Help for Developers

What changed in the source code most recently: the main branch of se7enxweb/exponential, read from its public feed by this server.

Show merge commits too

1. Updated: Setup > Log files finds the logs when var is a link to anoth… (opens in a new window) · 11/13/2026 07:19 am

   Message

   Updated: Setup > Log files finds the logs when var is a link to another volume
   
   An installation whose var directory is a symbolic link to another volume
   (var -> ../../arc/state/var) showed no log at all: the log viewer follows
   no link out of the installation, and every log directory resolved outside
   it. The installation's own var directory now counts as inside, and its
   directories keep their var/... ids, so permalinks stay the same; any other
   link out of the installation is still never followed.
   
   Tests: expLogViewerSymlinkedRootTest LV-SYM-04 (var linked to another
   volume: var/log found and resolved; a link out of that var still left out).

   89baadf6be
2. Added: CompatWordSeparator, dashes for the old-style lowercase url al… (opens in a new window) · 11/13/2026 07:19 am

   Message

   Added: CompatWordSeparator, dashes for the old-style lowercase url aliases
   
   TransformationGroup=urlalias_compat gives lowercase url aliases with
   underscores, and a site that wanted them with dashes had to override
   eZCharTransform with a copy of the kernel class (an extension such as
   bcurlaliaswithdash did), which an upgrade then runs into. site.ini
   [URLTranslator] CompatWordSeparator now chooses the separator of
   url_cleanup_compat: underscore (the default, aliases as before) or dash.
   
   Tests: eZCharTransformCompatWordSeparatorTest (underscore by default and as
   shipped, dash with both ends trimmed, missing or unknown means underscore).

   2fa6253804
3. Updated: The upgrade creates every kernel table a database lacks, exp… (opens in a new window) · 11/13/2026 06:39 am

   Message

   Updated: The upgrade creates every kernel table a database lacks, expuser_session_info among them
   
   The database stage named only the tables of the 6.0.x steps. A database
   upgraded across many releases can lack an older kernel table it never got:
   a site upgraded from 6.0.4 had no ezapprove_items (its approve workflow
   event had never run), and the account approval step of the scripts stage
   then failed on the first user created. 6.0.15-user-session-table created
   expuser_session but not expuser_session_info, so "Your devices" stayed
   without its table after an upgrade.
   
   New step 6.0.15-kernel-tables: every table of the kernel schema
   (share/db_schema.dba) the database lacks is created, empty, with its
   indexes; it runs in the database stage, before the scripts stage that
   relies on the tables. 6.0.15-user-session-table now names
   expuser_session_info too, so databases where the step already counted as
   done get the table.
   
   Tests: expUpgradeKernelTablesTest on SQLite (registered before the
   scripts, names every kernel table, a database missing ezapprove_items gets
   it, a second run does nothing). Docs: the step table of the console
   upgrade guide, English and German.

   ce34c4cb52
4. Updated: admin4l asks Exponential Layouts for an admin layout only wh… (opens in a new window) · 11/13/2026 06:15 am

   Message

   Updated: admin4l asks Exponential Layouts for an admin layout only where Layouts is active
   
   On an installation without the explayouts extension every admin page logged
   "Missing function definition file for module: explayouts" and "Cannot
   execute function 'admin_layouts_enabled' in module 'explayouts'", and the
   template compiler, which resolves a fetch with a literal module name when it
   compiles, logged "Cannot execute module 'explayouts', no module found" each
   time the page layout compiled. Seen on edit.exponential.earth and on a site
   upgraded from 6.0.4.
   
   The admin layout lookup now runs only when explayouts is an active
   extension, and names the module through a variable, so the fetch is only
   resolved when it runs. With Layouts active nothing changes.
   
   Tests: Admin4lReviewTest reads the switch through the guarded fetch and
   checks that no fetch names explayouts literally and that all three fetches
   sit inside the active-extension check.

   9716d88bcd
5. Updated: The hosting help no longer asks for absolute request shield … (opens in a new window) · 11/13/2026 03:44 am

   Message

   Updated: The hosting help no longer asks for absolute request shield paths
   
   A site whose administration has a host of its own does not need absolute paths for
   the request shield's store and log: relative paths, relative to the rule file,
   work with a site block too. What looked like it was the include order, which the
   page describes: exponential.rules sets a store and a log of its own, so the site's
   settings come after it.

   0667ae6f41
6. Updated: The request shield pages describe exp_request_shield 0.0.1.1 (opens in a new window) · 11/13/2026 03:02 am

   Message

   Updated: The request shield pages describe exp_request_shield 0.0.1.1
   
   The pages name the current release, 0.0.1.1 (the default installation's
   constraint ~0.0.1.0 allows it), and the government and hosting help pages, in
   English and German, say what its default rules add: every administration
   reached by a path (/admin, /adminui, /editor and the older admin designs)
   keeps its system URLs, modules and forms, the shield's own JSON API stays off,
   and an administration on a host of its own is set up with the include order
   of the extension's configuration guide.

   15472fe0bd
7. Updated: The pages a visitor sees before signing in look like the sig… (opens in a new window) · 11/13/2026 02:53 am

   Message

   Updated: The pages a visitor sees before signing in look like the sign-in page in every admin design
   
   A partner reported the forgot-password page of the administration as broken.
   No admin design had a template for it, so it was drawn with the plain base
   template: a bare form with browser-default fields, the warning above the
   title, no way back to the sign-in. The other pages an anonymous visitor
   reaches there had the same kind of gaps.
   
   - admin4 (admin, editor, admin4l): user/forgotpassword has a template of its
     own with the sign-in page's title, fields, button and notices (a green one
     for "mail sent" and "password generated") and a link back to the sign-in;
     user/success shows the account state the kernel passes instead of always
     "Your account was successfully created", and user/success and
     user/activate use the same look. The sign-in rules of admin4.css cover the
     e-mail field and the button classes these pages use; tokens only.
   - admin (classic): user/forgotpassword, user/success and user/activate on the
     white card the register page uses, the sign-in page links "Forgot your
     password?", and the text, links and footer on the dark frame reach 5.6:1.
   
   Field names, actions and buttons are unchanged, so the forms post as before.
   Checked anonymously in every admin siteaccess, light and dark, at 1440 and
   960 pixels: every view answers 200, with no overflow, no text below 4.5:1 and
   no console errors.

   b3233f336b
8. Updated: System information finds the cronjob runs that runcronjobs.p… (opens in a new window) · 11/13/2026 02:51 am

   Message

   Updated: System information finds the cronjob runs that runcronjobs.php records
   
   The health check "No cronjob run was found" looked for runs started from
   Setup > Cronjobs and for non-empty cronjob*.log files only. A crontab line
   that runs quietly (-q) or writes its output elsewhere leaves neither, so the
   check warned on installations whose cronjobs run every few minutes. It now
   also reads the run record runcronjobs.php keeps for every part it starts
   (var/log/cronjob-lastrun.json, expCrontabSetup::lastRuns()).

   86dcc921dc
9. Updated: Setup > Log files finds the logs of a host served from a fol… (opens in a new window) · 11/13/2026 02:51 am

   Message

   Updated: Setup > Log files finds the logs of a host served from a folder of links
   
   A second host of an installation (edit.) can be served from a folder of
   its own whose index.php, kernel/ and var/ are symbolic links to the real
   installation. The log viewer keeps only log directories whose real path lies
   inside the installation, and took the link folder for the installation: every
   log directory resolved outside it, and Log files, Manage logs, Log health and
   the error digest showed no log at all, although the site wrote its logs.
   
   The installation is now the folder of the index.php that runs, so its var/log
   is inside; a link out of the installation is still never followed. The new
   test LV-SYM-01 to 03 covers both.

   9328294a59
10. Updated: The request shield pages give the copyright notice in its ap… (opens in a new window) · 11/13/2026 02:40 am

    Message

    Updated: The request shield pages give the copyright notice in its approved form
    
    The license table of the feature page, in English and German, wrote the
    notice of the extension's own files in a form of its own; it now reads
    "Copyright (C) 1998 - 2026 Exponential Foundation and 7x. All rights reserved.",
    as every file of the project does.

    e760a71f9d