Engineering notes

Four of the month's eleven Umbraco items are about MCP and AI. An agent built an element type from a single prompt, Umbraco Commerce got an MCP proof-of-concept, and the only post that said anything about who should be allowed to do that was a uSync patch note.

Sitecore 10.4.1 requires encrypted SQL for Identity Server and greets upgraders with a login failure. Plus the Marketplace SDK's first wall, Stream on XP, and a month of XM Cloud migration guides.

A moderate-severity Content Delivery API advisory patched in 13.9.3, 15.4.4 and 16.1.1; three uSync releases in nine days, all of it v13 upgrade debt; and Umbraco's roadmap post on MCP, Compose and search.

The month the community installed 10.4.1 and documented what broke: Identity Server's encrypted SQL requirement, Solr 9.8.1's max-fields limit, plus MCP Server 1.0.0, Stream REST APIs and the Content SDK beta.

Two moderate advisories, the last public patch for Umbraco 10, uSync moving development to v16, and Codegarden announcements that mostly land after the v17 LTS.

Sitecore 10.4.1 landed on 25 June 2025 with encrypted SQL connections, Solr 9.8.1, Identity Server on .NET 8 and a critical security fix. The community wrote it up. The same month, it wired AI agents into live instances.

Umbraco's 6 May advisory fixed a moderate user-enumeration issue in 10.x and 13.x, but the patch only exists on the latest minor. Plus ContentAudit, uSync 15.1.8 and the v16 release candidate.

Fourteen items and not one from Sitecore. Stream documented by decompiling a DLL, an MCP server built by one person, and what SUGCON 2025 left behind.