Releases: govCMS/GovCMS
2.15.0 Release
Changes since 2.14.0:
- Compatible With PHP8.1
- Add Fake objects module.
2.14.0 Release
Changes since 2.13.0:
- Update Drupal core from 9.3.9 to 9.3.12
- Update Config Filter module from 2.2.0 to 2.3.0
- Update Inline Entity Form module from 1.0.0-rc9 to 1.0.0-rc11
- Update Webform module from 6.1.2 to 6.1.3
- Update Search API memory issues patch
2.13.0 Release
Changes since 2.12.1:
Modules updated
- Update drupal/google_analytics module from 3.1 to 4.0.0
- Update drupal/dynamic_entity_reference module from 1.12.0 to 1.16.0
- Update drupal/devel module from 4.1.3 to 4.1.5
- Update drupal/paragraphs module from 1.12 to 1.13.0
- Update drupal/chosen module from 3.0.1 to 3.0.2
- Update drupal/environment_indicator module from 4.0.4 to 4.0.5
- Update drupal/consumers module from 1.11 to 1.12.0
- Update drupal/entity_hierarchy module from 3.0.5 to 3.1.0
- Update drupal/dropzonejs module from 2.5.0 to 2.6.0
- Update drupal/menu_block module from 1.7.0 to 1.8.0
- Update drupal/migrate_file module from 2.0.0 to 2.1.1
- Update drupal/scheduled_transitions module from 2.2.0 to 2.2.1
2.12.1 Release
Hotfix
The GovCMS distribution has used asset-packagist.org for installing some JavaScript libraries via Composer required by following contribute Drupal modules:
DropzoneJS https://www.drupal.org/project/dropzonejs
Chosen https://www.drupal.org/project/chosen
We have replaced asset-packagist with custom packages as the domain https://asset-packagist.org/ has expired.
2.12.0 Release
GovCMS 2.12.0 Release Notes
Module update
- Drupal Core from 9.2.11 to 9.3.9 (https://www.drupal.org/sa-core-2022-005 ; https://www.drupal.org/sa-core-2022-006 ; https://www.drupal.org/project/drupal/releases/9.3.9)
- Metatag module from 1.16.0 to 1.19.0 (https://www.drupal.org/project/metatag/releases/8.x-1.19)
2.11.0 Release
GovCMS 2.11.0 Release Notes
Advice
- Distribution was updated on Friday 11 March 2022
- Deployments are scheduled to commence on Tuesday 15 March 2022
- Deployments will be conducted throughout the daytime and into the evening.
- Deployments to all websites should be completed by 10am Thursday 17 March 2022
- Nothing will be added/removed from the D9 distribution in this update.
- No outages are expected to websites during the deployment process.
- The D9 distribution will continue to be supported after this update.
Module update
- Drupal Core from 9.2.11 to 9.2.13 (https://www.drupal.org/sa-core-2022-003 ; https://www.drupal.org/sa-core-2022-004 ; https://www.drupal.org/project/drupal/releases/9.2.13 )
- Crop module from 2.1 to 2.2.0 (https://www.drupal.org/project/crop/releases/8.x-2.2)
- Entity Hierarchy module from 3.0.4 to 3.0.5 (https://www.drupal.org/project/entity_hierarchy/releases/3.0.5)
- Environment Indicator module from 4.0.3 to 4.0.4 (https://www.drupal.org/project/environment_indicator/releases/4.0.4)
- Migrate Source CSV module from 3.4 to 3.5.0 (https://www.drupal.org/project/migrate_source_csv/releases/8.x-3.5)
- Module Permissions module from 3.0 to 3.1.0 (https://www.drupal.org/project/module_permissions/releases/3.1.0)
- Pathauto module from 1.8.0 to 1.9.0 (https://www.drupal.org/project/pathauto/releases/8.x-1.9)
- Role Delegation module from 1.1.0 to 1.2.0 (https://www.drupal.org/project/role_delegation/releases/8.x-1.2)
- Shield module from 1.5.0 to 1.6.0 (https://www.drupal.org/project/shield/releases/8.x-1.6)
- Simple Sitemap module from 4.0.1 to 4.1.1 (https://www.drupal.org/project/simple_sitemap/releases/4.1.1)
Important reminder for projects with configuration management enabled
- The latest configuration from your production database has been created for you in GitLab in a branch called action-required/latest-config-export.
- You need to review and test the changes in the merge request. Once you are satisfied, please check the “Delete source branch” box and click “Merge”.
- This must be done before any new commits. Not rebasing your codebase could result in your new database configuration reverting to an older version when you next deploy, potentially causing issues for your website.
- If no merge request is lodged after a release then no configuration has changed and no further action is required.
More information
If you have any concerns, raise a ticket at https://www.govcms.support, alternatively subscribe to https://status.govcms.support/ for information on updates to the GovCMS platform
2.10.0 Release
Module update
- Address module from 1.9 to 1.10.0 (https://www.drupal.org/project/address/releases/8.x-1.10)
- Admin Toolbar module from 3.0.3 to 3.1.0 (https://www.drupal.org/project/admin_toolbar/releases/3.1.0)
- Real AES module from 2.3 to 2.4.0 (https://www.drupal.org/project/real_aes/releases/8.x-2.4)
- Role Delegation module 8.x-1.1 (https://www.drupal.org/project/role_delegation/releases/8.x-1.1)
- Scheduled Transitions module from 2.1.0 to 2.2.0 (https://www.drupal.org/project/scheduled_transitions/releases/2.2.0)
- Search API module from 1.21.0 to 1.23.0 (https://www.drupal.org/project/search_api/releases/8.x-1.23)
- Search APS Solr module from 4.2.1 to 4.2.7 (https://www.drupal.org/project/search_api_solr/releases/4.2.7)
- Bug Fix: Defining an upper limit to TFA Skip Validations
- Bug Fix: Issues using Paragraphs as Site Administrator
- Bug Fix: Quick Edit module not enabled by default in the GovCMS profile
2.9.0 Release
GovCMS 2.9.0 Release Notes
Advice
GovCMS released the Drupal 9 (D9) distribution on Monday 31 January 2022. Deployment is scheduled to commence from Tuesday 1 February 2022 and will be conducted throughout the daytime and into the evening.
It addresses a recent security advisory issued by Drupal.org. GovCMS assessed the moderately critical risks as they applied to D9 distribution, subsequently the security risks remained moderately critical.
No outages are expected to websites during the deployment process.
What is included in the update?
- Drupal Core from 9.2.10 to 9.2.11
https://www.drupal.org/project/drupal/releases/9.2.11
https://www.drupal.org/sa-core-2022-001 - Layout Builder Restrictions module from 2.11.0 to 2.12.0
https://www.drupal.org/project/layout_builder_restrictions/releases/8.x-2.12 - Migrate Plus module from 5.1 to 5.2.0
https://www.drupal.org/project/migrate_plus/releases/8.x-5.2 - Migrate Tools module from 5.0 to 5.1.0
https://www.drupal.org/project/migrate_tools/releases/8.x-5.1 - Password Policy module from 3.0 to 3.1.0
https://www.drupal.org/project/password_policy/releases/8.x-3.1 - Redirect module from 1.6 to 1.7.0
https://www.drupal.org/project/redirect/releases/8.x-1.7 - Search API Attachments module from 1.0.0-beta18 to 9.0.0
https://www.drupal.org/project/search_api_attachments/releases/9.0.0 - Shield module from 1.4 to 1.5.0
https://www.drupal.org/project/shield/releases/8.x-1.5 - Simple Sitemap module from 3.10.0 to 4.0.1
https://www.drupal.org/project/simple_sitemap/releases/4.0.1
What modules are added/removed in the distribution?
Nothing was added/removed from the distribution
What support will be provided after these update?
The D9 distribution will continue to be supported after this update.
What actions must my organisation do now?
- SaaS customers
All customers will need to check their site after the deployment to ensure there aren’t any issues.
❗Important notice for customers with configuration management enabled
Once the deployment is completed you will need to export the new configurations files and commit them back to master. Deployments to master branch of all websites should be completed by 10am Wednesday 2 February 2022, you can confirm this at https://status.govcms.support - PaaS customers
If you use the GovCMS D9 distribution. You should aim to apply this update to your distribution as soon as possible.
Updated files released on Monday 31 January 2022 and are available from https://github.com/govCMS/GovCMS/releases/tag/2.9.0
More information
- If you have any concerns, raise a ticket at https://www.govcms.support
- Stay up to date by subscribing for notifications at https://status.govcms.support/
2.8.0 Release
GovCMS 2.8.0 Release Notes
Advice
GovCMS released the Drupal 9 (D9) distribution on Friday 21 January 2022. Deployment is scheduled to commence from Monday 24 January 2022 and will be conducted throughout the daytime and into the evening.
It addresses a recent security advisory issued by Drupal.org. GovCMS assessed the moderately critical risks as they applied to D9 distribution, subsequently the security risks remained moderately critical.
No outages are expected to websites during the deployment process.
What is included in the update?
- Drupal Core from 9.2.9 to 9.2.10 - https://www.drupal.org/project/drupal/releases/9.2.10
- Simple OAuth module from 5.0.5 to 5.2.0 - https://www.drupal.org/project/simple_oauth/releases/5.2.0 https://www.drupal.org/sa-contrib-2022-002
- Devel module from 4.1.1 to 4.1.3 - https://www.drupal.org/project/devel/releases/4.1.3
- Honeypot module from 2.0.1 to 2.0.2 - https://www.drupal.org/project/honeypot/releases/2.0.2
- Key module from 1.14 to 1.15.0 - https://www.drupal.org/project/key/releases/8.x-1.15
- Layout Builder Restrictions module from 2.9 to 2.11.0 - https://www.drupal.org/project/layout_builder_restrictions/releases/8.x-2.11
- Search API module from 1.20.0 to 1.21.0 - https://www.drupal.org/project/search_api/releases/8.x-1.21
- Swiftmailer module from 2.0.0 to 2.2.0 - https://www.drupal.org/project/swiftmailer/releases/8.x-2.2
- Swiftmailer library from 6.2.7 to 6.3.0 - https://github.com/swiftmailer/swiftmailer/releases/tag/v6.3.0
- Token module from 1.9.0. to 1.10.0 - https://www.drupal.org/project/token/releases/8.x-1.10
What modules are added/removed in the distribution?
Noting was added/removed from the distribution
What support will be provided after these update?
The D9 distribution will continue to be supported after this update.
More information
- If you have any concerns, raise a ticket at https://www.govcms.support
- Stay up to date by subscribing for notifications at https://status.govcms.support/
2.7.0 Release
GovCMS 2.7.0 Release Notes
Advice
Over the weekend (11 December), a zero-day exploit (Log4Shell) in the popular Java logging library log4j was discovered that results in Remote Code Execution (RCE) by logging a certain string. See https://www.lunasec.io/docs/blog/log4j-zero-day/ and GHSA-jfh8-c2jp-5v3q for more background.
GovCMS is currently prioritising this Zero Day CVE (See CVE-2021-44228 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228). An urgent hotfix has been applied to temporarily mitigate the issue across the platform, until the D9 deployment tomorrow. There is no further action for D9 SaaS projects.
D9 PaaS customers will need to patch your projects ASAP. If you use the GovCMS base images, you will need to redeploy your projects for the change to take effect. If you don’t use the GovCMS base images you will need to take action to patch SOLR7 in your project as it pertains to your codebase.
Actions
-
❗ Important notice for SaaS customers with configuration management enabled
Once the deployment is completed you will need to export the new configurations files and commit them back to master. Deployments to all websites should be completed by 12pm Thursday 16 December 2021, you can confirm this at https://status.govcms.support/. -
D9 PaaS customers will need to patch your projects ASAP
If you use the GovCMS D9 distribution:
**If you have any projects running on Solr 7 or above, there is a temporary mitigation in place for existing environments, but you should upgrade to https://github.com/uselagoon/lagoon-images/releases/tag/21.12.0 base images as soon as practical (so newly created environments receive protection)
**You should prioritise this update to your distribution. Updated files released on Monday 13 December 2021 and are available from https://github.com/govCMS/GovCMS/releases/tag/2.7.0 -
If you don’t use the GovCMS D9 distribution:
** If you have any projects running on Solr 7 or above, immediately apply the SOLR7 patch as it pertains to your codebase
Release Information
- Distribution was updated on Monday 13 December 2021
- Deployments are scheduled to commence on Tuesday 14 December 2021
- Deployments will be conducted throughout the daytime and into the evening.
- No modules have been added/removed from the distribution
- No outages are expected to websites during the deployment process.
- The D9 distribution will continue to be supported after this update.
Module Update
- Drupal Core from 9.2.7 to 9.2.9 (https://www.drupal.org/project/drupal/releases/9.2.9)
- Webform module from 6.0.5 to 6.1.2 (https://www.drupal.org/project/webform/releases/6.1.2)
More information
If you have any concerns, raise a ticket at https://www.govcms.support, alternatively subscribe to https://status.govcms.support/ for information on updates to the GovCMS platform