-
Notifications
You must be signed in to change notification settings - Fork 10
Update dependency timber/timber to v2 #109
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
⚠ Artifact update problemRenovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below: File name: app/wp-content/themes/md-starter/composer.lock |
cbbb555 to
30a7c40
Compare
|
30a7c40 to
86cc629
Compare
86cc629 to
5490df7
Compare
This PR contains the following updates:
^1.15.1→^2.0.0Release Notes
timber/timber (timber/timber)
v2.3.3Compare Source
Bug Fixes
trim_wordsmethod whennullis passed. (#3131) (78d928d)Miscellaneous Chores
v2.3.2Compare Source
Bug Fixes
Miscellaneous Chores
v2.3.1Compare Source
Bug Fixes
v2.3.0Compare Source
Features
Bug Fixes
Miscellaneous Chores
v2.2.0Compare Source
Bug Fixes
trim_wordsmethod whennullis passed. (#3131) (78d928d)Miscellaneous Chores
v2.1.0Compare Source
Features
$prefsonly (99219a9)Bug Fixes
MenuItem(#2905) (7e00eeb)Reverts
Miscellaneous Chores
v2.0.0Compare Source
Timber 2.0 is a big update. There are a lot of breaking changes. You need to thoroughly test your websites in your local development environment before update your live websites.
You can install Timber 2.0 by following the Installation Guide. When installing Timber through Composer, you need to require the
2.0.0version:Documentation
In case you find errors, please open an issue. In case you’re stuck or have questions, create a discussion.
What’s new in Timber 2.0
For information on what’s new in Timber 2.0, follow the Upgrade Guide.
Dropping plugin support
Timber 2.0 is not available as a WordPress plugin anymore, but will only be available as a Composer package. If you’re still using the plugin version of Timber 1.0, you might want to switch to the Composer version first. You can find more information about this in the following links:
The overall goals of Timber 2.0 include:
High-level changes include:
What’s changed since 2.0.0-rc.1
Here’s what’s changed since the last 2.0.0-rc.1 release. (Full Changelog: timber/timber@2.0.0-rc.1...2.0.0)
Changes
masterbranch to1.xand made2.xthe default branch.Bugfixes
fieldsvalue when returning terms from query by @jrathert in #2806ExternalImage::build()by @jrathert in #2818 and @nlemoine in #2825Documentation
$filtersinstead of$functionsby @niclm in #2799Become a sponsor
Do you love using Timber for your projects? Consider supporting us by becoming a sponsor. Your sponsorship helps us maintain & improve Timber for everyone! 💚🌲 Join the Timber family today.
v1.24.2Compare Source
Security fix
Details
^1.44.8and^2.16.1to fix the issue.v1.24.1Compare Source
Security fix
Details
The vulnerability could be exploited if your website processes user file inputs (like a form upload) or sideloaded images directly with one of the Timber image operations like Resize, Letterbox, Retina, ToJpg or ToWebp without prior checks whether the uploaded files are really images. We couldn’t replicate the vulnerability in a default WordPress installation, where a user uploads files through the media library. But there could be cases where your website might be vulnerable if a user can upload files in another way.
What’s changed
Timber\PostPreview::read_moreto accept a boolean value by @gerardo-rodriguez in #2578Contributors
Full Changelog: timber/timber@1.24.0...1.24.1
v1.24.0Compare Source
Bugfixes
New Contributors
Full Changelog: timber/timber@1.23.0...1.24.0
v1.23.4Compare Source
What's Changed
Full Changelog: timber/timber@1.23.3...1.23.4
v1.23.3Compare Source
Updates to version numbers and changelog for full consistency with WordPress.org:
https://wordpress.org/plugins/timber-library/#description
What's Changed
Full Changelog: timber/timber@1.23.2...1.23.3
This incorporates the changes in 1.23.2 (below)
Security fix
Details
^1.44.8to fix the issue.v1.23.2Compare Source
Security fix
Details
^1.44.8to fix the issue.v1.23.1Compare Source
Security fix
Details
The vulnerability could be exploited if your website processes user file inputs (like a form upload) or sideloaded images directly with one of the Timber image operations like Resize, Letterbox, Retina, ToJpg or ToWebp without prior checks whether the uploaded files are really images. We couldn’t replicate the vulnerability in a default WordPress installation, where a user uploads files through the media library. But there could be cases where your website might be vulnerable if a user can upload files in another way.
What’s changed
Contributors
Full Changelog: timber/timber@1.23.0...1.23.1
v1.23.0: Deprecating Plugin VersionCompare Source
This release coincides with the final version to the WordPress.org site. To streamline future support and upgrades, the Timber Team is focused on Composer as the formal release channel.
With the upcoming release of Timber 2.0, we will not release a 2.0 version and beyond as a plugin, but only as a Composer package. We advise everyone to switch to the Composer based install as soon as possible.
Switching to the Composer based version
What's Changed
New Contributors
Full Changelog: timber/timber@1.22.1...1.23.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.