2026.3.0

What's Changed

• 🔄 synced file(s) with pimcore/platform-version by @pimcore-deployments in #1934
• Update maintenance branch in CONTRIBUTING.md to 2026.2 (#187) by @pimcore-deployments in #1942
• Rename new-* workflow files to their final names by @berfinyuksel in #1943
• Forward-merge 2026.2 into 2026.x by @xIrusux in #1948
• 🔄 synced file(s) with pimcore/workflows-collection-public by @pimcore-deployments in #1952
• 🔄 synced file(s) with pimcore/workflows-collection-public by @pimcore-deployments in #1956
• Run static analysis on pull_request instead of pull_request_target by @berfinyuksel in #1961
• Add PR Guardrails trigger workflow by @berfinyuksel in #1962
• Allow disabling auto-create of missing translation keys by @ValeriaMaltseva in #1963
• 🔄 synced file(s) with pimcore/workflows-collection-public by @pimcore-deployments in #1965
• [Grid] Add User Modification and User Owner as selectable object system columns by @xIrusux in #1966
• Expose and accept version coauthor information by @fashxp in #1928
• [Asset List] Add file size field filter (#705) by @xIrusux in #1967
• Throttle failed MCP authentication attempts by @fashxp in #1970
• Add the shared MCP tool boundary: error handler and schema normalizers by @fashxp in #1972
• Drop DOCS_GENERATOR_ACCESS_TOKEN from docs workflow, downgrade to pull_request by @berfinyuksel in #1975
• [Object List] Make user columns filterable + add user field filter by @xIrusux in #1969
• [Improvement] Migrate admin translation CSV export to League/CSV by @xIrusux in #1968
• [Symfony 8] Replace deprecated #[TaggedIterator] with #[AutowireIterator] by @herbertroth in #1978
• [Symfony 8] Add ?Vote argument to voteOnAttribute() by @herbertroth in #1979
• [Telemetry] Outbox endpoints + Generic Data Index acceleration by @martineiber in #1980
• [Symfony 8] Extend the DependencyInjection Extension base class by @herbertroth in #1982
• [Telemetry] add missing OpenAPI examples for telemetry outbox schemas by @martineiber in #1988
• 🔄 synced file(s) with pimcore/workflows-collection-public by @pimcore-deployments in #1989
• Notification subscriptions & multi-channel delivery framework by @markus-moser in #1959
• Replace PR Policy with thin caller for reusable workflow by @berfinyuksel in #2013
• [Grid] Merge workflow place permissions into grid row permissions by @xIrusux in #1976
• Normalize entry params by @alexej-d in #2004
• [Data Objects] Report inheritable flag and inherited value per field in inheritance data by @robertSt7 in #2033
• [Telemetry] Capture studio.logout with the session duration by @martineiber in #2046
• 3207 - [Studio Backend] - Translations (nl, pl) by @xIrusux in #2043
• [OAuth] Basic integration: embedded authorization & resource server by @wwidergoldpimcore in #1958
• Forward merge 2026.2 into 2026.x by @kingjia90 in #2048
• OAuth installation improvements by @fashxp in #2055
• [security] GHSA-5r9r-72j4-gv74: CustomLayout routes accept 'objects' permission instead of 'classes' by @pimcore-deployments in #2053

New Contributors

• @alexej-d made their first contribution in #2004

Full Changelog: v2026.2.11...v2026.3.0