All pull requests

Pull requests

• fix(saml): build, publish, and bundle SAML with core releases

  AI: Safe To RollbackArea : BackendArea : CI/CDPR : dotbot reviewPriority : 2 HighTeam : PlatformType : CI/CD
  #38132·wezell opened Oct 21, 2026Member·

  ·
  1

  3

  

• fix(security): require opt-in for anonymous content API access

  AI: Safe To RollbackArea : BackendArea : DocumentationChangelog: Needs DocdotCMS : Rest APITeam : PlatformType : Task
  #38131·wezell opened Oct 21, 2026Member·

  ·
  1

  1

• docs(spec): File field is missing from the CSV export (#33944)

  AI: Safe To Rollback
  #38129·gortiz-dotcms opened Oct 21, 2026Member·

  ·
  1

  1

• fix(rest): return lock owner name to back-end users and normalize forgot-password response

  Area : Backend
  #38128·hassandotcms opened Oct 21, 2026Contributor·

  ·

• fix(tags): check the user's permissions when deleting tags

  Area : Backend
  #38127·KevinDavilaDotCMS opened Oct 20, 2026Contributor·2 of 3 tasks·

  ·

• fix(legacy-ui): check user permissions in legacy Ajax and Struts handlers

  Area : Backend
  #38126·oidacra opened Oct 20, 2026Member·

  ·
  3

• fix(test): stop CompletionsToolTest and HeartbeatIT failing on timing

  AI: Safe To RollbackArea : BackendPR : dotbot review
  #38124·swicken opened Oct 20, 2026Member·Queued·2 of 3 tasks
  1

  5

• fix(users): only a CMS Administrator can change a user's roles

  AI: Safe To RollbackArea : Backend
  #38120·freddyDOTCMS opened Oct 20, 2026Member·

  ·
  1

• feat(users): filter users by role id and align role filters with the includeRoles privilege

  Area : BackendArea : Frontend
  #38116·AP2300 opened Oct 20, 2026Contributor·

  ·
  

• fix(ai): require admin to create embeddings

  AI: Safe To RollbackArea : Backend
  #38115·adrianjm-dotCMS opened Oct 20, 2026Member·

  ·
  1

• fix(workflows): encode scheme, step and action names in legacy admin JSPs

  Area : Backend
  #38114·nicobytes opened Oct 20, 2026Member·

  ·
  3

• fix(folders): require EDIT on the source folder when moving it

  AI: Safe To RollbackArea : Backend
  #38113·swicken opened Oct 20, 2026Member·Queued·1 of 3 tasks
  1

• fix(rest): validate remote URL targets and redirects up front; align role membership reads

  Area : Backend
  #38112·rjvelazco opened Oct 20, 2026Member·

  ·
  3

• #38083 include in 25.07.10 LTS: bump dotSAML bundle to 26.10.17 (DO NOT MERGE until published)

  #38111·gortiz-dotcms opened Oct 20, 2026Member·5 tasks·

  ·

• fix(users): logout-as restores the principal only from an active login-as session

  Area : Backend
  #38110·swicken opened Oct 20, 2026Member·Queued·2 of 3 tasks
  7

• feat(widgets): render widget field values as text unless field scripting is enabled

  Area : BackendArea : FrontendArea : SDKChangelog: Breaking ChangeSDK Breaking Change
  #38108·fabrizzio-dotCMS opened Oct 19, 2026Member·

  ·
  10

• fix(graphql): scope response cache entries to the caller and request context

  Area : Backend
  #38107·nollymar opened Oct 19, 2026Member·3 tasks done·

  ·
  1

• chore(push-publish): compare endpoint keys with MessageDigest.isEqual

  Area : Backend
  #38106·KevinDavilaDotCMS opened Oct 19, 2026Contributor·2 of 3 tasks·

  ·
  1

• fix(velocity): harden what bound viewtools hand to templates

  Area : BackendPR : dotbot review
  #38100·nollymar opened Oct 19, 2026Member·

  ·
  7

• feat(apps): manage Apps configuration as an administrator setting

  Area : BackendArea : Documentation
  #38098·swicken opened Oct 19, 2026Member·Queued·2 of 3 tasks
  11

• fix(workflow): record the requesting user on bulk task actions

  Area : BackendPR: docker image
  #38097·zJaaal opened Oct 19, 2026Member·

  ·
  2

• fix(containers): restrict sortContentletsBy to the supported sort columns

  Area : BackendPR : dotbot review
  #38096·fabrizzio-dotCMS opened Oct 19, 2026Member·1 of 3 tasks·

  ·
  17

• feat(skills): extend LTS backport skill with Docker build and QA steps (#38093)

  AI: Safe To Rollback
  #38094·gortiz-dotcms opened Oct 19, 2026Member·1 of 3 tasks·

  ·
  1

  1

• feat(cluster): typed GET /api/v1/cluster/nodes and status report fixes for the Network portlet (#37875, #37876)

  #38091·hassandotcms opened Oct 19, 2026Contributor·3 tasks done·

  ·
  2

  15

• fix(auth): disable programmatic Basic authentication by default (#5818)

  Area : BackendArea : CI/CDArea : DocumentationPR : dotbot review
  #38090·wezell opened Oct 19, 2026Member·

  ·
  10