Skip to content

Bump craftcms/cms from 5.10.4.1 to 5.10.13.2 - #7

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/craftcms/cms-5.10.13.2
Open

Bump craftcms/cms from 5.10.4.1 to 5.10.13.2#7
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/craftcms/cms-5.10.13.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown

Bumps craftcms/cms from 5.10.4.1 to 5.10.13.2.

Release notes

Sourced from craftcms/cms's releases.

5.10.13.2

  • Fixed a SQL error that could occur when viewing an element with an empty Categories field. (#19372)

5.10.13.1

  • Fixed a bug where sanitized SVGs wouldn’t render. (#19368)

5.10.13

  • Added craft\helpers\StringHelper::isMd5().
  • Fixed a bug where image transforms could be generated from a stale locally-cached copy of an asset’s source file, after the file was replaced on a non-local filesystem. (#19328)
  • Fixed a bug where warnings were getting logged for SSO attributes that mapped to native user properties. (#19294)
  • Fixed an error that could occur when applying a draft. (#19277)
  • Fixed an error that could occur when running project-config/apply --force. (#19300)
  • Fixed a bug where compiled templates could be missing the injected {{ head() }}, {{ beginBody() }}, or {{ endBody() }} tags. (#19304)
  • Fixed an error that could occur when listing an element without a slug in an element index.
  • Fixed a bug where Matrix and Addresses fields could have empty field action menus. (#19355)
  • Fixed a bug where success/failure notifications weren’t being shown after deleting elements. (#19028)
  • Fixed high-severity RCE vulnerabilities. (GHSA-5jmw-g85v-7jv2, GHSA-9c4j-cjw3-r3xx, GHSA-5r92-75j8-c534)
  • Fixed a high-severity information disclosure vulnerability. (GHSA-4mgp-5vf2-7c9m)
  • Fixed a moderate-severity information disclosure vulnerability. (GHSA-hfjh-gw6x-7pv5)
  • Fixed a low-severity XSS vulnerability. (GHSA-h9jh-v8vc-m5rp)
  • Fixed a low-severity authorization bypass vulnerability. (GHSA-6fp2-8j9w-7mj8)

5.10.12

  • Added craft\helpers\Gql::isMutation(). (#19285)
  • Fixed an error that could occur when saving an element with an eager-loaded relation field value. (#19280)
  • Fixed a bug where bulk entry moves could assign entries to sections that didn’t support their entry types. (#19268)
  • Fixed a bug where admin tables’ action buttons could fire when rendering. (#19255)
  • Fixed an error that occurred when using the null-safe operator in a Twig template. (#19279)
  • Fixed a bug where GraphQL mutation queries could be cached. (#19285)
  • Fixed a bug where custom element index pages were getting included in the control panel navigation, even if they only contained sources that the current user didn’t have access to. (#19289)
  • Fixed high-severity RCE vulnerabilities.
  • Fixed a moderate-severity permission escalation vulnerability.
  • Fixed a low-severity information disclosure vulnerability.

5.10.11

  • Added craft\gql\base\MutationResolver::requireAllowedSite().
  • Fixed a bug where JSON fields weren’t JSON-decoding values saved via GraphQL mutations. (#19230)
  • Fixed an error that could occur when reassigning entries to a new author when deleting a user. (#19154)
  • Fixed a bug where craft\web\twig\variables\CraftVariable::$rebrand was getting defined for Craft Team installs. (#19249)
  • Fixed a bug where “All entries” and “All users” sources could be listed above other sources in relation field settings. (#19185)
  • Fixed high-severity authorization bypass vulnerabilities.
  • Fixed moderate-severity authorization bypass vulnerabilities.
  • Fixed a moderate-severity permission escalation vulnerability.
  • Fixed low-severity XSS vulnerabilities.
  • Fixed a low-severity authorization bypass vulnerability.

5.10.10

  • Updated web-auth/webauthn-lib to 5.3. (#19226)
  • Fixed an error that could occur when running CLI commands. (#19030)

... (truncated)

Changelog

Sourced from craftcms/cms's changelog.

5.10.13.2 - 2026-08-05

  • Fixed a SQL error that could occur when viewing an element with an empty Categories field. (#19372)

5.10.13.1 - 2026-08-04

  • Fixed a bug where sanitized SVGs wouldn’t render. (#19368)

5.10.13 - 2026-08-04

  • Added craft\helpers\StringHelper::isMd5().
  • Fixed a bug where image transforms could be generated from a stale locally-cached copy of an asset’s source file, after the file was replaced on a non-local filesystem. (#19328)
  • Fixed a bug where warnings were getting logged for SSO attributes that mapped to native user properties. (#19294)
  • Fixed an error that could occur when applying a draft. (#19277)
  • Fixed an error that could occur when running project-config/apply --force. (#19300)
  • Fixed a bug where compiled templates could be missing the injected {{ head() }}, {{ beginBody() }}, or {{ endBody() }} tags. (#19304)
  • Fixed an error that could occur when listing an element without a slug in an element index.
  • Fixed a bug where Matrix and Addresses fields could have empty field action menus. (#19355)
  • Fixed a bug where success/failure notifications weren’t being shown after deleting elements. (#19028)
  • Fixed high-severity RCE vulnerabilities. (GHSA-5jmw-g85v-7jv2, GHSA-9c4j-cjw3-r3xx, GHSA-5r92-75j8-c534)
  • Fixed a high-severity information disclosure vulnerability. (GHSA-4mgp-5vf2-7c9m)
  • Fixed a moderate-severity information disclosure vulnerability. (GHSA-hfjh-gw6x-7pv5)
  • Fixed a low-severity XSS vulnerability. (GHSA-h9jh-v8vc-m5rp)
  • Fixed a low-severity authorization bypass vulnerability. (GHSA-6fp2-8j9w-7mj8)

5.10.12 - 2026-07-22

  • Added craft\helpers\Gql::isMutation(). (#19285)
  • Fixed an error that could occur when saving an element with an eager-loaded relation field value. (#19280)
  • Fixed a bug where bulk entry moves could assign entries to sections that didn’t support their entry types. (#19268)
  • Fixed a bug where admin tables’ action buttons could fire when rendering. (#19255)
  • Fixed an error that occurred when using the null-safe operator in a Twig template. (#19279)
  • Fixed a bug where GraphQL mutation queries could be cached. (#19285)
  • Fixed a bug where custom element index pages were getting included in the control panel navigation, even if they only contained sources that the current user didn’t have access to. (#19289)
  • Fixed high-severity RCE vulnerabilities. (GHSA-9wcj-wqqh-cqvg, GHSA-qj4v-m29p-fj4m)
  • Fixed a moderate-severity permission escalation vulnerability. (GHSA-jqf5-vfg6-8cx5)
  • Fixed a low-severity information disclosure vulnerability. (GHSA-5mjc-jqcw-6vrp)

5.10.11 - 2026-07-15

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump craftcms/cms from 5.10.4.1 to 5.10.13.2
2ff7414 
Bumps [craftcms/cms](https://github.com/craftcms/cms) from 5.10.4.1 to 5.10.13.2.
- [Release notes](https://github.com/craftcms/cms/releases)
- [Changelog](https://github.com/craftcms/cms/blob/5.x/CHANGELOG.md)
- [Commits](craftcms/cms@5.10.4.1...5.10.13.2)

---
updated-dependencies:
- dependency-name: craftcms/cms
  dependency-version: 5.10.13.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Aug 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants