Hello everyone,
The following versions of Totara have now been released:
Some of these versions do contain security fixes, and for this reason we strongly recommend upgrade.
Each release also includes various bug fixes and improvements.
Kind regards Release Team
Release 17.1 (29th November 2022):
Improvements: TL-34814 Added a warning to seminar adhoc messages when legacy notifications are disabled TL-34991 Added totara_job_job_assignments query to the external API A new query 'totara_job_job_assignments' is added to the external API to fetch all job_assignments, providing options for sorting and paginating results. TL-35074 Ensure sort order for seminar sessions is consistent TL-35156 Allows users to access their notification logs This adds a new capability 'totara/notification:auditownnotifications'. This will allow the user to view their own notification logs. This is not added to any role by default. TL-35230 Added the 'Section title' multi-select filter to the performance activities response data report TL-35278 Added default filters to the performance activity response data reports for 'Element type', 'Response data text' and 'Review type' TL-35410 Added default error response_debug site setting Added a response_debug setting to the API site-level settings to configure the amount of error information returned in API responses TL-35628 Improved documentation for API client settings token expiration form field TL-35887 Deprecated the setting to use the legacy program interface In Totara 12.8, a new program assignments interface was added, which was more scalable for large sites, and a setting was introduced for users wanting to continue using the old interface. The setting has now been deprecated and the old program assignment interface will be removed in TXP 18. TL-35895 Added support for privacy-aware page titles to $PAGE object It is now possible for a page to optionally set a 'privacy-aware' page title as well as the normal title. This title is stored in the $PAGE object and can be retrieved when a page title that does not contain personally identifiable information is needed. We have modified all known pages that contain the users' names to specify a second title that excludes the name. A use case for this is to avoid sending Personal Identifiable Information (PII) to a third-party analytics service. Bug fixes: TL-34893 Fixed cloning of perform elements not cloning related files after draft files are cleaned up TL-35112 Fixed allowing selection of resources when the user is not allowed to share a resource A user that is not allowed to share a resource can no longer select resources to share. TL-35149 Fixed not being able to complete a quiz when only the required grade is checked TL-35222 Fixed search for users via email when choosing a manager for a job assignment TL-35381 Fixed 'event under minimum bookings' centralised notification being sent when centralised notifications are disabled TL-35426 Fixed error being triggered in LinkedIn cron task due to unwanted records left in 'totara_contentmarketplace_course_module_source' table TL-35486 Fixed multi-lang filter not direct filtering json_editor content unless it contained a placeholder TL-35520 Fixed validation for recipients when creating centralised notifications TL-35526 Fixed resource card width on dashboard sidebar blocks TL-35532 Fixed GraphQL mutation to enable notification without passing the field 'is_enabled' TL-35606 Updated the help string for the service account selector in the UI TL-35664 Fixed typo in the days to keep notification logs settings description TL-35665 Fixed typo in context help for notification delivery preferences TL-35792 Fixed Perform notification placeholder 'subject_instance:created_at' displaying an unformatted date TL-35841 Fixed an error being triggered when clicking on the comment submit button while reply textarea is still loading The submit button on a comment reply form is now disabled while the component is loading. TL-35862 Added debugging messages for deprecated notification preference functions The following deprecated functions have had debugging messages added: * notification_preference_builder::set_recipient() * notification_preference_value::get_recipient() * notification_preference::get_recipient() * create_notification_preference::resolve() * update_notification_preference::resolve() TL-35876 Fixed 'All participants' column in the Course completion report source returning more than one record TL-35891 Added a MariaDB optimizer hint for search depth to fix an issue where some versions of MariaDB could get stuck on Perform response reporting MariaDB versions 10.5 and earlier have an issue with the default setting for optimizer_search_depth where some complex queries can cause the optimizer to take a long time to generate a query plan. This can be fixed by adjusting the optimizer_search_depth setting. This patch introduces the ability to add an optimizer hint for this purpose on a per-query basis. It makes use of the existing moodle_database::get_optimizer_hint() functionality. Such an adjustment has been applied to the performance activity response data reporting, where this problem occurred. This particular adjustment can still be overridden by setting a value for $CFG->mariadb_search_depth_perform_response_reporting in config.php. TL-35463 Fixed the accessibility of the Tui FormRow component when help icon is present Technical changes: TL-35277 Remove unneeded JS checks for core component
Release 16.7 (29th November 2022):
Security issues: TL-35316 Disabled database migration tool web interface by default The experimental database migration tool web interface located under 'Development > Experimental > Database migration' has been disabled by default. To make it accessible again, it must be enabled by setting '$CFG->enable_tool_dbtransfer' to true in config.php. Please use the command line version of this tool instead. Improvements: TL-32731 Clicking on an Engage article no longer triggers editing mode Users who have permission to edit an Engage article are no longer put into edit mode when they click on it. This allows those users to follow links and interact with the article as users normally would. A new edit icon is added to the article for those who have permission to edit it that enables them to toggle in and out of editing mode. TL-34814 Added a warning to seminar adhoc messages when legacy notifications are disabled TL-35074 Ensure sort order for seminar sessions is consistent TL-35895 Added support for privacy-aware page titles to $PAGE object It is now possible for a page to optionally set a 'privacy-aware' page title as well as the normal title. This title is stored in the $PAGE object and can be retrieved when a page title that does not contain personally identifiable information is needed. We have modified all known pages that contain the users' names to specify a second title that excludes the name. A use case for this is to avoid sending Personal Identifiable Information (PII) to a third-party analytics service. Bug fixes: TL-34758 Ensured course forum searches using tags that contain spaces works correctly TL-34893 Fixed cloning of perform elements not cloning related files after draft files are cleaned up TL-35064 Fixed a bug which prevented deleting a section in a performance activity that includes a review question TL-35112 Fixed allowing selection of resources when the user is not allowed to share a resource A user that is not allowed to share a resource can no longer select resources to share. TL-35149 Fixed not being able to complete a quiz when only the required grade is checked TL-35170 Fixed email casing when matching users for seminar attendance import TL-35206 Fixed an error on the course page for certain assignment settings that was displayed when debugging was turned on TL-35222 Fixed search for users via email when choosing a manager for a job assignment TL-35381 Fixed 'event under minimum bookings' centralised notification being sent when centralised notifications are disabled TL-35426 Fixed error being triggered in LinkedIn cron task due to unwanted records left in 'totara_contentmarketplace_course_module_source' table TL-35506 Added further validation around forced delivery channels when creating / updating notification preferences TL-35516 Fixed wrong grouping when using multi-select custom field TL-35526 Fixed resource card width on dashboard sidebar blocks TL-35532 Fixed GraphQL mutation to enable notification without passing the field 'is_enabled' TL-35536 Fixed recommending workspaces/resources/courses that are not visible to the user. TL-35548 Fixed duplicate due date program and certification notifications Duplicate program and certification due date and course set due date notifications were being sent if a user was assigned by more than one method. TL-35644 Prevented transformation of some right to left CSS styles In some locations, there were styles for right to left languages that were being transformed when they should not have been. These have been fixed so that those styles are no longer transformed TL-35654 Updated the Comment component to scroll smoothly to the reply box only if it is outside of the scroll view TL-35736 Fixed a bug where the focus outline was being applied to the wrong element on Weka video and audio blocks TL-35791 Fixed managers full name link notification placeholder so that it renders correctly TL-35810 Fixed a notice that can appear after upgrading from Totara 14 if no recommendations options have been saved. TL-35841 Fixed an error being triggered when clicking on the comment submit button while reply textarea is still loading The submit button on a comment reply form is now disabled while the component is loading. TL-35876 Fixed 'All participants' column in the Course completion report source returning more than one record TL-35463 Fixed the accessibility of the Tui FormRow component when help icon is present
Release 15.13 (29th November 2022):
Security issues: TL-35316 Disabled database migration tool web interface by default The experimental database migration tool web interface located under 'Development > Experimental > Database migration' has been disabled by default. To make it accessible again, it must be enabled by setting '$CFG->enable_tool_dbtransfer' to true in config.php. Please use the command line version of this tool instead. Improvements: TL-35074 Ensure sort order for seminar sessions is consistent Bug fixes: TL-34758 Ensured course forum searches using tags that contain spaces works correctly TL-34893 Fixed cloning of perform elements not cloning related files after draft files are cleaned up TL-35112 Fixed allowing selection of resources when the user is not allowed to share a resource A user that is not allowed to share a resource can no longer select resources to share. TL-35149 Fixed not being able to complete a quiz when only the required grade is checked TL-35170 Fixed email casing when matching users for seminar attendance import TL-35206 Fixed an error on the course page for certain assignment settings that was displayed when debugging was turned on TL-35426 Fixed error being triggered in LinkedIn cron task due to unwanted records left in 'totara_contentmarketplace_course_module_source' table TL-35506 Added further validation around forced delivery channels when creating / updating notification preferences TL-35516 Fixed wrong grouping when using multi-select custom field TL-35526 Fixed resource card width on dashboard sidebar blocks TL-35532 Fixed GraphQL mutation to enable notification without passing the field 'is_enabled' TL-35536 Fixed recommending workspaces/resources/courses that are not visible to the user. TL-35548 Fixed duplicate due date program and certification notifications Duplicate program and certification due date and course set due date notifications were being sent if a user was assigned by more than one method. TL-35644 Prevented transformation of some right to left CSS styles In some locations, there were styles for right to left languages that were being transformed when they should not have been. These have been fixed so that those styles are no longer transformed TL-35654 Updated the Comment component to scroll smoothly to the reply box only if it is outside of the scroll view TL-35736 Fixed a bug where the focus outline was being applied to the wrong element on Weka video and audio blocks TL-35791 Fixed managers full name link notification placeholder so that it renders correctly TL-35810 Fixed a notice that can appear after upgrading from Totara 14 if no recommendations options have been saved. TL-35841 Fixed an error being triggered when clicking on the comment submit button while reply textarea is still loading The submit button on a comment reply form is now disabled while the component is loading. TL-35463 Fixed the accessibility of the Tui FormRow component when help icon is present
Release 14.18 (29th November 2022):
Security issues: TL-35316 Disabled database migration tool web interface by default The experimental database migration tool web interface located under 'Development > Experimental > Database migration' has been disabled by default. To make it accessible again, it must be enabled by setting '$CFG->enable_tool_dbtransfer' to true in config.php. Please use the command line version of this tool instead. Improvements: TL-35074 Ensure sort order for seminar sessions is consistent Bug fixes: TL-34758 Ensured course forum searches using tags that contain spaces works correctly TL-34893 Fixed cloning of perform elements not cloning related files after draft files are cleaned up TL-35112 Fixed allowing selection of resources when the user is not allowed to share a resource A user that is not allowed to share a resource can no longer select resources to share. TL-35149 Fixed not being able to complete a quiz when only the required grade is checked TL-35206 Fixed an error on the course page for certain assignment settings that was displayed when debugging was turned on TL-35506 Added further validation around forced delivery channels when creating / updating notification preferences TL-35516 Fixed wrong grouping when using multi-select custom field TL-35526 Fixed resource card width on dashboard sidebar blocks TL-35536 Fixed recommending workspaces/resources/courses that are not visible to the user. TL-35548 Fixed duplicate due date program and certification notifications Duplicate program and certification due date and course set due date notifications were being sent if a user was assigned by more than one method. TL-35644 Prevented transformation of some right to left CSS styles In some locations, there were styles for right to left languages that were being transformed when they should not have been. These have been fixed so that those styles are no longer transformed TL-35654 Updated the Comment component to scroll smoothly to the reply box only if it is outside of the scroll view TL-35736 Fixed a bug where the focus outline was being applied to the wrong element on Weka video and audio blocks TL-35791 Fixed managers full name link notification placeholder so that it renders correctly TL-35841 Fixed an error being triggered when clicking on the comment submit button while reply textarea is still loading The submit button on a comment reply form is now disabled while the component is loading. TL-35463 Fixed the accessibility of the Tui FormRow component when help icon is present
Release 13.26 (29th November 2022):
Security issues: TL-35316 Disabled database migration tool web interface by default The experimental database migration tool web interface located under 'Development > Experimental > Database migration' has been disabled by default. To make it accessible again, it must be enabled by setting '$CFG->enable_tool_dbtransfer' to true in config.php. Please use the command line version of this tool instead. Bug fixes: TL-34893 Fixed cloning of perform elements not cloning related files after draft files are cleaned up TL-35112 Fixed allowing selection of resources when the user is not allowed to share a resource A user that is not allowed to share a resource can no longer select resources to share. TL-35149 Fixed not being able to complete a quiz when only the required grade is checked TL-35206 Fixed an error on the course page for certain assignment settings that was displayed when debugging was turned on TL-35516 Fixed wrong grouping when using multi-select custom field TL-35526 Fixed resource card width on dashboard sidebar blocks TL-35536 Fixed recommending workspaces/resources/courses that are not visible to the user. TL-35644 Prevented transformation of some right to left CSS styles In some locations, there were styles for right to left languages that were being transformed when they should not have been. These have been fixed so that those styles are no longer transformed TL-35654 Updated the Comment component to scroll smoothly to the reply box only if it is outside of the scroll view TL-35736 Fixed a bug where the focus outline was being applied to the wrong element on Weka video and audio blocks TL-35841 Fixed an error being triggered when clicking on the comment submit button while reply textarea is still loading The submit button on a comment reply form is now disabled while the component is loading.
Release 12.48 (29th November 2022):
Security issues: TL-35316 Disabled database migration tool web interface by default The experimental database migration tool web interface located under 'Development > Experimental > Database migration' has been disabled by default. To make it accessible again, it must be enabled by setting '$CFG->enable_tool_dbtransfer' to true in config.php. Please use the command line version of this tool instead.