Skip to content

Release 26.07.17-01

Choose a tag to compare

View all tags
@dotCMS-Machine-User dotCMS-Machine-User released this 17 Jul 21:14
v26.07.17-01
4d93025

dotCMS 26.07.17-01 advances Content Drive's field-based search, hardens permissions handling, and continues the Block Editor and search-migration fix streams, with two security upgrades in the mix.

Caution

Rollback Warning: This release contains a change that is non-trivial to roll back from.

  • Search API: Restoring per-hit sort values in /api/es/search changes the response wire format; integrations written against the corrected format may not behave identically after a rollback. [#36581]

Features

  • Content Drive gains field-based search and filter criteria, reusing the Edit Content field components, plus a userSearchable field-filter contract with parsing, validation, and routing. [#36383] [#36463]
  • A new site/folder selector powers folder search across the admin UI. [#36449]
  • The Block Editor adds an underline button to the toolbar. [#36572]
  • Markdown and HTML supplied to Block Editor fields convert to ProseMirror JSON on the server at save time, so headless and automated writers produce structured content without a manual re-save. [#36470]
  • Builds support mise via idiomatic version files for Java and Node toolchains. [#36625]

Enhancements & Adjustments

  • The SDK version bumps to 1.7.1 following the 1.7.0 release. [#36484]

Fixes

  • Authenticated users receive a 403 access-denied page (not a 401 re-login prompt) on protected file assets, with a cleaner authentication/authorization split and a SAML redirect-loop guard. [#32365] [#36541]
  • /api/es/search returns per-hit sort values again during the OpenSearch migration. [#36581]
  • Deleting a primary search index surfaces failures instead of returning a silent 200. [#36430]
  • The file editor allows saving code files that carry non-blocking warnings. [#36543]
  • The Block Editor registers render.vtl story-block templates as a velocimacro library, renders History Compare diffs under the new editor, and preserves hard breaks on load for restricted fields. [#35984] [#36550] [#35985]
  • Date picker panels in the new Content Editor are no longer clipped by dialog overflow. [#36566]
  • The Universal Visual Editor no longer re-executes inline scripts via duplicate document.write on VTL pages. [#36141]
  • Content Drive field-based search receives follow-up fixes from QA. [#36384]
  • Vite SDK publishing restores the package.json copy step after the build-plugin migration. [#36598]

Infrastructure & Security

  • Layout assignment and role grant endpoints enforce an admin check. [#36344]
  • Bundled Apache Tomcat upgrades from 9.0.118 to 9.0.120. [#36592]
  • A scheduled Trivy CVE scan covers published Docker images. [#36549]
  • The link-issue merge check tolerates transient GitHub API errors, and cross-repo/private issue references are supported. [#36457] [#36610]
  • An automated Epic documentation audit workflow keeps epic docs in sync. [#36293]
  • The core-web build replaces the deprecated nxViteTsPaths plugin with Vite tsconfig paths. [#36540]
Assets 3
Loading