Engineering notes

Specific Sitecore and Umbraco problems, the code that solved them, and the part that still does not work. Written by the people who did the work.

13 articles

July 2025: the Delivery API cache that forgot to check the API key
Umbraco

July 2025: the Delivery API cache that forgot to check the API key

A moderate-severity Content Delivery API advisory patched in 13.9.3, 15.4.4 and 16.1.1; three uSync releases in nine days, all of it v13 upgrade debt; and Umbraco's roadmap post on MCP, Compose and search.

Read more
March 2025: the Umbraco patch you could not apply where you stood
Umbraco

March 2025: the Umbraco patch you could not apply where you stood

March's advisory fixed two moderate CMS issues plus a high-severity ImageSharp CVE, but only on the latest minor of each supported major. Also: uSync 13.2.7 and 15.1.5, a V8-to-V13 upgrade written up honestly, and a backoffice accessibility fix.

Read more
February 2025: Umbraco 8 went out of support, at the bottom of a quarterly digest
Umbraco

February 2025: Umbraco 8 went out of support, at the bottom of a quarterly digest

Umbraco 8 reached end of life in February 2025, alongside Azure TLS deadlines, a Cloud WAF default and Commerce 15 throughput claims. Six citable items in the whole month, three of them from umbraco.com.

Read more
February 2025: Pages caught up with Experience Editor, and the field wrote the invoice
Sitecore

February 2025: Pages caught up with Experience Editor, and the field wrote the invoice

February 2025 brought field editing into XM Cloud Pages. The rest of the month was practitioners documenting what the move costs: media URLs that expire, Solr CPU, a 10.1 to 10.4 upgrade break, and a CVE that is not in the bulletin.

Read more
January 2025: twelve field reports and nothing from the vendor
Sitecore

January 2025: twelve field reports and nothing from the vendor

A backfilled month, reached through feed archives. Twelve Sitecore posts worth your time, all written by practitioners: Edge webhook timeouts, two 10.4 upgrade logs, Astro on XM Cloud, and two posts called Sitecore Search that mean different things.

Read more