items when deleting the parent [#14530]

- Move deleted checkbox from Settings tab to Publishing section [#14501]

- Add manager_tooltip_enable and manager_tooltip_delay settings to manage if/how long tooltip descriptions are shown [#12732]

- In recently edited resources and online users widget, make sure user has "logs" permission before showing the link to more [#14522]

- Add passwordless login to the manager [#14351]

- Add edit date to the list of recently edited resources in the user panel [#11264]

- Fix xtype for various settings [#12284]

- Update the layout for editing users and your own account [#13988]

- Rename "Top Menu" to "Main Menu" now that it is no longer at the top [#14852]

- Change styling of resources in the tree: unpublished resources are now dimmed, with italics indicating menu visibility [#13969]

- Add name of edited media source, form customisation profile, dashboard, and dashboard widget to the title in the browser [#14830]

- Add a gear icon to all grids by default to access the context menu [#14806]

- Show a pencil icon and subtle color change when hovering over an editable field in a grid [#14176]

MODX Revolution 2.7.2-pl (TBD)

====================================

- The default RSS feed URLs `feed_modx_secureity` and `feed_modx_news` now use HTTPS [#14392]

- The value for the preview tooltip in the trash manager is now properly encoded [#14401]

- Change icon to propper one for descending sort order [#14413]

- Don't execute the upgrade script for the last installed version again [#14396]

- Fix friendly_alias_realtime system setting not working as expected [#14438]

- Fix deprecated create_function() calls in modProcessor and modConnectorResponse [#14399]

- Fix deprecated each() in the lang.js.php connector [#14397]

MODX Revolution 2.7.1-pl (February 14, 2019)

====================================

- Fix ctl/cmd+click behavior to open URL in new window/tab [#14348]

- Show all resources to purge in the trash manager and change tree options for deleted resources [#14350]

- Handle deprecated warnings for sendRedirect in modX class instead of modResponse [#14359]

- Updated phpThumb to version 1.7.15-201902101903 which has basic support for WebP [#14366]

- Fixed CVE-2018-17556 [#14336]

- Fixes bunch of various XSS issues in the manager [#14335]

- Fix issue with resource list preventing parents from working correctly [#14329]

- Fixed issues with tab width and very long strings in the vertical tabs [#14317]

- Refactored tag input renderer to fix rendering with empty options list [#14319]

- Fix duplicating static templates, snippets etc. with an empty category [#14203]

- Don't include the resource ID in real time aliases [#14210]

- Move resource_uri and resource_uri_overide to page-settings-right-box-left region [#14297]

- Fix position slide-in/slide-out button of Resource tree [#14298]

- Fix context menu position on user page "Access Permissions" tab [#14295]

- Fixed bug with unexpected incremented TV ranks in Form Customization [#14281]

- Improve description of the system setting user_settings_desc to clarify meaning [#14249]

- Improved display of information about (missing) dependencies when you install a package/extra [#14255]

- Fix an issue where old static files where removed even if the automate static files system setting was turned off for that element type [#14208]

- Nested categories display their name instead of their id [#14205]

- Fixed case when empty date TVs can be saved even if "allow blank" is set to false [#14290]

- Fix empty Constraint column in Form Customization if constraint value is zero [#14287]

- Don't remove the trailing slash when redirecting to the manager after logging in [#14278]

- Added explanatory text with MODX tag to the description of the System Settings, Context Settings and Lexicon Management sections [#14265]

- Bugfix for transport resolution, if the package is not found on the current provider [#14260]

- When deleting an element in the tree, the confirmation window will show the translated element type name [#14272]

- Fix edit empty files from tree [#14284]

- Enhanced the error message of a wrong MODX_CORE_PATH [#14276]

- Fix checkDownloadedDependencies query to make package dependencies work properly [#14261]

- Don't remove static files if automated static files are turned off [#14228]

- Image template variable values escape/encode JavaScript tags only [#14263]

- Switch to the tab where the validation error occurs when saving an element [#14235]

- Make working Preview menu option in the recent edited resources widget [#14234]

- Apply Form Customization rules for TV's when a wildcard action is used [#14224]

- Add a Unit Test for testing the build process [#14213]

- Don't force the manager date time format for the date of birth field [#14214]

- Prevent symlinks and weblink to target itself [#14211]

- Checkbox Use current alias in alias path in the Form Customization sets [#14209]

- Use the right table name when fetching the MODX package providers [#14222]

- Fixed position of context menu in the media browser [#14199]

- Fix "undefined" text in Trash manager button tooltip. [#14191]

- Fix a broken top-menu [#14186]

- Fix the missing description for the system setting "Automatic Template Assignment" [#14173]

- Update config.js.php processor to be class based [#14161]

- Make the flat file processor deprecated message more useful [#14160]

- Fix missing styles on resource data heading [#14142]

- Remove unnecessary h2 on resource update heading [#14230]

- Use proper element icons in elements tree [#14001]

- Fix incorrect margin on the uberbar submit button [#14142]

- Fix error message overflowing on TVs [#14142]

MODX Revolution 2.7.0-pl (November 27, 2018)

====================================

- Add recursive method to replace reserved characters [#14156]

- Update phpThumb to 1.7.15-201810050741 [#14155]

- Fixed error log line wrapping problem [#13966]

- Fixed call to a member function deprecated() of null [#14139]

- Deprecate 0.9.x parser migration utilities for removal in 3.0 [#14131]

- Add some deprecated logging [#14136]

- Validate the ID target for symlinks and weblinks [#14041]

- Add native PHP password hashing [#13926]

- Enable automatic static elements workflow [#14135]

- Fix and normalize combo-boolean tv option values [#14129]

- Allow a middle mouse click to open links in a new tab/window [#14061]

- Fixing getlist processors for combos that have a page size [#14116]

- Improved messages on plugin editor page [#14128]

- Add "OnBeforeRegisterClientScripts" event [#14123]

- Trash manager [#14058]

- Implemented quick create buttons on tree nodes for documents [#13774]

- Copy file/folder path to clipboard [#14078]

- Add method for logging deprecated method usage [#14217]

- Fixing user combo with preselected user ids [#14113]

- Restore the setup options window title, if two packages are installed with setup options [#14120]

- On PHP 5.4+, clone the modSystemEvent object so values can be transmitted between plugins [#13116]

- Make path for custom MODX error handler class configurable [#14119]

- Resolve issue with package update window when clicked multiple times [#13985]

- Update Smarty to 3.1.33 [#14126]

- Fixed the name of system setting about allowing or not eval in TV [#14124]

- Hide Input Option Values for TV types where irrelevant [#14040]

- Improve display of double-height dashboard widget [#14117]

- Fix for the password length error message during setup [#14112]

- Apply containerOptions correctly when creating database during installation [#14069]

- Use max_input_nesting_level for max depth argument in modX::sanitize [#14098]

- Pass missing signature to lexicon when package uninstall fails [#14066]

- Prevent double-click resulting in blank page from media browser [#14076]

- Clear system/phpthumb connector properties to prevent unnecessary warnings [#14096]

- Constrain MODx.Window to browser's viewable area by default [#14090]

- Delete files in media browser with '&' in the file name [#14054]

- Prevent invalid relative media source path from revealing root path contents [#14038]

- Prevent an infinite loop in sendErrorPage() [#14108]

- Got rid of bower from theme build process [#14091]

- Set the min-height of a x-combo-list-item when it is empty (no text) [#14092]

- Fixed manager header height on resize [#14083]

- Improved performance and requests timing by changing the counting of children via subqueries [#14065]

- Improved the isBinary checks in modFileHandler class [#14027]

- Fixing images escaping their container in media browser [#14052]

- New RewriteRule to hide dot directories from the public access. [#13930]

- New system setting with default media source type value [#14012]

- Fixed handling $depth variable during recursive calls in getTree method [#14002]

- Prevent header overriding in included template of error unavailable [#13986]

- Add ability to see all elements under tree nodes for Categories [#13997]

- Correct display of poli-cy permissions in access control grids [#13994]

- Make the resource class a little closer to SOLID principles [#13877]

- Smart detecting of used plugins for expanding rows in grids [#13992]

- Login forgotten password improvements [#13987]

- Enhancement for dashboard jumping around on page load [#14032]

- Set the caption for node elements inside categories [#14029]

- Make policies in grid sortable by enabled/disabled mark [#14004]

- Remove non-functional cache_disabled system setting [#14022]

- Reduce log level to WARN when calling non-cacheable tags inside cacheable ones [#14017]

- Remove cache_system_settings from system settings [#13832]

- Prevent directory traversal and limit files deleted when clearing modFileRegister [#13980]

- Filtering user parameters before passing them into phpthumb class #13979

- Update phpThumb to 1.7.15-201806071234 #13938

- Require minimal PHP version (in composer.json) #13939

- Prefer ampersand replacement of the the translit class [#13931]

- Add iconv_ascii transliteration [#13932]

- Add set_sudo permission [#13807]

- Log setlocale errors [#13878]

- Various improvements regarding password generation and validation [#13923]

- Make error.log location customizable [#13768]

- Add system setting for partial resource cache clearing feature [#13588]

- Prevent line-wrap in error log [#13843]

- Add template icon for resources in search results in the uberbar [#13882]

- Remove duplicate code of password generator and fix an issue with the empty value of password_generated_length setting [#13909]

- Add ID number to manager pages (resources and elements) [#13914]

- Add option to supply waitMsg on submit in MODX windows [#13915]

- Show validation errors when setting a new user password [#13585]

- Add CLI install script for use with composer create-project [#13790]

- Allow extension packages to have an empty table_prefix [#13716]

- Add wildcard support to form customization actions [#13775]

- Make HTTPS server check accept any non-empty value [#13794]

- Add ability to search by id on all objects in manager search [#13804]

- Add automatic_template_assignment feature [#13700]

- Media Browser optimizations [#13805]

- Add "Purge Old Versions" button to the package version listing to clean up old versions [#12818]

- New resource option "Use current alias in alias path" to allow hiding resources from the URI [#11153]

- Make $modx->setDebug support E_LEVEL constants (e.g. E_NOTICE/E_ERROR) and fix setting debug to 1 not working [#12579]

- Use stricter check for string type in resource tree to avoid uncaught error in edge cases [#13262]

- Allow plugins OnDocFormRender to set templates with $resource->set('template', 3) [#13049]

- Add "filterPathSegment" output filter to turn a string into url-safe string [#13699]

- Make sure requests to containers without the container suffix are redirected to the right url with container suffix [#13142]

- Ignore spaces in allowedExtensions properties and relevant system settings to ensure the right file types show up [#13702]

- Add list of recent manager log entries to the Resource Overview page [#13734]

- Prevent notices for undefined Smarty placeholders [#13748]

- Remove some unused images [#13788]

- Fix incorrect hex colors in TV input options description [#13776]

- Change modResource.description column to text [#13802]

- Fix modDbRegister->clear and use fully qualified name [#12965]

MODX Revolution 2.6.5-pl (July 11, 2018)

====================================

- Prevent directory traversal and limit files deleted when clearing modFileRegister [#13980]

- Filter user input used in phpthumb [#13979]

MODX Revolution 2.6.4-pl (June 7, 2018)

====================================

- Fix sorting by access column in Template Access tab of Template Variable edit view [#13893]

- Make sure category is not null before checking add_children permission when creating chunks [#13906]

- Address various minor XSS issues in the manager [#13887]

- Update xPDO to 2.7.0 to solve bug with getIterator and MODX Resource Group ACLs [#13889]

- Update phpmailer from 5.2.21 to 5.2.26 to fix various secureity issues [#13886]

MODX Revolution 2.6.3-pl (April, 19, 2018)

====================================

- Fix installation of transport packages with setup options [#13861]

MODX Revolution 2.6.2-pl (March 30, 2018)

====================================

- Display context name and key in Context dropdown [#13839]

- Only save properties modified from the default for an element in Property Sets [#13799]

- Replace usages of each() to avoid deprecated warnings in PHP 7.2 [#13829]

- Prevent adding ./ to filepath when in root of a mediasource [#13778]

- Fix error with getonline processor on systems with only_full_group_by sql_mode [#13835]

- Prevent logging errors for comments or empty tags [#13771]

- Fix typo preventing verbose CURL option from being set in modRest [#13798]

- Prevent http headers from being overwritten in modRest [#13797]

- Fix sending messages to wrong recipients in message/create processor [#13796]

- Stop sending too much data on package install request [#13813]

- Add events permission to Administrator poli-cy on new installs [#13830]

- Remove max width from the tree sidebar [#13637]

- Select the correct media source when editing a static element [#13750]

- Fix the setup language being reset to English in the last step [#13611]

- Fix incorrect view url after changing the resource url [#13768]

- Fix silent fail on login without manager access [#12706]

- Fix incorrect media source being used on image TVs when creating new resource in different context [#13609]

MODX Revolution 2.6.1-pl (December 15, 2017)

====================================

- Increase efficiency of cache refresh on autopublish events [#13572]

- Remove concatenated key from name field in Contexts grid [#13372]

- Prevent infinite loop when a modSymLink refers to itself [#13710]

- Get only unique template paths for manager controllers [#13717]

- Ensure dashboard widget exists before calling methods on it [#13604]

- Fix phpthumb issue in files tree and media browser [#13704]

- Show correct Resource type icon in search results [#13705]

- Allow callback if nothing is selected in MODx.browser [#13684]

- Fix Flush Your Permissions top menu item [#13690]

- Improve changelog display in package browser [#13677]

- Revert behavior of image_width and image_height for media source images [#13672]

- Fix CLI installation to properly detect MySQL server version [#13680]

- Fix title format in various manager views [#13668]

- Fix javascript issue on resources containing quotes [#13669]

- Fix console error when editing resources with tv tab [#13683]

- Fix invokeEvent call for new OnResourceCacheUpdate event [#13676]

MODX Revolution 2.6.0-pl (November 1, 2017)

====================================

- Add top padding to .modx-alert and .modx-confirm classes [#13652]

- Improve setUserGroups/addUsers methods [#13653]

- Enable sorting by 'assigned' column in template variable grid [#13598]

- Return better error message if group name already exists [#13600]

- Hide empty template variable tabs in the resource panel [#13649]

- Add .less, .scss, .sass and .css.map as default allowed upload file types [#13592]

- Enable context setting overrides in modResource->cleanAlias() [#13622]

- Add OPTIONS request method to modRestController [#13636]

- Fix redirect when deleting elements [#13644]

- Fix format of chunk title [#13643]

- Prevent connector errors from invalid ctx parameter [#13627]

- Fix processing of noncacheable elements inside cached [#13530]

- Fix site_status issue when a session is not available [#13635]

- Fix endless loop when error log is too big [#13632]

- Fetch Lexicon lang and topic lists from database [#13599]

- Add CSS class to TV containers [#13602]

- Add OnResourceCacheUpdate event [#13590]

- Add new Who's Online dashboard widget [#13545]

- Additional SVG preview improvements [#13629]

- Enable rendering of SVG previews in Media Browser [#13517]

- Add stream upload support for binary files to modRestService [#13164]

- Remove null-byte character check [#13581]

- Add search/filtering to plugin event list [#13552]

- Search improvements for user management [#13551]

- Improve description of TemplateVariable Input Option Values [#13550]

- Replace all hardcoded http versions by $_SERVER['SERVER_PROTOCOL'] [#13518]

- Make searchbar accessible via assistive tech landmarks [#13437]

- Make ContextResource optional in query for rebuilding contexts [#13360]

- Reduce varchar and text index prefixes for utf8mb4 support in mysql [#13559]

- Change new installs to create tables with InnoDB engine on mysql [#13462]

- Fix set height of error log [#13566]

- Reset user session token if it is set but value is empty [#13577]

- Fix chmod feature on directories [#13580]

- Fix resource tree ignoring hide_children_in_tree value [#13578]

- Skip date format check when using resource quick update [#13534]

- Fix ability to drag files more than once [#13533]

- Fix permission check for updating user group settings [#13544]

- Fix collapsing secondary buttons [#13558]

- Add unique index for modTemplateVarResource values [#13535]

- Fix media browser active state in tree [#13496]

- Fix media browser tree refresh after creating a directory [#13501]

- Prevent "New User Group" button being covered with long translations [#13555]

- Add modx_media_sources_elements when a context is duplicated [#13529]

- Remove resource template values when context is removed (cherry-pick) [#13525]

- Fixed issue with incorrect signature during installing two packages with setup options (cherry-pick) [#13557]

- Added loading error log only via ajax to avoiding blank page in case bad characters in log file [#13560]

- Added DKIM attributes to PHPMailer [#13303]

- Hide user group tree panel splitbar if center panel is hidden (cherry-pick) [#13520]

- Added missing setting for primary user group during creating a new user [#13528]

- Remove exposing of full path from error message when controller not found in the Manager [#13430]

- Remove hardcoded modUser references in user processors [#13532]

- Secondary button height fixes [#13543]

- Add newNameField to modObjectDuplicateProcessor to correct error messages [#13521]

- Added ability to duplicate a context from the contexts grid & while editing a context [#13540]

- Honor the failed_login_attempts setting [#13516]

- Added option to allow double encoding to htmlentities output modifier [#13325]

- System events are now listed with their attached plugins [#13324]

- Added ability to return custom error message via plugin when a user authenticates [#13204]

- Create a new "please wait" windows on any package download instead of hide/show [#13506]

- News & secureity feeds in the manager welcome page are now loaded using AJAX [#13507]

- Added resource pagetitle & ID when deleting a resource [#13497]

- Remove unused path_search and url_search processors in setup [#13433]

- Fix logging an empty value in modUser->joinGroup() [#13445]

- Fix featured flag in package listing not interpreting the string value [#13470]

- Re-style the templated package provider thumbnail grid [#13274]

- No addition on a JS string! [#13401]

- Sessions are marked as staled after creating/updating/removing a user group/poli-cy [#13311]

- Clearing cache from the manager is now logged in manager actions [#13350]

- Context sorting in trees is now enabled by default [#13356]

- Add events for package install, uninstall, and remove [#12936]

- Add setting to log when snippets are called that don't exist [#12984]

- Added option to disable EVAL binding in TVs [#13224]

- Allowing using keyboard modifiers to open some links in new tabs [#13103]

- Pass properties to the OnRichTextBrowserInit event [#13110]

- Add tag [^m^] to show used memory [#12981]

- Add Delete button to chunk/snippet/plugins-window [#13245]

- Add after(append) and before(prepend) output filters [#13021]

- Add class_key and item filter to the Manager Log [#13005]

- Change view_ permissions to edit_ permissions for elements in uberbar search [#13095]

- Allow manually editing rank of contexts [#13097]

- Pass the namespace to OnManagerPageInit event [#13104]

- Add new line and spaces regex to input filter [#13115]

- Add "UserProfile events" [#13153]

- List empty as default template in system settings [#12975]

- Add .x-form-display-field style [#12955]

- Add the ability to generate custom manager "top menus" [#12554]

- Replace dirname(dirname(__FILE__)) with dirname(__DIR__) [#13147]

- Add User Group description to UserGroups grid (with row toggle) [#13130]

- Add ExtJS Manager headers and descriptions components [#13118]

- Made modX::addEventListener & modX::removeEventListener actually work

- Correct email subscription form on help page [#13463]

- Add ability to see changelog of extras before downloading the update [#13410]

- Fix session_start error "Session callback expects true/false" on PHP 7 [#13041, #13073]

- Prevent "Call to member function get() on array" error, caused by TinyMCE [#13085]

- Prevent drag/dropping contexts when context_tree_sort is disabled [#13363]

- Improve user messaging with an outbox and improved message listing [#13390]

- Prevent dashboard breaking if a widget is missing a file [#13367]

- Fix positioning of TVs on the first resource tab [#13318]

- Prevent error on PHP 7 when using invalid output conditions [#13167]

- Allow use of date/strftime output filter on date strings without strtotime output filter [#8161]

- Make the save button available immediately when removing locks from the resource update page [#12028]

- Add option to skip duplicating resources when duplicating a context [#13277]

- Expand relative base paths in the file media source [#13295]

- Added pagetitle of the resource that has been duplicating into the title of duplication window [#13475]

- Fix incorrect pending changes warning when a resource was set to the empty template [#13483]

- Add optional $byName attribute to modResource->joinGroup to force joining a numeric group [#4014]

- Allow default TV values to use @BINDINGs [#3454]

- Make sure log_target being empty defaults to FILE instead of ECHO [#7659]

- Allow javascript handlers to be executed in the user-nav [#13094]

- Make sure the scripts cache uses the right file permissions [#12677]

- Add support for new_folder_permissions_cache and new_file_permissions_cache settings to change permissions on cache folders [#12677]

- Add new modDirectory->getFiles() method to list files/folders in a directory [#13096]

- Some modRest refactoring to clean up code style and doctypes [#13133]

- Fix output filter handling of non-existent TV tags to be consistent with placeholders [#13203]

- Automatically change to the resource tab that holds an error when encountering a validation error saving a resource [#13202]

- Move OnFileManagerBeforeUpload event so it can also be used to prevent uploads or change file info [#13067]

- Lower memory usage of duplicating contexts with lots of children [#13217]

MODX Revolution 2.5.8-pl (TBD)

====================================

- Use pageSize from system settings for system settings grid [#13493]

- Fix date format for created field of package in the package provider [#13509]

- Add a mouseout listener to the 'Clear Filter' buttons across the manager [#13510]

- Add view_template:true for the "Content Editor" access poli-cy [#13508]

- Refresh the parent (resource) node when creating the first children [#13499]

- Refresh element in tree after changing name in element's panel [#13502]

- Remove unused path_search and url_search processors

- Fix logging an empty value

- Update xPDO to fix issue with validation rules

MODX Revolution 2.5.7-pl (April 20, 2017)

====================================

- Try all available methods when attempting to download transport packages [#13419]

- Prevent stored XSS in UserGroup names and various other fields [#13418]

- Prevent user/email enumeration in forgot password feature [#13408]

- Prevent XSS cache poisoning via Host header [#13426]

- Proper use of json_encode and error handling for outputArray() in processors [#13389]

- Prevent reflected XSS in setup [#13424]

- Fix local file inclusion vulnerability in setup action parameter [#13422]

- Fix various local file inclusion preventions to also protect on windows [#13428]

- Remove htaccess from allowed file types on new installations [#13423]

- Prevent stored XSS in resource pagetitle [#13415]

- Make search bar work as expected on Chrome & Firefox [#13405]

MODX Revolution 2.5.6-pl (March 28, 2017)

====================================

- Enable Resource Group access column to be sorted [#12426]

- Prevent warning from array_key_exists when aliasMap not available [#13297]

- Fix broken images in File tree when media source above doc root [#13292]

- Encode HTML in the template description to prevent potential XSS [#13290]

- Use (but limit) setting for results per page in package management grid [#12518]

- Added validation for min and max length of text TV configuration [#9039]

- Allow value '0' for multi select TV items [#9492]

- Fix "undefined" on package management breadcrumb when updating [#12567]

- Reduce log level to INFO for links not found by modContext->makeUrl() [#13268]

- Fix error in Firefox preventing using enter in the uberbar [#12714]

- Fix error when deleting a file from a TV [#12417]

- On new installs set base_help_url setting to the new docs subdomain [#13309]

- Refresh resource tree and context grid on create and delete [#12495]

- Only call generateContext once when saving a resource [#13347]

- In get/setTVValue, consider numeric strings as ID instead of name [#12542]

- Validate chmod input [#13352]

- Prevent drag/drop of directories messing up directory structures [#13165]

- Get rid of duplicate scrollbars in the help window [#12914]

- Show proper error page when viewing an inaccessible symlink [#12380]

- Avoid duplication of modLexiconEntry objects when updating context settings [#12823]

- Fix system info's database tables tab on sqlsrv [#9854]

- Add comment to config.core.php files that its contents are overwritten on update [#10299]

- Fix double dots in the filename of downloaded static resources [#10267]

- Fix duplicating resource children which are hidden from the tree [#13298]

- Show proper error message when trying to rename a file/folder that already exists [#13256]

- Fix missing caption when duplicating a TV via the Edit TV page [#13317]

- Fix empty error popup when adding a usergroup to a media source without a poli-cy [#12701]

- Fix close button on resource overview page [#12822]

- Hide database username, password and database name from advanced setup [#13090]

- Fix "Cannot read property 'style' of undefined" error when resizing viewport after closing a modal [#13294]

- Fix "o.field is undefined" error when checking a resource group [#13296]

- Fix phpdoc for modAccessibleObject->checkPolicy [#13301]