Release notes for Magnolia CMS 6.2.8

Magnolia CMS 6.2.8 is a bug-fixing and security release that comes earlier than planned to fix a compatibility issue related to the Connector Packs, the Digital Asset Management module and the External DAM module. The issue was identified in specific configurations of some of our customers who intended to upgrade to Magnolia CMS 6.2.7.

Improvements

New SSO module released

Shortly before Magnolia CMS 6.2.8, we introduced the SSO module. This module delegates authentication from a Magnolia instance to an OpenID Connect identity and access management application. In the recently released version 1.1, we have decoupled the module from Keycloak and improved the parsing of the groups property.

JCR Browser and Pages apps added to App launcher via decoration

The JCR Browser and Pages apps have been removed from the JCR App launcher configuration and added via decoration instead. In case of a custom App launcher configuration, you might need to update this resource file or provide your own decoration to move it from the default location. For example:

appLauncherLayout:
  groups:
    edit: #Remove from the default location
      apps:
        pages-app:
          enabled: false
    manage: #You can still use the old JCR configuration here instead
      apps:
        pages-app:
          enabled: true

Assets app can check whether asset providers are enabled

In the DAM API, the new info.magnolia.dam.api.AssetProvider#enabled property allows you to disable a particular asset provider if, for instance, it does not have the necessary credentials to access the assets. The default value for the property is true. Setting the property to false hides the related DAM subapp in the UI and prevents it from starting.

You can also use definition decoration to configure the property. For example:

/dam-bynder/decorations/dam/dam.config.yaml
providers:
  bynderProvider:
    identifier: bynder
    enabled: false
    class: info.magnolia.external.dam.bynder.BynderAssetProvider
    renderers:
      bynder:
        class: info.magnolia.external.dam.bynder.BynderAssetRenderer
        proxyMode: true
        mediaTypes:
          audio: 'audio/*'
          video: 'video/*'

Specific metadata stripped when nodes are duplicated or copied

With this release, the following publishing-related node type properties and their values are excluded when you duplicate a node:

  • mgnl:activationStatus

  • mgnl:lastActivated

  • mgnl:lastActivatedBy

  • mgnl:lastActivatedVersion

  • mgnl:lastActivatedVersionCreated

The mgnl:lastModified and mgnl:lastModifiedBy properties are also excluded when you copy a node.

Third-party library updates

This release comes with third-party library updates to fix some security and compatibility issues as well as improve performance. The following are the most notable updates:

We keep the details of security fixes private in line with our security policy. Contact our Support team if you need more information.

Others

Known issues

If you are upgrading from an earlier version, read the Upgrading to Magnolia page first and check the Known issues page.

Documentation screenshot updates

Some of the screenshots in the documentation still show the legacy Magnolia 5 UI. Please bear with us as we work to update them.

Changelog

See the 6.2.8 changelog for all the changes.

Updated modules

  • Community Edition 6.2.8

  • DAM 3.0.7

  • DX Core 6.2.8

  • External DAM 1.0.6

  • Magnolia 6.2.8

  • Pages 6.2.7

  • Third-party library BOM 6.2.8

  • UI 6.2.8

  • Workflow 6.0.4

Acknowledgements

The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release. Your continued interest helps us make Magnolia better. Special thanks go to Christopher Chard and Florian Reiser.

dev days event sign up
dev days event sign up
Feedback