Bump Umbraco.Cms from 13.0.0 to 13.9.2 #1

Improper API access control allows low-privilege users access to data type functionality - Advisory GHSA-6ffg-mjg7-585x
Restricted editor user can delete media item or access unauthorized content - Advisory GHSA-wx5h-wqfq-v698
Updated ImageSharp dependency to patched version following CVE-2025-27598

New Contributors

@RolandKock made their first contribution in V13: bumped imagesharp to prevent CVE-2025-27598 umbraco/Umbraco-CMS#18602

Full Changelog: umbraco/Umbraco-CMS@release-13.7.0...release-13.7.1

13.7.0 What's Changed Since 13.7.0-rc

There have been no further updates since the 13.7.0-rc release.

Full Changelog: umbraco/Umbraco-CMS@release-13.7.0-rc...release-13.7.0

What's Changed Since The Previous Release (13.6.0)

Lucene Package Update to Address CVE-2024-43383 by @amsclark in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
Allow skipSelect blueprints only when one blueprint exists by @callumbwhyte in Allow skipSelect blueprints only when one blueprint exists umbraco/Umbraco-CMS#17818
Fix create child issue in list view with infinite editor (#13355). by @mvennevold in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
Replaced deprecated navigator.platform with navigator.userAgent for platform detection. by @manutdkid77 in Replaced deprecated navigator.platform with navigator.userAgent for platform detection. umbraco/Umbraco-CMS#17373
Handles migration case where an expected constraint is renamed but the constraint does not exist by @AndyButland in Handles migration case where an expected constraint is renamed but the constraint does not exist umbraco/Umbraco-CMS#18063
Add clientside validation to webhook events by @kjac in Add clientside validation to webhook events umbraco/Umbraco-CMS#18089
Make it possible to reset media picker crops by @kjac in Make it possible to reset media picker crops umbraco/Umbraco-CMS#18110
Redirect to the published URL when exiting preview by @kjac in Redirect to the published URL when exiting preview umbraco/Umbraco-CMS#18114
Added Resharper test assemblies to exclude list on TypeFinder by @AndyButland in Added Resharper test assemblies to exclude list on TypeFinder umbraco/Umbraco-CMS#18145
Do not allow editing read-only properties by clicking their labels by @kjac in Do not allow editing read-only properties by clicking their labels umbraco/Umbraco-CMS#18152
Provides an option to remove the inessential version number from the generated models by @AndyButland in Provides an option to remove the inessential version number from the generated models umbraco/Umbraco-CMS#18081
Excluded tags from trashed content by @AndyButland in Excluded tags from trashed content umbraco/Umbraco-CMS#18164
More robust resolving of Delivery API redirects by @kjac in More robust resolving of Delivery API redirects umbraco/Umbraco-CMS#18160
Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss by @TimBoonstra in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
Update auth.element.ts by @garpunkal in Update auth.element.ts umbraco/Umbraco-CMS#18192
Enforce user start nodes for media uploads through the RTE by @kjac in Enforce user start nodes for media uploads through the RTE umbraco/Umbraco-CMS#18204
Show notifications menu only to users with permission for the feature by @AndyButland in Show notifications menu only to users with permission for the feature umbraco/Umbraco-CMS#18184
V13: Fix members while using basic auth. by @nikolajlauridsen in V13: Fix members while using basic auth. umbraco/Umbraco-CMS#18206
Set Smidge cachebuster type by @SimonHartfield in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
Cache null dictionary values by key by @callumbwhyte in Cache null dictionary values by key umbraco/Umbraco-CMS#15576
Review: Allow Duplicate Email for Members by @jasont0101 in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202
Fix issues in newly added buttongroup localization by @Migaroez in Fix issues in newly added buttongroup localization umbraco/Umbraco-CMS#18254
Fix 11643 by @nielslyngsoe in Fix 11643 umbraco/Umbraco-CMS#18257
Add validation to prevent update of a user or member to an invalid username (13) by @AndyButland in Add validation to prevent update of a user or member to an invalid username (13) umbraco/Umbraco-CMS#18261
Avoid an exception on sign out when the principal is populated from an incomplete external login by @AndyButland in Avoid an exception on sign out when the principal is populated from an incomplete external login umbraco/Umbraco-CMS#18078
Prevents folder selection in media picker when used from the multi URL picker by @AndyButland in Prevents folder selection in media picker when used from the multi URL picker umbraco/Umbraco-CMS#18288
URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule by @AndyButland in URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule umbraco/Umbraco-CMS#18142
Fixed userResource request to get all users by @AndyButland in Fixed userResource request to get all users umbraco/Umbraco-CMS#18105
Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock by @AndyButland in Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock umbraco/Umbraco-CMS#18151

Full Changelog: umbraco/Umbraco-CMS@release-13.6.0...release-13.7.0

New Contributors

@amsclark made their first contribution in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
@mvennevold made their first contribution in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
@TimBoonstra made their first contribution in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
@SimonHartfield made their first contribution in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
@jasont0101 made their first contribution in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202

13.7.0-rc

What's Changed

Lucene Package Update to Address CVE-2024-43383 by @amsclark in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
Allow skipSelect blueprints only when one blueprint exists by @callumbwhyte in Allow skipSelect blueprints only when one blueprint exists umbraco/Umbraco-CMS#17818
Fix create child issue in list view with infinite editor (#13355). by @mvennevold in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
Replaced deprecated navigator.platform with navigator.userAgent for platform detection. by @manutdkid77 in Replaced deprecated navigator.platform with navigator.userAgent for platform detection. umbraco/Umbraco-CMS#17373
Handles migration case where an expected constraint is renamed but the constraint does not exist by @AndyButland in Handles migration case where an expected constraint is renamed but the constraint does not exist umbraco/Umbraco-CMS#18063
Add clientside validation to webhook events by @kjac in Add clientside validation to webhook events umbraco/Umbraco-CMS#18089
Make it possible to reset media picker crops by @kjac in Make it possible to reset media picker crops umbraco/Umbraco-CMS#18110
Redirect to the published URL when exiting preview by @kjac in Redirect to the published URL when exiting preview umbraco/Umbraco-CMS#18114
Added Resharper test assemblies to exclude list on TypeFinder by @AndyButland in Added Resharper test assemblies to exclude list on TypeFinder umbraco/Umbraco-CMS#18145
Do not allow editing read-only properties by clicking their labels by @kjac in Do not allow editing read-only properties by clicking their labels umbraco/Umbraco-CMS#18152
Provides an option to remove the inessential version number from the generated models by @AndyButland in Provides an option to remove the inessential version number from the generated models umbraco/Umbraco-CMS#18081
Excluded tags from trashed content by @AndyButland in Excluded tags from trashed content umbraco/Umbraco-CMS#18164
More robust resolving of Delivery API redirects by @kjac in More robust resolving of Delivery API redirects umbraco/Umbraco-CMS#18160
Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss by @TimBoonstra in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
Update auth.element.ts by @garpunkal in Update auth.element.ts umbraco/Umbraco-CMS#18192
Enforce user start nodes for media uploads through the RTE by @kjac in Enforce user start nodes for media uploads through the RTE umbraco/Umbraco-CMS#18204
Show notifications menu only to users with permission for the feature by @AndyButland in Show notifications menu only to users with permission for the feature umbraco/Umbraco-CMS#18184
V13: Fix members while using basic auth. by @nikolajlauridsen in V13: Fix members while using basic auth. umbraco/Umbraco-CMS#18206
Set Smidge cachebuster type by @SimonHartfield in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
Cache null dictionary values by key by @callumbwhyte in Cache null dictionary values by key umbraco/Umbraco-CMS#15576
Review: Allow Duplicate Email for Members by @jasont0101 in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202
Fix issues in newly added buttongroup localization by @Migaroez in Fix issues in newly added buttongroup localization umbraco/Umbraco-CMS#18254
Fix 11643 by @nielslyngsoe in Fix 11643 umbraco/Umbraco-CMS#18257
Add validation to prevent update of a user or member to an invalid username (13) by @AndyButland in Add validation to prevent update of a user or member to an invalid username (13) umbraco/Umbraco-CMS#18261
Avoid an exception on sign out when the principal is populated from an incomplete external login by @AndyButland in Avoid an exception on sign out when the principal is populated from an incomplete external login umbraco/Umbraco-CMS#18078
Prevents folder selection in media picker when used from the multi URL picker by @AndyButland in Prevents folder selection in media picker when used from the multi URL picker umbraco/Umbraco-CMS#18288
URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule by @AndyButland in URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule umbraco/Umbraco-CMS#18142
Fixed userResource request to get all users by @AndyButland in Fixed userResource request to get all users umbraco/Umbraco-CMS#18105
Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock by @AndyButland in Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock umbraco/Umbraco-CMS#18151

New Contributors

@amsclark made their first contribution in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
@mvennevold made their first contribution in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
@TimBoonstra made their first contribution in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
@SimonHartfield made their first contribution in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
@jasont0101 made their first contribution in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202

Full Changelog: umbraco/Umbraco-CMS@release-13.6.0...release-13.7.0-rc

13.6.0 What's Changed

Templates can still be editable when using runtime mode Production bug fixed #16622 by @nick-hoang in Templates can still be editable when using runtime mode Production bug fixed #16622 umbraco/Umbraco-CMS#16923
Avoid concurrent build of Umbraco.JsonSchema tool and add execution timeouts to Exec build tasks by @ronaldbarendse in Avoid concurrent build of Umbraco.JsonSchema tool and add execution timeouts to Exec build tasks umbraco/Umbraco-CMS#17006
No longer shows success message if content moving is cancelled by @miguelcrpinto in No longer shows success message if content moving is cancelled umbraco/Umbraco-CMS#15051
Fix: V13 ensure data change is detected on embedding media (16806) by @nielslyngsoe in Fix: V13 ensure data change is detected on embedding media (16806) umbraco/Umbraco-CMS#17008
Content.EditorDirectiveController: added formSubmittedValidationFailed broadcast to prevent fields to stay disabled by @Yinzy00 in Content.EditorDirectiveController: added formSubmittedValidationFailed broadcast to prevent fields to stay disabled umbraco/Umbraco-CMS#17018
Fix null reference exception in CacheValues.For when building the CompositeStringStringKey by @Migaroez in Fix null reference exception in CacheValues.For when building the CompositeStringStringKey umbraco/Umbraco-CMS#17024
v13.5 - New Swedish translation crashes Umbraco, removed duplicate areas. by @madsoulswe in v13.5 - New Swedish translation crashes Umbraco, removed duplicate areas. umbraco/Umbraco-CMS#17059
Update ImageSharpMiddlewareOption for fixing invalid width and height by @NguyenThuyLan in Update ImageSharpMiddlewareOption for fixing invalid width and height umbraco/Umbraco-CMS#17126
Fixed issue #17225. Extended RTE valid element configuration by @wwrobel in Fixed issue #17225. Extended RTE valid element configuration umbraco/Umbraco-CMS#17227
Fix greedy Install url detection by @Migaroez in Fix greedy Install url detection umbraco/Umbraco-CMS#17241
Fix ContentStore locking exceptions in async code by @ronaldbarendse in Fix ContentStore locking exceptions in async code umbraco/Umbraco-CMS#17246
Updated image sharp to a non vulnerable version by @bergmania in Updated image sharp to a non vulnerable version umbraco/Umbraco-CMS#17290
Fix for #17187, unlock form after unsuccessful save and publish by @JasonElkin in Fix for #17187, unlock form after unsuccessful save and publish umbraco/Umbraco-CMS#17285
V13: Use updated form components in the login form by @iOvergaard in V13: Use updated form components in the login form umbraco/Umbraco-CMS#17281
MNTP: Improve site and root context for dynamic root by @kjac in MNTP: Improve site and root context for dynamic root umbraco/Umbraco-CMS#17303
MNTP: Re-initialize contextual dialog options upon content creation by @kjac in MNTP: Re-initialize contextual dialog options upon content creation umbraco/Umbraco-CMS#17301
Issue 17128 - Fix GetMediaByPath when querying for media which has been uploaded with dimensions in the file name by @justin-nevitech in Issue 17128 - Fix GetMediaByPath when querying for media which has been uploaded with dimensions in the file name umbraco/Umbraco-CMS#17314
V10 updated message pack by @andr317c in V10 updated message pack umbraco/Umbraco-CMS#17320
V13 Updated version of messagepack by @andr317c in V13 Updated version of messagepack umbraco/Umbraco-CMS#17321
V13 QA Updated login tests to match locator by @andr317c in V13 QA Updated login tests to match locator umbraco/Umbraco-CMS#17334
Include create date in audit item by @nikolajlauridsen in Include create date in audit item umbraco/Umbraco-CMS#17447
Use TryParse when parsing ID from claims by @Oxygen-cl in Use TryParse when parsing ID from claims umbraco/Umbraco-CMS#17414
Add swiss languages as backoffice languages by @marwaldv in Add swiss languages as backoffice languages umbraco/Umbraco-CMS#17177
Block settings unavailable element type by @bjarnef in Block settings unavailable element type umbraco/Umbraco-CMS#16328
TinyMCE readonly mode by @bjarnef in TinyMCE readonly mode umbraco/Umbraco-CMS#17551
Don't shrink crops container on right side by @bjarnef in Don't shrink crops container on right side umbraco/Umbraco-CMS#16827
Run both cms and package migrations in upgrader by @nikolajlauridsen in Run both cms and package migrations in upgrader umbraco/Umbraco-CMS#17575
Added fix for label issues by @abjerner in Added fix for <umb-button-group /> label issues umbraco/Umbraco-CMS#15409
V13/bugfix/fix infinite editor stuck in create action 15945 by @ealse in V13/bugfix/fix infinite editor stuck in create action 15945 umbraco/Umbraco-CMS#16280
Fix RTE console error when blocks are not available by @kjac in Fix RTE console error when blocks are not available umbraco/Umbraco-CMS#17582
Sort manifest file paths alphabetically by @mattbrailsford in Sort manifest file paths alphabetically umbraco/Umbraco-CMS#14466
Handle "all slashes" routes by @kjac in Handle "all slashes" routes umbraco/Umbraco-CMS#17596
Add cache key to GetByUserName by @Zeegaan in Add cache key to GetByUserName umbraco/Umbraco-CMS#17350
V13: Dropzone, upload complete callback with processed file array by @leekelleher in V13: Dropzone, upload complete callback with processed file array umbraco/Umbraco-CMS#17631
Revert #14234 add update error message for DB connection failures by @kjac in Revert #14234 add update error message for DB connection failures umbraco/Umbraco-CMS#17612
Add ASCII file name conversion by @kjac in Add ASCII file name conversion umbraco/Umbraco-CMS#17580
V13: Lead char gets removed when reopening a link in the rich text editor by @iOvergaard in V13: Lead char gets removed when reopening a link in the rich text editor umbraco/Umbraco-CMS#17667
Fix PanicException: failed to get child with id= after updating content types by @ronaldbarendse in Fix PanicException: failed to get child with id= after updating content types umbraco/Umbraco-CMS#17702
Updated NuGet Packages for v13 by @bergmania in Updated NuGet Packages for v13 umbraco/Umbraco-CMS#17704
Add "user info" endpoint for the Delivery API by @kjac in Add "user info" endpoint for the Delivery API umbraco/Umbraco-CMS#17719
Warn about un-routable content at publish time by @kjac in Warn about un-routable content at publish time umbraco/Umbraco-CMS#17705
Add (un)publishing details to TreeChange notifications by @kjac in Add (un)publishing details to TreeChange notifications umbraco/Umbraco-CMS#17757
Make sure Examine dashboard still functions when an index is corrupt by @Migaroez in Make sure Examine dashboard still functions when an index is corrupt umbraco/Umbraco-CMS#17800
V13 Fixes #17646 where bold markdown does not work in a property description by @danlister in V13 Fixes #17646 where bold markdown does not work in a property description umbraco/Umbraco-CMS#17806
V13: Clear username cache by @Zeegaan in V13: Clear username cache umbraco/Umbraco-CMS#17815
V13: Allow anonymous calls for UmbLoginStatusController.HandleLogout action by @elit0451 in V13: Allow anonymous calls for UmbLoginStatusController.HandleLogout action umbraco/Umbraco-CMS#17807
Fix null exceptions when requesting specific content trough the backoffice APIs by @Migaroez in Fix null exceptions when requesting specific content trough the backoffice APIs umbraco/Umbraco-CMS#17846
V13: Add rcl files to static files tree by @Zeegaan in V13: Add rcl files to static files tree umbraco/Umbraco-CMS#17671
Make the Delivery API "ancestors" selector work with preview by @kjac in Make the Delivery API "ancestors" selector work with preview umbraco/Umbraco-CMS#17938
... (truncated)

13.6.0-rc2

What's Changed

Fixed issue #17225. Extended RTE valid element configuration by @wwrobel in Fixed issue #17225. Extended RTE valid element configuration umbraco/Umbraco-CMS#17227
Fix for #17187, unlock form after unsuccessful save and publish by @JasonElkin in Fix for #17187, unlock form after unsuccessful save and publish umbraco/Umbraco-CMS#17285
Use TryParse when parsing ID from claims by @Oxygen-cl in Use TryParse when parsing ID from claims umbraco/Umbraco-CMS#17414
Add swiss languages as backoffice languages by @marwaldv in Add swiss languages as backoffice languages umbraco/Umbraco-CMS#17177
Block settings unavailable element type by @bjarnef in Block settings unavailable element type umbraco/Umbraco-CMS#16328
Don't shrink crops container on right side by @bjarnef in Don't shrink crops container on right side umbraco/Umbraco-CMS#16827
Added fix for label issues by @abjerner in Added fix for <umb-button-group /> label issues umbraco/Umbraco-CMS#15409
V13/bugfix/fix infinite editor stuck in create action 15945 by @ealse in V13/bugfix/fix infinite editor stuck in create action 15945 umbraco/Umbraco-CMS#16280
Warn about un-routable content at publish time by @kjac in Warn about un-routable content at publish time umbraco/Umbraco-CMS#17705
Add (un)publishing details to TreeChange notifications by @kjac in Add (un)publishing details to TreeChange notifications umbraco/Umbraco-CMS#17757
Make sure Examine dashboard still functions when an index is corrupt by @Migaroez in Make sure Examine dashboard still functions when an index is corrupt umbraco/Umbraco-CMS#17800
V13 Fixes #17646 where bold markdown does not work in a property description by @danlister in V13 Fixes #17646 where bold markdown does not work in a property description umbraco/Umbraco-CMS#17806
V13: Clear username cache by @Zeegaan in V13: Clear username cache umbraco/Umbraco-CMS#17815
V13: Allow anonymous calls for UmbLoginStatusController.HandleLogout action by @elit0451 in V13: Allow anonymous calls for UmbLoginStatusController.HandleLogout action umbraco/Umbraco-CMS#17807
Fix null exceptions when requesting specific content trough the backoffice APIs by @Migaroez in Fix null exceptions when requesting specific content trough the backoffice APIs umbraco/Umbraco-CMS#17846
V13: Add rcl files to static files tree by @Zeegaan in V13: Add rcl files to static files tree umbraco/Umbraco-CMS#17671
Make the Delivery API "ancestors" selector work with preview by @kjac in Make the Delivery API "ancestors" selector work with preview umbraco/Umbraco-CMS#17938
Corrected property names and structure used in JSON schema generation for configuration of default data to install. by @AndyButland in Corrected property names and structure used in JSON schema generation for configuration of default data to install. umbraco/Umbraco-CMS#17946
Added integration test to verify the Delivery API contract by @kjac in Added integration test to verify the Delivery API contract umbraco/Umbraco-CMS#17949
V13 QA updated locator for failing E2E test by @andr317c in V13 QA updated locator for failing E2E test umbraco/Umbraco-CMS#17825
Allow filtering for multiple content types by @kjac in Allow filtering for multiple content types umbraco/Umbraco-CMS#17960
V13: Show validation error, when saving invalid media by @Zeegaan in V13: Show validation error, when saving invalid media umbraco/Umbraco-CMS#17961
Improve YSOD rendering in the client by @Migaroez in Improve YSOD rendering in the client umbraco/Umbraco-CMS#17940
V13: Update @umbraco-ui/uui to 1.12.2 by @iOvergaard in V13: Update @umbraco-ui/uui to 1.12.2 umbraco/Umbraco-CMS#17972
Add Vary header to all content API operations by @kjac in Add Vary header to all content API operations umbraco/Umbraco-CMS#17962
Resets send to approval dialog on close such that when re-opening the selection and operation can still be triggered. by @AndyButland in Resets send to approval dialog on close such that when re-opening the selection and operation can still be triggered. umbraco/Umbraco-CMS#17956
V13: Update @microsoft/signalr from 7.0.12 to 8.0.7 by @iOvergaard in V13: Update @microsoft/signalr from 7.0.12 to 8.0.7 umbraco/Umbraco-CMS#17973
add missing new media auditTrail translation by @Migaroez in add missing new media auditTrail translation umbraco/Umbraco-CMS#17981
Enforce the "Save and preview" button after when switching content app by @kjac in Enforce the "Save and preview" button after when switching content app umbraco/Umbraco-CMS#17985
Make the RTE handle inline elements gracefully for JSON by @kjac in Make the RTE handle inline elements gracefully for JSON umbraco/Umbraco-CMS#17983
Fix: only fire event when instance is available (issue 17847) by @nielslyngsoe in Fix: only fire event when instance is available (issue 17847) umbraco/Umbraco-CMS#17987
Do not show "Save and preview" by default by @kjac in Do not show "Save and preview" by default umbraco/Umbraco-CMS#17986
Fix: Do not re-map schedule modal on error as it leads to broken bindings by @Migaroez in Fix: Do not re-map schedule modal on error as it leads to broken bindings umbraco/Umbraco-CMS#17990
Added a maxlength setting to the regular expression pattern field by @AndyButland in Added a maxlength setting to the regular expression pattern field umbraco/Umbraco-CMS#17982
V13 QA added parallelization for E2E tests by @andr317c in V13 QA added parallelization for E2E tests umbraco/Umbraco-CMS#17995

New Contributors

@wwrobel made their first contribution in Fixed issue #17225. Extended RTE valid element configuration umbraco/Umbraco-CMS#17227
@Oxygen-cl made their first contribution in Use TryParse when parsing ID from claims umbraco/Umbraco-CMS#17414

Full Changelog: umbraco/Umbraco-CMS@release-13.6.0-rc...release-13.6.0-rc2

13.6.0-rc

What's Changed

Templates can still be editable when using runtime mode Production bug fixed #16622 by @nick-hoang in Templates can still be editable when using runtime mode Production bug fixed #16622 umbraco/Umbraco-CMS#16923
Avoid concurrent build of Umbraco.JsonSchema tool and add execution timeouts to Exec build tasks by @ronaldbarendse in Avoid concurrent build of Umbraco.JsonSchema tool and add execution timeouts to Exec build tasks umbraco/Umbraco-CMS#17006
No longer shows success message if content moving is cancelled by @miguelcrpinto in No longer shows success message if content moving is cancelled umbraco/Umbraco-CMS#15051
Fix: V13 ensure data change is detected on embedding media (16806) by @nielslyngsoe in Fix: V13 ensure data change is detected on embedding media (16806) umbraco/Umbraco-CMS#17008
Content.EditorDirectiveController: added formSubmittedValidationFailed broadcast to prevent fields to stay disabled by @Yinzy00 in Content.EditorDirectiveController: added formSubmittedValidationFailed broadcast to prevent fields to stay disabled umbraco/Umbraco-CMS#17018
Fix null reference exception in CacheValues.For when building the CompositeStringStringKey by @Migaroez in Fix null reference exception in CacheValues.For when building the CompositeStringStringKey umbraco/Umbraco-CMS#17024
v13.5 - New Swedish translation crashes Umbraco, removed duplicate areas. by @madsoulswe in v13.5 - New Swedish translation crashes Umbraco, removed duplicate areas. umbraco/Umbraco-CMS#17059
Update ImageSharpMiddlewareOption for fixing invalid width and height by @NguyenThuyLan in Update ImageSharpMiddlewareOption for fixing invalid width and height umbraco/Umbraco-CMS#17126
Fix greedy Install url detection by @Migaroez in Fix greedy Install url detection umbraco/Umbraco-CMS#17241
Fix ContentStore locking exceptions in async code by @ronaldbarendse in Fix ContentStore locking exceptions in async code umbraco/Umbraco-CMS#17246
Updated image sharp to a non vulnerable version by @bergmania in Updated image sharp to a non vulnerable version umbraco/Umbraco-CMS#17290
V13: Use updated form components in the login form by @iOvergaard in V13: Use updated form components in the login form umbraco/Umbraco-CMS#17281
MNTP: Improve site and root context for dynamic root by @kjac in MNTP: Improve site and root context for dynamic root umbraco/Umbraco-CMS#17303
MNTP: Re-initialize contextual dialog options upon content creation by @kjac in MNTP: Re-initialize contextual dialog options upon content creation umbraco/Umbraco-CMS#17301
Issue 17128 - Fix GetMediaByPath when querying for media which has been uploaded with dimensions in the file name by @justin-nevitech in Issue 17128 - Fix GetMediaByPath when querying for media which has been uploaded with dimensions in the file name umbraco/Umbraco-CMS#17314
V10 updated message pack by @andr317c in V10 updated message pack umbraco/Umbraco-CMS#17320
V13 Updated version of messagepack by @andr317c in V13 Updated version of messagepack umbraco/Umbraco-CMS#17321
V13 QA Updated login tests to match locator by @andr317c in V13 QA Updated login tests to match locator umbraco/Umbraco-CMS#17334
Include create date in audit item by @nikolajlauridsen in Include create date in audit item umbraco/Umbraco-CMS#17447
TinyMCE readonly mode by @bjarnef in TinyMCE readonly mode umbraco/Umbraco-CMS#17551
Run both cms and package migrations in upgrader by @nikolajlauridsen in Run both cms and package migrations in upgrader umbraco/Umbraco-CMS#17575
Fix RTE console error when blocks are not available by @kjac in Fix RTE console error when blocks are not available umbraco/Umbraco-CMS#17582
Sort manifest file paths alphabetically by @mattbrailsford in Sort manifest file paths alphabetically umbraco/Umbraco-CMS#14466
Handle "all slashes" routes by @kjac in Handle "all slashes" routes umbraco/Umbraco-CMS#17596
Add cache key to GetByUserName by @Zeegaan in Add cache key to GetByUserName umbraco/Umbraco-CMS#17350
V13: Dropzone, upload complete callback with processed file array by @leekelleher in V13: Dropzone, upload complete callback with processed file array umbraco/Umbraco-CMS#17631
Revert #14234 add update error message for DB connection failures by @kjac in Revert #14234 add update error message for DB connection failures umbraco/Umbraco-CMS#17612
Add ASCII file name conversion by @kjac in Add ASCII file name conversion umbraco/Umbraco-CMS#17580
V13: Lead char gets removed when reopening a link in the rich text editor by @iOvergaard in V13: Lead char gets removed when reopening a link in the rich text editor umbraco/Umbraco-CMS#17667
Fix PanicException: failed to get child with id= after updating content types by @ronaldbarendse in Fix PanicException: failed to get child with id= after updating content types umbraco/Umbraco-CMS#17702
Updated NuGet Packages for v13 by @bergmania in Updated NuGet Packages for v13 umbraco/Umbraco-CMS#17704
Add "user info" endpoint for the Delivery API by @kjac in Add "user info" endpoint for the Delivery API umbraco/Umbraco-CMS#17719

New Contributors

@nick-hoang made their first contribution in Templates can still be editable when using runtime mode Production bug fixed #16622 umbraco/Umbraco-CMS#16923

Full Changelog: umbraco/Umbraco-CMS@release-13.5.2...release-13.6.0-rc

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

--- updated-dependencies: - dependency-name: Umbraco.Cms dependency-version: 13.9.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

tristanjthompson · 2025-10-06T08:26:35Z

Won't do - these are minimum versions - it's down to the package installer to make sure they're on a patched version

dependabot · 2025-10-06T08:26:38Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Bump Umbraco.Cms from 13.0.0 to 13.9.2

10f93fc

--- updated-dependencies: - dependency-name: Umbraco.Cms dependency-version: 13.9.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Oct 6, 2025

tristanjthompson closed this Oct 6, 2025

dependabot bot deleted the dependabot/nuget/src/DeliveryApiModelMapper.TestSite/Umbraco.Cms-13.9.2 branch October 6, 2025 08:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump Umbraco.Cms from 13.0.0 to 13.9.2 #1

Bump Umbraco.Cms from 13.0.0 to 13.9.2 #1

Uh oh!

dependabot bot commented on behalf of github Oct 6, 2025

Uh oh!

tristanjthompson commented Oct 6, 2025

Uh oh!

dependabot bot commented on behalf of github Oct 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump Umbraco.Cms from 13.0.0 to 13.9.2 #1

Bump Umbraco.Cms from 13.0.0 to 13.9.2 #1

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 6, 2025

13.9.2

🔒 Security updates

13.9.1

What's Changed

🐛 Bug Fixes

13.9.0

What's Changed Since 13.9.0-rc

🐛 Bug Fixes

What's Changed Since The Previous Release (13.8.1)

📦 Dependencies

🐛 Bug Fixes

New Contributors

13.9.0-rc

What's Changed

📦 Dependencies

🐛 Bug Fixes

New Contributors

13.8.1

🔒 Security updates

13.8.0

What's Changed Since 13.8.0-rc

🐛 Bug Fixes

What's Changed Since The Previous Release (13.7.2)

📦 Dependencies

🚀 Backported Features

🐛 Bug Fixes

13.8.0-rc

What's Changed

📦 Dependencies

🚀 Backported Features

🐛 Bug Fixes

13.7.2

Changes

🐛 Bug Fixes

13.7.1

Changes

Security updates

New Contributors

13.7.0

What's Changed Since 13.7.0-rc

What's Changed Since The Previous Release (13.6.0)

New Contributors

13.7.0-rc

What's Changed

New Contributors

13.6.0

What's Changed

13.6.0-rc2

What's Changed

New Contributors

13.6.0-rc

What's Changed

New Contributors

Uh oh!

tristanjthompson commented Oct 6, 2025

Uh oh!

dependabot bot commented on behalf of github Oct 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants