django CMS Files

What's Changed

• fix: Structure board update sometimes failed to add all interactive elements by @fsbraun in https://github.com/django-cms/django-cms/pull/8227
• chore: Prepare new dev branch by @fsbraun in https://github.com/django-cms/django-cms/pull/8223
• chore: Move from script tags containing dom elements to template tags by @fsbraun in https://github.com/django-cms/django-cms/pull/8233
• docs: Require American spelling in documentation by @shundread in https://github.com/django-cms/django-cms/pull/8207
• fix: Update migrations to respect the --database option by @fsbraun in https://github.com/django-cms/django-cms/pull/8222
• fix: Page settings raised an exception when USE_I18N = False by @fsbraun in https://github.com/django-cms/django-cms/pull/8236
• fix: replace outdated usage of page__node__path with page__path by @PeterW-LWL in https://github.com/django-cms/django-cms/pull/8238
• fix: 404 no raised in CMS view when no URLs match by @stefanw in https://github.com/django-cms/django-cms/pull/8240
• fix: Remove unused import by @dnlzrgz in https://github.com/django-cms/django-cms/pull/8241
• build(deps): bump tar-fs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8244
• fix: broken links in CONTRIBUTING file by @dnlzrgz in https://github.com/django-cms/django-cms/pull/8245
• build(deps): bump django from 4.2.21 to 4.2.22 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8250
• build(deps): bump requests from 2.32.3 to 2.32.4 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8252
• chore: Make djangocms-admin-style optional dependency by @fsbraun in https://github.com/django-cms/django-cms/pull/8251
• fix: Allow legacy PlaceholderField to be deconstructed by @stefanw in https://github.com/django-cms/django-cms/pull/8248
• fix: Migration error with cms.0027_title_placeholders_data_migration by @jmit-modern in https://github.com/django-cms/django-cms/pull/8249
• refactor: Replace inline-scripts and onclick handlers for better CSP conformance by @stefanw in https://github.com/django-cms/django-cms/pull/8246
• build(deps): bump urllib3 from 2.3.0 to 2.5.0 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8260
• build(deps-dev): bump pbkdf2 from 3.1.2 to 3.1.3 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8262
• fix: Apphook widget detection (#8263) by @fsbraun in https://github.com/django-cms/django-cms/pull/8264
• chore: Remove legacy publication code from extensions by @fsbraun in https://github.com/django-cms/django-cms/pull/8270
• fix: show_placeholder did not respect edit/preview mode and failed loudly by @fsbraun in https://github.com/django-cms/django-cms/pull/8272
• fix: Page 'str' return page title for all pages by @mhsiddiqui in https://github.com/django-cms/django-cms/pull/8280
• chore: Include package data in distr by @fsbraun in https://github.com/django-cms/django-cms/pull/8281
• fix: Allow lazy wizard initialization by @fsbraun in https://github.com/django-cms/django-cms/pull/8266
• chore: Introduce dynamic badges by @mrbazzan in https://github.com/django-cms/django-cms/pull/8282
• chore: Run code coverage upon merge of PR by @fsbraun in https://github.com/django-cms/django-cms/pull/8285
• fix: Allow clicks to propagate to plugins by @fsbraun in https://github.com/django-cms/django-cms/pull/8288
• chore: Remove djangocms-text-ckeditor from tests by @fsbraun in https://github.com/django-cms/django-cms/pull/8287
• fix: GrouperAdmin Search in content model by @mhsiddiqui in https://github.com/django-cms/django-cms/pull/8284
• docs: link pr template link to Discord channel by @wesleyboar in https://github.com/django-cms/django-cms/pull/8257
• fix: The headless template included inline CSS by @fsbraun in https://github.com/django-cms/django-cms/pull/8291
• build(deps): bump actions/first-interaction from 1 to 2 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8295
• docs: Fix broken link in 01-install.rst by @macolo in https://github.com/django-cms/django-cms/pull/8297
• feat: Django 6 compatibility (July 2025) by @fsbraun in https://github.com/django-cms/django-cms/pull/8299
• feat: Help menu on CMS5 (#8300) by @florianschieder in https://github.com/django-cms/django-cms/pull/8301
• build(deps): bump tmp from 0.2.1 to 0.2.4 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8304
• build(deps): bump starlette from 0.46.1 to 0.47.2 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8305
• build(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8308
• build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8307
• build(deps): bump actions/first-interaction from 2 to 3 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8310
• build(deps): bump amannn/action-semantic-pull-request from 5.5.3 to 6.0.1 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8309
• docs: Add documentation for toolbar get_object and set_object methods by @fsbraun with @Copilot in https://github.com/django-cms/django-cms/pull/8312
• build(deps-dev): bump cipher-base from 1.0.4 to 1.0.6 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8316
• build(deps-dev): bump sha.js from 2.4.11 to 2.4.12 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8315
• fix: Respect individual placeholder checks if they can be changed by @fsbraun in https://github.com/django-cms/django-cms/pull/8317
• perf: Optimize placeholder and plugin utilities by @fsbraun in https://github.com/django-cms/django-cms/pull/8319
• build(deps): bump amannn/action-semantic-pull-request from 6.0.1 to 6.1.1 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8323
• fix: Cut children from inactive menu nodes when level is less or equal to 0 by @stefanw in https://github.com/django-cms/django-cms/pull/8322
• build(deps): bump actions/setup-python from 5 to 6 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8329
• build(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8332
• build(deps): bump actions/github-script from 7 to 8 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8331
• build(deps): bump actions/stale from 9.1.0 to 10.0.0 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8330
• fix: copy lang management command - include PageUrl by @vasekch in https://github.com/django-cms/django-cms/pull/7548
• fix: Migration 0033 failed when empty placeholder objects were not present in the db by @fsbraun in https://github.com/django-cms/django-cms/pull/8338
• build(deps): bump django from 4.2.22 to 4.2.24 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8333
• build(deps): bump tar-fs from 3.0.9 to 3.1.1 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8345
• fix: Wrong placholders rendered when using apphooks with own placeholder by @fsbraun in https://github.com/django-cms/django-cms/pull/8343
• build(deps): bump django from 4.2.24 to 4.2.25 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8351
• build(deps): bump actions/stale from 10.0.0 to 10.1.0 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8354
• fix: Searching pages for language-specific content failed due to wrong serach queryset by @fsbraun in https://github.com/django-cms/django-cms/pull/8355
• build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8359
• ci: Fix new contributor message by @marksweb in https://github.com/django-cms/django-cms/pull/8369
• build(deps): bump actions/setup-node from 5 to 6 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8370
• chore: change python version by @vinitkumar in https://github.com/django-cms/django-cms/pull/8371
• build(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8373
• build(deps): bump actions/download-artifact from 5 to 6 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8372
• fix: avoid stringifying None-values in page attribute template tag by @wfehr in https://github.com/django-cms/django-cms/pull/8375
• fix: link in welcome.html for fellowship program by @fsbraun in https://github.com/django-cms/django-cms/pull/8365
• feat: optimize CI with conditional database testing and nightly runs by @vinitkumar in https://github.com/django-cms/django-cms/pull/8377
• fix: Copying x-language lead to unique constraint violation by @fsbraun in https://github.com/django-cms/django-cms/pull/8366
• fix: Fix default value for edit_fields parameter to avoid AttributeError by @fsbraun in https://github.com/django-cms/django-cms/pull/8379
• build(deps): bump starlette from 0.47.2 to 0.49.1 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8376
• fix: Ensure edit endpoint language selection when admin is not using i18n_patterns by @fsbraun in https://github.com/django-cms/django-cms/pull/8367
• build(deps): bump django from 4.2.25 to 4.2.26 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8389
• fix: Update toolbar URL to use language context by @fsbraun in https://github.com/django-cms/django-cms/pull/8394
• chore: Upgrade JS build pipeline by @fsbraun in https://github.com/django-cms/django-cms/pull/8393
• feat: Implement new Django CMS design language for Django CMS 5.1 by @fsbraun in https://github.com/django-cms/django-cms/pull/8320
• fix: copying failed if a target placeholders was missing by @pietzschke in https://github.com/django-cms/django-cms/pull/8399
• build(deps-dev): bump js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8400
• fix: Fix ApphookReloadMiddleware not handling new language variants [#2] by @pietzschke in https://github.com/django-cms/django-cms/pull/8401
• feat: Refactor site handling, and allow single-instance multi-site configurations by @stefanw in https://github.com/django-cms/django-cms/pull/8303
• fix: Save fallback for includes when scanning for placeholders by @fsbraun in https://github.com/django-cms/django-cms/pull/8405
• build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8409
• fix: Allow frontend-editable models to omit get_template method by @fsbraun in https://github.com/django-cms/django-cms/pull/8406
• feat: Let the "eye" icon in the page tree directly go to edit endpoints for editable content by @fsbraun in https://github.com/django-cms/django-cms/pull/8414
• feat: Allow plugins to restrict themselves to specific models by @fsbraun in https://github.com/django-cms/django-cms/pull/8395
• build(deps): bump django from 4.2.26 to 4.2.27 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8421
• fix: clear apphook fields when copying page trees by @Vincent-Ngobeh in https://github.com/django-cms/django-cms/pull/8418
• fix: gracefully handle unresolvable extends variables in placeholder scanning by @Vincent-Ngobeh in https://github.com/django-cms/django-cms/pull/8420
• build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8422
• fix: Potential fix for code scanning alert no. 1231: Wrong name for an argument in a call by @fsbraun in https://github.com/django-cms/django-cms/pull/8423
• chore: Replace Django 6.0a1 with 6.0 in test requirements by @vinitkumar in https://github.com/django-cms/django-cms/pull/8424
• build(deps): bump actions/stale from 10.1.0 to 10.1.1 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8425
• chore: Update copyright notice by @fsbraun in https://github.com/django-cms/django-cms/pull/8417
• feat: Allow page permission change from advanced settings by @fsbraun in https://github.com/django-cms/django-cms/pull/8387
• build(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8428
• build(deps): bump actions/download-artifact from 6 to 7 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8429
• build(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8430
• fix: Improved UX for external placeholders (e.g., static aliases) by @fsbraun in https://github.com/django-cms/django-cms/pull/8416
• docs: Add note on system attribute in CMSPluginBase by @mrbazzan in https://github.com/django-cms/django-cms/pull/8368
• fix: Ignore plugins placeholder conf settings nor non-root plugins. by @fsbraun in https://github.com/django-cms/django-cms/pull/8433
• fix: Add default_auto_field to cms/apps.py (#8254) by @fsbraun in https://github.com/django-cms/django-cms/pull/8258
• build(deps): bump urllib3 from 2.6.0 to 2.6.3 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8436
• feat: Add icon for redirected pages in page tree by @fsbraun in https://github.com/django-cms/django-cms/pull/8437
• ci: Skip live PyPI publish for tags containing "dev" by @fsbraun with @Copilot in https://github.com/django-cms/django-cms/pull/8439
• fix: Use PageContent.template_choices attribute for template choices instead of settings by @fsbraun in https://github.com/django-cms/django-cms/pull/8441
• feat: Preserve GET params when switching to preview or edit mode by @fsbraun in https://github.com/django-cms/django-cms/pull/8444
• chore: Add release notes of minor versions to main branch by @fsbraun in https://github.com/django-cms/django-cms/pull/8448
• docs: Update logo by @fsbraun in https://github.com/django-cms/django-cms/pull/8450
• fix: Improve anti-aliasing of django CMS logo png by @fsbraun in https://github.com/django-cms/django-cms/pull/8452
• docs: Update release notes for 5.1 by @fsbraun in https://github.com/django-cms/django-cms/pull/8454
• fix: resolve empty page_title in frontend edit mode for apphooks by @woolfie1101 in https://github.com/django-cms/django-cms/pull/8449
• docs: Add more type hints and tidy up docstrings in plugin_pool.py by @jasperbok in https://github.com/django-cms/django-cms/pull/8445
• fix: Make Placeholder.add_plugin() set plugin.instance to self (#8442) by @jasperbok in https://github.com/django-cms/django-cms/pull/8447
• build(deps): bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8457
• build(deps): bump lodash-es from 4.17.21 to 4.17.23 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8458
• docs: Rework doc's starting page, and dedicate a full page on explaining the philosophy by @fsbraun in https://github.com/django-cms/django-cms/pull/8453
• fix: Revert "Add default_auto_field to cms/apps.py (#8254)" by @fsbraun in https://github.com/django-cms/django-cms/pull/8461
• feat: Make page content placeholders available to apphook root pages by @fsbraun in https://github.com/django-cms/django-cms/pull/8456
• feat: Avoid database access when registering apphook urls to make them async-safe by @fsbraun in https://github.com/django-cms/django-cms/pull/8460
• build(deps): bump wheel from 0.45.1 to 0.46.2 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8459
• fix: Remove async method from user middleware to avoid asgi freeze when accessing session object by @fsbraun in https://github.com/django-cms/django-cms/pull/8464
• fix: Create page wizard not available on empty install by @fsbraun in https://github.com/django-cms/django-cms/pull/8463
• build(deps): bump django from 4.2.27 to 4.2.28 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8467
• feat: introduce contracts for django CMS Extensions by @fsbraun in https://github.com/django-cms/django-cms/pull/8455
• fix: get_permissions failed for missing global permissions by @fsbraun in https://github.com/django-cms/django-cms/pull/8468
• fix: Align detection of frontend-editable models by @fsbraun in https://github.com/django-cms/django-cms/pull/8472
• fix: Grouper admin kept read-only fields as prepopulated fields by @fsbraun in https://github.com/django-cms/django-cms/pull/8471
• build(deps-dev): bump webpack from 5.102.1 to 5.105.0 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8476
• fix: Language changer for edit and preview mode if no get_absolute_url is available by @fsbraun in https://github.com/django-cms/django-cms/pull/8474
• feat: Add button for django CMS chat by @fsbraun in https://github.com/django-cms/django-cms/pull/8478
• chore: Merge back release 5.1.0a1 by @fsbraun in https://github.com/django-cms/django-cms/pull/8481
• docs: Update screenshots for new UI design by @fsbraun in https://github.com/django-cms/django-cms/pull/8482
• chore: Squash early migrations by @fsbraun in https://github.com/django-cms/django-cms/pull/8484
• build(deps-dev): bump basic-ftp from 5.0.5 to 5.2.0 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8498
• docs: Remove reference to page_moved signal which is never called by @fsbraun in https://github.com/django-cms/django-cms/pull/8495
• build(deps): bump actions/stale from 10.1.1 to 10.2.0 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8494
• fix: Keep GET params when toggling structure mode (#8497) by @fsbraun in https://github.com/django-cms/django-cms/pull/8501
• build(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8504
• build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8505
• fix: slug and overwrite_url caching failed in read-only change_views by @fsbraun in https://github.com/django-cms/django-cms/pull/8507
• build(deps): bump minimatch by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8503
• build: bump minimum Django version to 4.2.26 (CVE-2025-64459) by @maycuatroi1 in https://github.com/django-cms/django-cms/pull/8502
• build(deps): bump django from 4.2.28 to 4.2.29 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8514
• build(deps-dev): bump svgo from 4.0.0 to 4.0.1 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8515
• build(deps): bump immutable by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8519
• fix: make django CMS logo on welcome page responsive to dark mode by @entuziaz in https://github.com/django-cms/django-cms/pull/8513
• docs: Add example for SEO using hreflang by @fsbraun in https://github.com/django-cms/django-cms/pull/8527
• fix: Chunk size was missing for plugin queryset.iterator() by @fsbraun in https://github.com/django-cms/django-cms/pull/8532
• build(deps-dev): bump flatted from 3.3.3 to 3.4.2 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8535
• fix: Proxy models of CMSPlugin were not downcasted correctly by @fsbraun in https://github.com/django-cms/django-cms/pull/8539
• fix: Multi-site permissions were incomplete for wizards and autocomplete by @EaEa0001 in https://github.com/django-cms/django-cms/pull/8537
• build(deps): bump requests from 2.32.5 to 2.33.0 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8545
• build(deps): bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8543
• fix: delete_orphaned_plugins could corrupt the plugin tree order by @entuziaz in https://github.com/django-cms/django-cms/pull/8528
• build(deps): bump black from 26.1.0 to 26.3.1 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8524
• build(deps): bump serialize-javascript and terser-webpack-plugin by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8552
• fix: Inline editing could circumvent permissions by @fsbraun in https://github.com/django-cms/django-cms/pull/8542
• build(deps): bump codecov/codecov-action from 5 to 6 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8554
• build(deps): bump pygments from 2.19.2 to 2.20.0 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8555
• fix: Updating plugins could lead to minified toolbar by @fsbraun in https://github.com/django-cms/django-cms/pull/8550
• feat: Provide UI for plugins acting as slots by @fsbraun in https://github.com/django-cms/django-cms/pull/8540
• build(deps): bump lodash-es from 4.17.23 to 4.18.1 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8560
• fix: Fallback languages rendered empty (when not redirecting) by @fsbraun in https://github.com/django-cms/django-cms/pull/8557
• build(deps): bump lodash from 4.17.23 to 4.18.1 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8561
• fix: DomDiff re-executed existing scripts or link tags by @fsbraun in https://github.com/django-cms/django-cms/pull/8523
• build(deps): bump django from 4.2.29 to 4.2.30 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8565
• build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8566
• fix: Text not fully centered in toobar buttons by @fsbraun in https://github.com/django-cms/django-cms/pull/8563
• build(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8571
• fix: Add page_title parameter to cms.api.create_page function by @PeterW-LWL in https://github.com/django-cms/django-cms/pull/8567
• fix: XSS vulnerability in validator error message by @fsbraun in https://github.com/django-cms/django-cms/pull/8576
• build(deps): bump actions/github-script from 8 to 9 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8577
• fix: Latent XSS vulnerability in the tooltip by @fsbraun in https://github.com/django-cms/django-cms/pull/8568
• build(deps): bump follow-redirects from 1.15.11 to 1.16.0 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8583
• fix: Deleting a non-local plugin did not refresh the screen by @fsbraun in https://github.com/django-cms/django-cms/pull/8582
• chore: Remove legacy select2 dependency by @fsbraun in https://github.com/django-cms/django-cms/pull/8573
• fix: Update Apphook Widget template for modern admin by @fsbraun in https://github.com/django-cms/django-cms/pull/8585
• fix: Remove optional dependency on deprecated djangocms-admin-style by @fsbraun in https://github.com/django-cms/django-cms/pull/8548
• fix: Outdated code in UserSelectAdminWidget by @fsbraun in https://github.com/django-cms/django-cms/pull/8575
• fix: FrontendEditableMixin failed to provide the obj to the Django permission backend by @fsbraun in https://github.com/django-cms/django-cms/pull/8584
• chore: Missing empty options in PageSmartLinkWidger by @fsbraun in https://github.com/django-cms/django-cms/pull/8589
• chore: Update release script by @fsbraun in https://github.com/django-cms/django-cms/pull/8593
• fix: Convert value to string in ApplicationConfigSelect. by @zbohm in https://github.com/django-cms/django-cms/pull/8594
• docs: Improved placeholder documentation by @fsbraun in https://github.com/django-cms/django-cms/pull/8596
• fix: Refactor content object caching in GrouperAdmin by @fsbraun in https://github.com/django-cms/django-cms/pull/8588
• fix: Migrations with a custom user model caused a Programming error by @fsbraun in https://github.com/django-cms/django-cms/pull/8606
• fix: deadlock could happen on moving large pagesubtrees by @fsbraun in https://github.com/django-cms/django-cms/pull/8529
• fix: Compatibility shim for Page.objects.order_by used non-existing fields by @fsbraun in https://github.com/django-cms/django-cms/pull/8597
• build(deps-dev): bump uuid from 13.0.0 to 14.0.0 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8613
• fix: Do not lock whole tree when editing a page by @fsbraun in https://github.com/django-cms/django-cms/pull/8612
• build(deps): bump postcss from 8.5.6 to 8.5.13 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8614
• docs: Improve installation guides by @fsbraun in https://github.com/django-cms/django-cms/pull/8517
• build(deps): bump ip-address from 10.1.0 to 10.2.0 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8618
• feat: Extend CMSApp class to provide root template for apphook by @fsbraun in https://github.com/django-cms/django-cms/pull/8619
• build(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8621
• build(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.4 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8623
• build(deps): bump urllib3 from 2.6.3 to 2.7.0 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8626
• fix: Compatibility with formtools 2.6+ caching by @fsbraun in https://github.com/django-cms/django-cms/pull/8629
• fix: Missing redirect_url in CMSNavigationNode.attr (#8625) by @fsbraun in https://github.com/django-cms/django-cms/pull/8627
• chore: Update JS dependencies by @fsbraun in https://github.com/django-cms/django-cms/pull/8620
• build(deps-dev): bump @tootallnate/once from 2.0.0 to 2.0.1 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8631
• build(deps): bump idna from 3.11 to 3.15 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8630
• build(deps): bump actions/stale from 10.2.0 to 10.3.0 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8633
• build(deps): bump tmp from 0.2.5 to 0.2.7 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8638
• fix: GrouperModelAdmin shadowed prepopulated_fields class attribute by @fsbraun in https://github.com/django-cms/django-cms/pull/8636
• fix: Single phased CMSAppExtension could extensions with contracts by @fsbraun in https://github.com/django-cms/django-cms/pull/8632
• chore: Add Django 6.1 to test matrix, remove Django 5.0, 5.1 by @fsbraun in https://github.com/django-cms/django-cms/pull/8635
• build(deps): bump starlette from 0.52.1 to 1.0.1 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8648
• test: placeholder source availability for CMS_PLACEHOLDER_CONFIG was not covered by tests by @fsbraun in https://github.com/django-cms/django-cms/pull/8653
• fix: Slugs of published pages could be changed by @fsbraun in https://github.com/django-cms/django-cms/pull/8640
• fix: Honour plugin-declared Vary headers in the page cache key by @fsbraun in https://github.com/django-cms/django-cms/pull/8646
• fix: Toolbar login followed an unverified redirect after authentication by @fsbraun in https://github.com/django-cms/django-cms/pull/8642
• fix: Enforce authorization on structure, move and clipboard endpoints by @fsbraun in https://github.com/django-cms/django-cms/pull/8644
• build(deps): bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8659
• fix: Copying from the clipboard into a different language sometimes failed by @fsbraun in https://github.com/django-cms/django-cms/pull/8664
• docs: First stab at a simplified tutorial by @fsbraun in https://github.com/django-cms/django-cms/pull/8641
• fix: Corrupted plugin positions are now automatically healed by @fsbraun in https://github.com/django-cms/django-cms/pull/8667
• fix: Minor fixes of long-standing bugs by @fsbraun in https://github.com/django-cms/django-cms/pull/8666
• fix: Some page permissions created invalid filter strings by @fsbraun in https://github.com/django-cms/django-cms/pull/8662
• feat: add configurable menu cache backend (fixes [#4440]) by @JaeHyuckSa in https://github.com/django-cms/django-cms/pull/8475
• feat: Simplify project creation with interactive djangocms command and options by @fsbraun in https://github.com/django-cms/django-cms/pull/8671
• feat: Propagate information why fields are readonly to user by @fsbraun in https://github.com/django-cms/django-cms/pull/8673
• fix: get_child_classes was always cached by @fsbraun in https://github.com/django-cms/django-cms/pull/8677
• feat: Accessibility update for wizards by @fsbraun in https://github.com/django-cms/django-cms/pull/8674
• build(deps-dev): bump @babel/core from 7.29.0 to 7.29.6 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8682
• docs: Improve explanation section by @fsbraun in https://github.com/django-cms/django-cms/pull/8637
• build(deps): bump starlette from 1.2.1 to 1.3.1 in /docs by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8681
• build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8688
• chore: Remove CMS_CONFIRM_VERSION4 setting for CMS 5.1 by @fsbraun in https://github.com/django-cms/django-cms/pull/8686
• feat: Allow wildcards (*, ?, []) for plugin restrictions, and "auto" child_classes detection by @fsbraun in https://github.com/django-cms/django-cms/pull/8675
• chore: Fix signatures for clarity by @fsbraun in https://github.com/django-cms/django-cms/pull/8683
• fix: Language selector triggered wrong toolbar by @fsbraun in https://github.com/django-cms/django-cms/pull/8687
• feat: Allow toolbar ajax items to return a data bridge structure by @fsbraun in https://github.com/django-cms/django-cms/pull/8694
• fix: cascade delete plugins of detached placeholders by @hey-granth in https://github.com/django-cms/django-cms/pull/8622
• fix: Missing authorization in render_object_structure disclosed non-PageContent placeholder structure by @fsbraun in https://github.com/django-cms/django-cms/pull/8692
• build(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in https://github.com/django-cms/django-cms/pull/8705
• chore: Update test and compatibility setup for django >= 5.2 by @fsbraun in https://github.com/django-cms/django-cms/pull/8708
• fix: Page title leaked unescaped into rendering error message, clipboard could be cleared by get request by @fsbraun in https://github.com/django-cms/django-cms/pull/8699
• fix: Subpage wizard failed by @fsbraun in https://github.com/django-cms/django-cms/pull/8698
• fix: get_preview_url failed on frontend-editable objects without language attribute by @fsbraun in https://github.com/django-cms/django-cms/pull/8691
• fix: Replace left-over inline JS/CSS that might be blocked by CSP by @fsbraun in https://github.com/django-cms/django-cms/pull/8690
• feat: Add extra key to get/set_page_url_cache by @jrief in https://github.com/django-cms/django-cms/pull/8696
• feat: Clearer page permissions admin by @fsbraun in https://github.com/django-cms/django-cms/pull/8672
• fix: Additional permissions in advance page change form were invisible by @fsbraun in https://github.com/django-cms/django-cms/pull/8685
• fix: Harden page duplication, group permissions and URL validator by @fsbraun in https://github.com/django-cms/django-cms/pull/8704
• fix: GrouperAdmin only showed current content versions by @fsbraun in https://github.com/django-cms/django-cms/pull/8700
• feat: json config for djangocms command by @fsbraun in https://github.com/django-cms/django-cms/pull/8717
• fix: check and delete-orphaned-plugins had an n+1 issue by @fsbraun in https://github.com/django-cms/django-cms/pull/8701
• fix: Page tree had a n+1 regression fetching urls by @fsbraun in https://github.com/django-cms/django-cms/pull/8716
• feat: Add allowed_slots property to plugins by @fsbraun in https://github.com/django-cms/django-cms/pull/8709
• feat: Support django 6.1+ breadcrumb styles by @fsbraun in https://github.com/django-cms/django-cms/pull/8689
• chore: Prepare release 5.1 by @fsbraun in https://github.com/django-cms/django-cms/pull/8719
• feat: Add list_editable support to GrouperAdmin by @fsbraun in https://github.com/django-cms/django-cms/pull/8722
• fix: Placeholder operation signals lacked plugin ordering context by @fsbraun in https://github.com/django-cms/django-cms/pull/8723

New Contributors

• @dnlzrgz made their first contribution in https://github.com/django-cms/django-cms/pull/8241
• @jmit-modern made their first contribution in https://github.com/django-cms/django-cms/pull/8249
• @mhsiddiqui made their first contribution in https://github.com/django-cms/django-cms/pull/8280
• @wesleyboar made their first contribution in https://github.com/django-cms/django-cms/pull/8257
• @florianschieder made their first contribution in https://github.com/django-cms/django-cms/pull/8301
• @fsbraun with @Copilot made their first contribution in https://github.com/django-cms/django-cms/pull/8312
• @vasekch made their first contribution in https://github.com/django-cms/django-cms/pull/7548
• @pietzschke made their first contribution in https://github.com/django-cms/django-cms/pull/8399
• @Vincent-Ngobeh made their first contribution in https://github.com/django-cms/django-cms/pull/8418
• @woolfie1101 made their first contribution in https://github.com/django-cms/django-cms/pull/8449
• @maycuatroi1 made their first contribution in https://github.com/django-cms/django-cms/pull/8502
• @entuziaz made their first contribution in https://github.com/django-cms/django-cms/pull/8513
• @EaEa0001 made their first contribution in https://github.com/django-cms/django-cms/pull/8537
• @zbohm made their first contribution in https://github.com/django-cms/django-cms/pull/8594
• @hey-granth made their first contribution in https://github.com/django-cms/django-cms/pull/8622

Full Changelog: https://github.com/django-cms/django-cms/compare/5.0.0...5.1.0