https://github.com/GetSimpleCMS/GetSimpleCMS/releases

• New config directives
  • GSNOVERCHECK - Disable persistant header version checking
  • GSTIMEZONE - Timezone string for server default timezone
  • GSNOSITEMAP - Disable sitemap generation
  • GSSTYLE - Set an alternative style, eg. GSSTYLEWIDE
  • GSDEBUGINSTALL - Debugging, Prevent removal of install files for debugging installs
  • GSSUPPRESSERRORS - reproduce previous GS behavior ragarding php error supression
• Added Flush Cache link to settings to clear all caches
• Sorted list now sort using natural sort, fixes file01,file10,file2
• New plugin toggle handling, and speed improvements.
• Generate missing thumbnails preview visits, useful for ftped files
• Style changes to CkEditor, all editors should inherit GS styles now, some border fixes
• Codemirror style changes, better programming fonts, lineheight, alignments fixes
• Removed image link borders in emails
• Added utf-8 meta to cardinal theme
• Menu items now contain class "active" in addition to current, more standardized for frameworks.
• GS css compression fixes
• Added Fluid Fullwidth admin style via define('GSSTYLE',GSSTYLEWIDE)
• Debug Mode Link now points to wiki debugging section
• JQuery-ui is now loaded on all backend pages, not just when used
• Profile settings now contain field for setting a display name for the user.
• Plugins that need update are now styled more visibly'
• Plugin tabs and sidemenus contain classes to style them, plugin_tab and plugin_sb respectively
• IMPORTANT CHANGES
  • admin css definitions moved from style.php to css.php include, problematic if users changed style.php
  • GS used to force php error suppression, GS will no longer do this unless GSSUPPRESSERRORS is set.
  • Plugins are no longer activated automatically upon installation
• BUGS FIXED
  • Fix for failed login ip whois lookup
  • File manager / upload issues, IE fixes etc.
  • Fix for various file traversal exploits on authenticated users
    • filebrowser, uploads, downloads, deletefile, themeedit
  • executing php functions from url, Deprecated ajax.php
  • Hidden templates showing up eg. .filename
  • bad API results get returned and not filtered
  • Components with empty content are removed
  • Uploads column headers in debug mode swapped
  • Cannot set user timezone if strict php mode, corrupt nonces
  • Mysterious broken logins issue
  • Creating page without a title deletes the content
  • Child page can set self as parent
  • Changing name of component doesn't focus the input
  • Site name encoding in backend and frontend
  • XSS on archive.php
  • Archive Backups not working on Windows hosts
  • Fix $kill notices on install.php
  • Fix for multiple plugin read xml
  • Plugins should not be automatically enabled
  • Remove GS version number from admin login
  • autosave using milliseconds not seconds for timing
  • theme editor missing wrapper
  • Health Check version is missing when upgrade available
  • Upload throwing a get 404 error asset load
  • Auto Save saves slug changes as they occur if set too fast.
  • Version check in javascript