[Snyk] Upgrade @umbraco-cms/backoffice from 16.1.0 to 16.1.1

[jcdc-bot]

Snyk has created this PR to upgrade @umbraco-cms/backoffice from 16.1.0 to 16.1.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.

• The recommended version was released 25 days ago.

Release notes

Package name: @umbraco-cms/backoffice

• 16.1.1 - 2025-07-29
  

  🔒 Security updates

  • Fixed issue where Delivery API allows for cached requests to be returned with an invalid API key - GHSA-75vq-qvhr-7ffr

  Full Changelog: release-16.1.0...release-16.1.1

• 16.1.0 - 2025-07-24
  

  What's Changed Since 16.1.0-rc

  Full Changelog: release-16.1.0-rc...release-16.1.0

  What's Changed Since The Previous Release (16.0.0)

  🙌 Notable Changes

  • V16: Retry requests after timeout by @ iOvergaard in #19495
  • Add support for file upload property editor within the block list and grid by @ PeterKvayt in #18976

  💥 Breaking Changes

  • Further fix to configuration classes using ISet, resolving regression with custom 404 pages by @ AndyButland in #19573

  📦 Dependencies

  • Bump vite from 6.2.6 to 6.3.4 in /src/Umbraco.Web.UI.Client by @ dependabot in #19206
  • Bump vite from 6.2.6 to 6.3.4 in /src/Umbraco.Web.UI.Login by @ dependabot in #19218
  • Bump vite from 6.3.2 to 6.3.5 in /src/Umbraco.Web.UI.Client by @ dependabot in #19231
  • Bump vite from 6.2.6 to 6.3.5 in /src/Umbraco.Web.UI.Login by @ dependabot in #19236
  • Bump tar-fs from 3.0.8 to 3.0.9 in /src/Umbraco.Web.UI.Client by @ dependabot in #19468
  • build(deps): bump @ umbraco-ui/uui from 1.14.0 to 1.14.1 by @ iOvergaard in #19636
  • V16: Upgrade Storybook from V8 to V9 by @ iOvergaard in #19640
  • build(deps): bump @ umbraco-ui from 1.14.1 to 1.14.2 by @ iOvergaard in #19656

  🌈 A11Y

  • add overflow:visible to allow the workspace action menu to be highlighted by @ manutdkid77 in #18391
  • Tiptap RTE: A11Y label improvements by @ leekelleher in #19531

  🚀 New Features

  • Changed the Image crop UI component to fit the new Backoffice UI design by @ Abdjulaziz in #19204
  • Member Type Root Collection View / Workspace by @ leekelleher in #19271
  • Media Picker Modal File Previews by @ leekelleher in #19335
  • Feature: Content Workspace Icon by @ madsrasmussen in #19292
  • update next icon by @ nielslyngsoe in #19424
  • Translations for pt (pt-PT) by @ lauraneto in #19435
  • Tiptap RTE: Toolbar menu active highlighting by @ leekelleher in #19532
  • Add folder workspace icon by @ madsrasmussen in #19366
  • V16: Adds a state for "forbidden" for entities that return 403 (Access denied) by @ iOvergaard in #19557
  • Introduce Section Alias condition const by @ madsrasmussen in #19633
  • Label property-editor, adds UFM template support by @ leekelleher in #19610

  🐛 Bug Fixes

  • Allow deselection of colour picker property by @ AndyButland in #19174
  • V16 QA update failing nightly tests by @ andr317c in #19190
  • Tiptap cannot set the top position of the toolbar by @ enkelmedia in #19087
  • V16 QA Fixed nightly test pipeline by @ nhudinh0309 in #19226
  • Create Localization Contributing Documentation by @ DitteKKoustrup in #18412
  • V16 QA Updated the nightly test pipeline to run against the main branch by @ nhudinh0309 in #19261
  • Fix: Ensure minimum height for Block List Custom Views (#18398) by @ nielslyngsoe in #19253
  • V16 QA Added acceptance tests for publishing with descendants by @ nhudinh0309 in #19262
  • Cannot view audit logs when they contain entries with user id 0 by @ lauraneto in #19263
  • Fix localiztion for buttons in pagination by @ NguyenThuyLan in #19006
  • Change CONTRIBUTING.md to fit the new github style and also the branc… by @ Abdjulaziz in #19246
  • V16 QA Updated E2E nightly pipeline by @ nhudinh0309 in #19355
  • Fix for invalid state in JsonBlockValueConverter when an unused layout has a nested array by @ karl-sjogren in #19363
  • Handle user id 0 (Unknown/System) when building content version response by @ lauraneto in #19361
  • fix: check for NullRepresentationInCache in AppCacheExtensions by @ crjc in #19350
  • V16 Updated nightly E2E pipeline to run correct test scripts by @ andr317c in #19378
  • Use correct service name in obsoletion method by @ nikolajlauridsen in #19398
  • Cleaned up constructors, regions and variables in NewDefaultUrlProvider by @ AndyButland in #19403
  • Do not set icon color if the item is selected by @ lauraneto in #19404
  • Throw if attempting to use the default unique media path scheme with version 7 GUIDs by @ AndyButland in #19419
  • Sort available composition folders by @ lauraneto in #19373
  • Use the proper umb-input-date events in the log viewer date range element by @ lauraneto in #19451
  • Update references to Umbraco User model (Extension Template) by @ Rockerby in #19349
  • V16 Added acceptance tests for document property value permission by @ nhudinh0309 in #19385
  • V16 cherry pick of member partial cache invalidator see #19314 by @ Migaroez in #19459
  • Add unit test verifying dockerfile aligns with current target framework by @ AndyButland in #19445
  • Fixed JSDoc comment for ManifestBase.weight by @ karl-sjogren in #19488
  • V16 QA updated notification acceptance tests by @ andr317c in #19469
  • V16 QA Publish Console Error Logs by @ andr317c in #19417
  • Manifest Viewer to support number and boolean by @ nielslyngsoe in #19478
  • Adds attribute to ensure management API requests are never cached in the browser or via a CDN by @ AndyButland in #19496
  • Tiptap RTE: Toolbar/statusbar config initial value state by @ leekelleher in #19514
  • Update template to reference latest LTS version by @ AndyButland in #19517
  • Tiptap RTE: Style Menu action toggles by @ leekelleher in #19520
  • Replace keys in Rich Text Editor blocks on clone operations by @ lauraneto in #19526
  • V16: Item and Detail Base Repository should use correct typings for return types by @ iOvergaard in #19447
  • Added start-up logging of document URL caching by @ AndyButland in #19538
  • V16 QA Added acceptance tests for granular property value permission by @ nhudinh0309 in #19458
  • Removed duplicate/obsolete code fixing issue with document move permission checks by @ AndyButland in #19552
  • V16 QA Added acceptance tests for Webhook by @ nhudinh0309 in #19545
  • Docs: Collection example by @ madsrasmussen in #19593
  • Improves the layout on the create blueprint dialog by @ AndyButland in #19556
  • Variant workspace breadcrumb item parentheses by @ leekelleher in #19599
  • V16: Document shows blank page when clicking an active link by @ iOvergaard in #19553
  • Simplify creating content from a blueprint programmatically by @ lauraneto in #19528
  • Add missing media exports by @ WoutVanBoxem in #19585
  • Cherry picked #19540 to V16 (and fixed changed signatures) by @ kjac in #19592
  • v16 QA Remove smoke tag from flaky test by @ andr317c in #19611
  • Remove trash success notifications by @ madsrasmussen in #19534
  • DocumentUrlDataResolver: Use UMB_VARIANT_CONTEXT instead of UMB_PROPERTY_DATASET_CONTEXT by @ madsrasmussen in #19537
  • Tiptap RTE: Adds token for statusbar context by @ leekelleher in #19530
  • V16.1: Fix broken content creation when using blueprints by @ lauraneto in #19518
  • Show success/failed state for workspace buttons with additional options by @ madsrasmussen in #19535
  • Table checkbox/icon alignment by @ leekelleher in #19615
  • load more button component and styling by @ nielslyngsoe in #19622
  • Adds XML header docs indicating usage of options on NuCacheSerializerType by @ AndyButland in #19555
  • Assert dates in content editing integration tests to millisecond only by @ AndyButland in #19513
  • Fix for code scanning alert no. 1719: Client-side cross-site scripting by @ iOvergaard in #19607
  • Fix check for pending package migration to use the package not the plan name by @ AndyButland in #19509
  • fix: json serialization and deserialization for NuCacheSerializerType by @ davorzlotrg in #19617
  • Avoid async await Task.FromResult, plus some other minor tweaks by @ Henr1k80 in #19597
  • Reduce lookups needed in ConcurrentDictionaries in ContentNavigationServiceBase by @ Henr1k80 in #19603
  • set height to match workspace top bar by @ nielslyngsoe in #19384
  • ability to hide block actions by @ nielslyngsoe in #19626
  • Entity type + Entity Unique conditions by @ madsrasmussen in #19614
  • V15 Bugfix: Horizontal scrollbar in Media section