bolt

To upgrade your existing Bolt 3.x installation, run

composer update

Released: 2021-06-08. Notable changes:

• Notify users of 4.0 stable release. #7890
• Improve Yaml export for compatibility with Bolt 4/5 Conimex import. #7910
• Killing PHP7.4.3 exceptions post-migration from older Bolt/PHP versions. #7906
• Fix: Fetching content by Taxonomy does not work if ContentType Name is different than ContentType Slug. #7894
• Allow rel-attribute by default. #7885
• Allow {{ fields(record = record) }}, to pass in a record not in global scope. #7912
• Add Composer 2 compatibility. #7913
• Fix: querying by ContentType slug (fixes regression introduced in #7894) #7916

To upgrade your existing Bolt 3.x installation, run

composer update

Released: 2021-06-07. Notable changes:

• Notify users of 4.0 stable release. #7890
• Improve Yaml export for compatibility with Bolt 4/5 Conimex import. #7910
• Killing PHP7.4.3 exceptions post-migration from older Bolt/PHP versions. #7906
• FIXED: Fetching content by Taxonomy does not work if ContentType Name is different than ContentType Slug. #7894
• Allow rel-attribute by default. #7885
• Allow {{ fields(record = record) }}, to pass in a record not in global scope. #7912
• Add Composer 2 compatibility. #7913

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.7/bolt-3.7.2.tar.gz
tar -xzf bolt-3.7.2.tar.gz --strip-components=1
php app/nut init

Bolt 3.7.2

Released: 2020-10-20. Notable changes:

• Security: Restrict filter options in Request in Twig context
• Security: Provide a stronger secret for UrlSigner
• Security: Allow only directories to be renamed with renameFolder #7867
• Fixes slashes in directory names #7871
• fixed typo 'an' to 'and' in README #7875
• Check if we have a current user, prevent "Trying to access array offset" extension #7869
• Fix ContextErrorException in PHP 7.4 #7868
• Update composer.json: Add "public-dir": "public" #7866

Special thanks go out to the following for responsibly disclosing a security issue to us:

• Charles Fol - https://www.ambionics.io/
• ERNW Research GmbH - https://ernw.de/

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.7/bolt-3.7.1.tar.gz
tar -xzf bolt-3.7.1.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2020-05-07. Notable changes:

• Security: Check CSRF on Preview page, and prevent renaming files to blacklisted filetypes #7853
• Change: Add hreflang to allowed_attributes #7855
• Chore: Updating dependencies #7842
• Fixed: Fix tag cloud, update NPM deps #7856
• Fixed: Select field with multiple contenttypes and display values results in a ContextErrorException #7849
• Fixed: Trying to access array offset on value of type null with PHP 7.4 #7843

Special thanks go out Sivanesh Ashok for responsibly disclosing the two fixed security issues to us.

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.7/bolt-v3.7.0.tar.gz
tar -xzf bolt-v3.7.0.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-11-12. Notable changes:

• Change: Dropped support for PHP 5.5, 5.6 and 7.0. #7826

This means the minimum requirement for Bolt 3.7 is now PHP 7.1. Because of this,
the default distributions will now include more recent versions of libraries,
providing better support for more recent versions of PHP 7.1 and higher
out-of-the-box. This is most noticeable with Doctrine, our database library.

If you're stuck on an older PHP version, you can keep using Bolt 3.6 for the
foreseeable future.

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.11.tar.gz
tar -xzf bolt-v3.6.11.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-11-10. Notable changes:

• Fixed: Fix tags in non-english languages and firefox caching selected options #7822
• Fixed: Fix typo in AccessControlListener.php #7809
• Security: Fix CRSF issues in file operations #7823
• Updated: Add download to allowed_attributes in HTML cleaner #7808
• Updated: Added comment about required IP in trustProxies #7807
• Updated: Export improvements #7812
• Updates: Update tests for Doctrine 2.10 compatibility #7824

Special thanks go out f4h4dbt for responsibly disclosing the CSRF issue to us.

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.9.tar.gz
tar -xzf bolt-v3.6.9.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-08-15. Notable changes:

• Security: Prevent XSS in system log (for authenticated users) #7802
• Security: Prevent XSS in image alt/title (for authenticated users) #7801
• Security: Prevent XSS in "Create file" in file manager (for authenticated users) #7800
• Fixes: Prevent update of guzzlehttp/psr7 to 1.6, fixes tests #7798
• Fixed: Fix taxonomy name collision #7799
• Fixed: Rebuilding assets, fixing tags cloud #7794

Special thanks go out to @marcingajda for his contributions, and to @KotatuBot
for responsibly disclosing the XSS issues to us.

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.9.tar.gz
tar -xzf bolt-v3.6.9.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-06-24. Notable changes:

• Added: Add abbreviations to CKeditor, using <abbr>-tag. #7783
• Fixed: Use isIterable over Traversable #7778
• Updated: Select2 updated to 4.0.7, since it finally works on IE 11 again. #7783

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.8.tar.gz
tar -xzf bolt-v3.6.8.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-05-23. Notable changes:

• Fixed: Make sure stripFields is set to array by default #7776

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.7.tar.gz
tar -xzf bolt-v3.6.7.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-04-11. Notable changes:

• Added: "Strip keys" option to excerpt of fields. #7759
• Added: Add information about how to set up custom CKeditor styles. #7769
• Change: Make sure accept_file_types is an INDEXED array, and disallow certain filetypes to be whitelisted. #7768
• Change: Make the bootstrap more robust. #7763
• Fixed: Compare filename extension lowercased #7772
• Fixed: Remove unsupported guzzlehttp version. #7762

This release comes with special thanks to Felipe Gaspar (fgaspar) for
responsibly reporting a potential security issue to us.

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.6.tar.gz
tar -xzf bolt-v3.6.6.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-03-07. Notable changes:

• Change: Allow lower and upper case file extensions #7751
• Change: Log a warning instead of info when permissions are not configured #7749
• Fixed: Add extra workaround for HTML-like and Image fields in preview #7754
• Updated: Update config.yml.dist #7748
• Updated: Update messages.pl_PL.yml #7747

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.5.tar.gz
tar -xzf bolt-v3.6.5.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

This release comes with special thanks to Andrea Santese (medu554) for responsibly
reporting a security issue to us, and to @JarJak for providing a fix.

Released: 2019-02-26. Notable changes:

• Security: Fix filemanager file extensions. #7745
• Added: Allow custom attributes for image fields. #7743
• Added: Limit when values of a select is an entity #7742
• Fixed: use the correct <sup> tag in allowed_tags. #7737

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.4.tar.gz
tar -xzf bolt-v3.6.4.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-01-24. Notable changes:

• Fixed asset url generation for Bolt install in subfolder. #7725
• Fixed: DBAL Sqlite schema diff bug, still needed on DBAL 2.9. #7733
• Fixed: Ignore default value alteration for MySQL TEXT and BLOB types. #7477
• Updated: Updates to bolt/thumbs and bolt/filesystem.
• Updated: Various updates to Symfony components, Composer packages and Front-end dependencies.

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.3.tar.gz
tar -xzf bolt-v3.6.3.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2018-12-12. Notable changes:

• Fixed: Add missing status filter. #7719
• Fixed: Add whitespace between status label and value. #7717
• Fixed: Allow for $locale optional parameter in localedatetime. #7723
• Fixed: Fix filters for Content without taxonomy. #7722
• Fixed: Fix listing without owner. #7716
• Fixed: Fix setting up legacy Contenttype object. #7720

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.2.tar.gz
tar -xzf bolt-v3.6.2.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2018-11-09. Notable changes:

• Fixed: Fix slugs for contenttypes that use a field other than 'title'. #7708
• Fixed: Handle Empty Search Parameter Error. #7712
• Fixed: Fix styling of panel actions. #7707

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.1.tar.gz
tar -xzf bolt-v3.6.1.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2018-11-02. Notable changes

• Fixed: Add missing part of select field values in repeaters. #7701
• Fixed: Fix for field type blocks with translation extension. #7705
• Fixed: Fix for Select values inside repeaters inside templatefields. #7636
• Fixed: Stop stack being queried in _macro.twig when stack is disabled. #7698
• Fixed: Temporary fix for repeater fields in changelog. #7683
• Updated: Javascript dependencies, including blueimp-file-upload.

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.0.tar.gz
tar -xzf bolt-v3.6.0.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2018-10-10. Notable changes

• Feature: Add cron "Minute", for timed publish #7598
• Feature: Drag-n-drop sorting for Content Blocks #7621
• Feature: Drag-n-drop sorting for Repeaters #7617, #7630, #7648
• Added: Add a Taxonomy repo and allow query content by taxonomy types #7522
• Added: Add class support to new storage and where applicable disable all legacy polyfills #7571
• Added: Add confirmation when deleting repeater / block set #7627
• Added: Add upload autoconfirm option #7511
• Added: Adding status to the listing page filter #7577
• Added: Enable the query listener and create pager instances for limited queries #7526
• Added: For BC content methods - Add default parameter values #7555
• Added: More improvements to New Storage Layer Compatibility #7291, #7654, #7657
• Added: Port across relations get from old storage #7527
• Added: Use senderMail in outgoing mail #7675
• Change: add 'heading' to the list of title-like field names. #7647
• Change: Use nesbot/carbon #7633
• Change: Use stable Passwordlib #7632
• Fixed: Add getUri for new storage #7668
• Fixed: Allow Methods To work with array or ContentType #7599
• Fixed: directives should always be cleared before re-parsing #7681
• Fixed: Don't use getContent on non-existing legacy items. #7584
• Fixed: Fix 'generate Lorem Ipsum' dummy content #7605
• Fixed: Fix error when searching for empty string #7625
• Fixed: Fix excerpts in new Storage #7604, #7624
• Fixed: Fix issue with html fields #7619
• Fixed: Fix New Content BC break (content->values) #7671
• Fixed: Fix preview #7660, #7663
• Fixed: Fix search results (Frontend, Omnisearch, Async) #7670
• Fixed: Fix that allows default sorting to work when using singular slug #7525
• Fixed: Handle ArrayAccess & array the same as 'taxonomy' key might not exist in either #7586
• Fixed: Improving relation get set interface #7506
• Fixed: Make getListingOrder() behave correctly on new Storage Layer. #7585
• Fixed: Minor Query Handler tweaks #7524
• Fixed: Two minor query parser bugs #7523
• Fixed:Fix for default ordering (plus code quality updates) #7564
• Updated: Update cocur/slugify to latest ^3.1.0 #7600
• Updated: Update Yarn dependencies, CKeditor and Codemirror #7601

Quick install:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.0-beta.7.tar.gz
tar -xzf bolt-v3.6.0-beta.7.tar.gz --strip-components=1
php app/nut init

Composer "create project":

composer create-project bolt/composer-install:3.6.x <MYPROJECT> --prefer-dist