Release notes for Magnolia CMS 6.3.3

LTS release • Delivered on January 10, 2025 • Changelog: 14896

Magnolia 6.3.3 is primarily a bug-fixing and security release, delivering also improvements in content caching, JCR observation, content authoring, and publishing.

We keep the details of security fixes private in line with our security policy. Contact our Support team if you need more information.

Announcements

E-commerce 2.0.2 was released on December 13, 2024.

Improvements

System performance

To improve the overall system performance, we’ve integrated optimizations to reduce the number of Jackrabbit observation subscribers, leading to a significant drop in memory allocations during authoring-related operations.

MAGNOLIA-9533 Optimize config workspace observation setup

This improvement is best considered in conjunction with the adoption of the newer cache flush and publishing policies brought to Magnolia 6.3.0 through MAGNOLIA-9256, MGNLADVCACHE-124, MGNLCACHE-360, and PUBLISHING-316.
MAGNOLIA-9524 Versioning performance improvements
PUBLISHING-352 The publication thread pool’s size should be configurable for performance

You can now also configure the publication thread pool’s size. For more, see Thread pool size.

Content authoring

Several changes were made to enable the upcoming Page-editor Apps extension. Primarily, they remove the restriction that the Page Editor can only operate on content in the website workspace.

MAGNOLIA-9526 Removing workspace check to ensure that templates can be retrieved from different workspaces
MAGNOLIA-9300 Templating functions: generating localized links should support dynamic workspace
MGNLSITE-226 Remove website workspace check to support Page-editor Apps

Bug fixes

ADMINCTR-211 Unable to add password validation in user preferences
MGNLCKE-32 CKEditor 5 not including plugins

For more, see Using a custom build.
MGNLDAM-1591 Slow search results in Asset Chooser when S3 assets are connected
MGNLUI-9092 Show version action doesn’t work in content apps
SECURITY-40 Unable to add password validation

Miscellaneous

MGNLTOMCAT-49 Update org.apache.tomcat:tomcat dependency to 9.0.98

Third-party library updates

This release comes with third-party library updates, see the Magnolia Third-party library BOM 6.3.3.

Notable updates

BUILD-1307 Upgrade jakarta.json to 1.1.7-magnolia

With this update, we stop managing javax.json:javax.json-api in favor of jakarta.json:jakarta.json-api. We also introduce a new configuration property org.eclipse.parsson.maxDepth to limit the maximum level of nesting when parsing a JSON string. The default value is 1000.

You can set it as a system property by passing the following JVM argument:
```
-Dorg.eclipse.parsson.maxDepth=<value>
```

Updated modules

Admincentral 6.3.2
Barebones Tomcat Bundle 1.2.33
CKEditor 5 Build 1.0.1
Community Edition 6.3.3
Content Editor 3.0.3
DAM 4.0.3
DX Core 6.3.3
Demo Projects 6.3.3
Diff 3.0.1
Magnolia 6.3.3
Page-editor Apps 2.0.0
Pages 6.3.3
Publishing 2.0.2
REST Client 3.0.1
Security 7.0.1
Site 2.0.1
Third-party library BOM 6.3.3
Third-party library BOM for Extensions 6.3.3
UI 6.3.3
Webhooks 2.0.1

Acknowledgements

The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release. Your continued interest helps us make Magnolia better.

Thanks a mill!

Special thanks go out to Ido Klimovsky and Sidney May.

Feedback

DX Core