Engineering notes

Specific Sitecore and Umbraco problems, the code that solved them, and the part that still does not work. Written by the people who did the work.

2 articles

July 2025: the Delivery API cache that forgot to check the API key
Umbraco

July 2025: the Delivery API cache that forgot to check the API key

A moderate-severity Content Delivery API advisory patched in 13.9.3, 15.4.4 and 16.1.1; three uSync releases in nine days, all of it v13 upgrade debt; and Umbraco's roadmap post on MCP, Compose and search.

Read more
July 2025: Sitecore shipped 10.4 Update 1 and the community wrote the upgrade notes
Sitecore

July 2025: Sitecore shipped 10.4 Update 1 and the community wrote the upgrade notes

The month the community installed 10.4.1 and documented what broke: Identity Server's encrypted SQL requirement, Solr 9.8.1's max-fields limit, plus MCP Server 1.0.0, Stream REST APIs and the Content SDK beta.

Read more