Engineering notes

Umbraco 17.4.0 exposed JSON Schema for data types and document types, which is what makes programmatic content writing verifiable. Around it: four Umbraco.AI add-ons in beta, uSync 17.3.0's version jump, and a preview-URL auth bypass.

SUGCON Europe filled London and SitecoreAI took the stage, but the month's operational content was written by individuals: the JSS 22.x migration path, App Studio extensions, and a second search model.

Three vulnerabilities patched in Umbraco 16.5.1 and 17.2.2 on 10 March. The rest of the month was mostly umbraco.com itself: Agent Skills, the Q1 product update, an AI community team.

From 1 June, Extended Support stops including security patches and production incident support. Content SDK 2.0 requires Next.js 16 and renames middleware.ts. And the manual for Sitecore's AI surface is being written by volunteers.

Umbraco shipped Umbraco.AI (open source, provider-agnostic) and Umbraco Compose (commercial SaaS) in the same month. What each one costs you, plus the 13 to 17 upgrade 403 and uSync 17.0.4.

Sixty Sitecore items cleared the February window and none came from sitecore.com. What SitecoreAI bundles, what it costs and how fast Pathways migrates all came from personal blogs — one author says outright he never ran the tool.

A thin month. Nine Umbraco items in thirty-one days, no vendor release and no advisory. What landed: uSync 17.0.2 fixing a v13 picker migration defect, the first hands-on Umbraco Compose writeup, and ISO 27001.

Thirteen items worth reading from January 2026 and not one from sitecore.com. Editing hosts in preview, Agentic Studio, custom fields via the Marketplace, and the only hard numbers of the month coming from a 10.4 stress test.