This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryUpdates Patch Changes, https://github.com/MA2153, and https://github.com/emdash-cms/emdash/pull/1328 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Low |
Updated dependencies: @emdash-cms/admin, @emdash-cms/auth, and @emdash-cms/gutenberg-to-portable-text to 0.17.1. Updated dependencies: @emdash-cms/admin, @emdash-cms/auth, and @emdash-cms/gutenberg-to-portable-text to 0.17.1. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Performance | Low |
Pre‑bundle auth, MCP, and admin‑shell dependencies to avoid re‑optimize + full reload on Cloudflare workers. Pre‑bundle auth, MCP, and admin‑shell dependencies to avoid re‑optimize + full reload on Cloudflare workers. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Fixes `emdash export-seed` omitting bylines, now emits full byline profiles and credits. Fixes `emdash export-seed` omitting bylines, now emits full byline profiles and credits. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Fixes `emdash export-seed` collapsing locale variants into duplicate seed IDs on i18n projects. Fixes `emdash export-seed` collapsing locale variants into duplicate seed IDs on i18n projects. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Fixes `getEmDashCollection` pagination losing `nextCursor` with Astro 6 live collections. Fixes `getEmDashCollection` pagination losing `nextCursor` with Astro 6 live collections. Source: llm_adapter@2026-06-04 Confidence: high |
— |
Full changelog
Patch Changes
-
#1328
149fc49Thanks @MA2153! - Fixemdash export-seedomitting bylines. The exporter now emits byline profiles as the rootbylines[]array (one entry per translation group, sinceSeedBylinehas no locale axis) and, when content is exported, attaches each entry's ordered byline credits asbylines[]referencing those profiles. Credits are read straight from_emdash_content_bylines(whosebyline_idalready stores the translation group), so the exported seed round-trips back throughapplySeedwith profiles and credits intact. -
#1336
64d5675Thanks @ascorbic! - Pre-bundle EmDash's auth, MCP, and admin-shell dependencies soastro devon Cloudflare no longer triggers a re-optimize + full-reload cascade on the first authenticated/admin/MCP request.These deps (
@oslojs/crypto/{hmac,subtle,rsa},arctic, the MCP server entrypoints,@lingui/react,@cloudflare/kumo/primitives,astro/assets/services/noop) are only imported on routes the initial Vite scan never reaches, so the workerd runtime discovered them one at a time. Each discovery invalidated the optimize cache mid-flight, producingThe file does not exist at ".../deps_ssr/chunk-*.js"errors and repeated full reloads on cold start. Adding them to the Cloudflare SSRoptimizeDeps.includelist front-loads them into a single startup optimize pass. -
#1331
77fff0aThanks @MA2153! - Fixemdash export-seedcollapsing locale variants into duplicate seed ids on i18n projects. The CLI never initializes the runtime i18n config, soisI18nEnabled()was alwaysfalseand the exporter stripped the:localesuffix from taxonomy, menu, and content seed ids — merging every locale variant into one bare id and producing duplicates thatvalidateSeedrejected. The exporter now derives locale-awareness from the data (a project is multi-locale when its i18n-aware tables hold more than one distinct locale), so multi-locale exports keep their per-locale suffixes andtranslationOflinks while genuinely single-locale projects still export bare ids. -
#1340
87c40d3Thanks @emdashbot! - FixgetEmDashCollectionpagination losingnextCursorwith Astro 6 live collections. Astro'sgetLiveCollectionrepacks loader results and drops thenextCursorfield before it reaches the caller. The wrapper now over-fetches by one entry whenever alimitis provided, slices the extra row locally, and synthesizesnextCursorvia the existingencodeEntryCursorhelper — matching the strategy already used by the bucketing path. -
Updated dependencies [
83daa41,dfabafe]:- @emdash-cms/[email protected]
- @emdash-cms/[email protected]
- @emdash-cms/[email protected]
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About emdash
All releases →Related context
Related tools
Earlier breaking changes
- v@emdash-cms/[email protected] Requires Cloudflare Workers sites to add Cron Trigger and update entry point for scheduled publishing.
- [email protected] Schema migration adds `locale` and `translation_group` columns to `_emdash_bylines`.
- [email protected] Byline hydration now strictly per-locale, suppressing cross‑locale fallback.
- v@emdash-cms/[email protected] Changes `_emdash_content_bylines.byline_id` to store translation_group instead of row id, enforcing strict per-locale credit hydration.
- v@emdash-cms/[email protected] Registry install handler fails closed on non-conforming aggregator release records.
Beta — feedback welcome: [email protected]