All pull requests

Pull requests

• refactor(38078): consolidate admin menu state into GlobalStore (#38078)

  Area : DocumentationArea : Frontend
  #38082·nicobytes opened Oct 16, 2026Member·4 tasks·

  ·
  1

• feat(edit-content): state chip next to the title, Preview in the sidebar, Title / All Fields search in the asset picker (#38056)

  Area : DocumentationArea : Frontend
  #38081·nicobytes opened Oct 16, 2026Member·3 tasks done·

  ·
  1

  1

• docs(spec): admin UI labels show raw i18n keys on cold loads (#37993)

  #38080·hmoreras opened Oct 16, 2026Member·

  ·
  2

• fix(permissions): require EDIT_PERMISSIONS before PermissionAjax changes an asset's permissions

  Area : Backend
  #38077·oidacra opened Oct 16, 2026Member·2 of 3 tasks·

  ·
  10

• fix(edit-content): keep unsaved relationship changes on lock/unlock and save other-side relationship fields (#38034)

  Area : BackendArea : Frontend
  #38076·adrianjm-dotCMS opened Oct 16, 2026Member·2 of 3 tasks·

  ·
  1

  1

• docs(spec): Content Drive folder tree hides readable folders from non-admin users

  #38073·rjvelazco opened Oct 16, 2026Member·

  ·
  1

  7

• chore(webdav): align WebDAV authentication with the back-end login

  Area : BackendTeam : Security
  #38071·mbiuki opened Oct 16, 2026Member·

  ·
  2

• chore(deps): remove BeanShell and obsolete WebDAV auth hook

  AI: Safe To RollbackArea : BackenddependenciesdotCMS : AuthenticationPR : dotbot reviewTeam : PlatformType : Task
  #38070·wezell opened Oct 16, 2026Member·3 tasks done·

  ·
  1

  5

• Validate every redirect hop on outbound fetches

  AI: Safe To RollbackArea : BackendPR : dotbot review
  #38062·mbiuki opened Oct 16, 2026Member·2 of 3 tasks·

  ·
  1

  4

• Add account lockout after repeated failed logins

  AI: Safe To RollbackArea : Backend
  #38061·mbiuki opened Oct 16, 2026Member·2 of 3 tasks·

  ·
  1

  9

• Show an API token's JWT only when the token is created

  AI: Safe To RollbackArea : BackendArea : Frontend
  #38059·mbiuki opened Oct 16, 2026Member·2 of 3 tasks·

  ·
  1

  2

• feat(content-drive): import content from a CSV (#37896)

  Area : BackendArea : Frontend
  #38054·KevinDavilaDotCMS opened Oct 15, 2026Contributor·3 tasks done·

  ·
  1

  41

• fix(edit-content): UI polish — header divider, date picker width, relationship icons, copy button (#37958)

  AI: Safe To RollbackArea : Frontend
  #38052·adrianjm-dotCMS opened Oct 15, 2026Member·2 of 3 tasks·

  ·
  1

  15

• ci: refresh the Node 20 actions of the release, evergreen and stale workflows

  Area : CI/CD
  #38049·dcolina opened Oct 15, 2026Contributor·1 of 3 tasks·

  ·

• ci: upgrade the Node 12 actions of the docs and javadoc publishing paths

  Area : CI/CD
  #38048·dcolina opened Oct 15, 2026Contributor·1 of 3 tasks·

  ·

• security(deps): upgrade bundled TinyMCE to pick up patched DOMPurify

  AI: Safe To RollbackArea : BackendCVSS 4.0 : 2.1Team : Security
  #38045·gortiz-dotcms opened Oct 15, 2026Member·

  ·
  2

• Export content to CSV in Content Drive

  AI: Safe To Rollback
  #38043·dario-daza opened Oct 14, 2026Member·3 tasks done·

  ·
  1

  20

• docs(spec): run @dotcms/events on traditional pages as an opt-in script (#37798)

  AI: Safe To Rollback
  #38040·oidacra opened Oct 14, 2026Member·1 of 3 tasks·

  ·
  16

• feat(rest): allow anonymous /api/vtl and /api/js independently of CONTENT_APIS_ALLOW_ANONYMOUS

  Area : BackendArea : Documentation
  #38039·swicken opened Oct 14, 2026Member·2 of 3 tasks·

  ·
  1

  11

• feat(publishing-queue): show unsent bundles as New rows with a Set up action

  Area : BackendArea : Frontend
  #38038·AP2300 opened Oct 14, 2026Contributor·4 tasks done·

  ·
  1

  4

• docs(spec): cluster nodes endpoint and status report fixes for the Network portlet (#37875, #37876)

  #38032·hassandotcms opened Oct 14, 2026Contributor·

  ·
  1

  24

• docs(image-editor): add issue spec for dimension input commit and link toggle (#38019)

  #38030·oidacra opened Oct 14, 2026Member·

  ·
  1

  1

• Spec: Publishing Environments modal in Publishing Queue (#37813)

  #38028·AP2300 opened Oct 14, 2026Contributor·4 tasks·

  ·

• chore: update LICENSE change date

  #38021·dotCMS-Machine-User opened Oct 13, 2026Collaborator·

  ·
  3

• fix(security): bump mermaid to pick up patched DOMPurify on release-25.07.10_lts

  CVSS 4.0 : 2.1Team : Security
  #38011·gortiz-dotcms opened Oct 13, 2026Member·

  ·
  2