WebCMS Enhancements
Below are the "WebCMS Enhancements" (aka Release Notes or changelog) for the WebCMS code updates.
Production
November 11, 2024
Bug Fixes
- Query-based facets for Perspectives no longer break the author link
- Query parameters are no longer added infinitely for feeds
- Breadcrumbs now appear for all Web Areas
October 20, 2024
New Features
- Design Updates
- Web Area Menu Updates, including mobile view
- Update hook to disable the first link in Web Area menus
- Increase Page Width
- Breadcrumbs
- Limited number of breadcrumbs to 3 levels, after "US EPA" and the web area home page
- Sidebar Contact Link
- Remove Hublinks and their styles from Page Templates
- Implement "Related Links" into sidebar for News Releases, Perspectives, and Speeches
- Perspectives, Speeches and Remarks, Events, FAQs, Webforms Should use "Narrow" Template
- Update Listing Pages to Match new Page Template Style
- Disable "Navigation Style" field from Web Area group type
- Web Area Menu Updates, including mobile view
- Review and clean up print styles
- Bulk group change - both media and nodes
- Limited internal alerts (System announcements)
- Disable "Link List" paragraph type from the site
- Help text/Admin updates
- Add help text to "Add New Content" page (/group/gid/node/create)
- Add help status message to group dashboard page (/group/{gid})
- Help text in the Paragraphs Embed modal
Bug Fixes
- CKEditor 4 link field now displaying link in dialog
- /user now works
- Ckeditor5 Anchor Link - re-editing content no longer moves links to end of line
- Nginx 404 routes for search pages
- Unstyled modal vertical tabs now fixed
- Users with no roles or Web Areas can no longer view webform submissions
Accessibility
- Search box label now has proper contrast
- Perspective search input is missing label
Security
- Update Seckit module
September 01, 2024
New Features
- Drupal v10! All users will see the new Claro administrative theme.
- The updated WYSIWYG Editor will only be available for Beta Testers. Let us know if you want to be a beta tester.
- Admin UI Tweaks to Content Dashboards to make it easier to filter for your pages and files
- Bulk group change: now you can bulk change nodes (pages) from one web area to another, provided you belong to both
- We're working on bulk change of files/media
- Reduced font-size of heading 2 in boxes
- Relabel Locations of Proposed Actions' "State or Territory" field to "Location"
- Removed Compliance Report Badge from Pattern Lab
- Added "Language Bar" in the footer, above seal and other footer links
Accessibility
- Hidden elements in the hero banner should not have focusable content
Bug Fixes
- Cloudfront Cache Path Invalidate Caller reference was not unique per request, leading to ugly red warning after publishing - those are now gone
- Carousel buttons for banners displayed incorrectly when viewing on a mobile device
- [Infrastructure] Modified user creating images to be non-root users
- Disabled the Coffee module
- Fixed Public Notices empty location field ajax bug
May 19, 2024
New Features
- Added Webform Validation module for extra validation
- Tweaks to Public Notices search listing, including proper capitalization for locations
- Audited and updated the Standalone Template to make it easier for app developers to use
- Updated Banner Slide title and body requirements and added new Banner Slide link/button field
Bug Fixes
- Listing pages: Free text search no longer clears facet selections
- Cloned nodes no longer retain sunset & publish date from original node
- Main menu styling in standalone template is now fixed
April 1, 2024
New Features
- Use USWDS Megamenu for global navigation
- New Event List Display: "Date/location"
- Public Notices content type expiration date + 5
- Implement access_unpublished module to allow anonymous users to view draft pages - no password required
- Update the Twitter icon to be the new "X" icon
- Allow multiple facet accordion blocks to be open simultaneously
- Update Media "Replace file" help text
- Remove New Relic browser monitoring agent
- Share Button/Link for Latest Revisions
- Upgrade Groups modules to support D10
- Hide RD layout from Pattern Lab
- Remove the redirect_301.map from nginx
Bug Fixes
- Workaround for WSOD error for some particular nodes
- Now able to clone forms as Web Area admin
- Flag card alignment not adhering to conditional rules if loaded by ajax
- EPA logo showing up black on integration 404 page
- Unable to load specific node 72261
- Unable to click "Edit media" button in CKEditor with private file and caption
Security & Infrastructure
- Remove web.config from the site image
- Address Critical/High vulnerability issues with base EPA image
- Content Moderation Notifications - SA-CONTRIB-2023-047
- Implement AWS scheduled scaling and scaling by request count per target
December 10, 2023
New Features
- Notify users when they have a private file on a page
- Output one decimal place for file size
- Set max-width for Pagination of Dynamic Lists
- Add "Web area" filter for Dynamic Lists
- Add Owning Office taxonomy filter to content dashboards
- Global Header & Menu Updates
Security Updates
- Hide nginx and PHP Version from HTTP Headers
- Drupal core - Critical - Cache poisoning - SA-CORE-2023-006
- Drupal update to 9.5.11
Bug Fixes
- Front page now has the same metadata as the rest of the site
- Dynamic Lists for FQ/PNs, collection mode, are no longer cut-off
- Show/Hide card and card group options now respect default settings
September 24, 2023
New Features
- New paragraphs! Taglines and Media Blocks
- Limit Microsite banner slides to jpg/jpeg
- Update Allow List for Exit Icons
- Dynamic List No Results
- Add lang attributes for Search API language filters
- Additional translations for español.epa.gov
Security and infrastructure updates
- Add HSTS header to nginx configuration
- Update New Relic browser monitoring agent
- Updating modules to conform to PHP 8.1 and Drupal 10 requirements
- Update to PHP 8.1
- Update Drupal to 9.5.x
- Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005
- S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2023-014
Bug Fixes
- Cloning a section in Layout Paragraphs now works
- Ability to clone forms restored
- Back to Top button is no longer visible when user is at the top of the page
- Fix iCal/MS Outlook invites off by one hour while in DST
- Card Layout Options now persist
- Dynamic List component no longer shows filters when pagination is enabled and on pages greater than 1
- Viewing a specific revision no longer displays duplicate title and actions
July 09, 2023
New Features
- New content type: Speeches and Remarks
- New layout option for web area home pages: Sections
- Updated look and feel: blue global header
- Restricted images are harder to download anonymously
- New timezone (Phoenix MST) and countries (Canada and Mexico) for events
- Users can now change who owns specific media files as well as which web area a file belongs to
- Cards now have additional options, including inset/exdent, media or title first, and different image alignment
Accessibility
- Updated Section 508 link for Publication certification box
Bug Fixes
- Layout Editor block titles now respect display title setting
- Public notices search now uses comments extension due date, if present (otherwise, the comments due date) for search filtering and sorting on comments due date
- "On this page" for Regulation content type is now output with correct heading level
- Files uploaded via the Add Paragraph option are now correctly associated with the web area
- Before/after image swipe paragraph is now responsive to touch
- Caches are now cleared for each deploy; no more "expanded menu" bugs
April 12, 2023
New Features
- Transition content expiration dates to content type
- "Publication watcher" - new role in web areas: receive notifications of web area pages being published
- New metadata for pages: Owning Office
- Add Revision Notes to content review email notifications
- Tables and boxes now work with dark backgrounds
- Add additional "EPA" sites to Allowlist for Exit Icons
- Tweaks to Card Paragraphs and Card Paragraphs body field
- Add Reusable Paragraphs link to Web Area Dashboards
- Remove "Delete content" option from Action select box on content dashboards
- Provide a way to indicate usage restrictions for any image
- Update the list of timezones available for event dates
Security Updates
- Drupal core - Information Disclosure - SA-CORE-2023-001
- Entity Browser - Information Disclosure - SA-CONTRIB-2023-002
Bug Fixes
- New operation to bulk "republish" (publish current revision, not latest)
- Removed "delete" bulk operation
- Add Definitions (glossary) items now rendered correctly
- The standalone template now has absolute URLs
- Claro: fixed overlapping buttons on all node edit forms
- Remove double '/' in the URLs in content review email notifications
- Cloning pages no longer retain scheduled transition from the cloned/original page
February 26, 2023
New Features
- Filter news releases by month
- Boost most recently published NRs in search
- Adjusting Volume of Emails for Specific Web Areas
- Soft launch of new Admin theme, Claro; ask for the role!
- Initial attempt to indicate restricted images
- Update to Drupal 9.4.x
- Tweak to LinkIt help text
- Remove/disable various Webform elements
- Reusable banner images: you can now find banner images in the media library
- Highlight latest revision on revisions pages
- Deprecating Resource Directories
- Strip out unneeded font files from export
- "Log message" renamed to "Revision notes"
- Show node number in typeahead title fields to help you find your page
- Show node number in the page typeahead in group and other Drupal auto-discover menus
- Editoria11y installed for super users (initial test)
- Audit Files: ability for admins to see which files are not on the AWS S3 file system
- Updates to Management of Metadata, for Admins only
Accessibility
Bug Fixes
- Can now search for file names that contain -_.
- Public Notices with multiple geographic locations listed now have spacing in-between locations
- Modify revision author notification logic: that is, notify person who last edited the page (rather than the person who pushed the page through workflow)
- Change title attribute for Exit to Intranet Icons
- Long URLs in Summary boxes are no longer chopped off with "..."
- Media library image checkboxes are no longer cut off in layout editor modal
- Event calendar description cut off when it contains a newline
- Author image is not displaying on Perspective pages
- Bug with editing forward revisions of unpublished nodes
- Rename Blog Box to Perspectives Box
December 11, 2022
- Feature: Auto-save! Ensuring that content edits don't get lost
- Feature: Before/After Images Swipe Component
- Feature: PHP version upgrade to 8
- Feature: Make CSV Export Button More Visible
- Feature: Add Revision author to Content Dashboards
- Feature: Update Admin Info Block
- Feature: Move Registration Deadline for Events up higher on published page
- Feature: Filter Media dashboard by "My Web Areas"
- Feature: Show deployed code version
- Feature: Moved Related Info WYSIWYG button to embedded Paragraphs WYSIWYG button
- Feature: Add Fast404 module and update its display
- Feature: Changes to Email Notifications for Sunset Date
- Feature: Add Coffee Module
- Feature: Better Media search, including tips for finding your files
- Feature/bug fix: New plain text field for adding description/content for event invites
- Accessibility: Pause hero banner rotation on keyboard focus
- Accessibility: Pull quotes on dark backgrounds now have sufficient contrast
- Accessibility: Animations now respect the 'prefers-reduced-motion' browser setting
- Bug fix: Active alerts should always display on the /alerts page
- Bug fix: Workflow rejection email is triggered on new revision
- Bug fix: Cloning should not retain the original author
- Bug fix: Media modal search doesn't update page numbers
- Bug fix: Remove linked headings from Pattern Lab
- Bug fix: Incorrect workflow behavior around Review Deadlines, particularly bulk published items
- Bug fix: Home page sliders when JS is off now centers correctly on first slide
- Bug fix: Events and Frequent Questions dynamic lists now have sort options
October 09, 2022
- Increased auto-logout time from 30 minutes to eight hours
September 29, 2022
- Feature: Exit disclaimer has changed back to an icon (no more "EXIT")
- Feature: Increased height of "Page JavaScript" textarea on edit screen
- Feature: Updated the Web Area user view to include a "Status" (blocked or active) column, better role names, and remove the "Updated" column
- Feature: Added "Last logged in" and "Status" data to User profile screens
- Feature: Add image thumbnails to the Media dashboards
- Feature: Allow CSV exports from the Bulk Operations Content Dashboard
- Feature: Hide the "Aside" box from web area home page edit screen
- Feature: Show more than ten results for typeahead for web area menu add link field
- Feature: Add revision author to the page Admin Info block
- Feature: Upgrade USWDS design to latest version (2.13.3)
- USWDS update to 3.x is in the works
- Bug fix: RSS feeds for Perspectives now filtered
July 26, 2022
- Feature: Clear Page Path/URL from CloudFront
- Feature: Adding Additional Languages
- Feature: Add to group from user profile: use autocomplete widget
- Feature: Grant ability to change group home page from group edit screen
- Feature: [Accessibility] Webforms needs role="alert"
- Feature: Update Input Format on Card "body" field
- Feature: Add file size to document view modes
- Bug fix: Publication of Event content type Failing from Group Dashboard
- Bug fix: CSV Export should include links
- Bug fix: Update environmental switcher links
- Bug fix: Slow CSV export performance
- Bug fix: Public Alert is not visible to anonymous users
- Bug fix: Update "Computed Comments Due Date" label
- Bug fix: Web Areas not displaying correctly in dynamic lists
- Bug fix: Alternative cron Implementation
June 09, 2022
- Feature: Search body content of pages
- Feature: Whitelist of URLs that should not get the EXIT disclaimer
- Feature: Telephone matcher in LinkIt
- Feature: USWDS Flag cards
- Feature: Easier environment switching
- Feature: Link YouTube thumbnails to YouTube
- Feature: New languages: Bengali and German
- Bugfix: Video now outputs title to title attribute
- Bugfix: Noto-sans font optimizations
- Bugfix: Repair server redirects
- Security: Drupal Core update to 9.3.12
April 28, 2022
- Feature: News Release Export: Strip HTML
- Update content of Standalone Template page template
- Feature: Disable X-FRAME-ORIGIN header for specific directory (widgets)
- Feature: SVGs are no longer filtered out in WYSIWYG
- Feature: Add review deadline information to Admin Info block
- Feature: Pattern Lab Icons can now be copy-pasted and will work inside the editor
- Feature: Accessing files in AWS S3 at /archive
- Feature: Allow editors to set timezone for events
- Feature: Create vertical and different size options for Image Gallery (aka Slideshow)
- Feature: Update Paragraphs Library Permissions
- Feature: Add more USWDS Table Styles in CKEditor
- Accessibility: Indicate the Current Page
- Bugfix: Group Admin unable to remove users from group
- Bugfix: Figured out cause of Deleted/Missing Forms Webforms
- Bugfix: Default Twitter and OG share images now showing
- Bugfix: "View All" button on My Web Areas page has bad link
- Bugfix: Geographic Location metadata no longer shows on front-end for Perspectives
- Bugfix: Wrong reusable paragraphs in Edit screen
- Security: Drupal core updated to 9.3.7
- Performance: Minimize Cumulative Layout Shift: JavaScript Related
March 18, 2022
- Switch from Akamai to AWS CloudFront
- Feature: WYSIWYG buttons have moved around and now align with work.EPA.gov
- New "full screen" button
- New "grabber" to expand size of WYSIWYG textarea
- Feature: User profile pages now include roles, full name, web areas that you are a member of
- Feature: When searching user profiles, can now search using first and/or last name in addition to LAN ID
- Feature: Content review emails will come from no_reply@epa.gov instead of drupal_admin@epa.gov
- Feature: Add to Cal button for Event pages
- Feature: New metadata tag for web area type (MS vs. RD) - we can see stats in Siteimprove and Google Analytics
- Feature: EXIT icon update: all non-*.epa.gov sites now tagged. Will include a whitelist in future work
- Feature: Environmental Indicator: Production sites have black bar at top; all dev sites have red bar at top
- Feature/performance: lazy load images
- Feature: Bulk assignment of node authorship. Accounts will be disabled when people leave, not deleted. No more "Anonymous"!
- Feature: Remote post issue with sub-sub-domain self-signed certificates
- Feature/security: 403 page will be the same as 404 page with same status code
- Feature: EPA main navigation menu now supports three columns
- Bugfix: Cards added to Layout Builder
- Bugfix: Fix alerts after webform submissions
- Bugfix: New reusable paragraph entity permissions
- Bugfix: when adding images to a summary box, the text will wrap under it
February 18, 2022
- Feature: Embed Paragraphs directly into WYSIWYG fields
- Feature: Global Dashboard: Filter by Publisher
- Feature: Provide a way to associate Paragraphs with Groups and Authors
- Soon, you will be able to create and edit your own reusable paragraphs
- Feature: Standalone Template
- Feature: Configure Metatags to allow a per group image for Twitter and FB share
- Feature: Allow group members to move any page between groups they belong to
- Feature: Improve the experience of Automatic Publishing
- Feature: Additional Revision Listing page updates
- Feature: Add Summary Box
- Feature: USWDS Icon and Icon List, USWDS Modal, USWDS Responsive stacked table, and USWDS Scrollable table
- Feature: Email Notifications: Update URL
- Feature: Allow View Send module to target specific users
- Bug fix: Remove plain text format for How to Comment
- Bug fix: Layout Builder view: Unable to drag and drop
- Bug fix: Exit Icons correctly capture .gov subdomains
- Bug fix: Dynamic Lists: Duplicate Perspectives
- Bug fix: Perspectives Dynamic Lists use the wrong Subjects Taxonomy
- Bug fix: New Regulations nodes do not get default metadata
- Bug fix: Incorrect Workflow States
- Bug fix: Alerts added to the body are hidden when you "Hide Admin Info"
- Security: Webform - Critical - Cross Site Scripting, Access Bypass - SA-CONTRIB-2021-045
- Security: US EPA webcms repo Github Dependabot alerts resolved
January 19, 2022
- Feature: USWDS Cards are now available. How to create cards.
- Feature: Search for files by file name OR title.
- Feature: Access the Group Dashboard view from every page, not just the Group home page
- Feature: The page Edit button is now only available on revisions that can actually be edited
- Feature: Add in all USWDS components
- Feature: Bulk Operations now possible
- Feature: The new pending actions list now shows all pages in your groups that need action
- Feature: Improve the revisions pages with language to highlight what is current and what is not
- Feature: Export News Releases for archiving at archive.gov
- Feature & bug fix: Group members can now manage group web area sidebar links
- Bug fix: Pages with sunset date are not really staying unpublished!
- Bug fix: Remove default background image on .usa-hero
- Bug fix: Permissions for Perspectives
- Security update: Module and core security updates
November 24, 2021
- Feature: Creating and refining the Perspectives content type (for blogs), including dynamic lists, view modes, detail pages, back-end functionality
- Feature: Changing the external exit link icon, based on the page language. Example on Korean homepage
- Feature: Updating all listing pages to use the USWDS Collections component
- Feature: Adding more foreign language capabilities to News Releases
- Feature: Adding a mass mail plugin for communicating with WebCMS users
- Feature: Ability to remove all users who have not signed into the system in more than two years
- Feature: Warning on edit pages if you're editing the Latest Revision
- More work around revisions planned!
- Feature: Remove archive button from WYSIWYG editor
- Bugfix: Linkit gets its scrollbar back
- Bugfix: Adding review date to published pages that were missing it
- Bugfix: Properly pushing published pages through the standard workflow
- Bugfix: Improve accessibility of "back to top" link
- Bugfix: Update Pattern Lab documentation
- Bugfix: Pages with Sunset Date stay unpublished
- Security: Updated PHP to v7.4.25
13 Oct 2021
- Security: Updating Drupal core to 9.2.6, as well as security updates for two modules
- Feature: Changing the external exit link icon back to "Exit"
- Feature: Increasing the default slideshow size
- Feature: Linkit now filters between all content and your content
- Feature: All logged in users can now see email addresses of other users
- Feature: Now using the USWDS Sortable tables!
- Feature: Now using the USWDS Collections component
- Feature: Webforms can now use the details element to show/hide additional/optional fields
- Feature/bugfix: Providing accessible headings for box titles (box titles will be h2 by default)
- Feature/bugfix: "Required" fields for forms now indicated with "*"
- Bugfix: Ensuring that pages are processed through the workflow correctly and on time
- Bugfix: Microsite home page banner no longer overlaps the text immediately following
- Bugfix: Update site-email from noreply to drupal_admin
- Performance: Faster media modal, preloading font files, deferring the alert script, setting webpack minchunk to 2
16 Sep 2021
- Security: Drupal core update to 9.1.12
- Performance: processing many links on page
- Bugfix: Editing Remote Video in WYSIWYG
- Bugfix: Site rendering blank pages
- Bugfix: Deleting Files From System
- Bugfix: Public Notices showing past the "Comments Due" date
- Redirects: /epafiles fixed
- Feature: Decrease server task update threshold to 40%
- Feature: Update OG and Twitter images when sharing
- Feature: Add Scroll Margin Top to give a little bit of padding when using anchor links
- Feature: Changes to Listing Page Facets: Filter by languages and sort facets by ABC order
24 Aug 2021
- Bugfix: Created role to edit web area sidebar menus. If you need to update your web area menu, please contact the Web CMS Support helpdesk team.
- Bugfix: Give all authenticated users ability to view submissions
- Feature: Export views to CSV
- Bugfix: Remove 'none' cache override for the news release feed
- Bugfixes: To improve processing speed, update Akamai module to avoid enormous objects being stored and increase the rate at which cron is being called for Akamai queue processing.
- Bugfix: Catch exceptions on certain Layout Builder pages that were previously resulting in blank (white) pages.
- Bugfix: Move JSON and XML files into the "Other" media type (bundle)
15 Jul 2021
- Updated to Drupal 9 (review WebCMS Training)