Sourced from cmb2/cmb2's releases.

v2.9.0

Enhancements

• Added cmb2_tab_group_tabs filter for adding arbitrary menu page urls to the cmb2 tabs, and move tab markup output to separate method, CMB2_Options_Hookup::options_page_tab_nav_output(). Fixes #1407.
• Limit use of italic, including removing from field descriptions. Fixes #1404.
• Add to list of valid image types from get_allowed_mime_types(), which makes SVGs more reliable when using the Safe SVG plugin. Fixes #1223.

Bug Fixes

• Fixes PHP warnings on repeatable ColorPicker with an array as default. Props @rubengc (#1340).
• Address PHP 7.4, compatibility issues with func_get_args(). Fixes #1389.
• Better generated array key for cached fields, fixes issue where wrong field is found. Fixes #14053.
• Fix issue with options-pages being changed to register on a hook priority of 5 instead of the default 10, causing some back-compatibility issues. Fixes #1410.

v2.8.0

Enhancements

• Added CODE_OF_CONDUCT.md file to meet GitHub Community standards. Props @RubenMartins (#1331).
• Add ability to define the page-registration admin menu hook priority for options pages. Fixes #1380.

Bug Fixes

• Ensure enqueue wp-color-picker is enqueued for color fields. Props @rubengc (#1339).
• Fix empty name/id attributes on 'file_list' buttons. Props @pgroot91 (#1347).
• Fix wysiwyg field type not working in a group, by ensuring scripts properly enqueued. Props @yoren (#1361).
• Fix $object_id doc block types in helper-functions.php. Fixes #1365.
• Fix Metabox toggles visually broken with WP 5.5.x. Fixes #1382.
• Fix PHP Deprecated: Required parameter $field_id follows optional parameter $type, due to changes in PHP 8.0. Fixes #1396.
• Fix PHP notice caused by deprecated_param method in PHP 7.4. Props @jonathanstegall (#1400).

v2.7.0

Enhancements

• Added support for sortable columns by default, with ability to disable with 'column' => array( 'disable_sortable' => true ). Props @RubenMartins (#1281).
• New field type, 'taxonomy_select_hierarchical'. Fixes #751
• New text, textarea and wysiwyg character counter options. For now, this feature is not available to wysiwyg field types within repeatable groups. Props @gyrus (#1276).
  • The new parameters:
    • 'char_counter' - Defaults to false, no counter. Set to true, or words to count words instead of characters.
    • 'char_max' - integer. When defined, counter shows remaining characters/words.
    • 'char_max_enforce' - boolean, default: false. Currently only applied (as maxlength attribute) to text and textarea fields which use 'characters' for counter.
  • You can also override the default text strings associated with these parameters:
    • 'words_left_text' - Default: "Words left"
    • 'words_text' - Default: "Words"
    • 'characters_left_text' - Default: "Characters left"
    • 'characters_text' - Default: "Characters"
    • 'characters_truncated_text' - Default: "Your text may be truncated."
• Update styling to be more compatible with WordPress 5.3. Props @galengidman (#1314)
• Add a new box parameter, register_rest_field_cb, which when used allows overriding the way CMB2 handles the register_rest_field callbacks, and defining your own REST prefix for your fields. See this PR comment for more context.
• Cleanup by renaming CMB2_hookup to CMB2_Hookup. Classes are case-insensitive, so this is a backwards-compatible change. Props @szepeviktor (#1330, #1328).
• Validate composer.json for Travis CI. Props @szepeviktor (#1326).
• Added LICENSE file to meet GitHub Community standards. Props @RubenMartins (#1316).
• Add new "cmb2_display_class_{$fieldtype}" filter and 'display_class' field parameter to allow specifying the class to use to display the field (in admin columns, etc).
• Update CMB2_Types::_id() to allow not appending the iterator attribute if a repeatable field.
• Added CMB2_Utils::concat_attrs() test for nested arrays as data attributes.
• Various updates per VIP feedback. Props @kevinlangleyjr, @mikeselander (#1255, #1257, #1259, #1261 #1262, and various direct commits. See #1260).

... (truncated)

Sourced from cmb2/cmb2's changelog.

2.9.0 - 2020-03-21

Enhancements

• Added cmb2_tab_group_tabs filter for adding arbitrary menu page urls to the cmb2 tabs, and move tab markup output to separate method, CMB2_Options_Hookup::options_page_tab_nav_output(). Fixes #1407.
• Limit use of italic, including removing from field descriptions. Fixes #1404.
• Add to list of valid image types from get_allowed_mime_types(), which makes SVGs more reliable when using the Safe SVG plugin. Fixes #1223.

Bug Fixes

• Fixes PHP warnings on repeatable ColorPicker with an array as default. Props @rubengc (#1340).
• Address PHP 7.4, compatibility issues with func_get_args(). Fixes #1389.
• Better generated array key for cached fields, fixes issue where wrong field is found. Fixes #14053.
• Fix issue with options-pages being changed to register on a hook priority of 5 instead of the default 10, causing some back-compatibility issues. Fixes #1410.

2.8.0 - 2020-01-21

Enhancements

• Added CODE_OF_CONDUCT.md file to meet GitHub Community standards. Props @RubenMartins (#1331).
• Add ability to define the page-registration admin menu hook priority for options pages. Fixes #1380.

Bug Fixes

• Ensure enqueue wp-color-picker is enqueued for color fields. Props @rubengc (#1339).
• Fix empty name/id attributes on 'file_list' buttons. Props @pgroot91 (#1347).
• Fix wysiwyg field type not working in a group, by ensuring scripts properly enqueued. Props @yoren (#1361).
• Fix $object_id doc block types in helper-functions.php. Fixes #1365.
• Fix Metabox toggles visually broken with WP 5.5.x. Fixes #1382.
• Fix PHP Deprecated: Required parameter $field_id follows optional parameter $type, due to changes in PHP 8.0. Fixes #1396.
• Fix PHP notice caused by deprecated_param method in PHP 7.4. Props @jonathanstegall (#1400).

2.7.0 - 2020-01-21

Enhancements

• Added support for sortable columns by default, with ability to disable with 'column' => array( 'disable_sortable' => true ). Props @RubenMartins (#1281).
• New field type, 'taxonomy_select_hierarchical'. Fixes #751
• New text, textarea and wysiwyg character counter options. For now, this feature is not available to wysiwyg field types within repeatable groups. Props @gyrus (#1276).
  • The new parameters:
    • 'char_counter' - Defaults to false, no counter. Set to true, or words to count words instead of characters.
    • 'char_max' - integer. When defined, counter shows remaining characters/words.
    • 'char_max_enforce' - boolean, default: false. Currently only applied (as maxlength attribute) to text and textarea fields which use 'characters' for counter.
  • You can also override the default text strings associated with these parameters:
    • 'words_left_text' - Default: "Words left"
    • 'words_text' - Default: "Words"
    • 'characters_left_text' - Default: "Characters left"
    • 'characters_text' - Default: "Characters"
    • 'characters_truncated_text' - Default: "Your text may be truncated."
• Update styling to be more compatible with WordPress 5.3. Props @galengidman (#1314)
• Add a new box parameter, register_rest_field_cb, which when used allows overriding the way CMB2 handles the register_rest_field callbacks, and defining your own REST prefix for your fields. See this PR comment for more context.
• Cleanup by renaming CMB2_hookup to CMB2_Hookup. Classes are case-insensitive, so this is a backwards-compatible change. Props @szepeviktor (#1330, #1328).
• Validate composer.json for Travis CI. Props @szepeviktor (#1326).
• Added LICENSE file to meet GitHub Community standards. Props @RubenMartins (#1316).
• Add new "cmb2_display_class_{$fieldtype}" filter and 'display_class' field parameter to allow specifying the class to use to display the field (in admin columns, etc).

... (truncated)

• cacbc8c Add am-cli-tools
• 6ba3448 Update changelong and version numbers and readmes, and prepare release
• 95274dc Set default priority to 10 for options pages. Fixes #1410
• a804c91 build field-cache key manually to remove unnecessary |'s
• d5fdc34 Better generated array key for cached fields, fixes issue where wrong field i...
• 5efff88 Add to list of valid image types from get_allowed_mime_types(). Fixes #1223
• c828f3d Move tab markup output to separate method, options_page_tab_nav_output. Fixes...
• b13a2ae Add cmb2_tab_group_tabs filter for adding arbitrary menu page urls to the cmb...
• 561c8f9 Update since tag, and add props for #1340
• e930d33 Merge pull request #1340 from rubengc/fix-php-warnings-for-repeatable-colorpi...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)