4.0.8

Added

• Added a Dynamic node setting for placing projected items before or after manually added children (#469).

Changed

• Updated Craft and Craft Commerce API usage to avoid deprecated calls (#472).
• Clarified how Dynamic nodes remain in the hierarchy, include projected children by default, and work with recursive rendering (#469).

Fixed

• Fixed a medium-severity information disclosure vulnerability.
• Fixed menu publishing skipping custom node validation for structure-only changes, hiding validation or structure-move error messages, and incompletely restoring rejected structure drafts after reload (#370).
• Fixed rapid node selection sometimes clearing existing selections, and made Shift-click range selection reliable for node checkboxes (#468).
• Fixed stale builder-session references and incomplete Dynamic nodes leaving editable nodes read-only, and made genuinely read-only node controls consistently non-interactive (#470).
• Fixed reordering a menu node replaying the entire tree through Craft’s structure service and triggering duplicate cache revalidation events (#471).
• Fixed Dynamic node projected children being omitted when accessing the node's children property (#469).
• Fixed propagated linked nodes retaining the source site's title instead of the linked element's translated title (#467).
• Fixed field-layout refreshes allowing editors to substitute linked elements outside their current authoring scope.
• Fixed custom node title translation keys rendering through an unrestricted Twig environment.
• Fixed Craft's native duplicate action bypassing the menu's node authoring rules.
• Fixed URL breadcrumbs exposing metadata for content that is not publicly available.
• Fixed linked node authoring bypassing Craft's site and extension view authorization.
• Fixed Dynamic node conditions overriding their authorized source, site, and content-status scope.
• Fixed site-limited menu settings editors being able to change menu availability or content on other sites.