Bug Fixes 💃🐛

• Fix #5428: encode UTF-8 Reply-To display names
• Restored safe links in title field instructions; #5413
• Fixed #5387 where Fluid field groups do not render child field validation errors in the Control Panel
• Fixed #5368 where Grid field switches from horizontal to vertical, but does not switch back to horizontal
• Resolved #5408 where file usage dropped Grid column references
• Fix handling of missing orderby fields in Parser
• Resolved #3998 where cloning an entry with an invalid IP address failed validation
• PHP deprecation in memcached
• Resolve image manipulation generation and cached file cleanup issues

Bug Fixes 💃🐛

• Fix #5428: encode UTF-8 Reply-To display names
• Restored safe links in title field instructions; #5413
• Fixed #5387 where Fluid field groups do not render child field validation errors in the Control Panel
• Fixed #5368 where Grid field switches from horizontal to vertical, but does not switch back to horizontal
• Resolved #5408 where file usage dropped Grid column references
• Fix handling of missing orderby fields in Parser
• Resolved #3998 where cloning an entry with an invalid IP address failed validation
• PHP deprecation in memcached
• Resolve image manipulation generation and cached file cleanup issues

Bug Fixes 💃🐛

• Fixed layout loop indexes and indexed array lookups after rendering a Multi Select pair without {index} #5389
• Fixed Grid and File Grid cloning after a validation error so retrying the save does not reassign the original field's columns #5391
• Fixed watermarks being applied to auto-generated thumbnails and other image manipulations that were not configured to use them #5373
• Fixed the Control Panel email newline setting so selecting CRLF also applies to quoted-printable email encoding when no explicit email_crlf override is configured #5398
• Fixed unnecessary filesystem exceptions when optional global variable directories do not exist #5400
• Fixed database backup progress moving backward when MySQL underestimates a table's row count #5401
• Fixed the default post-install message template to display the current copyright year on new installations #5371
• Improved updater authorization and compatibility across Control Panel session types #5405
• Improved member profile variable handling and conditional parsing in member profile and member list templates #5405
• Improved member import validation and role assignment handling, including rejecting member IDs that are already in use #5405
• Updated Control Panel permissions for database backups, SQL queries, Search and Replace, and Pro Search shortcut management. Submitting SQL queries and using Search and Replace now require a Super Admin #5405
• Improved rendering of Pro Search labels, channel title instructions, and custom Control Panel homepage settings #5405
• Improved comment author links and text handling when saving comment edits #5405
• Improved request validation when removing menu items and MSM sites #5405
• Improved Structure page title handling in template variables #5405
• Improved Pro Variables Table data handling while preserving support for existing stored values #5405

Developers 💻

• Added the ee_html_escape() helper for escaping literal text in HTML content and quoted attributes, and an inlineHtml() text formatter for limited inline formatting #5405
• Expanded regression coverage for layout parsing, Grid cloning, email configuration, installer and updater flows, member management, Control Panel permissions, comments, Pro Search, Pro Variables, and Structure #5389 #5391 #5398 #5405
• Updated the project README with a clearer overview of ExpressionEngine, installation guidance, and links to documentation and community resources #5402

Enhancements 🚀

• Improved accessibility for standard Channel Form File fields by associating generated labels with their upload inputs #4897

Bug Fixes 💃🐛

• Resolved #5335 where Channel Form {field_data} could remain unparsed for fields backed by numeric columns
• Resolved #4600 where image manipulations using reserved short names could cause file upload errors
• Fixed warnings when file width and height data is empty or malformed #5347
• Fixed PHP 8 compatibility issues in legacy database backup shortcuts, database function calls, and native error displays #5348
• Resolved #4925 where Control Panel form group toggles configured by name could cause JavaScript errors
• Resolved #4718 where invalid Live Preview extension route data could produce warnings instead of falling back to the original preview route
• Improved member field instruction display in the Control Panel #5355
• Improved Pro Search query handling #5356
• Improved template PHP setting save handling #5357
• Improved template group removal handling #5358

Developers 💻

• Added comprehensive Pro Search helper unit test coverage #5339
• Expanded regression coverage for Channel Form, File handling, Control Panel forms, Live Preview, member forms, legacy database compatibility, and template management #5359

Enhancements 🚀

• Added field IDs to Search and Replace Utility channel field choices to make similarly named fields easier to identify #4807

Bug Fixes 💃🐛

• Fixed Pro license check instructions to avoid a duplicated period #5285
• Fixed CP Table row handling for database results with a columns field, such as File Manager saved views #5311
• Added missing MIME equivalents so allowed uploads like gzip, RAR, tar, FLAC, WAV, M4A, M4V, BMP, and PSD files validate reliably #5321
• Resolved #5320 where Channel Form {field_id} inside {custom_fields} could remain unparsed on PHP 8.1+ with native numeric database values
• Resolved #963 by using stronger random byte generation for random strings and encryption keys
• Resolved #5325 where unchanged File fields inside Grid could fail upload-directory permission checks for non-super-admin users
• Fixed date-only date picker selections so timestamp timezone conversion does not move the active calendar day #5332
• Fixed Channel Field API validation callbacks on PHP 8 by passing positional field values instead of named array keys #4987
• Improved Structure publish tab handling when creating new entries #5331
• Improved add-on removal action handling #5330

Developers 💻

• Improved Moblog field handling and expanded related test coverage #5327
• Improved member breadcrumb and ignore-list handling with expanded test coverage #5333
• Added automated coverage for Channel Form field variables, File field Grid validation, Structure parent IDs, add-on removal, random string generation, member tag queries, and Moblog handling

Enhancements 🚀

• Added status support to the {exp:stats} tag for entry totals, comment totals, and latest entry/comment dates #5301
• Added Redis cache driver support for TLS connections, connection context options, and ACL username/password authentication #5280

Bug Fixes 💃🐛

• Resolved #4902 where Channel Form could show a PHP error when displaying a Grid field on an MSM site
• Resolved public exception display behavior so logged-out visitors in non-debug mode see a generic error while detailed output remains available for debug, CLI, and logged-in contexts #5291
• Fixed {exp:stats} cache bleed when channel-filtered and unfiltered Stats tags are used on the same template #5305
• Fixed member manager Date filter rendering when no join date filter is selected, preventing a PHP deprecation notice #5297
• Improved upload filename validation for hidden, path-like, blocked, and control-character filenames, including configured filename overrides and conflict-resolution renames #5306
• Fixed member subscription updates to validate posted selections and bind forum unsubscribe IDs before deletion
• Fixed a typo in the File Manager move modal destination language key #5294
• Fixed member logout return validation and rejected GET member search actions
• Fixed File Manager date sorting so same-date files use a deterministic ID tie-breaker #5314

Developers 💻

• Added automated coverage for Stats status filtering/cache behavior, Redis TLS/ACL options, member subscription updates, member logout and search handling, and upload filename validation #5280 #5301 #5305 #5306 #5307

Enhancements 🚀

• Added a clearer title treatment on the Edit Entry page, including a dedicated entry title row #2906
• Added support for multiple orderby and sort options when ordering Grid field rows
• Added support for including or excluding entry IDs in Search form results
• Added category_group and parent_only support to category heading output #5269

Bug Fixes 💃🐛

• Resolved #5205 where member field instructions were not displayed
• Fixed WEBP and AVIF alpha transparency preservation in GD image manipulations #5242
• Resolved #5252 where File Entries pagination could break with category filters
• Resolved #5253 where the File Manager category column could display incorrect data
• Prevented fatal errors in legacy exception handling when the request constant is unavailable #5265
• Fixed PHP deprecation notices across Channel Form, Structure, Translate, Channel Set imports, template/model services, and related legacy paths
• Resolved #5225 where image manipulation tabs could be shown for corrupt files
• Resolved #5213 where a missing site_pages entry could throw a deprecation notice
• Resolved #4705 where the Control Panel log Search field could not be cleared
• Fixed Markdown link normalization so Unicode links and protocols are handled correctly without changing visible link text

Developers 💻

• Added extensive tests for Member Register, Template parsing, legacy database drivers, installer flows, SimplePie cache, Pages, Structure, File Manager, File field, Grid parser, and Grid model behavior
• Expanded core test coverage and deprecation cleanup for PHP 7.4 through PHP 8.5
• Normalized Search module conditionals for clearer operator precedence
• Refactored Structure nav parser tests to avoid special bootstrapping

Enhancements 🚀

• Resolved an issue where Live Preview could fail silently due to a web server removing the Authorization header
• adding new additional submit_to option on the cookie consent module
• Adding email_as_username param to the registration page
• Added a new live preview token for broader web server compatibility

Bug Fixes 💃🐛

• bugfix/post-max-size-fail-http-response
• Resolved an issue where Live Preview could fail silently due to a web server removing the Authorization header
• Fixed a PHP deprecation warning when PDO keys are specified in config

Bug Fixes 💃🐛

• fixed an area where legacy file upload directories were hard coded in…
• Fix/translation keys

Enhancements 🚀

• Add rate limiting and cleanup for member captchas
• Add must-interact functionality to modals to prevent closing
• Enable 1st-Party Addon Support for CLI Generators with AbstractGenerator Refactor
• Add support in Pro Search for signed parameters
• Added image_manipulation_quality config override; #4992
• Added orderby parameter to exp:channel:categories tag; #4340

Bug Fixes 💃🐛

• Resolved #4339 where it was not possible to validate custom field names outside of CP
• Resolved #4690 MSM wrong config issue
• Resolved #5011 where file size was not updated when file is replaced
• Resolved #5018 where deleting an MSM site could fail due to upload destination error.
• Resolved #5071 where saving Pro Search setting could show PHP warning
• Resolved #5106 where Pro Variables: Select Entries Relationship UI Issue (Search and Channel Filtering returning no entries)
• Resolved #5126 where RedactorX had a validation issue in a Grid field
• Resolved an issue where spellcheck and survey libraries had relaxed curl verification
• Resolved an issue where regex template routes could create PHP warnings
• Resolved a possible generator error when field type was missing
• Resolved an empty data error in Member fieldtype
• Resolved an issue causing TypeErrors when using Live Preview
• Resolved an issue where Live Preview origins could be handled more strictly
• Resolved an error with relationship single variable

Developers 💻

• Added unit tests for several core Add-ons and libraries
• Cleaned up unused action in Stats Add-on
• Added stricter property casts in Image library
• Update handling of referrer in Member module's select_avatar