TYPO3 version 13.4.1 is now available (security release).
Upgrading to TYPO3 13.4.1
TYPO3 13.4.1 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply TYPO3 updates as new versions are released, or use Installatron's Clone feature to duplicate an existing TYPO3 install to test the 13.4.1 upgrade prior to applying it live. Get started managing your TYPO3 installations with Installatron
What's New in TYPO3 13.4.1
Security
[SECURITY] Show only explicitly configured page tree information (thanks to Oliver Hader)
[SECURITY] Avoid invalid JSON in ShortcutRepository arguments (thanks to Oliver Hader)
13.4.1
Bug Fixes and Changes
[RELEASE] Release of TYPO3 13.4.1 (thanks to Oliver Hader)
[TASK] Update packages symfony/http-foundation & symfony/process (thanks to Oliver Hader)
[BUGFIX] Make redirect internal fields readonly (thanks to Oliver Bartsch)
[BUGFIX] Display correct method for callable event listeners (thanks to Oliver Bartsch)
[TASK] Account for utf8 platform alias utf8mb3 in schema migrator tests (thanks to Benjamin Franzke)
[BUGFIX] Respect model type configuration in ColumnMapFactory (thanks to Oliver Bartsch)
[TASK] Raise phpstan to 1.12.10 (thanks to Benjamin Franzke)
[TASK] Add @since to NullToDefaultUpdateWizard (thanks to Christian Kuhn)
[TASK] Revert "[TASK] Improve debug output of PAGEVIEW" (thanks to Benjamin Franzke)
[BUGFIX] Apply defaultTableOptions to CREATE TABLE DEFAULTS (thanks to Benjamin Franzke)
[TASK] Raise phpstan to 1.12.9 (thanks to Benjamin Franzke)
[DOCS] Update supported versions in SECURITY.md (thanks to Elias Häußler)
[BUGFIX] Handle invalid pageTitleProviders definitions (thanks to Lina Wolf)
[BUGFIX] Unique default value configurations for NewContentElementWizard (thanks to Nikita Hovratov)
[BUGFIX] Make forms listing scrollable again (thanks to Oliver Bartsch)
[DOCS] Exchange ReST file links to Doctrine DBAL repository (thanks to Stefan Bürk)
[DOCS] Update changelog with JavaScript migration for goToModule (thanks to Garvin Hicking)
[TASK] Add new list_type deprecation match to extension scanner (thanks to Torben Hansen)
[BUGFIX] Early return if no rootline provided in SysTemplateRepository (thanks to Georg Ringer)
[BUGFIX] Apply InnoDB as default to CREATE TABLE options (thanks to Benjamin Franzke)
[BUGFIX] Respect templateName for fluid template assets rendering (thanks to Stefan Rumzucker)
[BUGFIX] Fix shorthand translation key handling in extbase validators (thanks to Torben Hansen)
[BUGFIX] Show last page of live search with different result-groups (thanks to Ayke Halder)
[DOCS] Enhance changelog of yaml:lint command (thanks to Chris Müller)
[BUGFIX] Add missing page content types section to user group compare (thanks to Oliver Bartsch)
[BUGFIX] Generate correct overlay icon when hiding record in record list (thanks to Andreas Kienast)
[TASK] Extend lifetime of legacy local and additional configuration migration (thanks to Oliver Bartsch)
[BUGFIX] Scroll element into view when reviewing FormEngine field (thanks to Andreas Kienast)
[BUGFIX] Allow BE user compare with outdated page content types (thanks to Mathias Brodala)
[BUGFIX] Prevent PHP warning for invalid fields in defaultValues (thanks to Oliver Bartsch)
[BUGFIX] Fix LocalizationUtility in TS override mode not using defaults (thanks to Garvin Hicking)
[TASK] Add note on removal of FileRepository->findFileReferenceByUid() (thanks to Martin Kutschker)
[BUGFIX] Add update wizard to prevent truncation error in DB upgrade (thanks to Benjamin Franzke)
[BUGFIX] Ensure existing preview popup windows are focussed (thanks to Garvin Hicking)
[TASK] Streamline MimeTypeValidator option handling in FileUpload (thanks to Torben Hansen)
[DOCS] Embed System Notes Video Tutorial (thanks to Tom Warwick)
[BUGFIX] Use platform specific doctrine/dbal schema comparators (thanks to Benjamin Franzke)
[BUGFIX] Remove slow MySQL table index queries (thanks to Benjamin Franzke)
[BUGFIX] Reference correct time fields in cache calculation (thanks to Andreas Kienast)
[BUGFIX] Handle empty field array in FormEngine (thanks to Oliver Bartsch)
[BUGFIX] Fix optional site set dependencies (thanks to Benjamin Franzke)
[BUGFIX] Fix mariadb platform detection in various places (thanks to Benjamin Franzke)
[BUGFIX] Properly enable 'translationOption' for all validators (thanks to Jörg Hofrichter)
[BUGFIX] Sort resolved file references (thanks to Nikita Hovratov)
[BUGFIX] Add missing label for TsConfig provided by site (thanks to Georg Ringer)
[BUGFIX] Initialize FormEngine review module before validation takes place (thanks to Andreas Kienast)
[TASK] Transform FormEngineValidation into a TypeScript class (thanks to Ayke Halder)
[TASK] Update typo3/class-alias-loader for PHP 8.4 compatibility (thanks to Benjamin Franzke)
[DOCS] Properly use "minimum" and "maximum" in EXT:form documentation (thanks to stefanheinrich-at-wiro)
[BUGFIX] Ensure same RecordIdentityMap for cloned PageLayoutContext (thanks to Nikita Hovratov)
[BUGFIX] Provide full raw record to content object rendering (thanks to Oliver Bartsch)
[BUGFIX] Validate date ranges correctly (thanks to Andreas Kienast)
[BUGFIX] Use correct dataset identifier for date ranges (thanks to Andreas Kienast)
[BUGFIX] Prevent RTE CKEditor5 initialization race condition (thanks to Benjamin Franzke)
[TASK] Return string in FormEngine integer parsing (thanks to Andreas Kienast)
[BUGFIX] Fix template clone for database charset wizard (thanks to Benjamin Franzke)
[BUGFIX] Add missing offset to "Create missing tables and fields" wizard (thanks to Benjamin Franzke)
[BUGFIX] Dynamically apply CSP sources for sitemap.xml styles (thanks to Oliver Hader)
[TASK] Cache frontend Content-Security-Policy dynamic mutations (thanks to Oliver Hader)
[BUGFIX] Parse csp.yaml with placeholders (thanks to Sebastian Iffland)
[DOCS] Correct usage of form definition in finisher templates (thanks to Maik Hagenbruch)
[BUGFIX] Fix generation of arbitrary HMENU with userfunction (thanks to Xavier Perseguers)
[TASK] Add method FileReference::isType() (thanks to Oliver Hader)
[BUGFIX] Show number of total records found in EXT:indexed_search (thanks to Garvin Hicking)
[DOCS] Improve example for rendering record objects in PAGEVIEW (thanks to Karsten Nowak)
[BUGFIX] Keep file list display settings in sync (thanks to Oliver Bartsch)
[BUGFIX] Immediately apply language changes in user setup (thanks to Andreas Kienast)
[BUGFIX] Don't redraw recycler's record-table on search input focus (thanks to Ayke Halder)
[BUGFIX] Handle severity configuration in FlashMessage finisher properly (thanks to Andreas Kienast)