13.14.0-rc3

What's Changed Since 13.14.0-rc2

🔒 Security Hardening

• Surface controllers: validate redirect URL in member operation surface controllers by @NguyenThuyLan in #22565

Full Changelog: release-13.14.0-rc2...release-13.14.0-rc3

What's Changed Since 13.14.0-rc1

📦 Dependencies

• Dependencies: Pin System.Security.Cryptography.Xml to resolve vulnerability warning (Umbraco 13) by @crixlis
  in #22513

Full Changelog: release-13.14.0-rc...release-13.14.0-rc2

What's Changed Since The Previous Version (13.13.1)

🚤 Performance

• Backport optimisations on content type save from #21910 to V13 by @kjac in #22314

Full Changelog: release-13.13.1...release-13.14.0-rc

13.14.0-rc2

What's Changed Since 13.14.0-rc1

📦 Dependencies

• Dependencies: Pin System.Security.Cryptography.Xml to resolve vulnerability warning (Umbraco 13) by @crixlis
  in #22513

Full Changelog: release-13.14.0-rc...release-13.14.0-rc2

What's Changed Since The Previous Version (13.13.1)

🚤 Performance

• Backport optimisations on content type save from #21910 to V13 by @kjac in #22314

Full Changelog: release-13.13.1...release-13.14.0-rc

17.3.4

What's Changed

🐛 Bug Fixes

• Migrations: Fix RetrustForeignKeyAndCheckConstraints failing when data violates a constraint
  by @AndyButland in #22488

Full Changelog: release-17.3.3...release-17.3.4

17.3.3

What's Changed

🐛 Bug Fixes

• User Service: Prevent fetching all permissions when no IDs are provided by @krebil in #22424

Full Changelog: release-17.3.2...release-17.3.3

17.3.2

What's Changed

🐛 Bug Fixes

• Templating: Move production mode validation from service layer to Management API by @AndyButland in #22383
• Migrations: Fix potential OptimizeInvariantUrlRecords timeout on SQL Server (closes #22377) by @AndyButland in #22382
• Management API: Fix OAuth client registration permanently skipped after transient failure (closes #22356) by @AndyButland in #22368
• Property Editor Dialog: Set height to 100% for umb-property-editor-ui-picker-modal by @bjarnef in #22354

Full Changelog: release-17.3.1...release-17.3.2

17.3.1

What's Changed

🐛 Bug Fixes

• Document URL Service: Batch delete of obsolete URL segment records to avoid SQL Server parameter limit (closes #22339) by - @AndyButland in #22340
• Builder Extensions: Make AddWebComponents() idempotent (closes #22344) by @AndyButland in #22347
• Media Picker: Fix folder selection regression for developer-configured media pickers (closes #22349) by @AndyButland in #22350
• Install: Ensure media directory exists before creating PhysicalFileProvider (closes #14877) by @AndyButland in #22281

Full Changelog: release-17.3.0...release-17.3.1

13.14.0-rc

What's Changed

• Backport optimisations on content type save from #21910 to V13 by @kjac in #22314

Full Changelog: release-13.13.1...release-13.14.0-rc

17.3.0

Upgrade Notes

In 17.3 we have upgraded our dependency on MailKit to 4.15.1. This is a minor version update, but we found a few changes we had to make in core to accommodate changes to nullability constraints. Unless using methods of this library, or it's transitive dependency MimeKit, it's unlikely projects will be affected. The update is necessary though, as the version we previously depended on now has a security vulnerability raised against it.

We have made a change to how we handle redirects which brings a significant performance improvement for publish time on large sites, when documents with many descendent nodes are published. If you have custom URL providers you should review this change, as there are some very rare cases where you'll need to adjust to ensure descendent redirects are correctly handled.

Note also that we now auto-generate HMAC secret key for new installs. This has been applied to make Umbraco more secure by default, but it's not been forced for upgrades.

What's Changed Since 17.3.0-rc3

Full Changelog: release-17.3.0-rc3...release-17.3.0

What's Changed Since 17.3.0-rc2

📦 Dependencies

• Dependencies: Update Microsoft packages to latest patch and fix HybridCache ParseFault with Redis by @AndyButland in #22278

🐛 Bug Fixes

• Examine: Fix DocumentUrlService not initialized during Examine indexing after package upgrade by @AndyButland in #22243
• Unattended Upgrades: Rebuild routing caches after background migrations to fix unrouteable document URLs by @AndyButland in #22269
• Migrations: Fix NPoco auto-select breaking re-trust FK migration by @AndyButland in #22270

Full Changelog: release-17.3.0-rc2...release-17.3.0-rc3

What's Changed Since 17.3.0-rc1

🐛 Bug Fixes

• Migrations: Fix re-trust constraints migration targeting non-Umbraco tables and transaction failure (closes #22227) by @AndyButland in #22229
• Distributed Locking: Add ROWLOCK hint to prevent cross-row contention on umbracoLock table (closes #22113) by @AndyButland in #22126
• Application URLs: Prevent back office hosts being overwritten in a shared database setup (closes #16741) by @matthewcare in #22160
• Migrations: Fix property detection for invariant content types with culture-varying compositions (closes #22159) by @AndyButland in #22167
• Migrations: Fix package migrations not running after fresh install with packages (closes #22202) by @AndyButland in #22204

Full Changelog: release-17.3.0-rc...release-17.3.0-rc2

What's Changed Since the Previous Version (17.2.2)

🙌 Notable Changes

• Templates: Add optional Central Package Management support to UmbracoProject and UmbracoExtension templates by @NguyenThuyLan in #21641
• Service registration: Allow running Umbraco with different combinations of backoffice, website and delivery API (closes #21622) by @AndyButland in #21630
• Imaging Configuration: Auto-generate HMAC secret key for new installs by @AndyButland in #21976
• Migrations: Run unattended upgrades in background, add liveness/readiness health probes (closes #21987) by @AndyButland in #22020

💥 Breaking Changes

• Dependencies: Update MailKit to 4.15.1 by @AndyButland in #22028

📦 Dependencies

• Bump lodash from 4.17.21 to 4.17.23 in /tests/Umbraco.Tests.AcceptanceTest in the npm_and_yarn group across 1 directory by @dependabot[bot] in #21519
• Bump the npm_and_yarn group across 2 directories with 2 updates by @dependabot[bot] in #21754
• Bump qs from 6.14.1 to 6.14.2 in /src/Umbraco.Web.UI.Client in the npm_and_yarn group across 1 directory by @dependabot[bot] in #21755
• Dependencies: Bumps @umbraco-ui/uui from 1.17.0 to 1.17.1 by @iOvergaard in #22029
• Dependencies: Updates @umbraco-ui/uui to 1.17.2 to fix multiple folder drag-and-drop failing (closes #21837) by @iOvergaard in #21886
• Backoffice: Update vite from 7.1.11 to 7.3.1 by @iOvergaard in #22065
• Dependencies: Update server-side dependencies to latest patch or minor releases by @AndyButland in #21860

🚤 Performance

• Performance: Implement key-based caching for data type and template repositories by @AndyButland in #21280
• Management API: Optimize collection view performance by eliminating N+1 patterns by @AndyButland in #21684
• Performance: Optimize handling of content type updates by @kjac in #21910
• Backoffice Performance: Add inflight request deduplication to item data request managers by @madsrasmussen in #21767
• URL and Alias Caches: Optimize for invariant documents by @AndyButland in #21558
• Custom Views: Prevent re-rendering Block Views and Properties by @rickbutterfield in #21186
• Core: Minimize await to a single JS cycle (refactor #21186) by @nielslyngsoe in #22074
• Auth: Skip /token refresh when access token is still valid by @iOvergaard in #22087
• Memory Management: Dispose IDisposable resources correctly in four internal classes by @AndyButland in #22014
• Redirect Tracking: Fix segment change detection and optimise descendant traversal (closes #22082) by @AndyButland in #22091

🌈 Accessibility Improvements

• Entity Actions: Adds a descriptive title to the first action so you know what it does by @iOvergaard in #21739
• Search field: Added aria-label and name to search input for accessibility (closes #21938) by @andreaslborg in #21962
• List view: Added labels entity bulk action buttons by @andreaslborg in #21964
• Accessibility: Add title attributes to buttons in block list entry and property editor UI by @manutdkid77 in #21842
• Accessibility: Add tooltips to block grid entry actions by @manutdkid77 in #21958
• Accessibility: Added title attribute for icon in content types by @TechPdo in #21956

🚀 New Features

• Tiptap RTE: Add delete action support for RTE blocks (closes #21345) by @leekelleher in #21615
• Tiptap RTE: Add clipboard copy/paste support for RTE blocks (closes #21345) by @leekelleher in #21604
• Imaging: Intelligent format detection for thumbnail generation by @iOvergaard in #21570
• Tiptap RTE: Adds actionButton kind for toolbar extensions (closes #21682) by @leekelleher in #21703
• Management API: Add endpoints, service and repository methods for retrieving the allowed parents for content types by @NillasKA in #21586
• Block List/Grid: Add "Clear" property action. by @engijlr in #21436
• Collection: Add description support to default collection item card and ref elements by @madsrasmussen in #21654
• Block Editor: Implements hints for Tabs (fixes #21178) by @nielslyngsoe in #21672
• Textbox/area: Add character countdown message (closes #19505) by @engijlr in #21722
• Document Collection: Enable Entity Actions on cards by @madsrasmussen in #21802
• Media Collection: Introduce Entity Actions for cards by @madsrasmussen in #21816
• Entity Data Picker: Add text filter feature toggle for Collection Data Sources by @madsrasmussen in #21732
• Image cropper and file upload: Implemented automatic naming of uploaded file (closes #21764) by @TechPdo in #21775
• Entity Signs: Enable entity signs for media items (closes #21786) by @AndyButland in #21832
• Management API: Add document and data types tree search endpoints by @Migaroez in #21628
• Members: Enable sorting on member table and order member groups by name (closes #21960) by @AndyButland in #21963
• Management API: Add item ancestors endpoints returning item response models by @AndyButland in https://github.com/umbraco/Umbraco-CMS/pull...

17.3.0-rc3

Upgrade Notes

In 17.3 we have upgraded our dependency on MailKit to 4.15.1. This is a minor version update, but we found a few changes we had to make in core to accommodate changes to nullability constraints. Unless using methods of this library, or it's transitive dependency MimeKit, it's unlikely projects will be affected. The update is necessary though, as the version we previously depended on now has a security vulnerability raised against it.

We have made a change to how we handle redirects which brings a significant performance improvement for publish time on large sites, when documents with many descendent nodes are published. If you have custom URL providers you should review this change, as there are some very rare cases where you'll need to adjust to ensure descendent redirects are correctly handled.

Note also that we now auto-generate HMAC secret key for new installs. This has been applied to make Umbraco more secure by default, but it's not been forced for upgrades.

What's Changed Since 17.3.0-rc2

📦 Dependencies

• Dependencies: Update Microsoft packages to latest patch and fix HybridCache ParseFault with Redis by @AndyButland in #22278

🐛 Bug Fixes

• Examine: Fix DocumentUrlService not initialized during Examine indexing after package upgrade by @AndyButland in #22243
• Unattended Upgrades: Rebuild routing caches after background migrations to fix unrouteable document URLs by @AndyButland in #22269
• Migrations: Fix NPoco auto-select breaking re-trust FK migration by @AndyButland in #22270

Full Changelog: release-17.3.0-rc2...release-17.3.0-rc3

What's Changed Since 17.3.0-rc1

🐛 Bug Fixes

• Migrations: Fix re-trust constraints migration targeting non-Umbraco tables and transaction failure (closes #22227) by @AndyButland in #22229
• Distributed Locking: Add ROWLOCK hint to prevent cross-row contention on umbracoLock table (closes #22113) by @AndyButland in #22126
• Application URLs: Prevent back office hosts being overwritten in a shared database setup (closes #16741) by @matthewcare in #22160
• Migrations: Fix property detection for invariant content types with culture-varying compositions (closes #22159) by @AndyButland in #22167
• Migrations: Fix package migrations not running after fresh install with packages (closes #22202) by @AndyButland in #22204

Full Changelog: release-17.3.0-rc...release-17.3.0-rc2

What's Changed Since the Previous Version (17.2.2)

🙌 Notable Changes

• Templates: Add optional Central Package Management support to UmbracoProject and UmbracoExtension templates by @NguyenThuyLan in #21641
• Service registration: Allow running Umbraco with different combinations of backoffice, website and delivery API (closes #21622) by @AndyButland in #21630
• Imaging Configuration: Auto-generate HMAC secret key for new installs by @AndyButland in #21976
• Migrations: Run unattended upgrades in background, add liveness/readiness health probes (closes #21987) by @AndyButland in #22020

💥 Breaking Changes

• Dependencies: Update MailKit to 4.15.1 by @AndyButland in #22028

📦 Dependencies

• Bump lodash from 4.17.21 to 4.17.23 in /tests/Umbraco.Tests.AcceptanceTest in the npm_and_yarn group across 1 directory by @dependabot[bot] in #21519
• Bump the npm_and_yarn group across 2 directories with 2 updates by @dependabot[bot] in #21754
• Bump qs from 6.14.1 to 6.14.2 in /src/Umbraco.Web.UI.Client in the npm_and_yarn group across 1 directory by @dependabot[bot] in #21755
• Dependencies: Bumps @umbraco-ui/uui from 1.17.0 to 1.17.1 by @iOvergaard in #22029
• Dependencies: Updates @umbraco-ui/uui to 1.17.2 to fix multiple folder drag-and-drop failing (closes #21837) by @iOvergaard in #21886
• Backoffice: Update vite from 7.1.11 to 7.3.1 by @iOvergaard in #22065
• Dependencies: Update server-side dependencies to latest patch or minor releases by @AndyButland in #21860

🚤 Performance

• Performance: Implement key-based caching for data type and template repositories by @AndyButland in #21280
• Management API: Optimize collection view performance by eliminating N+1 patterns by @AndyButland in #21684
• Performance: Optimize handling of content type updates by @kjac in #21910
• Backoffice Performance: Add inflight request deduplication to item data request managers by @madsrasmussen in #21767
• URL and Alias Caches: Optimize for invariant documents by @AndyButland in #21558
• Custom Views: Prevent re-rendering Block Views and Properties by @rickbutterfield in #21186
• Core: Minimize await to a single JS cycle (refactor #21186) by @nielslyngsoe in #22074
• Auth: Skip /token refresh when access token is still valid by @iOvergaard in #22087
• Memory Management: Dispose IDisposable resources correctly in four internal classes by @AndyButland in #22014
• Redirect Tracking: Fix segment change detection and optimise descendant traversal (closes #22082) by @AndyButland in #22091

🌈 Accessibility Improvements

• Entity Actions: Adds a descriptive title to the first action so you know what it does by @iOvergaard in #21739
• Search field: Added aria-label and name to search input for accessibility (closes #21938) by @andreaslborg in #21962
• List view: Added labels entity bulk action buttons by @andreaslborg in #21964
• Accessibility: Add title attributes to buttons in block list entry and property editor UI by @manutdkid77 in #21842
• Accessibility: Add tooltips to block grid entry actions by @manutdkid77 in #21958
• Accessibility: Added title attribute for icon in content types by @TechPdo in #21956

🚀 New Features

• Tiptap RTE: Add delete action support for RTE blocks (closes #21345) by @leekelleher in #21615
• Tiptap RTE: Add clipboard copy/paste support for RTE blocks (closes #21345) by @leekelleher in #21604
• Imaging: Intelligent format detection for thumbnail generation by @iOvergaard in #21570
• Tiptap RTE: Adds actionButton kind for toolbar extensions (closes #21682) by @leekelleher in #21703
• Management API: Add endpoints, service and repository methods for retrieving the allowed parents for content types by @NillasKA in #21586
• Block List/Grid: Add "Clear" property action. by @engijlr in #21436
• Collection: Add description support to default collection item card and ref elements by @madsrasmussen in #21654
• Block Editor: Implements hints for Tabs (fixes #21178) by @nielslyngsoe in #21672
• Textbox/area: Add character countdown message (closes #19505) by @engijlr in #21722
• Document Collection: Enable Entity Actions on cards by @madsrasmussen in #21802
• Media Collection: Introduce Entity Actions for cards by @madsrasmussen in #21816
• Entity Data Picker: Add text filter feature toggle for Collection Data Sources by @madsrasmussen in #21732
• Image cropper and file upload: Implemented automatic naming of uploaded file (closes #21764) by @TechPdo in #21775
• Entity Signs: Enable entity signs for media items (closes #21786) by @AndyButland in #21832
• Management API: Add document and data types tree search endpoints by @Migaroez in #21628
• Members: Enable sorting on member table and order member groups by name (closes #21960) by @AndyButland in #21963
• Management API: Add item ancestors endpoints returning item response models by @AndyButland in #21874
• Collection Views: Add sortable value column for custom property sorting (closes #21425) by @AndyButland in https://github.com/umbraco/...

17.3.0-rc2

Upgrade Notes

In 17.3 we have upgraded our dependency on MailKit to 4.15.1. This is a minor version update, but we found a few changes we had to make in core to accommodate changes to nullability constraints. Unless using methods of this library, or it's transitive dependency MimeKit, it's unlikely projects will be affected. The update is necessary though, as the version we previously depended on now has a security vulnerability raised against it.

We have made a change to how we handle redirects which brings a significant performance improvement for publish time on large sites, when documents with many descendent nodes are published. If you have custom URL providers you should review this change, as there are some very rare cases where you'll need to adjust to ensure descendent redirects are correctly handled.

Note also that we now auto-generate HMAC secret key for new installs. This has been applied to make Umbraco more secure by default, but it's not been forced for upgrades.

What's Changed Since 17.3.0-rc1

🐛 Bug Fixes

• Migrations: Fix re-trust constraints migration targeting non-Umbraco tables and transaction failure (closes #22227) by @AndyButland in #22229
• Distributed Locking: Add ROWLOCK hint to prevent cross-row contention on umbracoLock table (closes #22113) by @AndyButland in #22126
• Application URLs: Prevent back office hosts being overwritten in a shared database setup (closes #16741) by @matthewcare in #22160
• Migrations: Fix property detection for invariant content types with culture-varying compositions (closes #22159) by @AndyButland in #22167
• Migrations: Fix package migrations not running after fresh install with packages (closes #22202) by @AndyButland in #22204

Full Changelog: release-17.3.0-rc...release-17.3.0-rc2

What's Changed Since the Previous Version (17.2.2)

🙌 Notable Changes

• Templates: Add optional Central Package Management support to UmbracoProject and UmbracoExtension templates by @NguyenThuyLan in #21641
• Service registration: Allow running Umbraco with different combinations of backoffice, website and delivery API (closes #21622) by @AndyButland in #21630
• Imaging Configuration: Auto-generate HMAC secret key for new installs by @AndyButland in #21976
• Migrations: Run unattended upgrades in background, add liveness/readiness health probes (closes #21987) by @AndyButland in #22020

💥 Breaking Changes

• Dependencies: Update MailKit to 4.15.1 by @AndyButland in #22028

📦 Dependencies

• Bump lodash from 4.17.21 to 4.17.23 in /tests/Umbraco.Tests.AcceptanceTest in the npm_and_yarn group across 1 directory by @dependabot[bot] in #21519
• Bump the npm_and_yarn group across 2 directories with 2 updates by @dependabot[bot] in #21754
• Bump qs from 6.14.1 to 6.14.2 in /src/Umbraco.Web.UI.Client in the npm_and_yarn group across 1 directory by @dependabot[bot] in #21755
• Dependencies: Bumps @umbraco-ui/uui from 1.17.0 to 1.17.1 by @iOvergaard in #22029
• Dependencies: Updates @umbraco-ui/uui to 1.17.2 to fix multiple folder drag-and-drop failing (closes #21837) by @iOvergaard in #21886
• Backoffice: Update vite from 7.1.11 to 7.3.1 by @iOvergaard in #22065
• Dependencies: Update server-side dependencies to latest patch or minor releases by @AndyButland in #21860

🚤 Performance

• Performance: Implement key-based caching for data type and template repositories by @AndyButland in #21280
• Management API: Optimize collection view performance by eliminating N+1 patterns by @AndyButland in #21684
• Performance: Optimize handling of content type updates by @kjac in #21910
• Backoffice Performance: Add inflight request deduplication to item data request managers by @madsrasmussen in #21767
• URL and Alias Caches: Optimize for invariant documents by @AndyButland in #21558
• Custom Views: Prevent re-rendering Block Views and Properties by @rickbutterfield in #21186
• Core: Minimize await to a single JS cycle (refactor #21186) by @nielslyngsoe in #22074
• Auth: Skip /token refresh when access token is still valid by @iOvergaard in #22087
• Memory Management: Dispose IDisposable resources correctly in four internal classes by @AndyButland in #22014
• Redirect Tracking: Fix segment change detection and optimise descendant traversal (closes #22082) by @AndyButland in #22091

🌈 Accessibility Improvements

• Entity Actions: Adds a descriptive title to the first action so you know what it does by @iOvergaard in #21739
• Search field: Added aria-label and name to search input for accessibility (closes #21938) by @andreaslborg in #21962
• List view: Added labels entity bulk action buttons by @andreaslborg in #21964
• Accessibility: Add title attributes to buttons in block list entry and property editor UI by @manutdkid77 in #21842
• Accessibility: Add tooltips to block grid entry actions by @manutdkid77 in #21958
• Accessibility: Added title attribute for icon in content types by @TechPdo in #21956

🚀 New Features

• Tiptap RTE: Add delete action support for RTE blocks (closes #21345) by @leekelleher in #21615
• Tiptap RTE: Add clipboard copy/paste support for RTE blocks (closes #21345) by @leekelleher in #21604
• Imaging: Intelligent format detection for thumbnail generation by @iOvergaard in #21570
• Tiptap RTE: Adds actionButton kind for toolbar extensions (closes #21682) by @leekelleher in #21703
• Management API: Add endpoints, service and repository methods for retrieving the allowed parents for content types by @NillasKA in #21586
• Block List/Grid: Add "Clear" property action. by @engijlr in #21436
• Collection: Add description support to default collection item card and ref elements by @madsrasmussen in #21654
• Block Editor: Implements hints for Tabs (fixes #21178) by @nielslyngsoe in #21672
• Textbox/area: Add character countdown message (closes #19505) by @engijlr in #21722
• Document Collection: Enable Entity Actions on cards by @madsrasmussen in #21802
• Media Collection: Introduce Entity Actions for cards by @madsrasmussen in #21816
• Entity Data Picker: Add text filter feature toggle for Collection Data Sources by @madsrasmussen in #21732
• Image cropper and file upload: Implemented automatic naming of uploaded file (closes #21764) by @TechPdo in #21775
• Entity Signs: Enable entity signs for media items (closes #21786) by @AndyButland in #21832
• Management API: Add document and data types tree search endpoints by @Migaroez in #21628
• Members: Enable sorting on member table and order member groups by name (closes #21960) by @AndyButland in #21963
• Management API: Add item ancestors endpoints returning item response models by @AndyButland in #21874
• Collection Views: Add sortable value column for custom property sorting (closes #21425) by @AndyButland in #21479
• Entity Data Picker: Add configurable Picker Views for Collection Data Sources by @madsrasmussen in #21738
• Account login: Separate AllowConcurrentLogins settings for users and members (closes #21667) by @AndyButland in #21940
• Link Picker, RTE: Support linking to a specific culture by @NguyenThuyLan in #21466
• Management API: Add batch read endpoints for Document Types, Media Types, Member Types, and Data Types by @AndyButland in #21565
• Extension: Introduce extension core module and umb-input-extension element by @madsrasmussen in #21705
• Condition: is-routable-context-condition...