This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryUpdates Patch Changes, Minor Changes, and https://github.com/ascorbic across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Renders full registry package profile in admin, including license, keywords, authors, security contacts, and source repository link. Renders full registry package profile in admin, including license, keywords, authors, security contacts, and source repository link. Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
| Feature | Low |
Shows license (linked to SPDX) on plugin detail page in admin. Shows license (linked to SPDX) on plugin detail page in admin. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
| Feature | Low |
Displays keywords, all authors, and security contacts on plugin detail page in admin. Displays keywords, all authors, and security contacts on plugin detail page in admin. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
| Feature | Low |
Adds link to source repository on plugin detail page in admin. Adds link to source repository on plugin detail page in admin. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
| Feature | Low |
Shows license alongside description on browse cards in admin. Shows license alongside description on browse cards in admin. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes experimental registry navigation and allows configured registry aggregator through admin CSP. Fixes experimental registry navigation and allows configured registry aggregator through admin CSP. Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Bugfix | Medium |
Fixes experimental registry navigation issues. Fixes experimental registry navigation issues. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
Full changelog
Minor Changes
- #1112
3756168Thanks @ascorbic! - Renders the full registry package profile in the admin. The plugin detail page now shows the license (linked to spdx.org for single SPDX identifiers), keywords, all authors, all security contacts, and a link to the source repository. The browse cards show the license alongside the description.
Patch Changes
-
#1101
e539731Thanks @ascorbic! - Fixes experimental registry navigation and allows the configured registry aggregator through the admin CSP. -
Updated dependencies [
3756168]:- @emdash-cms/[email protected]
- @emdash-cms/[email protected]
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About emdash
All releases →Related context
Earlier breaking changes
- [email protected] Schema migration adds `locale` and `translation_group` columns to `_emdash_bylines`.
- [email protected] Byline hydration now strictly per-locale, suppressing cross‑locale fallback.
- v@emdash-cms/[email protected] Changes `_emdash_content_bylines.byline_id` to store translation_group instead of row id, enforcing strict per-locale credit hydration.
- v@emdash-cms/[email protected] Registry install handler fails closed on non-conforming aggregator release records.
- v@emdash-cms/[email protected] Menu and menu-item API responses now camelCase, breaking clients expecting snake_case keys.
Beta — feedback welcome: [email protected]