Skip to content

Release 26.05.26-01

Choose a tag to compare

@dotCMS-Machine-User dotCMS-Machine-User released this 26 May 16:06

Release: v26.05.22-01 → v26.05.26-01

Features & Enhancements

  • Analytics: Replaced Basic auth on the analytics proxy with per-tenant HMAC bearer tokens, added per-site permission gating on the GET read endpoint, and tightened proxy path/timeout safeguards. (#35776)
  • Query Tool: Migrated the Query Tool portlet from the legacy Dojo/Dijit JSP to a new Angular + PrimeNG implementation, with a query-tool-legacy rollback entry preserved in portlet.xml. (#35792)

Fixes and Known Issues

  • Docker: Cached custom starter zips are now installed on container restart instead of only on the initial download. (#35789)
  • Docker / FIPS: Removed libtcnative-1 at runtime when FIPS mode is detected to prevent the JVM SIGSEGV crash on FIPS-enabled hosts. (#35777)
  • UVE: Page breadcrumb no longer shows stale titles when navigating between pages in the Universal Visual Editor. (#35821)

Infrastructure & Security

  • CI / PR linking: Hardened the PR-to-issue linking workflow against shell injection from PR body content, added a GraphQL fallback for markdown-link issue refs, re-evaluated the gate on PR edits/pushes, and added a second gate that fails when the linked issue lacks a Team : * label. (#35761)
  • CI / Release notifications: Compacted the Slack QA section to counts + a single cc line and converted flagged-PR authors to real <@USERID> mentions via .github/data/slack-mappings.json. (#35815)
  • CI / QA tracking: Added a scheduled workflow that runs every 3 days and pings each team's Slack channel about issues stuck in QA on the Product Planning project. (#35802)
  • CLI tests: Fixed SiteAPIIT failures caused by the test environment having LANG__404 as the default language by forcing a valid default in the warmup, with a retry wrapper around the affected create() calls as defense-in-depth. (#35803, #35813)
  • Developer tooling: Added a /review-pr Claude Code skill that pulls inline, review, and top-level PR feedback from all three GitHub endpoints and surfaces only Critical and High findings with a relevance recommendation. (#35829)