intotheeast-com-content/plugins/flex-objects/CHANGELOG.md

v1.4.0-rc.7

06/15/2026

1. • Added an experimental, opt-in media proxy that serves a flex object's media through Grav, so object media can stay in a locked-down user/data instead of being linked directly; when enabled, existing medium.url links route through it automatically while resized images still serve from the cache (getgrav/grav#4129).
   • A flex object's API response now includes its id, directory, and storage location, which admin-next shows in a copyable info panel on the editor (getgrav/grav#4130).
   • Added a [flex-objects] shortcode (alias [flex]) to render a collection inline in page content, a safe alternative to putting Twig in content now that the Grav 2.0 sandbox blocks it (#217).
   • Object media uploads now honor a file field's random_name, accept, and other blueprint upload settings, matching the classic admin.

v1.4.0-rc.6

06/10/2026

1. • A custom collection registered under more than one type no longer appears twice in the admin-next sidebar (#4122).

v1.4.0-rc.5

06/09/2026

1. • Added API endpoints to list, upload, and delete a flex object's media files, stored alongside the object in its own folder (#215).

v1.4.0-rc.4

05/29/2026

1. • Custom flex directories no longer disappear from the admin-next sidebar for super-admins whose account only carries access.api.super (the admin-next gate) rather than the legacy access.admin.super (#209).
2. • Cleared the 3 high-severity npm audit advisories (axios SSRF / prototype-pollution chain, follow-redirects header leak) by replacing the yarn-only resolutions block with an npm-native overrides that pins vuetable-2's nested axios to the top-level v1.x. Note: the previous resolutions field was silently ignored under npm, so vuetable-2 had been shipping its bundled axios 0.x all along.
   • Bumped axios to ^1.15.2 and refreshed @babel/core, @babel/eslint-parser, and @babel/preset-env to their current 7.28-7.29 releases, dropping a long list of deprecated @babel/plugin-proposal-* transitives.
   • Renamed the deprecated @babel/plugin-proposal-object-rest-spread to @babel/plugin-transform-object-rest-spread (also updated in webpack.conf.js).
   • Removed the unused gulp-sourcemaps devDependency, which existed only to pull in an ancient postcss.
   • Switched the project's package manager to npm: deleted the stale yarn.lock and committed package-lock.json. Supersedes dependabot PRs #205, #206, #208, #210, #211, #212.

v1.4.0-rc.3

05/05/2026

1. • Custom flex directories whose blueprint doesn't declare an admin.menu block now appear as their own entries in the admin-next sidebar, falling back to the directory's title and icon. Previously they were collapsed into a single placeholder by getAdminMenuItems() and silently skipped, so a working admin/<type> directory in admin-classic had no row at all in admin-next (#209).

v1.4.0-rc.2

05/05/2026

1. • Auto-registered admin-next sidebar entries from flex types now translate their labels and normalize legacy FontAwesome 4 icon names (e.g. fa-clock-o), so plugin-supplied flex menus no longer render raw PLUGIN_*.KEY strings or land with an empty icon slot.
2. • Added a hidden_in_admin_next flag on flex admin.menu.base entries so plugins that already register their own admin-next sidebar item can suppress the duplicate auto-registered row.

v1.4.0-rc.1

05/04/2026

1. • Tag as RC.1

v1.4.0-beta.6

05/04/2026

1. • Support blueprints resolved for API clients
   • Adding a new sibling page under a parent whose existing children use a wider order prefix (e.g. 005.foo) now matches that width instead of falling back to two digits (grav-plugin-admin#2492)

v1.4.0-beta.5

04/29/2026

1. • Fix: plugin settings page now renders the Directories field properly in Admin 2.0. It was previously falling back to a raw JSON editor because the flex-objects field type didn't have an admin-next implementation. A new web component shows one Enabled/Disabled toggle per available flex directory blueprint, matching the admin-classic UI.

v1.4.0-beta.4

04/17/2026

1. • Fixed compatiblity

v1.4.0-beta.3

04/16/2026

1. • Admin-next API integration: registers onApiRegisterRoutes and onApiSidebarItems so flex directories show up in the Admin 2.0 SPA. FlexApiController exposes paginated/sortable/filterable list, show, create, update, delete, and export endpoints; FlexBlueprintController serves directory blueprints for form rendering
   • save-redirect custom field web component for configurable post-save navigation
   • /flex-objects/config endpoint + server-side gating on admin-next event handlers so Admin 2.0 honors the plugin's enabled_admin / directory enabled toggles without the client having to guess
   • api.* permission family alongside the existing admin.* set — api.flex-objects (crudl) registered globally, api.contacts (crudpl) on the contacts blueprint, with requireFlexPermission() accepting either prefix so operators can grant API authority without Admin-Classic implications. Sidebar items include the directory's api.* authorize field
2. • Page creation now auto-deduplicates folder names (appending a numeric suffix) instead of throwing an error, matching existing copy behavior
   • Resolved all open Dependabot security advisories by bumping axios, lodash, webpack, terser-webpack-plugin, js-yaml, picomatch, minimatch, flatted, braces and related transitive deps; removed the dead whatwg-fetch ProvidePlugin from webpack.conf.js
   • Contacts blueprint icon updated to Font Awesome 6 format

v1.4.0-beta.2

11/30/2025

1. • Merged 1.3.8 fixes into 1.4.0 branch

v1.4.0-beta.1

11/30/2025

1. • Fix broken access control allowing non-superusers to edit form settings (GHSA-v8x2-fjv7-8hjh).
   • New option to disable enhanced security for access control (default to enabled)

v1.3.8

02/25/2026

1. • New sqlitelindex backend class
   • Fixed frontmatter permission patch
   • Fixed non-superuser from editing frontmatter

v1.3.7

10/28/2023

1. • PHP 8.4 fixes - Implicitly nullable parameter declarations deprecate

v1.3.6

10/11/2023

1. • Added a new onAdminObjectGet() event to allow for manipulation of flex objects

v1.3.5

05/09/2023

1. • Various deprecation fixes for PHP 8.2+

v1.3.4

02/19/2023

1. • Support saving via admin in current language if not translated

v1.3.3

01/04/2023

1. • Save post-save action to session
   • Set default post-save action to edit for create and edit

v1.3.2

12/02/2022

1. • Various translation enhancements
2. • Fixed frontend editing objects with urlencoded ids

v1.3.1

09/08/2022

1. • Fixed covnertUrls action

v1.3.0

06/14/2022

1. • Added user object to onFlexTask.* and onFlexAction.* events
   • Added tasks MediaUploadMeta and MediaReorder to support remote media fields
   • Added support to remove media defined in a field
2. • Refactored admin controller tasks and actions
   • Added image preview support for 3rd party editors
3. • Fixed broken error responses in object media tasks

v1.2.0

03/28/2022

1. • Require Grav 1.7.32 and Form 6.0.0
2. • Improved flex router event to include directory
3. • Fixed caching issues in dynamic flex forms
   • Fixed flex content in unauthorized module causing the whole page to become unauthorized

v1.1.9

03/14/2022

1. • Added support for flex router to return a response instead of a page

v1.1.8

01/28/2022

1. • Require Grav 1.7.29
2. • Made path handling unicode-safe, use new Utils::basename() and Utils::pathinfo() everywhere

v1.1.7

01/03/2022

1. • Allow intercepting object create, update and delete tasks by using FlexTaskEvent event
2. • Added optional $scope parameter to ObjectController::checkAuthorization()
3. • Fixed continue task with PageInterface types

v1.1.6

11/29/2021

1. • Fixed regression Call to a member function getRoute() on null when using CLI #151

v1.1.5

11/24/2021

1. • Added method ObjectController::checkAuthorizations() to check if one of the actions is true
2. • Fixed regression when calling flex router with a path

v1.1.4

11/16/2021

1. • Require Grav 1.7.25
2. • Changed flex router not to trigger onPageNotFound event
   • Changed flex router to be called also with empty path
   • If ACL check for the object fails, display unauthorized page instead of 404
3. • Fixed unescaped messages in JSON responses
   • Fixed Call to a member function getName() on null when using file field #149

v1.1.3

10/26/2021

1. • Updated JS dependencies to latest
   • Optimized import of certain JS dependencies
   • Dev: Moved away from deprecated UglifyJsPlugin in favor of TerserPlugin
   • Use active form from the Form plugin to get page metadata
   • Added page header flex.access.override: true, which allows flex to replace page access when user is allowed to perform action in flex
2. • Fixed flex object page access for super users when permission was denied

v1.1.2

09/14/2021

1. • Require Grav 1.7.21, optionally Error 1.8.0, Login 3.5.2 and Form 5.1.1
   • Added file upload/delete support to frontend forms
   • Support proper error, login and unauthorized pages if all requirements are met
   • Added page header flex.router: [ROUTER] which triggers flex.router.[ROUTER] event for child routes of the page
   • Added flex.[type].task.create.after, flex.[type].task.update.after and flex.[type].task.delete.after events for frontend

v1.1.1

09/01/2021

1. • Fixed XSS in page admin
   • Fixed check for bad folder name, prevent bad characters

v1.1.0

08/31/2021

1. • Require Grav 1.7.19 and Form 5.1.0
   • Added basic frontend editing support
   • Added onBeforeFlexFormInitialize event to help to initialize the frontend form
2. • Fixed error in admin when field validation fails

v1.0.16

07/19/2021

1. • Added basic new modal support for all flex types
2. • Fixed authorization check for user configuration

v1.0.15

06/16/2021

1. • Better checks against missing Flex Type inside tasks
   • Better authorization checks, falls back to directory level authorization checks if objects do not support authorization
2. • Fixed missing handling of child_type in Flex Pages getgrav/grav-plugin-admin#2087
   • Added support for multiple Exports in a dropdown
   • Admin is no longer a dependency of Flex Objects #130
   • Fixed authorization checks during page creation for users who have limited access to some pages getgrav/grav#3382
   • Fixed permission check when moving a page getgrav/grav#3382

v1.0.14

06/07/2021

1. • Added enhanced copy modal from Pages list getgrav/grav-plugin-admin#2139

v1.0.13

06/03/2021

1. • Fixed expert mode for Flex Pages

v1.0.12

06/02/2021

1. • Fixed logic to get form blueprints and object, prevents events from being fired twice
   • Fixed breadcrumb item in Pages list not translating HTML entities #127

v1.0.11

05/24/2021

1. • Allow file uploads to send data such as data[media_order]

v1.0.10

05/19/2021

1. • Fixed Add Folder not updating the page list until cache is cleared
   • Fixed broken error message translations

v1.0.9

04/29/2021

1. • Fixed fatal error when copying a page in admin if no modal is being shown getgrav/grav#3335

v1.0.8

04/23/2021

1. • Require Admin 1.10.13
   • Require Form Plugin 5.0.2
2. • Added a few missing translations
   • Utilize new Admin detector to prevent Save actions that triggers unsaved notice on unload getgrav/grav-plugin-admin#2125
   • Improved copying page by adding a modal for new page title and folder name

v1.0.7

04/06/2021

1. • Require Grav 1.7.10
   • Added deny option support to filepicker field #119
2. • Prevent expert editing mode from anyone else than super users grav-plugin-admin#2094
   • Fixed not being able to add new folder grav#3293
   • Fixed Flex directories defined only in theme not showing up grav#3292

v1.0.6

03/30/2021

1. • Fixed automatic git-sync in admin save and delete #120
   • Prevent Add Page / Add Module modals from closing if clicking on the outside overlay grav-plugin-admin#2089

v1.0.5

03/19/2021

1. • Require Grav 1.7.9
   • Require Form Plugin 5.0.1
2. • Catch JSON decoding issues in controllers
3. • Fixed broken media upload/picker fields with @self/path notations grav#3275
   • Fixed filepicker field not including newly uploaded and excluding newly deleted files before saving the object
   • Fixed Flex Page CRUD ACL when creating a new page #115
   • Bumped dependencies versions #116
   • Fixed clicking move button on some pages resulting in endless loading spinner grav-plugin-admin#2095

v1.0.4

03/17/2021

1. • Added id attributes for buttons to help on acceptance testing
2. • Fixed fatal error in /admin/flex-objects #114
   • Fixed onAdminSave original page having empty header grav#3259
   • Fixed flash issues on uploading files into a new page

v1.0.3

02/17/2021

1. • List field: added new placement property to decide whether to add new items at the top, bottom or based on the position of the clicked button #105

• Added default styling for Flex-Objects Admin list view

1. • Fixed fatal error if configuration is missing directories #107
   • Fixed case-sensitive accept in filepicker field
   • Fixed pages admin being accessible without read/write permissions grav-plugin-admin#2053
   • Fixed missing event onAdminCreatePageFrontmatter when creating a new page grav-plugin-auto-date#8
   • Fixed missing event onAdminAfterDelMedia when deleting a file from a page
   • Fixed filepicker support for old theme@:/ and page@:/ notations #109
   • Fixed adding the same new page twice remembering content from the last try
   • Fixed saving a new page with invalid data makes blueprint fields disappear grav-plugin-admin#2068

v1.0.2

02/01/2021

1. • Require Grav 1.7.4
2. • Fixed saving page in expert mode grav#3174

v1.0.1

01/20/2021

1. • Fixed 404 when trying to edit a page with accented characters grav-plugin-admin#2026

v1.0.0

01/19/2021

1. • Added $grav['flex_objects']->getAdminController() method
2. • Added support for relative paths in getLevelListing action
3. • Fixed admin not working with types that do not implement FlexAuthorizeInterface
   • Fixed bad redirect when creating new flex object and choosing to create another return to the list
   • Fixed bad redirect when changing parent of new page and saving grav-plugin-admin#2014
   • Fixed page forms being empty if multi-language is enabled, but there's just one language grav#3147
   • Fixed copying a page within a parent with no create permission grav-plugin-admin#2002

v1.0.0-rc.20

12/15/2020

1. • Default cookies usage to SameSite Lax grav-plugin-admin#1998
   • Fixed typo #89

v1.0.0-rc.19

12/02/2020

1. • Just keeping sync with Grav rc.19

v1.0.0-rc.18

12/02/2020

1. • Require PHP 7.3.6
2. • Improved frontend templates
   • Improve blueprint structure
   • Hooked up Duplicate and Move from within Pages list #81
   • Respect CRUD ACL actions for items shortcuts in pages list #82
   • Refresh object on controllers to make sure it is up to date
3. • Fixed fatal error in admin if list view hasn't been defined
   • Fixed fatal error in admin if directory throws exception
   • Fixed attempts to add an existing page
   • Fixed form loosing its form state if saving fails when using ObjectController
   • Fixed missing context when rendering collection in frontend
   • Fixed Flex Admin activating on too old Admin plugin versions

v1.0.0-rc.17

10/07/2020

1. • Fixed media uploads for objects which do not implement FlexAuthorizeInterface
   • Fixed file picker field not recognizing folder: @self variants

v1.0.0-rc.16

09/01/2020

1. • Simplified Flex Pages admin not to differentiate between default language file extensions #47
2. • Fixed extra space in Flex admin pages
   • Fixed folder creation with parent other than root #66
   • Fixed task redirects in sub-folder multi-site environments
   • Fixed typo in default permissions (should have been admin.flex-objects) grav#2915

v1.0.0-rc.15

07/22/2020

1. • Released with no changes to keep sync with Grav + Admin

v1.0.0-rc.14

07/09/2020

1. • Released with no changes to keep sync with Grav + Admin

v1.0.0-rc.13

07/01/2020

1. • Fixed bad link in directory listing template
   • Fixed admin save task displaying error message about non-existing data type
   • Fixed pagemedia field not uploading/deleting files right away
   • Fixed Flex Pages add, copy and move buttons appearing in edit view when no permissions
   • Fixed Flex Pages permission issues
   • Fixed some admin redirect issues

v1.0.0-rc.12

06/08/2020

1. • Code updates to match Grav 1.7.0-rc.12
2. • Changed class admin-pages to admin-{{ target }} #59

v1.0.0-rc.11

05/14/2020

1. • Added integration with Admin's new preset events to style the CSS
2. • JS Maitenance
3. • Fixed Accounts Configuration tab

v1.0.0-rc.10

04/27/2020

1. • Fixed custom actions not working
   • Fixed custom folder in mediapicker field not working
   • Fixed export title when not using CVS #51
   • Fixed preview in Page list view admin#1845
   • Fixed 404 Not Found error after saving a new object

v1.0.0-rc.9

03/20/2020

1. • Fixed issue with touch devices and scrollbars hidden, preventing native scrolling to work admin#1857 #1858

v1.0.0-rc.8

03/19/2020

1. • Added a basic Convert Data CLI Command. Works with Yaml <-> Json
2. • Fixed jump of the page when applying filters grav-admin#1830
   • Fixed form resetting when validation fails grav#2764

v1.0.0-rc.7

03/05/2020

1. • Added option to change perPage amount of items in Flex List. 'All' also available by only at runtime.
2. • Page filters now obey admin hide type settings
3. • Fixed fatal error if there is missing blueprint grav#2834
   • Fixed redirect when moving a page grav#2829
   • Fixed no default access set when creating new user from admin #31
   • Flex Pages: Fixed page visibility issues when creating a new page grav#2823
   • Flex Pages: Fixed translated page having non-translated status with system.languages.include_default_lang_file_extension: false
   • Flex Pages: Fixed preview on home page

v1.0.0-rc.6

02/11/2020

1. • Pass phpstan level 1 tests
   • Removed legacy classes for pages, cleanup deprecated Flex types
2. • Fixed call to grav.flex_objects.getObject() causing fatal error
   • Minor bug fixes

v1.0.0-rc.5

02/03/2020

1. • No changes, just keeping things in sync with Grav RC version

v1.0.0-rc.4

02/03/2020

1. • Added support for arbitrary admin menu route for editing a flex type
   • Added support for new improved ACL
   • Added support for custom layouts by adding /:layout_name in url
   • Added support for Flex Directory specific Configuration
   • Added support for action aliases (/accounts/configure instead of /accounts/users/:configre)
   • Added Flex type Configuration
   • Enabled Pages, Accounts and User Groups by default
   • Stop using deprecated onAdminRegisterPermissions event
   • Renamed directory grav-pages to pages
   • Renamed directory grav-accounts to user-accounts
   • Renamed directory grav-user-groups to user-groups
2. • Flex caching settings were moved into Grav core
   • Flex Objects plugin now better integrates to Grav core
3. • Fixed empty directory entries in plugin configuration
   • Fixed plugin configuration displaying directories outside of the plugin
   • Fixed broken blueprints if there's folder with the name of the blueprint file
   • Fixed visible save button when in 404 page
   • Fixed missing save location when file does not exist
   • Fixed multiple ACL related issues (no access, bad links, information leaks)
   • Fixed Admin Panel Page list buttons not appearing in Flex Pages

v1.0.0-rc.3

01/02/2020

1. • Added root page support for Flex Pages
2. • Fixed after save: Edit
   • Fixed JS failing on initial filters setup due to no fallback implemented #2724

v1.0.0-rc.2

12/04/2019

1. • Admin: Added support for editing User Groups
   • Admin: Flex Pages now support searching and filtering
2. • Hide hidden/system types (pages, accounts, user groups) from Flex Objects page type #38

v1.0.0-rc.1

11/06/2019

1. • Added directory configuration option for custom admin templates
   • Added Flex Accounts (Admin) type to administer user accounts in Flex independently from Grav system setting
   • Added Flex Pages (Admin) type to administer pages in Flex independently from Grav system setting
   • Added blueprint option to hide directory from Flex Objects types page in frontend
   • Deprecated all Flex Page classes and traits in favor of the new classes in Grav core
   • Moved flex object/collection templates to templates/flex/{TYPE} which is easier to remember
   • Admin: Added support customizable preview and export
2. • Admin: Allow custom title template when editing object
   • Translations: rename MODULAR to MODULE everywhere
3. • Flex Pages: Fixed default language not being translated in both translatedLanguages() and untranslatedLanguages() results
   • Flex Pages: Language interface compatibility fixes
   • Flex Pages: Fixed frontend issues with plugin events #5
   • Flex Pages: Fixed filePathClean() and filePathClean() not returning file for folder
   • Flex Pages: Fixed multiple multi-language related issues in admin #10
   • Flex Pages: Fixed raw edit mode
   • File upload is broken for nested fields #34

v1.0.0-beta.10

10/03/2019

1. • Flex Pages: Fixed moving visible page in admin causing ordering issues #6
   • Flex Pages List: Fixed issue where auto-hiding scrollbars in macOS would throw off the dropdown position #20
   • Flex Pages: Fixed prev/next page missing pages if pagination was turned on in page header

v1.0.0-beta.9

09/26/2019

1. • Show/hide dropdown menu as needed when scrolling the page columns container left and right
2. • PHP 7.1: Fixed error when activating Flex Pages in Plugin parameters #13
   • Flex Pages: Fixed page template cannot be changed #4
   • Flex Pages: Fixed new pages being created with wrong template #22
   • Flex Pages: Fixed Preview not working #17
   • Fixed error caused by automatic path selection from cookie when destination not available #23
   • Fixed breadcrumb issue in Flex Pages List #19
   • Flex Pages: Fixed unable to change page template #4
   • Fixed Error 404 when adding new contact #14
   • Flex Pages: Non-visible items appear in Nav menu #24
   • Disabling plugin breaks saving plugin configuration #11

v1.0.0-beta.8

09/19/2019

1. • Initial public release (all previous versions were in a private repo)