All pull requests

Pull requests

• [MCP] Limit the tools an OAuth token may call to its scopes

  Improvement
  #2225·fashxp opened Nov 12, 2026Member·

  ·
  1

• [Bug] Backport: Map malformed grid columns to 422 instead of a 500 TypeError

  #2217·wwidergoldpimcore opened Nov 10, 2026Contributor·

  ·
  1

• [Workflow] Name a failed action by its label in the submission error

  #2210·alexbaat opened Nov 9, 2026Contributor·

  ·
  1

  4

• [Task] Speak the Mercure 1.0 protocol

  #2209·dunglas opened Nov 9, 2026·

  ·
  1

  5

• [Bug] Run Mercure 1.x in compatibility mode

  Bug
  #2207·dunglas opened Nov 9, 2026·

  ·

  · 2026.3.6
  4

  

• Mask password field values in the data object API

  Bug
  #2200·robertSt7 opened Nov 6, 2026Contributor·

  ·

  · 2026.3.6
  17

  

• Require permissions for the object brick endpoints

  Bug
  #2199·robertSt7 opened Nov 6, 2026Contributor·

  ·

  · 2026.3.6
  5

  

• [Bug] Store a per-user welcome screen path (backend for the Show welcome screen option)

  #2196·sholzer opened Nov 6, 2026Contributor·

  ·
  1

• [security] GHSA-r8v3-9phw-8m68: gate Studio Site update/delete on sites permission

  ai-generatedSecurity
  #2194·pimcore-deployments opened Nov 6, 2026Contributor·

  ·

  · 2026.3.6
  1

• [User management] Add the invitation mail

  #2184·dpfahlbusch opened Nov 3, 2026·

  ·
  1

  8

  

• [Improvement] Restore recycle bin elements with a missing parent into /__restored

  #2168·sholzer opened Oct 29, 2026Contributor·

  ·

  · 2026.4.0
  1

  14

• Enforce privilege guards on permission, role and login-token updates

  ai-generatedSecurity
  #2157·pimcore-deployments opened Oct 27, 2026Contributor·

  ·

  · 2026.4.0
  21

  

• [Improvement]: [Seo] Allow redirect targets to be data objects or assets

  #2155·dolmit-tanel-paaro opened Oct 26, 2026·

  ·
  1

  6

  

• [Grid] Add an empty / not empty operator to column filters

  New FeaturePimcore:ToDo
  #2147·robertSt7 opened Oct 22, 2026Contributor·

  ·

  · 2026.4.0
  9

  

• [Feature] Endpoint to start a search index synchronization job

  Pimcore:BacklogPimcore:ToDo
  #2139·robertSt7 opened Oct 21, 2026Contributor·

  ·

  · 2026.4.0
  4

  

• Enforce two-factor authentication on the Studio API firewall

  ai-generatedSecurity
  #2094·pimcore-deployments opened Oct 12, 2026Contributor·

  ·

  · 2026.3.6
  8

  

• 🔄 synced file(s) with pimcore/workflows-collection-public

  #2060·pimcore-deployments opened Sep 30, 2026Contributor·

  ·
  2

• Feature/element selector context 431

  #2024·SimonCremer opened Sep 3, 2026·

  ·

  · 2026.4.0
  1

  5

• [BUG] Grid export: allow specifying the download file name

  #2023·Jonathon-Meney-Torq opened Sep 1, 2026Contributor·

  ·

  · 2026.3.6
  8

• Require parentDocumentId for renderlet render endpoint

  BC-BREAKBug
  #1999·robertSt7 opened Aug 18, 2026Contributor·4 tasks done·

  ·

  · 2026.4.0
  3

  

• Make draft element resolution pluggable

  #1991·markus-moser opened Aug 12, 2026Contributor·

  ·
  1

• Test

  #1902·nebojsailicdev opened Jun 16, 2026·

  ·
  2

• [WIP] - summary of custom dashborad changes

  #1891·xIrusux opened Jun 11, 2026Contributor·

  ·
  2