• The nb locale is now treated as a fallback for no on environments where no isn’t supported. (#18431)
• Element indexes now show “Paste” buttons alongside bulk element action buttons. (#18427)
• Boolean environment variables now universally support truthy/falsy values, including on/off and yes/no. (#18441)
• Impoved the performance of craft\helpers\Typecast. (#18426)
• Added App::normalizeBooleanValue().
• Added craft\events\ExecuteGqlQueryEvent::$cacheDuration. (#18442)
• Added craft\events\ExecuteGqlQueryEvent::$cacheTags. (#18442)
• Added craft\web\Request::getWantsImage().
• Added craft\web\Request::getWantsJson().
• Added craft\web\Request::wants().
• Fixed a bug where 404 responses could be set to an image based on the brokenImagePath config setting for Chrome. (#18438)
• Fixed a bug where some Matrix bulk action labels weren’t getting translated.
• Fixed a bug where global nav items weren’t showing an icon if the icon was set to 0.
• Fixed moderate-severity RCE vulnerabilities. (GHSA-4484-8v2f-5748, GHSA-qx2q-q59v-wf3j)
• Fixed a low-severity XSS vulnerability. (GHSA-3x4w-mxpf-fhqq)
• Fixed a low-severity path traversal vulnerability. (GHSA-472v-j2g4-g9h2)