v3.4.1

• Security: Fixed an XSS vulnerability (CVE-2019-8331) in our tooltip and popover plugins by implementing a new HTML sanitizer
• Handle bad selectors (#) in data-target for Dropdowns
• Clarified tooltip selector documentation
• Added support for NuGet contentFiles

v3.4.0

• New: Added a .row-no-gutters class.
• New: Added docs searching via Algolia.
• Fixed: Resolved an XSS issue in Alert, Carousel, Collapse, Dropdown, Modal, and Tab components. See https://snyk.io/vuln/npm:bootstrap:20160627 for details.
• Fixed: Added padding to .navbar-fixed-* on modal open
• Fixed: Removed the double border on elements.
• Removed Gist creation in web-based Customizer since anonymous gists were disabled long ago by GitHub.
• Removed drag and drop support from Customizer since it didn’t work anymore.

Framework version: Bootstrap v3.4.0
See the upstream blog post for a detailed overview.

v3.3.6

• Bumps Sass dependency to 3.3.4+ to avoid compatibility issues with @at-root.
• Bumps node-sass dependency to ~3.4.2 for Node.js v5 compatibility. #986
• Fixes breadcrumb content issues on libsass. #919
• Fixes a Rails 5 compatibility issue. #965

Framework version: Bootstrap v3.3.6
See the upstream blog post for style and JavaScript changes.

v3.3.5

Fix for standalone Compass extension compatibility. #914

Framework version: Bootstrap v3.3.5

• Blog post.
• Upstream release notes.

v3.3.4

No Sass-specific changes.

Framework version: Bootstrap v3.3.4.

The Ruby gem was originally released as v3.3.4, but has been re-released as v3.3.4.1 due to a file permissions issue. Non-rubygem releases are not affected.

• Blog post.
• Upstream release notes.

v3.3.3

Released on 2015-01-19.
This is a re-packaged release of v3.3.2.1 (v3.3.2+1). It includes the Sass-specific Glyphicons regression fix (daeb43d) from v3.3.2.1.

bootstrap-sass versions will be strictly SemVer from now on.
The PATCH version may be ahead of the upstream twbs/bootstrap version due to Sass-specific fixes.
To avoid confusion, there is not, and will never be, an upstream Bootstrap v3.3.3.

Framework version: Bootstrap v3.3.2.

• Blog post.
• Upstream release notes.

v3.3.2+1

Released on 2015-01-19.

_THIS VERSION IS DEPRECATED_ in favor of the identical, but SemVer-compliantly-numbered, v3.3.3.

This version fixes the Sass-specific Glyphicons regression that was in bootstrap-sass v3.3.2: daeb43d

Framework version: Bootstrap v3.3.2.

• Blog post.
• Upstream release notes.

v3.3.2

Released on 2015-01-19.

_DO NOT USE THIS VERSION!_ It had a bad Sass-specific Glyphicons-related regression: daeb43d

Sass-specific changes:

• 98818eb: Relax runtime dependencies and set min versions
• 3e33c6f: Add support for WOFF2 font format
• 60de6c5: Add support for twbs/bootstrap#15074 fix in the Less=>Sass converter
• ae550ab: Update minimum node-sass version to v1.2.3
• 682b3d0: Rails <3.2 is no longer officially supported
• 7d30630: Explicitly set $bootstrap-sass-asset-helper
• #691: Change new Rails app instructions
• #763: Less=>Sass converter fix: Split parent selector parts
• #777: Use unmodified bootstrap.js and bootstrap.min.js from upstream
• #801: Add standalone Sprockets support
• #812: Update bower.json to use one JS file
• #818: Document that usage of Autoprefixer is required
• #821: Reduce minimum Sass number precision: 10 -> 8
• #824: Make autoprefixer-rails a dependency

---

• Blog post.
• Upstream release notes.

v3.2.0

• Assets (Sass, JS, fonts) moved from vendor/assets to assets. bootstrap.js now contains concatenated JS.
• Compass generator now copies JS and fonts, and provides a better default styles.sass.
• Compass, Sprockets, and Mincer asset path helpers are now provided in pure Sass: bootstrap-compass, bootstrap-sprockets, and bootstrap-mincer.
  Asset path helpers must be imported before bootstrap, read more on this in Readme.
• Sprockets / Mincer JS manifest has been moved to bootstrap-sprockets.js.
  It can be required without adding Bootstrap JS directory to load path, as it now uses relative paths.
• Sprockets: depend_on_asset (glyphicons.scss) has been changed to depend_on to work around an issue with depend_on_asset.
  More information.

See also:

• Blog post.
• Upstream release notes.

v3.1.1

• #518: .scale mixin Sass compatibility issue
• #523: Rails 3.2 compatibility
• Updated Bower docs