5.10.4.1

• Fixed a bug where an empty @storage/runtime directory could be created within the webroot. (#18986)

6.0.0-alpha.5

• Improved emoji shortcode handling performance for strings without shortcode delimiters.
• Improved element query performance by caching element source table column listings in memory.
• Improved nested entry type resolution by avoiding unnecessary owner element queries.
• Added Laravel event dispatching to Craft’s Yiisoft\Translator\Translator instance, enabling Yiisoft\Translator\Event\MissingTranslationEvent listeners. (#18952)
• The loginPath config setting is now false by default.
• Renamed the PluginsLoaded event to PluginsRegistered. (#18973)
• Updated Twig to 3.27. (#18980)
• Fixed some errors that could occur when running Craft through Laravel Octane (#18921)
• Fixed an error that occurred when rendering the database update screen outside Control Panel template mode.
• Fixed an error that occurred when Redis was configured as the session driver.
• Fixed a bug where legacy Control Panel URL rules couldn’t route directly to templates. (#18972)
• Fixed an error that could occur when request context was dehydrated after a matched element route was resolved.
• Fixed a bug where CraftCms\Cms\Support\Typecast could skip setters that used a same-name private backing property.
• Fixed a bug where CraftCms\Cms\Support\Typecast could attempt to assign read-only, private-set, protected-set, or setterless virtual properties.
• Fixed a bug where publishable Craft assets were registered during web requests.
• Fixed a bug where eager-loading didn’t treat address, content block, and entry queries as nested element queries.
• Fixed a bug where lazy eager-loading nested element fields could reuse owner criteria and return the wrong elements.
• Fixed an error that occurred when Updates were cached and deserialized.
• Fixed an error that prevented link fields from saving.
• Fixed a bug where Money fields could throw an error during element validation when the field value was falsy.
• Fixed a bug where CraftCms\Cms\Validation\Contracts\Validatable::prepareForValidation() wasn’t called consistently, and plain Validatable classes without a configured ruleset couldn’t be validated. (#18944)
• Fixed a bug where invalid element query filters could return all results. (#18937)
• Fixed an error that occurred when uploading assets to fields with dynamic default upload locations. (#18949)
• Fixed a bug where Craft could look for the license key in config/license.key instead of config/craft/license.key.
• Fixed a styling issue that occurred when editable table cells had a code class. (#18900)

5.10.4

• Updated Twig to 3.27. (#18980)
• Fixed a bug where an empty storage/runtime/ directory was getting created even if runtimePath was being overridden in config/app.php. (#18936)
• Fixed a bug where overridden entry type handles weren’t being respected when rendering partial templates. (#18968)
• Fixed an error that could occur when opening an element slideout. (#18957)
• Fixed a bug where HTML Purifier was stripping out IDs and ID references that included characters that weren’t allowed pre-HTML5. (#18971)

5.10.3

• Reduced the number of database queries executed when eager-loading nested entries or addresses. (#18929)
• Reduced the number of database queries executed when loading image transforms. (#18929)
• Deprecated craft\services\Path::getRuntimePath(). Craft::$app->getRuntimePath() should be called instead.
• Fixed a bug where Single section entries weren’t initially saved with a post date. (#18931)
• Fixed a bug where overriding the runtime path via config/app.php wasn’t possible. (#18936)
• Fixed a bug where pasted nested entries within Matrix fields in Blocks view weren’t always getting fully initialized. (#18912)
• Fixed a bug where collapsed Matrix blocks were getting “Entry [ID]” preview values if their entry type didn’t have a UI Label. (#18484)
• Fixed a bug where nested elements could be deleted when reverting content from a revision. (#18950)
• Fixed a styling issue.
• Fixed a moderate-severity authorization bypass vulnerability.
• Fixed a low-severity authorization bypass vulnerability.

4.18.1

• Fixed a bug where some element index actions weren’t working. (#18938)
• Fixed a moderate-severity authorization bypass vulnerability.
• Fixed a low-severity authorization bypass vulnerability.

5.10.2

• Updated Twig to 3.26. (#18924, #18926)
• Fixed a bug where editable tables registered unexpected debug toolbar output. (#18895, #18902)
• Fixed a JavaScript error that occurred when pasting nested entries within Matrix fields in Blocks view. (#18912)
• Fixed an error that could occur when editing elements on Apache servers. (#18923)

6.0.0-alpha.4

• Added support for plugins to register Laravel scheduled tasks that run via php artisan schedule:run.
• Updated yiisoft/html to 4.1.0. (#18920)
• Updated elvanto/litemoji to 5.2.0. (#18917)
• Updated pragmarx/google2fa to 9.0.0. (#18919)
• Fixed an error that occurred when opening element selector modals with string sources values. (#18915)
• Added “Elements” and “Deprecations” panels to Laravel Debugbar. (#18897)
• Fixed a bug where legacy redirect responses were not being returned as a redirect (#18893)
• Fixed an error that could occur when saving filesystems with null transient settings. (#18909)
• Fixed a bug where plugin routes were not being registered with the web middleware.
• Fixed an error that could occur when storing image transform indexes. (#18899)
• Fixed an error when loginPath or logoutPath was set to false in GeneralConfig. (#18894)
• Fixed a bug where plugin-registered Twig variables weren’t available via the craft template variable. (#18903)
• Fixed an error that occurred when using the legacy cache service with a new dependency object (#18904)
• Fixed a bug where clearing submitted values could retain the previous value. (#18905)
• Fixed a bug where a legacy Yii action controller would result in a 404 when returning null as the response (#18907)
• Fixed an error that could occur because ol and ul were not normalizing the attributes (#18907)
• Fixed an error that occurred when trying to upload an asset through a legacy filesystem plugin (#18908)

6.0.0-alpha.3

• Added the compiledTemplatesPath config setting. (#18861)
• Added a missing migration that adds minAuthors to the section table (#18875)
• Fixed a bug where the cpTrigger would be appended twice to the URL after running migrations from the control panel. (#18858)
• Fixed an error that occurred when rendering element indexes with blank source headings. (#18891)
• Fixed an error that occurred when uninstalling plugins. (#18862)
• Fixed an error that could occur when Control Panel HTML values were passed as Stringable objects. (#18883)
• Fixed a bug where plugin package config files could affect plugin settings before being published. (#18885)
• Fixed a bug where the control panel would continuously poll for queue job info, even if there were no active jobs. (#18853)
• Fixed a bug where legacy redirect responses were not being handled. (#18860)
• Fixed a bug where email addresses couldn’t be saved when applying unpublished user drafts. (#18882)
• Fixed a bug where the Updates utility wasn’t showing available updates. (#18884)

5.10.1

• Fixed a bug where assets’ Alternative Text values weren’t always being set when replacing an existing asset’s file. (#18713)
• Fixed a bug where element indexes had horizontal scroll bars while loading. (#18870)
• Fixed a bug where elements selected by Link fields weren’t getting replaced with their localized versions when propagating content for newly-created elements to other sites. (#18743)
• Fixed a bug where it wasn’t possible to replace the selected element within Link fields with a localized version of the same element. (#18873)
• Fixed a bug where nested entries weren’t getting their Post Date values set. (#18872)
• Fixed a bug where it was difficult to interact with element source paths within element selector modals. (#18876)

4.18.0.1

• Fixed a bug where the |default filter only accepted string values. (#18886)