All pull requests

Pull requests

• chore(deps): bump the maven group across 3 directories with 14 updates

  Area : Backenddependenciesjava
  #38154·dependabot[bot] opened Oct 22, 2026Bot·

  ·
  1

• docs(testing): fix rule links and require destination-suite validation

  Area : DocumentationTeam : MaintenanceType : Documentation
  #38152·wezell opened Oct 21, 2026Member·

  ·
  1

  

• fix(publishing): require access rules for uploaded bundles and plugin jars in received bundles

  AI: Safe To RollbackArea : Backend
  #38149·ihoffmann-dot opened Oct 21, 2026Member·

  ·
  12

• fix(rest-api): mask or hide configured content properties for non-back-end callers (#37787)

  Area : Backend
  #38148·danielsolis-dotcms opened Oct 21, 2026Contributor·3 tasks done·

  ·
  1

  1

  

• fix(templates): encode title and site name in the template picker label

  Area : Backend
  #38146·nicobytes opened Oct 21, 2026Member·

  ·
  1

• fix(users): scope user list fields to the caller's access

  Area : Backend
  #38145·adrianjm-dotCMS opened Oct 21, 2026Member·

  ·
  7

• fix(test): stop StoryBlockMapTest depending on a thread-bound request, and fix an inverted host check

  Area : Backend
  #38141·swicken opened Oct 21, 2026Member·2 of 3 tasks·

  ·
  2

• fix(test): seed the languages the language-variable migration test asserts on

  Area : Backend
  #38140·swicken opened Oct 21, 2026Member·2 of 3 tasks·

  ·
  1

  2

• fix(security): require opt-in for anonymous content API access

  Area : BackendArea : DocumentationChangelog: Needs DocdotCMS : Rest APIPR : dotbot reviewTeam : PlatformType : Task
  #38131·wezell opened Oct 21, 2026Member·

  ·
  1

  8

• fix(rest): return lock owner name to back-end users and normalize forgot-password response

  Area : Backend
  #38128·hassandotcms opened Oct 21, 2026Contributor·

  ·

• fix(tags): check the user's permissions when deleting tags

  Area : Backend
  #38127·KevinDavilaDotCMS opened Oct 20, 2026Contributor·2 of 3 tasks·

  ·
  2

• fix(users): only a CMS Administrator can change a user's roles

  AI: Safe To RollbackArea : Backend
  #38120·freddyDOTCMS opened Oct 20, 2026Member·

  ·
  2

• feat(users): filter users by role id and align role filters with the includeRoles privilege

  Area : BackendArea : Frontend
  #38116·AP2300 opened Oct 20, 2026Contributor·

  ·
  

• fix(ai): require admin to create embeddings

  AI: Safe To RollbackArea : Backend
  #38115·adrianjm-dotCMS opened Oct 20, 2026Member·

  ·
  1

• #38083 include in 25.07.10 LTS: bump dotSAML bundle to 26.10.17 (DO NOT MERGE until published)

  #38111·gortiz-dotcms opened Oct 20, 2026Member·5 tasks·

  ·

• fix(users): logout-as restores the principal only from an active login-as session

  Area : Backend
  #38110·swicken opened Oct 20, 2026Member·2 of 3 tasks·

  ·
  7

• fix(graphql): scope response cache entries to the caller and request context

  AI: Safe To RollbackArea : Backend
  #38107·nollymar opened Oct 19, 2026Member·3 tasks done·

  ·
  1

• fix(velocity): harden what bound viewtools hand to templates

  Area : BackendArea : FrontendArea : SDKPR : dotbot review
  #38100·nollymar opened Oct 19, 2026Member·

  ·
  13

• feat(apps): manage Apps configuration as an administrator setting

  Area : BackendArea : Documentation
  #38098·swicken opened Oct 19, 2026Member·2 of 3 tasks·

  ·
  11

• feat(skills): extend LTS backport skill with Docker build and QA steps (#38093)

  AI: Safe To Rollback
  #38094·gortiz-dotcms opened Oct 19, 2026Member·1 of 3 tasks·

  ·
  1

  1

• feat(cluster): typed GET /api/v1/cluster/nodes and status report fixes for the Network portlet (#37875, #37876)

  #38091·hassandotcms opened Oct 19, 2026Contributor·3 tasks done·

  ·
  2

  15

• fix(auth): disable programmatic Basic authentication by default (#5818)

  Area : BackendArea : CI/CDArea : CLIArea : DocumentationPR : dotbot review
  #38090·wezell opened Oct 19, 2026Member·

  ·
  27

• fix(api-token): limit ApiTokenAPI.getJWT to the token owner, requester or system user

  Area : Backend
  #38088·mbiuki opened Oct 18, 2026Member·

  ·
  3

• fix(velocity): keep templates on the wrapped request and session

  Area : Backend
  #38087·mbiuki opened Oct 18, 2026Member·

  ·
  5

• fix(velocity): scope view tools in content field rendering to the caller and author

  AI: Safe To RollbackArea : Backend
  #38085·mbiuki opened Oct 18, 2026Member·

  ·
  4