Repository navigation
docs: add 1.9.0 changelog entry - #21
Merged
Merged
Conversation
Records the template import hardening merged in cc520fd and the three behavior changes it introduces: non-image template assets are no longer imported, storePreviewImage() throws instead of returning null, and CmsConverter / TemplateManagement gained constructor arguments. Minor rather than patch, since existing templates containing non-image assets stop importing and the constructor signatures change. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014NRhJ9fkQuBzwbpXB5oi5b
rhoerr
approved these changes
Aug 5, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds the
1.9.0entry toCHANGELOG.mdfor the template import hardening merged in cc520fd. The advisory merge pushes the fix commits tomasterbut does not produce a changelog entry or a release, so this fills the first gap.Why 1.9.0 and not 1.8.2
The fix carries three behavior changes, so a patch bump would be misleading:
jpg,jpeg,png,gif,webp). Previously any file type was copied intopub/media, so templates exported with e.g. SVG assets stop importing and need re-exporting.TemplateManagement::storePreviewImage()throws aLocalizedExceptionon failure instead of returningnull.CmsConverter::__construct()gains aPathValidatorargument;TemplateManagement::__construct()gainsPathValidatorandLoggerInterface. Subclasses callingparent::__construct()positionally need updating.All three are called out under
### Changedso integrators hit them in the changelog rather than in production.Note on the GHSA link
The entry links the advisory, which is still in draft. The link resolves once the advisory is published — worth landing this together with the release and the publish rather than long before.
Remaining release steps
1.9.0and create the GitHub release1.9.01.9.0🤖 Generated with Claude Code
https://claude.ai/code/session_014NRhJ9fkQuBzwbpXB5oi5b