3.2.8.1 - November 22nd, 2024

• Security: Resolve stored XSS issue with the File Upload field Add Button Text option. Props to the CleanTalk / Dmitrii Ignatyev for responsibly reporting this (their second report, they are doing good work!). (@sc0ttkclark)
• Security: Harden the use of values within id and class HTML attributes in Pods form elements. (@sc0ttkclark)

3.2.8 - November 17th, 2024

REMINDER: PHP support for Pod Templates and Pod Pages been turned off by default in Pods 3.2.7+ (PODS_DISABLE_EVAL constant set to false can be used to re-enable it). It will be completely removed in Pods 3.3 after being deprecated back in Pods 2.3. (@sc0ttkclark)

• Feature: Migrate the PHP in your Pod Templates and Pod Pages directly into your current theme with a new Pods Admin > Tools > Migrate PHP tool. We recommend you use a child theme that you control. PHP warnings now appear on the Pod Template and Pod Page editor screens to prompt you to run the migration. (@sc0ttkclark)
• Feature: Updated the design and user experience of the various guided screens inside of the Pods Admin to make it easier to read and click through on small screens. (@sc0ttkclark, @heybran)
• Enhanced: Pod Page template part handling for PHP template files now passes the $pods variable. (@sc0ttkclark)
• Enhanced: Added support for parsing magic tags in Pod Template files in the theme when you set the PHP header comment Magic Tags: Enabled. (@sc0ttkclark)
• Enhanced: Run wpautop on Pods Item List and Pods Related Item List blocks for the "not found" content if they are not already formatted. (@sc0ttkclark)
• Fixed: Only running wpautop for block the Pods Field block content if it does not contain div, ul, ol, heading, or p HTML tags. (@sc0ttkclark)
• Fixed: Resolve issue with empty strings showing when using magic tags before/after functionality. (@JoryHogeveen)
• Fixed: Ignore more internal WP post types and taxonomies plus others from other plugins.
• Fixed: Move load_plugin_textdomain usage into init and make it optional with the constant PODS_LOAD_TEXTDOMAIN set to true. It is no longer needed for WordPress.org plugins but may be needed in the future for testing. (@sc0ttkclark)
• Fixed: When getting plugin data, don't make it translatable. (@sc0ttkclark)
• Fixed: When saving bidirectional relationship, attempt to save hook up existing related items data in the wp_podsrel table with the bidirectional connection. (@sc0ttkclark)
• Fixed: Resolve PHP notices with site debug information. (@sc0ttkclark)
• Fixed: Resolve PHP warnings with empty template code. (@sc0ttkclark)
• Fixed: More improvements to Pod Page and Pod Template file loading from themes. (@sc0ttkclark)
• Fixed: Resolve issue with slug fields not formatting as expected. (@sc0ttkclark)
• Fixed: SCSS migrated from @import to @use for compatibility with the latest versions of our SCSS scripting. (@sc0ttkclark)

3.2.7.1 - October 9th, 2024

• Security: Lock down heading field to only specific allowed HTML tags and preventing it from being used to insert malicious scripts. Props to the CleanTalk / Dmitrii Ignatyev for responsibly reporting this. (@sc0ttkclark)

3.2.7 - August 28th, 2024

• Feature: New Pods Related Item List block that works like a Pods Item List block but uses the Pods Single Item block context where you specify a relationship field name to reference. (@sc0ttkclark)
• Feature: You can now link field value output from Pods Field Value block to any website field or just use permalink to link to the current item of the field. Works with single select relationship field as the link reference. (@sc0ttkclark)
• Feature: Add support for having multiple filters/pagination on the same page when using Pods shortcodes/blocks. (@sc0ttkclark)
• Feature: When a relationship field is using Taxonomy syncing, you can not choose to hide the Taxonomy UI from the Block Editor and Classic Editor. (@sc0ttkclark)
• Feature: New support for Query Monitor now shows Pods debug logs in a QM panel. (@sc0ttkclark)
• Tweak: Toggle add file button on single file field depending on whether a file is provided yet. #7315 (@heybran)
• Tweak: Added a <p> wrapper for the span-based pagination. (@sc0ttkclark)
• Removed: PHP support for Pod Templates and Pod Pages has been finally turned off by default (PODS_DISABLE_EVAL constant set to false can be used to re-enable it). It will be completely removed in Pods 3.3 after being deprecated in Pods 2.3. (@sc0ttkclark)
• Fixed: Improve REST authentication method to support other auth forms when registering fields. #7340 #7341 (@JoryHogeveen, @sc0ttkclark)
• Fixed: Fix invalid default value for REST API write_all option. #7339 (@JoryHogeveen)
• Fixed: Resolve issue with Taxonomy syncing for relationship fields. #7336 #7334 (@pdclark, @sc0ttkclark)
• Fixed: Add fallback for clipboard.writeText. #7314 (@heybran)
• Fixed: Reset items loop before running the fetch loop in Pods::template() and the Templates component. (@sc0ttkclark)
• Fixed: Resolve issues with cached queries in PodsData not having the correct corresponding total found for pagination. (@sc0ttkclark)
• Fixed: More phpstan/phpcs fixes across the codebase. (@sc0ttkclark)

3.2.6 - July 22nd, 2024

• Fixed: Resolve issue with WordPress 6.5 and earlier compatibility by adding polyfill for react-jsx-runtime dependency that WP 6.6 related tooling now requires. (@sc0ttkclark)
• Fixed: Resolve register_meta issue where it wasn't checking if post type supported revisions before setting meta key as revisionable. (@sc0ttkclark)
• Tweak: Partial work towards a fix for REST API update handling for meta fields which was broken in a previous release. Final fix will be in Pods 3.2.7. (@sc0ttkclark)

3.2.5 - July 19th, 2024

• Fixed: Resolve issue with WordPress 6.6 compatibility that caused Pods Admin > Edit Pod and Pods forms to stop working properly on some sites. (@sc0ttkclark, @swissspidy)
• Fixed: Resolve PHP deprecated notices with null being passed into certain htmlspecialchars related functions. (@sc0ttkclark)

3.2.4 - July 15th, 2024

• Feature: Allow restricting media library for File fields to only showing attachments associated to the current post ID. (@sc0ttkclark)
• Feature: Allow File field to automatically use the first file saved as the featured image for the post. (@sc0ttkclark)
• Feature: Add support for Post Types that have associated Taxonomies to have a Relationship field which will automatically sync to the corresponding taxonomy on save. (@sc0ttkclark)
• Fixed: Register meta handling now properly loads when enabled. (@sc0ttkclark)
• Fixed: Remove always visible scrollbar from Settings modal panel container since it does not scroll. (@sc0ttkclark)
• Fixed: REST API Show All Fields setting for a Pod now works as expected again. (@sc0ttkclark)

Note: The Pods 3.2.3 release turned into Pods 3.2.4 after a failed attempt at hijacking our plugin on WordPress.org was accidentally documented by online security vulnerability databases as successful.

To be safe and sure that those who are using Pods do not mistake Pods 3.2.3 as a vulnerable release, we will instead release the next version as Pods 3.2.4.

3.2.2 - June 18th, 2024

• Feature: You can now turn on Taxonomy filters for a Custom Taxonomy so that you see a dropdown filter on the list of posts for any associated post types. (@sc0ttkclark)
• Added: Pods Templates > Support for comments on post types using Pods Templates using [each comments] and [if comments]. (@sc0ttkclark)
• Added: REST API > Add support for determining whether to require person to be logged in to read values for custom fields (default: login not required). (@sc0ttkclark)
• Added: Automatically redirect to the proper edit URL when going to the Pods Admin > Edit Pods page for a specific pod but id=XX is the slug. (@sc0ttkclark)
• Tweak: Accessibility > Make it easier to copy and paste field names for the Edit Pod screen with a new copy icon you can click. #7291 #7237 (@heybran, @sc0ttkclark)
• Tweak: Responsive UI > Improved appearance for the Edit Pod screen for smaller screens. (@sc0ttkclark)
• Fixed: Security hardening > Sanitize HTML before passing into Pods field inputs for paragraph/code/wysiwyg field types to cover additional cases where something could make it past the sanitization process on save. (@sc0ttkclark)
• Fixed: Accessibility > Add label for color fields in the Pods Blocks API so it shows the label and not just the color input itself. #7306 #7305 (@pdclark)
• Fixed: Group and field names now generate in the UI as expected. (@sc0ttkclark)
• Fixed: Compatibility > Date, Date/Time, and Time default values now use single quotes to ensure maximum compatibility with various SQL engines. (@sc0ttkclark)
• Fixed: Compatibility > More PHP compatibility issues with trim() related function usage resolved. (@sc0ttkclark)
• Fixed: Code quality > Various phpstan/phpcs issues resolved. (@sc0ttkclark)

3.2.1.1 - May 8th, 2024

Security Release

• Security hardening: Enforce safe URLs for Pods form submission confirmation page URLs. Props to the wesley (wcraft) / Wordfence for responsibly reporting this. (@sc0ttkclark)

3.1.4.1 - May 8th, 2024

Security Release

• Security hardening: Enforce safe URLs for Pods form submission confirmation page URLs. Props to the wesley (wcraft) / Wordfence for responsibly reporting this. (@sc0ttkclark)