2026.3.3

What's Changed

• [Bug] Keep unpublished relations in asynchronous batch edits, replace usage, reference rewrite and export by @fashxp in #2099
• [Bug] Keep existing entries when batch adding/removing advanced relations by @fashxp in #2100
• [Bug] Allow sent-emails list with emails OR gdpr_data_extractor permission by @kingjia90 in #2086
• [Bug] Do not reject deleted class IDs a user/role already carries by @kingjia90 in #2103
• [Bug] Export all rows in custom report CSV export by @kingjia90 in #2097
• [Bug] Allow non-PDF document preview without a page count by @kingjia90 in #2106
• Require swagger-php 5.0.2 or newer by @fashxp in #2107
• [security] GHSA-372q-2cr4-j62g: Fix reset-password URL validation bypass via spoofed Host header by @pimcore-deployments in #2075
• [security] GHSA-9676-766g-9mr9: Missing element-level authorization on asset text and data-object preview endpoints by @pimcore-deployments in #2076
• [Documents] Set the default controller of new documents per document type by @robertSt7 in #2101
• [Bug] Offer block fields as data object grid columns by @jcPimcore in #2108
• [Test] Custom reports: regression test for the unpaginated CSV export handler (PEES-1680) by @robertSt7 in #2102
• [Bug] Run the schema migrations outside of a transaction by @robertSt7 in #2104
• [Bug] Stop grid exports from slowing down with every collected element by @robertSt7 in #2105
• [Bug] Stop grid exports from slowing down with every collected element (backport #2105 to 2025.4) by @robertSt7 in #2111
• [Documents] Set the default controller of new documents per document type (backport #2101 to 2025.4) by @robertSt7 in #2110
• [Bug] Resolve the target of cloned child elements without a regex by @robertSt7 in #2112
• [Test] Fix ExportDataCollectionHandlerTest after the 2025.4 forward-merge by @robertSt7 in #2115
• [Bug] Do not let an unreachable Mercure hub roll back the job run and close the EntityManager by @robertSt7 in #2116
• [Bug] Respect workflow place permissions in the data object detail permissions by @robertSt7 in #2118
• [Bug] Fixes pimcore/platform-version#467: Key the element reference cache by type as well as id (2026.3) by @robertSt7 in #2109
• [Bug] Create the saved search elementType column on a fresh install by @kingjia90 in #2114
• [Bug] Grid column collectors: reset collected columns on every call by @kingjia90 in #2130
• [Bug] Keep the collected export rows out of the job run by @robertSt7 in #2129
• [Bug] Sort folders before assets in the asset tree by @wwidergoldpimcore in #2127
• [Bug] Export all rows in custom report CSV export (2025.4 backport) by @jcPimcore in #2134
• Load optimized relation fields in the object detail without instantiating the related elements by @robertSt7 in #2098

Full Changelog: v2026.3.2...v2026.3.3