This release adds 5 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryUpdates Patch Changes, https://github.com/swissky, and https://github.com/khoinguyenpham04 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds bulk actions to the content list: publish, draft, or trash selected entries. Adds bulk actions to the content list: publish, draft, or trash selected entries. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds `taxonomies:read` plugin capability for read‑only taxonomy access (list definitions, fetch terms, read entry assignments). Adds `taxonomies:read` plugin capability for read‑only taxonomy access (list definitions, fetch terms, read entry assignments). Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Updates admin dashboard and header with consistent Kumo card styling, aligned loading/error states, and quick‑action entry opening. Updates admin dashboard and header with consistent Kumo card styling, aligned loading/error states, and quick‑action entry opening. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds `toolbar` config option for editor‑toolbar delivery (`"client" Adds `toolbar` config option for editor‑toolbar delivery (`"client" Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes admin dashboard scheduled‑content summary to count entries with pending schedules. Fixes admin dashboard scheduled‑content summary to count entries with pending schedules. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Updates admin UI status colors to use Kumo semantic tokens, fixing missing color token highlights in marketplace audit badge and plugin consent dialog. Updates admin UI status colors to use Kumo semantic tokens, fixing missing color token highlights in marketplace audit badge and plugin consent dialog. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes OAuth provider login buttons (Google, GitHub) generating broken URLs on the admin login page. Fixes OAuth provider login buttons (Google, GitHub) generating broken URLs on the admin login page. Source: llm_adapter@2026-07-15 Confidence: high |
— |
Full changelog
Minor Changes
- #1524
d237e96Thanks @swissky! - Adds bulk actions to the content list. Select multiple entries with checkboxes (or the header "select all" box) and publish, set to draft, or move them to trash in one step.
Patch Changes
-
#1865
582ea2cThanks @khoinguyenpham04! - Fixes the admin dashboard scheduled-content summary so it counts entries with pending schedules instead of inferring the count from other statuses. -
#1865
582ea2cThanks @khoinguyenpham04! - Updates the admin dashboard and header with more consistent Kumo card styling, aligned loading and error states, and collection quick actions that open new entries directly. -
#1866
d2f5ddcThanks @khoinguyenpham04! - Updates admin UI status colors to use Kumo semantic tokens instead of hard-coded palette classes, so email settings, role and comment badges, content type indicators, the dashboard, and other status displays now theme consistently in both light and dark mode. Also fixes warning highlights in the marketplace audit badge and the plugin capability consent dialog, which previously referenced a nonexistent color token and rendered unstyled. -
#1720
9792226Thanks @segmentationfaulter! - Fixes OAuth provider login buttons (Google, GitHub) generating broken URLs on the admin login page. Non-admin/_emdash/paths are no longer routed through TanStack Router, which was incorrectly prepending the admin basepath and causing 404s. -
#1719
7c5de08Thanks @swissky! - Adds ataxonomies:readplugin capability with read-only taxonomy access: plugins that declare it getctx.taxonomiesto list taxonomy definitions (getAll()), fetch the terms of a taxonomy (getTerms()), and read the terms assigned to a content entry (getEntryTerms()) — in-process and in both sandbox runners. -
#1886
60811c0Thanks @swissky! - Adds atoolbarconfig option for reliable editor-toolbar delivery behind shared caches.toolbar: "client"keeps public HTML identical for every visitor and shows a client-side "Edit" pill for logged-in editors that opens a fresh, uncached editor render via an_editquery param;toolbar: falsedisables the toolbar entirely. The toolbar can now also be dismissed in the browser via its × button. The default ("server") is unchanged. -
Updated dependencies [
7c5de08]:- @emdash-cms/[email protected]
- @emdash-cms/[email protected]
- @emdash-cms/[email protected]
- @emdash-cms/[email protected]
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About emdash
All releases →Related context
Related tools
Earlier breaking changes
- v@emdash-cms/[email protected] Requires Cloudflare Workers sites to add Cron Trigger and update entry point for scheduled publishing.
- [email protected] Schema migration adds `locale` and `translation_group` columns to `_emdash_bylines`.
- [email protected] Byline hydration now strictly per-locale, suppressing cross‑locale fallback.
- v@emdash-cms/[email protected] Changes `_emdash_content_bylines.byline_id` to store translation_group instead of row id, enforcing strict per-locale credit hydration.
- v@emdash-cms/[email protected] Registry install handler fails closed on non-conforming aggregator release records.
Beta — feedback welcome: [email protected]