From 8bdadb68c227feeecefd16336dd90a93c5f10b2a Mon Sep 17 00:00:00 2001 From: Jonathan Miller Date: Sun, 5 Jul 2026 17:26:05 -0500 Subject: [PATCH] docs(changelog): backfill 02.56.07/08 + dedupe blank duplicate headers Claude-Session: https://claude.ai/code/session_01WbGBN9VyRK61zczYWcCQ2i --- CHANGELOG.md | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1f9cc112..24cafc82 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,8 +8,20 @@ ## [02.56.08] --- 2026-07-05 -## [02.56.08] --- 2026-07-05 +### Fixed +- Component manifest `` reverted to the element-safe `MokoSuiteBackup`. The "Type - Name" convention derived element `com_component-mokosuitebackup`, registering a duplicate component and leaving the real `com_mokosuitebackup` orphaned on the old version. (#213) ## [02.56.07] --- 2026-07-05 -## [02.56.07] --- 2026-07-05 +### Security +- Mask the FTP password in `AjaxController::maskSecrets()`/`mergeExistingSecrets()` — stored FTP remotes no longer leak their password via `listRemotes`. (#169) +- Stop the API single-item view (`Backups/JsonapiView`) leaking the server `absolute_path`. (#187) +- SFTP uploader uses `StrictHostKeyChecking=accept-new` instead of `no`. (#182) + +### Fixed +- `DatabaseDumper` writes a real newline after `DROP TABLE` (was a literal `\n`). (#179) +- Profile-picker forms order by `id` instead of the dropped `ordering` column. (#180) +- `uninstall.mysql.sql` now drops the snapshots table. (#181) +- CLI snapshot delete uses the `data_file` column (was non-existent `file_path`). (#184) +- Remove the duplicate pre-update backup (content plugin no longer subscribes to `onExtensionBeforeUpdate`). (#186) +- `DatabaseImporter` collects non-fatal statement errors (`getErrors()`/`hasErrors()`). (#188)