Skip to content

chore(deps-nuget): Bump Umbraco.Cms from 17.6.2 to 18.1.1 - #528

Closed
dependabot[bot] wants to merge 1 commit into
contribfrom
dependabot/nuget/Umbraco.Cms-18.1.1
Closed

dependabot[bot] wants to merge 1 commit into
contribfrom
dependabot/nuget/Umbraco.Cms-18.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor

Updated Umbraco.Cms from 17.6.2 to 18.1.1.

Release notes

Sourced from Umbraco.Cms's releases.

18.1.1

What's Changed

🔒 Security

  • Resolved incorrect authorization lets Content-only backoffice users modify Templates, enabling remote code execution from GHSA-f7m5-5x7g-2p52
  • Resolved insufficient authorization on Management API search endpoints from GHSA-w5q3-9wf8-43gg

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.1.0-rc...release-18.1.1

18.1.0

What's Changed Since 18.1.0-rc2

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.1.0-rc2...release-18.1.0

What's Changed Since 18.1.0-rc

📦 Dependencies

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.1.0-rc...release-18.1.0-rc2

What's Changed Since the Previous Version (18.0.2)

📦 Dependencies

🚀 New Features

🚤 Performance

18.1.0-rc2

What's Changed Since 18.1.0-rc

📦 Dependencies

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.1.0-rc...release-18.1.0-rc2

What's Changed Since the Previous Version (18.0.2)

📦 Dependencies

🚀 New Features

🚤 Performance

18.1.0-rc

What's Changed

📦 Dependencies

🚀 New Features

🚤 Performance

🌈 Accessibility Improvements

18.0.2

What's Changed

🔒 Security

  • Addressed vulnerability relating to expansion of property values relating to protected, picked content described in GHSA-wr57-hqmp-fgvh

Full Changelog: umbraco/Umbraco-CMS@release-18.0.1...release-18.0.2

18.0.1

What's Changed

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0...release-18.0.1

18.0.0

What's Changed Since The Last Release Candidate (18.0.0-rc3)

📦 Dependencies

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc3...release-18.0.0

What's Changed For 18.0

See the prior release notes for each pre-release version:

Release overview: https://releases.umbraco.com/release/umbraco/Umbraco-CMS/18.0.0
Full Changelog: umbraco/Umbraco-CMS@release-17.5.0...release-18.0.0

18.0.0-rc3

What's Changed Since 18.0.0-rc2

🎨 Design

🐛 Bug Fixes

🧪 Testing

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc2...release-18.0.0-rc3

What's Changed Since 18.0.0-rc1

📦 Dependencies

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc1...release-18.0.0-rc2

18.0.0-rc2

What's Changed since 18.0.0-rc1

📦 Dependencies

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-rc1...release-18.0.0-rc2

18.0.0-rc1

What's Changed since 18.0.0-beta2

🙌 Notable Changes

🚀 New Features

🏠 Internal

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-beta2...release-18.0.0-rc1

18.0.0-beta2

What's Changed Since 18.0.0-beta1

🐛 Bug Fixes

Backoffice: Preserve prerelease tag when hoisting peer dependencies by @​iOvergaard in umbraco/Umbraco-CMS#22841
SignalR: Mark ServerEventSender as a distributed cache notification handler by @​ronaldbarendse in umbraco/Umbraco-CMS#22818

Full Changelog: umbraco/Umbraco-CMS@release-18.0.0-beta1...release-18.0.0-beta2

What's Changed in Umbraco 18

🙌 Notable Changes - Testing encouraged and appreciated!

💥 Breaking Changes

18.0.0-beta1

What's Changed

🙌 Notable Changes - Testing encouraged and appreciated!

💥 Breaking Changes

🏠 Internal

Commits viewable in compare view.

@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Aug 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/Umbraco.Cms-18.1.1 branch from 9a6bf22 to 2096c1c Compare August 27, 2026 15:43
---
updated-dependencies:
- dependency-name: Umbraco.Cms
  dependency-version: 18.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-nuget): Bump Umbraco.Cms from 17.2.2 to 18.1.1 chore(deps-nuget): Bump Umbraco.Cms from 17.6.2 to 18.1.1 Aug 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/Umbraco.Cms-18.1.1 branch from 2096c1c to 7524faf Compare August 27, 2026 17:27
@dependabot @github

dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor Author

Looks like Umbraco.Cms is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 27, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/Umbraco.Cms-18.1.1 branch August 27, 2026 18:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants