Release notes for Magnolia CMS 6.3.6

LTS release • Delivered on March 24, 2025 • Changelog: 16217

Magnolia 6.3.6 is primarily a bug-fixing and security release that delivers critical security fixes. This release also enhances workflows with .zip file extraction, preserving folder structures for efficient asset management, and adds REST client caching for improved performance.

We keep the details of the security fixes private in line with our security policy. Contact our Support team if you need more information.

Improvements

ZIP extraction of assets upon upload

You can now upload and extract .zip files while preserving the original file and folder structures. This enhancement simplifies uploading and organizing assets efficiently, especially when dealing with big data sets.

  • Recreate nested folder structures in the dam workspace.

  • Streamline uploading structured content.

  • Improve efficiency for teams managing large asset collections.

MGNLDAM-1586 Ability to upload nested folder structures and extract (ZIP)

Caching in the REST client

Similar to Magnolia 6.2, the 6.3 branch now supports REST client definition caching configuration.

  • MGNLRESTCL-232 Re-introduce cache configuration in REST client definition

Other improvements

  • MGNLCACHE-390 Clean up cacheStream file in a temp folder after request is complete

  • MGNLDAM-1717 Use a LazyThumbnail in asset views (browse and chooser)

  • MGNLGQL-192 Allow introspection to be disabled

  • MGNLPN-337 Preview filter is executed on public instances

  • MGNLTOMCAT-50 Log error if the Java version isn’t compatible with Magnolia

  • MGNLUI-9157 Implement a lazy thumbnail that only loads the image when the element is visible on the screen

  • MGNLUI-9162 Allow for injection of field and fieldDefinition into validator factories

Bug fixes

  • MGNLDAM-1704 DamLinkField switches the width height attributes

  • MGNLGQL-183 Definition names with hyphens can’t be queried

  • MGNLUI-6116 Unable to keep Unicode character when uploading a .zip file (created in Windows) in Assets app

  • MGNLUI-8714 date field uses browser time instead of system time

  • PAGES-1232 Component inheritance fails on REST requests for pages below a certain depth

  • PAGES-1677 Show versions functionality not working correctly in the headless mode

  • PUBLISHING-370 Unpublish command shouldn’t version content as a pre-requisite

  • PUBLISHING-371 Programmatically unpublishing from root node causes the jcr:system nodes to be unpublished

    For more, see Recursive and non-recursive publishing.

Miscellaneous

  • ADMINCTR-581 Foundation for a password change on the first login with default password

  • MAGNOLIA-9529 Foundation to remove the default password for superuser upon a fresh installation

  • MGNLTOMCAT-51 Update org.apache.tomcat:tomcat to 9.0.102

Updated modules

Bundled modules included with this release.

  • Admincentral 6.3.4

  • Barebones Tomcat Bundle 1.2.34

  • CKEditor 5 Build 1.0.3

  • Cache 6.0.3

  • Community Edition 6.3.6

  • DAM 4.0.6

  • DX Core 6.3.6

  • Demo Projects 6.3.6

  • GraphQL 2.0.1

  • Imaging 4.0.2

  • Magnolia 6.3.6

  • Pages 6.3.4

  • Personalization 3.0.3

  • Publishing 2.0.3

  • REST Client 3.0.2

  • REST Framework 3.0.1

  • Templating Essentials 3.0.2

  • Third-party library BOM for Extensions 6.3.6

  • Third-party library BOM 6.3.6

  • UI 6.3.6

  • Workflow 7.0.2

Unbundled modules

Unbundled modules released since Magnolia 6.3.5. Click the module title to see the changelog (if available),

Acknowledgements

The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release. Your continued interest helps us make Magnolia better.

Thanks a mill!

Special thanks go out to Björn Eschle.

Feedback

DX Core

×

Location

This widget lets you know where you are on the docs site.

You are currently perusing through the DX Core docs.

Main doc sections

DX Core Headless PaaS Legacy Cloud Incubator modules