Changelog

Features

Ability to remove version attribute (#11675).
Add allText config to node API (#11568).
Add type definitions for Request and Response (#9742).
Content Patch (#11173).
Enable providing a message when archiving content (#11164).
Full repository exports (#11521).
Full repository import (#11689).
Make dump path configurable (#7654).
Single repository dump (#11740).
Single repository restore (#11492).
Support PATCH method in HTTP controllers (#9131).
Support Service Accounts Authentication on Management port (#10223).
Support WebP images (#9038).
Support language specific sort (#9920).
Support progressive images (#10642).
Transient Repositories (#10689).
Vhost Config (#10192).
YAML schema (#11762).
allow path segments for url functions (#11093).
getVersions Content API (#8632).
updateMetadata content API (#11632).

Improvements

Add essential Content-Types (#10703).
Add the hasPassword field to the user JS object (#10848).
Any project role to see content version history (#11637).
Avoid NPE on localization (#11785).
Better error message for portal.getSite() in main.js (#5666).
Better support of IPv6 (#7859).
Better usage control of node cache size (#10782).
Built-in apis mount (#10573).
Content sync version history (#11443).
Deprecate the scope argument in the repo modify function (#10774).
Different error message when importing content that is in archive (#10473).
Disable http compression by default (#10342).
Disable legacy apis (#10574).
Don't serve asset for webapp (#8686).
Form API cleanup (#11236).
Improve ApiUrlGeneratorParams (#11007).
Improve error message when non-content node is fetched by id (#8815).
Improve logs for SnapshotService (#11705).
Invert how harmonized API is mounted (#10624).
Java 25 (#11520).
Java Bridge beans do not accept undefined (#11801).
Make the global types importable (#10555).
More fine-grained boost factor (#7195).
No default branch in default context (#10925).
NodeService.delete should delete nodes that only "exist" in search (#10834).
Page Contributions from components are not injected until page reload (#7301).
PortalRequest must not default to draft branch (#10328).
Redefine java tmp directory (#11444).
Remove tool path segment for admin tools (#10625).
Remove default repository (#10474).
Remove importContent and stopInherit api (#11613).
Remove legacy widgets handler (#10915).
Remove lib-portal dependency from lib-admin (#11042).
Remove resource resolving logic from descriptor (#11464).
Restrict widgets api (#10596).
Start XP in dev mode by default if sdk (#11172).
Support removal of headers via filters (#8699).
Truncate nanos for all consumer's Instant fields (#11823).
Vacuum Task for Transient repositories (#10690).
Vacuum should delete old snapshots (#10691).
Validate name-schemes (#4404).
Virtual threads for tasks (#11638).
Widgets as API (#10627).
applyPermissions return permissions in result (#11219).
Require - Handle resources with dots (#7128).
content.update - allow to update page (#11256).
content.update - allow to update siteConfig (#10920).
apiUrl frunction (#10628).
array parameters support for URLs (#11752).
remove obsolete request methods (#11017).
remove processedReferences from EditableContent (#11411).
rename js delete methods (#11494).

Bugs

403 for /site/repo/branch for root content (#10368).
500 error when accessing non-existent repository (#9432).
Applications don't get started in cluster (#8022).
Archive in child layer should stop inheriting all fields (#11286).
Archived content gets republished when its inbound reference is published (#11085).
Blobstore can throw FileAlreadyExistsException (#10447).
Cannot invoke "org.eclipse.jetty.util.Callback.failed(java.lang.Throwable)" (#10261).
Cannot send mails with large attachments (#11141).
Cannot start XP after snapshot restore deleted repository (#10363).
Component Service mapping should not apply page contributions (#10845).
Content with invalid component config is considered valid and can be published (#10897).
Create/UpdateMediaCommand: add altText param (#10356).
CreateRoleParams displayName is optional, but throws java.lang.NullPointerException (#10486).
Default email sender is not working (#10404).
Do not create session for login url (#10460).
Do not remove blob of non-transient repositories during vacuum (#10794).
Dump of big repositories gets OutOfMemoryError (#10314).
Duplicate keys are not handled in map (#10734).
Effective page is resolved incorrectly from a template (#10951).
Fragment and Image component return 200 when content is missing (#10822).
GetCurrentSiteConfigHandler resolve project and branch correctly (#10556).
Hazelcast may take much longer time to restart - need to wait longer on snapshot restore (#10605).
IllegalArgumentException must not result in 400 (#9357).
Image upload failure: xp validation of metadata fails (#10213).
Incorrect Content Inherit type usage in related functions (#11063).
Incorrect PatchableContent type (#11536).
Incorrect type for siteConfig parameter in Project API (#10263).
Lib i18n must not allow foreign application (#10417).
LoginParams password is optional, but throws Parameter 'password' is required (#10487).
LoginResult message should be optional (#10497).
Logout url on 403 page can be out of scope (#10285).
Management port returns 403 when no authentication is provided (#8804).
MovedEventSyncArchiver misses context (#10504).
NPE in lib-app.get and lib-app.getDescriptor for missing app key (#10280).
Optional params in lib-node.findChildren are defined as required (#10138).
Out of scope for system provider (#10478).
Page does not render if optional descriptor is missing (#10268).
Page still returns 200 when descriptor's application is stopped (#10682).
PageComponent type is missing template?: string (#10771).
PathIndexConfig must use IndexPath (#11617).
Projects.get/list must not return uninitialized projects (#11532).
PropertyTree memory overuse (#10534).
PublishContentHandler should not publish with empty ids (#11501).
Publishing of huge tree fails (#10623).
Remove deprecated branch parameters from Content TS definitions (#10206).
Remove idprovider iteration in authenticate (#11072).
Rename should publish move event for every moved node (#9859).
Resolving publish dependencies with a huge excludeContentIds list (#10635).
Restore from a dump does not restore some blobs (#10761).
RichTextProcessor must use styles from all installed applications (#10255).
SchedulerServiceActivator fails on jobs from config (#10507).
SchemaConverter fails on null (#10425).
Services not available for system apps scripts (#10385).
SnapshotServiceImpl: no error/warning on failed snapshot deletion (#10676).
Snapshots that must exist for longer period are being deleted (#11761).
Support resolution of empty regions in Content API (#10209).
Tasks.list may fail in cluster (#10231).
Throw better exception if modifying node with no return from editor (#5504).
Trace node api does not contain repo and branch (#10458).
UrlResource leaks file handles (#7387).
Use name as a nodeId for ScheduledJob (#10482).
User.modifiedTime should be optional in Core TS definitions (#10221).
WebSocket: context is lost in message events (#10873).
Wrong default Content-type for json response (#10898).
X-data is not added to content when it's created (#9952).
XP installation halts if local application Errors out (#11779).
nodeResolved and nodeImported in ImportNodesParams and ExportNodesParams should be optional (#10409).
all admin paths should have Cache-control private (#10821).
autologin function cannot return response (#11071).
don't set X-XSS-Protection by default (#11066).
imagePlaceholder() creates objects that remain in memory (#10332).
lib-io.getResource(key) .getTimestamp() has type number, but returns java.lang.Long (#10146).
lib-portal.getContent doesn't resolve page templates (#10800).
make HealthMonitor thresholds configurable (#8556).
portal.getComponent is missing path in fragment preview (#10116).
revert default index.max_result_window back to 10000 (#7951).
taskLib.progress() produces multiple events (#10222).
transient repositories break snapshot restore (#11121).
vhost root mapping inconsistency (#10354).
wrong superType of shortcut content-type (#11720).
xp.init.maxTries should be 900 (#10615).