This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryUpdates Patch Changes, https://github.com/emdash-cms/emdash/pull/1356, and https://github.com/ascorbic across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Low |
Updated dependencies: @emdash-cms/admin, @emdash-cms/auth, @emdash-cms/gutenberg-to-portable-text to 0.17.2. Updated dependencies: @emdash-cms/admin, @emdash-cms/auth, @emdash-cms/gutenberg-to-portable-text to 0.17.2. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Bugfix | High |
Prevents frontend pages from incorrectly redirecting to setup wizard on transient DB errors. Prevents frontend pages from incorrectly redirecting to setup wizard on transient DB errors. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Bugfix | Medium |
Fixes Postgres introspection to use active schema instead of hardcoding 'public'. Fixes Postgres introspection to use active schema instead of hardcoding 'public'. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Bugfix | Medium |
Fixes buildMediaUrl handling of root-relative paths without doubling the API prefix. Fixes buildMediaUrl handling of root-relative paths without doubling the API prefix. Source: llm_adapter@2026-06-05 Confidence: high |
— |
Full changelog
Patch Changes
-
#1356
4e11daaThanks @ascorbic! - Scope Postgres table/column introspection to the connection's active schema instead of hardcodingpublic.tableExistsandlistTablesLike(database/dialect-helpers.ts) and two idempotency checks in the019_i18nmigration queriedinformation_schemawithtable_schema = 'public', so a Postgres deployment using a non-public schema (per-tenant or shared-cluster setups) would see tables from the wrong schema or none at all, causing collection/schema operations to misbehave and the i18n migration to skip its column additions. These now usecurrent_schema(), matching the already-correctindexExists/columnExistshelpers and migration038. -
#1167
fe6bc78Thanks @abhishekshankar! - fix(seo): buildMediaUrl handles root-relative paths without doubling the API prefix -
#1345
80f2925Thanks @scottbuscemi! - Fix frontend pages redirecting to/_emdash/admin/setupon a fully set-up site. The anonymous fast-path "setup probe" in the Astro middleware queries_emdash_migrationsto detect a fresh, un-migrated database, but itscatchblock treated every error as "fresh install" — so a transient DB failure (D1 connection loss, replica unavailable, query timeout, cold-start race, locked SQLite) wrongly bounced real visitors to the setup wizard. The probe now only redirects when the error is a genuinely-missing table (via the sharedisMissingTableErrorhelper) and otherwise renders the page normally. ThesetupVerifiedflag is also moved onto aglobalThisSymbol.forsingleton so it isn't duplicated across SSR chunks, which had caused the probe to re-run far more often than intended (and each re-run was another chance to hit the bug). -
Updated dependencies [
4ee75f8]:- @emdash-cms/[email protected]
- @emdash-cms/[email protected]
- @emdash-cms/[email protected]
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About emdash
All releases →Related context
Related tools
Earlier breaking changes
- v@emdash-cms/[email protected] Requires Cloudflare Workers sites to add Cron Trigger and update entry point for scheduled publishing.
- [email protected] Schema migration adds `locale` and `translation_group` columns to `_emdash_bylines`.
- [email protected] Byline hydration now strictly per-locale, suppressing cross‑locale fallback.
- v@emdash-cms/[email protected] Changes `_emdash_content_bylines.byline_id` to store translation_group instead of row id, enforcing strict per-locale credit hydration.
- v@emdash-cms/[email protected] Registry install handler fails closed on non-conforming aggregator release records.
Beta — feedback welcome: [email protected]