Skip to content

Latest commit

 

History

History
719 lines (487 loc) · 63.6 KB

CHANGELOG.md

File metadata and controls

719 lines (487 loc) · 63.6 KB

RailsAdmin Changelog

Full Changelog

3.1.2 - 2023-03-23

Full Changelog

Fixed

  • Fix install failing with importmap setup (aca22b6, #3609)
  • Fix to show non-eager-loaded models which are explicitly configured (87c9d5b, #3604)
  • Fix rails_admin.dom_ready event not triggered with jQuery on (2ee43de, 33773d7, #3600)
  • Restore caching in RailsAdmin::Config::Model#excluded? (#3587)
  • Optimize/simplify viable_models file path to class name logic (#3589)

3.1.1 - 2022-12-18

Full Changelog

Changed

  • Relax Font-Awesome dependency to allow Webpacker users to stay on 5.x (3a7f348, #3565)

Removed

  • Remove unused glphyicon assets (#3578)

Fixed

  • Simplify uses of defined? (#3561)
  • Define jQuery object in separate file to support esbuild (#3571)
  • Fix filter box being duplicated on browser back (c6b1893, #3570)
  • Fix sidebar menu expanding horizontally, preventing vertical scroll (9997c10, #3564)

3.1.0 - 2022-11-06

Full Changelog

Fixed

  • Fix to use defer instead of async to ensure script loading order (2a40976, #3513)
  • Improve filter method select box appearance (#3559)

3.1.0.rc2 - 2022-10-02

Full Changelog

Fixed

  • Fix sidebar style broken in attempt to support Bootstrap 5.2 (d7abba4, #3553)

3.1.0.rc - 2022-09-22

Full Changelog

Added

  • Add ability to limit filter operators (be9a75e)
  • Support filtering has_one associations (9657774)
  • Add ability to set default order of PaperTrail versions (a1c4c67, #3095)
  • Add block-style DSL support for extension adapters (951b708)
  • Make sidebar navigation collapsible (e8cb8ed, #3198)
  • Add ability to show a help text under the search box (94f16fb)
  • Support for ActiveStorage direct uploads (e13c7e2, #3296)

Changed

  • Load ActionText assets statically to enable full-featured setup (458d0fb, #3251, #3386)
  • Change ES Module processing not to affect non-RailsAdmin assets (f8219bf)
  • Change RailsAdmin initialization process to evaluate the config block immediately but load constants lazily (#3541, 33e9214)
  • Restore the loading indicator back (32e6b14, b9ee7f0, #3500)

Fixed

  • Fix Bootstrap 5.2 compatibility (ef76fce)
  • Fix filtering select widget options being empty on browser back (3cffc00)
  • Fix RailsAdmin widgets not activated after a validation error (a604da5)
  • Fix export action didn't use export section for eager loading (4cc3f30, #1954)
  • Fix Dart Sass 2.0 division deprecations (#3544, 3a177c2)
  • Fix unable to focus elements on modals opened from remote forms (#3539, #3538)
  • Improve pagination appearance on smaller screens (a2e366e, #3516)
  • Fix the value of submit buttons being lost on submission (60e1150, #3513)
  • Fix breaking with a has_and_belongs_to_many association with scope given (c2bf6db, #2067)
  • Fix nested fields don't toggle properly after pushing 'Add a new ...' button (d1f1154, #3528)

3.1.0.beta - 2022-06-20

Full Changelog

Added

Changed

  • Update vendorized jQuery to 3.6.0 (#3524)
  • Enable frozen string literals across the project (#3483)

Fixed

  • Fix edit user link in the top navigation pointing to wrong URL (#3531)
  • Fix MultipleActiveStorage field deleting previous attachments when updating a record in Rails 7.0 (974c54a, #3520)
  • Fix remote form submission breaking when used with HTTP/2 (#3515)
  • Fix to maintain 2.x hover / active behavior for side navigation links (#3511)
  • Fix default sort by behavior when list.sort_by points to a field with a table reference for :sortable (#3509, 9959925)
  • Fix to insert whitespace after sidebar navigation icon to maintain visual consistency (#3504)
  • Fix orderable multiselect buttons not rendered correctly (#3506)
  • Fix to use badges instead of labels, which are removed in Bootstrap 5 (#3503)

3.0.0 - 2022-03-21

Full Changelog

Fixed

  • Fix table sorting not working (83a0c88, #3497)
  • Fix reset button by the query box not working (4a583e9)

3.0.0.rc4 - 2022-03-13

Full Changelog

Added

  • Instruct users on potential issues with npm package installation (2b0594c, c7a74f1)

Changed

  • Upgrade vendorized Flatpickr to 4.6.11 (7f8c831)

Fixed

  • Fix not utilizing full browser width after Bootstrap 5 upgrade (#3493)
  • Fix the style for show views broken on Bootstrap 5 upgrade (#3491)
  • Fix Pundit 2.2 deprecation for not using Pundit::Authorization (e38eb46)
  • Fix JS issues when navigating across the main app and RailsAdmin (eb4a185, #3484)

3.0.0.rc3 - 2022-02-27

Full Changelog

Fixed

  • Fix the style of list scope tabs (#3477)
  • Fix rake tasks executed twice (7d56cd6)
  • Fix the style of the header user link when show_gravatar is false (#3475)
  • Fix 'Cancel' button for delete/bulk_delete action also didn't work (1fa8486, #3468)
  • Fix failing to export after introducing Turbo Drive (c749d93, #3461 (comment))

3.0.0.rc2 - 2022-02-20

Full Changelog

Added

Fixed

  • Fix 'Save and add another', 'Save and edit', 'Cancel' buttons didn't work right (ac0a563, #3468)
  • Fix failing to precompile assets when the database connection is unavailable (#3470, #3469)
  • Fix custom theme overrides not working (3d7f3b3, #3466)

3.0.0.rc - 2022-02-06

Full Changelog

Added

  • Support Mongoid's Storage Field Names (cefa23c, #1745)
  • Allow save/delete operations to be disabled based on an object's #read_only? status (9cd7541, #1684)
  • Allow customizing model's last created time (d6d380a, #3010)
  • Add ability to hide the dashboard history section (#3189)
  • Add model scope configuration option, which enables 'unscoped' mode (8d905f9, #1348)

Changed

  • Switch from pjax to Turbo Drive, due to pjax's low maintenance activity (#3461, #3435)
  • Upgrade Bootstrap to 5.1.3 (#3455, #3083)
  • Switch datetime picker library to Flatpickr (#3455)

Removed

  • Drop support for Ruby 2.5 (#3430)
  • Remove Sections::List#sort_reverse because of having very limited usecase (0c7bc61, #1181)

Fixed

  • Fix failing to detect encoding with JDBC MySQL adapter (0dfe2e4)
  • Fix unable to start app when using redis-session-store (#3462)
  • Fix ActiveRecord ObjectExtension has_one setter breaks with custom primary key class (0e2e0e4, #3460)
  • Fix inheritance of parent_controller not updated properly when controllers were eagerly loaded (#3458)
  • Fix to retrieve actions correctly in the action #bulk_action (#3407)
  • Fix issue when RailsAdmin::MainController needs to dispatch a method call using #respond_to_missing? (da51b91, #3454)
  • Fix modal foreign keys are not prepopulated unless the association inverse_of is configured (75504d0, #2585)

3.0.0.beta2 - 2021-12-25

Full Changelog

Fixed

  • Fix NameError 'uninitialized constant RailsAdmin::Version' on install (d2ad520, #3452)

3.0.0.beta - 2021-12-20

Full Changelog

Added

  • Rails 7.0.0 support (011b9ae, 670d803)
  • Webpacker support (#3414)
  • Add #link_target to action configuration (#3419)
  • Add not like (=does not contain) operator (#3410)
  • Support for PostgreSQL citext data type (#3413, #2177)
  • Allow #configure to handle multiple fields for a section at once (#3406, #2667)
  • Add has_one id setters/getters, eliminating the need for explicitly defining them (42f0a5f, #2625)
  • Support for Mongoid's has_and_belongs_to_many custom primary_key (3f67637, #3097)
  • Support for eager-loading arbitrary associations (4404758, #2928)
  • Support for nullable boolean field (7583369, #3145)
  • Support for configuration reload in development mode (e4ae669, #2726, 08f50aa, #3420)
  • Add 'No objects found' placeholder in filtering-select as well (7e3a1a6, #3332)
  • Add inline_edit to HasManyAssociation as well (798ab1b, #1911)
  • Add hover highlight to the list table for better visibility (#3221)
  • Add ability to show disabled actions, as well as completely hiding (6c877ea, #1765)
  • Add the message 'no records found' when a list is empty (#3365, a5fe6f8, #3329)
  • Add a way to clear belongs_to selection using mouse (ac3fe35, #2090)
  • Add HTML5 validation for float-like field types (#3378, #3289)

Changed

  • Remove horizontal pagination and always use sidescroll view for list action table (d51e943)
  • Replace image assets with Font Awesome icons (a0a568b)
  • Switch templates from HAML to ERB (#3425, #3439, #3173)
  • Rewrite some JavaScript code not to use jQuery (#3416, #3417)
  • Upgrade FontAwesome to 5.15.4 (cb1ac73)
  • Stop using AbstractObject and use raw model instances with extension (af88091, #2847)
  • Switch from jquery_ujs to rails-ujs (#3390, dea63f4)
  • Make colorpicker field use HTML5 native color picker (#3387)
  • Change to use ISO 8601 time format for browser-server communication, instead of localized value (01e8d5f, #3344)

Removed

  • Remove dependency for builder and remotipart (#3427, 58b76d1)
  • Remove capitalization helper, letting I18n to perform necessary transformation (#3396)
  • Remove jQuery Migrate (#3389, b385d4d)
  • Remove the legacy history adapter(#3374, b627580)
  • Drop support for Ruby < 2.5 and Rails 5.x(decf428, 17e20b6)

Fixed

  • Reduce object allocations when rendering main navigation menu (#3412)
  • Fix N+1 queries for ActiveStorage attachments (e4d5b2f, #3282)
  • Fix to convert DateTime format for Moment.js as much as possible (6d5c049, #2736, #3009)
  • Fix config.parent_controller to work after the class loading (5bd9805, #2790)
  • Fix NoMethodError when Mongoid's raise_not_found_error is false (973bd8e, #2623)
  • Fix NoMethodError "undefined method 'has_one_attached'" (e4ae669, #3025)
  • Fix NoMethodError "undefined method `label' for nil:NilClass" on export (f2104b5, #1685)
  • Fix Kaminari's custom param_name was not used in history_index and history_show (#3227, #3400)
  • Fix Gravater and email were not shown when the current user is not editable (bd44929, #3237)
  • Fix RailsAdmin::Config.reset didn't clear the effect of previous included_models/excluded_models (1190d51, #3305)
  • Fix duplication of filtering-multiselect on browser back (3c10b09, #3211)
  • Fix no error message is shown on failure with dependent: :restrict_with_error (bf353cc, #3323)
  • Fix read-only associations are shown empty if it has no value (7580f33, #2681)
  • Fix hidden fields taking up some space (5aaee51, #3380)
  • Fix to show validation errors in modals (f67defb, #1735)
  • Fix image file detection by using Mime::Type (#3398, #3239)
  • Fix 'no objects' message not showing up in filtering-multiselect widget (aa5545c)
  • Fix 'Delete Image' translation does not work well in some languages (#3382, #3260)
  • Fix polymorphic associations don't work with namespaced classes (#3377, #3376)
  • Fix Boolean pretty_value to include default fallback (#3379)
  • Fix history#index not supporting models with custom version classes (ed19f9e)
  • Fix models stored in eager_load_paths are not picked up by #viable_models (#3373, 238f18e)
  • Fix polymorphic associations don't work with namespaced classes(#3376)

2.2.1 - 2021-08-08

Full Changelog

Fixed

  • Fix missing select options for single-select enum filters(#3372)

2.2.0 - 2021-07-24

Full Changelog

Added

  • Support for PaperTrail's alternative versions association name(#3354)

Changed

Removed

  • Remove unnecessary devise patch(#3352)

Fixed

2.1.1 - 2021-03-14

Full Changelog

Fixed

  • Fix AbstractObject's proxying was incompatible with keyword arguments in Ruby 3.0 (#3342)

2.1.0 - 2021-02-28

Full Changelog

Added

  • Ability to set default filter operator for fields (#3318)
  • Shrine 3.x support (#3257)
  • Rails 6.1 compatibility (f0c46f1e)

Fixed

  • Some translation entries of filtering-multiselect weren't localizable (#3315)
  • Thumbnail generation breaks when used with ActiveStorage 6.x and ruby-vips (#3255, 2dba791c)
  • Hide present/blank filter options for required fields (#3340)
  • Fix to show correct filename for multiple attachments (#3295)
  • Fix encoding detection was incompatible with DB connection proxies like active_record_host_pool gem (#3313)
  • Fix hidden fields breaking indentation (#3278, #2487)

Removed

  • Remove yell_for_non_accessible_fields option since it has no effect since 0.5.0 (#3249)

2.0.2 - 2020-03-17

Full Changelog

Fixed

  • Fix to use I18n to translate the button 'Reset filters'(#3248)

Security

  • Fix XSS vulnerability in nested forms(d72090ec)

2.0.1 - 2019-12-31

Full Changelog

Fixed

  • Fix Zeitwerk incompatible behavior of autoloading constants during initialization(#3190, e275012b)
  • Fix empty fields being hidden regardless of compact_show_view(#3213)
  • Fix filter_scope not using default_search_operator as default(#3212)
  • Fix PaperTrail integration returning nil as username instead of whodunnit(#3210)
  • Fix Sprockets 4 incompatibility of vendorized Fontawesome(#3204, #3207)

Security

  • Update moment.js to 2.24.0 to address security vulnerability(#3182, #3201)

2.0.0 - 2019-08-18

Full Changelog

Fixed

  • Fix support for belongs_to with custom primary key was broken in 2.0.0.rc(#3184, 0e92ca43)
  • Fix missing translation en.admin.misc.ago(#3180)

2.0.0.rc - 2019-08-04

Full Changelog

Added

  • Add Support for CarrierWave 2.0 multiple file upload's keep, append and reorder feature(fb093e04)
  • Add ability to configure way how custom actions show up in root/top/sidebar navigation(#2844)

Changed

  • [BREAKING CHANGE] Stop authorization adapters assigning attributes on create and update, just check for permission instead(#3120, c84d1703)
  • [BREAKING CHANGE] Do not show tableless models by default(#3157, 87b38b33)
  • [BREAKING CHANGE] Convert empty string into nil for nullable string-like fields to achieve uniqueness-index friendliness(#2099, #3172, 3f9ab1cc)
  • Extract head from application template for ease of customization(#3114)
  • Rename delete_key to delete_value, used to identify which file to delete in multiple file upload(8b8c3a44)
  • Get rid of CoffeeScript, use plain JavaScript instead(#3111, #3168)
  • Replace sass-rails with sassc-rails(#3156)

Removed

  • Drop support for CanCan, please use its successor CanCanCan(6b7495f1)
  • Drop support for CanCanCan legacy can :dashboard style dashboard ability notation(5bebac24)
  • Drop Refile support due to maintenance inactivity(25ae06a9)

Fixed

  • Fix PaperTrail pagination breaks when Kaminari's page_method_name is set(#3170, 136b943c)
  • Fix failing to pass config location to CKEditor(#3162, c38b76d7)
  • Fix CarrierWave multiple file uploader breaking when used with Fog(#3070)
  • Fix placeholder being picked up as a selection in filtering-multiselect(#2807, 15502601)
  • Fix breaking with has_many and custom primary key(#1878, be7d2f4a)
  • Fix to choose right LIKE statement in per-model basis(#1676, 4ea4575e)
  • Fix polymorphic associations not using STI base classes for polymorphic type(#2136)

Security

  • Add rel="noopener" to all target="_blank" links to prevent Reverse tabnabbing(#2960, #3169)

2.0.0.beta - 2019-06-08

Full Changelog

Added

Changed

  • Vendorize font-awesome to allow using different version in app(#3039)
  • Stop inlining JavaScripts for CSP friendliness(#3087)
  • Richtext editors now uses CDN-hosted assets(#3126)

Removed

  • Remove deprecated DSL syntax for richtext editors(e0b390d9)
  • Drop support for Ruby 2.1 and Rails 4.x(dd247804)

Fixed

  • Fix Mongoid query and filter parsing value twice(#2755)
  • Fix thread-safety issues(#2897, #2942, 1d22bc66)
  • Fix compact_show_view not showing Boolean falses(#2416)
  • Fix PaperTrail fail to fetch versions for STI subclasses(#2865)
  • Fix Dragonfly factory breaks if a model not extending Dragonfly::Model is passed(#2720)
  • Fix PaperTrail adapter not using Kaminari's page_method_name for pagination(#2712)
  • Fix #bulk_menu was not using passed abstract_model (#2782)
  • Fix wrong styles when using multiple instances of CodeMirror(#3107)
  • Fix password being cleared when used with Devise 4.6(72bc0373)
  • ActiveStorage factory caused const missing for Mongoid(#3088, db927687)
  • Fix exact matches were using LIKE, which was not index-friendly(#3000)
  • Middleware check failed when using RedisStore(#3076)
  • Fix field being reset to default after an error(#3066)

1.4.2 - 2018-09-23

Full Changelog

Fixed

  • Fix can't modify frozen Array error on startup(#3060)
  • Fix deprecation warning with PaperTrail.whodunnit(#3059)

1.4.1 - 2018-08-19

Full Changelog

Fixed

  • Export crashes for models with JSON field(#3056)
  • Middlewares being mangled by engine initializer, causing app's session store configuration to be overwritten(#3048, 59478af9)

1.4.0 - 2018-07-22

Full Changelog

Added

Fixed

  • Make code reloading work(#3041)
  • Improved support for Rails API mode, requiring needed middlewares in engine's initializer(#2919, #3006)
  • Make the link text to uploaded file shorter, instead of showing full url(#2983)
  • Fix duplication of filters on browser back(#2998)
  • Fix "can't modify frozen array" exception on code reload(#2999)
  • Fix incorrectly comparing numeric columns with empty string when handling blank operator(#3007)

1.3.0 - 2018-02-18

Full Changelog

Added

  • Configurability for forgery protection setting(#2989)
  • Configurability for the number of audit records displayed into dashboard(#2982)
  • Add limited pagination mode, which doesn't require count query(#2968)
  • Prettier output of JSON field value(#2937, #2973, #2980)
  • Add markdown field support through SimpleMDE(#2949)
  • Checkboxes for bulk actions in index page can be turned off now(#2917)

Fixed

  • Parse JS translations as JSON(#2925)
  • Re-selecting an item after unselecting has no effect in filtering-multiselect(#2912)
  • Stop memoization of datetime parser to handle locale changes(#2824)
  • Filters for ActiveRecord Enum field behaved incorrectly for enums whose labels are different from values(#2971)
  • Client-side required validation was not enforced in filtering-select widget(#2905)
  • Filter refresh button was broken(#2890)

Security

  • Fix XSS vulnerability in filter and multi-select widget(#2985, 44f09ed7)

1.2.0 - 2017-05-31

Full Changelog

Added

  • Add ILIKE support for PostgreSQL/PostGIS adapter, multibyte downcase for other adapters(#2766)
  • Support for UUID query(#2766)
  • Support for Haml 5(#2840, #2870, #2877)
  • Add instance option to append a CSS class for rows(#2860)

Fixed

  • Remove usage of alias_method_chain, deprecated in Rails 5.0(#2864)
  • Load models from eager_load, not autoload_paths(#2771)
  • jQuery 3.0 doesn't have size(), use length instead(#2841)
  • Prepopulation of the new form didn't work with namespaced models(#2701)

1.1.1 - 2016-12-25

Full Changelog

Fixed

  • CSV export broke with empty tables(#2796, #2797)
  • ActiveRecord adapter's #encoding did not work with Oracle enhanced adapter(#2789)
  • ActiveRecord 5 belongs_to presence validators were unintentionally disabled due to initialization mishandling(#2785, #2786)
  • Destroy failure caused subsequent index action to return 404, instead of 200(#2775, #2776)
  • CSVConverter#to_csv now accepts string-keyed hashes(#2740, #2741)

Security

1.1.0 - 2016-10-30

Full Changelog

Added

Fixed

  • Fix nested has_many form failing to add items(#2737)

1.0.0 - 2016-09-19

Full Changelog

Added

  • Introduce setup hook for authorization/auditing adapters(ba2088c6)
  • Add viewport meta tag for mobile layout adjustment(#2664)
  • Support for ActiveRecord::Enum using string columns(#2680)

Changed

  • Limit children for deletion notice(#2491)
  • [BREAKING CHANGE] Change parent controller to ActionController::Base for out-of-box support of Rails 5 API mode(#2688)
    • To keep old behavior, add config.parent_controller = '::ApplicationController' in your RailsAdmin initializer.

Fixed

  • ActiveRecord Enum fields could not be updated correctly(#2659, #2713)
  • Fix performance issue with filtering-multiselect widget(#2715)
  • Restore back rails_admin_controller?(#2268)
  • Duplication of autocomplete fields when using browser back/forward buttons(#2677, #2678)
  • Filter refresh button was broken(#2705, #2706)
  • Fix presence filtering on boolean columns(#1099, #2675)
  • Pundit::AuthorizationNotPerformedError was raised when used with Pundit(#2683)

1.0.0.rc - 2016-07-18

Full Changelog

Added

  • Rails 5 support
  • PaperTrail 5 support(9c42783a)
  • Support for multiple configuration blocks(#1781, #2670)
  • Default association limit is now configurable(#2508)

Changed

  • Prefix kaminari bootstrap views with ra- to avoid name conflict(#2283, #2651)
  • Gravatar icon is now optional(#2570)
  • Improve bootstrap-wysihtml5-rails support(#2650)
  • Explicitly call the #t method on I18n(#2564)
  • Improve dashboard performance by querying with id instead of updated_at(#2514, #2551)
  • Improve encoding support in CSV converter(#2508, dca8911f)
  • Add SVG file extension to the image detection method(#2533)
  • Update linear gradient syntax to make autoprefixer happy(#2531)
  • Improve export layout (#2505)

Removed

  • Remove safe_yaml dependency(#2397)
  • Drop support for Ruby < 2.1.0

Fixed

  • Pagination did not work when showing all history(#2553)
  • Make filter-box label clickable(#2573)
  • Colorpicker form did not have the default css class form-control(#2571)
  • Stop assuming locale en is available(#2155)
  • Fix undefined method error with nested polymorphics(#1338, #2110)
  • Fix issue with nav does not check pjax config from an action(#2309)
  • Model label should be pluralized with locale(#1983)
  • Fix delocalize strftime_format for DateTime.strptime to support minus(#2547)
  • Fix Syntax Error in removal of new nested entity(#2539)
  • Fix momentjs translations for '%-d' format day of the month(#2540)
  • Fix Mongoid BSON object field (#2495)
  • Make browser ignore validaitons of removed nested child models(#2443, #2490)

0.8.1 - 2015-11-24

Full Changelog

Fixed

  • vendor/ directory was missing from gemspec(#2481, #2482)

0.8.0 - 2015-11-23

Full Changelog

Added

  • Feature to deactivate filtering-multiselect widget's remove buttons through removable? field option(#2446)
  • Pundit integration(#2399 by Team CodeBenders, RGSoC'15)
  • Refile support(#2385)

Changed

  • Some UI improvements in export view(#2394)
  • rails_admin/custom/variables.scss is now imported first to take advantage of Sass's default!(#2404)
  • Proxy classes now inherit from BasicObject(#2434)
  • Show sidebar scrollbar only on demand(#2419)
  • RailsAdmin no longer gets excluded from NewRelic instrumentation by default(#2402)
  • Improve efficiency of filter query in Postgres(#2401)
  • Replace old jQueryUI datepicker with jQuery Bootstrap datetimepicker (#2391)
  • Turn Hash#symbolize into a helper to prevent namespace conflict(#2388)

Removed

  • The L10n translation admin.misc.filter_date_format datepicker search filters, has been dropped in favor of field oriented configuration (#2391)

Fixed

  • AR#count broke when default-scoped with select(#2129, #2447)
  • Datepicker could not handle Spanish date properly(#982, #2451)
  • Paperclip's attachment_definitions does not exist unless has_attached_file-ed(#1674)
  • .btn class was used without a modifier(#2417)
  • Filtering-multiselect widget ignored order(#2231, #2412)
  • Add missing .alert-dismissible class to flash(#2411)
  • Keep field order on changing the existing field's type(#2409)
  • Add button for nested-many form in modal disappeared on click(#2372, #2383)

Security

  • Fix XSS vulnerability in polymorphic select(#2479)

0.7.0 - 2015-08-16

Full Changelog

Added

  • Support for ActiveRecord::Enum (#1993)
  • Multiselect-widget shows user friendly message, instead of just being blank (#1369, #2360)
  • Configuration option to turn browser validation off (#2339, #2373)

Changed

  • Multiselect-widget inserts a new item to the bottom, instead of top (#2167)
  • Migrated Cerulean theme to Bootstrap3 (#2352)
  • Better html markup for input fields (#2336)
  • Update filter dropdown button to Bootstrap3 (#2277)
  • Improve navbar appearance (#2310)
  • Do not monkey patch the app's YAML (#2331)

Fixed

  • Browser validation prevented saving of persisted upload fields (#2376)
  • Fix inconsistent styling in static_navigation (#2378)
  • Fix css regression for has_one and has_many nested form (#2337)
  • HTML string inputs should not have a size attribute valorized with 0 (#2335)

Security

  • Fix XSS vulnerability in filtering-select widget
  • Fix XSS vulnerability in association fields (#2343)