Engineering notes

Ten days of Umbraco: an Umbraco 17 dashboard built with Vite, load-balancing prep, Windows Server 2025 setup, a Next.js release, and Codegarden roadmap coverage worth checking against the vendor.

The first ten days of August 2026 in Sitecore: an XP 10.5 release described as Solr 10 only, package installation off by default, Pathway's migration boundaries, and a CVE fix in Next.js 16.3.0.

July forced two jobs: patch the Delivery API flaw (13.15.1 / 17.5.3 / 18.0.2) and patch Umbraco Forms (13.9.8 / 17.4.7 / 18.0.5). Everything else in the month was the December calendar, argued from four directions.

Package Designer left SitecoreAI on 7 July in base image 1.8.24, six days after the Content Transfer and Item Transfer APIs went GA. What that breaks, who filled the gap, and the rest of an 86-item month.

Umbraco.AI 1.0.0 through 1.13.x carry a moderate information-disclosure flaw and the 1.14.0 fix is a breaking change. Plus Umbraco 18 and Elements, uSync v18, and 14 December 2026 on Umbraco 13.

Three vulnerabilities patched in Umbraco 16.5.1 and 17.2.2 on 10 March. The rest of the month was mostly umbraco.com itself: Agent Skills, the Q1 product update, an AI community team.

Umbraco shipped Umbraco.AI (open source, provider-agnostic) and Umbraco Compose (commercial SaaS) in the same month. What each one costs you, plus the 13 to 17 upgrade 403 and uSync 17.0.4.

Umbraco 13.0.0-13.12.0 got a moderate security patch on 9 December. Everything else the month produced came from 24 Days in Umbraco, plus a new Enterprise bundle and a Q1 2026 date for Compose.