Bump wagtail from 7.0.9 to 8.0

[dependabot]

Bumps wagtail from 7.0.9 to 8.0.

Release notes

Sourced from wagtail's releases.

8.0

• Support for custom base page models (Matt Westcott)
• New v3 REST API with support for read and write CMS operations (Sage Abdullah, Thibaud Colas)
• Create a global registry for permission policies (Sage Abdullah)
• Add customizability for all remaining page views to PageViewSet (Sage Abdullah)
• Set FieldPanel(required_on_save=True) for AbstractFormField's field_type field (Alex Tomkins)
• Handle pasting of multiple tags separated by newlines or commas (Matthias Brück)
• Make Button component render a <button> element when no URL is supplied (Nayeli De Jesus, LB (Ben Johnston), Sage Abdullah)
• Show site name in site switcher dropdown in site settings editor (Jack Morgan)
• Improve clarity of different task states in workflow details dialog (Dan Braghis)
• Add submenu_hook attribute to ViewSetGroup for collecting submenu items registered via a hook (Hunzlah Malik, MariyaOT, Sage Abdullah)
• Respect ViewSet.menu_order when used in a ViewSetGroup (Sage Abdullah)
• Use a more accessible label for blank values of ChoiceBlock (Sage Abdullah)
• Use a more accessible label for blank values of dropdowns in locked page report filters (Sage Abdullah)
• Make audit log messages for scheduling/unscheduling generic (Sage Abdullah)
• Stop converting AVIF and WebP images to PNG by default (Thibaud Colas)
• Add rich text serializing to HTML support in the v2 API (Thibaud Colas)
• Expose the block id as a template context variable when rendering children of StreamBlock and ListBlock (Sage Abdullah)
• Add extension blocks for image and document stats in the edit view templates (Preeti Singh)
• Security fix: Improper restriction handling on Pages admin API (xuliang@QAX, Dan Braghis)
• Security fix: Identification of documents by SHA1 hash (Anand Himanshu, Matt Westcott)
• Security fix: Improper restriction handling on descendant collections in Documents and Images API (Ta Duc Thien, Matt Westcott)
• Security fix: Improper permission handling when copying snippets (tinyb0y, Matt Westcott)
• Security fix: Improper restriction handling on Page translation API endpoint (tinyb0y, Matt Westcott)
• Fix: Make SnippetChooserViewSet.widget_class a class instead of an instance (Amrinder Singh, Sage Abdullah)
• Fix: Prevent an error when approving a workflow that has been cancelled in a different session (Kailesh)
• Fix: Accommodate multilingual sites in skipping the "choose parent" step when creating a new page from a flat page listing (Amrinder Singh)
• Fix: Prevent error when moving a page to a destination with missing translations and WAGTAILSIMPLETRANSLATION_SYNC_PAGE_TREE = True (Sahil Kumar)
• Fix: Handle Pillow detecting decompression bombs when validating image pixel count (Jake Howard, Sage Abdullah)
• Fix: Use canonical URL for TED oEmbed provider (Marquis Nobles)
• Fix: Prevent icons from capturing clicks inside buttons (Maciek Baron)
• Fix: Prevent stale content types from breaking audit log message formatting (Thibaud Colas)
• Fix: Ensure form field clean_name is consistently set on form pages if autosave runs prematurely (Joey Jurjens)
• Fix: Enforce 'choose' permission on image chooser select-format view (Matt Westcott)
• Docs: Add reference documentation entry for SnippetChooserViewSet (Sage Abdullah)
• Docs: Fix panel classname and deprecated usage of format_html in construct_homepage_panels example (Andreas Nüßlein)
• Docs: Add docs for request.in_preview_panel to explain its use (Raghad Dahi)
• Docs: Update image format docs to encourage more intentional conversions (Thibaud Colas)
• Docs: Clarify Wagtail XSS protections for uploaded documents (Thibaud Colas)
• Docs: Add section on customizing StreamField block API output with get_api_representation (Pranith Beeram)
• Docs: Removed now-deprecated USE_L10N setting from internationalization and project setup documentation (Piyush Bhakuni)
• Docs: Add an overview page for images (Dmitry Khlopyev)
• Maintenance: Formalized support for Django 6.1
• Maintenance: Rename request argument to cache_object in Page._get_site_root_paths() for correctness (Kailesh)
• Maintenance: Fix blank choice tests for Django 6.1 (Sage Abdullah)
• Maintenance: Ignore EMAIL_BACKEND setting deprecation on Django 6.1 when running project template tests (Sage Abdullah)
• Maintenance: Use uv with lockfile in CI configurations (Sage Abdullah)
• Maintenance: Add one and not match support to RulesController (LB (Ben Johnston))
• Maintenance: Pin all GitHub Actions dependencies to specific versions (Thibaud Colas)
• Maintenance: Refactor pages' function-based views to class-based views (Sage Abdullah)

... (truncated)

Changelog

Sourced from wagtail's changelog.

8.0 (25.08.2026)

 * Support for custom base page models (Matt Westcott)
 * New v3 REST API with support for read and write CMS operations (Sage Abdullah, Thibaud Colas)
 * Create a global registry for permission policies (Sage Abdullah)
 * Add customizability for all remaining page views to `PageViewSet` (Sage Abdullah)
 * Set `FieldPanel(required_on_save=True)` for `AbstractFormField`'s `field_type` field (Alex Tomkins)
 * Handle pasting of multiple tags separated by newlines or commas (Matthias Brück)
 * Make `Button` component render a `<button>` element when no URL is supplied (Nayeli De Jesus, LB (Ben Johnston), Sage Abdullah)
 * Show site name in site switcher dropdown in site settings editor (Jack Morgan)
 * Improve clarity of different task states in workflow details dialog (Dan Braghis)
 * Add `submenu_hook` attribute to `ViewSetGroup` for collecting submenu items registered via a hook (Hunzlah Malik, MariyaOT, Sage Abdullah)
 * Respect `ViewSet.menu_order` when used in a `ViewSetGroup` (Sage Abdullah)
 * Use a more accessible label for blank values of `ChoiceBlock` (Sage Abdullah)
 * Use a more accessible label for blank values of dropdowns in locked page report filters (Sage Abdullah)
 * Make audit log messages for scheduling/unscheduling generic (Sage Abdullah)
 * Stop converting AVIF and WebP images to PNG by default (Thibaud Colas)
 * Add rich text serializing to HTML support in the v2 API (Thibaud Colas)
 * Expose the block `id` as a template context variable when rendering children of `StreamBlock` and `ListBlock` (Sage Abdullah)
 * Add extension blocks for image and document stats in the edit view templates (Preeti Singh)
 * Security fix: Improper restriction handling on Pages admin API (xuliang@QAX, Dan Braghis)
 * Security fix: Identification of documents by SHA1 hash (Anand Himanshu, Matt Westcott)
 * Security fix: Improper restriction handling on descendant collections in Documents and Images API (Ta Duc Thien, Matt Westcott)
 * Security fix: Improper permission handling when copying snippets (tinyb0y, Matt Westcott)
 * Security fix: Improper restriction handling on Page translation API endpoint (tinyb0y, Matt Westcott)
 * Fix: Make `SnippetChooserViewSet.widget_class` a class instead of an instance (Amrinder Singh, Sage Abdullah)
 * Fix: Prevent an error when approving a workflow that has been cancelled in a different session (Kailesh)
 * Fix: Accommodate multilingual sites in skipping the "choose parent" step when creating a new page from a flat page listing (Amrinder Singh)
 * Fix: Prevent error when moving a page to a destination with missing translations and `WAGTAILSIMPLETRANSLATION_SYNC_PAGE_TREE = True` (Sahil Kumar)
 * Fix: Handle Pillow detecting decompression bombs when validating image pixel count (Jake Howard, Sage Abdullah)
 * Fix: Use canonical URL for TED oEmbed provider (Marquis Nobles)
 * Fix: Prevent icons from capturing clicks inside buttons (Maciek Baron)
 * Fix: Prevent stale content types from breaking audit log message formatting (Thibaud Colas)
 * Fix: Ensure form field clean_name is consistently set on form pages if autosave runs prematurely (Joey Jurjens)
 * Fix: Enforce 'choose' permission on image chooser select-format view (Matt Westcott)
 * Docs: Add reference documentation entry for `SnippetChooserViewSet` (Sage Abdullah)
 * Docs: Fix panel classname and deprecated usage of `format_html` in `construct_homepage_panels` example (Andreas Nüßlein)
 * Docs: Add docs for `request.in_preview_panel` to explain its use (Raghad Dahi)
 * Docs: Update image format docs to encourage more intentional conversions (Thibaud Colas)
 * Docs: Clarify Wagtail XSS protections for uploaded documents (Thibaud Colas)
 * Docs: Add section on customizing StreamField block API output with `get_api_representation` (Pranith Beeram)
 * Docs: Removed now-deprecated `USE_L10N` setting from internationalization and project setup documentation (Piyush Bhakuni)
 * Docs: Add an overview page for images (Dmitry Khlopyev)
 * Maintenance: Formalized support for Django 6.1
 * Maintenance: Rename `request` argument to `cache_object` in `Page._get_site_root_paths()` for correctness (Kailesh)
 * Maintenance: Fix blank choice tests for Django 6.1 (Sage Abdullah)
 * Maintenance: Ignore `EMAIL_BACKEND` setting deprecation on Django 6.1 when running project template tests (Sage Abdullah)
 * Maintenance: Use uv with lockfile in CI configurations (Sage Abdullah)
 * Maintenance: Add `one` and `not` match support to `RulesController` (LB (Ben Johnston))
</tr></table> 

... (truncated)

Commits

• 24e624c Version bump to 8.0 final
• 7352645 Fill in release date for 8.0
• 28e2d0c Generate new strings for translation
• 2ad95f1 Fetch new translations from Transifex
• f259d11 Add more details in 8.0 release notes
• e1fcfc1 Add an overview page for images in docs (#14561)
• 887917f Fix TableBlock API writing error due to API -> form serialization
• 32ca5ea Keep v3 API tokens outside of sessions (#14558)
• 09cd644 Validate slug format in v3 API copy and create_alias actions (#14548)
• 9afd0fb Require change permission on source snippet in copy-for-translation action (#...
• Additional commits viewable in compare view