17.7.0-rc

What's Changed

🙌 Notable Changes

• Installer: Write connection string to the final available appsettings.*.json (closes #21833) by @AndyButland in #22817

📦 Dependencies

• Dependencies: Update backoffice npm packages to latest minors and patches (#23429) by @iOvergaard in #23498
• Dependencies: Update Tiptap to 3.29.2 by @leekelleher in #23562
• Dependencies: Update NuGet packages to latest minor and patch versions (v17) by @AndyButland in #23680
• Dependencies: Update NuGet packages to latest minor and patch versions by @AndyButland in #23732

🚀 New Features

• Bulk Actions: Show progress in a shared dialog for bulk publish, unpublish, delete, move & copy (closes #20797) by @iOvergaard in #21215
• Extension API: Add userEntryPoint extension type (closes #19485) by @iOvergaard in #23409
• Recycle bin: Support restoring a document or media item without its descendants at the service level (closes #23417) by @AndyButland in #23448
• Media Picker: Show ancestor breadcrumb path in search results table view (closes #23101) by @AndyButland in #23116
• Pickers: Show the number of selected items in the tree and collection item picker modals by @madsrasmussen in #23606
• Tree Item Picker: Make table rows and cards with children navigable in pickers during selection by @madsrasmussen in #23593
• Pickers: Split browse and search into tabs by @madsrasmussen in #23617
• Media: drag n drop CTA for Collections and Pickers (Closes #18332) by @Abdjulaziz in #22739
• Collections: Remember the view, filter, ordering and page of a collection (closes #22418) by @madsrasmussen in #23571
• Document Tree: Add card and table views by @madsrasmussen in #23642
• Management API: Add hasChildren to document and media collection responses by @AndyButland in #23685

🚤 Performance

• Avoid some string allocations by @Henr1k80 in #23402
• Normalize culture code casing in SetCultureInfo and SetPublishInfo by @ronaldbarendse in #23425
• Backoffice Performance: Defer decorator controller creation to hostConnected by @iOvergaard in #22519
• Media: Narrow sibling name-uniqueness fetch so writes scale on large libraries (closes #23446) by @AndyButland in #23447
• Published cache: Populate the ID/key map from seeded and cached content (closes #23583) by @AndyButland in #23586
• Tree: Increase child page size to 100 by @madsrasmussen in #23585
• Tree: Avoid reloads on no-change config updates by @nielslyngsoe in #23670
• Performance: Only load server information once when instantiating the backoffice by @nielslyngsoe in #23673
• Content Workspace: get languages from context by @nielslyngsoe in #23668
• Published Cache: Stop writing unread member rows to the database cache (closes #23070) by @AndyButland in #23730
• Content & Media: Batch cold read-through for Children()/Descendants() traversal by @AndyButland in #23358
• Micro-optimisation: Speed & memory improvements for CompositeStringStringKey by @patrickdemooij9 in #23471
• Micro-optimisations: Avoid redundant allocations in file name and log filter by @patrickdemooij9 in #23474
• Micro-optimisations: Improve memory usage for ReplaceMany string extension method by @patrickdemooij9 in #23483
• Micro-optimisation: Avoid Activator.CreateInstance when creating MediaWithCrops by @patrickdemooij9 in #23496
• Micro-optimisations: Delivery API node parse improvement by @patrickdemooij9 in #23506

🐛 Bug Fixes

• Member Types: Fixed issue with missing icon for workspace design view by @abjerner in #23391
• Extension API: Guard against a cleared manifest when an extension is unregistered mid-initialization (closes #23384) by @AndyButland in #23395
• Date Time Picker: Honour min/max config on the time-zone-aware editors (closes #23372) by @AndyButland in #23373
• Migrations: Fix errors upgrading v13 databases with block editors to v17 by @AndyButland in #23401
• Current User: Re-fetch the current user when authorization is regained after a session timeout by @iOvergaard in #23408
• Collection Views: Accumulate table selection across pages (closes #23403) by @rickbutterfield in #23406
• Content Workspaces: Redirect stale variant workspace URLs when the content type variance changes by @iOvergaard in #23385
• Imaging: Respect ImageFileTypes configuration in management API factories by @iOvergaard in #23413
• Users: Validate avatar uploads against configured image file types by @iOvergaard in #23415
• Maindom: Broadcast cache instructions without maindom by @Zeegaan in #23421
• Scoping: Restore LogIncompletedScopes warning for uncompleted child scopes (closes #15243) by @AndyButland in #23424
• Block Workspace: Guard block label render against a destroyed workspace (closes #22745) by @iOvergaard in #23449
• Backoffice: Support running in insecure browser contexts (plain HTTP on IP addresses) by @iOvergaard in #23426
• Migrations: Migrate settings values for block editors when a block has no content values (closes #23392) by @AndyButland in #23404
• Logging: Prevent session-id log enricher recursion / stack overflow (closes #16744) by @AndyButland in #23423
• Preview: Refresh external preview tabs and their token on repeat preview (closes #21820) by @iOvergaard in #23450
• Content Types: Fix stale published cache when property variance changes without content type variance changing by @lauraneto in #23445
• Routing: Add close button to access denied route when displayed in modal (closes #23451) by @ShekharTarare in #23456
• Block Editors: Preserve published state of property-less blocks on upgrade (closes #23379) by @AndyButland in #23383
• Localization: Fix punctuation in resetFocalPoint string by @bjarnef in #23479
• Block Grid: Use the content element type name in the invalid-location tag (closes #23092) by @iOvergaard in #23511
• Confirm Modal: Escaped special characters in item names by @leekelleher in #23542
• Tiptap RTE: Load configured stylesheets regardless of extension styles (closes #21819) by @leekelleher in #23497
• Tiptap RTE: Render umbLink via MarkView to stop data-router-slot attribute leaking into stored HTML by @leekelleher in #23488
• Tiptap RTE: Preserve block-level elements nested in <div> containers (closes #22654) by @leekelleher in #23489
• Localization: Danish translation for BlockEditor confirmDeleteBlockTitle by @nielslyngsoe in #23543
• Basic Authentication: Allow preview requests from an authenticated back-office user (closes #23475) by @AndyButland in #23539
• Migrations: Only rebuild the published cache for migration plans that request it (closes #23537) by @AndyButland in #23533
• Imaging: Enforce max width/height when HMAC is configured by @AndyButland in #23521
• Management API: Generate valid operation IDs for minor API versions, and upgrade @hey-api/openapi-ts by @iOvergaard in #23499
• Tiptap RTE: Prevent duplicate toolbar items when reordering a newly dragged item (closes #23524) by @AndyButland in #23538
• Tiptap RTE: Fix crash when content contains an embedded media node by @leekelleher in #23563
• Publishing: Save the document before publishing it with descendants (closes #14925) by @iOvergaard in #23554
• Content Types: Fix MovePropertyType orphaning the property when moving it to no group (closes #23481) by @AndyButland in #23493
• SignalR Events: Filter document and media notifications by the recipient's start-node access by @AndyButland in #23555
• Tiptap RTE: Retain media folder context across picker modals (closes #23367) by @leekelleher in #23507
• Preview: Add the CSP nonce to the injected preview badge script (closes #23530) by @iOvergaard in #23560
• Block editors: Pair inner block values by block key when merging variant data (closes #23525) by @iOvergaard in #23527
• Segments: Fix mandatory segment property validation (closes #23576) by @kjac in #23587
• Content type designer: add root property styles by @nielslyngsoe in #23611
• Localization: Restore from recycle bin and image crops property editor by @Lantzify in #23621
• Pagination: 100% wide by @nielslyngsoe in #23640
• @noonand made their first contribution in #23655
• Log Viewer: Send log viewer date range as local-day instants and honour time portions (closes #14710) by @readingdancer in #23460
• Blocks: Inline Editing Context API Race Condition (Closes #22444) by @nielslyngsoe in #23610
• Routing: Don't retain the fallback default culture captured during an upgrade boot (closes #22581) by @AndyButland in #23653
• Property Context: proper observation cleanup by @nielslyngsoe in #23674
• Segments: Handle segment values for IsPropertyValid by @kjac in #23691
• Migrations: Don't rebuild the published cache after a failed migration plan (closes #23612) by @AndyButland in #23709
• @arnelirobles made their first contribution in #23599
• OpenIddict: Compare ConsentType and ApplicationType only when the descriptor sets them (follow-up to #23599) by @arnelirobles in #23727
• oEmbed: Fix HttpClient initialization race in OEmbedProviderBase (closes #23697) by @AndyButland in #23715
• Cleanup: refinement of cleanup localization by @nielslyngsoe in #23686
• Content Types: Allow editing compositions on document types that are inherited from (closes #23103) by @AndyButland in #23433
• Migrations: Resolve date default constraints by lookup rather than by convention (closes #23702) by @AndyButland in #23704
• Variant selector: avoid rendering fallback shortly by @nielslyngsoe in #23721
• Logging: Include the GUID key alongside the integer id in log messages (closes #23547) by @AndyButland in #23552
• Members: Indicate that withheld sensitive values exist instead of showing their defaults by @AndyButland in #23707
• Tiptap RTE: Fix table toolbar menu staying open after deleting table (closes #23658) by @andreaslborg in #23669
• TipTap RTE: Remove toolbar shadow before scroll (closes #23710) by @andreaslborg in #23716
• Block Grid: Fx clean up Blocks from Areas by @nielslyngsoe in #23726
• Document Link Picker: Scope search results to the selected/inherited culture by @madsrasmussen in #23761
• Migrations: Correct conversion of nested single block list values (for 17) (closes #23596) by @AndyButland in #23602
• Blocks: Inline editing hides the box if only a single box would be presented by @nielslyngsoe in #23692
• Fix: Block thumbnail picker restricted to image files by @TechPdo in #21848
• HTML Utilities: Ensure that space is added between all elements in StripHtmlTags by @arknu in #23245
• Navigation Cache: Prevent concurrent alias map corruption (closes #23518) by @ambientttt in #23519
• Localization: Add missing Swedish translations by @DanielToxic in #23567
• Code Block: style update by @nielslyngsoe in #23578
• Image Cropper: Fix button labels (closes #23604) by @idseefeld in #23605
• Navigation Cache: Change from HashSet<T> to ConcurrentHashSet<T> in NavigationSnapshot (closes #23577) by @arknu in #23615
• Localization: Update Danish translations by @bjarnef in #23622

🧪 Testing

• Tests: Cherrypick acceptance test changes from main to v17 by @andr317c in #23442
• Tests: Cherry-pick acceptance tests from main to v17 and fix for v17 UI by @andr317c in #23468
• Acceptance Tests: Export UiBaseLocators in acceptance-test-helpers by @rickbutterfield in #22401

🛡️ Code Quality, Documentation and Refactoring

• Extension Insights: Migrate Extension collection table view to table kind by @madsrasmussen in #22861
• Webhook Delivery: Migrate custom table collection view to generic table kind by @madsrasmussen in #22858
• Backoffice: Tidy up leftover elementName constants by @leekelleher in #23439
• AI Docs: Correct and trim solution- and project-scoped CLAUDE.md files by @AndyButland in #23480
• Code Quality: Resolved warnings by @lumikrynd in #23508
• Login: Remove @hey-api/openapi-ts from the login project (closes #23500) by @iOvergaard in #23501
• Chore: auto fix of eslint warnings by @nielslyngsoe in #23631
• ESLint: clean up old params by @nielslyngsoe in #23639
• ESlint: Auto fix of jsdocs warnings by @nielslyngsoe in #23647
• Chore: Better code readability by @nielslyngsoe in #23635
• Claude MD: update on when to comment by @nielslyngsoe in #23672
• Block Rich Text Editor Impl.: cleanup & deprecate by @nielslyngsoe in #23720
• Auth: Obsolete services already removed in V19 by @kjac in #23759
• Documentation: Add a warning that discourages the use of StripHtml for XSS prevention by @jorikvanveen in #23614

🧑‍💻 Developer Experience

• Config Repositories: Defer store-backed config observables via a shared base so consumers need not await initialized by @iOvergaard in #23416
• ESlint: Advice null controller alias by @nielslyngsoe in #23601
• Array State: support value to be undefined by @nielslyngsoe in #23584
• ESLint: switch to eslint-import-x by @nielslyngsoe in #23629

New Contributors

• @noonand made their first contribution in #23655
• @arnelirobles made their first contribution in #23599

Full Changelog: release-17.6.2...release-17.7.0-rc