v6.18.0

What's new

• Customizable crop ratios #14630 by @jackmcdade
• Add --preset option to assets:generate-presets #14626 by @ryanmitchell

What's fixed

• Fix CP login bouncing after Inertia auto-follow #14632 by @jasonvarga
• Fix flaky TracksLastModified file timestamp test #14634 by @jasonvarga
• Hide redundant 'This field' timezone row in date pickers #14635 by @jasonvarga
• Simplify crop aspect ratio config formats #14633 by @jasonvarga

v6.17.0

What's new

• Add configurable timezone for date fields in the Control Panel #14554 by @duncanmcclean
• Add disabled and readOnly props to TimePicker component #14620 by @duncanmcclean
• Add Timezones components #14612 by @jasonvarga
• Allow overriding date format preset options #14600 by @jasonvarga

What's fixed

• Dirty state fixes #14592 by @jackmcdade
• Localize timezone tooltip in DatePicker #14596 by @jasonvarga
• Fix asset browser actions inside selector stack #14565 by @duncanmcclean
• Fix date-only formats shifting days due to timezone conversion #14552 by @duncanmcclean
• Avoid rendering time for dates in listings when appropriate #14599 by @jasonvarga
• Display timezone in DateRangePicker #14601 by @jasonvarga
• Fix date-only index fieldtype shifting across timezones #14602 by @jasonvarga
• Memoize preprocessed fields in Validator #14605 by @jasonvarga
• Show date fieldtype when searching for range #14606 by @jasonvarga
• Fix error when typing in a required date range field #14607 by @jasonvarga
• Fix HoverCard arrow not displaying #14611 by @jasonvarga
• Adjust translation method usage #14610 by @jasonvarga
• Fix stale asset listings across queued jobs #14617 by @ryanmitchell
• Fix replicator fields using wrong site context #14616 by @ryanmitchell
• Fix read-only/disabled states in Radio component #14621 by @duncanmcclean
• Lazy-load actions for collections, submissions & terms #14097 by @duncanmcclean
• Fix dated entries not syncing with origin revisions #14216 by @duncanmcclean
• Fix DateRangePicker crash when selecting first date in a range #13512 by @andrii-trush
• Fix moving custom section to 1st position in CP Nav #12993 by @duncanmcclean
• Fix read-only state in publish forms #14623 by @duncanmcclean
• Fix perPage limit in relationship stack listings #14629 by @wiktorm12
• Bump postcss from 8.5.9 to 8.5.13 #14595 by @dependabot
• Bump axios from 1.15.0 to 1.16.0 #14613 by @dependabot

v6.16.0

What's new

• Add support for strict null coalescence (???) in Antlers parsing #14545 by @marcorieser
• Add hooks to asset listings #14566 by @edalzell
• Show license key status in about and support:details commands #14574 by @jasonvarga
• Support icon sets in names #14579 by @jasonvarga

What's fixed

• Fix Comb search index delete() rewriting JSON when ref absent #14550 by @SUXUMI
• Include missing time chars in DateFormat::containsTime #14555 by @jasonvarga
• Update setup-cp-vite to install Vite 8 #14559 by @jasonvarga
• Fix cache invalidation when using custom fields in URI route #14564 by @duncanmcclean
• Fix validation bypass via spoofed Precognition-Validate-Only header #14557 by @duncanmcclean
• Restore selected site when resuming session #14562 by @duncanmcclean
• Fix relationship selector footer not sticking to bottom of stack #14569 by @duncanmcclean
• Fix asset selector drag-to-upload covering footer but not handling drops #14551 by @duncanmcclean
• Field margin balance #14567 by @jaygeorge
• Harden OrderBys #14572 by @jasonvarga
• Fix Asset field set to "Read-only" clipping filename #14575 by @jackmcdade
• Fix login redirects #14560 by @jasonvarga
• Design a better empty, read-only state for asset fields #14578 by @jackmcdade
• Avoid per-icon requests in the Icon storybook #14580 by @jasonvarga
• Fix updater crash when addon has no license #14573 by @duncanmcclean
• Lazy load Inertia page components #14582 by @jasonvarga
• Fix LivePreview listener leak and simplify Grid row updates #14583 by @jasonvarga
• Fix SavePipeline initial debounce delay #14586 by @jasonvarga
• Debounce LinkFieldtype URL writes #14584 by @jasonvarga
• Extract fieldtype update debounce to shared constant #14587 by @jasonvarga
• Wrap FieldAction instances with markRaw #14589 by @jasonvarga
• Color swatches get borders for contrast #14591 by @jackmcdade
• Deduplicate RelationshipInput in-flight item-data requests #14590 by @jasonvarga
• German translations #14561 by @helloDanuk
• French translations #14585 by @ebeauchamps

v6.15.0

What's new

• Frontend Elevated Sessions #14424 by @duncanmcclean
• Frontend Two-Factor Authentication #14525 by @duncanmcclean
• Add config for disabling Elevated Sessions #14464 by @1stevengrant

What's fixed

• Better Collaboration Avatars #14511 by @jackmcdade
• Fix addon settings blueprint cache collision with field settings blueprint #14509 by @duncanmcclean
• Show dashed border in assets fieldtype when field is read-only #14507 by @duncanmcclean
• Fix duplicate slugs allowed with depth-conditional routes #14508 by @duncanmcclean
• Combobox 2.0 #13843 by @duncanmcclean
• Persist active tab in URL hash on globals publish form #14515 by @duncanmcclean
• Always display time zone in DatePicker #14518 by @jasonvarga
• Fix blank page when visiting CP routes with invalid items #14517 by @jasonvarga
• Improve rate limiting #14475 by @ryanmitchell
• Hide default Statamic logo on frontend auth pages #14522 by @jasonvarga
• Update currencies dictionary #14520 by @tdrayson
• Allow extending asset preset generation command #14521 by @daun
• Fix NavBuilder crash when nav item has an unresolved children Closure #14523 by @v-Woody
• Fix Eloquent user merge setting roles and groups as model attributes #14526 by @duncanmcclean
• Fix /!/nocache and /!/csrf CSRF exemption on Laravel 13 #14533 by @ynamite
• Improve Link fieldtype in listings #14535 by @duncanmcclean
• Fix TypeError when asset last_modified meta is null #14530 by @v-Woody
• Fix Live Preview iframe becoming unscrollable after resizing in Chromium #14542 by @duncanmcclean
• Fix CP auth error when using multiple user providers #14543 by @andjsch
• Fix blank term edit screen and JS error for restricted users #14537 by @joshuablum
• Fix durationForHumans deprecation warning and rounding #14541 by @duncanmcclean
• Fix elevated session redirect for POST endpoints #14544 by @jasonvarga
• Always show success when using forgot password form #14539 by @jasonvarga
• Publish container tweaks #14548 by @jasonvarga
• Fix updateChildPageUris empty check never short-circuiting #14547 by @duncanmcclean
• French translations #14514 by @ebeauchamps

v5.73.21

What's fixed

• Always show success when using forgot password form #14539 by @jasonvarga

v6.14.0

What's new

• Fieldset sections #14297 by @jackmcdade
• Collaboration support #13974 by @joshuablum

What's fixed

• Use he-tree i18n prop for tree aria instructions #14499 by @jasonvarga
• Rename Add Block back to Add Set in replicators #14503 by @joshuablum
• Resolve Cascade content closure before checking content #14502 by @marcorieser
• Fix nocache database driver failing on MySQL with invalid UTF-8 #14505 by @jasonvarga
• Fix bard undos #14506 by @jackmcdade
• Fix collection listing search case insensitivity #14486 by @joshuablum
• Bump follow-redirects from 1.15.11 to 1.16.0 #14498 by @dependabot
• Bump dompurify from 3.3.3 to 3.4.0 #14500 by @dependabot

v6.13.0

What's new

• Frontend Passkeys #14453 by @duncanmcclean
• Allow control over who can be impersonated in UserPolicy #14469 by @ryanmitchell

What's fixed

• Fix Bard arrow keys/undo #14467 by @jackmcdade
• Fix visible he-tree accessibility text in tree view #14465 by @duncanmcclean
• Append to Bard Entry links #11468 by @edalzell
• Disable broadcast provider when broadcasting driver is null #14471 by @jasonvarga
• Make the collapsible section icon smaller to fit in with the rest of UI #14478 by @jaygeorge
• Add .npmrc file #14477 by @duncanmcclean
• Fix SVG sanitization tests #14483 by @duncanmcclean
• Use cursor: pointer when selecting from asset grid #14487 by @joshuablum
• Remove negative assertions from TestCase #14458 by @duncanmcclean
• Harden OrderBys #14474 by @duncanmcclean
• Harden query value resolution #14476 by @duncanmcclean
• French translations #14479 by @ebeauchamps
• Bump axios from 1.14.0 to 1.15.0 #14473 by @dependabot

v5.73.20

What's fixed

• Harden query value resolution #14476 by @duncanmcclean
• Harden OrderBys #14474 by @duncanmcclean
• Remove negative assertions from TestCase #14458 by @duncanmcclean

v6.12.0

What's new

• Add support for filtering conditions in Assets Tag #13936 by @jackmcdade

What's fixed

• Add padding around 2FA QR code for dark mode scanning #14460 by @duncanmcclean
• Fix form submissions with non-UTF-8 data crashing the CP listing #14461 by @duncanmcclean
• Remove deprecated function calls #14457 by @justindantzer
• Upgrade to Vite 8 #14459 by @jasonvarga
• Nested fields should respect read-only state #14351 by @duncanmcclean

v6.11.0

What's new

• Add support for public properties to PathDataManager #11697 by @marcorieser
• Add ability to filter submission exports #14432 by @jasonvarga
• Add elevated session guards to AssignGroups and AssignRoles actions #14450 by @jasonvarga

What's fixed

• Fix Stache index re-entrancy causing null URIs on cold stache #14181 by @o1y
• Fix form submission types #14430 by @daun
• Support decimal values in Range fieldtype #13096 by @hastinbe
• Add link tag to allowed Antlers tags #14438 by @edalzell
• Add @default support to Antlers content allowlists #14440 by @jasonvarga
• Centralize SVG sanitization and sanitize CSS in style tags #14442 by @jasonvarga
• Fix serializable_classes issues #14443 by @jasonvarga
• Fix addon settings always showing as migratable #14444 by @duncanmcclean
• Fix creating passkeys with JSON session serialization #14448 by @duncanmcclean
• Stop auto-logging in users after password reset #14454 by @jasonvarga
• Fix sync/desync on localizable nested fields #14335 by @duncanmcclean
• French translations #14431 by @ebeauchamps
• Bump defu from 6.1.4 to 6.1.6 #14434 by @dependabot
• Bump vite from 7.1.12 to 7.3.2 #14441 by @dependabot