All pull requests

Pull requests

• chore: remove legacy LDAP authenticators and authentication pipeline

  #38542·wezell opened Nov 11, 2026Member·

  ·
  2

• chore: remove obsolete legacy backend and UI code

  #38541·wezell opened Nov 11, 2026Member·

  ·
  1

  3

• fix(push-publishing): allow many children per parent in a many-to-one relationship (#38538)

  Area : Backend
  #38539·DeanGonzalez opened Nov 11, 2026Contributor·2 of 3 tasks·

  ·
  1

• feat(portlets): promote the Angular Users, Roles and Tools portlets (#37356)

  Area : BackendArea : Frontend
  #38537·fmontes opened Nov 11, 2026Member·3 tasks done·

  ·
  1

  1

• refactor(auth): remove the legacy LDAP and CAS authenticators and the auth pipelines (#38476)

  AI: Safe To RollbackArea : Backend
  #38536·fabrizzio-dotCMS opened Nov 10, 2026Member·

  ·
  3

• fix(content): look up staged binaries only for binary columns in the legacy save

  Area : BackendLTS: Next Patch
  #38535·nicobytes opened Nov 10, 2026Member·

  ·
  1

• fix(contenttype): render the Scripting Developer view tools in the Custom Field preview

  Area : BackendTeam : Scout
  #38534·fabrizzio-dotCMS opened Nov 10, 2026Member·

  ·
  1

  1

• chore(sdk): bump MinSdkVersion.VALUE to 26.11.10-02

  Area : Backend
  #38532·dotCMS-Machine-User opened Nov 10, 2026Collaborator·

  ·
  1

• feat(link-checker): add REST resource for the Link Checker tool and move its screen to it

  Area : BackendLTS: Next Patch
  #38531·nicobytes opened Nov 10, 2026Member·

  ·
  1

• fix(cache): broadcast Flush All to the cluster again

  AI: Safe To RollbackArea : Backend
  #38530·swicken opened Nov 10, 2026Member·

  ·
  1

  1

• chore(deps): bump the npm_and_yarn group across 1 directory with 1 update

  dependenciesjavascript
  #38529·dependabot[bot] opened Nov 10, 2026Bot·

  ·
  1

• fix(velocity): decrypt in $crypt only for code written by a Scripting Developer

  AI: Safe To RollbackArea : BackendLTS: Next Patch
  #38527·adrianjm-dotCMS opened Nov 10, 2026Member·

  ·
  2

• feat(auth): configurable session login token lifetime with sliding renewal

  AI: Safe To RollbackArea : BackendArea : Documentation
  #38526·swicken opened Nov 10, 2026Member·

  ·
  8

• chore(deps): bump the maven group across 2 directories with 6 updates

  Area : Backenddependenciesjava
  #38525·dependabot[bot] opened Nov 10, 2026Bot·

  ·
  1

• feat(headers): send a Content-Security-Policy on back-end responses

  Area : Backend
  #38524·swicken opened Nov 10, 2026Member·

  ·
  10

• fix(integrity): bind ids as parameters in the integrity checker fix statements

  Area : Backend
  #38522·swicken opened Nov 10, 2026Member·

  ·
  13

• refactor(roles): move Roles & Tools role writes to REST and apply role moves immediately

  Area : Backend
  #38521·swicken opened Nov 10, 2026Member·

  ·
  4

• fix(auth): pace failed-login delay by attempt count and source history

  Area : Backend
  #38517·freddyDOTCMS opened Nov 10, 2026Member·2 tasks done·

  ·
  2

• fix(metrics): wire management scrapes and startup registry (#36996)

  AI: Safe To RollbackArea : BackendPR : dotbot review
  #38510·wezell opened Nov 10, 2026Member·

  ·
  2

  70

• Revert "fix(maintenance): verified HTTPS peer requests and configurable peer port in cluster log download (#38386)"

  AI: Safe To RollbackArea : Backend
  #38503·oidacra opened Nov 9, 2026Member·

  ·
  2

• chore(deps): upgrade jakarta.mail, json-path and httpclient5 (CVE-2025-7962, CVE-2023-51074, CVE-2026-64607)

  CVSS 4.0 : 6.9Team : Security
  #38498·JeanM3ry opened Nov 9, 2026·2 of 3 tasks·

  ·
  1

  1

• chore(deps): upgrade guava from 32.0.1-jre to 33.7.2-jre (CVE-2026-102554)

  CVSS 4.0 : 8.2Team : Security
  #38495·JeanM3ry opened Nov 9, 2026·2 of 3 tasks·

  ·
  1

  1

• fix(publishing): require the bundle owner or an admin to change bundle contents

  Area : BackendLTS: Needs Backport
  #38480·AP2300 opened Nov 6, 2026Contributor·

  ·
  4

  

• chore(sdk): bump MinSdkVersion.VALUE to 26.11.06-03

  Area : Backend
  #38478·dotCMS-Machine-User opened Nov 6, 2026Collaborator·

  ·
  1

• fix(webdav): restrict token-as-password auth to API tokens

  Area : Backend
  #38477·rjvelazco opened Nov 6, 2026Member·

  ·
  1