Changes
Features
- API field projection: Support
?fields=parameter on content GET endpoints for partial response (#640) - Wrangler config flexibility: Support
wrangler.jsoncandwrangler.jsonalongsidewrangler.toml - Stable block IDs: Assign stable
blockIdto block array items on save - Daily login stats: Track and display daily demo site logins on dashboard
- Smart cache invalidation: Scope collection-content-filtered cache invalidation to affected collection only
Fixes
- Auth: JWT Bearer middleware, HTMX redirect, secure logout cookie, session lifecycle
- RBAC: Dynamic role dropdown + API ACL enforcement for public role; consult RBAC dynamic grants alongside baseGrants
- RBAC: Default-allow legacy roles not registered in RBAC
- Sidebar: Hide Users/Plugins/Settings from viewer and non-admin roles
- Cache: Invalidate
api:namespace from admin-content create/edit - Publish button: Hide when versioning plugin is disabled
- CI: Dynamic E2E test selection, improved reliability
Installation
npm create sonicjs@latest my-appOr update existing project:
npm install @sonicjs-cms/core@3.0.0-beta.25