New features

• ISAICP-9368: Code of conduct
  • ISAICP-9444: "Code of Conduct" VS "Code of conduct"
  • ISAICP-9290: Form for accepting Code of Conduct of collections
  • ISAICP-9577: Limit access based on CoC acceptance
  • ISAICP-9294: Ask for new Code of Conduct acceptance when the text of the document changes
  • ISAICP-9291: Show a message on collection page and subpages when a member has to accept a Code of Conduct
  • ISAICP-9292: Limit access to content operations to users with up-to-date Code of Conduct acceptance
  • ISAICP-9293: Prevent members with outdated Code of Conduct acceptance to post or reply to comments
  • ISAICP-9441: [UI improvement] Hide CoC setting if it doesn't apply (open collections)
  • ISAICP-9540: Improve cache handling of CollectionCoCMessageBlock
  • ISAICP-9556: [Analysis] Investigate technical ways to achieve CoC access restrictions
  • ISAICP-9692: Update CoC EPIC
  • ISAICP-9599: Update EPIC-9368 CoC with latest develop
• ISAICP-9479: Finnish OSS catalogue

Improvements

• ISAICP-9667: Improve the view of the "Edit menu" button
• ISAICP-9652: Update the number of days on the email new users receive after registration.
• ISAICP-9651: Rename the "How-to videos" action button to "How-to Articles" on the Homepage
• ISAICP-9643: Create new category value for the Portal's contact form
• ISAICP-9610: Propose design possibilities for In the spotlight section
• ISAICP-9460: Create a rule for limitation of time when sharing content types
• ISAICP-9165: Replace the Twitter logo with the X logo on the Policy Hub and update text on the "Share" modal
• ISAICP-8407: Collections and solutions should show first in results?

Security

• ISAICP-9714: PEAR HTTP_Request2 vulnerable to Cross-site Scripting
• ISAICP-9706: Modules vulnerabilities
• ISAICP-9699: Fix SA-CONTRIB-2025-035
• ISAICP-9606: Make all current solutions moderated
• ISAICP-9587: Allow moderators to unpublish OSS solutions
• ISAICP-9515: Update description and logic for callback_hostname

Bug fixes

• ISAICP-9731: Solutions update date is wrongly updated in the deployment hook
• ISAICP-9719: Update test started failing
• ISAICP-9694: Skip re-indexing entities when parent entity is skipped
• ISAICP-9686: Proposed Collections or Solutions do not appear in dashboard for moderators
• ISAICP-9672: Undefined array key "name"
• ISAICP-9646: The button text is not visible after hover.
• ISAICP-9635: Regression of ISAICP-9488: URL alias not updating
• ISAICP-9611: SPARQL query failure
• ISAICP-9589: Wrong re-direct link of the "Switch to the latest Release" in a Solution
• ISAICP-9588: Missing attachment in contact forms
• ISAICP-9509: Wrong usage of views_autosubmit module
  • ISAICP-9627: Remove the "Search site wide" button when JS is disabled

Operations, testing, technical debt

• ISAICP-9720: Do not remove composer.lock during the build process.
• ISAICP-9623: Profiling of user deletion
• ISAICP-9622: Move OSS Catalogue tests in Behat clean
• ISAICP-9621: Unpin drupal/error_page
• ISAICP-9620: Unpin drupal/og
• ISAICP-9618: Unpin phpro/grumphp-shim
• ISAICP-9597: \Drupal calls should be avoided in classes, use dependency injection instead
• ISAICP-9476: Standardize detection of non-prod environments
• ISAICP-9466: Remove Topic terms from RDF Sync
• ISAICP-9434: Upgrade Slick Carousel to the latest version
• ISAICP-9358: Handle entities by ID on behat cleanup