Updated version and assets for release v25.11.3

Revert "Update german translation"

.gitignore

@@ -8,10 +8,10 @@ Homestead.yaml
 .idea
 npm-debug.log
 yarn-error.log
-/public/dist
+/public/dist/*.map
 /public/plugins
-/public/css
-/public/js
+/public/css/*.map
+/public/js/*.map
 /public/bower
 /public/build/
 /public/favicon.ico

app/Access/Controllers/OidcController.php

@@ -9,9 +9,11 @@ use Illuminate\Http\Request;
 
 class OidcController extends Controller
 {
-    public function __construct(
-        protected OidcService $oidcService
-    ) {
+    protected OidcService $oidcService;
+
+    public function __construct(OidcService $oidcService)
+    {
+        $this->oidcService = $oidcService;
         $this->middleware('guard:oidc');
     }
 
@@ -28,7 +30,7 @@ class OidcController extends Controller
             return redirect('/login');
         }
 
-        session()->put('oidc_state', time() . ':' . $loginDetails['state']);
+        session()->flash('oidc_state', $loginDetails['state']);
 
         return redirect($loginDetails['url']);
     }
@@ -39,16 +41,10 @@ class OidcController extends Controller
      */
     public function callback(Request $request)
     {
+        $storedState = session()->pull('oidc_state');
         $responseState = $request->query('state');
-        $splitState =  explode(':', session()->pull('oidc_state', ':'), 2);
-        if (count($splitState) !== 2) {
-            $splitState = [null, null];
-        }
 
-        [$storedStateTime, $storedState] = $splitState;
-        $threeMinutesAgo = time() - 3 * 60;
-
-        if (!$storedState || $storedState !== $responseState || intval($storedStateTime) < $threeMinutesAgo) {
+        if ($storedState !== $responseState) {
             $this->showErrorNotification(trans('errors.oidc_fail_authed', ['system' => config('oidc.name')]));
 
             return redirect('/login');
@@ -66,7 +62,7 @@ class OidcController extends Controller
     }
 
     /**
-     * Log the user out, then start the OIDC RP-initiated logout process.
+     * Log the user out then start the OIDC RP-initiated logout process.
      */
     public function logout()
     {

app/Activity/Models/Comment.php

@@ -41,19 +41,7 @@ class Comment extends Model implements Loggable, OwnableInterface
      */
     public function entity(): MorphTo
     {
-        // We specifically define null here to avoid the different name (commentable)
-        // being used by Laravel eager loading instead of the method name, which it was doing
-        // in some scenarios like when deserialized when going through the queue system.
-        // So we instead specify the type and id column names to use.
-        // Related to:
-        // https://github.com/laravel/framework/pull/24815
-        // https://github.com/laravel/framework/issues/27342
-        // https://github.com/laravel/framework/issues/47953
-        // (and probably more)
-
-        // Ultimately, we could just align the method name to 'commentable' but that would be a potential
-        // breaking change and not really worthwhile in a patch due to the risk of creating extra problems.
-        return $this->morphTo(null, 'commentable_type', 'commentable_id');
+        return $this->morphTo('commentable');
     }
 
     /**

app/Activity/Notifications/Handlers/BaseNotificationHandler.php

@@ -20,7 +20,6 @@ abstract class BaseNotificationHandler implements NotificationHandler
     {
         $users = User::query()->whereIn('id', array_unique($userIds))->get();
 
-        /** @var User $user */
         foreach ($users as $user) {
             // Prevent sending to the user that initiated the activity
             if ($user->id === $initiator->id) {

app/Http/Middleware/StartSessionExtended.php

@@ -14,10 +14,7 @@ use Illuminate\Session\Middleware\StartSession as Middleware;
 class StartSessionExtended extends Middleware
 {
     protected static array $pathPrefixesExcludedFromHistory = [
-        'uploads/images/',
-        'dist/',
-        'manifest.json',
-        'opensearch.xml',
+        'uploads/images/'
     ];
 
     /**

composer.json

@@ -29,7 +29,7 @@
         "league/flysystem-aws-s3-v3": "^3.0",
         "league/html-to-markdown": "^5.0.0",
         "league/oauth2-client": "^2.6",
-        "onelogin/php-saml": "^4.3.1",
+        "onelogin/php-saml": "^4.0",
         "phpseclib/phpseclib": "^3.0",
         "pragmarx/google2fa": "^8.0",
         "predis/predis": "^3.2",

dev/checksums/vendor

@@ -1 +1 @@
-22e02ee72d21ff719c1073abbec8302f8e2096ba6d072e133051064ed24b45b1
+54cd39cc8e939ff56c7785b653950e7f9c198902779a2babf03d279ec07edc2c

dev/licensing/js-library-licenses.txt

@@ -1,3 +1,16 @@
+abab
+License: BSD-3-Clause
+License File: node_modules/abab/LICENSE.md
+Source: git+https://github.com/jsdom/abab.git
+Link: https://github.com/jsdom/abab#readme
+-----------
+acorn-globals
+License: MIT
+License File: node_modules/acorn-globals/LICENSE
+Copyright: Copyright (c) 2014 Forbes Lindesay
+Source: https://github.com/ForbesLindesay/acorn-globals.git
+Link: https://github.com/ForbesLindesay/acorn-globals.git
+-----------
 acorn-jsx
 License: MIT
 License File: node_modules/acorn-jsx/LICENSE
@@ -21,10 +34,8 @@ Link: https://github.com/acornjs/acorn
 -----------
 agent-base
 License: MIT
-License File: node_modules/agent-base/LICENSE
-Copyright: Copyright (c) 2013 Nathan Rajlich <******@***********.***>
-Source: https://github.com/TooTallNate/proxy-agents.git
-Link: https://github.com/TooTallNate/proxy-agents.git
+Source: git://github.com/TooTallNate/node-agent-base.git
+Link: git://github.com/TooTallNate/node-agent-base.git
 -----------
 ajv
 License: MIT
@@ -43,7 +54,7 @@ Link: sindresorhus/ansi-escapes
 ansi-regex
 License: MIT
 License File: node_modules/ansi-regex/license
-Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (https://sindresorhus.com)
+Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (sindresorhus.com)
 Source: chalk/ansi-regex
 Link: chalk/ansi-regex
 -----------
@@ -123,6 +134,20 @@ Copyright: Copyright (c) 2016 EduardoRFS
 Source: git+https://github.com/ljharb/async-function.git
 Link: https://github.com/ljharb/async-function#readme
 -----------
+async
+License: MIT
+License File: node_modules/async/LICENSE
+Copyright: Copyright (c) 2010-2018 Caolan McMahon
+Source: https://github.com/caolan/async.git
+Link: https://caolan.github.io/async/
+-----------
+asynckit
+License: MIT
+License File: node_modules/asynckit/LICENSE
+Copyright: Copyright (c) 2016 Alex Indigo
+Source: git+https://github.com/alexindigo/asynckit.git
+Link: https://github.com/alexindigo/asynckit#readme
+-----------
 available-typed-arrays
 License: MIT
 License File: node_modules/available-typed-arrays/LICENSE
@@ -293,7 +318,7 @@ ci-info
 License: MIT
 License File: node_modules/ci-info/LICENSE
 Copyright: Copyright (c) 2016 Thomas Watson Steen
-Source: github:watson/ci-info
+Source: https://github.com/watson/ci-info.git
 Link: https://github.com/watson/ci-info
 -----------
 cjs-module-lexer
@@ -344,6 +369,13 @@ License File: node_modules/color-name/LICENSE
 Source: git@github.com:colorjs/color-name.git
 Link: https://github.com/colorjs/color-name
 -----------
+combined-stream
+License: MIT
+License File: node_modules/combined-stream/License
+Copyright: Copyright (c) 2011 Debuggable Limited <*****@**********.***>
+Source: git://github.com/felixge/node-combined-stream.git
+Link: https://github.com/felixge/node-combined-stream
+-----------
 concat-map
 License: MIT
 License File: node_modules/concat-map/LICENSE
@@ -358,6 +390,13 @@ All rights reserved.
 Source: git://github.com/thlorenz/convert-source-map.git
 Link: https://github.com/thlorenz/convert-source-map
 -----------
+create-jest
+License: MIT
+License File: node_modules/create-jest/LICENSE
+Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
+Source: https://github.com/jestjs/jest.git
+Link: https://github.com/jestjs/jest.git
+-----------
 create-require
 License: MIT
 License File: node_modules/create-require/LICENSE
@@ -379,6 +418,13 @@ Copyright: Copyright (c) 2018 Made With MOXY Lda <*****@****.******>
 Source: git@github.com:moxystudio/node-cross-spawn.git
 Link: https://github.com/moxystudio/node-cross-spawn
 -----------
+cssom
+License: MIT
+License File: node_modules/cssom/LICENSE.txt
+Copyright: Copyright (c) Nikita Vasilyev
+Source: NV/CSSOM
+Link: NV/CSSOM
+-----------
 cssstyle
 License: MIT
 License File: node_modules/cssstyle/LICENSE
@@ -469,6 +515,13 @@ Copyright: Copyright (C) 2015 Jordan Harband
 Source: git://github.com/ljharb/define-properties.git
 Link: git://github.com/ljharb/define-properties.git
 -----------
+delayed-stream
+License: MIT
+License File: node_modules/delayed-stream/License
+Copyright: Copyright (c) 2011 Debuggable Limited <*****@**********.***>
+Source: git://github.com/felixge/node-delayed-stream.git
+Link: https://github.com/felixge/node-delayed-stream
+-----------
 detect-libc
 License: Apache-2.0
 License File: node_modules/detect-libc/LICENSE
@@ -482,6 +535,13 @@ Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (sindresorhus.co
 Source: sindresorhus/detect-newline
 Link: sindresorhus/detect-newline
 -----------
+diff-sequences
+License: MIT
+License File: node_modules/diff-sequences/LICENSE
+Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
+Source: https://github.com/jestjs/jest.git
+Link: https://github.com/jestjs/jest.git
+-----------
 diff
 License: BSD-3-Clause
 License File: node_modules/diff/LICENSE
@@ -495,6 +555,12 @@ License File: node_modules/doctrine/LICENSE
 Source: eslint/doctrine
 Link: https://github.com/eslint/doctrine
 -----------
+domexception
+License: MIT
+License File: node_modules/domexception/LICENSE.txt
+Source: jsdom/domexception
+Link: jsdom/domexception
+-----------
 dunder-proto
 License: MIT
 License File: node_modules/dunder-proto/LICENSE
@@ -502,10 +568,11 @@ Copyright: Copyright (c) 2024 ECMAScript Shims
 Source: git+https://github.com/es-shims/dunder-proto.git
 Link: https://github.com/es-shims/dunder-proto#readme
 -----------
-eastasianwidth
-License: MIT
-Source: git://github.com/komagata/eastasianwidth.git
-Link: git://github.com/komagata/eastasianwidth.git
+ejs
+License: Apache-2.0
+License File: node_modules/ejs/LICENSE
+Source: git://github.com/mde/ejs.git
+Link: https://github.com/mde/ejs
 -----------
 electron-to-chromium
 License: ISC
@@ -612,6 +679,13 @@ Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (https://sindres
 Source: sindresorhus/escape-string-regexp
 Link: sindresorhus/escape-string-regexp
 -----------
+escodegen
+License: BSD-2-Clause
+License File: node_modules/escodegen/LICENSE.BSD
+Copyright: Copyright (C) 2012 Yusuke Suzuki (twitter: @Constellation) and other contributors.
+Source: http://github.com/estools/escodegen.git
+Link: http://github.com/estools/escodegen
+-----------
 eslint-import-resolver-node
 License: MIT
 License File: node_modules/eslint-import-resolver-node/LICENSE
@@ -698,10 +772,9 @@ Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (https://sindres
 Source: sindresorhus/execa
 Link: sindresorhus/execa
 -----------
-exit-x
-License: MIT
-Source: git://github.com/gruntjs/node-exit-x.git
-Link: https://github.com/gruntjs/node-exit-x
+exit
+Source: git://github.com/cowboy/node-exit.git
+Link: https://github.com/cowboy/node-exit
 -----------
 expect
 License: MIT
@@ -744,6 +817,11 @@ Copyright: Copyright (c) Roy Riojas & Jared Wray
 Source: jaredwray/file-entry-cache
 Link: jaredwray/file-entry-cache
 -----------
+filelist
+License: Apache-2.0
+Source: git://github.com/mde/filelist.git
+Link: https://github.com/mde/filelist
+-----------
 fill-range
 License: MIT
 License File: node_modules/fill-range/LICENSE
@@ -779,12 +857,12 @@ Copyright: Copyright (c) 2012 Raynos.
 Source: https://github.com/Raynos/for-each.git
 Link: https://github.com/Raynos/for-each
 -----------
-foreground-child
-License: ISC
-License File: node_modules/foreground-child/LICENSE
-Copyright: Copyright (c) 2015-2023 Isaac Z. Schlueter and Contributors
-Source: git+https://github.com/tapjs/foreground-child.git
-Link: git+https://github.com/tapjs/foreground-child.git
+form-data
+License: MIT
+License File: node_modules/form-data/License
+Copyright: Copyright (c) 2012 Felix Geisendörfer (*****@**********.***) and contributors
+Source: git://github.com/form-data/form-data.git
+Link: git://github.com/form-data/form-data.git
 -----------
 fs.realpath
 License: ISC
@@ -873,7 +951,7 @@ Link: gulpjs/glob-parent
 glob
 License: ISC
 License File: node_modules/glob/LICENSE
-Copyright: Copyright (c) 2009-2023 Isaac Z. Schlueter and Contributors
+Copyright: Copyright (c) Isaac Z. Schlueter and Contributors
 Source: git://github.com/isaacs/node-glob.git
 Link: git://github.com/isaacs/node-glob.git
 -----------
@@ -905,13 +983,6 @@ Copyright: Copyright (c) 2011-2022 Isaac Z. Schlueter, Ben Noordhuis, and Contri
 Source: https://github.com/isaacs/node-graceful-fs
 Link: https://github.com/isaacs/node-graceful-fs
 -----------
-handlebars
-License: MIT
-License File: node_modules/handlebars/LICENSE
-Copyright: Copyright (C) 2011-2019 by Yehuda Katz
-Source: https://github.com/handlebars-lang/handlebars.js.git
-Link: https://www.handlebarsjs.com/
------------
 has-bigints
 License: MIT
 License File: node_modules/has-bigints/LICENSE
@@ -983,17 +1054,13 @@ Link: https://github.com/WebReflection/html-escaper
 -----------
 http-proxy-agent
 License: MIT
-License File: node_modules/http-proxy-agent/LICENSE
-Copyright: Copyright (c) 2013 Nathan Rajlich <******@***********.***>
-Source: https://github.com/TooTallNate/proxy-agents.git
-Link: https://github.com/TooTallNate/proxy-agents.git
+Source: git://github.com/TooTallNate/node-http-proxy-agent.git
+Link: git://github.com/TooTallNate/node-http-proxy-agent.git
 -----------
 https-proxy-agent
 License: MIT
-License File: node_modules/https-proxy-agent/LICENSE
-Copyright: Copyright (c) 2013 Nathan Rajlich <******@***********.***>
-Source: https://github.com/TooTallNate/proxy-agents.git
-Link: https://github.com/TooTallNate/proxy-agents.git
+Source: git://github.com/TooTallNate/node-https-proxy-agent.git
+Link: git://github.com/TooTallNate/node-https-proxy-agent.git
 -----------
 human-signals
 License: Apache-2.0
@@ -1331,11 +1398,10 @@ Copyright: Copyright 2012-2015 Yahoo! Inc.
 Source: git+ssh://git@github.com/istanbuljs/istanbuljs.git
 Link: https://istanbul.js.org/
 -----------
-jackspeak
-License: BlueOak-1.0.0
-License File: node_modules/jackspeak/LICENSE.md
-Source: git+https://github.com/isaacs/jackspeak.git
-Link: git+https://github.com/isaacs/jackspeak.git
+jake
+License: Apache-2.0
+Source: git://github.com/jakejs/jake.git
+Link: git://github.com/jakejs/jake.git
 -----------
 jest-changed-files
 License: MIT
@@ -1400,6 +1466,13 @@ Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
 Source: https://github.com/jestjs/jest.git
 Link: https://github.com/jestjs/jest.git
 -----------
+jest-get-type
+License: MIT
+License File: node_modules/jest-get-type/LICENSE
+Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
+Source: https://github.com/jestjs/jest.git
+Link: https://github.com/jestjs/jest.git
+-----------
 jest-haste-map
 License: MIT
 License File: node_modules/jest-haste-map/LICENSE
@@ -1535,8 +1608,8 @@ jsdom
 License: MIT
 License File: node_modules/jsdom/LICENSE.txt
 Copyright: Copyright (c) 2010 Elijah Insua
-Source: git+https://github.com/jsdom/jsdom.git
-Link: git+https://github.com/jsdom/jsdom.git
+Source: jsdom/jsdom
+Link: jsdom/jsdom
 -----------
 jsesc
 License: MIT
@@ -1591,6 +1664,13 @@ License: MIT
 Source: git+https://github.com/jaredwray/keyv.git
 Link: https://github.com/jaredwray/keyv
 -----------
+kleur
+License: MIT
+License File: node_modules/kleur/license
+Copyright: Copyright (c) Luke Edwards <****.*********@*****.***> (lukeed.com)
+Source: lukeed/kleur
+Link: lukeed/kleur
+-----------
 leven
 License: MIT
 License File: node_modules/leven/license
@@ -1747,6 +1827,22 @@ Copyright: Copyright (c) 2014-present, Jon Schlinkert.
 Source: micromatch/micromatch
 Link: https://github.com/micromatch/micromatch
 -----------
+mime-db
+License: MIT
+License File: node_modules/mime-db/LICENSE
+Copyright: Copyright (c) 2014 Jonathan Ong <**@***********.***>
+Copyright (c) 2015-2022 Douglas Christopher Wilson <****@*************.***>
+Source: jshttp/mime-db
+Link: jshttp/mime-db
+-----------
+mime-types
+License: MIT
+License File: node_modules/mime-types/LICENSE
+Copyright: Copyright (c) 2014 Jonathan Ong <**@***********.***>
+Copyright (c) 2015 Douglas Christopher Wilson <****@*************.***>
+Source: jshttp/mime-types
+Link: jshttp/mime-types
+-----------
 mimic-fn
 License: MIT
 License File: node_modules/mimic-fn/license
@@ -1767,13 +1863,6 @@ License File: node_modules/minimist/LICENSE
 Source: git://github.com/minimistjs/minimist.git
 Link: https://github.com/minimistjs/minimist
 -----------
-minipass
-License: ISC
-License File: node_modules/minipass/LICENSE
-Copyright: Copyright (c) 2017-2023 npm, Inc., Isaac Z. Schlueter, and Contributors
-Source: https://github.com/isaacs/minipass
-Link: https://github.com/isaacs/minipass
------------
 ms
 License: MIT
 License File: node_modules/ms/license.md
@@ -1781,26 +1870,11 @@ Copyright: Copyright (c) 2020 Vercel, Inc.
 Source: vercel/ms
 Link: vercel/ms
 -----------
-napi-postinstall
-License: MIT
-License File: node_modules/napi-postinstall/LICENSE
-Copyright: Copyright (c) 2021-present UnTS
-Source: git+https://github.com/un-ts/napi-postinstall.git
-Link: git+https://github.com/un-ts/napi-postinstall.git
------------
 natural-compare
 License: MIT
 Source: git://github.com/litejs/natural-compare-lite.git
 Link: git://github.com/litejs/natural-compare-lite.git
 -----------
-neo-async
-License: MIT
-License File: node_modules/neo-async/LICENSE
-Copyright: Copyright (c) 2014-2018 Suguru Motegi
-Based on Async.js, Copyright Caolan McMahon
-Source: git@github.com:suguru03/neo-async.git
-Link: https://github.com/suguru03/neo-async
------------
 nice-try
 License: MIT
 License File: node_modules/nice-try/LICENSE
@@ -1964,12 +2038,6 @@ Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (sindresorhus.co
 Source: sindresorhus/p-try
 Link: sindresorhus/p-try
 -----------
-package-json-from-dist
-License: BlueOak-1.0.0
-License File: node_modules/package-json-from-dist/LICENSE.md
-Source: git+https://github.com/isaacs/package-json-from-dist.git
-Link: git+https://github.com/isaacs/package-json-from-dist.git
------------
 parent-module
 License: MIT
 License File: node_modules/parent-module/license
@@ -2019,12 +2087,6 @@ Copyright: Copyright (c) 2015 Javier Blanco
 Source: https://github.com/jbgutierrez/path-parse.git
 Link: https://github.com/jbgutierrez/path-parse#readme
 -----------
-path-scurry
-License: BlueOak-1.0.0
-License File: node_modules/path-scurry/LICENSE.md
-Source: git+https://github.com/isaacs/path-scurry
-Link: git+https://github.com/isaacs/path-scurry
------------
 path-type
 License: MIT
 License File: node_modules/path-type/license
@@ -2095,6 +2157,20 @@ Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
 Source: https://github.com/jestjs/jest.git
 Link: https://github.com/jestjs/jest.git
 -----------
+prompts
+License: MIT
+License File: node_modules/prompts/license
+Copyright: Copyright (c) 2018 Terkel Gjervig Nielsen
+Source: terkelg/prompts
+Link: terkelg/prompts
+-----------
+psl
+License: MIT
+License File: node_modules/psl/LICENSE
+Copyright: Copyright (c) 2017 Lupo Montero ***********@*****.***
+Source: git@github.com:lupomontero/psl.git
+Link: git@github.com:lupomontero/psl.git
+-----------
 punycode.js
 License: MIT
 License File: node_modules/punycode.js/LICENSE-MIT.txt
@@ -2114,6 +2190,13 @@ Copyright: Copyright (c) 2018 Nicolas DUBIEN
 Source: git+https://github.com/dubzzz/pure-rand.git
 Link: https://github.com/dubzzz/pure-rand#readme
 -----------
+querystringify
+License: MIT
+License File: node_modules/querystringify/LICENSE
+Copyright: Copyright (c) 2015 Unshift.io, Arnout Kazemier,  the Contributors.
+Source: https://github.com/unshiftio/querystringify
+Link: https://github.com/unshiftio/querystringify
+-----------
 react-is
 License: MIT
 License File: node_modules/react-is/LICENSE
@@ -2163,6 +2246,13 @@ Copyright: Copyright (c) 2016, Contributors
 Source: git+ssh://git@github.com/yargs/require-main-filename.git
 Link: https://github.com/yargs/require-main-filename#readme
 -----------
+requires-port
+License: MIT
+License File: node_modules/requires-port/LICENSE
+Copyright: Copyright (c) 2015 Unshift.io, Arnout Kazemier,  the Contributors.
+Source: https://github.com/unshiftio/requires-port
+Link: https://github.com/unshiftio/requires-port
+-----------
 resolve-cwd
 License: MIT
 License File: node_modules/resolve-cwd/license
@@ -2177,6 +2267,13 @@ Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (sindresorhus.co
 Source: sindresorhus/resolve-from
 Link: sindresorhus/resolve-from
 -----------
+resolve.exports
+License: MIT
+License File: node_modules/resolve.exports/license
+Copyright: Copyright (c) Luke Edwards <****.*********@*****.***> (lukeed.com)
+Source: lukeed/resolve.exports
+Link: lukeed/resolve.exports
+-----------
 resolve
 License: MIT
 License File: node_modules/resolve/LICENSE
@@ -2184,13 +2281,6 @@ Copyright: Copyright (c) 2012 James Halliday
 Source: git://github.com/browserify/resolve.git
 Link: git://github.com/browserify/resolve.git
 -----------
-rrweb-cssom
-License: MIT
-License File: node_modules/rrweb-cssom/LICENSE.txt
-Copyright: Copyright (c) Nikita Vasilyev
-Source: rrweb-io/CSSOM
-Link: rrweb-io/CSSOM
------------
 safe-array-concat
 License: MIT
 License File: node_modules/safe-array-concat/LICENSE
@@ -2322,6 +2412,13 @@ Copyright: Copyright (c) 2015, Contributors
 Source: https://github.com/tapjs/signal-exit.git
 Link: https://github.com/tapjs/signal-exit
 -----------
+sisteransi
+License: MIT
+License File: node_modules/sisteransi/license
+Copyright: Copyright (c) 2018 Terkel Gjervig Nielsen
+Source: https://github.com/terkelg/sisteransi
+Link: https://github.com/terkelg/sisteransi
+-----------
 slash
 License: MIT
 License File: node_modules/slash/license
@@ -2419,13 +2516,6 @@ Link: sindresorhus/string-length
 -----------
 string-width
 License: MIT
-License File: node_modules/string-width-cjs/license
-Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (sindresorhus.com)
-Source: sindresorhus/string-width
-Link: sindresorhus/string-width
------------
-string-width
-License: MIT
 License File: node_modules/string-width/license
 Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (sindresorhus.com)
 Source: sindresorhus/string-width
@@ -2461,15 +2551,8 @@ Link: git://github.com/es-shims/String.prototype.trimStart.git
 -----------
 strip-ansi
 License: MIT
-License File: node_modules/strip-ansi-cjs/license
-Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (sindresorhus.com)
-Source: chalk/strip-ansi
-Link: chalk/strip-ansi
------------
-strip-ansi
-License: MIT
 License File: node_modules/strip-ansi/license
-Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (https://sindresorhus.com)
+Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (sindresorhus.com)
 Source: chalk/strip-ansi
 Link: chalk/strip-ansi
 -----------
@@ -2522,13 +2605,6 @@ Copyright: Copyright (c) 2015 Joris van der Wel
 Source: https://github.com/jsdom/js-symbol-tree.git
 Link: https://github.com/jsdom/js-symbol-tree#symbol-tree
 -----------
-synckit
-License: MIT
-License File: node_modules/synckit/LICENSE
-Copyright: Copyright (c) 2021 UnTS
-Source: https://github.com/un-ts/synckit.git
-Link: https://github.com/un-ts/synckit.git
------------
 test-exclude
 License: ISC
 License File: node_modules/test-exclude/LICENSE.txt
@@ -2536,20 +2612,6 @@ Copyright: Copyright (c) 2016, Contributors
 Source: git+https://github.com/istanbuljs/test-exclude.git
 Link: https://istanbul.js.org/
 -----------
-tldts-core
-License: MIT
-License File: node_modules/tldts-core/LICENSE
-Copyright: Copyright (c) 2017 Thomas Parisot, 2018 Rémi Berson
-Source: git+ssh://git@github.com/remusao/tldts.git
-Link: https://github.com/remusao/tldts#readme
------------
-tldts
-License: MIT
-License File: node_modules/tldts/LICENSE
-Copyright: Copyright (c) 2017 Thomas Parisot, 2018 Rémi Berson
-Source: git+ssh://git@github.com/remusao/tldts.git
-Link: https://github.com/remusao/tldts#readme
------------
 tmpl
 License: BSD-3-Clause
 License File: node_modules/tmpl/license
@@ -2660,13 +2722,6 @@ License File: node_modules/uc.micro/LICENSE.txt
 Source: markdown-it/uc.micro
 Link: markdown-it/uc.micro
 -----------
-uglify-js
-License: BSD-2-Clause
-License File: node_modules/uglify-js/LICENSE
-Copyright: Copyright 2012-2024 (c) Mihai Bazon <*****.*****@*****.***>
-Source: mishoo/UglifyJS
-Link: mishoo/UglifyJS
------------
 unbox-primitive
 License: MIT
 License File: node_modules/unbox-primitive/LICENSE
@@ -2681,10 +2736,12 @@ Copyright: Copyright (c) Matteo Collina and Undici contributors
 Source: git+https://github.com/nodejs/undici.git
 Link: https://undici.nodejs.org
 -----------
-unrs-resolver
+universalify
 License: MIT
-Source: git+https://github.com/unrs/unrs-resolver.git
-Link: https://github.com/unrs/unrs-resolver#readme
+License File: node_modules/universalify/LICENSE
+Copyright: Copyright (c) 2017, Ryan Zimmerman <*******@*******.***>
+Source: git+https://github.com/RyanZim/universalify.git
+Link: https://github.com/RyanZim/universalify#readme
 -----------
 update-browserslist-db
 License: MIT
@@ -2700,6 +2757,13 @@ Copyright: Copyright 2011 Gary Court. All rights reserved.
 Source: http://github.com/garycourt/uri-js
 Link: https://github.com/garycourt/uri-js
 -----------
+url-parse
+License: MIT
+License File: node_modules/url-parse/LICENSE
+Copyright: Copyright (c) 2015 Unshift.io, Arnout Kazemier,  the Contributors.
+Source: https://github.com/unshiftio/url-parse.git
+Link: https://github.com/unshiftio/url-parse.git
+-----------
 v8-compile-cache-lib
 License: MIT
 License File: node_modules/v8-compile-cache-lib/LICENSE
@@ -2816,19 +2880,6 @@ Copyright: Copyright (c) 2014-2016, Jon Schlinkert
 Source: jonschlinkert/word-wrap
 Link: https://github.com/jonschlinkert/word-wrap
 -----------
-wordwrap
-License: MIT
-License File: node_modules/wordwrap/LICENSE
-Source: git://github.com/substack/node-wordwrap.git
-Link: git://github.com/substack/node-wordwrap.git
------------
-wrap-ansi
-License: MIT
-License File: node_modules/wrap-ansi-cjs/license
-Copyright: Copyright (c) Sindre Sorhus <************@*****.***> (https://sindresorhus.com)
-Source: chalk/wrap-ansi
-Link: chalk/wrap-ansi
------------
 wrap-ansi
 License: MIT
 License File: node_modules/wrap-ansi/license
@@ -2920,31 +2971,6 @@ License File: node_modules/@ampproject/remapping/LICENSE
 Source: git+https://github.com/ampproject/remapping.git
 Link: git+https://github.com/ampproject/remapping.git
 -----------
-@asamuzakjp/css-color
-License: MIT
-License File: node_modules/@asamuzakjp/css-color/LICENSE
-Copyright: Copyright (c) 2024 asamuzaK (Kazz)
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-Source: git+https://github.com/asamuzaK/cssColor.git
-Link: https://github.com/asamuzaK/cssColor#readme
------------
 @babel/code-frame
 License: MIT
 License File: node_modules/@babel/code-frame/LICENSE
@@ -3309,40 +3335,6 @@ Copyright: Copyright (c) 2014 Evan Wallace
 Source: https://github.com/cspotcode/node-source-map-support
 Link: https://github.com/cspotcode/node-source-map-support
 -----------
-@csstools/color-helpers
-License: MIT-0
-License File: node_modules/@csstools/color-helpers/LICENSE.md
-Source: git+https://github.com/csstools/postcss-plugins.git
-Link: https://github.com/csstools/postcss-plugins/tree/main/packages/color-helpers#readme
------------
-@csstools/css-calc
-License: MIT
-License File: node_modules/@csstools/css-calc/LICENSE.md
-Copyright: Copyright 2022 Romain Menke, Antonio Laguna <*******@******.**>
-Source: git+https://github.com/csstools/postcss-plugins.git
-Link: https://github.com/csstools/postcss-plugins/tree/main/packages/css-calc#readme
------------
-@csstools/css-color-parser
-License: MIT
-License File: node_modules/@csstools/css-color-parser/LICENSE.md
-Copyright: Copyright 2022 Romain Menke, Antonio Laguna <*******@******.**>
-Source: git+https://github.com/csstools/postcss-plugins.git
-Link: https://github.com/csstools/postcss-plugins/tree/main/packages/css-color-parser#readme
------------
-@csstools/css-parser-algorithms
-License: MIT
-License File: node_modules/@csstools/css-parser-algorithms/LICENSE.md
-Copyright: Copyright 2022 Romain Menke, Antonio Laguna <*******@******.**>
-Source: git+https://github.com/csstools/postcss-plugins.git
-Link: https://github.com/csstools/postcss-plugins/tree/main/packages/css-parser-algorithms#readme
------------
-@csstools/css-tokenizer
-License: MIT
-License File: node_modules/@csstools/css-tokenizer/LICENSE.md
-Copyright: Copyright 2022 Romain Menke, Antonio Laguna <*******@******.**>
-Source: git+https://github.com/csstools/postcss-plugins.git
-Link: https://github.com/csstools/postcss-plugins/tree/main/packages/css-tokenizer#readme
------------
 @esbuild/linux-x64
 License: MIT
 Source: git+https://github.com/evanw/esbuild.git
@@ -3428,13 +3420,6 @@ License File: node_modules/@humanwhocodes/retry/LICENSE
 Source: git+https://github.com/humanwhocodes/retry.git
 Link: git+https://github.com/humanwhocodes/retry.git
 -----------
-@isaacs/cliui
-License: ISC
-License File: node_modules/@isaacs/cliui/LICENSE.txt
-Copyright: Copyright (c) 2015, Contributors
-Source: yargs/cliui
-Link: yargs/cliui
------------
 @istanbuljs/load-nyc-config
 License: ISC
 License File: node_modules/@istanbuljs/load-nyc-config/LICENSE
@@ -3463,20 +3448,6 @@ Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
 Source: https://github.com/jestjs/jest.git
 Link: https://jestjs.io/
 -----------
-@jest/diff-sequences
-License: MIT
-License File: node_modules/@jest/diff-sequences/LICENSE
-Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
-Source: https://github.com/jestjs/jest.git
-Link: https://github.com/jestjs/jest.git
------------
-@jest/environment-jsdom-abstract
-License: MIT
-License File: node_modules/@jest/environment-jsdom-abstract/LICENSE
-Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
-Source: https://github.com/jestjs/jest.git
-Link: https://github.com/jestjs/jest.git
------------
 @jest/environment
 License: MIT
 License File: node_modules/@jest/environment/LICENSE
@@ -3505,13 +3476,6 @@ Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
 Source: https://github.com/jestjs/jest.git
 Link: https://github.com/jestjs/jest.git
 -----------
-@jest/get-type
-License: MIT
-License File: node_modules/@jest/get-type/LICENSE
-Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
-Source: https://github.com/jestjs/jest.git
-Link: https://github.com/jestjs/jest.git
------------
 @jest/globals
 License: MIT
 License File: node_modules/@jest/globals/LICENSE
@@ -3519,13 +3483,6 @@ Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
 Source: https://github.com/jestjs/jest.git
 Link: https://github.com/jestjs/jest.git
 -----------
-@jest/pattern
-License: MIT
-License File: node_modules/@jest/pattern/LICENSE
-Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
-Source: https://github.com/jestjs/jest.git
-Link: https://github.com/jestjs/jest.git
------------
 @jest/reporters
 License: MIT
 License File: node_modules/@jest/reporters/LICENSE
@@ -3540,13 +3497,6 @@ Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
 Source: https://github.com/jestjs/jest.git
 Link: https://github.com/jestjs/jest.git
 -----------
-@jest/snapshot-utils
-License: MIT
-License File: node_modules/@jest/snapshot-utils/LICENSE
-Copyright: Copyright (c) Meta Platforms, Inc. and affiliates.
-Source: https://github.com/jestjs/jest.git
-Link: https://github.com/jestjs/jest.git
------------
 @jest/source-map
 License: MIT
 License File: node_modules/@jest/source-map/LICENSE
@@ -3715,17 +3665,6 @@ Copyright: Copyright (c) 2017-present Devon Govett
 Source: https://github.com/parcel-bundler/watcher.git
 Link: https://github.com/parcel-bundler/watcher.git
 -----------
-@pkgjs/parseargs
-License: MIT
-License File: node_modules/@pkgjs/parseargs/LICENSE
-Source: git@github.com:pkgjs/parseargs.git
-Link: https://github.com/pkgjs/parseargs#readme
------------
-@pkgr/core
-License: MIT
-Source: git+https://github.com/un-ts/pkgr.git
-Link: https://github.com/un-ts/pkgr/blob/master/packages/core
------------
 @rtsao/scc
 License: MIT
 License File: node_modules/@rtsao/scc/LICENSE
@@ -3751,7 +3690,7 @@ Link: https://github.com/sinonjs/commons#readme
 License: BSD-3-Clause
 License File: node_modules/@sinonjs/fake-timers/LICENSE
 Copyright: Copyright (c) 2010-2014, Christian Johansen, *********@*********.**. All rights reserved.
-Source: git+https://github.com/sinonjs/fake-timers.git
+Source: https://github.com/sinonjs/fake-timers.git
 Link: https://github.com/sinonjs/fake-timers
 -----------
 @ssddanbrown/codemirror-lang-smarty
@@ -3764,6 +3703,13 @@ License: MIT
 License File: node_modules/@ssddanbrown/codemirror-lang-twig/LICENSE
 Copyright: Copyright (C) 2023 by Dan Brown, Marijn Haverbeke and others
 -----------
+@tootallnate/once
+License: MIT
+License File: node_modules/@tootallnate/once/LICENSE
+Copyright: Copyright (c) 2020 Nathan Rajlich
+Source: git://github.com/TooTallNate/once.git
+Link: git://github.com/TooTallNate/once.git
+-----------
 @tsconfig/node10
 License: MIT
 License File: node_modules/@tsconfig/node10/LICENSE
@@ -3827,6 +3773,13 @@ Copyright: Copyright (c) Microsoft Corporation.
 Source: https://github.com/DefinitelyTyped/DefinitelyTyped.git
 Link: https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree
 -----------
+@types/graceful-fs
+License: MIT
+License File: node_modules/@types/graceful-fs/LICENSE
+Copyright: Copyright (c) Microsoft Corporation.
+Source: https://github.com/DefinitelyTyped/DefinitelyTyped.git
+Link: https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/graceful-fs
+-----------
 @types/istanbul-lib-coverage
 License: MIT
 License File: node_modules/@types/istanbul-lib-coverage/LICENSE
@@ -3936,20 +3889,3 @@ License File: node_modules/@types/yargs/LICENSE
 Copyright: Copyright (c) Microsoft Corporation.
 Source: https://github.com/DefinitelyTyped/DefinitelyTyped.git
 Link: https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/yargs
------------
-@ungap/structured-clone
-License: ISC
-License File: node_modules/@ungap/structured-clone/LICENSE
-Copyright: Copyright (c) 2021, Andrea Giammarchi, @WebReflection
-Source: git+https://github.com/ungap/structured-clone.git
-Link: https://github.com/ungap/structured-clone#readme
------------
-@unrs/resolver-binding-linux-x64-gnu
-License: MIT
-Source: git+https://github.com/unrs/unrs-resolver.git
-Link: https://github.com/unrs/unrs-resolver#readme
------------
-@unrs/resolver-binding-linux-x64-musl
-License: MIT
-Source: git+https://github.com/unrs/unrs-resolver.git
-Link: https://github.com/unrs/unrs-resolver#readme

dev/licensing/php-library-licenses.txt

@@ -176,7 +176,7 @@ License: MIT
 License File: vendor/intervention/image/LICENSE
 Copyright: Copyright (c) 2013-present Oliver Vogel
 Source: https://github.com/Intervention/image.git
-Link: https://image.intervention.io
+Link: https://image.intervention.io/
 -----------
 knplabs/knp-snappy
 License: MIT
@@ -592,13 +592,6 @@ Copyright: Copyright (c) 2018-present Fabien Potencier
 Source: https://github.com/symfony/event-dispatcher-contracts.git
 Link: https://symfony.com
 -----------
-symfony/filesystem
-License: MIT
-License File: vendor/symfony/filesystem/LICENSE
-Copyright: Copyright (c) 2004-present Fabien Potencier
-Source: https://github.com/symfony/filesystem.git
-Link: https://symfony.com
------------
 symfony/finder
 License: MIT
 License File: vendor/symfony/finder/LICENSE

tests/Api/ApiDocsTest.php

@@ -22,7 +22,7 @@ class ApiDocsTest extends TestCase
         $resp->assertStatus(200);
         $resp->assertSee(url('/api/docs.json'));
         $resp->assertSee('Show a JSON view of the API docs data.');
-        $resp->assertHeader('Content-Type', 'text/html; charset=utf-8');
+        $resp->assertHeader('Content-Type', 'text/html; charset=UTF-8');
     }
 
     public function test_docs_json_endpoint_returns_json()

tests/Auth/OidcTest.php

@@ -138,7 +138,7 @@ class OidcTest extends TestCase
     {
         // Start auth
         $this->post('/oidc/login');
-        $state = explode(':', session()->get('oidc_state'), 2)[1];
+        $state = session()->get('oidc_state');
 
         $transactions = $this->mockHttpClient([$this->getMockAuthorizationResponse([
             'email' => 'benny@example.com',
@@ -190,35 +190,6 @@ class OidcTest extends TestCase
         $this->assertSessionError('Login using SingleSignOn-Testing failed, system did not provide successful authorization');
     }
 
-    public function test_callback_works_even_if_other_request_made_by_session()
-    {
-        $this->mockHttpClient([$this->getMockAuthorizationResponse([
-            'email' => 'benny@example.com',
-            'sub'   => 'benny1010101',
-        ])]);
-
-        $this->post('/oidc/login');
-        $state = explode(':', session()->get('oidc_state'), 2)[1];
-
-        $this->get('/');
-
-        $resp = $this->get("/oidc/callback?code=SplxlOBeZQQYbYS6WxSbIA&state={$state}");
-        $resp->assertRedirect('/');
-    }
-
-    public function test_callback_fails_if_state_timestamp_is_too_old()
-    {
-        $this->post('/oidc/login');
-        $state = explode(':', session()->get('oidc_state'), 2)[1];
-        session()->put('oidc_state', (time() - 60 * 4) . ':' . $state);
-
-        $this->get('/');
-
-        $resp = $this->get("/oidc/callback?code=SplxlOBeZQQYbYS6WxSbIA&state={$state}");
-        $resp->assertRedirect('/login');
-        $this->assertSessionError('Login using SingleSignOn-Testing failed, system did not provide successful authorization');
-    }
-
     public function test_dump_user_details_option_outputs_as_expected()
     {
         config()->set('oidc.dump_user_details', true);
@@ -826,7 +797,7 @@ class OidcTest extends TestCase
     {
         // Start auth
         $resp = $this->post('/oidc/login');
-        $state = explode(':', session()->get('oidc_state'), 2)[1];
+        $state = session()->get('oidc_state');
 
         $pkceCode = session()->get('oidc_pkce_code');
         $this->assertGreaterThan(30, strlen($pkceCode));
@@ -854,7 +825,7 @@ class OidcTest extends TestCase
     {
         config()->set('oidc.display_name_claims', 'first_name|last_name');
         $this->post('/oidc/login');
-        $state = explode(':', session()->get('oidc_state'), 2)[1];
+        $state = session()->get('oidc_state');
 
         $client = $this->mockHttpClient([
             $this->getMockAuthorizationResponse(['name' => null]),
@@ -1002,7 +973,7 @@ class OidcTest extends TestCase
         ]);
 
         $this->post('/oidc/login');
-        $state = explode(':', session()->get('oidc_state'), 2)[1];
+        $state = session()->get('oidc_state');
         $client = $this->mockHttpClient([$this->getMockAuthorizationResponse([
             'groups' => [],
         ])]);
@@ -1028,7 +999,7 @@ class OidcTest extends TestCase
     protected function runLogin($claimOverrides = [], $additionalHttpResponses = []): TestResponse
     {
         $this->post('/oidc/login');
-        $state = explode(':', session()->get('oidc_state'), 2)[1] ?? '';
+        $state = session()->get('oidc_state');
         $this->mockHttpClient([$this->getMockAuthorizationResponse($claimOverrides), ...$additionalHttpResponses]);
 
         return $this->get('/oidc/callback?code=SplxlOBeZQQYbYS6WxSbIA&state=' . $state);

tests/Auth/Saml2Test.php

@@ -36,7 +36,7 @@ class Saml2Test extends TestCase
     public function test_metadata_endpoint_displays_xml_as_expected()
     {
         $req = $this->get('/saml2/metadata');
-        $req->assertHeader('Content-Type', 'text/xml; charset=utf-8');
+        $req->assertHeader('Content-Type', 'text/xml; charset=UTF-8');
         $req->assertSee('md:EntityDescriptor');
         $req->assertSee(url('/saml2/acs'));
     }
@@ -51,7 +51,7 @@ class Saml2Test extends TestCase
 
         $req = $this->get('/saml2/metadata');
         $req->assertOk();
-        $req->assertHeader('Content-Type', 'text/xml; charset=utf-8');
+        $req->assertHeader('Content-Type', 'text/xml; charset=UTF-8');
         $req->assertSee('md:EntityDescriptor');
     }
 

tests/SessionTest.php

@@ -1,53 +0,0 @@
-<?php
-
-namespace Tests;
-
-class SessionTest extends TestCase
-{
-    public function test_secure_images_not_tracked_in_session_history()
-    {
-        config()->set('filesystems.images', 'local_secure');
-        $this->asEditor();
-        $page = $this->entities->page();
-        $result = $this->files->uploadGalleryImageToPage($this, $page);
-        $expectedPath = storage_path($result['path']);
-        $this->assertFileExists($expectedPath);
-
-        $this->get('/books');
-        $this->assertEquals(url('/books'), session()->previousUrl());
-
-        $resp = $this->get($result['path']);
-        $resp->assertOk();
-        $resp->assertHeader('Content-Type', 'image/png');
-
-        $this->assertEquals(url('/books'), session()->previousUrl());
-
-        if (file_exists($expectedPath)) {
-            unlink($expectedPath);
-        }
-    }
-
-    public function test_pwa_manifest_is_not_tracked_in_session_history()
-    {
-        $this->asEditor()->get('/books');
-        $this->get('/manifest.json');
-
-        $this->assertEquals(url('/books'), session()->previousUrl());
-    }
-
-    public function test_dist_dir_access_is_not_tracked_in_session_history()
-    {
-        $this->asEditor()->get('/books');
-        $this->get('/dist/sub/hello.txt');
-
-        $this->assertEquals(url('/books'), session()->previousUrl());
-    }
-
-    public function test_opensearch_is_not_tracked_in_session_history()
-    {
-        $this->asEditor()->get('/books');
-        $this->get('/opensearch.xml');
-
-        $this->assertEquals(url('/books'), session()->previousUrl());
-    }
-}

tests/ThemeTest.php

@@ -478,7 +478,7 @@ END;
 
             $resp = $this->asAdmin()->get("/theme/{$themeFolderName}/file.txt");
             $resp->assertStreamedContent($text);
-            $resp->assertHeader('Content-Type', 'text/plain; charset=utf-8');
+            $resp->assertHeader('Content-Type', 'text/plain; charset=UTF-8');
             $resp->assertHeader('Cache-Control', 'max-age=86400, private');
 
             $resp = $this->asAdmin()->get("/theme/{$themeFolderName}/image.png");
@@ -487,7 +487,7 @@ END;
 
             $resp = $this->asAdmin()->get("/theme/{$themeFolderName}/file.css");
             $resp->assertStreamedContent($css);
-            $resp->assertHeader('Content-Type', 'text/css; charset=utf-8');
+            $resp->assertHeader('Content-Type', 'text/css; charset=UTF-8');
             $resp->assertHeader('Cache-Control', 'max-age=86400, private');
         });
     }

tests/Uploads/AttachmentTest.php

@@ -323,7 +323,7 @@ class AttachmentTest extends TestCase
 
         $attachmentGet = $this->get($attachment->getUrl(true));
         // http-foundation/Response does some 'fixing' of responses to add charsets to text responses.
-        $attachmentGet->assertHeader('Content-Type', 'text/plain; charset=utf-8');
+        $attachmentGet->assertHeader('Content-Type', 'text/plain; charset=UTF-8');
         $attachmentGet->assertHeader('Content-Disposition', 'inline; filename="upload_test_file.txt"');
         $attachmentGet->assertHeader('X-Content-Type-Options', 'nosniff');
 
@@ -339,7 +339,7 @@ class AttachmentTest extends TestCase
 
         $attachmentGet = $this->get($attachment->getUrl(true));
         // http-foundation/Response does some 'fixing' of responses to add charsets to text responses.
-        $attachmentGet->assertHeader('Content-Type', 'text/plain; charset=utf-8');
+        $attachmentGet->assertHeader('Content-Type', 'text/plain; charset=UTF-8');
         $attachmentGet->assertHeader('Content-Disposition', 'inline; filename="test_file.html"');
 
         $this->files->deleteAllAttachmentFiles();

tests/Uploads/ImageTest.php

@@ -429,6 +429,29 @@ class ImageTest extends TestCase
         }
     }
 
+    public function test_secure_images_not_tracked_in_session_history()
+    {
+        config()->set('filesystems.images', 'local_secure');
+        $this->asEditor();
+        $page = $this->entities->page();
+        $result = $this->files->uploadGalleryImageToPage($this, $page);
+        $expectedPath = storage_path($result['path']);
+        $this->assertFileExists($expectedPath);
+
+        $this->get('/books');
+        $this->assertEquals(url('/books'), session()->previousUrl());
+
+        $resp = $this->get($result['path']);
+        $resp->assertOk();
+        $resp->assertHeader('Content-Type', 'image/png');
+
+        $this->assertEquals(url('/books'), session()->previousUrl());
+
+        if (file_exists($expectedPath)) {
+            unlink($expectedPath);
+        }
+    }
+
     public function test_system_images_remain_public_with_local_secure_restricted()
     {
         config()->set('filesystems.images', 'local_secure_restricted');

version

@@ -1 +1 @@
-v25.11-dev
+v25.11.3