MODX Revolution 3.2.4-pl (August 26, 2026) ==================================== - Escape all scalar values written to the setup config file - Declare view_user permission on Security/User/GetOnline processor - Sign password reset and magic login tokens with a per-user HMAC MODX Revolution 3.2.3-pl (July 21, 2026) ==================================== - Validate cultureKey before storing it as a config placeholder MODX Revolution 3.2.2-pl (July 7, 2026) ==================================== - Add checkbox style to Add Property Set window (#16883) - Respect skipFormatDates when sent as string from JS (#16888) - Use FQCN in modResource and modUser (#16919) - Fix template previews when installed in subdirectory (#16889) - Remove unused code (#16961) - Fix image issue in manager email template (#16953) - Improvements to package installer styling (#16952) - FIx display of readme/changelog/license in Package Manager (#16829) - Remove E_STRICT error handling (#16965) - Fix typo in download success message (#16956) - Fix modInputFilter root-level backticks in modifier values (#16957) - JS code quality, modernization for tree, elements, and resources (#16963) MODX Revolution 3.2.1-pl (May 13, 2026) ==================================== - Catch failure checking S3 file visibility (#16940) - Register Smarty date modifier to avoid deprecation warning (#16842) - Increase drag-n-drop image visibility in package manager (#16899) - Fix package metadata format (#16911) - Fix PHP warning: Undefined array key "updateable" (#16935) - Fix PHP warning: Undefined variable $image (#16933) - Fix Issue with Extras Installation/Updates (#16950) - Add AI contribution policy and update contributor governance files (#16944) - Fix grunt build for arm64 and add missing grunt build asset from #16831 (#16949) - Fix quotes breaking grid js (#16831) - Add SECURITY.md (#16939) - Clarify label and description for user_prevlogin lexicon entry (#16846) - Update README badges layout and add Version badge (#16868) - Improve PHP version error message in bootstrap (#16922) - Only call exif_read_data for JPEG/TIFF (#16903) - Update welcome_screen_url for 3.2 (#16913) - Change getVersionData() to use include instead of include_once (#16840)