Bump Umbraco.Cms.Api.Common and 2 others #2

Improper API access control allows low-privilege users access to data type functionality - Advisory GHSA-6ffg-mjg7-585x
Restricted editor user can delete media item or access unauthorized content - Advisory GHSA-wx5h-wqfq-v698
Updated ImageSharp dependency to patched version following CVE-2025-27598

New Contributors

@RolandKock made their first contribution in V13: bumped imagesharp to prevent CVE-2025-27598 umbraco/Umbraco-CMS#18602

Full Changelog: umbraco/Umbraco-CMS@release-13.7.0...release-13.7.1

13.7.0 What's Changed Since 13.7.0-rc

There have been no further updates since the 13.7.0-rc release.

Full Changelog: umbraco/Umbraco-CMS@release-13.7.0-rc...release-13.7.0

What's Changed Since The Previous Release (13.6.0)

Lucene Package Update to Address CVE-2024-43383 by @amsclark in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
Allow skipSelect blueprints only when one blueprint exists by @callumbwhyte in Allow skipSelect blueprints only when one blueprint exists umbraco/Umbraco-CMS#17818
Fix create child issue in list view with infinite editor (#13355). by @mvennevold in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
Replaced deprecated navigator.platform with navigator.userAgent for platform detection. by @manutdkid77 in Replaced deprecated navigator.platform with navigator.userAgent for platform detection. umbraco/Umbraco-CMS#17373
Handles migration case where an expected constraint is renamed but the constraint does not exist by @AndyButland in Handles migration case where an expected constraint is renamed but the constraint does not exist umbraco/Umbraco-CMS#18063
Add clientside validation to webhook events by @kjac in Add clientside validation to webhook events umbraco/Umbraco-CMS#18089
Make it possible to reset media picker crops by @kjac in Make it possible to reset media picker crops umbraco/Umbraco-CMS#18110
Redirect to the published URL when exiting preview by @kjac in Redirect to the published URL when exiting preview umbraco/Umbraco-CMS#18114
Added Resharper test assemblies to exclude list on TypeFinder by @AndyButland in Added Resharper test assemblies to exclude list on TypeFinder umbraco/Umbraco-CMS#18145
Do not allow editing read-only properties by clicking their labels by @kjac in Do not allow editing read-only properties by clicking their labels umbraco/Umbraco-CMS#18152
Provides an option to remove the inessential version number from the generated models by @AndyButland in Provides an option to remove the inessential version number from the generated models umbraco/Umbraco-CMS#18081
Excluded tags from trashed content by @AndyButland in Excluded tags from trashed content umbraco/Umbraco-CMS#18164
More robust resolving of Delivery API redirects by @kjac in More robust resolving of Delivery API redirects umbraco/Umbraco-CMS#18160
Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss by @TimBoonstra in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
Update auth.element.ts by @garpunkal in Update auth.element.ts umbraco/Umbraco-CMS#18192
Enforce user start nodes for media uploads through the RTE by @kjac in Enforce user start nodes for media uploads through the RTE umbraco/Umbraco-CMS#18204
Show notifications menu only to users with permission for the feature by @AndyButland in Show notifications menu only to users with permission for the feature umbraco/Umbraco-CMS#18184
V13: Fix members while using basic auth. by @nikolajlauridsen in V13: Fix members while using basic auth. umbraco/Umbraco-CMS#18206
Set Smidge cachebuster type by @SimonHartfield in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
Cache null dictionary values by key by @callumbwhyte in Cache null dictionary values by key umbraco/Umbraco-CMS#15576
Review: Allow Duplicate Email for Members by @jasont0101 in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202
Fix issues in newly added buttongroup localization by @Migaroez in Fix issues in newly added buttongroup localization umbraco/Umbraco-CMS#18254
Fix 11643 by @nielslyngsoe in Fix 11643 umbraco/Umbraco-CMS#18257
Add validation to prevent update of a user or member to an invalid username (13) by @AndyButland in Add validation to prevent update of a user or member to an invalid username (13) umbraco/Umbraco-CMS#18261
Avoid an exception on sign out when the principal is populated from an incomplete external login by @AndyButland in Avoid an exception on sign out when the principal is populated from an incomplete external login umbraco/Umbraco-CMS#18078
Prevents folder selection in media picker when used from the multi URL picker by @AndyButland in Prevents folder selection in media picker when used from the multi URL picker umbraco/Umbraco-CMS#18288
URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule by @AndyButland in URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule umbraco/Umbraco-CMS#18142
Fixed userResource request to get all users by @AndyButland in Fixed userResource request to get all users umbraco/Umbraco-CMS#18105
Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock by @AndyButland in Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock umbraco/Umbraco-CMS#18151

Full Changelog: umbraco/Umbraco-CMS@release-13.6.0...release-13.7.0

New Contributors

@amsclark made their first contribution in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
@mvennevold made their first contribution in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
@TimBoonstra made their first contribution in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
@SimonHartfield made their first contribution in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
@jasont0101 made their first contribution in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202

13.7.0-rc

What's Changed

Lucene Package Update to Address CVE-2024-43383 by @amsclark in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
Allow skipSelect blueprints only when one blueprint exists by @callumbwhyte in Allow skipSelect blueprints only when one blueprint exists umbraco/Umbraco-CMS#17818
Fix create child issue in list view with infinite editor (#13355). by @mvennevold in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
Replaced deprecated navigator.platform with navigator.userAgent for platform detection. by @manutdkid77 in Replaced deprecated navigator.platform with navigator.userAgent for platform detection. umbraco/Umbraco-CMS#17373
Handles migration case where an expected constraint is renamed but the constraint does not exist by @AndyButland in Handles migration case where an expected constraint is renamed but the constraint does not exist umbraco/Umbraco-CMS#18063
Add clientside validation to webhook events by @kjac in Add clientside validation to webhook events umbraco/Umbraco-CMS#18089
Make it possible to reset media picker crops by @kjac in Make it possible to reset media picker crops umbraco/Umbraco-CMS#18110
Redirect to the published URL when exiting preview by @kjac in Redirect to the published URL when exiting preview umbraco/Umbraco-CMS#18114
Added Resharper test assemblies to exclude list on TypeFinder by @AndyButland in Added Resharper test assemblies to exclude list on TypeFinder umbraco/Umbraco-CMS#18145
Do not allow editing read-only properties by clicking their labels by @kjac in Do not allow editing read-only properties by clicking their labels umbraco/Umbraco-CMS#18152
Provides an option to remove the inessential version number from the generated models by @AndyButland in Provides an option to remove the inessential version number from the generated models umbraco/Umbraco-CMS#18081
Excluded tags from trashed content by @AndyButland in Excluded tags from trashed content umbraco/Umbraco-CMS#18164
More robust resolving of Delivery API redirects by @kjac in More robust resolving of Delivery API redirects umbraco/Umbraco-CMS#18160
Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss by @TimBoonstra in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
Update auth.element.ts by @garpunkal in Update auth.element.ts umbraco/Umbraco-CMS#18192
Enforce user start nodes for media uploads through the RTE by @kjac in Enforce user start nodes for media uploads through the RTE umbraco/Umbraco-CMS#18204
Show notifications menu only to users with permission for the feature by @AndyButland in Show notifications menu only to users with permission for the feature umbraco/Umbraco-CMS#18184
V13: Fix members while using basic auth. by @nikolajlauridsen in V13: Fix members while using basic auth. umbraco/Umbraco-CMS#18206
Set Smidge cachebuster type by @SimonHartfield in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
Cache null dictionary values by key by @callumbwhyte in Cache null dictionary values by key umbraco/Umbraco-CMS#15576
Review: Allow Duplicate Email for Members by @jasont0101 in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202
Fix issues in newly added buttongroup localization by @Migaroez in Fix issues in newly added buttongroup localization umbraco/Umbraco-CMS#18254
Fix 11643 by @nielslyngsoe in Fix 11643 umbraco/Umbraco-CMS#18257
Add validation to prevent update of a user or member to an invalid username (13) by @AndyButland in Add validation to prevent update of a user or member to an invalid username (13) umbraco/Umbraco-CMS#18261
Avoid an exception on sign out when the principal is populated from an incomplete external login by @AndyButland in Avoid an exception on sign out when the principal is populated from an incomplete external login umbraco/Umbraco-CMS#18078
Prevents folder selection in media picker when used from the multi URL picker by @AndyButland in Prevents folder selection in media picker when used from the multi URL picker umbraco/Umbraco-CMS#18288
URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule by @AndyButland in URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule umbraco/Umbraco-CMS#18142
Fixed userResource request to get all users by @AndyButland in Fixed userResource request to get all users umbraco/Umbraco-CMS#18105
Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock by @AndyButland in Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock umbraco/Umbraco-CMS#18151

New Contributors

@amsclark made their first contribution in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
@mvennevold made their first contribution in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
@TimBoonstra made their first contribution in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
@SimonHartfield made their first contribution in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
@jasont0101 made their first contribution in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202

Full Changelog: umbraco/Umbraco-CMS@release-13.6.0...release-13.7.0-rc

13.6.0 What's Changed

Templates can still be editable when using runtime mode Production bug fixed #16622 by @nick-hoang in Templates can still be editable when using runtime mode Production bug fixed #16622 umbraco/Umbraco-CMS#16923
Avoid concurrent build of Umbraco.JsonSchema tool and add execution timeouts to Exec build tasks by @ronaldbarendse in Avoid concurrent build of Umbraco.JsonSchema tool and add execution timeouts to Exec build tasks umbraco/Umbraco-CMS#17006
No longer shows success message if content moving is cancelled by @miguelcrpinto in No longer shows success message if content moving is cancelled umbraco/Umbraco-CMS#15051
Fix: V13 ensure data change is detected on embedding media (16806) by @nielslyngsoe in Fix: V13 ensure data change is detected on embedding media (16806) umbraco/Umbraco-CMS#17008
Content.EditorDirectiveController: added formSubmittedValidationFailed broadcast to prevent fields to stay disabled by @Yinzy00 in Content.EditorDirectiveController: added formSubmittedValidationFailed broadcast to prevent fields to stay disabled umbraco/Umbraco-CMS#17018
Fix null reference exception in CacheValues.For when building the CompositeStringStringKey by @Migaroez in Fix null reference exception in CacheValues.For when building the CompositeStringStringKey umbraco/Umbraco-CMS#17024
v13.5 - New Swedish translation crashes Umbraco, removed duplicate areas. by @madsoulswe in v13.5 - New Swedish translation crashes Umbraco, removed duplicate areas. umbraco/Umbraco-CMS#17059
Update ImageSharpMiddlewareOption for fixing invalid width and height by @NguyenThuyLan in Update ImageSharpMiddlewareOption for fixing invalid width and height umbraco/Umbraco-CMS#17126
Fixed issue #17225. Extended RTE valid element configuration by @wwrobel in Fixed issue #17225. Extended RTE valid element configuration umbraco/Umbraco-CMS#17227
Fix greedy Install url detection by @Migaroez in Fix greedy Install url detection umbraco/Umbraco-CMS#17241
Fix ContentStore locking exceptions in async code by @ronaldbarendse in Fix ContentStore locking exceptions in async code umbraco/Umbraco-CMS#17246
Updated image sharp to a non vulnerable version by @bergmania in Updated image sharp to a non vulnerable version umbraco/Umbraco-CMS#17290
Fix for #17187, unlock form after unsuccessful save and publish by @JasonElkin in Fix for #17187, unlock form after unsuccessful save and publish umbraco/Umbraco-CMS#17285
V13: Use updated form components in the login form by @iOvergaard in V13: Use updated form components in the login form umbraco/Umbraco-CMS#17281
MNTP: Improve site and root context for dynamic root by @kjac in MNTP: Improve site and root context for dynamic root umbraco/Umbraco-CMS#17303
MNTP: Re-initialize contextual dialog options upon content creation by @kjac in MNTP: Re-initialize contextual dialog options upon content creation umbraco/Umbraco-CMS#17301
Issue 17128 - Fix GetMediaByPath when querying for media which has been uploaded with dimensions in the file name by @justin-nevitech in Issue 17128 - Fix GetMediaByPath when querying for media which has been uploaded with dimensions in the file name umbraco/Umbraco-CMS#17314
V10 updated message pack by @andr317c in V10 updated message pack umbraco/Umbraco-CMS#17320
V13 Updated version of messagepack by @andr317c in V13 Updated version of messagepack umbraco/Umbraco-CMS#17321
V13 QA Updated login tests to match locator by @andr317c in V13 QA Updated login tests to match locator umbraco/Umbraco-CMS#17334
Include create date in audit item by @nikolajlauridsen in Include create date in audit item umbraco/Umbraco-CMS#17447
Use TryParse when parsing ID from claims by @Oxygen-cl in Use TryParse when parsing ID from claims umbraco/Umbraco-CMS#17414
Add swiss languages as backoffice languages by @marwaldv in Add swiss languages as backoffice languages umbraco/Umbraco-CMS#17177
Block settings unavailable element type by @bjarnef in Block settings unavailable element type umbraco/Umbraco-CMS#16328
TinyMCE readonly mode by @bjarnef in TinyMCE readonly mode umbraco/Umbraco-CMS#17551
Don't shrink crops container on right side by @bjarnef in Don't shrink crops container on right side umbraco/Umbraco-CMS#16827
Run both cms and package migrations in upgrader by @nikolajlauridsen in Run both cms and package migrations in upgrader umbraco/Umbraco-CMS#17575
Added fix for label issues by @abjerner in Added fix for <umb-button-group /> label issues umbraco/Umbraco-CMS#15409
V13/bugfix/fix infinite editor stuck in create action 15945 by @ealse in V13/bugfix/fix infinite editor stuck in create action 15945 umbraco/Umbraco-CMS#16280
Fix RTE console error when blocks are not available by @kjac in Fix RTE console error when blocks are not available umbraco/Umbraco-CMS#17582
Sort manifest file paths alphabetically by @mattbrailsford in Sort manifest file paths alphabetically umbraco/Umbraco-CMS#14466
Handle "all slashes" routes by @kjac in Handle "all slashes" routes umbraco/Umbraco-CMS#17596
Add cache key to GetByUserName by @Zeegaan in Add cache key to GetByUserName umbraco/Umbraco-CMS#17350
V13: Dropzone, upload complete callback with processed file array by @leekelleher in V13: Dropzone, upload complete callback with processed file array umbraco/Umbraco-CMS#17631
Revert #14234 add update error message for DB connection failures by @kjac in Revert #14234 add update error message for DB connection failures umbraco/Umbraco-CMS#17612
Add ASCII file name conversion by @kjac in Add ASCII file name conversion umbraco/Umbraco-CMS#17580
V13: Lead char gets removed when reopening a link in the rich text editor by @iOvergaard in V13: Lead char gets removed when reopening a link in the rich text editor umbraco/Umbraco-CMS#17667
Fix PanicException: failed to get child with id= after updating content types by @ronaldbarendse in Fix PanicException: failed to get child with id= after updating content types umbraco/Umbraco-CMS#17702
Updated NuGet Packages for v13 by @bergmania in Updated NuGet Packages for v13 umbraco/Umbraco-CMS#17704
Add "user info" endpoint for the Delivery API by @kjac in Add "user info" endpoint for the Delivery API umbraco/Umbraco-CMS#17719
Warn about un-routable content at publish time by @kjac in Warn about un-routable content at publish time umbraco/Umbraco-CMS#17705
Add (un)publishing details to TreeChange notifications by @kjac in Add (un)publishing details to TreeChange notifications umbraco/Umbraco-CMS#17757
Make sure Examine dashboard still functions when an index is corrupt by @Migaroez in Make sure Examine dashboard still functions when an index is corrupt umbraco/Umbraco-CMS#17800
V13 Fixes #17646 where bold markdown does not work in a property description by @danlister in V13 Fixes #17646 where bold markdown does not work in a property description umbraco/Umbraco-CMS#17806
V13: Clear username cache by @Zeegaan in V13: Clear username cache umbraco/Umbraco-CMS#17815
V13: Allow anonymous calls for UmbLoginStatusController.HandleLogout action by @elit0451 in V13: Allow anonymous calls for UmbLoginStatusController.HandleLogout action umbraco/Umbraco-CMS#17807
Fix null exceptions when requesting specific content trough the backoffice APIs by @Migaroez in Fix null exceptions when requesting specific content trough the backoffice APIs umbraco/Umbraco-CMS#17846
V13: Add rcl files to static files tree by @Zeegaan in V13: Add rcl files to static files tree umbraco/Umbraco-CMS#17671
Make the Delivery API "ancestors" selector work with preview by @kjac in Make the Delivery API "ancestors" selector work with preview umbraco/Umbraco-CMS#17938
... (truncated)

13.6.0-rc2

What's Changed

Fixed issue #17225. Extended RTE valid element configuration by @wwrobel in Fixed issue #17225. Extended RTE valid element configuration umbraco/Umbraco-CMS#17227
Fix for #17187, unlock form after unsuccessful save and publish by @JasonElkin in Fix for #17187, unlock form after unsuccessful save and publish umbraco/Umbraco-CMS#17285
Use TryParse when parsing ID from claims by @Oxygen-cl in Use TryParse when parsing ID from claims umbraco/Umbraco-CMS#17414
Add swiss languages as backoffice languages by @marwaldv in Add swiss languages as backoffice languages umbraco/Umbraco-CMS#17177
Block settings unavailable element type by @bjarnef in Block settings unavailable element type umbraco/Umbraco-CMS#16328
Don't shrink crops container on right side by @bjarnef in Don't shrink crops container on right side umbraco/Umbraco-CMS#16827
Added fix for label issues by @abjerner in Added fix for <umb-button-group /> label issues umbraco/Umbraco-CMS#15409
V13/bugfix/fix infinite editor stuck in create action 15945 by @ealse in V13/bugfix/fix infinite editor stuck in create action 15945 umbraco/Umbraco-CMS#16280
Warn about un-routable content at publish time by @kjac in Warn about un-routable content at publish time umbraco/Umbraco-CMS#17705
Add (un)publishing details to TreeChange notifications by @kjac in Add (un)publishing details to TreeChange notifications umbraco/Umbraco-CMS#17757
Make sure Examine dashboard still functions when an index is corrupt by @Migaroez in Make sure Examine dashboard still functions when an index is corrupt umbraco/Umbraco-CMS#17800
V13 Fixes #17646 where bold markdown does not work in a property description by @danlister in V13 Fixes #17646 where bold markdown does not work in a property description umbraco/Umbraco-CMS#17806
V13: Clear username cache by @Zeegaan in V13: Clear username cache umbraco/Umbraco-CMS#17815
V13: Allow anonymous calls for UmbLoginStatusController.HandleLogout action by @elit0451 in V13: Allow anonymous calls for UmbLoginStatusController.HandleLogout action umbraco/Umbraco-CMS#17807
Fix null exceptions when requesting specific content trough the backoffice APIs by @Migaroez in Fix null exceptions when requesting specific content trough the backoffice APIs umbraco/Umbraco-CMS#17846
V13: Add rcl files to static files tree by @Zeegaan in V13: Add rcl files to static files tree umbraco/Umbraco-CMS#17671
Make the Delivery API "ancestors" selector work with preview by @kjac in Make the Delivery API "ancestors" selector work with preview umbraco/Umbraco-CMS#17938
Corrected property names and structure used in JSON schema generation for configuration of default data to install. by @AndyButland in Corrected property names and structure used in JSON schema generation for configuration of default data to install. umbraco/Umbraco-CMS#17946
Added integration test to verify the Delivery API contract by @kjac in Added integration test to verify the Delivery API contract umbraco/Umbraco-CMS#17949
V13 QA updated locator for failing E2E test by @andr317c in V13 QA updated locator for failing E2E test umbraco/Umbraco-CMS#17825
Allow filtering for multiple content types by @kjac in Allow filtering for multiple content types umbraco/Umbraco-CMS#17960
V13: Show validation error, when saving invalid media by @Zeegaan in V13: Show validation error, when saving invalid media umbraco/Umbraco-CMS#17961
Improve YSOD rendering in the client by @Migaroez in Improve YSOD rendering in the client umbraco/Umbraco-CMS#17940
V13: Update @umbraco-ui/uui to 1.12.2 by @iOvergaard in V13: Update @umbraco-ui/uui to 1.12.2 umbraco/Umbraco-CMS#17972
Add Vary header to all content API operations by @kjac in Add Vary header to all content API operations umbraco/Umbraco-CMS#17962
Resets send to approval dialog on close such that when re-opening the selection and operation can still be triggered. by @AndyButland in Resets send to approval dialog on close such that when re-opening the selection and operation can still be triggered. umbraco/Umbraco-CMS#17956
V13: Update @microsoft/signalr from 7.0.12 to 8.0.7 by @iOvergaard in V13: Update @microsoft/signalr from 7.0.12 to 8.0.7 umbraco/Umbraco-CMS#17973
add missing new media auditTrail translation by @Migaroez in add missing new media auditTrail translation umbraco/Umbraco-CMS#17981
Enforce the "Save and preview" button after when switching content app by @kjac in Enforce the "Save and preview" button after when switching content app umbraco/Umbraco-CMS#17985
Make the RTE handle inline elements gracefully for JSON by @kjac in Make the RTE handle inline elements gracefully for JSON umbraco/Umbraco-CMS#17983
Fix: only fire event when instance is available (issue 17847) by @nielslyngsoe in Fix: only fire event when instance is available (issue 17847) umbraco/Umbraco-CMS#17987
Do not show "Save and preview" by default by @kjac in Do not show "Save and preview" by default umbraco/Umbraco-CMS#17986
Fix: Do not re-map schedule modal on error as it leads to broken bindings by @Migaroez in Fix: Do not re-map schedule modal on error as it leads to broken bindings umbraco/Umbraco-CMS#17990
Added a maxlength setting to the regular expression pattern field by @AndyButland in Added a maxlength setting to the regular expression pattern field umbraco/Umbraco-CMS#17982
V13 QA added parallelization for E2E tests by @andr317c in V13 QA added parallelization for E2E tests umbraco/Umbraco-CMS#17995

New Contributors

@wwrobel made their first contribution in Fixed issue #17225. Extended RTE valid element configuration umbraco/Umbraco-CMS#17227
@Oxygen-cl made their first contribution in Use TryParse when parsing ID from claims umbraco/Umbraco-CMS#17414

Full Changelog: umbraco/Umbraco-CMS@release-13.6.0-rc...release-13.6.0-rc2

13.6.0-rc

What's Changed

Templates can still be editable when using runtime mode Production bug fixed #16622 by @nick-hoang in Templates can still be editable when using runtime mode Production bug fixed #16622 umbraco/Umbraco-CMS#16923
Avoid concurrent build of Umbraco.JsonSchema tool and add execution timeouts to Exec build tasks by @ronaldbarendse in Avoid concurrent build of Umbraco.JsonSchema tool and add execution timeouts to Exec build tasks umbraco/Umbraco-CMS#17006
No longer shows success message if content moving is cancelled by @miguelcrpinto in No longer shows success message if content moving is cancelled umbraco/Umbraco-CMS#15051
Fix: V13 ensure data change is detected on embedding media (16806) by @nielslyngsoe in Fix: V13 ensure data change is detected on embedding media (16806) umbraco/Umbraco-CMS#17008
Content.EditorDirectiveController: added formSubmittedValidationFailed broadcast to prevent fields to stay disabled by @Yinzy00 in Content.EditorDirectiveController: added formSubmittedValidationFailed broadcast to prevent fields to stay disabled umbraco/Umbraco-CMS#17018
Fix null reference exception in CacheValues.For when building the CompositeStringStringKey by @Migaroez in Fix null reference exception in CacheValues.For when building the CompositeStringStringKey umbraco/Umbraco-CMS#17024
v13.5 - New Swedish translation crashes Umbraco, removed duplicate areas. by @madsoulswe in v13.5 - New Swedish translation crashes Umbraco, removed duplicate areas. umbraco/Umbraco-CMS#17059
Update ImageSharpMiddlewareOption for fixing invalid width and height by @NguyenThuyLan in Update ImageSharpMiddlewareOption for fixing invalid width and height umbraco/Umbraco-CMS#17126
Fix greedy Install url detection by @Migaroez in Fix greedy Install url detection umbraco/Umbraco-CMS#17241
Fix ContentStore locking exceptions in async code by @ronaldbarendse in Fix ContentStore locking exceptions in async code umbraco/Umbraco-CMS#17246
Updated image sharp to a non vulnerable version by @bergmania in Updated image sharp to a non vulnerable version umbraco/Umbraco-CMS#17290
V13: Use updated form components in the login form by @iOvergaard in V13: Use updated form components in the login form umbraco/Umbraco-CMS#17281
MNTP: Improve site and root context for dynamic root by @kjac in MNTP: Improve site and root context for dynamic root umbraco/Umbraco-CMS#17303
MNTP: Re-initialize contextual dialog options upon content creation by @kjac in MNTP: Re-initialize contextual dialog options upon content creation umbraco/Umbraco-CMS#17301
Issue 17128 - Fix GetMediaByPath when querying for media which has been uploaded with dimensions in the file name by @justin-nevitech in Issue 17128 - Fix GetMediaByPath when querying for media which has been uploaded with dimensions in the file name umbraco/Umbraco-CMS#17314
V10 updated message pack by @andr317c in V10 updated message pack umbraco/Umbraco-CMS#17320
V13 Updated version of messagepack by @andr317c in V13 Updated version of messagepack umbraco/Umbraco-CMS#17321
V13 QA Updated login tests to match locator by @andr317c in V13 QA Updated login tests to match locator umbraco/Umbraco-CMS#17334
Include create date in audit item by @nikolajlauridsen in Include create date in audit item umbraco/Umbraco-CMS#17447
TinyMCE readonly mode by @bjarnef in TinyMCE readonly mode umbraco/Umbraco-CMS#17551
Run both cms and package migrations in upgrader by @nikolajlauridsen in Run both cms and package migrations in upgrader umbraco/Umbraco-CMS#17575
Fix RTE console error when blocks are not available by @kjac in Fix RTE console error when blocks are not available umbraco/Umbraco-CMS#17582
Sort manifest file paths alphabetically by @mattbrailsford in Sort manifest file paths alphabetically umbraco/Umbraco-CMS#14466
Handle "all slashes" routes by @kjac in Handle "all slashes" routes umbraco/Umbraco-CMS#17596
Add cache key to GetByUserName by @Zeegaan in Add cache key to GetByUserName umbraco/Umbraco-CMS#17350
V13: Dropzone, upload complete callback with processed file array by @leekelleher in V13: Dropzone, upload complete callback with processed file array umbraco/Umbraco-CMS#17631
Revert #14234 add update error message for DB connection failures by @kjac in Revert #14234 add update error message for DB connection failures umbraco/Umbraco-CMS#17612
Add ASCII file name conversion by @kjac in Add ASCII file name conversion umbraco/Umbraco-CMS#17580
V13: Lead char gets removed when reopening a link in the rich text editor by @iOvergaard in V13: Lead char gets removed when reopening a link in the rich text editor umbraco/Umbraco-CMS#17667
Fix PanicException: failed to get child with id= after updating content types by @ronaldbarendse in Fix PanicException: failed to get child with id= after updating content types umbraco/Umbraco-CMS#17702
Updated NuGet Packages for v13 by @bergmania in Updated NuGet Packages for v13 umbraco/Umbraco-CMS#17704
Add "user info" endpoint for the Delivery API by @kjac in Add "user info" endpoint for the Delivery API umbraco/Umbraco-CMS#17719

New Contributors

@nick-hoang made their first contribution in Templates can still be editable when using runtime mode Production bug fixed #16622 umbraco/Umbraco-CMS#16923

Full Changelog: umbraco/Umbraco-CMS@release-13.5.2...release-13.6.0-rc

Commits viewable in compare view.

Updated Umbraco.Cms.Api.Delivery from 13.3.0 to 13.9.3.

Release notes

Sourced from Umbraco.Cms.Api.Delivery's releases.

13.9.3

🔒 Security updates

Fixed issue where Delivery API allows for cached requests to be returned with an invalid API key - GHSA-75vq-qvhr-7ffr

Full Changelog: umbraco/Umbraco-CMS@release-13.9.2...release-13.9.3

13.9.2

🔒 Security updates

Prevented Disclosure of Configured Password Requirements - Advisory GHSA-pgvc-6h2p-q4f6

Full Changelog: umbraco/Umbraco-CMS@release-13.9.1...release-13.9.2

13.9.1 What's Changed

🐛 Bug Fixes

Fix issues with removal of user logins on change to external login provider configuration (13) by @AndyButland in Fix issues with removal of user logins on change to external login provider configuration (13) umbraco/Umbraco-CMS#19511

Full Changelog: umbraco/Umbraco-CMS@release-13.9.0...release-13.9.1

13.9.0 What's Changed Since 13.9.0-rc

🐛 Bug Fixes

Fix null member edge case by @Migaroez in Fix null member edgecase umbraco/Umbraco-CMS#19463

Full Changelog: umbraco/Umbraco-CMS@release-13.9.0-rc...release-13.9.0

What's Changed Since The Previous Release (13.8.1)

📦 Dependencies

Upgrade examine to 3.7.1 by @dawoe in Upgrade examine to 3.7.1 umbraco/Umbraco-CMS#19186

🐛 Bug Fixes

Move database cache rebuild to a background task with polling (13) by @AndyButland in Move database cache rebuild to a background task with polling (13) umbraco/Umbraco-CMS#18922
V13: attempted fix for Datepicker v13 issue #16008 by @Navya-Sinhaa in V13: attempted fix for Datepicker v13 issue #16008 umbraco/Umbraco-CMS#18903
Handle file paths as not found in delivery API by route requests by @AndyButland in Handle file paths as not found in delivery API by route requests umbraco/Umbraco-CMS#19063
attempted fix for Save and Preview button #15360 by @Navya-Sinhaa in attempted fix for Save and Preview button #15360 umbraco/Umbraco-CMS#19138
V13 QA updated pipeline for acceptance to avoid issue when installing playwright by @andr317c in V13 QA updated pipeline for acceptance to avoid issue when installing playwright umbraco/Umbraco-CMS#19140
V13: Clear Member Username Cache in Load Balanced Environments by @nikolajlauridsen in V13: Clear Member Username Cache in Load Balanced Environments umbraco/Umbraco-CMS#19191
Fix root path regression for the Delivery API by @kjac in Fix root path regression for the Delivery API umbraco/Umbraco-CMS#19216
TimedScope improvements and login duration clean-up by @ronaldbarendse in TimedScope improvements and login duration clean-up umbraco/Umbraco-CMS#19243
Handle existing RichTextEditorValue when parsing from markup or JSON structure by @AndyButland in Handle existing RichTextEditorValue when parsing from markup or JSON structure umbraco/Umbraco-CMS#19266
Added custom RichTextRegexValidator to validate markup instead of JSON by @tomvanenckevort in Added custom RichTextRegexValidator to validate markup instead of JSON umbraco/Umbraco-CMS#19045
Invalidate external login session on removal of provider (13) by @AndyButland in Invalidate external login session on removal of provider (13) umbraco/Umbraco-CMS#19273
add single blocklist delete by @Migaroez in add single blocklist delete umbraco/Umbraco-CMS#18073
[V13] User notifications not sent correctly when having more than 400 users by @vantovic in [V13] User notifications not sent correctly when having more than 400 users umbraco/Umbraco-CMS#18370
Fix for block grid styling regression issue #15973 by @Lili-Rossiter in Fix for block grid styling regression issue #15973 umbraco/Umbraco-CMS#19014
V13/bugfix/partial cache by @Migaroez in V13/bugfix/partial cache umbraco/Umbraco-CMS#19314
V13 QA Updated linux test images to match actual by @andr317c in V13 QA Updated linux test images to match actual umbraco/Umbraco-CMS#19309
Avoids unnecessary additional domain save notification publishing when sorting an already sorted collection of domains by @AndyButland in Avoids unnecessary additional domain save notification publishing when sorting an already sorted collection of domains umbraco/Umbraco-CMS#19106
Adds support for retrieval of data type references when data type is routed using a GUID by @AndyButland in Adds support for retrieval of data type references when data type is routed using a GUID umbraco/Umbraco-CMS#19184
User invite email fails if visited more than once without completing by @dchallener in User invite email fails if visited more than once without completing umbraco/Umbraco-CMS#17901
Fixed check for navigation to list after delete of member by @AndyButland in Fixed check for navigation to list after delete of member umbraco/Umbraco-CMS#19364

New Contributors

@Navya-Sinhaa made their first contribution in V13: attempted fix for Datepicker v13 issue #16008 umbraco/Umbraco-CMS#18903
@vantovic made their first contribution in [V13] User notifications not sent correctly when having more than 400 users umbraco/Umbraco-CMS#18370

Full Changelog: umbraco/Umbraco-CMS@release-13.8.1...release-13.9.0

13.9.0-rc

What's Changed

📦 Dependencies

Upgrade examine to 3.7.1 by @dawoe in Upgrade examine to 3.7.1 umbraco/Umbraco-CMS#19186

🐛 Bug Fixes

Move database cache rebuild to a background task with polling (13) by @AndyButland in Move database cache rebuild to a background task with polling (13) umbraco/Umbraco-CMS#18922
V13: attempted fix for Datepicker v13 issue #16008 by @Navya-Sinhaa in V13: attempted fix for Datepicker v13 issue #16008 umbraco/Umbraco-CMS#18903
Handle file paths as not found in delivery API by route requests by @AndyButland in Handle file paths as not found in delivery API by route requests umbraco/Umbraco-CMS#19063
attempted fix for Save and Preview button #15360 by @Navya-Sinhaa in attempted fix for Save and Preview button #15360 umbraco/Umbraco-CMS#19138
V13 QA updated pipeline for acceptance to avoid issue when installing playwright by @andr317c in V13 QA updated pipeline for acceptance to avoid issue when installing playwright umbraco/Umbraco-CMS#19140
V13: Clear Member Username Cache in Load Balanced Environments by @nikolajlauridsen in V13: Clear Member Username Cache in Load Balanced Environments umbraco/Umbraco-CMS#19191
Fix root path regression for the Delivery API by @kjac in Fix root path regression for the Delivery API umbraco/Umbraco-CMS#19216
TimedScope improvements and login duration clean-up by @ronaldbarendse in TimedScope improvements and login duration clean-up umbraco/Umbraco-CMS#19243
Handle existing RichTextEditorValue when parsing from markup or JSON structure by @AndyButland in Handle existing RichTextEditorValue when parsing from markup or JSON structure umbraco/Umbraco-CMS#19266
Added custom RichTextRegexValidator to validate markup instead of JSON by @tomvanenckevort in Added custom RichTextRegexValidator to validate markup instead of JSON umbraco/Umbraco-CMS#19045
Invalidate external login session on removal of provider (13) by @AndyButland in Invalidate external login session on removal of provider (13) umbraco/Umbraco-CMS#19273
add single blocklist delete by @Migaroez in add single blocklist delete umbraco/Umbraco-CMS#18073
[V13] User notifications not sent correctly when having more than 400 users by @vantovic in [V13] User notifications not sent correctly when having more than 400 users umbraco/Umbraco-CMS#18370
Fix for block grid styling regression issue #15973 by @Lili-Rossiter in Fix for block grid styling regression issue #15973 umbraco/Umbraco-CMS#19014
V13/bugfix/partial cache by @Migaroez in V13/bugfix/partial cache umbraco/Umbraco-CMS#19314
V13 QA Updated linux test images to match actual by @andr317c in V13 QA Updated linux test images to match actual umbraco/Umbraco-CMS#19309
Avoids unnecessary additional domain save notification publishing when sorting an already sorted collection of domains by @AndyButland in Avoids unnecessary additional domain save notification publishing when sorting an already sorted collection of domains umbraco/Umbraco-CMS#19106
Adds support for retrieval of data type references when data type is routed using a GUID by @AndyButland in Adds support for retrieval of data type references when data type is routed using a GUID umbraco/Umbraco-CMS#19184
User invite email fails if visited more than once without completing by @dchallener in User invite email fails if visited more than once without completing umbraco/Umbraco-CMS#17901
Fixed check for navigation to list after delete of member by @AndyButland in Fixed check for navigation to list after delete of member umbraco/Umbraco-CMS#19364

New Contributors

@Navya-Sinhaa made their first contribution in V13: attempted fix for Datepicker v13 issue #16008 umbraco/Umbraco-CMS#18903
@vantovic made their first contribution in [V13] User notifications not sent correctly when having more than 400 users umbraco/Umbraco-CMS#18370

Full Changelog: umbraco/Umbraco-CMS@release-13.8.1...release-13.9.0-rc

13.8.1

🔒 Security updates

Prevented possibility of user enumeration feasible based on timing of login response - Advisory GHSA-4g8m-5mj5-c8xg

Full Changelog: umbraco/Umbraco-CMS@release-13.8.0...release-13.8.1

13.8.0 What's Changed Since 13.8.0-rc

🐛 Bug Fixes

Ignore endpoint selection candidates with host attribute if request doesn't match the configured hosts by @AndyButland in Ignore endpoint selection candidates with host attribute if request doesn't match the configured hosts umbraco/Umbraco-CMS#18820
Check we have matched a preview URL by ID when exiting preview by @AndyButland in Check we have matched a preview URL by ID when exiting preview umbraco/Umbraco-CMS#18841

What's Changed Since The Previous Release (13.7.2)

📦 Dependencies

build(deps): bump @umbraco-ui/uui from 1.12.2 to 1.13.0 by @iOvergaard in build(deps): bump @umbraco-ui/uui from 1.12.2 to 1.13.0 umbraco/Umbraco-CMS#18830
Updates dependency on Examine to 3.7 by @AndyButland in Updates dependency on Examine to 3.7 umbraco/Umbraco-CMS#18676

🚀 Backported Features

Split force for publish descendants into separate options for publish unpublish and re-publish unedited (13) by @AndyButland in Split force for publish descendants into separate options for publish unpublish and re-publish unedited (13) umbraco/Umbraco-CMS#18249
Reverts UI updates from publish with descendants dialog by @AndyButland in Reverts UI updates from publish with descendants dialog (13) umbraco/Umbraco-CMS#18647
Backport ShowUnroutableContentWarnings to V13 by @kjac in Backport ShowUnroutableContentWarnings to V13 umbraco/Umbraco-CMS#18479

🐛 Bug Fixes

HTML encodes the user's name in the invite email by @AndyButland in HTML encodes the user's name in the invite email umbraco/Umbraco-CMS#18343
Only filter post retrieval of entities for start nodes if working with entities that support start nodes by @AndyButland in Only filter post retrieval of entities for start nodes if working with entities that support start nodes umbraco/Umbraco-CMS#18287
Avoid exception when attempting to find member by Id when Id is not an expected Guid or integer, as can be the case with external member providers by @AndyButland in Avoid exception when attempting to find member by Id when Id is not an expected Guid or integer, as can be the case with external member providers umbraco/Umbraco-CMS#18320
Disable webhook firing if disable in configuration (13) by @AndyButland in Disable webhook firing if disable in configuration (13) umbraco/Umbraco-CMS#18383
Handle multiline statements in migrations by @AndyButland in Handle multiline statements in migrations umbraco/Umbraco-CMS#18478
Remove version from models builder generated code header when configured to do so by @AndyButland in Remove version from models builder generated code header when configured to do so umbraco/Umbraco-CMS#18501
Fixed typo in TinyMCE's da.js by @abjerner in Fixed typo in TinyMCE's da.js umbraco/Umbraco-CMS#18628
Introduce publishNotifications method on IMembershipMemberService by @Zeegaan in V13: Introduce publishNotifications method on IMembershipMemberService umbraco/Umbraco-CMS#18207
Fix issue text overflow when user name is too long by @NguyenThuyLan in Fix issue text overflow when user name is too long umbraco/Umbraco-CMS#18653
Render folders before files in static files picker by @AndyButland in Render folders before files in static files picker umbraco/Umbraco-CMS#18701
Fixes issue with macro rendering in an RTE when GUIDs are used for backoffice document routes by @AndyButland in Fixes issue with macro rendering in an RTE when GUIDs are used for backoffice document routes umbraco/Umbraco-CMS#18691
Hotfix sqlserver integration tests by @andr317c in V13 hotfix sqlserver integration tests umbraco/Umbraco-CMS#18744

Full Changelog: umbraco/Umbraco-CMS@release-13.7.2...release-13.8.0

13.8.0-rc

What's Changed

📦 Dependencies

build(deps): bump @umbraco-ui/uui from 1.12.2 to 1.13.0 by @iOvergaard in build(deps): bump @umbraco-ui/uui from 1.12.2 to 1.13.0 umbraco/Umbraco-CMS#18830
Updates dependency on Examine to 3.7 by @AndyButland in Updates dependency on Examine to 3.7 umbraco/Umbraco-CMS#18676

🚀 Backported Features

Split force for publish descendants into separate options for publish unpublish and re-publish unedited (13) by @AndyButland in Split force for publish descendants into separate options for publish unpublish and re-publish unedited (13) umbraco/Umbraco-CMS#18249
Reverts UI updates from publish with descendants dialog by @AndyButland in Reverts UI updates from publish with descendants dialog (13) umbraco/Umbraco-CMS#18647
Backport ShowUnroutableContentWarnings to V13 by @kjac in Backport ShowUnroutableContentWarnings to V13 umbraco/Umbraco-CMS#18479

🐛 Bug Fixes

HTML encodes the user's name in the invite email by @AndyButland in HTML encodes the user's name in the invite email umbraco/Umbraco-CMS#18343
Only filter post retrieval of entities for start nodes if working with entities that support start nodes by @AndyButland in Only filter post retrieval of entities for start nodes if working with entities that support start nodes umbraco/Umbraco-CMS#18287
Avoid exception when attempting to find member by Id when Id is not an expected Guid or integer, as can be the case with external member providers by @AndyButland in Avoid exception when attempting to find member by Id when Id is not an expected Guid or integer, as can be the case with external member providers umbraco/Umbraco-CMS#18320
Disable webhook firing if disable in configuration (13) by @AndyButland in Disable webhook firing if disable in configuration (13) umbraco/Umbraco-CMS#18383
Handle multiline statements in migrations by @AndyButland in Handle multiline statements in migrations umbraco/Umbraco-CMS#18478
Remove version from models builder generated code header when configured to do so by @AndyButland in Remove version from models builder generated code header when configured to do so umbraco/Umbraco-CMS#18501
Fixed typo in TinyMCE's da.js by @abjerner in Fixed typo in TinyMCE's da.js umbraco/Umbraco-CMS#18628
Introduce publishNotifications method on IMembershipMemberService by @Zeegaan in V13: Introduce publishNotifications method on IMembershipMemberService umbraco/Umbraco-CMS#18207
Fix issue text overflow when user name is too long by @NguyenThuyLan in Fix issue text overflow when user name is too long umbraco/Umbraco-CMS#18653
Render folders before files in static files picker by @AndyButland in Render folders before files in static files picker umbraco/Umbraco-CMS#18701
Fixes issue with macro rendering in an RTE when GUIDs are used for backoffice document routes by @AndyButland in Fixes issue with macro rendering in an RTE when GUIDs are used for backoffice document routes umbraco/Umbraco-CMS#18691
Hotfix sqlserver integration tests by @andr317c in V13 hotfix sqlserver integration tests umbraco/Umbraco-CMS#18744

Full Changelog: umbraco/Umbraco-CMS@release-13.7.2...release-13.8.0-rc

13.7.2 Changes

🐛 Bug Fixes

Avoids collection was modified issue when flowing identities to the authenticated user's principal @AndyButland in Avoids collection was modified issue when flowing identities to the authenticated user's principal umbraco/Umbraco-CMS#18527

Full Changelog: umbraco/Umbraco-CMS@release-13.7.1...release-13.7.2

13.7.1 Changes

Security updates

Improper API access control allows low-privilege users access to data type functionality - Advisory GHSA-6ffg-mjg7-585x
Restricted editor user can delete media item or access unauthorized content - Advisory GHSA-wx5h-wqfq-v698
Updated ImageSharp dependency to patched version following CVE-2025-27598

New Contributors

@RolandKock made their first contribution in V13: bumped imagesharp to prevent CVE-2025-27598 umbraco/Umbraco-CMS#18602

Full Changelog: umbraco/Umbraco-CMS@release-13.7.0...release-13.7.1

13.7.0 What's Changed Since 13.7.0-rc

There have been no further updates since the 13.7.0-rc release.

Full Changelog: umbraco/Umbraco-CMS@release-13.7.0-rc...release-13.7.0

What's Changed Since The Previous Release (13.6.0)

Lucene Package Update to Address CVE-2024-43383 by @amsclark in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
Allow skipSelect blueprints only when one blueprint exists by @callumbwhyte in Allow skipSelect blueprints only when one blueprint exists umbraco/Umbraco-CMS#17818
Fix create child issue in list view with infinite editor (#13355). by @mvennevold in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
Replaced deprecated navigator.platform with navigator.userAgent for platform detection. by @manutdkid77 in Replaced deprecated navigator.platform with navigator.userAgent for platform detection. umbraco/Umbraco-CMS#17373
Handles migration case where an expected constraint is renamed but the constraint does not exist by @AndyButland in Handles migration case where an expected constraint is renamed but the constraint does not exist umbraco/Umbraco-CMS#18063
Add clientside validation to webhook events by @kjac in Add clientside validation to webhook events umbraco/Umbraco-CMS#18089
Make it possible to reset media picker crops by @kjac in Make it possible to reset media picker crops umbraco/Umbraco-CMS#18110
Redirect to the published URL when exiting preview by @kjac in Redirect to the published URL when exiting preview umbraco/Umbraco-CMS#18114
Added Resharper test assemblies to exclude list on TypeFinder by @AndyButland in Added Resharper test assemblies to exclude list on TypeFinder umbraco/Umbraco-CMS#18145
Do not allow editing read-only properties by clicking their labels by @kjac in Do not allow editing read-only properties by clicking their labels umbraco/Umbraco-CMS#18152
Provides an option to remove the inessential version number from the generated models by @AndyButland in Provides an option to remove the inessential version number from the generated models umbraco/Umbraco-CMS#18081
Excluded tags from trashed content by @AndyButland in Excluded tags from trashed content umbraco/Umbraco-CMS#18164
More robust resolving of Delivery API redirects by @kjac in More robust resolving of Delivery API redirects umbraco/Umbraco-CMS#18160
Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss by @TimBoonstra in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
Update auth.element.ts by @garpunkal in Update auth.element.ts umbraco/Umbraco-CMS#18192
Enforce user start nodes for media uploads through the RTE by @kjac in Enforce user start nodes for media uploads through the RTE umbraco/Umbraco-CMS#18204
Show notifications menu only to users with permission for the feature by @AndyButland in Show notifications menu only to users with permission for the feature umbraco/Umbraco-CMS#18184
V13: Fix members while using basic auth. by @nikolajlauridsen in V13: Fix members while using basic auth. umbraco/Umbraco-CMS#18206
Set Smidge cachebuster type by @SimonHartfield in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
Cache null dictionary values by key by @callumbwhyte in Cache null dictionary values by key umbraco/Umbraco-CMS#15576
Review: Allow Duplicate Email for Members by @jasont0101 in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202
Fix issues in newly added buttongroup localization by @Migaroez in Fix issues in newly added buttongroup localization umbraco/Umbraco-CMS#18254
Fix 11643 by @nielslyngsoe in Fix 11643 umbraco/Umbraco-CMS#18257
Add validation to prevent update of a user or member to an invalid username (13) by @AndyButland in Add validation to prevent update of a user or member to an invalid username (13) umbraco/Umbraco-CMS#18261
Avoid an exception on sign out when the principal is populated from an incomplete external login by @AndyButland in Avoid an exception on sign out when the principal is populated from an incomplete external login umbraco/Umbraco-CMS#18078
Prevents folder selection in media picker when used from the multi URL picker by @AndyButland in Prevents folder selection in media picker when used from the multi URL picker umbraco/Umbraco-CMS#18288
URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule by @AndyButland in URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule umbraco/Umbraco-CMS#18142
Fixed userResource request to get all users by @AndyButland in Fixed userResource request to get all users umbraco/Umbraco-CMS#18105
Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock by @AndyButland in Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock umbraco/Umbraco-CMS#18151

Full Changelog: umbraco/Umbraco-CMS@release-13.6.0...release-13.7.0

New Contributors

@amsclark made their first contribution in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
@mvennevold made their first contribution in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
@TimBoonstra made their first contribution in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
@SimonHartfield made their first contribution in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
@jasont0101 made their first contribution in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202

13.7.0-rc

What's Changed

Lucene Package Update to Address CVE-2024-43383 by @amsclark in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
Allow skipSelect blueprints only when one blueprint exists by @callumbwhyte in Allow skipSelect blueprints only when one blueprint exists umbraco/Umbraco-CMS#17818
Fix create child issue in list view with infinite editor (#13355). by @mvennevold in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
Replaced deprecated navigator.platform with navigator.userAgent for platform detection. by @manutdkid77 in Replaced deprecated navigator.platform with navigator.userAgent for platform detection. umbraco/Umbraco-CMS#17373
Handles migration case where an expected constraint is renamed but the constraint does not exist by @AndyButland in Handles migration case where an expected constraint is renamed but the constraint does not exist umbraco/Umbraco-CMS#18063
Add clientside validation to webhook events by @kjac in Add clientside validation to webhook events umbraco/Umbraco-CMS#18089
Make it possible to reset media picker crops by @kjac in Make it possible to reset media picker crops umbraco/Umbraco-CMS#18110
Redirect to the published URL when exiting preview by @kjac in Redirect to the published URL when exiting preview umbraco/Umbraco-CMS#18114
Added Resharper test assemblies to exclude list on TypeFinder by @AndyButland in Added Resharper test assemblies to exclude list on TypeFinder umbraco/Umbraco-CMS#18145
Do not allow editing read-only properties by clicking their labels by @kjac in Do not allow editing read-only properties by clicking their labels umbraco/Umbraco-CMS#18152
Provides an option to remove the inessential version number from the generated models by @AndyButland in Provides an option to remove the inessential version number from the generated models umbraco/Umbraco-CMS#18081
Excluded tags from trashed content by @AndyButland in Excluded tags from trashed content umbraco/Umbraco-CMS#18164
More robust resolving of Delivery API redirects by @kjac in More robust resolving of Delivery API redirects umbraco/Umbraco-CMS#18160
Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss by @TimBoonstra in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
Update auth.element.ts by @garpunkal in Update auth.element.ts umbraco/Umbraco-CMS#18192
Enforce user start nodes for media uploads through the RTE by @kjac in Enforce user start nodes for media uploads through the RTE umbraco/Umbraco-CMS#18204
Show notifications menu only to users with permission for the feature by @AndyButland in Show notifications menu only to users with permission for the feature umbraco/Umbraco-CMS#18184
V13: Fix members while using basic auth. by @nikolajlauridsen in V13: Fix members while using basic auth. umbraco/Umbraco-CMS#18206
Set Smidge cachebuster type by @SimonHartfield in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
Cache null dictionary values by key by @callumbwhyte in Cache null dictionary values by key umbraco/Umbraco-CMS#15576
Review: Allow Duplicate Email for Members by @jasont0101 in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202
Fix issues in newly added buttongroup localization by @Migaroez in Fix issues in newly added buttongroup localization umbraco/Umbraco-CMS#18254
Fix 11643 by @nielslyngsoe in Fix 11643 umbraco/Umbraco-CMS#18257
Add validation to prevent update of a user or member to an invalid username (13) by @AndyButland in Add validation to prevent update of a user or member to an invalid username (13) umbraco/Umbraco-CMS#18261
Avoid an exception on sign out when the principal is populated from an incomplete external login by @AndyButland in Avoid an exception on sign out when the principal is populated from an incomplete external login umbraco/Umbraco-CMS#18078
Prevents folder selection in media picker when used from the multi URL picker by @AndyButland in Prevents folder selection in media picker when used from the multi URL picker umbraco/Umbraco-CMS#18288
URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule by @AndyButland in URL encodes member user names when passing information for public access setting such that those with user names as emails containing a plus will be included in the rule umbraco/Umbraco-CMS#18142
Fixed userResource request to get all users by @AndyButland in Fixed userResource request to get all users umbraco/Umbraco-CMS#18105
Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock by @AndyButland in Backport use of thread delay over sleep and handle dispose in FileSystemMainDomLock umbraco/Umbraco-CMS#18151

New Contributors

@amsclark made their first contribution in Lucene Package Update to Address CVE-2024-43383 umbraco/Umbraco-CMS#17942
@mvennevold made their first contribution in Fix create child issue in list view with infinite editor (#13355). umbraco/Umbraco-CMS#17637
@TimBoonstra made their first contribution in Fix out of memory file upload of 2gb+ files introduced by #14657 SVG xss umbraco/Umbraco-CMS#17421
@SimonHartfield made their first contribution in Set Smidge cachebuster type umbraco/Umbraco-CMS#18198
@jasont0101 made their first contribution in Review: Allow Duplicate Email for Members umbraco/Umbraco-CMS#16202

Full Changelog: umbraco/Umbraco-CMS@release-13.6.0...release-13.7.0-rc

13.6.0 What's Changed

Templates can still be editable when using runtime mode Production bug fixed #16622 by @nick-hoang in Templates can still be editable when using runtime mode Production bug fixed #16622 umbraco/Umbraco-CMS#16923
Avoid concurrent build of Umbraco.JsonSchema tool and add execution timeouts to Exec build tasks by @ronaldbarendse in Avoid concurrent build of Umbraco.JsonSchema tool and add execution timeouts to Exec build tasks umbraco/Umbraco-CMS#17006
No longer shows success message if content moving is cancelled by @miguelcrpinto in No longer shows success message if content moving is cancelled umbraco/Umbraco-CMS#15051
Fix: V13 ensure data change is detected on embedding media (16806) by @nielslyngsoe in Fix: V13 ensure data change is detected on embedding media (16806) umbraco/Umbraco-CMS#17008
Content.EditorDirectiveController: added formSubmittedValidationFailed broadcast to prevent fields to stay disabled by @Yinzy00 in Content.EditorDirectiveController: added formSubmittedValidationFailed broadcast to prevent fields to stay disabled umbraco/Umbraco-CMS#17018
Fix null reference exception in CacheValues.For when building the CompositeStringStringKey by @Migaroez in Fix null reference exception in CacheValues.For when building the CompositeStringStringKey umbraco/Umbraco-CMS#17024
v13.5 - New Swedish translation crashes Umbraco, removed duplicate areas. by @madsoulswe in v13.5 - New Swedish translation crashes Umbraco, removed duplicate areas. umbraco/Umbraco-CMS#17059
Update ImageSharpMiddlewareOption for fixing invalid width and height by @NguyenThuyLan in Update ImageSharpMiddlewareOption for fixing invalid width and height umbraco/Umbraco-CMS#17126
Fixed issue #17225. Extended RTE valid element configuration by @wwrobel in Fixed issue #17225. Extended RTE valid element configuration umbraco/Umbraco-CMS#17227
Fix greedy Install url detection by @Migaroez in Fix greedy Install url detection umbraco/Umbraco-CMS#17241
Fix ContentStore locking exceptions in async code by @ronaldbarendse in Fix ContentStore locking exceptions in async code umbraco/Umbraco-CMS#17246
Updated image sharp to a non vulnerable version by @bergmania in Updated image sharp to a non vulnerable version umbraco/Umbraco-CMS#17290
Fix for #17187, unlock form after unsuccessful save and publish by @JasonElkin in Fix for #17187, unlock form after unsuccessful save and publish umbraco/Umbraco-CMS#17285
V13: Use updated form components in the login form by @iOvergaard in V13: Use updated form components in the login form umbraco/Umbraco-CMS#17281
MNTP: Improve site and root context for dynamic root by @kjac in https://github...

_Description has been truncat...

Description has been truncated

Bumps Umbraco.Cms.Api.Common from 13.3.0 to 13.9.3 Bumps Umbraco.Cms.Api.Delivery from 13.3.0 to 13.9.3 Bumps Umbraco.Cms.Core from 13.3.0 to 13.9.3 --- updated-dependencies: - dependency-name: Umbraco.Cms.Api.Common dependency-version: 13.9.3 dependency-type: direct:production - dependency-name: Umbraco.Cms.Api.Delivery dependency-version: 13.9.3 dependency-type: direct:production - dependency-name: Umbraco.Cms.Core dependency-version: 13.9.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

tristanjthompson · 2025-10-06T08:26:21Z

Won't do - these are minimum versions - it's down to the package installer to make sure they're on a patched version

dependabot · 2025-10-06T08:26:24Z

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 6, 2025

tristanjthompson closed this Oct 6, 2025

tristanjthompson deleted the dependabot/nuget/src/DeliveryApiModelMapper/multi-4b5ffd920d branch October 6, 2025 08:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump Umbraco.Cms.Api.Common and 2 others #2

Bump Umbraco.Cms.Api.Common and 2 others #2

Uh oh!

dependabot bot commented on behalf of github Oct 6, 2025

Uh oh!

tristanjthompson commented Oct 6, 2025

Uh oh!

dependabot bot commented on behalf of github Oct 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump Umbraco.Cms.Api.Common and 2 others #2

Bump Umbraco.Cms.Api.Common and 2 others #2

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 6, 2025

13.9.3

🔒 Security updates

13.9.2

🔒 Security updates

13.9.1

What's Changed

🐛 Bug Fixes

13.9.0

What's Changed Since 13.9.0-rc

🐛 Bug Fixes

What's Changed Since The Previous Release (13.8.1)

📦 Dependencies

🐛 Bug Fixes

New Contributors

13.9.0-rc

What's Changed

📦 Dependencies

🐛 Bug Fixes

New Contributors

13.8.1

🔒 Security updates

13.8.0

What's Changed Since 13.8.0-rc

🐛 Bug Fixes

What's Changed Since The Previous Release (13.7.2)

📦 Dependencies

🚀 Backported Features

🐛 Bug Fixes

13.8.0-rc

What's Changed

📦 Dependencies

🚀 Backported Features

🐛 Bug Fixes

13.7.2

Changes

🐛 Bug Fixes

13.7.1

Changes

Security updates

New Contributors

13.7.0

What's Changed Since 13.7.0-rc

What's Changed Since The Previous Release (13.6.0)

New Contributors

13.7.0-rc

What's Changed

New Contributors

13.6.0

What's Changed

13.6.0-rc2

What's Changed

New Contributors

13.6.0-rc

What's Changed

New Contributors

13.9.3

🔒 Security updates

13.9.2

🔒 Security updates

13.9.1

What's Changed

🐛 Bug Fixes

13.9.0

What's Changed Since 13.9.0-rc

🐛 Bug Fixes

What's Changed Since The Previous Release (13.8.1)

📦 Dependencies

🐛 Bug Fixes

New Contributors

13.9.0-rc

What's Changed

📦 Dependencies

🐛 Bug Fixes

New Contributors

13.8.1