Release 5.6.15

5.6.15 (2026-11-09)

Bug Fixes

• contentbrowser: Fix preview column so when it is bigger than the viewport it would be scrollable. (d314871)

• pat-contentbrowser: don't fire change while rendering the initial selection (33fd99c)

  The selected-items effect wrote the initial value back to the input on mount
  and dispatched a change event for it, so pat-formunloadalert marked every
  untouched form with a content browser field as edited and warned when
  leaving the page.

  Only write and dispatch when the value actually differs.

  (cherry picked from commit 2ae9d77)

Technical Changes

• tests: compile Svelte components for Jest without svelte-jester (5cb2081)

  svelte-jester refuses to run in Jest's CJS mode, so any test that mounts
  a .svelte component fails on this branch. Use the custom transformer from
  master instead: compile with the svelte compiler and convert the emitted
  ESM to CommonJS for Jest's default runtime. Needed to backport the
  pat-contentbrowser tests.

Maintenance

• deps: Upgrade TinyMCE to 8.9.3, Patternslib to 9.11.1, Svelte to 5.57.3. (016b6bf)

  TinyMCE 8.9.3 fixes a stored XSS in the media plugin (GHSA-mf2p-h6hf-fcwm).
  Patternslib 9.11.1 pulls in DOMPurify 3.4.17.
  Also updates tinymce-i18n to 26.11.2 and bootstrap-icons to 1.13.2.

  Assisted by: Claude (claude-fable-5-1)

• Let pnpm trust @patternslib packages. (3d072ad)

  @Patternslib projects are close to the Plone community and can be
  trusted. Often a fix in @patternslib/dev or @patternslib/patternslib is
  done to fix a Problem in Mockup, so we need up-to-date releases.