emdash

Minor Changes

• #1967 f8e41cd Thanks @Rimander! - Makes the Portable Text gallery block editable in the admin editor. Galleries imported from WordPress now load and stay editable instead of being invisible and lost on save, and you can insert new galleries from the toolbar or with /gallery: pick several images at once reorder them by drag and drop, set the column count, and click any image in the gallery to edit its alt text and caption or replace it. Multiple galleries per document are supported, and gallery blocks render on the public site as before.

Patch Changes

• #1588 15d5a45 Thanks @marcusbellamyshaw-cell! - Fixes plugin content:afterDelete and content:afterUnpublish hooks being dropped on Cloudflare Workers. Cleanup work in these hooks — removing uploaded files, clearing search indexes — now runs to completion after content is deleted or unpublished, instead of being canceled the moment the response is sent. Previously this could also leave plugin storage in a wedged state that hung later admin requests.

• #2174 c568876 Thanks @ascorbic! - Fixes locale-filtered content and search results for locales with uppercase region or script subtags. Existing content rows saved with lowercased locale values are repaired automatically.

• #2140 c4d790e Thanks @dchaudhari7177! - Security: site secrets (EMDASH_ENCRYPTION_KEY, EMDASH_PREVIEW_SECRET, EMDASH_IP_SALT, and their legacy aliases) are no longer read through import.meta.env. In production builds Vite statically replaced that expression with the env loaded at build time, which embedded any secret present in .env on the build machine into the server bundle and made the stale build-time value silently shadow the real runtime secret (e.g. one set with wrangler secret put). The secrets module now reads only the runtime process.env. If you previously relied on a secret being baked in at build time, set it as a runtime secret/env var on your deployment platform instead — and rotate any key that shipped inside a bundle.

• #2188 0eb389f Thanks @saariuslystoned! - Fixes OAuth authorization so users can remove unnecessary requested permissions before granting an MCP client access.

• #2193 791c0eb Thanks @ascorbic! - Fixes PostgreSQL migrations failing in production builds that rename database adapter classes.

• Updated dependencies [1614e2a, d62a302, 4f58eec, f8e41cd]:

  • @emdash-cms/[email protected]
  • @emdash-cms/[email protected]
  • @emdash-cms/[email protected]