Release 26.05.06-01

Release: v26.05.05-01 → v26.05.06-01

Features & Enhancements

• Content Drive: Merged the separate Base Type and Content Type toolbar filters into a single chip with a two-column popover, search, lazy-loaded virtual scroll, and cascading selection between base and content types. (#35503)
• Analytics: Added session engagement analytics to DotAnalyticsService with aggregate, time-series, and grouped-by-dimension (device, browser, language) queries, and refactored existing event/visitor methods to use typed parameter builders supporting range and custom date queries. (#35585)

Fixes and Known Issues

• Publisher: Improved performance of the drop-old-assets queries and now commits after every batch. (#35591)

Infrastructure & Security

• Publisher: Fixed a SQL injection risk in PublishAuditAPIImpl.getPublishAuditStatuses by parameterizing the bundle-id IN (...) clause via DotConnect.addParam, returning an empty list for null/empty input, and correcting the catch-block logger class and level. (#35553)
• Tomcat: Added opt-in support for non-RFC query characters via a new CMS_RELAXED_QUERY_CHARS environment variable wired into all four public HTTP/HTTPS connectors in server.xml (management connector on port 8090 excluded); default is empty so existing deployments are unchanged. (#35581)