6 December 2022

The following packages have been updated

@keystone-6/[email protected]
@keystone-6/[email protected]
@keystone-6/[email protected]
@keystone-6/[email protected]

Breaking Changes

• [core] Removes createContext, createRequestContext - replace any relevant usage with context.sudo(), context.withSession() or context.withRequest() (#8073) @borisno2

New Features

• [core, fields-document] Adds Project and Device Telemetry events to the keystone dev script (#8118) @borisno2
• [core] Adds HOST as an environment variable for keystone dev and keystone start, with higher precedence than config.server.options.host (#8132) @fkrauthan
• [core] Next.js 13 Upgrade (#8061) @AliceRossa
• [fields-document] Adds a new structure field type, a composable JSON data structure with a powerful GraphQL API (#7936) @emmatown

Bug Fixes

• [core] Fixes inline related item form submitting the parent form (#8123) @januzis
• [auth] Fixes initFirstItem bypass when ui.isAccessAllowed is defined (#8115) @dcousens

🌱 New Contributors

Thanks to the following developers for making their first contributions to the project!

• @fkrauthan (#8132)
• @januzis (#8123)
• @AliceRossa (#8061)
• @shusiner (#8114)

💙 Acknowledgements

Lastly, thanks to @dcousens (#8127,#8125,#8122,#8120,#8104,#8108,#8108,#8108), @borisno2 (#8134), @flexdinesh (#8124,#8119), @renovate (#8072,#8116,#8109), @emmatown (#8099) for changes not shown above, but none-the-less appreciated.

25 November 2022

The following packages have been updated

@keystone-6/[email protected]

Bug Fixes

• [core] Fixes access.filter.* passing listKey: undefined (#8122) @dcousens

21 November 2022

The following packages have been updated

@keystone-6/[email protected]

Bug Fixes

• [core] Fix http server not binding to :: by default (regression introduced by #8078) (#8105) @dcousens

18 November 2022

The following packages have been updated

@keystone-6/[email protected]

Bug Fixes

• [core] Fixes ui.displayMode in the relationship field incorrectly defaulting to count instead of select (#8099) @emmatown

17 November 2022

The following packages have been updated

@keystone-6/[email protected]
@keystone-6/[email protected]
@keystone-6/[email protected]
@keystone-6/[email protected]
@keystone-6/[email protected]

New Features

• [core] Adds a new group function for grouping fields in the Admin UI (#8088) @emmatown
• [core] Adds ui.searchFields for the relationship field (#8074) @dcousens
• [core] Adds fieldPosition to field ui.itemView, for moving a field to the sidebar (#8075) @borisno2
• [core] Adds context.withRequest, a method to derive an updated context from an incoming request and response (#8013) @borisno2

Bug Fixes

• [core] Fix the startup message to use the configured http.options host instead of assuming localhost (#8078) @u-ishii
• [core, fields-document] Fix relationship fields not using their ui.labelField configuration (#8049) @georgekrax
• [auth, cloudinary, core, document-renderer, fields-document] Adds exports field to package.json (#8054) @emmatown

🌱 New Contributors

Thanks to the following developers for making their first contributions to the project!

• @u-ishii (#8078)
• @georgekrax (#8049)

💙 Acknowledgements

Lastly, thanks to @keystonejs-release-bot (#8064,#8064,#8064) for changes not shown above, but none-the-less appreciated.

03 November 2022

The following packages have been updated

@keystone-6/[email protected]
@keystone-6/[email protected]

Bug Fixes

• [core] Improves performance of querying to-one relationships (#8000) @mitchellhamilton
• [core] Fixes in and not_in filter views for integer, bigInt, decimal and float fields (#7930) @nya1
• [core] Fixes issue where the custom field view controller was not being used. You should be able to override field controller when setting ui.views parameter in fields. (#8034) @gautamsi
• [core] Fixes changes to session/ui.publicPages/ui.isValidSession/ui.pageMiddleware not being updated in live reloads (#8038) @mitchellhamilton
• [core] Fixes platform configuration for esbuild (#8031) @mmachatschek
• [fields-document] Fixes selection for component blocks without child fields (#8021) @mitchellhamilton

🌱 New Contributors

Thanks to the following developers for making their first contributions to the project!

• @nya1 (#7930)
• @mmachatschek (#8031)
• @bketelsen (#8032)
• @lukebennett88 (#8033)

💙 Acknowledgements

Lastly, thanks to @mitchellhamilton (#8063,#8059,#8027), @renovate (#8056,#8055,#8053,#8045,#8041,#8036,#7974), @flexdinesh (#8060,#8039,#8048), @bladey (#8057), @dcousens (#8026) for changes not shown above, but none-the-less appreciated.

19 October 2022 (afternoon)

The following packages have been updated

@keystone-6/[email protected]

Bug Fixes

• [core] Fixes the inputData field type for FieldCreateItemAccessArgs (#8017) @acburdine

💙 Acknowledgements

Lastly, thanks to @dcousens (#8016) for changes not shown above, but none-the-less appreciated.

19 October 2022

The following packages have been updated

@keystone-6/[email protected]
@keystone-6/[email protected]
@keystone-6/[email protected]
@keystone-6/[email protected]

Breaking Changes

• [core] Changes access-control error messages to only show the list key and operation (#7914) @dcousens
• [core] Replaces @keystone-6/core/testing exports with { resetDatabase }, for a context use getContext instead (#7968) @mitchellhamilton
• [core] Removes @keystone-6/core/artifacts from our exports (#7972) @mitchellhamilton
• [core] Removes disconnect from SessionStrategy (#7971) @mitchellhamilton
• [core] Removes isLiveReload flag from createSystem (#7969) @mitchellhamilton
• [core] Removes the @graphql-tools/schema wrapping functions graphQLSchemaExtension and gql. Developers should import @graphql-tools/schema themselves, or use graphql (as exported by @keystone-6/core). (#7943) @borisno2
• [core] Removes filters export from @keystone-6/core/types (#7919) @mitchellhamilton
• [core] Removes experimental.generateNodeAPI, use getContext instead (#7957) @dcousens
• [core] db.onConnect is now called with an unprivileged context, not sudo. Use context.sudo() if you need to bypass access control (#7955) @dcousens
• [core] Removes the parameters for getAdminMeta when writing field types, and the respective types AdminMetaRootVal, ListMetaRootVal and FieldMetaRootVal therein. (#7913) @mitchellhamilton
• [core] Removes createSessionContext export from @keystone-6/core/session (#7912) @mitchellhamilton
• [core] Changes default Apollo Server configuration to use cache: "bounded" and persistedQueries: false (#7888) @mitchellhamilton
• [core] Changes .access control on list to required, with new allowAll and denyAll functions for easy shorthand. (#7848) @Noviny
• [core] Upgrade to graphql@16 (#7817) @mitchellhamilton
• [core] Changes field .views module resolution, from a path, to a module path that is resolved from where keystone start is run (#7805) @mitchellhamilton
• [core] Changes the return type for the resolveInput hook with json fields. Previously you may have used 'DbNull' or 'JsonNull' as respective null magic values - you can now always use a Javascript null value.
  Unlike previous behaviour, a null value will now consistently map to a Prisma.DbNull. (#7671) @renovate

New Features

• [core] Adds [list].graphql.maxTake, a list configuration option to enforce the maximum take value in findMany queries for that list (#7963) @dcousens
• [core] Adds new getContext function (from @keystone-6/core/context) for working with a Keystone configuration directly (#7954) @dcousens
• [core] Adds a search input field to the list view, resulting in a contains query across ui.searchFields joined with the list view filters (#7841) @Noviny
• [core] Adds a new isSingleton property for configuring Singleton lists (#7863) @mitchellhamilton

Bug Fixes

• [core] Fixes JSON field type view assuming the empty string is equivalent to null (#7982) @dcousens
• [auth] Adds type refinement for withAuth using a TypeInfo type parameter (#7831) @dcousens
• [core] Removes experimental.enableNextJsGraphqlApiEndpoint (#7910) @mitchellhamilton
• [core] Changed platform compilation to use esbuild, previously used next.js (#7809) @mitchellhamilton
• [core] Removes prettier from formatting the generated schema.graphql (#7874) @mitchellhamilton

🌱 New Contributors

Thanks to the following developers for making their first contributions to the project!

💙 Acknowledgements

Lastly, thanks to @dcousens (#8012,#7998,#7997,#7995,#7981,#7979,#7973,#7897,#7895,#7894,#7864), @renovate (#8008,#7988,#7976,#7938,#7854,#7892,#7886,#7885,#7868), @flexdinesh (#8004,#8002,#7987,#7994,#7983,#7937,#7813), @mitchellhamilton (#7999,#7990,#7991,#7960,#7951,#7953,#7928,#7921,#7911,#7903,#7882,#7887,#7871,#7872,#7845,#7844), @Tekipeps (#7989), @Noviny (#7941) for changes not shown above, but none-the-less appreciated.

18 October, 2022

The following packages have been updated

@keystone-6/[email protected]

Security Updates

We have identified and fixed 1 security vulnerabilities

• GHSA-6mhr-52mv-6v6f - The multiselect field is vulnerable to a field-level access-control bypass. We have patched the vulnerability in this release.

Bug Fixes

• [core] Fixes the multiselect field type not using the provided label, access, graphql, isFilterable or isOrderable configuration options (#8007) @marekryb
• [core] Fixes BigInt values throwing on deserialisation in the item view (#8005) @dcousens

🌱 New Contributors

Thanks to the following developers for making their first contributions to the project!

• @marekryb (#8007)

20 September 2022

The following packages have been updated

@keystone-6/[email protected]

Bug Fixes

• [fields-document] Fixes a broken code path for conditional component-blocks when fields are missing - this previously resulted in invalid data structures within the document editor (#7922) @mitchellhamilton