4.0.10

Changed

• Updated menu deletion confirmations on multi-site installs to clarify that the menu and all its nodes will be deleted across all sites.

Fixed

• Fixed duplicate nodes being created when retrying an add after its response was lost.
• Fixed category and asset pickers offering content outside the editor’s view permissions.
• Fixed the menu builder overflowing narrow mobile screens.
• Fixed Dynamic menu rendering omitting projected children.
• Fixed entry pickers offering sources and entries outside the editor’s view permissions.
• Fixed invalid menu limits being saved instead of displaying validation errors.
• Fixed cache duration validation errors not appearing beside the setting.
• Fixed an authorization bypass vulnerability.
• Fixed reading linked node URLs issuing a separate element query for each node, including cached menus, while preserving independent Craft URL handlers, draft assignments, hydration callback changes, and custom query indexing configured during preparation (#477).
• Fixed moving nodes in a menu with level limits causing subsequent edits or staged deletions in other menus to fail capacity validation.