Security update

1.0.25

• Sufficiently sanitize address suggestion data

1.0.24

• Add hook help
• Compatible drupal 11.2

2.0.13

• entity query improvement with new test
• fixed schema
• add option for export file name

2.0.12

• Issue #3540021: Views relationships dont work on reference field
• Update libraries
• Validate numeric number money

This version sanitizes the names of tree entries in several places

Blazy 3.0.x-dev, 2026-07-04
---------------------------
- fix: #3401623 Blazy library not firing correctly sometimes on responsive
images

Blazy 3.0.x-dev, 2026-02-24
---------------------------
- Issue #3572391 by filipeabreu: PHP 8.1+: Fix deprecated str_ireplace() warning
in Multimedia::provider() when URL host is NULL.
- Added deprecation notices for 4.x smooth revamp.

No functional change, just indicates that the permission this module provides is "restricted" and should be assigned to users with extra care due to security implications.

This release changes JSONAPI entity collection access control. In certain circumstances this may mean that JSONAPI clients can access less data than expected. Sites should carefully review their JSONAPI integrations and implement their own json api filter access rules if necessary. See examples in jsonapi module in core on how to do so for your own entity types: https://git.drupalcode.org/project/drupal/-/blob/main/core/modules/jsona...