Moodle release 5.2beta

Improve the styling that controls the image display to better display the image.
Switch from an embedded watermark in the image, to one using the css
::after pseudo-element so the watermark displays correctly on all
screen resolutions and can be translated.

Make the width of the instructions container wider for better
display of default and custom instructions.

.esbuild/generate-aliases.mjs

@@ -0,0 +1,185 @@
+// This file is part of Moodle - http://moodle.org/
+//
+// Moodle is free software: you can redistribute it and/or modify
+// it under the terms of the GNU General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// Moodle is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU General Public License for more details.
+//
+// You should have received a copy of the GNU General Public License
+// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
+
+/**
+ * Generates tsconfig.aliases.json for cross-component TypeScript imports.
+ *
+ * Moodle ESM source files can import from other components using the alias
+ * scheme @moodle/lms/<component>/* (e.g. @moodle/lms/core/SomeUtil). This
+ * file reads the Moodle component registry (.grunt/components.js), finds every
+ * component that has a js/esm/src/ directory, and writes the corresponding
+ * TypeScript path mappings to tsconfig.aliases.json.
+ *
+ * tsconfig.json extends tsconfig.aliases.json, so TypeScript picks up the
+ * mappings automatically. The file is skipped if its content is unchanged, to
+ * avoid unnecessary rebuilds.
+ *
+ * This must run before esbuild compilation. The Grunt `jsconfig` task calls
+ * generateAliases() so that both jsconfig.json and tsconfig.aliases.json are
+ * kept in sync. The `react` task depends on `jsconfig`, so aliases are always
+ * up to date before a React build.
+ *
+ * @copyright  2026 Adrian Greeve <adrian@moodle.com>
+ * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
+ */
+
+import fs from "fs";
+import path from "path";
+import { createRequire } from "module";
+
+const rootDir = process.cwd();
+
+const tsconfigOut = path.join(rootDir, "tsconfig.aliases.json");
+const TS_ALIASES_WARNING =
+    "// WARNING: Do not edit this file manually. It is generated by `grunt jsconfig`.\n";
+
+/**
+ * Load Moodle component paths from `.grunt/components.js`.
+ *
+ * @returns {Record<string, string>} Map of component paths to component names.
+ */
+function loadComponentPathMap() {
+    const require = createRequire(import.meta.url);
+
+    // Load Moodle's components data from .grunt/components.js.
+    const { fetchComponentData } = require(
+        path.join(process.cwd(), ".grunt", "components.js")
+    );
+
+    // Format: `{ components: { "public/lib": "core", ... } }`.
+    const componentsData = fetchComponentData().components;
+
+    // Expected:
+    //   `{ "public/lib": "core", "public/ai": "core_ai", ... }`.
+    return componentsData;
+}
+
+/**
+ * Compare two TypeScript `paths` maps for exact equality.
+ *
+ * @param {Record<string, string[]>} a First paths map.
+ * @param {Record<string, string[]>} b Second paths map.
+ * @returns {boolean} True when keys and values match in order.
+ */
+function pathsEqual(a, b) {
+    const aKeys = Object.keys(a);
+    const bKeys = Object.keys(b);
+    if (aKeys.length !== bKeys.length) {
+        return false;
+    }
+
+    for (const key of aKeys) {
+        if (!Object.prototype.hasOwnProperty.call(b, key)) {
+            return false;
+        }
+
+        const aArr = a[key] ?? [];
+        const bArr = b[key] ?? [];
+        if (aArr.length !== bArr.length) {
+            return false;
+        }
+
+        for (let i = 0; i < aArr.length; i++) {
+            if (aArr[i] !== bArr[i]) {
+                return false;
+            }
+        }
+    }
+
+    return true;
+}
+
+/**
+ * Parse JSON content and tolerate line comments.
+ *
+ * @param {string} content Raw JSON/JSONC file content.
+ * @returns {unknown}
+ */
+function parseJsonWithComments(content) {
+    const stripped = content
+        .replace(/^\uFEFF/, "")
+        .replace(/^\s*\/\/.*$/gm, "");
+
+    return JSON.parse(stripped);
+}
+
+/**
+ * Convert JSON output so single-value arrays are rendered on one line.
+ *
+ * @param {unknown} obj Data to stringify.
+ * @returns {string} JSON string with flattened single-value arrays.
+ */
+function stringifyFlatArrays(obj) {
+    const json = JSON.stringify(obj, null, 2);
+    return TS_ALIASES_WARNING + json.replace(/\[\s+\"(.*?)\"\s+\]/g, '["$1"]') + "\n";
+}
+
+/**
+ * Generate `tsconfig.aliases.json` from Moodle component metadata.
+ *
+ * Includes core aliases, discovers plugin React source aliases, and skips
+ * rewriting when aliases have not changed.
+ *
+ * @returns {void}
+ */
+export function generateAliases() {
+    const componentPathMap = loadComponentPathMap();
+
+    // Build TS paths for tsconfig.aliases.json
+    /** @type {Record<string, string[]>} */
+    const tsPaths = {
+        // Always include core alias.
+        "@moodle/lms/core/*": ["./public/lib/js/esm/src/*"],
+    };
+
+    for (const [componentPath, componentName] of Object.entries(componentPathMap)) {
+        const runtimeAliasKey = `@moodle/lms/${componentName}/*`;
+        const targetPattern = `./${path
+            .join(componentPath, "js", "esm", "src", "*")
+            .replace(/\\/g, "/")}`;
+
+        tsPaths[runtimeAliasKey] = [targetPattern];
+    }
+
+    const tsconfig = {
+        compilerOptions: { paths: tsPaths },
+    };
+
+    // If tsconfig paths didn't change, skip regeneration
+    let previousPaths = null;
+    let hasWarningHeader = false;
+    if (fs.existsSync(tsconfigOut)) {
+        try {
+            const previousContent = fs.readFileSync(tsconfigOut, "utf8");
+            hasWarningHeader = previousContent.startsWith(TS_ALIASES_WARNING);
+            const previousTsconfig = /** @type {{compilerOptions?: {paths?: Record<string, string[]>}}} */ (
+                parseJsonWithComments(previousContent)
+            );
+            previousPaths = previousTsconfig.compilerOptions?.paths ?? {};
+        } catch {
+            // ignore parse errors and treat as "no previous cache"
+            previousPaths = null;
+        }
+    }
+
+    if (previousPaths && hasWarningHeader && pathsEqual(previousPaths, tsPaths)) {
+        console.log("✓ Generating tsconfig.aliases.json was skipped. No alias modifications detected.");
+        return;
+    }
+
+    // Write tsconfig.aliases.json
+    fs.writeFileSync(tsconfigOut, stringifyFlatArrays(tsconfig));
+    console.log("✓ Generating tsconfig.aliases.json");
+}

.esbuild/plugin/plugincomponents.mjs

@@ -0,0 +1,324 @@
+// This file is part of Moodle - http://moodle.org/
+//
+// Moodle is free software: you can redistribute it and/or modify
+// it under the terms of the GNU General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// Moodle is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU General Public License for more details.
+//
+// You should have received a copy of the GNU General Public License
+// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
+
+/**
+ * Core esbuild library for Moodle ESM components.
+ *
+ * This is the single source of all build logic. The Grunt tasks
+ * (.grunt/tasks/react.js) import from here rather than duplicating
+ * configuration or build steps.
+ *
+ * Source layout convention:
+ *   <component>/js/esm/src/**\/*.{ts,tsx}  →  <component>/js/esm/build/**\/*.js
+ *
+ * Exports:
+ *   createBuildConfig(isDev)           esbuild config object; pass isDev=true
+ *                                      to disable minification / add sourcemaps.
+ *   buildPluginComponents(isDev)       Glob for every js/esm/src tree across
+ *                                      core and plugins, compile all in parallel.
+ *   buildSingleFile(filePath, isDev)   Compile one source file; used by the
+ *                                      Grunt watch task on incremental changes.
+ *   watchComponents(isDev)             Start esbuild's native watch mode so the
+ *                                      compiler rebuilds affected files on save.
+ *   resolveComponentPaths(entry)       Map an absolute source path to its
+ *                                      relative input path and output path.
+ *
+ * @copyright  2026 Adrian Greeve <adrian@moodle.com>
+ * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
+ */
+
+import esbuild from "esbuild";
+import { glob } from "glob";
+import chalk from "chalk";
+import path from "path";
+import fs from "fs";
+
+const projectRoot = process.cwd();
+
+/**
+ * Resolve a path from the current project root.
+ *
+ * @param {...string} segments Path segments to resolve.
+ * @returns {string} Absolute path from project root.
+ */
+const fromRoot = (...segments) => path.resolve(projectRoot, ...segments);
+
+/**
+ * Create an incremental dot progress indicator.
+ * Prints one dot per completed build and wraps lines for readability.
+ *
+ * @param {number} total Total number of items to build.
+ * @returns {{ start: () => void, tick: () => void, succeed: (msg: string) => void, fail: (msg: string) => void }}
+ */
+function createDotProgress(total) {
+    const dotsPerLine = 60;
+    let printed = 0;
+
+    return {
+        start: () => {
+            process.stdout.write(`${chalk.cyan("Building")} `);
+        },
+        tick: () => {
+            printed++;
+            process.stdout.write(chalk.cyan("."));
+            if (printed % dotsPerLine === 0 && printed < total) {
+                process.stdout.write(` ${chalk.dim(`[${printed}/${total}]`)}\n`);
+            }
+        },
+        succeed: (msg) => {
+            process.stdout.write(`  ${chalk.dim(`[${printed}/${total}]`)}\n`);
+            process.stdout.write(`${chalk.green("✓")} ${msg}\n`);
+        },
+        fail: (msg) => {
+            process.stdout.write(`  ${chalk.dim(`[${printed}/${total}]`)}\n`);
+            process.stdout.write(`${chalk.red("✗")} ${msg}\n`);
+        },
+    };
+}
+
+/**
+ * Build a single React component entry file.
+ *
+ * @param {string} entry Absolute entry file path.
+ * @param {import('esbuild').BuildOptions} buildConfig Shared esbuild configuration.
+ * @returns {Promise<{file: string, output?: string, error: Error|null}>}
+ */
+async function buildComponent(entry, buildConfig) {
+    const resolved = resolveComponentPaths(entry);
+    if (!resolved) {
+        return { file: entry, error: new Error(`Unknown path pattern: ${entry}`) };
+    }
+
+    const { file, output } = resolved;
+    fs.mkdirSync(path.dirname(output), { recursive: true });
+
+    try {
+        await esbuild.build({
+            ...buildConfig,
+            entryPoints: [entry],
+            outfile: output,
+        });
+
+        return { file, output, error: null };
+    } catch (error) {
+        return { file, error: error instanceof Error ? error : new Error(String(error)) };
+    }
+}
+
+/**
+ * Resolve source and output paths for a component entry.
+ *
+ * @param {string} entry Absolute component source path.
+ * @returns {{file: string, output: string} | null} Relative file info and output path, or null for unsupported paths.
+ */
+export function resolveComponentPaths(entry) {
+    const rel = path.relative(projectRoot, entry);
+
+    if (rel.includes(path.join('esm', 'src'))) {
+
+        const [part, rawFile] = rel.split(path.join('esm', 'src'));
+        const file = rawFile.replace(/^[\/\\]/, '');
+
+        return {
+            file,
+            output: fromRoot(part, 'esm', 'build', file.replace(/\.(ts|tsx)$/, '.js')),
+        };
+    }
+    return null;
+}
+
+/**
+ * Run all builds in parallel, showing incremental dot progress.
+ *
+ * @param {string[]} entryPoints Absolute entry file paths.
+ * @param {import('esbuild').BuildOptions} buildConfig Shared esbuild configuration.
+ * @returns {Promise<{errors: {file: string, output?: string, error: Error|null}[]}>}
+ */
+async function runParallelBuilds(entryPoints, buildConfig) {
+    const total = entryPoints.length;
+    /** @type {{file: string, output?: string, error: Error|null}[]} */
+    const errors = [];
+    const startTime = Date.now();
+
+    const progress = createDotProgress(total);
+    progress.start();
+
+    await Promise.all(entryPoints.map(async (entry) => {
+        const result = await buildComponent(entry, buildConfig);
+        if (result.error) {
+            errors.push(result);
+        }
+        progress.tick();
+    }));
+
+    const elapsed = ((Date.now() - startTime) / 1000).toFixed(1);
+    const succeeded = total - errors.length;
+
+    if (errors.length > 0) {
+        progress.fail(`${succeeded}/${total} built · ${elapsed}s`);
+        for (const e of errors) {
+            console.error(chalk.red(`    ✗ ${e.file}: ${e.error?.message ?? ''}`));
+        }
+    } else {
+        progress.succeed(chalk.bold(`${total} components built`) + chalk.dim(` · ${elapsed}s`));
+    }
+
+    return { errors };
+}
+
+/**
+ * Create the shared esbuild build configuration.
+ *
+ * @param {boolean} isDev Whether development mode is enabled.
+ * @returns {import('esbuild').BuildOptions} esbuild configuration object.
+ */
+export function createBuildConfig(isDev) {
+    return {
+        bundle: true,
+        format: "esm",
+        external: ["react", "react/*", "react-dom", "react-dom/*", "@moodlehq/design-system", "@moodlehq/design-system/*", "@moodle/lms", "@moodle/lms/*"],
+        jsx: "automatic",
+        minify: !isDev,
+        sourcemap: isDev ? 'inline' : false,
+        jsxDev: isDev,
+        keepNames: isDev,
+        treeShaking: !isDev,
+        define: { 'process.env.NODE_ENV': isDev ? '"development"' : '"production"' },
+    };
+}
+
+/**
+ * Build all plugin and core React components.
+ *
+ * @param {boolean} isDev Whether development mode is enabled.
+ * @returns {Promise<void>}
+ */
+export async function buildPluginComponents(isDev) {
+    console.log(chalk.green('> Building components...'));
+
+    const entryPoints = glob.sync("**/js/esm/src/**/*.{ts,tsx}", {
+        cwd: projectRoot,
+        absolute: true,
+        ignore: [
+            `${process.cwd()}/node_modules/**`,
+            `${process.cwd()}/vendor/**`,
+        ],
+    });
+
+    const buildConfig = createBuildConfig(isDev);
+
+    const { errors } = await runParallelBuilds(entryPoints, buildConfig);
+
+    if (errors.length > 0) {
+        throw new Error(`React build failed: ${errors.length} component(s) could not be built`);
+    }
+}
+
+/**
+ * Start esbuild in native watch mode over all React components.
+ *
+ * Creates a single incremental build context for all entry points so that
+ * esbuild can reuse its internal graph between rebuilds instead of starting
+ * from scratch on every file change.
+ *
+ * @param {boolean} isDev Whether to build in development mode.
+ * @param {((srcFiles: string[]) => void) | undefined} [onRebuild] Called with the rebuilt entry source
+ *        files (relative to project root) after each non-initial successful rebuild. Use this to run
+ *        follow-up tasks such as linting without coupling them to this module.
+ * @returns {Promise<import('esbuild').BuildContext|null>} The active context, or null if no source files exist.
+ */
+export async function watchComponents(isDev, onRebuild) {
+    const entryPoints = glob.sync("**/js/esm/src/**/*.{ts,tsx}", {
+        cwd: projectRoot,
+        absolute: true,
+        ignore: [
+            `${process.cwd()}/node_modules/**`,
+            `${process.cwd()}/vendor/**`,
+        ],
+    });
+
+    if (entryPoints.length === 0) {
+        return null;
+    }
+
+    const buildConfig = createBuildConfig(isDev);
+
+    // Map each source file to an {in, out} pair so esbuild can write each
+    // component to its custom output directory while sharing a single context.
+    // The 'out' path is relative to outdir (projectRoot) and has no extension —
+    // esbuild appends the appropriate extension automatically.
+    // Build entry pairs and ensure output directories exist in a single pass.
+    const entryPairs = entryPoints.flatMap(entry => {
+        const resolved = resolveComponentPaths(entry);
+        if (!resolved) {
+            return [];
+        }
+        fs.mkdirSync(path.dirname(resolved.output), { recursive: true });
+        return [{ in: entry, out: path.relative(projectRoot, resolved.output).replace(/\.js$/, '') }];
+    });
+
+    // Report build results to the terminal after every build (initial and on each change).
+    // metafile: true populates result.metafile.outputs so we know which files were written.
+    // On a rebuild only the affected outputs appear, so it effectively names the changed file.
+    /** @type {import('esbuild').Plugin} */
+    const watchReporter = {
+        name: 'watch-reporter',
+        setup(build) {
+            let isInitial = true;
+            let startTime = 0;
+
+            build.onStart(() => {
+                startTime = Date.now();
+            });
+
+            build.onEnd(result => {
+                const now = new Date().toLocaleTimeString();
+                const elapsed = ((Date.now() - startTime) / 1000).toFixed(1);
+
+                if (result.errors.length > 0) {
+                    console.error(chalk.red(`[${now}] ✗ Build failed (${result.errors.length} error(s))`) + chalk.dim(` · ${elapsed}s`));
+                    return;
+                }
+
+                const outputs = Object.keys(result.metafile?.outputs ?? {});
+
+                console.log(chalk.green(`[${now}] ✓ ${outputs.length} component(s) built`) + chalk.dim(` · ${elapsed}s`));
+
+                if (isInitial) {
+                    isInitial = false;
+                } else if (onRebuild) {
+                    // entryPoint is the source file (relative to projectRoot) that triggered
+                    // this rebuild. Pass it to the caller so they can run follow-up tasks
+                    // (e.g. linting) without this module needing to know about them.
+                    const srcFiles = Object.values(result.metafile?.outputs ?? {})
+                        .map(output => output.entryPoint)
+                        .filter(/** @param {string|undefined} f */ f => !!f);
+                    onRebuild(/** @type {string[]} */ (srcFiles));
+                }
+            });
+        },
+    };
+
+    const ctx = await esbuild.context({
+        ...buildConfig,
+        entryPoints: entryPairs,
+        outdir: projectRoot,
+        metafile: true,
+        plugins: [watchReporter],
+    });
+
+    await ctx.watch();
+    return ctx;
+}

.eslintrc

@@ -244,6 +244,23 @@
         'sourceType': 'module',
         'requireConfigFile': false
       }
+    },
+    {
+      files: ["**/*.ts", "**/*.tsx"],
+      parser: '@typescript-eslint/parser',
+      parserOptions: {
+        sourceType: 'module',
+        ecmaFeatures: {
+            jsx: true
+        },
+        allowSyntheticDefaultImports: true
+      },
+      rules: {
+        // promise/no-native crashes on TypeScript ASTs (same reason it is
+        // disabled for AMD files above). Native Promises are standard in TS.
+        'promise/no-native': 'off',
+        'promise/avoid-new': 'off',
+      }
     }
   ]
 }

.gitattributes

@@ -3,3 +3,7 @@
 **.js.map -diff
 **-min.js -diff
 **.min.js -diff
+
+# Remove composer lock file changes from standard diff views.
+/composer.lock -diff
+/lib/js/bundles/*/*.js -diff

.github/FUNDING.yml

@@ -1,2 +1,2 @@
 # Primary donations pages.
-custom: ["https://moodle.com/donations/", "https://fund.moodle.org"]
+custom: ["https://moodle.com/donations/"]

.github/workflows/composed.yml

@@ -0,0 +1,118 @@
+name: Run tests in a Composed Moodle Setup
+
+on:
+  push:
+    branches-ignore:
+      - main
+      - MOODLE_[0-9]+_STABLE
+    tags-ignore:
+      - v[0-9]+.[0-9]+.[0-9]+*
+  workflow_dispatch:
+    inputs:
+      phpunit_extra_options:
+        description: Additional options to apply to PHPUnit
+        required: false
+        default: ''
+
+env:
+  php: 8.4
+
+jobs:
+  PHPUnit:
+    runs-on: ${{ matrix.os }}
+    services:
+      exttests:
+        image: moodlehq/moodle-exttests
+        ports:
+          - 8080:80
+      redis:
+        image: redis
+        ports:
+          - 6379:6379
+      postgres:
+        image: ${{ matrix.db == 'pgsql' && 'postgres:16' || '' }}
+        env:
+          POSTGRES_DB: test
+          POSTGRES_USER: test
+          POSTGRES_PASSWORD: test
+        ports:
+          - 5432:5432
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          # MySQL builds always run with the lowest PHP supported version.
+          - os: ubuntu-24.04
+            php: 8.3
+            extensions:
+            db: mysqli
+          # PostgreSQL builds always run with the highest PHP supported version.
+          - os: ubuntu-24.04
+            php: 8.4
+            db: pgsql
+
+    steps:
+      - name: Run MySQL Server
+        if: ${{ matrix.db == 'mysqli' }}
+        run: |
+          docker run --rm \
+            -e MYSQL_DATABASE=test \
+            -e MYSQL_USER=test \
+            -e MYSQL_PASSWORD=test \
+            -e MYSQL_ROOT_PASSWORD=test \
+            -p 3306:3306 \
+            -d \
+            --tmpfs /var/lib/mysql:rw,noexec,nosuid,size=1024M \
+            mysql:8.4 \
+              --skip-log-bin \
+              --collation-server=utf8mb4_bin
+
+      - name: Configuring git vars
+        uses: rlespinasse/github-slug-action@v5
+
+      - name: Setting up PHP ${{ matrix.php }}
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ matrix.php }}
+          extensions: ${{ matrix.extensions }}
+          ini-values: max_input_vars=5000
+          coverage: none
+          tools: composer
+
+      - name: Checking out code from ${{ env.GITHUB_REF_SLUG }}
+        uses: actions/checkout@v6
+        with:
+          path: 'moodle'
+
+      - name: 'Preparing the environment'
+        run: |
+          echo "pathtophp=$(which php)" >> $GITHUB_ENV # Inject installed pathtophp to env. The template config needs it.
+          sudo locale-gen en_AU.UTF-8
+
+      - name: Create the new Composer Project
+        run: |
+          mkdir testsite
+          cp moodle/.github/workflows/composed/composer.json testsite/composer.json
+          cp moodle/.github/workflows/composed/config.php testsite/config.php
+          mkdir -p testsite/data/moodledata
+          mkdir -p testsite/data/phpunitdata
+
+      - name: Install the Moodle test site
+        working-directory: testsite
+        run: |
+          composer install --no-interaction
+
+      - name: Setting up PHPUnit
+        working-directory: testsite
+        env:
+          dbtype: ${{ matrix.db }}
+        run: |
+          php moodle/public/admin/tool/phpunit/cli/init.php --no-composer-self-update
+
+      - name: Running PHPUnit tests
+        working-directory: testsite
+        env:
+          dbtype: ${{ matrix.db }}
+          phpunit_options: ${{ secrets.phpunit_options }}
+        run: |
+            vendor/bin/phpunit $phpunit_options ${{ inputs.phpunit_extra_options }}

.github/workflows/composed/composer.json

@@ -0,0 +1,25 @@
+{
+    "type": "project",
+    "require": {
+        "moodle/composer-installer": "^1",
+        "moodle/moodle-composer-scaffold": "^1",
+        "moodle/moodle": "@dev",
+        "moodle/moodle-testing": "^1.0"
+    },
+    "repositories": [
+        {
+            "name": "moodleundertest",
+            "type": "path",
+            "url": "../moodle"
+        }
+    ],
+    "config": {
+        "audit": {
+            "block-insecure": false
+        },
+        "allow-plugins": {
+            "moodle/composer-installer": true,
+            "moodle/moodle-composer-scaffold": true
+        }
+    }
+}

.github/workflows/composed/config.php

@@ -0,0 +1,67 @@
+<?php
+// This file is part of Moodle - http://moodle.org/
+//
+// Moodle is free software: you can redistribute it and/or modify
+// it under the terms of the GNU General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// Moodle is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU General Public License for more details.
+//
+// You should have received a copy of the GNU General Public License
+// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
+
+/**
+ * Template configuraton file for GitHub Actions CI/CD using Composer.
+ *
+ * @package    core
+ * @copyright  2020 onwards Eloy Lafuente (stronk7) {@link https://stronk7.com}
+ * @license    https://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
+ */
+
+// This cannot be used out from a GitHub Actions workflow, so just exit.
+getenv('GITHUB_WORKFLOW') || die; // phpcs:ignore moodle.Files.MoodleInternal.MoodleInternalGlobalState
+
+unset($CFG);
+global $CFG;
+$CFG = new stdClass();
+
+$CFG->dbtype    = getenv('dbtype');
+$CFG->dblibrary = 'native';
+$CFG->dbhost    = '127.0.0.1';
+$CFG->dbname    = 'test';
+$CFG->dbuser    = 'test';
+$CFG->dbpass    = 'test';
+$CFG->prefix    = 'm_';
+$CFG->dboptions = ['dbcollation' => 'utf8mb4_bin'];
+
+$host = 'localhost';
+$CFG->wwwroot   = "http://{$host}";
+$CFG->dataroot  = __DIR__ . '/data/moodledata';
+$CFG->admin     = 'admin';
+$CFG->directorypermissions = 0777;
+
+// Debug options - possible to be controlled by flag in future.
+$CFG->debug = (E_ALL); // DEBUG_DEVELOPER.
+$CFG->debugdisplay = 1;
+$CFG->debugstringids = 1; // Add strings=1 to url to get string ids.
+$CFG->perfdebug = 15;
+$CFG->debugpageinfo = 1;
+$CFG->allowthemechangeonurl = 1;
+$CFG->passwordpolicy = 0;
+$CFG->cronclionly = 0;
+$CFG->pathtophp = getenv('pathtophp');
+
+$CFG->phpunit_dataroot  = __DIR__ . '/data/phpunitdata';
+$CFG->phpunit_prefix = 't_';
+
+$CFG->routerconfigured = true;
+
+define('TEST_EXTERNAL_FILES_HTTP_URL', 'http://localhost:8080');
+define('TEST_EXTERNAL_FILES_HTTPS_URL', 'http://localhost:8080');
+
+define('TEST_SESSION_REDIS_HOST', 'localhost');
+define('TEST_CACHESTORE_REDIS_TESTSERVERS', 'localhost');

.github/workflows/config-template.php

@@ -58,6 +58,8 @@ $CFG->pathtophp = getenv('pathtophp');
 $CFG->phpunit_dataroot  = realpath(dirname(__DIR__)) . '/phpunitdata';
 $CFG->phpunit_prefix = 't_';
 
+$CFG->routerconfigured = true;
+
 define('TEST_EXTERNAL_FILES_HTTP_URL', 'http://localhost:8080');
 define('TEST_EXTERNAL_FILES_HTTPS_URL', 'http://localhost:8080');
 

.github/workflows/onebyone.yml

@@ -51,7 +51,7 @@ jobs:
                   chunk=$(((($count % $chunks)) + 1))
                   echo "$testname $testfile" >> ./chunk_$chunk.txt
               done < <(grep "function test_" "${testfile}" | sed -r "s/^.*function (test_[a-zA-Z0-9_]+).*/\1/")
-          done < <(find . -name "*_test.php")
+          done < <(find . -name "*_test.php" -not -path "*/fixtures/*")
           # Generate the matrix to run tests.
           echo "matrix=$(ls -1 chunk_*.txt | jq -R -s -c 'split("\n")[:-1]')" >> $GITHUB_OUTPUT
           echo "$count individual tests collected in $chunks files"
@@ -85,7 +85,7 @@ jobs:
       - name: Setting up DB pgsql
         uses: m4nu56/postgresql-action@v1
         with:
-          postgresql version: 14
+          postgresql version: 16
           postgresql db: test
           postgresql user: test
           postgresql password: test

.github/workflows/push.yml

@@ -56,13 +56,21 @@ jobs:
         image: redis
         ports:
           - 6379:6379
+      postgres:
+        image: ${{ matrix.db == 'pgsql' && 'postgres:16' || '' }}
+        env:
+          POSTGRES_DB: test
+          POSTGRES_USER: test
+          POSTGRES_PASSWORD: test
+        ports:
+          - 5432:5432
     strategy:
       fail-fast: false
       matrix:
         include:
           # MySQL builds always run with the lowest PHP supported version.
           - os: ubuntu-24.04
-            php: 8.2
+            php: 8.3
             extensions:
             db: mysqli
           # PostgreSQL builds always run with the highest PHP supported version.
@@ -71,27 +79,20 @@ jobs:
             db: pgsql
 
     steps:
-      - name: Setting up DB mysql
+      - name: Run MySQL Server
         if: ${{ matrix.db == 'mysqli' }}
-        uses: moodlehq/mysql-action@v1
-        with:
-          collation server: utf8mb4_bin
-          mysql version: 8.4
-          mysql database: test
-          mysql user: test
-          mysql password: test
-          use tmpfs: true
-          tmpfs size: '1024M'
-          extra conf: --skip-log-bin
-
-      - name: Setting up DB pgsql
-        if: ${{ matrix.db == 'pgsql' }}
-        uses: m4nu56/postgresql-action@v1
-        with:
-          postgresql version: 15
-          postgresql db: test
-          postgresql user: test
-          postgresql password: test
+        run: |
+          docker run --rm \
+            -e MYSQL_DATABASE=test \
+            -e MYSQL_USER=test \
+            -e MYSQL_PASSWORD=test \
+            -e MYSQL_ROOT_PASSWORD=test \
+            -p 3306:3306 \
+            -d \
+            --tmpfs /var/lib/mysql:rw,noexec,nosuid,size=1024M \
+            mysql:8.4 \
+              --skip-log-bin \
+              --collation-server=utf8mb4_bin
 
       - name: Configuring git vars
         uses: rlespinasse/github-slug-action@v4

.github/workflows/web-installer-test.yml

@@ -10,7 +10,7 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-latest]
-        php: [8.2, 8.4]
+        php: [8.3, 8.4]
     steps:
       - name: Construct repository URL
         run: echo "REPOSITORY_URL=${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}" >> $GITHUB_ENV

.github/workflows/windows.yml

@@ -59,7 +59,7 @@ jobs:
             db: pgsql
             extensions: exif, fileinfo, gd, intl, pgsql, mysql, redis, soap, sodium, zip
           - os: windows-latest
-            php: 8.2
+            php: 8.3
             db: pgsql
             extensions: exif, fileinfo, gd, intl, pgsql, mysql, redis, soap, sodium, zip
 

.gitignore

@@ -60,3 +60,4 @@ phpcs.xml
 jsconfig.json
 UPGRADING-CURRENT.md
 .phpunit.cache
+tsconfig.aliases.json

.grunt/components.js

@@ -184,11 +184,13 @@ const getThirdPartyLibsList = relativeTo => {
     const fs = require('fs');
     const path = require('path');
 
-    return fetchComponentData().pathList
+    const pathList = fetchComponentData().pathList
         .map(componentPath => path.relative(relativeTo, componentPath) + '/thirdpartylibs.xml')
         .map(componentPath => componentPath.replace(/\\/g, '/'))
-        .filter(path => fs.existsSync(path))
-        .sort();
+        .filter(path => fs.existsSync(path));
+
+    pathList.push('lib/thirdpartylibs.xml');
+    return pathList.sort();
 };
 
 /**
@@ -385,6 +387,23 @@ const getThirdPartyLibsUpgradable = async() => {
     return (await Promise.all(upgradableLibraries)).filter((library) => !!library);
 };
 
+/**
+ * Get the list of paths to build react sources.
+ *
+ * @param {string} relativeTo
+ * @returns {string[]}
+ */
+const getReactTsSrcGlobList = (relativeTo = '') => {
+    const globList = [];
+    fetchComponentData().pathList.forEach(componentPath => {
+        const relativeComponentPath = componentPath.replace(relativeTo, '');
+        globList.push(`${relativeComponentPath}/js/esm/src/**/*.ts`);
+        globList.push(`${relativeComponentPath}/js/esm/src/**/*.tsx`);
+    });
+
+    return globList.map(componentPath => componentPath.replace(/\\/g, '/'));
+};
+
 /**
  * Get the list of thirdparty libraries.
  *
@@ -432,4 +451,5 @@ module.exports = {
     getThirdPartyLibsList,
     getThirdPartyPaths,
     getThirdPartyLibsUpgradable,
+    getReactTsSrcGlobList,
 };

.grunt/jsdoc/jsdoc.conf.js

@@ -89,7 +89,7 @@ const templates = {
 
 module.exports = {
     opts: {
-        destination: "./jsdoc/",
+        destination: "./public/jsdoc/",
         template: "node_modules/docdash",
     },
     plugins,

.grunt/notes/src/create.mjs

@@ -18,7 +18,7 @@ import inquirer from 'inquirer';
 import chalk from 'chalk';
 
 import { createNote } from './note.mjs';
-import { getInitialValues } from './helpers.mjs';
+import { getInitialValues, getIssueNumberFromBranchName } from './helpers.mjs';
 import * as Prompts from './prompts.mjs';
 import logger from './logger.mjs';
 
@@ -29,7 +29,7 @@ export default async (options) => {
     // Fetch information.
     const messages = [];
     const { issueNumber } = await inquirer.prompt([
-        Prompts.getIssuePrompt(),
+        Prompts.getIssuePrompt(getIssueNumberFromBranchName()),
     ], initialValues);
 
     let selection = {};

.grunt/notes/src/helpers.mjs

@@ -14,6 +14,7 @@
 // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
 
 import chalk from 'chalk';
+import branchName from 'current-git-branch';
 import { isStandardComponent, isCommunityComponent, rewritePlugintypeAsSubsystem } from './components.mjs';
 import { isValidNoteName } from './noteTypes.mjs';
 import logger from './logger.mjs';
@@ -59,6 +60,19 @@ export const formatIssueNumber = (input) => {
     return input;
 };
 
+/**
+ * Get the issue number, based off current git branch name
+ *
+ * @returns {string|null}
+ */
+export const getIssueNumberFromBranchName = () => {
+    const issueNumber = String(branchName()).match(/^[a-zA-Z]*-\d+/);
+    if (issueNumber) {
+        return formatIssueNumber(issueNumber[0]);
+    }
+    return null;
+};
+
 /**
  * Validate a component.
  *

.grunt/tasks/eslint.js

@@ -41,6 +41,14 @@ module.exports = grunt => {
 
             // Check YUI module source files.
             yui: {src: files ? files : grunt.moodleEnv.yuiSrc},
+
+            // Check React source files.
+            'react': {
+                options: {
+                    fix: true,
+                },
+                src: files ? files : grunt.moodleEnv.reactSrc,
+            },
         },
     });
 

.grunt/tasks/ignorefiles.js

@@ -58,6 +58,31 @@ module.exports = grunt => {
         }) + "\n");
     };
 
+    /**
+     * Extracts ignore entries from a local ignore file.
+     *
+     * @param {string} componentPath the file path to the component, relative to the code base directory
+     * @param {string} ignoreFilePath the path to the ignore file
+     * @return {array} array of ignore paths to be included in the global ignore files
+     */
+    const getEntriesFromLocalIgnoreFile = (componentPath, ignoreFilePath) => {
+        const ignorePaths = [];
+        if (grunt.file.exists(ignoreFilePath)) {
+            const ignoreFile = grunt.file.read(ignoreFilePath);
+            const entries = ignoreFile.split('\n');
+            entries.forEach(entry => {
+                entry = entry.trim();
+                if (entry.length > 0 && !entry.startsWith('#') && !entry.startsWith('!')) {
+                    while (entry.startsWith('/')) {
+                        entry = entry.substring(1);
+                    }
+                    ignorePaths.push(componentPath + '/' + entry);
+                }
+            });
+        }
+        return ignorePaths;
+    };
+
     /**
      * Generate ignore files (utilising thirdpartylibs.xml data)
      */
@@ -67,6 +92,20 @@ module.exports = grunt => {
 
         // An array of paths to third party directories.
         const thirdPartyPaths = ComponentList.getThirdPartyPaths();
+        const localStylelintIgnorePaths = [];
+        const localEslintIgnorePaths = [];
+        ComponentList.getComponentPaths(process.cwd() + '/').forEach(componentPath => {
+            const localEslintIgnorePath = process.cwd() + '/' + componentPath + '/.eslintignore';
+            const localEslintIgnoreEntries = getEntriesFromLocalIgnoreFile(componentPath, localEslintIgnorePath);
+            if (localEslintIgnoreEntries.length > 0) {
+                localEslintIgnorePaths.push(...localEslintIgnoreEntries);
+            }
+            const localStylelintIgnorePath = process.cwd() + '/' + componentPath + '/.stylelintignore';
+            const localStylelintIgnoreEntries = getEntriesFromLocalIgnoreFile(componentPath, localStylelintIgnorePath);
+            if (localStylelintIgnoreEntries.length > 0) {
+                localStylelintIgnorePaths.push(...localStylelintIgnoreEntries);
+            }
+        });
 
         // Generate .eslintignore.
         const eslintIgnores = [
@@ -77,7 +116,7 @@ module.exports = grunt => {
             // Ignore all yui/src meta directories and build directories.
             '*/**/yui/src/*/meta/',
             '*/**/build/',
-        ].concat(thirdPartyPaths);
+        ].concat(thirdPartyPaths).concat(localEslintIgnorePaths);
         grunt.file.write('.eslintignore', eslintIgnores.join('\n') + '\n');
 
         // Generate .stylelintignore.
@@ -88,7 +127,7 @@ module.exports = grunt => {
             'public/theme/classic/style/moodle.css',
             'jsdoc/styles/*.css',
             'public/admin/tool/componentlibrary/hugo/dist/css/docs.css',
-        ].concat(thirdPartyPaths);
+        ].concat(thirdPartyPaths).concat(localStylelintIgnorePaths);
         grunt.file.write('.stylelintignore', stylelintIgnores.join('\n') + '\n');
 
         phpcsIgnore(thirdPartyPaths);

.grunt/tasks/javascript.js

@@ -37,6 +37,9 @@ const babelRename = function(destPath, srcPath) {
 };
 
 module.exports = grunt => {
+    // Load the React build tasks.
+    require('./react')(grunt);
+
     // Load the Ignorefiles tasks.
     require('./ignorefiles')(grunt);
 
@@ -57,7 +60,7 @@ module.exports = grunt => {
     // Register JS tasks.
     grunt.registerTask('yui', ['eslint:yui', 'shifter']);
     grunt.registerTask('amd', ['ignorefiles', 'eslint:amd', 'rollup']);
-    grunt.registerTask('js', ['amd', 'yui']);
+    grunt.registerTask('js', ['amd', 'yui', 'react']);
 
     // Register NPM tasks.
     grunt.loadNpmTasks('grunt-contrib-watch');

.grunt/tasks/jsconfig.js

@@ -14,6 +14,7 @@
 // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
 /* jshint node: true, browser: false */
 /* eslint-env node */
+// @ts-nocheck
 
 /**
  * @copyright  2022 Andrew Lyons <andrew@nicols.co.uk>
@@ -34,20 +35,49 @@ const configuration = {
     include: [],
 };
 
+/**
+ * Generate jsconfig.json with AMD module path aliases for all components.
+ *
+ * @param {object} grunt The Grunt instance.
+ */
+const generateJsconfig = (grunt) => {
+    const jsconfigData = Object.assign({}, configuration);
+    const path = require('path');
+
+    const {fetchComponentData} = require(path.join(process.cwd(), '.grunt', 'components.js'));
+
+    const componentData = fetchComponentData().components;
+    for (const [thisPath, component] of Object.entries(componentData)) {
+        jsconfigData.compilerOptions.paths[`${component}/*`] = [`${thisPath}/amd/src/*`];
+        jsconfigData.include.push(`${thisPath}/amd/src/**/*`);
+    }
+
+    grunt.file.write('jsconfig.json', JSON.stringify(jsconfigData, null, "  ") + "\n");
+    grunt.log.write('✓ Generating jsconfig.json\n');
+};
+
+/**
+ * Generate tsconfig.aliases.json with TypeScript path aliases for all ESM components.
+ *
+ * @returns {Promise<void>}
+ */
+const generateTsAliases = async() => {
+    const {generateAliases} = await import('../../.esbuild/generate-aliases.mjs');
+    generateAliases();
+};
+
 module.exports = (grunt) => {
-    const handler = () => {
-        const jsconfigData = Object.assign({}, configuration);
+    const handler = async function() {
+        const done = this.async();
 
-        const path = require('path');
-        const {fetchComponentData} = require(path.join(process.cwd(), '.grunt', 'components.js'));
-
-        const componentData = fetchComponentData().components;
-        for (const [thisPath, component] of Object.entries(componentData)) {
-            jsconfigData.compilerOptions.paths[`${component}/*`] = [`public/${thisPath}/amd/src/*`];
-            jsconfigData.include.push(`public/${thisPath}/amd/src/**/*`);
+        try {
+            generateJsconfig(grunt);
+            await generateTsAliases();
+            done();
+        } catch (err) {
+            grunt.log.error(err.message);
+            done(false);
         }
-
-        grunt.file.write('jsconfig.json', JSON.stringify(jsconfigData, null, "  ") + "\n");
     };
     grunt.registerTask('jsconfig', 'Generate a jsconfig configuration compatible with the LSP', handler);
 };

.grunt/tasks/react.js

@@ -0,0 +1,111 @@
+// This file is part of Moodle - http://moodle.org/
+//
+// Moodle is free software: you can redistribute it and/or modify
+// it under the terms of the GNU General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// Moodle is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU General Public License for more details.
+//
+// You should have received a copy of the GNU General Public License
+// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
+/* jshint node: true, browser: false */
+/* eslint-env node */
+// @ts-nocheck
+
+/**
+ * Grunt tasks for building React components.
+ *
+ * @copyright  Meirza <meirza.arson@moodle.com>
+ * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
+ */
+
+module.exports = grunt => {
+    /**
+     * Register react task — build or watch React components.
+     *
+     * Modes:
+     *   grunt react          — production build
+     *   grunt react:dev      — development build (sourcemaps, no minification)
+     *   grunt react:watch    — esbuild native watch (dev mode, incremental context)
+     *
+     * Note: react:watch uses esbuild's own context.watch() and is intentionally
+     * separate from grunt-contrib-watch. This keeps esbuild's incremental build
+     * graph alive between rebuilds rather than restarting from scratch on each change.
+     */
+    grunt.registerTask('react', 'Build all React components', function(mode) {
+        const done = this.async();
+        const isWatch = mode === 'watch';
+        const isDev = isWatch || mode === 'dev';
+
+        if (isWatch) {
+            const path = require('path');
+            const {spawn} = require('child_process');
+
+            // Run ESLint on the rebuilt source files in check-only mode (no --fix)
+            // to avoid writing changes that would re-trigger esbuild.
+            const eslintBin = path.join(grunt.moodleEnv.gruntFilePath, 'node_modules', '.bin', 'eslint');
+            const onRebuild = (srcFiles) => {
+                if (srcFiles.length === 0) {
+                    return;
+                }
+                const absSrcFiles = srcFiles.map(f => path.join(grunt.moodleEnv.gruntFilePath, f));
+                spawn(eslintBin, absSrcFiles, {stdio: 'inherit'})
+                    .on('error', err => grunt.log.error(`ESLint: ${err.message}`));
+            };
+
+            (async() => {
+                try {
+                    const {watchComponents} = await import('../../.esbuild/plugin/plugincomponents.mjs');
+                    const { generateAliases } = await import('../../.esbuild/generate-aliases.mjs');
+                    const { buildPluginComponents } = await import('../../.esbuild/plugin/plugincomponents.mjs');
+
+                    generateAliases();
+                    await buildPluginComponents(isDev);
+
+                    const ctx = await watchComponents(true, onRebuild);
+
+                    if (!ctx) {
+                        grunt.log.warn('No React source files found. Nothing to watch.');
+                        done();
+                        return;
+                    }
+
+                    grunt.log.ok('esbuild is watching for React changes. Press Ctrl+C to stop.');
+
+                    // Keep the process alive until the user interrupts. done() is intentionally
+                    // not called here — grunt's async mechanism holds the process open.
+                    process.on('SIGINT', async() => {
+                        await ctx.dispose();
+                        done();
+                    });
+                } catch (err) {
+                    grunt.log.error(err.message);
+                    done(false);
+                }
+            })();
+
+            return;
+        }
+
+        grunt.log.writeln(`Building React components in ${isDev ? 'DEVELOPMENT' : 'PRODUCTION'} mode...`);
+
+        (async() => {
+            try {
+                const {generateAliases} = await import('../../.esbuild/generate-aliases.mjs');
+                const {buildPluginComponents} = await import('../../.esbuild/plugin/plugincomponents.mjs');
+
+                generateAliases();
+                await buildPluginComponents(isDev);
+                done();
+            } catch (err) {
+                grunt.log.error(err.message);
+                done(false);
+            }
+        })();
+    });
+
+};

.grunt/tasks/startup.js

@@ -33,6 +33,9 @@ module.exports = grunt => {
         // Are we in an AMD directory?
         } else if (grunt.moodleEnv.inAMD) {
             grunt.task.run('amd');
+        // Are we in an ESM source directory?
+        } else if (grunt.moodleEnv.inEsm) {
+            grunt.task.run('react');
         } else {
             // Run all of the requested startup tasks.
             grunt.moodleEnv.startupTasks.forEach(taskName => grunt.task.run(taskName));

.grunt/tasks/watch.js

@@ -49,6 +49,10 @@ module.exports = grunt => {
 
                     // Spawn the task in a child process so that it doesn't kill this one
                     // if it failed.
+                    var args = [task, filesOption];
+                    if (grunt.option('force')) {
+                        args.push('--force');
+                    }
                     grunt.util.spawn(
                         {
                             // Spawn with the grunt bin.
@@ -58,7 +62,7 @@ module.exports = grunt => {
                                 cwd: grunt.moodleEnv.fullRunDir,
                                 stdio: 'inherit'
                             },
-                            args: [task, filesOption]
+                            args: args
                         },
                         function(err, res, code) {
                             if (code !== 0) {

.upgradenotes/MDL-51152-2026010706495176.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-51152
+notes:
+  enrol_manual:
+    - message: >-
+        The unused parameter 'roleid' has been removed from the external
+        function `unenrol_users()`
+      type: removed

.upgradenotes/MDL-71368-2025111107363807.yml

@@ -0,0 +1,22 @@
+issueNumber: MDL-71368
+notes:
+  core:
+    - message: >
+        The `arg_separator.output` has been changed from a default of `amp;` to
+        a default of `&` in line with PHP defaults.
+
+
+        If you were previously relying on the legacy default when using
+
+        `http_build_query()` then you should _actively_ specify the value as the
+        third
+
+        parameter, for example:
+
+
+        ```
+
+        http_build_query($formdata, '', '&');
+
+        ```
+      type: changed

.upgradenotes/MDL-73602-2025112108434178.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-73602
+notes:
+  core:
+    - message: >-
+        Removed `qtype_random` from core.
+        `core\component::is_valid_plugin_name` has an additional check to ensure no-one can create a new plugin called qtype_random,
+        as this would conflict with the support for restoring old backups.
+      type: removed

.upgradenotes/MDL-75067-2026030210543707.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-75067
+notes:
+  tool_behat:
+    - message: >-
+        The `behat_session_trait::ensure_element_[does_not_]exists(...)` methods
+        now accept optional `$container` parameter to define the parent node to
+        look within
+      type: improved

.upgradenotes/MDL-77894-2025093010013740.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-77894
+notes:
+  core:
+    - message: Appending an exclamation mark to template names ignores theme overrides
+      type: improved

.upgradenotes/MDL-78325-2025110608544631.yml

@@ -0,0 +1,10 @@
+issueNumber: MDL-78325
+notes:
+  core_grades:
+    - message: >-
+        In Moodle 4.2, the legacy Gradebook base widget from 4.1 has been removed and
+        replaced with a simpler class-based system due to a breaking change and
+        excessive complexity in the old pattern. The files `core/grades/basewidget.js` and
+        templates in `grade/templates/searchwidget/` have been deleted,
+        with minimal expected third-party impact.
+      type: removed

.upgradenotes/MDL-79182-2025112106564582.yml

@@ -0,0 +1,13 @@
+issueNumber: MDL-79182
+notes:
+  core:
+    - message: >
+        The following AMD modules have been removed following the final
+        deprecation process. It is no longer possible or necessary to manually
+        register modal types. See MDL-78324 for further details.
+
+
+        - `core/modal_registry`
+
+        - `core/modal_factory`
+      type: removed

.upgradenotes/MDL-79574-2025123010115375.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-79574
+notes:
+  core:
+    - message: >-
+        The `\core\persistent::get_records(...)` class method now returns
+        instances keyed by record ID
+      type: changed

.upgradenotes/MDL-81514-2024061009100437.yml

@@ -0,0 +1,13 @@
+issueNumber: MDL-81514
+notes:
+  core_group:
+    - message: >
+        `groups_print_activity_menu()` and `groups_get_activity_group()` now
+        include an additional `$participationonly` parameter, which is true by
+        default. This can be set false when we want the user to be able to
+        select a non-participation group within an activity, for example if a
+        teacher wants to filter assignment submissions by non-participation
+        groups. It should never be used when the menu is displayed to students,
+        as this may allow them to participate using non-participation groups.
+        Non-participation groups are labeled as such.
+      type: improved

.upgradenotes/MDL-81608-2026031009535369.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-81608
+notes:
+  mod_quiz:
+    - message: >-
+        The language strings `addpagebreak` and `removepagebreak` have been
+        deprecated and should no longer be used. These have been replaced by
+        the `addpagebreakafter` and `removepagebreakafter` language strings.
+      type: deprecated

.upgradenotes/MDL-81961-2026020605441060.yml

@@ -0,0 +1,12 @@
+issueNumber: MDL-81961
+notes:
+  core_question:
+    - message: |
+        core_question:
+            - message: |
+                Final deprecation of `moodle-question-chooser` YUI module.
+              type: removed
+            - message: |
+                Final deprecation of `core_question/qbank_chooser` template.
+              type: removed
+      type: removed

.upgradenotes/MDL-81962-1715959893322.yml

@@ -0,0 +1,13 @@
+issueNumber: MDL-81962
+notes:
+  core:
+    - message: The `moodle-core-notification-confirm` YUI module has been removed after an extensive deprecation period. Please use the AMD `core/modal` module as a replacement.
+      type: removed
+    - message: |
+        The following feaetures of the `moodle-core-notification` YUI module have been removed after an extensive deprecation process.:
+
+         - method: `keyDelegation`
+         - property: `lightbox`
+
+        There is no direct replacement for these features, but they were not widely used and their removal should not cause significant issues. If you were using these features, you will need to implement your own solutions for key delegation and lightbox functionality.
+      type: removed

.upgradenotes/MDL-82284-2024062501562851.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-82284
+notes:
+  core:
+    - message: >-
+        Legacy constructors have been removed. These relate to PHP 4 and
+        earlier.
+      type: removed

.upgradenotes/MDL-83902-2025022407531958.yml

@@ -0,0 +1,15 @@
+issueNumber: MDL-83902
+notes:
+  core_badges:
+    - message: >-
+        The following classes and functions are now also available in the following new
+        locations. They will continue to work in their old locations:
+        
+        | Old classname/function | New classname/function |
+        | --- | --- |
+        | `\badge_award_selector_base` | `\core_badges\award_selector_base` |
+        | `\badge_potential_users_selector` | `\core_badges\potential_award_selector` |
+        | `\badge_existing_users_selector` | `\core_badges\existing_award_selector` |
+        | `process_manual_award()` | `\core_badges\award_manager::process_manual_award()` |
+        | `process_manual_revoke()` | `\core_badges\award_manager::process_manual_revoke()` |
+      type: improved

.upgradenotes/MDL-84082-2025110323511544.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-84082
+notes:
+  core_reportbuilder:
+    - message: >-
+        The text filter "Contains" and "Not contains" operators now support `*`
+        and `?` wildcard characters for better text content filtering
+      type: improved

.upgradenotes/MDL-84960-2025091612160080.yml

@@ -0,0 +1,30 @@
+issueNumber: MDL-84960
+notes:
+  core:
+    - message: >-
+        Several core web services now include a new initials field in user data
+        structures. This change is backward-compatible and only adds an optional
+        field; no existing fields or field semantics have been changed.
+        Client applications should ensure they can handle the additional initials
+        field in web service responses, but clients that ignore unknown fields can
+        continue working without changes. The affected web services are:
+        - core_enrol_get_enrolled_users
+        - core_enrol_get_enrolled_users_with_capability
+        - core_enrol_get_potential_users
+        - core_enrol_search_users
+        - core_user_get_users_by_field
+        - core_user_get_users
+        - core_user_get_course_user_profiles
+        - core_grades_get_enrolled_users_for_selector
+        - core_grades_get_gradable_users
+        - gradereport_grader_get_users_in_report
+        - core_message_get_contact_requests
+        - core_message_get_conversation_members
+        - core_message_message_search_users
+        - core_message_get_user_contacts
+        - core_message_get_member_info
+        - core_message_get_conversation_messages
+        - mod_assign_list_participants
+        - mod_assign_get_participant
+        - mod_forum_get_forum_discussions
+      type: improved

.upgradenotes/MDL-85233-2025122207154958.yml

@@ -0,0 +1,9 @@
+issueNumber: MDL-85233
+notes:
+  core_filters:
+    - message: >-
+        MimeTeX support has been removed from both `filter_tex` and
+        `filter_algebra`. These filters now depend on LaTeX tools (`latex`,
+        `dvips`, and `convert`/`dvisvgm`), and as a result, the `pathmimetex`
+        setting has been removed.
+      type: removed

.upgradenotes/MDL-85322-2026012001565471.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-85322
+notes:
+  block_html:
+    - message: >-
+        Treat Dashboard (pagetype 'my-index') as trusted in web services so
+        get_content_for_external preserves embedded HTML (e.g. iframes) on user
+        Dashboard.
+      type: changed

.upgradenotes/MDL-85336-2025112802512668.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-85336
+notes:
+  core:
+    - message: >-
+        Redis connection timeout settings for cachestores and sessions have been
+        split into connection timeout and read timeout to allow for finer
+        control. These settings now also accept floats.
+      type: improved

.upgradenotes/MDL-85405-2025061114040750.yml

@@ -0,0 +1,9 @@
+issueNumber: MDL-85405
+notes:
+  core_course:
+    - message: >-
+        The external function `core_course_get_course_contents` now includes the
+        `candisplay` property for each returned module. If this is false, the
+        module should not be displayed on the course page (for example, for
+        question banks).
+      type: improved

.upgradenotes/MDL-85621-2025061308153915.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-85621
+notes:
+  core_badges:
+    - message: The create_issued_badge generator now returns the issued badge object.
+      type: changed

.upgradenotes/MDL-85621-2025070801092834.yml

@@ -0,0 +1,11 @@
+issueNumber: MDL-85621
+notes:
+  core_badges:
+    - message: >-
+        The class core_badges_assertion has been deprecated and replaced by
+        \core_badges\achievement_credential.
+        The method badges_get_default_issuer() has also been deprecated because
+        it is no longer needed.
+        The file badges/endorsement.php has been removed because it stopped being used
+        when MDL-84323 was integrated.
+      type: deprecated

.upgradenotes/MDL-85975-2025092314370040.yml

@@ -0,0 +1,17 @@
+issueNumber: MDL-85975
+notes:
+  core:
+    - message: >
+        `restore_qtype_plugin::unset_excluded_fields` now returns the modified
+        questiondata structure,
+
+        in order to support structures that contain arrays.
+
+        If your qtype plugin overrides
+        `restore_qtype_plugin::remove_excluded_question_data` without
+
+        calling the parent method, you may need to modify your overridden method
+        to use the returned
+
+        value.
+      type: fixed

.upgradenotes/MDL-86332-2025081922154697.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-86332
+notes:
+  core_completion:
+    - message: >-
+        The `completion_info::clear_criteria` method takes an optional
+        `$removetypecriteria` to determine whether to remove course type
+        criteria from other courses that refer to the current course
+      type: changed

.upgradenotes/MDL-86493-2025110605040447.yml

@@ -0,0 +1,26 @@
+issueNumber: MDL-86493
+notes:
+  mod_quiz:
+    - message: >-
+        The quiz overrides cache implementation has been replaced with a faster alternative with a different API.
+        This should be a transparent change but any direct references will still need to be updated.
+      type: deprecated
+    - message: >
+        `mod_quiz_cm_info_dynamic()` now uses the new `quiz_overrides` cache via `override_manager`, performing a single cache fetch per quiz/user.
+        This significantly reduces cache calls on course pages with many quizzes and groups.
+
+        The new `mod_quiz:quiz_overrides` cache is keyed by `quizid_userid` using datasource `\mod_quiz\cache\quiz_overrides_cache`.
+        This cache returns all applicable overrides for a user in a quiz (the user override, if any, plus all group overrides for groups they belong to in the quiz's course).
+        
+        New class `\mod_quiz\local\quiz_overrides_cache_manager` to interact with the cache:
+          - `get_overrides(int $quizid, int $userid): array`
+          - `purge_for_user(int $quizid, int $userid): void`
+          - `purge_for_users(int $quizid, array $userids): void`
+          - `purge_for_group(int $quizid, int $groupid): void`
+          - `purge_for_group_members(int $groupid, array $userids): void`
+        
+        Hook callbacks in `db/hooks.php` to keep the cache in sync with group
+        membership changes:
+          - `\core_group\hook\after_group_membership_added`
+          - `\core_group\hook\after_group_membership_removed`
+      type: improved

.upgradenotes/MDL-86524-2025120211115999.yml

@@ -0,0 +1,12 @@
+issueNumber: MDL-86524
+notes:
+  core_question:
+    - message: >-
+        During restore of a question_set_reference, mapping of IDs in the
+        filtercondition is now delegated to qbank plugins.
+        If your qbank plugin defines a filter condition that uses database
+        IDs, add an override of `restore_filtercondition()` to the `condition`
+        class, which checks the condition's data and replaces the IDs with
+        mapped values if required. See 
+        `qbank_managecategories\category_condition` for an example.
+      type: improved

.upgradenotes/MDL-86607-2025091110293140.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-86607
+notes:
+  mod_feedback:
+    - message: >-
+        The method `feedback_init_feedback_session()` has been deprecated, along
+        with all other direct access to `$SESSION` from the module
+      type: deprecated

.upgradenotes/MDL-86660-2025111708215080.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-86660
+notes:
+  core_courseformat:
+    - message: >-
+        The `$cm` attribute in `activityoverviewbase` has been updated to public
+        visibility, allowing direct access to the course module instance
+      type: changed

.upgradenotes/MDL-86660-2025111708245313.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-86660
+notes:
+  core_courseformat:
+    - message: >-
+        A new `available` attribute has been added to `activityname_exporter`
+        class. It allows the external API to return the activity's availability
+        status relative to the current user.
+      type: changed

.upgradenotes/MDL-86660-2025111708292708.yml

@@ -0,0 +1,9 @@
+issueNumber: MDL-86660
+notes:
+  core_courseformat:
+    - message: >-
+        Two new public static methods have been added to the `overviewtable`
+        class:
+        - `is_cm_displayable`: Determines if a course module should be listed in the overview table.
+        - `is_cm_available`: Checks if a course module is accessible to the user (and should therefore be rendered as a link).
+      type: changed

.upgradenotes/MDL-86678-2025091208515445.yml

@@ -0,0 +1,19 @@
+issueNumber: MDL-86678
+notes:
+  core_reportbuilder:
+    - message: >-
+        The base entity class now implements a default `initialise` method, that
+        will automatically call each of the following methods to load entity
+        report data:
+
+
+        * `get_available_columns()`
+
+        * `get_available_filters()`
+
+        * `get_available_conditions()`
+
+
+        This change allows for a lot of boilerplate to be removed from report
+        entity classes
+      type: improved

.upgradenotes/MDL-86699-2025091811071315.yml

@@ -0,0 +1,12 @@
+issueNumber: MDL-86699
+notes:
+  core_reportbuilder:
+    - message: >-
+        There are two new entities intended for reports specific to course
+        module data, in order to provide a baseline in terms of module reporting
+        and API usage:
+
+
+        *
+        `core_course\reportbuilder\local\entities\{course_module,course_module_base}`
+      type: improved

.upgradenotes/MDL-86699-2025112111183228.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-86699
+notes:
+  mod_forum:
+    - message: >-
+        The forum report entity `->get_context_joins()` method is deprecated,
+        replaced with `->get_course_modules_joins(...)`
+      type: deprecated

.upgradenotes/MDL-86798-2025111411591681.yml

@@ -0,0 +1,17 @@
+issueNumber: MDL-86798
+notes:
+  core_question:
+    - message: >
+        In order to prevent re-use of question version numbers after a version
+        is deleted, the `nextversion` column was added to
+        `question_bank_entries`. This serves as a counter incremented each time
+        a version is created.
+
+        Do not query this field directly. Instead use
+        `core_question\versions::get_next_version()` to read the value, which
+        will initialise it based on the existing versions if it is not set yet.
+        By default, it will increment the version number automatically, unless
+        you pass `increment: false`. Because of this, it is advisable to call
+        it inside a transaction, that is only committed after the version number
+        is used in a `question_versions` record.
+      type: fixed

.upgradenotes/MDL-86798-2025111412005118.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-86798
+notes:
+  core_question:
+    - message: >-
+        `get_next_version()` from questionlib.php is now deprecated. Use
+        `\core_question\versions::get_next_version()` instead.
+      type: deprecated

.upgradenotes/MDL-86832-2025122901461409.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-86832
+notes:
+  core_block:
+    - message: Removed block_activity_modules from Moodle 5.2.
+      type: removed

.upgradenotes/MDL-86839-2026031306053508.yml

@@ -0,0 +1,10 @@
+issueNumber: MDL-86839
+notes:
+  core:
+    - message: >
+        "grunt watch" now accepts a force flag. Run "grunt watch -f" or "grunt
+        watch --force" to prevent grunt from cancelling builds when errors
+        occur. This is especially useful during development, because js build
+        files will be built even if, for example, jslint errors are still
+        present in the files.
+      type: improved

.upgradenotes/MDL-86846-2025111103300407.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-86846
+notes:
+  core:
+    - message: >-
+        The `core/drag_handle` template has been modified to use a native HTML
+        button for a more accessible experience and a consistent look with other
+        buttons on the page.
+      type: changed

.upgradenotes/MDL-86854-2025101408204581.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-86854
+notes:
+  core_courseformat:
+    - message: >-
+        Add core_courseformat\cmactions::move_before that will allow to move a coursemodule to a position before another coursemodule.
+        Add core_courseformat\cmactions::move_end_section that will allow to move a coursemodule the end of a section.
+      type: improved

.upgradenotes/MDL-86854-2025101706145612.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-86854
+notes:
+  core_course:
+    - message: >-
+        Deprecates moveto_module (core_course) in favor of
+        cmactions::move_before or cmactions::move_end_section
+        (core_courseformat\local\cmactions).
+      type: deprecated

.upgradenotes/MDL-86855-2025102403210496.yml

@@ -0,0 +1,11 @@
+issueNumber: MDL-86855
+notes:
+  qbank_columnsortorder:
+    - message: >-
+        The Behat selector `column move handle` for the `qbank_columnsortorder` plugin has been removed.
+
+        When interacting with the column's move handle, please use the move handle's accessible name and type.
+
+        For example:
+        - `And I drag "Move Created by" "button" and I drop it in "Move T" "button"`
+      type: removed

.upgradenotes/MDL-86856-2025101408325140.yml

@@ -0,0 +1,9 @@
+issueNumber: MDL-86856
+notes:
+  core_course:
+    - message: >-
+        The following methods have been deprecated and should no longer be used:
+        - `course_delete_module`
+        - `course_module_flag_for_async_deletion`
+        Please consider using the equivalent methods, delete and delete_async, in `core_courseformat\local\cmactions` instead.
+      type: deprecated

.upgradenotes/MDL-86856-2025101711015767.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-86856
+notes:
+  core_courseformat:
+    - message: Add delete method to the core_courseformat\cmactions
+      type: improved

.upgradenotes/MDL-86857-2025101308384986.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-86857
+notes:
+  core_courseformat:
+    - message: >-
+        Add set_groupmode method to the core_courseformat\cmactions (course
+        format actions)
+      type: improved

.upgradenotes/MDL-86857-2025101308400893.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-86857
+notes:
+  core_course:
+    - message: >-
+        Deprecates set_coursemodule_groupmode in favor of
+        core_courseformat\cmactions::set_groupmode
+      type: deprecated

.upgradenotes/MDL-86858-2025111014594601.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-86858
+notes:
+  core_courseformat:
+    - message: >-
+        Create a new core_courseformat\cmactions::duplicate aiming to replace
+        the course/lib.php version
+      type: improved

.upgradenotes/MDL-86858-2026012109245388.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-86858
+notes:
+  core_course:
+    - message: >-
+        The duplicate_module has been deprecated in favor of
+        core_courseformat\cmactions::duplicate
+      type: deprecated

.upgradenotes/MDL-86860-2025111907221471.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-86860
+notes:
+  core_courseformat:
+    - message: >-
+        Added `set_marker` and `remove_all_markers` methods to the
+        `core_courseformat\sectionactions` class.
+      type: improved

.upgradenotes/MDL-86860-2025111907271296.yml

@@ -0,0 +1,9 @@
+issueNumber: MDL-86860
+notes:
+  core_course:
+    - message: >-
+        The `course_set_marker` function has been deprecated and should no
+        longer be used.
+        Please consider using the equivalent methods, `set_marker` or `remove_all_markers`,
+        in `core_courseformat\local\sectionactions` instead.
+      type: deprecated

.upgradenotes/MDL-86861-2025111705213815.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-86861
+notes:
+  core_courseformat:
+    - message: >-
+        Added the `set_visibility` method to the `core_courseformat\sectionactions` class.
+        To optimize performance, this method does not return the list of affected resources,
+        avoiding unnecessary database queries since the return value is unused.
+      type: improved

.upgradenotes/MDL-86861-2025111806153966.yml

@@ -0,0 +1,9 @@
+issueNumber: MDL-86861
+notes:
+  core_courseformat:
+    - message: >-
+        The `set_section_visible` function has been deprecated and should no
+        longer be used.
+        Please consider using the equivalent method, `set_visibility`, in
+        `core_courseformat\local\sectionactions` instead.
+      type: deprecated

.upgradenotes/MDL-86862-2025111414153226.yml

@@ -0,0 +1,6 @@
+issueNumber: MDL-86862
+notes:
+  core_courseformat:
+    - message: >-
+        Add a new core_courseformat\sectionactions::move_after to replace the current move_section_to logic.
+      type: improved

.upgradenotes/MDL-86862-2025111414171623.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-86862
+notes:
+  core_courseformat:
+    - message: Deprecates the move_section_to logic
+      type: deprecated

.upgradenotes/MDL-86862-2025112710562067.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-86862
+notes:
+  core_courseformat:
+    - message: Deprecates and remove all usages of reorder_sections that is used only internally.
+      type: deprecated

.upgradenotes/MDL-86862-2025112811453460.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-86862
+notes:
+  core_courseformat:
+    - message: Add sectionactions::move_at to move a section at a given position.
+      type: improved

.upgradenotes/MDL-86862-2025120809374181.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-86862
+notes:
+  core_course:
+    - message: Add a new invalidation event for course action state so we can purge the courseactionsinstances cache when needed.
+      type: improved

.upgradenotes/MDL-86916-2025102109472287.yml

@@ -0,0 +1,9 @@
+issueNumber: MDL-86916
+notes:
+  mod_quiz:
+    - message: >-
+        The WebServices mod_quiz_get_user_best_grade and
+        mod_quiz_get_user_quiz_attempts have been updated to return overall feedback
+        even when quiz marks are hidden in the review options. This change
+        aligns the WebService behaviour with Moodle LMS display logic.
+      type: changed

.upgradenotes/MDL-86932-2025101701333839.yml

@@ -0,0 +1,10 @@
+issueNumber: MDL-86932
+notes:
+  mod_choice:
+    - message: >-
+        mod_choice_get_choice_results web service: new userresponse structure.
+        The mod_choice_get_choice_results web service now includes a new
+        userresponse field that returns the current user selections in a
+        structured format with optionid and text properties. This enhancement
+        provides better access to user choice data for API consumers.
+      type: changed

.upgradenotes/MDL-86960-2025110307024956.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-86960
+notes:
+  mod_glossary:
+    - message: >-
+        Function mod_glossary_rating_can_see_item_ratings is now implemented for
+        checking permissions to view ratings.
+      type: improved

.upgradenotes/MDL-86997-2025102314343463.yml

@@ -0,0 +1,10 @@
+issueNumber: MDL-86997
+notes:
+  core_reportbuilder:
+    - message: |
+        The following `user_filter_manager` methods have been deprecated:
+
+        * `reset_all()` - to be replaced by new `reset()` method
+        * `reset_single()`
+        * `merge()`
+      type: deprecated

.upgradenotes/MDL-87000-2025102314195265.yml

@@ -0,0 +1,9 @@
+issueNumber: MDL-87000
+notes:
+  core_reportbuilder:
+    - message: |
+        The following enrolment entity formatter methods have been deprecated:
+
+        * `enrolment_status()`
+        * `enrolment_values()`
+      type: deprecated

.upgradenotes/MDL-87003-2025102408575071.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-87003
+notes:
+  tool_mobile:
+    - message: >-
+        The WS tool_mobile_get_public_config now returns whether MFA and
+        reCAPTCHA are enabled for login/recover password.
+      type: changed

.upgradenotes/MDL-87034-2025102912420312.yml

@@ -0,0 +1,9 @@
+issueNumber: MDL-87034
+notes:
+  core_webservice:
+    - message: >-
+        The WebService core_webservice_get_site_info now returns three new fields:
+        "usercanviewconfig" indicating whether the current user can see the
+        administration tree, "usercanchangeconfig" indicating whether the
+        current user can change the site configuration, and site secret.
+      type: changed

.upgradenotes/MDL-87046-2025110301321263.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-87046
+notes:
+  core:
+    - message: >-
+        The namespace for the `\core_shutdown_manager` has been moved to
+        `\core\shutdown_manager`. The legacy namespace will continue to work for
+        the moment.
+      type: improved

.upgradenotes/MDL-87059-2026012814381917.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-87059
+notes:
+  core_customfield:
+    - message: >-
+        Added new `\core_customfield\api::is_shortname_unique(...)` method to
+        determine whether a shortname is available for use inside a given
+        handler
+      type: improved

.upgradenotes/MDL-87066-2025110409330962.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-87066
+notes:
+  core:
+    - message: Added clean_string() that prevents double escaping in Mustache templates
+      type: improved

.upgradenotes/MDL-87072-2025112103293935.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-87072
+notes:
+  core:
+    - message: Removed $CFG->wwwrootendsinpublic flag to force users to configure their server accordingly.
+      type: removed

.upgradenotes/MDL-87079-2025110401192093.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-87079
+notes:
+  core:
+    - message: When responding to pcntl signals, call existing signal handlers.
+      type: fixed

.upgradenotes/MDL-87100-2025110410180882.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-87100
+notes:
+  core:
+    - message: >-
+        When creating upgrade notes, the issue number will be inferred from the
+        current Git branch name by default
+      type: improved

.upgradenotes/MDL-87107-2025110505340589.yml

@@ -0,0 +1,5 @@
+issueNumber: MDL-87107
+notes:
+  core:
+    - message: The Hook Manager now uses localcache instead of caching via MUC.
+      type: changed

.upgradenotes/MDL-87107-2025110602011780.yml

@@ -0,0 +1,16 @@
+issueNumber: MDL-87107
+notes:
+  core:
+    - message: >
+        The `upgrade_ensure_not_running()` function has been deprecated and
+        replaced
+
+        with:
+
+
+        - `\core\setup::warn_if_upgrade_is_running()`;
+
+        - `\core\setup::ensure_upgrade_is_not_running()`; and
+
+        - `\core\setup::is_upgrade_running()`.
+      type: improved

.upgradenotes/MDL-87117-2025112701504315.yml

@@ -0,0 +1,8 @@
+issueNumber: MDL-87117
+notes:
+  core_course:
+    - message: >-
+        Two optional new strings, `modulename_summary` and `modulename_tip`,
+        have been added to modules and will be displayed in the activity chooser
+        interface when defined.
+      type: improved

.upgradenotes/MDL-87158-2025122915442188.yml

@@ -0,0 +1,7 @@
+issueNumber: MDL-87158
+notes:
+  tool_xmldb:
+    - message: >-
+        Generated `rename_field(...)` upgrade step code now checks for field
+        existence, to ensure it can be executed multiple times
+      type: changed

.upgradenotes/MDL-87173-2025111702594380.yml

@@ -0,0 +1,9 @@
+issueNumber: MDL-87173
+notes:
+  core:
+    - message: >-
+        The CLI script used to terminate user sessions (kill_all_sessions.php)
+        has been improved to make it safer and more flexible. 
+        A new '--run' parameter has been introduced. Without '--run', the script performs a dry run making no changes.
+        The script now supports targeted session termination using '--for-users' parameter.
+      type: improved

.upgradenotes/MDL-87242-2026012211004184.yml

@@ -0,0 +1,9 @@
+issueNumber: MDL-87242
+notes:
+  core_enrol:
+    - message: >-
+        The external function core_enrol::get_enrolled_users() now behaves
+        consistently with the web version; returning the basic user information
+        even if the current user does not have permission to view the full
+        details.
+      type: changed