Hello everyone,
The following versions of Totara Learn have now been released:
- Release Evergreen
- Release 12.12
- Release 11.21
- Release 10.27
- Release 9.38
- Release 2.9.48
- Release 2.7.55
- Release 2.6.72
- Release 2.5.78
- Release 2.4.74
These versions do contain security fixes, and for this reason we strongly recommend upgrade.
Each release also includes bug fixes and improvements.
A big thanks to the following people for their contributions to this release:
- Andrew McMonagle at Learning Pool - TL-23076
- Davo Smith at Synergy Learning - TL-22601
- Michael Trio at Kineo USA - TL-22726
Kind regards
Riana Rossouw
Release Evergreen (26th November 2019):
Key: + Evergreen only
Security issues:
TL-23017 Backport MDL-66228: Prevented open redirect when editing Content page in Lesson activity
Performance improvements:
TL-22505 Improved performance of the certification completion audience rule when only one certification is selected
TL-22827 Improved appraisal assignment tab performance
Some appraisal functions in the assignment page have been rewritten to use
bulk SQL queries to improve their performance. Previously, the code worked
with one entity at a time.
TL-23076 Optimised SQL join query to include userid in the rb_source_dp_course report source
To improve report performance, if userid is supplied to the report page of
the "Record of Learning: Courses" report source, it is now included in the
'course_completion_history' join SQL query.
Improvements:
TL-22122 Added on-screen notification to users trying to connect to the Mozilla Open Badges Backpack
Since Mozilla retired its Open Badges Backpack platform in August 2019,
users attempting a connection to the backpack from Totara experience a
connection time out.
This improvement notifies the user about the backpack's end-of-service and
no longer tries to connect to the backpack.
Also, on new installations, the 'Enable connection to external backpacks'
is now disabled by default, since no other external backpacks are currently
supported.
TL-22414 + Made the visibility of course progress in blocks and the catalogue consistent
A course progress bar is no longer displayed in the 'Last course accessed',
'Featured Links', 'Recent Learning' block as well as the catalogue page if
the current user's enrolment is suspended or the user unenrols from the
course.
TL-22490 Added 'Export formats' and 'Export format override?' columns and filters to the 'Reports' report source
The report builder's 'Reports' report source now has two new columns and
filters to allow site admins to easily track the export formats used by
reports and quickly identify reports with a file export format option
override:
* The 'Export formats' column and filter shows the formats made available
for each report.
* The 'Export format override?' column and filter shows reports that have
export options that differ from the general export options for the report.
This improvement builds upon a change in October's release (TL-22260) that
added controls to the report level to ensure they are exported to relevant
file formats, and allows admins to better manage report export formats
available across the site.
TL-22527 Added additional JavaScript polyfills for IE 11
Added the following polyfills to support modern JavaScript APIs in IE 11:
* {String, Array}.prototype.includes
* Array.prototype.\{find, findIndex}
* NodeList.prototype.forEach
* Object.\{entries, values}
* Number.\{isFinite, isInteger, isNaN, parseFloat, parseInt}
TL-22627 Allowed empty usernames for HR Import configuration when using MSSQL server as an external database source
Microsoft IIS can use Windows Authentication to connect to an MSSQL
instance, eliminating the need to store database credentials within Totara.
HR Import now allows administrators to configure import from MSSQL using
Windows Authentication by leaving the username and password fields blank.
TL-22840 Added system information to upgrade logs
TL-22890 Backported TL-22783 / MDL-62891
Backported the following commits:
# [MDL-62891|https://tracker.moodle.org/browse/MDL-62891] core: Stop using
var_export() to describe callables
# [MDL-62891|https://tracker.moodle.org/browse/MDL-62891] core: Introduce
new get_callable_name() function
TL-22905 Improved log descriptions of job assignment events
Added a new job_assignment_created event for creating job
assignments. Improved event log description texts for
viewed/updated/deleted job assignment events by adding an actual user ID,
affected user ID and job assignment ID.
TL-22941 Added 'none' option to seminar event role multiselect to enable unassignment of all previously assigned event roles
TL-22973 Improved the alt text when removing the search text on the catalogue
TL-22976 Improved accessibility of the item details pane in the grid catalogue
TL-23006 User tour buttons now use default styling (instead of secondary styling)
Bug fixes:
TL-22442 Fixed seminar event descriptions to better indicate who triggered the event, and for which user's signup
The booking_booked, booking_cancelled, booking_requested,
booking_waitlisted, session_signup and signup_status_updated events were
modified to fix and improve the event description texts by adding the
affected user ID.
TL-22601 Search results count changes in report builder are now read by screen readers
When searching a report builder report, screen readers now read changes in
search results counts.
TL-22706 Fixed 'Upload completion records' when user has suspended manual enrolment in a course
Previously when using 'Upload completion records' for courses, if a user in
the uploaded CSV file has a suspended manual enrolment in a course an error
message was displayed and upload failed. This fix ensures that the admin
can upload a CSV file with a user that has a suspended manual enrolment.
TL-22726 Ensured totara_core_totara_lang_testcase passes with custom subplugins
TL-22804 Self-registration autocomplete fields now work on first click
TL-22825 + Fixed incorrect licence information on the ChartJS doughnut label plugin
TL-22828 Ensured program message placeholders work correctly when sending to managers
TL-22832 + Fix Manager's name on seminar event info page when learner has more than one manager
TL-22839 MS SQL Server driver in database authentication and enrolments now ignores incompatible charsets
TL-22862 Fixed missing job assignment on seminar signup when 'select job assignment' is enabled but user has only one assignment
TL-22863 Fixed use of MySQL 8 reserved keyword 'member' in Report builder sources
TL-22864 Fixed email spam when seminar sign-up state could not be switched to declined by the scheduled task
TL-22865 Fixed Log type field output when HR import log report is exported
TL-22866 Fixed 'Add users via file upload' for seminar attendees when custom field has been hidden
TL-22867 Fixed misalignment of videos in glossary activity
TL-22884 Fixed self-registration flow when site policy is provided in more than one language
TL-22886 Password length restriction was removed from user signup forms
TL-22901 Fixed Report Builder multicheck filter to work correctly with empty values
TL-22902 Separated the language strings used to describe override events which also appear in the Events Monitor list for Quiz, Lesson, and Assignment activities
TL-22903 User tours now work in Glossary activities
TL-22913 Ensured email field in HR Import user element is handled correctly when empty
When updating a user where the CSV source contains an empty email and the
'Empty string behaviour in CSV' field set to ignore, the user record is now
updated ignoring the empty email field. Previously the user was skipped.
When using a database source, with the email field set as null, the user is
also updated once again ignoring the empty email field. Previously the user
was updated with the email field being set as empty.
It is not be possible to create or update a user so that they have no
email.
TL-22929 Allowed multi-language values in report builder course shortname column
TL-22930 Made sure microphone and camera access is allowed from the iframe in the External Tool activities
TL-22944 Fixed help link for OAuth 2 services to point to the correct location
On the admin pages for setting up OAuth 2 services the help link to
detailed setup instructions pointed to an invalid page.
TL-22975 Screen readers no longer read the item name twice in grid catalogue
When using the grid catalogue, a screen reader would read a course (or
program or certification) name twice in quick succession. This has changed
so that it only reads it once.
TL-22981 Added role attributes to the grid catalogue
Previously, when using a screen reader on the grid catalogue all the tiles
would run into each other. This patch inserts a pause in speech between
tiles so that it is easier to differentiate between them.
TL-23016 Improved layout of "Show responses" tab in a feedback activity
This will require CSS to be regenerated for themes that use LESS
inheritance.
TL-23028 Backport MDL-62307: Made sure HTML special characters are decoded when viewing feedback responses
TL-23071 Gave Staff Manager role the ability to remove a team member from a seminar space allocation
TL-23080 Prevented ad hoc tasks from getting stuck in the queue due to error conditions
TL-23110 Changed how seminar notifications are marked as sent, in order to prevent sending multiple copies of the same notification
Previously, scheduled and custom seminar notifications were marked as sent
by the ad hoc task responsible for sending the email to the recipient. This
meant that on a system with a large number of ad hoc tasks in the queue,
the same notification-sending task might be queued again before the first
was marked as sent, resulting in duplicate emails.
Seminar notifications are now marked as sent at the time the ad hoc task
that will send them is created. While this could result in a notification
being marked as sent even though some later error condition prevents
sending the actual email, we consider it an acceptable trade-off to prevent
duplicate emails.
TL-23116 Fixed a bug in seminars that was sending booking confirmation twice when waitlisted users are confirmed
Miscellaneous Moodle fixes:
TL-22566 + MDL-59323: Fixed database check for defaults of character fields
TL-22636 + MDL-59572: error_log is used for AJAX/WS calls in DML layer
TL-22928 MDL-66140: Added fix to mitigate PECL solr extension regression
TL-22946 Backport MDL-57741: No simple way to use LTI launch without cartridge support
Contributions:
* Andrew McMonagle at Learning Pool - TL-23076
* Davo Smith at Synergy Learning - TL-22601
* Michael Trio at Kineo USA - TL-22726
Release 12.12 (26th November 2019):
Security issues:
TL-23017 Backport MDL-66228: Prevented open redirect when editing Content page in Lesson activity
Performance improvements:
TL-22505 Improved performance of the certification completion audience rule when only one certification is selected
TL-22827 Improved appraisal assignment tab performance
Some appraisal functions in the assignment page have been rewritten to use
bulk SQL queries to improve their performance. Previously, the code worked
with one entity at a time.
TL-23076 Optimised SQL join query to include userid in the rb_source_dp_course report source
To improve report performance, if userid is supplied to the report page of
the "Record of Learning: Courses" report source, it is now included in the
'course_completion_history' join SQL query.
Improvements:
TL-22122 Added on-screen notification to users trying to connect to the Mozilla Open Badges Backpack
Since Mozilla retired its Open Badges Backpack platform in August 2019,
users attempting a connection to the backpack from Totara experience a
connection time out.
This improvement notifies the user about the backpack's end-of-service and
no longer tries to connect to the backpack.
Also, on new installations, the 'Enable connection to external backpacks'
is now disabled by default, since no other external backpacks are currently
supported.
TL-22490 Added 'Export formats' and 'Export format override?' columns and filters to the 'Reports' report source
The report builder's 'Reports' report source now has two new columns and
filters to allow site admins to easily track the export formats used by
reports and quickly identify reports with a file export format option
override:
* The 'Export formats' column and filter shows the formats made available
for each report.
* The 'Export format override?' column and filter shows reports that have
export options that differ from the general export options for the report.
This improvement builds upon a change in October's release (TL-22260) that
added controls to the report level to ensure they are exported to relevant
file formats, and allows admins to better manage report export formats
available across the site.
TL-22627 Allowed empty usernames for HR Import configuration when using MSSQL server as an external database source
Microsoft IIS can use Windows Authentication to connect to an MSSQL
instance, eliminating the need to store database credentials within Totara.
HR Import now allows administrators to configure import from MSSQL using
Windows Authentication by leaving the username and password fields blank.
TL-22840 Added system information to upgrade logs
TL-22890 Backported TL-22783 / MDL-62891
Backported the following commits:
# [MDL-62891|https://tracker.moodle.org/browse/MDL-62891] core: Stop using
var_export() to describe callables
# [MDL-62891|https://tracker.moodle.org/browse/MDL-62891] core: Introduce
new get_callable_name() function
TL-22905 Improved log descriptions of job assignment events
Added a new job_assignment_created event for creating job
assignments. Improved event log description texts for
viewed/updated/deleted job assignment events by adding an actual user ID,
affected user ID and job assignment ID.
TL-22941 Added 'none' option to seminar event role multiselect to enable unassignment of all previously assigned event roles
TL-22973 Improved the alt text when removing the search text on the catalogue
TL-22976 Improved accessibility of the item details pane in the grid catalogue
TL-23006 User tour buttons now use default styling (instead of secondary styling)
Bug fixes:
TL-22442 Fixed seminar event descriptions to better indicate who triggered the event, and for which user's signup
The booking_booked, booking_cancelled, booking_requested,
booking_waitlisted, session_signup and signup_status_updated events were
modified to fix and improve the event description texts by adding the
affected user ID.
TL-22601 Search results count changes in report builder are now read by screen readers
When searching a report builder report, screen readers now read changes in
search results counts.
TL-22706 Fixed 'Upload completion records' when user has suspended manual enrolment in a course
Previously when using 'Upload completion records' for courses, if a user in
the uploaded CSV file has a suspended manual enrolment in a course an error
message was displayed and upload failed. This fix ensures that the admin
can upload a CSV file with a user that has a suspended manual enrolment.
TL-22726 Ensured totara_core_totara_lang_testcase passes with custom subplugins
TL-22804 Self-registration autocomplete fields now work on first click
TL-22828 Ensured program message placeholders work correctly when sending to managers
TL-22838 Fixed double encoded entities in report exports
This is a partial backport of TL-21275 where we replaced relevant report
builder calls to format_string() with calls to the report builder display
class format_string which correctly encodes the string according to the
output format.
TL-22839 MS SQL Server driver in database authentication and enrolments now ignores incompatible charsets
TL-22862 Fixed missing job assignment on seminar signup when 'select job assignment' is enabled but user has only one assignment
TL-22863 Fixed use of MySQL 8 reserved keyword 'member' in Report builder sources
TL-22864 Fixed email spam when seminar sign-up state could not be switched to declined by the scheduled task
TL-22865 Fixed Log type field output when HR import log report is exported
TL-22866 Fixed 'Add users via file upload' for seminar attendees when custom field has been hidden
TL-22867 Fixed misalignment of videos in glossary activity
TL-22884 Fixed self-registration flow when site policy is provided in more than one language
TL-22886 Password length restriction was removed from user signup forms
TL-22901 Fixed Report Builder multicheck filter to work correctly with empty values
TL-22902 Separated the language strings used to describe override events which also appear in the Events Monitor list for Quiz, Lesson, and Assignment activities
TL-22903 User tours now work in Glossary activities
TL-22913 Ensured email field in HR Import user element is handled correctly when empty
When updating a user where the CSV source contains an empty email and the
'Empty string behaviour in CSV' field set to ignore, the user record is now
updated ignoring the empty email field. Previously the user was skipped.
When using a database source, with the email field set as null, the user is
also updated once again ignoring the empty email field. Previously the user
was updated with the email field being set as empty.
It is not be possible to create or update a user so that they have no
email.
TL-22929 Allowed multi-language values in report builder course shortname column
TL-22930 Made sure microphone and camera access is allowed from the iframe in the External Tool activities
TL-22944 Fixed help link for OAuth 2 services to point to the correct location
On the admin pages for setting up OAuth 2 services the help link to
detailed setup instructions pointed to an invalid page.
TL-22955 Fixed broken 'Turn editing off' link on the seminar attendees page
TL-22975 Screen readers no longer read the item name twice in grid catalogue
When using the grid catalogue, a screen reader would read a course (or
program or certification) name twice in quick succession. This has changed
so that it only reads it once.
TL-22981 Added role attributes to the grid catalogue
Previously, when using a screen reader on the grid catalogue all the tiles
would run into each other. This patch inserts a pause in speech between
tiles so that it is easier to differentiate between them.
TL-23016 Improved layout of "Show responses" tab in a feedback activity
This will require CSS to be regenerated for themes that use LESS
inheritance.
TL-23028 Backport MDL-62307: Made sure HTML special characters are decoded when viewing feedback responses
TL-23071 Gave Staff Manager role the ability to remove a team member from a seminar space allocation
TL-23080 Prevented ad hoc tasks from getting stuck in the queue due to error conditions
TL-23110 Changed how seminar notifications are marked as sent, in order to prevent sending multiple copies of the same notification
Previously, scheduled and custom seminar notifications were marked as sent
by the ad hoc task responsible for sending the email to the recipient. This
meant that on a system with a large number of ad hoc tasks in the queue,
the same notification-sending task might be queued again before the first
was marked as sent, resulting in duplicate emails.
Seminar notifications are now marked as sent at the time the ad hoc task
that will send them is created. While this could result in a notification
being marked as sent even though some later error condition prevents
sending the actual email, we consider it an acceptable trade-off to prevent
duplicate emails.
TL-23116 Fixed a bug in seminars that was sending booking confirmation twice when waitlisted users are confirmed
Miscellaneous Moodle fixes:
TL-22928 MDL-66140: Added fix to mitigate PECL solr extension regression
TL-22946 Backport MDL-57741: No simple way to use LTI launch without cartridge support
Contributions:
* Andrew McMonagle at Learning Pool - TL-23076
* Davo Smith at Synergy Learning - TL-22601
* Michael Trio at Kineo USA - TL-22726
Release 11.21 (26th November 2019):
Security issues:
TL-23017 Backport MDL-66228: Prevented open redirect when editing Content page in Lesson activity
Performance improvements:
TL-22827 Improved appraisal assignment tab performance
Some appraisal functions in the assignment page have been rewritten to use
bulk SQL queries to improve their performance. Previously, the code worked
with one entity at a time.
Improvements:
TL-22122 Added on-screen notification to users trying to connect to the Mozilla Open Badges Backpack
Since Mozilla retired its Open Badges Backpack platform in August 2019,
users attempting a connection to the backpack from Totara experience a
connection time out.
This improvement notifies the user about the backpack's end-of-service and
no longer tries to connect to the backpack.
Also, on new installations, the 'Enable connection to external backpacks'
is now disabled by default, since no other external backpacks are currently
supported.
TL-22840 Added system information to upgrade logs
TL-22890 Backported TL-22783 / MDL-62891
Backported the following commits:
# [MDL-62891|https://tracker.moodle.org/browse/MDL-62891] core: Stop using
var_export() to describe callables
# [MDL-62891|https://tracker.moodle.org/browse/MDL-62891] core: Introduce
new get_callable_name() function
TL-22905 Improved log descriptions of job assignment events
Added a new job_assignment_created event for creating job
assignments. Improved event log description texts for
viewed/updated/deleted job assignment events by adding an actual user ID,
affected user ID and job assignment ID.
Bug fixes:
TL-22839 MS SQL Server driver in database authentication and enrolments now ignores incompatible charsets
TL-22863 Fixed use of MySQL 8 reserved keyword 'member' in Report builder sources
TL-22866 Fixed 'Add users via file upload' for seminar attendees when custom field has been hidden
TL-22884 Fixed self-registration flow when site policy is provided in more than one language
TL-22886 Password length restriction was removed from user signup forms
TL-22902 Separated the language strings used to describe override events which also appear in the Events Monitor list for Quiz, Lesson, and Assignment activities
TL-22930 Made sure microphone and camera access is allowed from the iframe in the External Tool activities
TL-23028 Backport MDL-62307: Made sure HTML special characters are decoded when viewing feedback responses
Miscellaneous Moodle fixes:
TL-22928 MDL-66140: Added fix to mitigate PECL solr extension regression
TL-22946 Backport MDL-57741: No simple way to use LTI launch without cartridge support
Release 10.27 (26th November 2019):
Security issues:
TL-23017 Backport MDL-66228: Prevented open redirect when editing Content page in Lesson activity
Performance improvements:
TL-22827 Improved appraisal assignment tab performance
Some appraisal functions in the assignment page have been rewritten to use
bulk SQL queries to improve their performance. Previously, the code worked
with one entity at a time.
Improvements:
TL-22122 Added on-screen notification to users trying to connect to the Mozilla Open Badges Backpack
Since Mozilla retired its Open Badges Backpack platform in August 2019,
users attempting a connection to the backpack from Totara experience a
connection time out.
This improvement notifies the user about the backpack's end-of-service and
no longer tries to connect to the backpack.
Also, on new installations, the 'Enable connection to external backpacks'
is now disabled by default, since no other external backpacks are currently
supported.
TL-22840 Added system information to upgrade logs
TL-22890 Backported TL-22783 / MDL-62891
Backported the following commits:
# [MDL-62891|https://tracker.moodle.org/browse/MDL-62891] core: Stop using
var_export() to describe callables
# [MDL-62891|https://tracker.moodle.org/browse/MDL-62891] core: Introduce
new get_callable_name() function
Bug fixes:
TL-22863 Fixed use of MySQL 8 reserved keyword 'member' in Report builder sources
TL-22886 Password length restriction was removed from user signup forms
TL-22930 Made sure microphone and camera access is allowed from the iframe in the External Tool activities
Miscellaneous Moodle fixes:
TL-22946 Backport MDL-57741: No simple way to use LTI launch without cartridge support
Release 9.38 (26th November 2019):
Security issues:
TL-23017 Backport MDL-66228: Prevented open redirect when editing Content page in Lesson activity
Performance improvements:
TL-22827 Improved appraisal assignment tab performance
Some appraisal functions in the assignment page have been rewritten to use
bulk SQL queries to improve their performance. Previously, the code worked
with one entity at a time.
Improvements:
TL-22122 Added on-screen notification to users trying to connect to the Mozilla Open Badges Backpack
Since Mozilla retired its Open Badges Backpack platform in August 2019,
users attempting a connection to the backpack from Totara experience a
connection time out.
This improvement notifies the user about the backpack's end-of-service and
no longer tries to connect to the backpack.
Also, on new installations, the 'Enable connection to external backpacks'
is now disabled by default, since no other external backpacks are currently
supported.
TL-22840 Added system information to upgrade logs
TL-22890 Backported TL-22783 / MDL-62891
Backported the following commits:
# [MDL-62891|https://tracker.moodle.org/browse/MDL-62891] core: Stop using
var_export() to describe callables
# [MDL-62891|https://tracker.moodle.org/browse/MDL-62891] core: Introduce
new get_callable_name() function
Bug fixes:
TL-22863 Fixed use of MySQL 8 reserved keyword 'member' in Report builder sources
TL-22886 Password length restriction was removed from user signup forms
TL-22930 Made sure microphone and camera access is allowed from the iframe in the External Tool activities
Release 2.9.48 (26th November 2019):
Improvements:
TL-22122 Added on-screen notification to users trying to connect to the Mozilla Open Badges Backpack
Since Mozilla retired its Open Badges Backpack platform in August 2019,
users attempting a connection to the backpack from Totara experience a
connection time out.
This improvement notifies the user about the backpack's end-of-service and
no longer tries to connect to the backpack.
Also, on new installations, the 'Enable connection to external backpacks'
is now disabled by default, since no other external backpacks are currently
supported.
Release 2.7.55 (26th November 2019):
Improvements:
TL-22122 Added on-screen notification to users trying to connect to the Mozilla Open Badges Backpack
Since Mozilla retired its Open Badges Backpack platform in August 2019,
users attempting a connection to the backpack from Totara experience a
connection time out.
This improvement notifies the user about the backpack's end-of-service and
no longer tries to connect to the backpack.
Also, on new installations, the 'Enable connection to external backpacks'
is now disabled by default, since no other external backpacks are currently
supported.
Release 2.6.72 (26th November 2019):
Improvements:
TL-22122 Added on-screen notification to users trying to connect to the Mozilla Open Badges Backpack
Since Mozilla retired its Open Badges Backpack platform in August 2019,
users attempting a connection to the backpack from Totara experience a
connection time out.
This improvement notifies the user about the backpack's end-of-service and
no longer tries to connect to the backpack.
Also, on new installations, the 'Enable connection to external backpacks'
is now disabled by default, since no other external backpacks are currently
supported.
Release 2.5.78 (26th November 2019):
Improvements:
TL-22122 Added on-screen notification to users trying to connect to the Mozilla Open Badges Backpack
Since Mozilla retired its Open Badges Backpack platform in August 2019,
users attempting a connection to the backpack from Totara experience a
connection time out.
This improvement notifies the user about the backpack's end-of-service and
no longer tries to connect to the backpack.
Also, on new installations, the 'Enable connection to external backpacks'
is now disabled by default, since no other external backpacks are currently
supported.
Release 2.4.74 (26th November 2019):
Improvements:
TL-22122 Added on-screen notification to users trying to connect to the Mozilla Open Badges Backpack
Since Mozilla retired its Open Badges Backpack platform in August 2019,
users attempting a connection to the backpack from Totara experience a
connection time out.
This improvement notifies the user about the backpack's end-of-service and
no longer tries to connect to the backpack.
Also, on new installations, the 'Enable connection to external backpacks'
is now disabled by default, since no other external backpacks are currently
supported.