This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryUpdates Patch Changes, Minor Changes, and https://github.com/swissky across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds a `taxonomies:read` plugin capability with read-only taxonomy access. Adds a `taxonomies:read` plugin capability with read-only taxonomy access. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Updated dependencies; emdash upgraded to version 0.29.0. Updated dependencies; emdash upgraded to version 0.29.0. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes a database stampede on Postgres when a pending migration fails at runtime. Fixes a database stampede on Postgres when a pending migration fails at runtime. Source: llm_adapter@2026-07-15 Confidence: high |
— |
Full changelog
Minor Changes
- #1719
7c5de08Thanks @swissky! - Adds ataxonomies:readplugin capability with read-only taxonomy access: plugins that declare it getctx.taxonomiesto list taxonomy definitions (getAll()), fetch the terms of a taxonomy (getTerms()), and read the terms assigned to a content entry (getEntryTerms()) — in-process and in both sandbox runners.
Patch Changes
-
#1875
b116525Thanks @ascorbic! - Fixes a database stampede on Postgres when a pending migration fails at runtime: requests no longer pile up waiting on the migration lock, failed migrations are retried with a backoff instead of on every request, and failed attempts no longer leak idle database connections. -
Updated dependencies [
582ea2c,77e8968,e12f393,e4e76f5,0360900,cbc7d6b,15f4057,1526f96,b116525,7c5de08,450ea81,58f594b,c57b12b,9c0733f,60811c0]:
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About emdash
All releases →Related context
Earlier breaking changes
- v@emdash-cms/[email protected] Requires Cloudflare Workers sites to add Cron Trigger and update entry point for scheduled publishing.
- [email protected] Schema migration adds `locale` and `translation_group` columns to `_emdash_bylines`.
- [email protected] Byline hydration now strictly per-locale, suppressing cross‑locale fallback.
- v@emdash-cms/[email protected] Changes `_emdash_content_bylines.byline_id` to store translation_group instead of row id, enforcing strict per-locale credit hydration.
- v@emdash-cms/[email protected] Registry install handler fails closed on non-conforming aggregator release records.
Beta — feedback welcome: [email protected]