This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@emdash-cms/admin@0.36.0

Minor Changes

• #2582 8d8d3de Thanks @khoinguyenpham04! - Adds numbered page navigation and page-size controls to the local Media Library. Media list requests can opt into numbered pages with page and receive an exact totalCount; cursor pagination remains the default.

  MediaLibrary accepts controlled numbered pagination through pagination. Existing hasMore and onLoadMore props remain supported when pagination is omitted.

• #2622 089d747 Thanks @khoinguyenpham04! - Adds Lua and Zig to code block language selectors in the admin and inline visual editors. Lua code is syntax highlighted, while Zig uses the existing plain-text fallback.

• #2624 436f63d Thanks @khoinguyenpham04! - Adds focal points for local images so cover-cropped thumbnails, galleries, and image components keep the selected subject visible.

• #2586 815553c Thanks @khoinguyenpham04! - Adds flat-folder organization to the local Media Library. Editors can create, rename, and delete folders. Authors can organize their own local media, and editors can organize any local media, through Media Details or by dragging a media card or row onto a visible folder.

  Uploads continue to enter the Main library. Deleting a folder returns its media to the Main library without deleting files or changing their URLs.

• #2538 9c52b39 Thanks @khoinguyenpham04! - Adds a media usage tracking setting. Tracking is enabled during initial setup. Existing sites enable it from Settings, keep the page open while EmDash scans existing content, and can return later to continue from saved progress.

• #2470 f527127 Thanks @khoinguyenpham04! - Adds a coverage-aware Used in section to local media details.

• #2647 e3ad082 Thanks @ascorbic! - Adds signed-label policy and listing-status support to the plugin registry client. Registry requests use the aggregator's required listing policy with an optional accepted-labeler declaration, and withdrawn releases are excluded from install and update results.

  The EmDash admin waits for a fresh listing-policy response before rendering registry metadata, uses the approved author name or publisher DID instead of a mutable handle, and does not request media for an unapproved release. Install, update, and media-proxy checks enforce listing withdrawal independently from the existing plugin-code and capability checks.

  Registry artifact downloads and proxied media connect only to the public IP addresses validated for each URL, preventing DNS changes between validation and connection from reaching private services.

Patch Changes

• #2590 724241f Thanks @khoinguyenpham04! - Adds a resizable settings panel to the desktop content editor, including keyboard controls and bounded widths.

• #2468 72664ad Thanks @khoinguyenpham04! - Fixes vertical alignment of editor sidebar drag handles with standard and collapsible section headings.

• #2683 3e90689 Thanks @hossein-webdev! - Fixes AVIF images being rejected with "File type not allowed" on upload. image/avif is back in the default media allowlist alongside PNG, JPEG, GIF, and WebP, so editors can upload .avif files again from the media library and from image fields that use the default allowlist.

  The admin file picker now offers .avif files and renders their thumbnails, the built-in "Images" preset in a field's allowed-types editor includes AVIF, and .avif works as extension shorthand in a field's allowedMimeTypes.

  SVG stays excluded from the default allowlist.

• #2606 22c4422 Thanks @khoinguyenpham04! - Fixes code blocks in the admin and inline visual editors with syntax highlighting for supported languages and readable, borderless styling in light and dark appearances.

• #2610 2ffda17 Thanks @MatsudaTsunenori! - Completes the Japanese admin translation so Japanese-speaking users see localized text for every catalog message.

• #2686 42fa5d8 Thanks @MatsudaTsunenori! - Fixes translated admin guidance and WordPress import summaries so links, emphasized text, dynamic values, and plural counts can follow each locale's word order. Clarifies the content type empty-state action.

• #2754 70c487c Thanks @khoinguyenpham04! - Updates the content editor's byline controls with a focused search-and-create flow, clear automatic owner credits, accessible ordering and roles, and actions that distinguish post credits from reusable byline profiles.

• #2490 2b54096 Thanks @khoinguyenpham04! - Fixes image action controls intermittently failing to appear when selecting an image in the editor.

• #2632 76dd3eb Thanks @khoinguyenpham04! - Fixes implicit English locale guidance in the content editor by replacing the persistent warning with compact, accessible help.

• #2599 b383a67 Thanks @khoinguyenpham04! - Fixes code blocks in the admin and inline visual editors so Tab and Shift+Tab indent and outdent code instead of moving focus.

• #2687 05b0a8b Thanks @MatsudaTsunenori! - Fixes newly created taxonomies not appearing in the admin sidebar until the page is reloaded.

• #2548 1f2678b Thanks @ahliweb! - Completes the Indonesian admin translations, covering the image gallery block, plugin MCP tool settings, byline filters, content locale settings, and scheduled publishing warnings.

• #2590 724241f Thanks @khoinguyenpham04! - Updates the content editor's Move to Trash section to match the other settings surfaces and use a softer destructive button treatment.

• #2603 f5e18d8 Thanks @khoinguyenpham04! - Adds one-click copy actions to code-block controls in the admin and inline visual editors, and polishes the layout so controls stay usable on narrow screens and in right-to-left locales.

• #2561 f9a488a Thanks @khoinguyenpham04! - Refines admin table toolbars with consistent compact search and filters, including a calendar-based date range picker for content lists.

• #2629 52f7c91 Thanks @emdashbot! - Fixes the Section editor so plugin-provided Portable Text blocks appear in the slash menu alongside core blocks, matching the content and widget editors.

• #2676 7571581 Thanks @MatsudaTsunenori! - Fixes the vertical alignment of the Required and Translatable switches in the byline field editor when helper text appears below Translatable.

• #2468 72664ad Thanks @khoinguyenpham04! - Fixes the meta description field shifting after the first character is entered.

• #2463 f613a14 Thanks @helio-cf! - Fixes media previews for streaming providers such as Cloudflare Stream. Video from these providers now shows its poster thumbnail in the media library grid and list, plays in the detail panel instead of stalling at 0:00, and reports the file size the provider supplies. Also exports Media from emdash/ui, so frontends can render provider-backed video and audio that Image cannot.

• #2628 1c6b893 Thanks @scottbuscemi! - Fixes line breaks entered in table cells disappearing from saved content.

• Updated dependencies [6178888, e3ad082]:

  • @emdash-cms/registry-lexicons@0.4.0
  • @emdash-cms/registry-client@0.4.0
  • @emdash-cms/blocks@0.36.0

@emdash-cms/cloudflare@0.36.0

Minor Changes

• #2538 9c52b39 Thanks @khoinguyenpham04! - Removes scheduled media usage recovery. Media usage tracking now advances only while an administrator keeps its settings page visible. This breaks Cloudflare deployments that configure mediaUsageCron and Node.js integrations that provide a custom CronScheduler.

  What should I do?

  On Cloudflare, remove the dedicated media usage Cron Trigger and the mediaUsageCron option. Keep the general Cron Trigger unchanged; no replacement trigger is required.

  If you provide a custom Node.js scheduler, remove setMediaUsageMaintenance(). A custom CronScheduler now implements only start(), stop(), reschedule(), and setSystemCleanup().

  Keep Settings → Media usage tracking open until it shows Ready. If the page closes, return to continue from saved progress.

Patch Changes

• #2463 f613a14 Thanks @helio-cf! - Fixes media previews for streaming providers such as Cloudflare Stream. Video from these providers now shows its poster thumbnail in the media library grid and list, plays in the detail panel instead of stalling at 0:00, and reports the file size the provider supplies. Also exports Media from emdash/ui, so frontends can render provider-backed video and audio that Image cannot.

• Updated dependencies [3e90689, 22c4422, 8d8d3de, 089d747, b383a67, f6da16b, 9c52b39, 0f225eb, 2fde0f9, 37c5010, a1ddcfb, b4c73ac, 436f63d, 815553c, 9c52b39, f527127, f00174b, f5e18d8, 9c52b39, 628630a, e3ad082, abd1042, f00174b, f613a14]:

  • emdash@0.36.0

emdash@0.36.0

Minor Changes

• #2582 8d8d3de Thanks @khoinguyenpham04! - Adds numbered page navigation and page-size controls to the local Media Library. Media list requests can opt into numbered pages with page and receive an exact totalCount; cursor pagination remains the default.

  MediaLibrary accepts controlled numbered pagination through pagination. Existing hasMore and onLoadMore props remain supported when pagination is omitted.

• #2622 089d747 Thanks @khoinguyenpham04! - Adds Lua and Zig to code block language selectors in the admin and inline visual editors. Lua code is syntax highlighted, while Zig uses the existing plain-text fallback.

• #2584 a1ddcfb Thanks @khoinguyenpham04! - Adds flat media folders to the emdash REST and typed client APIs. Existing media remains in the
  Main library after upgrade, so sites do not need to migrate media assignments.

  • Includes database migration 072_media_folders.

  Use GET or POST /_emdash/api/media/folders to list or create folders, and PUT or
  DELETE /_emdash/api/media/folders/:id to rename or delete them. Folder reads require
  media:read; folder writes require media:edit_any. Typed clients expose the corresponding
  mediaFolderList, mediaFolderCreate, mediaFolderUpdate, and mediaFolderDelete methods.

  Media list requests can filter by a folder ID or use folderId=unfiled for the Main library.
  Media updates and mediaSetFolder accept a folder ID, null, or unfiled. Authors can assign
  their own media, while editors can assign any media.

  Deleting a folder returns its media to the Main library without changing media IDs, storage keys,
  URLs, or usage records.

• #2480 b4c73ac Thanks @DavidPivert! - LiveSearch now scopes its results to the locale of the page it is used on.

  Behaviour change. The component reads Astro.currentLocale and forwards it as the locale query parameter to /_emdash/api/search and /_emdash/api/search/suggest, which both already filtered on it. Until now the component never sent one, so a translated site got every entry back once per language — a French visitor searching from a French page saw each result twice, the second one opening its English page. Sites with i18n configured that relied on searching across every locale will see fewer results than before.

  Two ways to opt out: pass an explicit locale to search a different one, or locale={null} to search across every locale, which is the previous behaviour.

  <!-- results in the page's own locale (new default) -->
  <LiveSearch collections={["posts", "pages"]} />
  
  <!-- every locale, as before -->
  <LiveSearch collections={["posts", "pages"]} locale={null} />

  Sites without Astro's i18n configured are unaffected: Astro.currentLocale is undefined there, so no locale parameter is sent and the search still spans everything.

• #2624 436f63d Thanks @khoinguyenpham04! - Adds focal points for local images so cover-cropped thumbnails, galleries, and image components keep the selected subject visible.

• #2586 815553c Thanks @khoinguyenpham04! - Adds flat-folder organization to the local Media Library. Editors can create, rename, and delete folders. Authors can organize their own local media, and editors can organize any local media, through Media Details or by dragging a media card or row onto a visible folder.

  Uploads continue to enter the Main library. Deleting a folder returns its media to the Main library without deleting files or changing their URLs.

• #2538 9c52b39 Thanks @khoinguyenpham04! - Adds a media usage tracking setting. Tracking is enabled during initial setup. Existing sites enable it from Settings, keep the page open while EmDash scans existing content, and can return later to continue from saved progress.

• #2106 f00174b Thanks @gruntlord5! - Updates sqlite() and the EmDash CLI to use Node.js's built-in SQLite driver. Node.js deployments can install and run EmDash without compiling or downloading the better-sqlite3 native add-on. Existing SQLite database files and sqlite({ url }) configuration continue to work.

  This release requires Node.js 22.16 or later. Check the installed version with node --version and upgrade Node.js before updating EmDash if it reports an earlier release.

  Node.js 22 prints its standard ExperimentalWarning: SQLite is an experimental feature message when the SQLite adapter loads. Node.js 24 does not print this warning.

  If better-sqlite3 is listed in the site's package.json only for EmDash, remove that dependency after updating.

• #2538 9c52b39 Thanks @khoinguyenpham04! - Removes scheduled media usage recovery. Media usage tracking now advances only while an administrator keeps its settings page visible. This breaks Cloudflare deployments that configure mediaUsageCron and Node.js integrations that provide a custom CronScheduler.

  What should I do?

  On Cloudflare, remove the dedicated media usage Cron Trigger and the mediaUsageCron option. Keep the general Cron Trigger unchanged; no replacement trigger is required.

  If you provide a custom Node.js scheduler, remove setMediaUsageMaintenance(). A custom CronScheduler now implements only start(), stop(), reschedule(), and setSystemCleanup().

  Keep Settings → Media usage tracking open until it shows Ready. If the page closes, return to continue from saved progress.

• #2647 e3ad082 Thanks @ascorbic! - Adds signed-label policy and listing-status support to the plugin registry client. Registry requests use the aggregator's required listing policy with an optional accepted-labeler declaration, and withdrawn releases are excluded from install and update results.

  The EmDash admin waits for a fresh listing-policy response before rendering registry metadata, uses the approved author name or publisher DID instead of a mutable handle, and does not request media for an unapproved release. Install, update, and media-proxy checks enforce listing withdrawal independently from the existing plugin-code and capability checks.

  Registry artifact downloads and proxied media connect only to the public IP addresses validated for each URL, preventing DNS changes between validation and connection from reaching private services.

Patch Changes

• #2683 3e90689 Thanks @hossein-webdev! - Fixes AVIF images being rejected with "File type not allowed" on upload. image/avif is back in the default media allowlist alongside PNG, JPEG, GIF, and WebP, so editors can upload .avif files again from the media library and from image fields that use the default allowlist.

  The admin file picker now offers .avif files and renders their thumbnails, the built-in "Images" preset in a field's allowed-types editor includes AVIF, and .avif works as extension shorthand in a field's allowedMimeTypes.

  SVG stays excluded from the default allowlist.

• #2606 22c4422 Thanks @khoinguyenpham04! - Fixes code blocks in the admin and inline visual editors with syntax highlighting for supported languages and readable, borderless styling in light and dark appearances.

• #2599 b383a67 Thanks @khoinguyenpham04! - Fixes code blocks in the admin and inline visual editors so Tab and Shift+Tab indent and outdent code instead of moving focus.

• #2445 f6da16b Thanks @khoinguyenpham04! - Adds a one-time, administrator-controlled process for enabling automatic media usage indexing in production.

• #2538 9c52b39 Thanks @khoinguyenpham04! - Speeds up the initial scan when administrators turn on media usage tracking on Cloudflare Workers and Node.js.

• #2598 0f225eb Thanks @Glacier-Luo! - Fixes session-authenticated CMS comment submissions so they retain the user identity and honor automatic approval settings.

• #2600 2fde0f9 Thanks @khoinguyenpham04! - Fixes the Playground welcome dialog reappearing after it has been dismissed and the page is reloaded or Edit mode is toggled.

• #2556 37c5010 Thanks @cherenkov! - Fixes emdash content create and content update failing with "Cannot construct a Request with a Request object that has already been used" when the stored access token has expired. Requests carrying a body are now retried correctly after the token is refreshed.

• #2470 f527127 Thanks @khoinguyenpham04! - Adds a coverage-aware Used in section to local media details.

• #2603 f5e18d8 Thanks @khoinguyenpham04! - Adds one-click copy actions to code-block controls in the admin and inline visual editors, and polishes the layout so controls stay usable on narrow screens and in right-to-left locales.

• #2612 628630a Thanks @danielmlr! - Fixes SQLite and D1 sites where an interrupted upgrade left the byline credits table staged as _emdash_content_bylines_new, so pages, feeds and the admin reported no entries although the content was intact. The next migration run restores the table and the stored credits.

• #2472 abd1042 Thanks @khoinguyenpham04! - Fixes seeded media references using a different ID from their media-library item and prepares Used in data for newly seeded development sites.

• #2106 f00174b Thanks @gruntlord5! - Fixes boolean query parameters on SQLite, including boolean equality filters in the plugin storage API.

• #2463 f613a14 Thanks @helio-cf! - Fixes media previews for streaming providers such as Cloudflare Stream. Video from these providers now shows its poster thumbnail in the media library grid and list, plays in the detail panel instead of stalling at 0:00, and reports the file size the provider supplies. Also exports Media from emdash/ui, so frontends can render provider-backed video and audio that Image cannot.

• Updated dependencies [724241f, 72664ad, 3e90689, 22c4422, 2ffda17, 42fa5d8, 8d8d3de, 70c487c, 2b54096, 76dd3eb, 089d747, b383a67, 05b0a8b, 1f2678b, 724241f, 436f63d, 815553c, 9c52b39, f527127, f5e18d8, f9a488a, e3ad082, 52f7c91, 7571581, 72664ad, f613a14, 1c6b893]:

  • @emdash-cms/admin@0.36.0
  • @emdash-cms/registry-client@0.4.0
  • @emdash-cms/auth@0.36.0
  • @emdash-cms/gutenberg-to-portable-text@0.36.0

@emdash-cms/registry-client@0.4.0

Minor Changes

• #2647 e3ad082 Thanks @ascorbic! - Adds signed-label policy and listing-status support to the plugin registry client. Registry requests use the aggregator's required listing policy with an optional accepted-labeler declaration, and withdrawn releases are excluded from install and update results.

  The EmDash admin waits for a fresh listing-policy response before rendering registry metadata, uses the approved author name or publisher DID instead of a mutable handle, and does not request media for an unapproved release. Install, update, and media-proxy checks enforce listing withdrawal independently from the existing plugin-code and capability checks.

  Registry artifact downloads and proxied media connect only to the public IP addresses validated for each URL, preventing DNS changes between validation and connection from reaching private services.

Patch Changes

• Updated dependencies [6178888]:
  • @emdash-cms/registry-moderation@0.1.0
  • @emdash-cms/registry-lexicons@0.4.0

@emdash-cms/registry-lexicons@0.4.0

Minor Changes

• #2644 6178888 Thanks @ascorbic! - Adds shared, CID-bound plugin-listing moderation contracts for reducing signed AT Protocol labels and deciding which package-profile and release revisions are eligible for display.

  The registry Lexicons add experimental public assessment and policy queries. The contracts cover publisher-controlled listing metadata and displayed media; they do not assess plugin code.

@emdash-cms/registry-moderation@0.1.0

Minor Changes

• #2644 6178888 Thanks @ascorbic! - Adds shared, CID-bound plugin-listing moderation contracts for reducing signed AT Protocol labels and deciding which package-profile and release revisions are eligible for display.

  The registry Lexicons add experimental public assessment and policy queries. The contracts cover publisher-controlled listing metadata and displayed media; they do not assess plugin code.

@emdash-cms/auth-atproto@0.2.36

Patch Changes

• Updated dependencies []:
  • @emdash-cms/auth@0.36.0

@emdash-cms/plugin-cli@0.8.2

Patch Changes

• Updated dependencies [6178888, e3ad082]:
  • @emdash-cms/registry-lexicons@0.4.0
  • @emdash-cms/registry-client@0.4.0

@emdash-cms/plugin-embeds@0.1.44

Patch Changes

• Updated dependencies []:
  • @emdash-cms/blocks@0.36.0

@emdash-cms/registry-verification@0.1.1

Patch Changes

• Updated dependencies [6178888]:
  • @emdash-cms/registry-lexicons@0.4.0

@emdash-cms/sandbox-workerd@0.5.2

Patch Changes

• Updated dependencies [3e90689, 22c4422, 8d8d3de, 089d747, b383a67, f6da16b, 9c52b39, 0f225eb, 2fde0f9, 37c5010, a1ddcfb, b4c73ac, 436f63d, 815553c, 9c52b39, f527127, f00174b, f5e18d8, 9c52b39, 628630a, e3ad082, abd1042, f00174b, f613a14]:
  • emdash@0.36.0

@emdash-cms/auth@0.36.0

@emdash-cms/blocks@0.36.0

create-emdash@0.36.0

@emdash-cms/gutenberg-to-portable-text@0.36.0

@emdash-cms/x402@0.36.0

@emdash-cms/labeler@0.0.1

Patch Changes

• Updated dependencies [6178888]:
  • @emdash-cms/registry-moderation@0.1.0
  • @emdash-cms/registry-lexicons@0.4.0
  • @emdash-cms/registry-verification@0.1.1

@emdash-cms/fixture-perf-site@0.0.39

Patch Changes

• Updated dependencies [3e90689, 22c4422, 8d8d3de, 089d747, b383a67, f6da16b, 9c52b39, 0f225eb, 2fde0f9, 37c5010, a1ddcfb, b4c73ac, 436f63d, 815553c, 9c52b39, f527127, f00174b, f5e18d8, 9c52b39, 628630a, e3ad082, abd1042, f00174b, f613a14]:
  • emdash@0.36.0
  • @emdash-cms/cloudflare@0.36.0

@emdash-cms/perf-demo-site@0.0.39

Patch Changes

• Updated dependencies [3e90689, 22c4422, 8d8d3de, 089d747, b383a67, f6da16b, 9c52b39, 0f225eb, 2fde0f9, 37c5010, a1ddcfb, b4c73ac, 436f63d, 815553c, 9c52b39, f527127, f00174b, f5e18d8, 9c52b39, 628630a, e3ad082, abd1042, f00174b, f613a14]:
  • emdash@0.36.0
  • @emdash-cms/cloudflare@0.36.0
  • @emdash-cms/plugin-cli@0.8.2
  • @emdash-cms/plugin-webhook-notifier@0.2.0

@emdash-cms/cache-demo-site@0.0.39

Patch Changes

• Updated dependencies [3e90689, 22c4422, 8d8d3de, 089d747, b383a67, f6da16b, 9c52b39, 0f225eb, 2fde0f9, 37c5010, a1ddcfb, b4c73ac, 436f63d, 815553c, 9c52b39, f527127, f00174b, f5e18d8, 9c52b39, 628630a, e3ad082, abd1042, f00174b, f613a14]:
  • emdash@0.36.0
  • @emdash-cms/cloudflare@0.36.0
  • @emdash-cms/plugin-cli@0.8.2
  • @emdash-cms/plugin-webhook-notifier@0.2.0

@emdash-cms/do-demo-site@0.0.39

Patch Changes

• Updated dependencies [3e90689, 22c4422, 8d8d3de, 089d747, b383a67, f6da16b, 9c52b39, 0f225eb, 2fde0f9, 37c5010, a1ddcfb, b4c73ac, 436f63d, 815553c, 9c52b39, f527127, f00174b, f5e18d8, 9c52b39, 628630a, e3ad082, abd1042, f00174b, f613a14]:
  • emdash@0.36.0
  • @emdash-cms/cloudflare@0.36.0
  • @emdash-cms/plugin-cli@0.8.2
  • @emdash-cms/plugin-webhook-notifier@0.2.0

@emdash-cms/do-solo-demo-site@0.0.39

Patch Changes

• Updated dependencies [3e90689, 22c4422, 8d8d3de, 089d747, b383a67, f6da16b, 9c52b39, 0f225eb, 2fde0f9, 37c5010, a1ddcfb, b4c73ac, 436f63d, 815553c, 9c52b39, f527127, f00174b, f5e18d8, 9c52b39, 628630a, e3ad082, abd1042, f00174b, f613a14]:
  • emdash@0.36.0
  • @emdash-cms/cloudflare@0.36.0
  • @emdash-cms/plugin-cli@0.8.2
  • @emdash-cms/plugin-webhook-notifier@0.2.0