LoginSign Up
← Back to all sparks
U

Umbraco CMS

MARKETING
Velocity6.3

Open-source .NET content management system

umbraco.com ↗

Umbraco 19's first beta moves to .NET 11 and puts reusable content in every block editor.

cmsdotnetreusable-contentsearchsecurity-fixesmajor-release
◆Current state
Umbraco has three lines moving at once. The first 19.0 beta moves to .NET 11, extends reusable Library content to every block editor and brings search into core. The 18.3 and 17.8 candidates are on a second round, and rc2 on both lines resolves the same seven security advisories, among them a backoffice account takeover through sign-in redirect manipulation.
◆Where it's heading
The maintenance phase visible through September has given way to a major-version cycle. Version 19 consolidates work that had been spread across packages and settings: search moves from a package into core, and Document Blueprints move from Settings to the Library. Its breaking list is long, covering ImageSharp 4, the segment model and the removal of code scheduled for 19, and 18.3's ImageSharp licence check is already catching projects that reference that package directly.
◆Prediction
18.3.0 and 17.8.0 are dated 29 October on GitHub, though neither has reached this feed yet. The 19 line should continue through further betas, with runtime async the item the team has singled out for feedback.

◆Recent moves

  1. 5d ago

    Umbraco 19 beta: .NET 11 and reusable content in every block editor

    ⚡ SPARK

    The first beta of Umbraco 19 ends a run of stabilization candidates and opens a major-version cycle. It takes the search abstraction shipped as a package for 17 and 18 into core and adds .NET 11.

    View source ↗
  2. 6d ago

    18.3 rc2 resolves seven security advisories

    The second 18.3 candidate exists mainly for security: seven advisories resolved, including start-node bypasses, stored XSS chained with path traversal, and a logout that left the auth cookie valid.

    View source ↗
  3. 6d ago

    17.8 rc2 carries the same seven security fixes

    The same seven advisories reach the 17 line in a candidate published alongside 18.3 rc2, which keeps the two supported tracks level on security.

    View source ↗
  4. 18d ago

    18.3 rc: ImageSharp update can fail Release builds

    The first 18.3 candidate takes Six Labors' security fixes, and with them a build-time licence check. Projects with a direct ImageSharp reference can see Release builds fail while Debug builds only warn, a trap that surfaces in CI rather than on a developer's machine.

    View source ↗
  5. 2mo ago

    Umbraco 18.2.0 release candidate

    18.2.0-rc fixes the installer's connection string write target to respect appsettings.*.json fallback order and updates npm dependencies. A routine pre-release candidate with no new user-facing features.

    View source ↗
  6. 2mo ago

    Umbraco 17.7.0 release candidate

    17.7.0-rc carries the same installer fix as 18.2.0-rc to the current stable track alongside Tiptap editor and other dependency updates.

    View source ↗