Highlights

• Firefox 154 went out today! Lots of goodies in there for our users, including support for NVIDIA GeForce NOW
• The new 2 week release cycle is now in effect. This means that Firefox 155 is slated to hit release on September 1st!
  • You can follow along at https://whattrainisitnow.com/
• As part of the Nova redesign, a “Use Linux system theme” checkbox is being shown on Linux builds for the about:addons theme picker, which will make Firefox’s Nova UI use the colours of the system theme.
• Thanks to Simon Rosen for adding a new playback speed control to the PiP player. The feature can be enabled by flipping the pref media.videocontrols.picture-in-picture.playback-speed.enabled.

Friends of the Firefox team

Resolved bugs (excluding employees)

Script to find new contributors from bug list

Volunteers that fixed more than one bug

• Benoit
• Chris Vander Linden
• Fede
• japandi
• Lukáš Lipinský
• Nirmal Advani
• Ruhollah Majdoddin
• Sameem [:sameembaba]
• Sebastian Zartner [:sebo]
• Zyphrenn

New contributors (🌟 = first patch)

• Aditi: Increase the maximum number of PDF.js preferences
• Fede:
  • more than six thumbnails needed when Ctrl+Tab is used
  • Clicking “delete group” on group context menu in tab groups list doesn’t dismiss toolbar panel
  • Tab group context menu actions fail when right-clicking the label or icon of a tab groups list row
• Giulio B: frameId is wrong in webRequest events triggered via importScripts
• 🌟 Gopalarathnam Venkatesan: Fix incorrect ‘this’ in the Sync add-on install error handler
• 🌟 Kevin Gosse: nsDataObj::QueryGetData in Firefox returns E_FAIL for formats it doesn’t carry, instead of DV_E_FORMATETC per the COM contract
• 🌟 mikey gough: Remove three unused devtools.debugger.file-search-* preferences
• 🌟 Nathan Leuz: Remove unused legacy preference browser.translation.neverForLanguages
• 🌟 Priyanshu[:0xanshu]: “Forget About This Site” dialog is cut off
• 🌟 K: Disable breakpoints shortcut
• 🌟 Shawn Zivontsis: Reorder moz_origins composite unique index to UNIQUE(host, prefix)
• 🌟 Simon Rosen: Suggestion: Add speed button for Youtube in picture-in-picture(PiP) modals
• tanvi.manku: unnecessary scrollbars in edit dialogs for payments and addresses
• Zyphrenn:
  • browser.tabs.groups.enabled should disable drag-n-drop
  • “Tab group suggestions” AI control setting still visible when browser.tabs.groups.enabled is false

Project Updates

Add-ons / Web Extensions

Addon Manager & about:addons

• As part of Nova about:addons work:
  • Replaced the “more themes” button in the themes list view footer with a promo element when Nova is enabled – Bug 2057200
  • Removed the testing XPI base url pref from ThemesList.sys.mjs – Bug 2053220
  • Fixed a mismatch between the popup panel border radius applied by Nova and the border radius applied to the document.body of the WebExtensions popup page loaded into it – Bug 2057844
  • Moved new strings added as part of the about:addons Nova restyling out of the locales preview – Bug 2052034
• As part of legacy telemetry cleanups for the Add-ons related telemetry, migrated addons-search-detection telemetry off the legacy telemetry mirroring path, now collected only through Glean – Bug 2055606

WebExtensions Framework

• Fixed a series of intermittent and CI-reliability test failures across the WebExtensions browser-chrome test suite – Bug 1575369 / Bug 1697626 / Bug 1699341 / Bug 1974953 / Bug 2015004 / Bug 2030542 / Bug 2062186 / Bug 2062187 / Bug 2062189 / Bug 2062191 / Bug 2062193
  • Thanks to Florian Quèze for applying his work on an LLM-based system for investigating intermittent tests to investigating and fixing intermittents and perma failures across the WebExtensions test suite.

DevTools

• Ruhollah Majdoddin fixed issues in the Storage panel to make sure we’re only showing relevant cookies (and their values) for the debugged tab (#1856645, #2060029, #2061166) and also did some cleanup in this area (#2061348)
• sevenwithawp added a keyboard shortcut (Ctrl+Alt+B, Cmd+Alt+B on Mac) to disable/enable breakpoints (#1642578)
• Hubert Boma Manilla (:bomsy) continues his work to display stylesheets in the Debugger (#2051029, #2051264)
  • Preference: devtools.debugger.features.stylesheets-in-debugger
• Nicolas Chevobbe [:nchevobbe] added support for ::picker() rules in pseudo element section (#2042839)
  • Used by customizable select (MDN)
  • Preference: dom.select.customizable_select.enabled

• Nicolas Chevobbe [:nchevobbe] made CSS explainers work for substitution functions (var(), attr() and env()) (#2041622)
  • Preference: devtools.inspector.css-explainers

• Julian Descottes [:jdescottes] fixed an accessibility bug in about:debugging where error message where not announced (#2056332)

WebDriver

• Sameem added the cleanup logic for subscriptions when a browsing context is destroyed.
• Nirmal Advani updated the Actions API to fire the dblclick event when performing a double-click while holding down the Ctrl key on non-macOS platforms.
• Khalid AlHaddad updated the webdriver bidi moz:debugging module to stop using enterNestedEventLoop which can avoid conflicts with the regular DevTools’ debugger.
• Alexandra Borovova fixed the “browsingContext.reload” command to not fail for frames.

New Tab Page

• Big ticket items:
  • Did a trainhop last week to help with the remote layouts effort
  • Doing another trainhop this week to make some spacing optimizations, deploying tomorrow if all goes well
  • We will be experimenting with some more layout variations over the next few months
    • Example:

• We’ve migrated a bunch of our unit tests to Jest/RTL from the deprecated Mocha / Karma framework we’ve historically used.
• Joel added a WebNotifications badge to Top Sites on the New Tab Page which surfaces per-origin unread web-notification state directly on TopSites tiles by rendering a compact badge in the activity-stream/TopSites component—users can now glance at NTP tiles to see which sites have pending web notifications without changing navigation or site state (affects desktop and mobile NTP Top Sites UI). This is something we plan on experimenting with later this year.
• Similarly, Joel added a TopSites hover card with notifications which expands the to show per-site notification items and actions on hover or long-press, enabling users to read and dismiss notifications from the NTP itself rather than opening each site.
• Hanna Alemu fixed the focus outline for the “Learn how we protect your data” link in NEWTAB_PERSONALIZATION_MESSAGE, replacing the blue non-rounded ring with the standard rounded focus style via CSS so keyboard and assistive users get a consistent, discoverable focus indicator.
• Maxx Crawford added logic to show different tip messages throughout the day/week on the New Tab Page in the upcoming privacy widget, implementing time-of-day/day-of-week selection in the tip renderer so users receive context-varying tips rather than a static message, which affects the tip surface and supports time-targeted experiments.
• Irene Ni removed the New Tab daily briefing slice from the New Tab Page, so users will no longer see the daily-briefing card on new tabs and related New Tab slice prefs/registrations were cleaned up.
• Jack Brown migrated the New Tab ContextMenu/LinkMenu implementation to the panel-list component, so right-click menus and link context behavior on the New Tab now use panel-list rendering (affects keyboard navigation, theming, and menu perf).
• Irene Ni removed a root-level <hr> selector from the Weather forecast widget SCSS that leaked global divider styles into the New Tab Page layout, restoring correct dividers and preventing spacing/layout regressions on about:newtab.
• Irene Ni enabled the remote-settings-driven sections layout in Nightly, flipping the remote-settings/sections layout so Nightly users receive Discovery Stream section composition from Remote Settings.
• Irene Ni automated the New Tab Page locales update for train-hop to ensure locale bundles are refreshed on train deploys so users see corrected translations and no longer encounter stale labels after a hop.
• Reem Hamoui fixed the Crossword widget double-counting and removed broad “interaction” user_actions so telemetry and UX-triggered actions reflect a single user event and analytics driven by user_action are no longer inflated.
• Dre fixed the “Show more widgets” visibility by adjusting the widget container overflow/visibility logic so the Show more control is reliably revealed on constrained viewports, restoring widget discoverability.
• Joel fixed newtab.closed and newtab.sections_impression firing unexpectedly on the New Tab Page by gating event emission on section visibility and tab lifecycle, which stops spurious impression and close telemetry pings and improves the accuracy of NTP impression/close counts for affected users.
• Joel added a topsite display customization event to newtab ping, updating the New Tab ping schema so user topsite layout and appearance changes are emitted as topsite.display_customization events, enabling reliable capture of pin/remove/resize/customization actions in Telemetry.
• Nina Pypchenko [:nina-py] added widgets.stocks.interaction and flip it on user actions so explicit click/tap interactions with the Stocks widget now generate widgets.stocks.interaction events, improving engagement capture for the Stocks surface.
• Nina Pypchenko [:nina-py] migrated the Stocks widget telemetry to the shared useWidgetTelemetry hook, standardizing how the Stocks widget emits metrics and ping fields to match other widgets, which reduces missing/duplicate events and makes per-widget telemetry consistent across platforms.
• Irene Ni created an initial JSON dump of Remote Settings sections layouts for cold startup to prepopulate New Tab Page sections on first launch and reduce layout flash or missing tiles.
• Nina Pypchenko [:nina-py] added a persistent “New” badge to the Stocks widget until first user interaction, which improves discoverability of the Stocks card and is cleared on the user’s first click/tap.
• Maxx Crawford implemented a side-by-side content layout variant for the New Tab Page feed, which introduces a new responsive layout option that changes feed column behavior and visual density on wider viewports.
• Scott Downe added support for five-column content feed layouts, which enables denser content grids for large displays by updating grid logic and responsive breakpoints and affects NTP rendering on wide screens.
• Dre added a “Celebrations” UI state to the Privacy Widget, which surfaces milestone/celebratory visuals and transient animations in the Privacy Widget when triggers are satisfied.
• Irene Ni updated the New Tab topsite context menu button to respect prefers-reduced-motion via CSS/media-query changes, so users with reduce-motion enabled no longer see the button’s motion/animation.
• Scott Downe expanded New Tab’s list of region and locales for content support, updating the New Tab content selection config and region→locale mappings so more users in newly-added locales receive localized tiles and recommendations on the New Tab Page.
• Irene Ni fixed the New Shortcut / Edit Shortcut prompt background being transparent with the Newtab addon installed, restoring CSS/background opacity for the edit UI so shortcut editing is readable across themes and addon combinations.
• Maxx Crawford added a dedicated trainhopConfig.widgetPrivacy payload for the Privacy widget feature, introducing a per-trainhop config payload in Discovery Stream so Privacy widget rollouts and toggles can be controlled without code deploys.
• Maxx Crawford added a layout management panel in Discovery Stream Admin, giving editors an admin UI to modify New Tab/stream layouts (reduces manual config edits and speeds layout experiments).
• Dre reduced the Privacy Widget celebration sparkles on the New Tab Page in Privacy Widget Celebration: Reduce the Sparkles by lowering particle counts and throttling animation cadence in the widget’s CSS/JS animation code, reducing visual noise and a small amount of GPU/animation work for users during the celebration without changing privacy settings.
• Maxx Crawford restored the “Change size” context menu item for the side-by-side experimental New Tab layout so users with the side-by-side exp layout enabled regain the resize control in widget context menus.
• Maxx Crawford stopped the sports widget from rendering regardless of the pref so unwanted sports content no longer appears on New Tab when the pref should prevent it.

Picture-in-Picture

• Thanks to Lukáš Lipinský for adding live event caption support for ceskatelevize.cz!
• Thanks to Mike Conley for fixing play / pause issues with the PiP player on Udemy.

Search and Urlbar

• Nova: continued work on the Nova redesign, focusing on CSS fixes, tab group and container styling, and tab/address bar polish. Efforts are underway to ensure the UI integrates correctly with platform themes and high-contrast modes.
• IPC Urlbar / Multi-Context Address Bar (MCAB) on New Tab: Significant progress has been made on the IPC Urlbar implementation. The CI variant is now live and upgraded to Tier 2, allowing for better bug detection. Currently focused on making content modules content-process-safe and preparing for new tab search bar integration. Here’s moz-urlbar rendering something on about:newtab for the first time:

• Post-MVP work continues on refining the new search bar that can be added to the toolbar.
  • Let Tab land on the search input rather than the search button, behind a Nightly-only pref
• Google address bar messaging experiment relaunched.
• Search & Suggest Telemetry: Development is ongoing for search term telemetry, specifically regarding fetching results from Merino for online suggestions. Also preparing to retire legacy telemetry for certain search service metrics.

• Favicon & Places:
  • Bookmarks for Google Apps use the root icon instead of the newly released one
  • CopyFavicon should only copy across same origin pages
  • Favicons are not affected by a hard refresh
  • Bookmarks/history locked error at startup despite no external process holding places.sqlite
• Also trim www from URLs, behind pref

In today's blog, we bring you another one of our Community Stories. This time with Trucker Cassie, one of the content creators playing our games, who will tell you all about her job as a real-life truck driver, as well as her passion for Euro Truck Simulator 2!

You might know Trucker Cassie from her YouTube or Twitch channels, where she regularly posts videos from her life as a truck driver in Scandinavia, and also gameplay live streams, mostly from ETS2. And today, she will tell you all about her love for trucks!

"It's quite random that I started working as a truck driver. I never had any drivers in my family. It was a friend who showed me the world of trucks. He had just gotten his heavy license, and one morning he gave me a ride to school in the oldest Scania I had ever seen. But from that moment, a spark was lit. Maybe I could drive a truck too? It felt so cool and free! So I applied to a trucking school, and the rest is history," Cassie told us.

Cassie discovered her passion for truck driving, and now, it's been 13 years since she started this way of life, as she now works part-time as a truck driver and shares her stories on social media. "At the start of my career, I never wanted to stop working. I wanted to beat my earlier record on how many deliveries I could make in a day. I had really found my place in life! But a few years with this lifestyle caused me to burn out, and it forced me to rethink my situation. Today, I work part-time, and I've learnt how important it is to wind down and relax when I can," she says.

If you wonder what kind of work Cassie usually does and what her days on the long and beautiful Scandinavian roads look like, she also shares this with us: "I have tried various delivery types, such as gravel, wood chips, and powder tanker. Now I'm delivering various goods from Sweden to Norway. And when I'm done with that delivery, I normally load fish in Norway. The fishing industries can be located in tricky places! Through small towns and up and down steep and curvy hills. It can really be a challenge during wintertime. After the fish is loaded, I drive to Denmark, where another driver picks up my trailer and drives it somewhere in Europe! Then I pick up a load from Denmark and drive home to Sweden again."

What Cassie loves the most about her job are the amazing views she sees along the way as well as the solitude this life can bring. "I get to listen to music and podcasts, and I rarely talk to customers. I also get to bring my Chihuahua, Happy," she told us.

This interesting merge of the two worlds is something we really love, as we have heard similar stories where either members of our community started driving trucks for a living because of our games, or long-term truck drivers that found their passion in Euro Truck Simulator 2 or American Truck Simulator.

"I have been a truck driver for a while before I discovered Euro Truck Simulator 2. A colleague of mine showed me the game, and I thought it was a silly idea to drive a truck for work, then get home, and play a truck simulator after work. And now look at me," Cassie shared.

So what is actually so satisfying about playing a truck simulator when you are a real-life truck driver? 

"I am having the time of my life when I play ETS2 on my livestreams! Because in a real truck, you have a lot of responsibility; to deliver the cargo, the truck, and yourself to the delivery place safely. Always being alert. But when I'm playing the game, I can be social with the chat, drive together with the viewers, answer questions, and just have a good time. And the consequences won't be too big when my digital truck makes a kickflip off a mountain because I was focusing on what the chat is saying. I also like to compare the real-life roads to the simulator! And point out the landmarks and differences from the real places," Cassie explained.

What actually inspired Cassie to start creating content on social media was kind of a coincidence, but from there, it helped her to grow a big community of over 160 thousand followers on YouTube alone.

"I started my main YouTube channel after I got the offer of being in a reality TV show years ago. I had to film my workday as a truck driver myself, and then send the footage to the TV production. The TV show was canceled before it had even started, though, and there I was with a vlog. I realized I could put it together myself and post it on YouTube! So that's what I did. A few videos in, and I suddenly gained thousands of subscribers in a few weeks' time. It was crazy! I also have a smaller YouTube channel, where I post gaming content and previous livestreams. I decided to have two separate channels since the content is quite different. And of course, my Twitch channel, where I do livestreams when I have the energy for it," Cassie told us.

This gave us a great opportunity to ask Cassie, a real truck driver, how Euro Truck Simulator 2 compares with the real world, and she was happy to answer that:

"I think Euro Truck Simulator 2 is very accurate to real life trucking! Especially when you have a steering wheel and pedals. I know a few people who have practiced reversing trailers in the game, then tried it out in real life. And they nailed it! All because they have practiced in the game."

We were also curious how Cassie's driving differs from the real world to how she drives in Euro Truck Simulator 2. "I definitely test the limits and do more daring stuff in the game! Somehow, people get surprised when they see my real-life work videos, and notice I actually know how to drive a truck. But I don't blame them, after seeing my stunts in ETS2. It would be nice to have a pink MAN truck in real life as well! But until now, I'll get to be pretty in pink in the simulator," she answered.

If you think this life would be for you and you are also thinking about taking on a truck driver career, Cassie has a message for you! "I really recommend people try out Euro Truck Simulator 2 if they are curious about becoming truck drivers in real life. It is a pretty big decision, with lots of money needed to get a heavy license with all the needed certificates. And I think ETS2 gives a great hint of what trucking can feel like! Also, it's a really fun activity to bring home your non-trucking friends and let them reverse a trailer in the game! Better than any board game I have played :)," she concluded.

We hope you have enjoyed Cassie's story! If you did, remember to give our X/Twitter, Instagram, Facebook, Bluesky, and TikTok a follow so you won't miss similar blogs and also updates from our games straight to your feed. Or subscribe to our newsletter to stay informed. Keep on trucking!

❗ This is a pre-release

• May contain bugs and unfinished features.

⚠️ Note for macOS users

Builds are unsigned (no Apple Developer ID). After dragging MarkText into Applications, clear the quarantine flag once:

xattr -cr /Applications/marktext.app

Verifying downloads

All artifacts are listed with their SHA-256 in SHA256SUMS.txt. Verify with:

sha256sum -c SHA256SUMS.txt --ignore-missing

What's Changed

• fix: preserve Google Docs CSS formatting on paste by @Renakoni in #4699
• fix(desktop): preserve RTL text direction in PDF and print export by @Jocs in #4874
• docs: update sponsor logo by @Jocs in #5014
• docs: remove sponsor ukey by @Jocs in #5217
• fix: preserve viewport when toggling task-list checkbox by @Awaker-OTE in #5189
• fix(desktop): allow saving directly to a drive root (#5150) by @Panisnbb in #5188
• docs: fix grammar issues in FAQ.md by @woltary02-creator in #5089
• fix(ui): sync quick insert highlight with input method by @KDOJP in #5176
• feat(i18n): add Dutch locale + validation tests + fix existing issues by @rkristelijn in #5137
• Japanese translation update by @coolvitto in #5049
• fix: allow copy-paste in same folder with auto-rename by @rkristelijn in #5139
• chore: add pre-commit hooks (husky + lint-staged) by @rkristelijn in #4999
• fix(muya): escape HTML in image attribute values (CWE-79) by @andesyteoss in #4980
• fix: #5001 persist pasted bitmap images to the assets folder per preferences by @Panisnbb in #5168
• fix(muya): preserve cursor on IME composition backspace(#4956) by @Zengzzhao in #4957
• fix(muya): size table columns to their content by @Renakoni in #4952
• fix: handle UNC image paths and watchers by @Renakoni in #4778
• fix(desktop): ignore revoked output pipe errors on macOS by @Awaker-OTE in #5229
• feat(desktop): add "Reset Zoom" item to the Window menu by @xrgzs in #5185
• fix: #3469 decode Windows clipboard file paths as UTF-16LE by @Panisnbb in #5167
• fix(desktop): prevent CodeMirror line tree corruption by @Renakoni in #4930
• fix(i18n): add the missing Dutch resetZoom label by @githello1 in #5245
• feat(macOS): add Dictionary lookup for selected editor text by @nikkogibler in #4814
• fix: #4890 use file extension for side bar icons by @doktorigi in #4910
• fix(muya): #4747 deep clone editor state without recursing by @CookPiu in #5259
• fix: init image size when render html tag image by @Jocs in #5264
• fix: render rect selection in table by @Jocs in #5265
• fix: the missing locale key by @Jocs in #5266
• fix: #5152 align TOC navigation with editor viewport by @foo-hao in #5153
• fix: #5130 keep Electron locale resources for all supported UI languages by @legsing in #5132
• fix: #5129 detect system language on first start by @legsing in #5131
• fix: skip website preview deploy on fork PRs by @Jocs in #5278
• feat: add 'Treat soft newlines as spaces' preference (#1849) by @wmoss in #4937
• fix(muya): keep IME input intact after a soft line break by @Jocs in #5281
• fix(muya): stop the quick-insert hint claiming a line of its own by @Jocs in #5283
• fix(muya): give a code block's trailing empty line a line box by @Jocs in #5286
• fix(muya): keep footnote reference ids intact for special identifiers (#5208) by @Jocs in #5285
• fix(muya): skip search matches whose block left the document (#5163, #5215) by @Jocs in #5287
• fix(muya): keep the image resize bar from crashing after its image is removed (#5216) by @Jocs in #5288
• fix(muya): ignore a quick-insert pick once its paragraph is gone (#5213) by @Jocs in #5289
• fix(muya): drop an image selection whose block left the document (#5055) by @Jocs in #5291
• fix(muya): number empty lines in code blocks (#5294) by @Jocs in #5295
• fix(muya): don't restore a drag selection onto removed blocks (#4981, #5256) by @Jocs in #5290
• fix(muya): end the paragraph on a Shift+Enter that would leave an empty line by @Jocs in #5300
• fix: make anchor links reach CJK headings and headings in other documents (#5292) by @Jocs in #5298
• fix(desktop): flush pending edits before entering source code mode by @richbodo in #5103
• fix(muya): load relative images from folders named with #, ? or % (#5302) by @Jocs in #5301
• test(desktop): wait for TOC scrolls to settle in the toc-scroll e2e by @Jocs in #5303

New Contributors

• @Awaker-OTE made their first contribution in #5189
• @Panisnbb made their first contribution in #5188
• @woltary02-creator made their first contribution in #5089
• @KDOJP made their first contribution in #5176
• @rkristelijn made their first contribution in #5137
• @coolvitto made their first contribution in #5049
• @andesyteoss made their first contribution in #4980
• @Zengzzhao made their first contribution in #4957
• @xrgzs made their first contribution in #5185
• @githello1 made their first contribution in #5245
• @nikkogibler made their first contribution in #4814
• @doktorigi made their first contribution in #4910
• @CookPiu made their first contribution in #5259
• @foo-hao made their first contribution in #5153
• @legsing made their first contribution in #5132
• @wmoss made their first contribution in #4937
• @richbodo made their first contribution in #5103

Full Changelog: v0.20.0-rc.1...v0.20.0-rc.2

Breaking Changes (well not breaking, but kinda, not sure haha)

• Made Sentinel mandatory on regular servers. Existing regular servers were enabled automatically, and the enable or disable setting became read-only in the UI and API. This is mandatory for upcoming features. Sentinel will have a bigger responsibility.

Features

• Restored each user's last active team after login and added a team picker when no saved team was available. (#11503)
• Moved service application and database settings into a modal and added Docker restart-limit settings, including API support for max_restart_count.
• Added indexing, redirect, and hostname regeneration controls to application, preview, and service domain editors.

Fixes

• Prevented duplicate two-factor challenge submissions and redirected stale authenticated submissions instead of returning HTTP 419. (#11223, closed #10670 and #10731)
• Accepted custom usernames in SCP-style SSH Git URLs across source setup, API creation, webhooks, clones, and repository links. (#11685, closed #11686)
• Accepted uppercase letters in existing S3-compatible bucket names. (closed #11536)
• Detected Docker Compose domain conflicts across service domains and treated HTTP and HTTPS forms as the same routing identity.
• Preserved inherited service ports instead of saving them as overrides, and ignored hostless URLs when deployments calculated port overrides.
• Saved Compose environment files atomically to prevent partial writes and truncated files.
• Made the "Restart Limit Reached" email notification toggle work. (closed #11705)
• Distinguished same-named application containers on different servers in the terminal.
• Fixed sidebar preference handling, application domain display, two-factor status display, and duplicate metrics status badges.

Improvements

• Pulled image-based Docker Compose services before stopping the current deployment, which reduced downtime and stopped deployments early when an image pull failed.
• Improved domain editing and queued DNS checks across applications, previews, and services. DNS checks now ran only after relevant hostname or scheme changes.
• Improved mobile application settings navigation, pinned domain save controls, compacted service domain cards, and made view controls consistent.
• Improved the environment variable editor, modal scrolling, button loading states, and backup settings layouts.
• Upgraded Sentinel from 0.0.22 to 1.0.1.

What's Changed

• fix: prevent duplicate 2FA challenge submissions causing HTTP 419 by @PRSFM in #11223
• feat(teams): persist active team and add team selection screen by @adiologydev in #11503
• fix: support generic SSH Git usernames by @Marmelatze in #11685

New Contributors

• @PRSFM made their first contribution in #11223
• @Marmelatze made their first contribution in #11685

Full Changelog: v4.3.18...v4.3.19

Today, we're excited to take you on a journey to another destination coming to the upcoming Isle of Ireland DLC for Euro Truck Simulator 2 - the county town of Cavan!

Located in the heart of Ireland's lakeland region, Cavan is known for its picturesque countryside, rolling green landscapes, and rich agricultural heritage. As our map team continues to recreate the unique atmosphere of Ireland, we knew this important regional hub deserved its place on the road network of the Isle of Ireland DLC.

While exploring the area, keen-eyed drivers may spot a stone wall or even a rugby field, well-known local landmarks that help bring even more regional identity to the town and its surroundings. Combined with carefully crafted roads, vegetation, and architecture, these details help create a location that feels true to its real-world counterpart.

Of course, no town in Euro Truck Simulator 2 would be complete without plenty of opportunities for work. In Cavan, truckers will be able to deliver cargo to several industries that play an important role in the local economy.

One of the key destinations is a local oil supplier, serving businesses and communities across the region. Whether you're hauling fuel products or supporting regional logistics, this depot offers an important link in the supply chain.

Drivers looking for refrigerated or packaged cargo will also find work at a food distribution depot. Acting as a hub for incoming and outgoing goods, this facility ensures products reach stores and customers throughout the island.

In addition, a supermarket depot provides another busy destination for deliveries. From everyday consumer goods to fresh produce, truckers will have a variety of cargoes to transport while helping keep shelves stocked across the region.

Our teams have worked hard to capture the atmosphere of this charming Irish town, from its characteristic rural surroundings to its industrial areas and landmarks. We hope that Cavan will become a memorable stop on your journeys across the Isle of Ireland.

We look forward to sharing more previews from the Isle of Ireland DLC in the future. If you're excited to discover, explore, and travel across the Isle of Ireland, be sure to add this upcoming map expansion to your Steam Wishlist!

Don't forget to follow us on X/Twitter, Facebook, Instagram, Bluesky, TikTok, and YouTube, or sign up for our newsletter for all the latest news. Until next time, keep those wheels turning, and happy haulin'!

• N/A

• Intermittent flicker may be observed in browsers when navigating to certain websites [6673430]
• Fixed an issue where virtual displays could not be created after updating to driver 616.56 [6674464]
• Remote Desktop Protocol (RDP) sessions may display a black screen after updating to driver 616.56 [6687328]

⭐ New Feature: Unified Logs

Logs are merged with PocketBase logs and not a seperate console-only feature anymore.

• Added superuser-only /logs page backed by PocketBase built-in logs.
• Filter by level, text-search log level/message/data, sort, paginate, refresh.
• View structured data, relative source path, level, message, time, raw JSON.
• Toggle UpSnap-only logs using upsnap=true record attribute.
• Wake and shutdown logs identify manual or cron trigger.
• Ping status transitions and tracked IP changes now log events.
• Added UPSNAP_LOG_LEVEL: DEBUG, INFO, WARN, ERROR, OFF.

Changelog

Features

• 7bbe114: feat: add /logs page, close #1756 (@seriousm4x)

Others

• 7045f74: cleanup css classes (@seriousm4x)
• b3c4b37: improve log filter and fonts (@seriousm4x)
• aee5c8c: improve logging, filter only upsnap logs (@seriousm4x)

Improvements

• Added MLO STR Mesh support for WiFi 7 Access Points.
• Requires UAP 8.8 or newer.
• Improved Application stability.
• Improved Observability resiliency.

Bugfixes

• Fixed a rare issue where WiFi clients using MLO could display an incorrect IP address.
• Fixed an issue where WiFi Broadcast could fail on UDR7 and UDR-5G when using MLO STR.
• Fixed inaccurate Port Lock events in Port Manager Time Machine.
• Fixed an issue where Site Admins could fail to open Settings in multi-site deployments.
• Fixed a rare issue where network configuration changes could fail to save.
• Fixed a rare issue where the Client Session widget was not displayed in the Client panel.

Additional information

UniFi OS Server

Going forward, we recommend users upgrade to UniFi OS Server for all self-hosted deployments. It provides the full UniFi OS Platform experience, ensuring you receive the latest features, improvements, and integrations.

UniFi Network Native Application for UniFi OS

Compatible with UDM, UDR, UDR7, UDR 5G Max, Express, Express 7, and UCG models (Ultra, Max, Fiber, and Industrial) on UniFi OS 3.1.6 or later. UDM-Pro, UDM-SE, and UDW have been using it since UniFi OS 5.1.5.

• The UniFi OS update utilizes the application version compatible with your console.
• The manual update process via SSH requires a compatible package. Incompatible packages will be rejected on installation.
• Older UniFi OS versions (prior to UniFi OS 3.1.6) on the UDM and UDR continue to utilize the standard UniFi Network Application for UniFi OS.

 Checksums

b36ca9556adb81acd824fed0fd2c1241 | UniFi-installer.exe
997da0446e899effc5b127c72e20905f | UniFi-Network-Server.dmg
af19d5ebefc1e404ed1e218c18a29f24 | UniFi.unix.zip
494659265959d3340cbea2b1c6511c79 | unifi_sysvinit_all.deb
1afb80c3b8db29a71930704a2639f452 | unifi-uos_sysvinit.deb
9107edebf863a5942419fb6b73e0dd8e | unifi-native_sysvinit.deb
601df32736f41e40a80a3e472450a3e1 | unifi_sh_api


------------------------------------------------------------------------------------------------------------------------


984fefaa18aa38d90928f9159d2f2c8286202f19b0e038e3c2a8f7192dfc1c91 | UniFi-installer.exe
1a8bce73cb4bdb12bb9911b38a3c086f9fe827f4933601308913d2fc44ee268a | UniFi-Network-Server.dmg
825748b5074db46253059f8828e76112dd11df992c4c22440139c5a00ad307a7 | UniFi.unix.zip
e93b70e73b9983c5e4d0a8ccc2d5d19b86db05e78f9a8c1850caf89ac069b240 | unifi_sysvinit_all.deb
2bd67733386242dd5a544ef8a3c8a599c7944ca63545603b27223c4c5364c405 | unifi-uos_sysvinit.deb
e43c4576c40189c21cdc2cd57a9a7dcc93089e5b410286b6a676295c79e64a00 | unifi-native_sysvinit.deb
1791685039ea795970bcc7a61eec854058e3e6fc13c52770e31e20f3beb622eb | unifi_sh_api

• [p]Fixed various gaps in map.[/p][/*]
• [p]Fixed a wallbang spot on B site.[/p][/*]
• [p]Added a missing competitive CT spawn point.[/p][/*]
• [p]Added additional T spawn points.[/p][/*]

• [p]Reworked CSPlayerCamera:[/p]
• [p]Renamed it to CustomPlayerCamera.[/p][/*]
• [p]Added GetPlayer, GetMode, SetMode, and SetFollowConfig.[/p][/*]
• [p]Deprecated IsEnabled, SetEnabled, and SetIsControllingAngles.[/p][/*]

Changelog

Features

• 7bbe114: feat: add /logs page, close #1756 (@seriousm4x)

 The Stable channel has been updated to 154.0.8037.17/.18 for Windows. Mac is coming shortly , as part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log.

 The Extended Stable channel has been updated to 152.0.7977.120 for Windows and Mac which will roll out over the coming days/weeks.

• View downloads
• View release notes

• View downloads
• View release notes

Today, we're heading to Bristol, a historic city in the south-west of England known for its harbour, maritime & industrial heritage and iconic landmarks. 

We’re excited to bring Bristol to life as a brand new city in our UK Rework project for Euro Truck Simulator 2. Our talented map and asset teams have been working hard to recreate its distinctive character, landmarks and industries for players to discover. So, what can you expect to find? Let us show you!

This week's release includes call hierarchy support, multi-select in the Git Panel, automatic language detection for untitled buffers, and project search on type by default.

Shipped by the Zed Guild 🛡️

• Added automatic language detection for untitled buffers. (#61412; thanks amtoaer)
• Added support for rendering LSP 3.18 Markdown diagnostic messages from language servers. (#61030; thanks aviatesk)
• Fixed searching for full SHA-256 commit hashes in the Git Graph. (#63371; thanks albertbogusz)

Learn about the Zed Guild.

Features

AI

• Added support for effort-based reasoning when using OpenRouter models. (#61308; thanks codello)
• Added support for renaming Terminal Threads from the Threads Sidebar. (#63494)
• Added a button to cancel ChatGPT Subscription setup. (#63627)
• Improved streaming for OpenAI-compatible providers. (#63520)
• Improved trial descriptions to show $5 of GPT Luna and unlimited edit predictions for 14 days from trial start. (#63969)

Git

• Added multi-select to the Git Panel. (#60340; thanks justinschmitz97, and thanks jacobbinnie for an earlier implementation in #52935)
• Added Open File Permalink and Copy File Permalink actions to file tabs and the Project Panel. (#62177; thanks JacobNWolf)
• Improved performance when opening project diffs with many large merge conflicts. (#63394, #63395)

Vim / Helix

• Added Helix mode support for closest-pair text objects with m i m and m a m. (#59201; thanks GoldStrikeArch)

Languages

• Added call hierarchy support through call hierarchy: show incoming calls and call hierarchy: show outgoing calls, with default keybindings cmd-k cmd-h on macOS and ctrl-k ctrl-h on Linux and Windows. (#53239; thanks swiftcoder)
• Added cmd-shift-v and cmd-k v on macOS and ctrl-shift-v and ctrl-k v on Linux and Windows to open the tabular data preview for CSV, TSV, SSV, and PSV files. (#63369; thanks HalavicH)
• Added shell script language detection for .bash_login files. (#63466; thanks mnipritom)

Terminal

• Added Visual Line selection with V in terminal vi mode. (#63251; thanks prnvbn)

Other

• Added the outline_panel.multi_buffer_hide_symbols setting and outline panel: toggle symbols action to show only files and directories in the Outline Panel for multi-buffer views. (#63404; thanks FrantisekGazo)
• Added the reveal_if_open setting to reveal buffers already open in another pane instead of opening them in the active pane. (#63306; thanks WoodyWoodsta)
• Added the close_panel_on_toggle setting to the Settings UI and improved its documentation. (#63548; thanks mateioprea)
• Added a folder_indicator setting for showing disclosure chevrons and folder icons together in the Project Panel, Outline Panel, and Git Panel. (#62393; thanks dongdong867)
• Improved command palette ordering by sorting commands by recency of use and ranking previously used commands above unused commands while filtering. (#63388)
• Improved data persistence when Zed quit, restarted after an update, or reloaded a workspace. (#63213)
• Improved inline code to render with rounded backgrounds across all Markdown surfaces, matching the Markdown preview. (#63272)
• Improved outline fonts and colors. (#63325)
• Replaced the column filter icon in tabular data previews with a filter funnel. (#63266; thanks HalavicH)

Bug Fixes

• Fixed Gemini rejecting requests whose tool schemas could not be represented in Zed's restricted schema dialect. (#63342)
• Fixed Helix mode surround commands failing to preserve selections after edits and performing slow textual boundary scans. (#59201; thanks GoldStrikeArch)
• Fixed incorrect indentation after multiline comments and multiline paste. (#61669; thanks peakxy)
• Fixed Ollama not appearing as an edit prediction provider and its model dropdown showing only the configured model instead of all available models. (#63519; thanks reinier-millo)
• Fixed shallow diffs causing excessive computation. (#63024)
• Fixed UI hangs when language model providers streamed large tool inputs. (#63241)
• Fixed .dockerignore files displaying a generic icon instead of the Docker icon in the bundled icon theme. (#63398; thanks tech-dipesh)
• Fixed Agent terminal tool calls leaking file descriptors on macOS. (#62978; thanks nertzy)
• Fixed Anthropic "prompt is too long" errors reported with HTTP 400 not being recognized as context-window overflows. (#63596)
• Fixed the Bookmarks tab failing to update when bookmarks were added or removed while it was open. (#56363; thanks saberoueslati)
• Fixed the breakpoint list not showing breakpoints in single files. (#63348; thanks caseyavila)
• Fixed containers becoming scrollable by a sub-pixel amount, with a phantom full-height scrollbar thumb, at fractional UI font sizes. (#63659)
• Fixed crashes that could occur when a multibuffer replaced a file’s contents while highlights, inlay hints, or other positions still referenced the old contents. (#62636)
• Fixed diagnostics not being underlined when their range covered only a line terminator, such as for a missing : in Python. (#63125; thanks dmitriegorov16)
• Fixed extension-provided language servers missing from settings schemas served by remote servers. (#62355; thanks vancez)
• Fixed Zed failing to recognize Git remotes in partial clones. (#63331)
• Fixed "Go Back" not returning to the Git Graph after opening a commit diff. (#63597; thanks reinier-millo)
• Fixed a GPUI Web crash caused by synchronous executor blocking. (#63484)
• Fixed inconsistent shortcut labels in Which Key on Windows. (#63349)
• Fixed joining lines removing a leading * from code outside block comments, such as pointer dereferences. (#63916)
• Fixed a crash with some language servers when finding all references. (#63372)
• Fixed linked worktree names and creation paths for bare Git repositories. (#63351)
• Fixed a Linux crash when reporting a Wayland connection error while standard error was unavailable. (#63159)
• Fixed project search retaining results from closed untitled buffers. (#61677; thanks pingpong74)
• Fixed the settings migration prompt appearing when settings contained no deprecations, including context servers configured with only a url. (#62818; thanks porada)
• Fixed stale Git commit templates being restored as pending commit message drafts. (#63604; thanks akramcodez)
• Fixed a crash when converting a malformed ${ shell variable reference on Windows. (#63446; thanks 39ali)
• Fixed Windows processes remaining alive after a background thread panic. (#63157)

Breaking Changes and Notices

• Enabled project search on type by default; set { "search": { "search_on_type": false } } to restore the previous behavior. (#62506)

• Milestone

This is a security-oriented major release with several important security patches, so users are encouraged to update without delay.

From this release, we are also making it clear that our rolling-release channel (edge) is recommended for faster security patches.

Breaking change 💥:

• Disallow access to local networks such as 127.0.0.1 by default, for security reasons

Feature highlights✨:

• Filter global view feed list by state and search
• New option to hide badges showing number of unread articles (Phantom Obligation)
• Refresh only feeds in the current view
• Offer to add a prefix when re-sharing user labels

Bug fixes highlights 🐛:

• Several security attack scenarios patched
• Fix lost elements while parsing search query
• Fix “mark as read older than…” widening the active search
• Fix saving user queries
• Fix SQL errors breaking some regex searches with MySQL / MariaDB

This release has been made by @Alkarex, @andris155, @ColonelMoutarde, @Frenzie, @IEEE-754, @Inverle, @math-GH, @nykula, @polybjorn, @Stunkymonkey and newcomers @0xdeadrelay, @AdamKorcz, @aligundogar, @bossaarebecca-alt, @Cactys12, @chrislongros, @Divinelink, @Elgeryy1, @featurecreep-cron, @Fripix, @fzlzjerry, @georatas, @gshimo, @iatman ,@ihsanarifr, @jamalkamaladdin, @JamBalaya56562, @jbrayton, @jeremy-code, @juherr, @kobihikri, @LeeXiaolan, @masskrdjn, @mohammadlashkari, @nathanpixodeo, @Otolock, @payaci, @salvador-castro, @SamCyber001, @satyvm, @senti-man, @simitana, @ThomasVermeer, @Totara-thib, @TowyTowy, @utkutibet, @XiaoSong1223

Full changelog:

• Security
  • 💥 Disallow access to local networks such as 127.0.0.1 by default, for security reasons (breaking change) #8400,
    #9195
    • Selected local networks can be allowed under System configuration or using the INTERNAL_HOST_ALLOWLIST environment variable
    • Passing * allows all networks like before (unsafe)
  • Improve SSRF mitigations by restricting CURLOPT_PROXY #8950
  • Fix auth CSRFs (login and register actions) #9171
  • Log invalid challenge and ignore JSON error during login #9278
  • Disallow fetching of non remote URI #9215
  • Only allow HTTP/HTTPS schemes for enclosure and thumbnail URLs #9272
  • Fix access control in rss and opml actions #8912
  • Refactor to use CSRF field directly instead of borrowing it from a form #9169, #9205
  • Cleaner limit anonymous mode to default user #9235
  • Fix HTML ingestions in templates #9146, #9170
  • Fix bad header filtering bypass #8964
  • Sanitize all fields during JSON import #9168
  • Gate greader (JSON) user query share format behind Share by OPML #9248
  • Public OPML should not contain cURL parameters #9070
  • Ignore security-relevant OPML attributes for dynamic OPML sources #9276
  • Strip feed URL credentials from anonymous user query output #9246
  • Set limits for regex during search #8913
  • Fix path disclosure in cache error message #9206
  • Limit the length and parentheses nesting depth of a search query #9277
  • Use timing-safe comparison for tokens #8945
  • Use hash_equals() for GReader API token comparison #9183
  • Mailer: allow disabling SMTPAutoTLS via config #9026
  • Warn during install if document root does not point to ./p/ #9010
  • Stop the unread-count poller after the session ends #9065
  • Add remote IP address to warning on form login #8942
  • Pin the GitHub actions using SHA #9200
  • Harden cache and SimplePie cache deserialization #9273
• SimplePie
  • Security: Disallow javascript: URI scheme (protocol) #8263
  • Fix wrong player parent logic leading to invalid type #8893, simplepie#978
  • Consistently enable XML_OPTION_PARSE_HUGE #8894, simplepie#977
  • Fix null warning in IRI for PHP 8.5+ #8918, simplepie#979
  • Fix sanitizer whitelist stripping order #9066
  • Show only one representation per media:group #9009
  • Bump upstream SimplePie #8947
• Features
  • Filter global view feed list by state and search #9132
    • Use global view when searching from subscription page #9144
  • New option to hide badges showing number of unread articles (Phantom Obligation) #8844
  • Refresh only feeds in the current view #9060
  • Offer to add a prefix when resharing user labels #9236
  • Add log search to the logs page #9059
  • Add configurable log_level system setting #9185
  • New option to keep or not the custom sort order when navigating between categories and feeds #8969
  • New per-feed option to show or hide enclosures (attachments) #9015
  • Detect JSON feeds from URLs containing json #9058
    • Also when subscribing via the API #9167
  • Order categories during OPML import/export according to position #9203
  • OPML: include each feed’s refresh interval (TTL) in export/import #8982
  • Log failed CSS content retrieval (Web scraping) #9077
  • Allow providing a category when adding a feed by bookmarklet #9047
  • Add LinkAce sharing service #9024
  • Add Nextcloud Bookmarks sharing service #9032
• Bug fixing
  • Fix lost elements while parsing search query #8884
  • Fix “mark as read older than…” widening the active search #9173
  • Fix saving user queries #9190
  • Fix SQL errors breaking some regex searches with MySQL / MariaDB #9036
  • Fix marking filtered label articles as read in SQLite and PostgreSQL #9264
  • Fix tagging an already-tagged entry on PostgreSQL raising a SQL error instead of being a no-op #9136
  • PostgreSQL: make committing new entries resilient to duplicate keys #9231
  • Preserve negative timezone offsets in date intervals #9071
  • Fix feed dropdown bugs due to hash desync #8949
  • Fix slider not reinitializing after form submit #8973
  • Minz: Skip loading duplicated JS/CSS assets #9000
  • Respect simplepie_syslog_enabled for the uses cache logs #8986
  • Fix statistics repartition averages #8996
  • Fix article hover date visibility #8997
  • Keep search and state filters when marking articles as read #9007
  • Fix --db-prefix silently drops following CLI flags #9042
  • Remove stale dynamic favicon links #9127
  • Fix desync between favicon and title unread counters #9262
  • Fix outdated username length hint on registration and install forms #9013
  • Redirect away from wrong URL paths #9075
  • Fix auto-share shortcut on first use #9072
  • Exclude hidden feeds from global view counts #9152
  • Fix only the last <media:credit> being written to the RSS output #9174
• CLI
  • New cli/reconfigure-user.php to read/write per-user config attributes #8873
  • Report new articles count per feed in app/actualize_script.php output #8948
  • Output a diagnostic when the cli/health.php check fails #8980
• API
  • Add a warning message to the API password section and a log warning when a client uses GET instead of recommended POST #8845
  • Fever API: log the client IP address on authentication failure #8981
  • WebSub: ignore HTTP/HTTPS scheme difference in Self URL comparison #9005
• Deployment
  • Docker alternative image updated to Alpine 3.24 with PHP 8.5.7 and Apache 2.4.67 #8916
  • Start supporting PHP 8.6+
    • Docker dev :newest with PHP 8.6 #9155
  • Docker: attach provenance and SBOM attestations to the published image #9150
  • Apache use only CONN_REMOTE_ADDR in logs when mod_remoteip is available, for compatibility with LiteSpeed Web Server #8890
  • Fix .dockerignore being ignored during build in CI #9001
  • New ENABLE_ACCESS_LOG environment variable to disable access logs #9191
  • Check GMP during 32-bit installation #9046
  • Improve actualize mutex to allow multiple instances #9045
  • OIDC: redirect to a default URL on expired auth state instead of 400 #9143
• UI
  • Always jump article to top when header is offscreen, also when Stick the article to the top when opened is disabled #8870
  • Move article header/footer options (feed title, authors and date, icons position, tags) from Reading to Display configuration #9139
  • Move disable button before remove button in user management #8944
  • Keep scroll position of slider after form submit #8974
  • Group export feeds by category #9079, #9154
  • Sort feed names with locale-aware collation #8985
  • Sort labels with locale-aware collation #9023
  • Format unread counter in title on page load #9263
  • Display slider after submit for all buttons in feed update UI #8999
  • Improve aside keyboard navigation #9202
  • Allows usage of Ctrl/Shift keys with the open website shortcut #9186
  • Fix padding for .nav_menu in Alternative-Dark, Flat, and Nord themes #8901
  • Fix typo in alert error border color variable #9266
  • Use JavaScript Event() constructor instead of deprecated initEvent() #9035
  • Use :user-invalid instead of :invalid for CSS form field styling #9025
  • Remove unused simple layout #8998
  • Various UI and style improvements: #8823, #8824,
    #9140, #9145
• Extensions
  • Minor Minz_Extension typing #8952
  • Improve extension list fetch diagnostics #9055
  • Fix a PHP warning in Serve action #9267
  • Fix extension settings cancel action #9053
  • Fix sharing menu conflicts with extensions #9074
  • Add read status hook for entries #8995
  • Dispatch a new JavaScript event freshrss:entryStateChange when an entry finishes being marked read/unread #9031
  • Redirect after saving user CSS/JS so changes apply immediately #9006
• I18n
  • New plural system #8988
    • Pluralize the new articles count message
  • Prefer OS-bundled Japanese fonts when UI language is Japanese #9002
  • Add Azerbaijani #9269
  • Add Lithuanian #9201, #9213
  • Improve Brazilian Portuguese #9240, #9242
  • Improve German #9149
  • Improve Greek #8977, #9038
  • Improve Hungarian #8879
  • Improve Indonesian (Bahasa Indonesia) #9220
  • Improve Italian #8880
  • Improve Japanese #9064
  • Improve Persian #8923
  • Improve Spanish #8878, #9245
  • Improve Traditional Chinese #9037, #9069, #9223
  • Improve Turkish #8966, #8971, #8970,
    #8989
  • Improve Ukrainian #8871
  • Refactor user query translation keys #9049
• Misc.
  • Update to PHPMailer 7.1.1 #8907
  • Improve PHP code #8906, #9156
  • Fix PHPStan 2.2.2 in CLI #8911
  • Migrate markdownlint-cli to markdownlint-cli2 #8987
  • Update dev dependencies #8904, #8905, #8926,
    #8939, #8940, #8963,
    #8961, #8959, #8958,
    #8962, #8960, #9148,
    #9162, #9165, #9158,
    #9159, #9176, #9178,
    #9179, #9219, #9253,
    #9254, #9255, #9257

5.53.0 (2026-09-09)

🚀 New feature

• Add an export audit logs button (#27427)
• content-releases: record release actions in audit logs (#27436, #27436)

🔥 Bug fix

• close the drawer on click on interactive elements (4573d58806)
• transfer configuration import discards the error that caused it (#27565)
• misc users-permissions and admin (2f3595fe61)
• content-type-builder: default new private fields to not searchable (#27482)
• email-sendmail: disable file and URL access for attachments (#27430)
• mcp: bump mcp sdk@2 to stop clients droping advertised tools (#27505)
• strapi: --sourcemap flag has no effect on the admin build (#27545)
• upload: reserve list space for the bulk actions bar (#27509)
• upload: filter the row replace picker by the asset's mime (#27508)
• upload: bound the focal point fields to the crop area (#27496)
• upload: folder navigation resets media library list scroll and p… (#27449)
• upload: keep the drawer open when a control behind is pressed (3ebdde0965)
• upload: only a primary-button press dismisses the drawer (3b81103657)
• upload: contain fast provider rejections in upload batches (#27543)

⚙️ Chore

• release v5.52.3 update develop (2695ff53ff)
• .github/draft-release: run the workflow more than once per release (#27573)
• ci: pin all GitHub Actions to latest versions by commit SHA (37d9438606)
• ci: add the draft-release action and workflow (#27562)
• deps: bump undici from 6.28.0 to 6.28.1 (#27568)
• lint: make oxlint a blocking ci gate (#27450)

⚠️ Changes to be aware of

MCP clients no longer drop advertised tools

The built-in MCP server now advertises tools as JSON Schema 2020-12, so strict clients that previously dropped every tool keep the full list. If you register custom MCP tools or prompts: unknown or unauthorized tool calls now return JSON-RPC error -32602 instead of isError: true; extra.sendNotification and extra.sendRequest are gone; and one prompt argsSchema that cannot become JSON Schema (for example z.date()) hides every prompt from prompts/list.

(#27505)

❤️ Thank You

• Adrien L @Adzouz
• Adrien Lepoutre @Adzouz
• Andrei L @unrevised6419
• Arthur Moreau
• Bassel Kanso
• Gonzalo Andres Garcia @gonbaum
• Jamie Howard @jhoward1994
• Jan Kahmen @kah-ja
• Moutaz-homsi
• Nico André
• Simon Norris