Umbraco.Cms.Web.Website

What's Changed

🔒 Security

• Resolved authorization bypass allows low-privileged users to delete media outside their start node from GHSA-7pj9-jmp9-p86q
• Resolved backoffice users can read content outside their start node via the document version endpoints from GHSA-w5jr-cmfx-544x
• Resolved unauthenticated SignalR hubs disclose content identifiers and editorial activity from GHSA-4c5q-6c64-96j7
• Resolved upload file extension restrictions are not enforced for file names ending in a period from GHSA-7pj9-jmp9-p86q

Full Changelog: release-17.7.0...release-17.7.1

What's Changed Since 17.7.0-rc

Full Changelog: release-17.7.0-rc...release-17.7.0

What's Changed Since the Previous Release (17.6.2)

🙌 Notable Changes

• Installer: Write connection string to the final available appsettings.*.json (closes #21833) by @AndyButland in #22817

📦 Dependencies

• Dependencies: Update backoffice npm packages to latest minors and patches (#23429) by @iOvergaard in #23498
• Dependencies: Update Tiptap to 3.29.2 by @leekelleher in #23562
• Dependencies: Update NuGet packages to latest minor and patch versions (v17) by @AndyButland in #23680
• Dependencies: Update NuGet packages to latest minor and patch versions by @AndyButland in #23732

🚀 New Features

• Bulk Actions: Show progress in a shared dialog for bulk publish, unpublish, delete, move & copy (closes #20797) by @iOvergaard in #21215
• Extension API: Add userEntryPoint extension type (closes #19485) by @iOvergaard in #23409
• Recycle bin: Support restoring a document or media item without its descendants at the service level (closes #23417) by @AndyButland in #23448
• Media Picker: Show ancestor breadcrumb path in search results table view (closes #23101) by @AndyButland in #23116
• Pickers: Show the number of selected items in the tree and collection item picker modals by @madsrasmussen in #23606
• Tree Item Picker: Make table rows and cards with children navigable in pickers during selection by @madsrasmussen in #23593
• Pickers: Split browse and search into tabs by @madsrasmussen in #23617
• Media: drag n drop CTA for Collections and Pickers (Closes #18332) by @Abdjulaziz in #22739
• Collections: Remember the view, filter, ordering and page of a collection (closes #22418) by @madsrasmussen in #23571
• Document Tree: Add card and table views by @madsrasmussen in #23642
• Management API: Add hasChildren to document and media collection responses by @AndyButland in #23685

🚤 Performance

• Avoid some string allocations by @Henr1k80 in #23402
• Normalize culture code casing in SetCultureInfo and SetPublishInfo by @ronaldbarendse in #23425
• Backoffice Performance: Defer decorator controller creation to hostConnected by @iOvergaard in #22519
• Media: Narrow sibling name-uniqueness fetch so writes scale on large libraries (closes #23446) by @AndyButland in #23447
• Published cache: Populate the ID/key map from seeded and cached content (closes #23583) by @AndyButland in #23586
• Tree: Increase child page size to 100 by @madsrasmussen in #23585
• Tree: Avoid reloads on no-change config updates by @nielslyngsoe in #23670
• Performance: Only load server information once when instantiating the backoffice by @nielslyngsoe in #23673
• Content Workspace: get languages from context by @nielslyngsoe in #23668
• Published Cache: Stop writing unread member rows to the database cache (closes #23070) by @AndyButland in #23730
• Content & Media: Batch cold read-through for Children()/Descendants() traversal by @AndyButland in #23358
• Micro-optimisation: Speed & memory improvements for CompositeStringStringKey by @patrickdemooij9 in #23471
• Micro-optimisations: Avoid redundant allocations in file name and log filter by @patrickdemooij9 in #23474
• Micro-optimisations: Improve memory usage for ReplaceMany string extension method by @patrickdemooij9 in #23483
• Micro-optimisation: Avoid Activator.CreateInstance when creating MediaWithCrops by @patrickdemooij9 in #23496
• Micro-optimisations: Delivery API node parse improvement by @patrickdemooij9 in #23506

🐛 Bug Fixes

• Member Types: Fixed issue with missing icon for workspace design view by @abjerner in #23391
• Extension API: Guard against a cleared manifest when an extension is unregistered mid-initialization (closes #23384) by @AndyButland in #23395
• Date Time Picker: Honour min/max config on the time-zone-aware editors (closes #23372) by @AndyButland in #23373
• Migrations: Fix errors upgrading v13 databases with block editors to v17 by @AndyButland in #23401
• Current User: Re-fetch the current user when authorization is regained after a session timeout by @iOvergaard in #23408
• Collection Views: Accumulate table selection across pages (closes #23403) by @rickbutterfield in #23406
• Content Workspaces: Redirect stale variant workspace URLs when the content type variance changes by @iOvergaard in #23385
• Imaging: Respect ImageFileTypes configuration in management API factories by @iOvergaard in #23413
• Users: Validate avatar uploads against configured image file types by @iOvergaard in #23415
• Maindom: Broadcast cache instructions without maindom by @Zeegaan in #23421
• Scoping: Restore LogIncompletedScopes warning for uncompleted child scopes (closes #15243) by @AndyButland in #23424
• Block Workspace: Guard block label render against a destroyed workspace (closes #22745) by @iOvergaard in #23449
• Backoffice: Support running in insecure browser contexts (plain HTTP on IP addresses) by @iOvergaard in #23426
• Migrations: Migrate settings values for block editors when a block has no content values (closes #23392) by @AndyButland in #23404
• Logging: Prevent session-id log enricher recursion / stack overflow (closes #16744) by @AndyButland in #23423
• Preview: Refresh external preview tabs and their token on repeat preview (closes #21820) by @iOvergaard in #23450
• Content Types: Fix stale published cache when property variance changes without content type variance changing by @lauraneto in #23445
• Routing: Add close button to access denied route when displayed in modal (closes #23451) by @ShekharTarare in #23456
• Block Editors: Preserve published state of property-less blocks on upgrade (closes #23379) by @AndyButland in #23383
• Localization: Fix punctuation in resetFocalPoint string by @bjarnef in #23479
• Block Grid: Use the content element type name in the invalid-location tag (closes #23092) by @iOvergaard in #23511
• Confirm Modal: Escaped special characters in item names by @leekelleher in #23542
• Tiptap RTE: Load configured stylesheets regardless of extension styles (closes #21819) by @leekelleher in #23497
• Tiptap RTE: Render umbLink via MarkView to stop data-router-slot attribute leaking into stored HTML by @leekelleher in #23488
• Tiptap RTE: Preserve block-level elements nested in <div> containers (closes #22654) by @leekelleher in #23489
• Localization: Danish translation for BlockEditor confirmDeleteBlockTitle by @nielslyngsoe in #23543
• Basic Authentication: Allow preview requests from an authenticated back-office user (closes #23475) by @AndyButland in #23539
• Migrations: Only rebuild the published cache for migration plans that request it (closes #23537) by @AndyButland in #23533
• Imaging: Enforce max width/height when HMAC is configured by @AndyButland in #23521
• Management API: Generate valid operation IDs for minor API versions, and upgrade @hey-api/openapi-ts by @iOvergaard in #23499
• Tiptap RTE: Prevent duplicate toolbar items when reordering a newly dragged item (closes #23524) by @AndyButland in #23538
• Tiptap RTE: Fix crash when content contains an embedded media node by @leekelleher in #23563
• Publishing: Save the document before publishing it with descendants (closes #14925) by @iOvergaard in #23554
• Content Types: Fix MovePropertyType orphaning the property when moving it to no group (closes #23481) by @AndyButland in #23493
• SignalR Events: Filter document and media notifications by the recipient's start-node access by @AndyButland in #23555
• Tiptap RTE: Retain media folder context across picker modals (closes #23367) by @leekelleher in #23507
• Preview: Add the CSP nonce to the injected preview badge script (closes #23530) by @iOvergaard in #23560
• Block editors: Pair inner block values by block key when merging variant data (closes #23525) by @iOvergaard in #23527
• Segments: Fix mandatory segment property validation (closes #23576) by @kjac in #23587
• Content type designer: add root property styles by @nielslyngsoe in #23611
• Localization: Restore from recycle bin and image crops property editor by @Lantzify in #23621
• Pagination: 100% wide by @nielslyngsoe in #23640
• @noonand made their first contribution in #23655
• Log Viewer: Send log viewer date range as local-day instants and honour time portions (closes #14710) by @readingdancer in #23460
• Blocks: Inline Editing Context API Race Condition (Closes #22444) by @nielslyngsoe in #23610
• Routing: Don't retain the fallback default culture captured during an upgrade boot (closes #22581) by @AndyButland in #23653
• Property Context: proper observation cleanup by @nielslyngsoe in #23674
• Segments: Handle segment values for IsPropertyValid by @kjac in #23691
• Migrations: Don't rebuild the published cache after a failed migration plan (closes #23612) by @AndyButland in #23709
• @arnelirobles made their first contribution in #23599
• OpenIddict: Compare ConsentType and ApplicationType only when the descriptor sets them (follow-up to #23599) by @arnelirobles in #23727
• oEmbed: Fix HttpClient initialization race in OEmbedProviderBase (closes #23697) by @AndyButland in #23715
• Cleanup: refinement of cleanup localization by @nielslyngsoe in #23686
• Content Types: Allow editing compositions on document types that are inherited from (closes #23103) by @AndyButland in #23433
• Migrations: Resolve date default constraints by lookup rather than by convention (closes #23702) by @AndyButland in #23704
• Variant selector: avoid rendering fallback shortly by @nielslyngsoe in #23721
• Logging: Include the GUID key alongside the integer id in log messages (closes #23547) by @AndyButland in #23552
• Members: Indicate that withheld sensitive values exist instead of showing their defaults by @AndyButland in #23707
• Tiptap RTE: Fix table toolbar menu staying open after deleting table (closes #23658) by @andreaslborg in #23669
• TipTap RTE: Remove toolbar shadow before scroll (closes

Note truncated.

What's Changed

🙌 Notable Changes

• Installer: Write connection string to the final available appsettings.*.json (closes #21833) by @AndyButland in #22817

📦 Dependencies

• Dependencies: Update backoffice npm packages to latest minors and patches (#23429) by @iOvergaard in #23498
• Dependencies: Update Tiptap to 3.29.2 by @leekelleher in #23562
• Dependencies: Update NuGet packages to latest minor and patch versions (v17) by @AndyButland in #23680
• Dependencies: Update NuGet packages to latest minor and patch versions by @AndyButland in #23732

🚀 New Features

• Bulk Actions: Show progress in a shared dialog for bulk publish, unpublish, delete, move & copy (closes #20797) by @iOvergaard in #21215
• Extension API: Add userEntryPoint extension type (closes #19485) by @iOvergaard in #23409
• Recycle bin: Support restoring a document or media item without its descendants at the service level (closes #23417) by @AndyButland in #23448
• Media Picker: Show ancestor breadcrumb path in search results table view (closes #23101) by @AndyButland in #23116
• Pickers: Show the number of selected items in the tree and collection item picker modals by @madsrasmussen in #23606
• Tree Item Picker: Make table rows and cards with children navigable in pickers during selection by @madsrasmussen in #23593
• Pickers: Split browse and search into tabs by @madsrasmussen in #23617
• Media: drag n drop CTA for Collections and Pickers (Closes #18332) by @Abdjulaziz in #22739
• Collections: Remember the view, filter, ordering and page of a collection (closes #22418) by @madsrasmussen in #23571
• Document Tree: Add card and table views by @madsrasmussen in #23642
• Management API: Add hasChildren to document and media collection responses by @AndyButland in #23685

🚤 Performance

• Avoid some string allocations by @Henr1k80 in #23402
• Normalize culture code casing in SetCultureInfo and SetPublishInfo by @ronaldbarendse in #23425
• Backoffice Performance: Defer decorator controller creation to hostConnected by @iOvergaard in #22519
• Media: Narrow sibling name-uniqueness fetch so writes scale on large libraries (closes #23446) by @AndyButland in #23447
• Published cache: Populate the ID/key map from seeded and cached content (closes #23583) by @AndyButland in #23586
• Tree: Increase child page size to 100 by @madsrasmussen in #23585
• Tree: Avoid reloads on no-change config updates by @nielslyngsoe in #23670
• Performance: Only load server information once when instantiating the backoffice by @nielslyngsoe in #23673
• Content Workspace: get languages from context by @nielslyngsoe in #23668
• Published Cache: Stop writing unread member rows to the database cache (closes #23070) by @AndyButland in #23730
• Content & Media: Batch cold read-through for Children()/Descendants() traversal by @AndyButland in #23358
• Micro-optimisation: Speed & memory improvements for CompositeStringStringKey by @patrickdemooij9 in #23471
• Micro-optimisations: Avoid redundant allocations in file name and log filter by @patrickdemooij9 in #23474
• Micro-optimisations: Improve memory usage for ReplaceMany string extension method by @patrickdemooij9 in #23483
• Micro-optimisation: Avoid Activator.CreateInstance when creating MediaWithCrops by @patrickdemooij9 in #23496
• Micro-optimisations: Delivery API node parse improvement by @patrickdemooij9 in #23506

🐛 Bug Fixes

• Member Types: Fixed issue with missing icon for workspace design view by @abjerner in #23391
• Extension API: Guard against a cleared manifest when an extension is unregistered mid-initialization (closes #23384) by @AndyButland in #23395
• Date Time Picker: Honour min/max config on the time-zone-aware editors (closes #23372) by @AndyButland in #23373
• Migrations: Fix errors upgrading v13 databases with block editors to v17 by @AndyButland in #23401
• Current User: Re-fetch the current user when authorization is regained after a session timeout by @iOvergaard in #23408
• Collection Views: Accumulate table selection across pages (closes #23403) by @rickbutterfield in #23406
• Content Workspaces: Redirect stale variant workspace URLs when the content type variance changes by @iOvergaard in #23385
• Imaging: Respect ImageFileTypes configuration in management API factories by @iOvergaard in #23413
• Users: Validate avatar uploads against configured image file types by @iOvergaard in #23415
• Maindom: Broadcast cache instructions without maindom by @Zeegaan in #23421
• Scoping: Restore LogIncompletedScopes warning for uncompleted child scopes (closes #15243) by @AndyButland in #23424
• Block Workspace: Guard block label render against a destroyed workspace (closes #22745) by @iOvergaard in #23449
• Backoffice: Support running in insecure browser contexts (plain HTTP on IP addresses) by @iOvergaard in #23426
• Migrations: Migrate settings values for block editors when a block has no content values (closes #23392) by @AndyButland in #23404
• Logging: Prevent session-id log enricher recursion / stack overflow (closes #16744) by @AndyButland in #23423
• Preview: Refresh external preview tabs and their token on repeat preview (closes #21820) by @iOvergaard in #23450
• Content Types: Fix stale published cache when property variance changes without content type variance changing by @lauraneto in #23445
• Routing: Add close button to access denied route when displayed in modal (closes #23451) by @ShekharTarare in #23456
• Block Editors: Preserve published state of property-less blocks on upgrade (closes #23379) by @AndyButland in #23383
• Localization: Fix punctuation in resetFocalPoint string by @bjarnef in #23479
• Block Grid: Use the content element type name in the invalid-location tag (closes #23092) by @iOvergaard in #23511
• Confirm Modal: Escaped special characters in item names by @leekelleher in #23542
• Tiptap RTE: Load configured stylesheets regardless of extension styles (closes #21819) by @leekelleher in #23497
• Tiptap RTE: Render umbLink via MarkView to stop data-router-slot attribute leaking into stored HTML by @leekelleher in #23488
• Tiptap RTE: Preserve block-level elements nested in <div> containers (closes #22654) by @leekelleher in #23489
• Localization: Danish translation for BlockEditor confirmDeleteBlockTitle by @nielslyngsoe in #23543
• Basic Authentication: Allow preview requests from an authenticated back-office user (closes #23475) by @AndyButland in #23539
• Migrations: Only rebuild the published cache for migration plans that request it (closes #23537) by @AndyButland in #23533
• Imaging: Enforce max width/height when HMAC is configured by @AndyButland in #23521
• Management API: Generate valid operation IDs for minor API versions, and upgrade @hey-api/openapi-ts by @iOvergaard in #23499
• Tiptap RTE: Prevent duplicate toolbar items when reordering a newly dragged item (closes #23524) by @AndyButland in #23538
• Tiptap RTE: Fix crash when content contains an embedded media node by @leekelleher in #23563
• Publishing: Save the document before publishing it with descendants (closes #14925) by @iOvergaard in #23554
• Content Types: Fix MovePropertyType orphaning the property when moving it to no group (closes #23481) by @AndyButland in #23493
• SignalR Events: Filter document and media notifications by the recipient's start-node access by @AndyButland in #23555
• Tiptap RTE: Retain media folder context across picker modals (closes #23367) by @leekelleher in #23507
• Preview: Add the CSP nonce to the injected preview badge script (closes #23530) by @iOvergaard in #23560
• Block editors: Pair inner block values by block key when merging variant data (closes #23525) by @iOvergaard in #23527
• Segments: Fix mandatory segment property validation (closes #23576) by @kjac in #23587
• Content type designer: add root property styles by @nielslyngsoe in #23611
• Localization: Restore from recycle bin and image crops property editor by @Lantzify in #23621
• Pagination: 100% wide by @nielslyngsoe in #23640
• @noonand made their first contribution in #23655
• Log Viewer: Send log viewer date range as local-day instants and honour time portions (closes #14710) by @readingdancer in #23460
• Blocks: Inline Editing Context API Race Condition (Closes #22444) by @nielslyngsoe in #23610
• Routing: Don't retain the fallback default culture captured during an upgrade boot (closes #22581) by @AndyButland in #23653
• Property Context: proper observation cleanup by @nielslyngsoe in #23674
• Segments: Handle segment values for IsPropertyValid by @kjac in #23691
• Migrations: Don't rebuild the published cache after a failed migration plan (closes #23612) by @AndyButland in #23709
• @arnelirobles made their first contribution in #23599
• OpenIddict: Compare ConsentType and ApplicationType only when the descriptor sets them (follow-up to #23599) by @arnelirobles in #23727
• oEmbed: Fix HttpClient initialization race in OEmbedProviderBase (closes #23697) by @AndyButland in #23715
• Cleanup: refinement of cleanup localization by @nielslyngsoe in #23686
• Content Types: Allow editing compositions on document types that are inherited from (closes #23103) by @AndyButland in #23433
• Migrations: Resolve date default constraints by lookup rather than by convention (closes #23702) by @AndyButland in #23704
• Variant selector: avoid rendering fallback shortly by @nielslyngsoe in #23721
• Logging: Include the GUID key alongside the integer id in log messages (closes #23547) by @AndyButland in #23552
• Members: Indicate that withheld sensitive values exist instead of showing their defaults by @AndyButland in #23707
• Tiptap RTE: Fix table toolbar menu staying open after deleting table (closes #23658) by @andreaslborg in #23669
• TipTap RTE: Remove toolbar shadow before scroll (closes

Note truncated.

What's Changed

🔒 Security

• Resolved incorrect authorization lets Content-only backoffice users modify Templates, enabling remote code execution from GHSA-f7m5-5x7g-2p52
• Resolved insufficient authorization on Management API search endpoints from GHSA-w5q3-9wf8-43gg

🐛 Bug Fixes

• Routing: Don't retain the fallback default culture captured during an upgrade boot (closes #22581) by @AndyButland in #23653

Full Changelog: release-17.6.1...release-17.6.2

What's Changed

🐛 Bug Fixes

• Hotfix: export a Backoffice version of demandCustomElement by @nielslyngsoe in #23624
• Hotfix: adding backwards compatible exports by @nielslyngsoe in #23626
• Hotfix: Reintroduce deprecated UUI components by @nielslyngsoe in #23628
• Pagination: 100% wide by @nielslyngsoe in #23640

Full Changelog: release-17.6.0...release-17.6.1

What's Changed Since 17.6.0-rc2

🐛 Bug Fixes

• Scoping: Isolate the ambient scope stacks across execution context flows (closes #23336) by @Ron-Brouwer in #23492

Full Changelog: release-17.6.0-rc2...release-17.6.0

What's Changed Since 17.6.0-rc

📦 Dependencies

• build(deps): bumps @umbraco-ui/uui from 2.0.1 to 2.0.2 by @iOvergaard in #23490

🐛 Bug Fixes

• Auth: Do not treat a boot-time token refresh rejection as a session timeout (closes #23462) by @iOvergaard in #23494
• Content Notifications: Raise ContentSavedNotification on save-and-publish (closes #23523)- #23528
  by @AndyButland in #23528

Full Changelog: release-17.6.0-rc...release-17.6.0-rc2

What's Changed Since the Previous Version (17.5.3)

📦 Dependencies

• Dependencies: Update NuGet packages to latest minor and patch versions by @AndyButland in #23269 and #23453
• UUI: Upgrade to 2.0.1 by @iOvergaard in #23209
• Dependencies: Upgrade Examine to 3.8.0 by @si25 in #23075
• Dependencies: Update MessagePack to 3.1.7 to address security advisories by @AndyButland in #23113
• Dependencies: Pin SQLitePCLRaw.lib.e_sqlite3 to a non-vulnerable version (closes #23325) by @AndyButland in #23393

🚀 New Features

• Components: adds umb-entity-frame component + Storybook stories by @leekelleher in #22844
• UFM: Add umbMemberName component (closes #22147) by @leekelleher in #23165
• Media: Add umb-media-thumbnail with configurable checkerboard background (closes #23177) by @iOvergaard in #23178
• Media picker: Allows cancellation of folder creation, and adds buttons for better accessibility (closes #20452) by @iOvergaard in #23276
• Property Editors: Add value summary extensions for collection views by @nielslyngsoe in #23027
• Management API: Add endpoints to sort the children of a document or media item by a system field by @AndyButland in #23077
• Scheduled publishing: Add configurable period and optional clock-aligned scheduling by @AndyButland in #23127
• Media: Add support for Media URL providers with cache busting (Closes #23282) by @kjac in #23327

🚤 Performance

• Performance: Coalesce JavaScript chunks around the Backoffice to reduce the number of requests by @iOvergaard in #22896
• Performance: Embed package root manifests into umbraco-package.ts to reduce startup requests by @madsrasmussen in #22957
• Performance: Embed implementations directly in core manifests to reduce startup network requests by @madsrasmussen in #22944
• Performance: Parallelize independent boot API requests (server status/config + public extensions) by @iOvergaard in #23020
• Performance: Load stylesheets parallel to extensions in Tiptap by @nielslyngsoe in #23024
• Performance: Coalesce concurrent tree data requests (Management API client) by @iOvergaard in #23021
• Performance: Add index on umbracoContent.contentTypeId by @AndyButland in #23328
• Performance: Batch the content cache delete on structural content type changes by @AndyButland in #23329
• Performance: Skip the content cache rebuild when a document type property is removed by @AndyButland in #23330
• Performance: Avoid heap allocations when converting between int & Guid by @Henr1k80 in #23389
• Children/Descendants: improve traversal performance (closes #22646) by @AndyButland in #22742
• Media: Port Children/Descendants traversal optimisations to media (#22742 follow-up) by @AndyButland in #23356
• Examine: Stream value sets to a single index during rebuild to reduce reindex peak memory by @AndyButland in #23150
• Caching: Add an optional bounded, limit to the published-content (L0) cache by @AndyButland in #23158
• Cache: Add scope-level cache version tier to reduce DB hits in bulk operations by @nikolajlauridsen in #22563
• Backoffice: Add Cache-Control headers to cache-busted backoffice assets (AB#68478) by @iOvergaard in #22951
• Request Logging: Avoid forcing a session store load when resolving the session id for logging (closes #23082) by @AndyButland in #23083
• Document URLs: Retrieve only the current culture's URL for the Info workspace links panel (closes #23196) by @AndyButland in #23265

🌈 Accessibility Improvements

• Accessibility: Added missing labels to code block copy button and embedded media URL input by @andreaslborg in #22825
• Accessibility: Added missing labels to webhook details and headers by @andreaslborg in #22918
• Image Cropper: Improve contrast of append label in crop options editor (closes #22878) by @andreaslborg in #22917

🐛 Bug Fixes

• Languages: Page through to load all configured languages by @AndyButland in #22765
• Repositories: Batch WHERE IN queries to avoid SQL Server 2100-parameter limit by @AndyButland in #22987
• Documents: Alias DocumentVariantStateModel API model for backoffice client by @leekelleher in #22716
• Tiptap RTE: Ignore no-op transactions in onUpdate to prevent phantom dirty state (closes #22767) by @AndyButland in #22781
• Distributed background jobs: Improve gracefull shutdown behaviour by @Migaroez in #22796
• Content: Ensure correct variant change tracking when unpublishing variant content by @kjac in #22799
• Sort Children: Show loading state on Sort button (closes #22651) by @AndyButland in #22813
• SignalR: Mark ServerEventSender as a distributed cache notification handler by @ronaldbarendse in #22818
• Backoffice: Preserve user-supplied property editor UI group names (closes #22189) by @AndyButland in #22196
• Core: Preserve path case in ShadowFileSystem by @nul800sebastiaan in #22838
• Log Viewer: Updated the saved log viewer searches for new installs to reference Umbraco.Cms instead of Umbraco.Core. by @AndyButland in #22843
• Migrations: Add auto upgrade coordination for load-balanced setups by @nikolajlauridsen in #22815
• Blueprints: Fix UdiEntityTypeHelper.ToUmbracoObjectType() for document blueprint containers by @ronaldbarendse in #22875
• Redirect URL Tracker: Remove ability to toggle from the UI by @AndyButland in #22830
• Log Viewer: Defensively handle corrupt log files (closes #22820) by @AndyButland in #22826
• Content Editing: Fix save composition values on invariant content and save of default segment (closes #22800, #22865) by @AndyButland in #22846
• Block Grid: Fix inline create button width not updating on workspace resize (closes #22527) by @engijlr in #22928
• Background Jobs: Rewrite RecurringHostedServiceBase with SemaphoreSlim and add signalling support by @ronaldbarendse in #22331
• Migrations: Append data-anchor value to href when missing in local link migration (closes #22860) by @AndyButland in #22936
• Body Layout: Replace overflow: auto with uui-scroll-container by @engijlr in #22950
• Management API: ensure the order from the search endpoints taking a collection of keys is preserved by @NguyenThuyLan in #22973
• Backoffice search: Preserve Lucene score order through content-picker lookups (closes #22862) by @AndyButland in #22977
• Members: Default Approved to true when creating a member (closes #22991) by @AndyButland in #22993
• Migrations: Convert all sibling RTE blocks (closes #22979) by @AndyButland in #22980
• Sort Dialog: Show current language node names (closes #22872) by @AndyButland in #22948
• Backoffice: Hide "Edit permissions" button in create modals from users without Settings section access (closes #22981) by @AndyButland in #22984
• Content Type Editor: Fix empty Design tab when opened in a modal workspace (closes #22855) by @AndyButland in #22954
• Backoffice: Render $index in block detail overlay label (closes #21154) by @AndyButland in #22959
• References: Fix missing node name when content referenced by media or member (closes #22990) by @AndyButland in #22965
• Link Picker: Render picked content/media as non-interactive when their workspace URL can't be resolved (closes #22955) by @AndyButland in #22964
• EF Core: Retry transient SQLite lock errors during long-running operations (closes #22939) by @AndyButland in #22969
• Document Recycle Bin: Checks user permission for Document "Read" by @leekelleher in #23041
• Media: Restore friendly naming of uploaded media items (closes #22989) by @AndyButland in #22998
• Block Grid: Guard validator against torn-down manager on navigation by @leekelleher in #22852
• Menu Structure: Guard against use-after-destroy in async structure request by @leekelleher in #23055
• Background Jobs: Resolve server role so recurring jobs run when no application URL is configured by @AndyButland in #23033
• Data Types: Tolerate invalid configuration when determining the editor value storage type (closes #23057) by @AndyButland in #23058
• Runtime Cache: Fix IAppPolicyCache.ClearByKey intermittently failing to clear cached items (closes #23064) by @AndyButland in #23068
• Published Cache: Fix multi-site domains falling back to the first root node after restart by @AndyButland in #23084
• Tags: Fix null reference error in tags input on render (closes #23044) by @AndyButland in #23049
• Backoffice Search: Batch the ancestors lookup for search results to avoid exceeding the maximum URL length (closes #23032) by @AndyButland in #23048
• Backoffice: Pre-expand tree to target entity when opening Duplicate and Move To modals (closes #22015) by @madsrasmussen in #23063
• Package migrations: Surface a failed unattended package migration as a boot failure instead of getting stuck on the upgrade screen by @AndyButland in #23114
• Content/Media: Reload content on Sort to avoid data loss with partially loaded entities (closes #23120) by @AndyButland in #23128
• Background Jobs: Recover cache-sync and server-touch jobs when a database call hangs (closes #23106) by @AndyButland in #23119
• User Groups: Clear the user group cache when a language is deleted (closes #23121) by @AndyButland in #23131
• Tiptap RTE: Fixes toolbar button active state not updating on collapsed-cursor mark toggle (closes #22907) by @rammi987 in #22929
• Tiptap: Preserve wrapping link when editing an image (closes #23013) by @AndyButland in #23019
• Cache: Populate the domain cache eagerly during start-up by @kjac in #23139
• Content & Media: Enforce content type filters and allowed children/root rules when validating a create by @AndyButland in #23163
• Block Workspace: Support variant properties and make '$settings' a key-value-object (Closes #23095) by @nielslyngsoe in #23123
• Block RTE: Implem

Note truncated.