Want interactive API documentation without hand-writing a schema? Orchard Core v4 is getting a new OpenApi module with Swagger, ReDoc, and Scalar built in.

Need sign-ins to survive a browser restart without relying on a user's Remember me checkbox? A new setting controls persistent authentication cookies site-wide.

And curious how the Visual Layout Editor has evolved since June? It now detects every editor shape correctly, even ones with multiple editors like the SEO Meta Part.

This week's changes come from Jasmin Savard, Georg von Kries, and Nick Jackson.

Want a more useful landing page when you open the admin area? The Admin Dashboard's default content just got a redesign, with new documentation on how to extend it yourself.

Need an audit trail of who changed which user, without leaking sensitive data into your database? Users Audit Trail now lets you control exactly what gets stored, redacted, or hashed per property.

And want privacy-friendly analytics and UTM tracking without a cookie banner? Lombiq Marketing, a new open-source module, adds cookie-free Pirsch analytics and a built-in URL shortener.

This week's changes come from Antoine Griffard and Sára El-Saig.

Need to filter the admin contents list by more than one content type at once? A small change now lets you pass multiple content type IDs or stereotypes in the same query.

Looking for documentation on YesSql, security, theming from an HTML template, the Media Picker, or shapes? Several new Key Topics pages cover exactly that.

Curious how Orchard Core scales across multiple backend nodes with failover? We walk through the upcoming tenant clustering feature.

And since this is our last This week in Orchard post before Orchard Harvest 2026, we cover the latest news about the now-online conference and the voting for the Jean-Thierry Kéchichian Community Award.

This week's changes come from Mike Alhayek, Antoine Griffard, Lazizbek Ergashev, and Sébastien Ros.

Worried about malicious file uploads reaching your media library? A new ClamAV integration by Mike Alhayek scans files before Orchard Core ever stores them.

Need a friendlier way to let users pick their time zone? A new ITimeZoneSelectListProvider interface makes that pluggable across the whole site.

And want to share a draft with a client without publishing it? A community module adds shareable, revocable draft links, demoed by Hisham Bin Ateya. We also point back to our latest Sponsorship Spotlight interview with him.

Want tighter control over your login screen's security policy? A new setting lets you turn the Remember Me option off site-wide, not just hide it.

Wondering how a team actually keeps its AI-assisted development consistent? New documentation and two updated agent skills cover exactly that.

And curious how you catch a performance regression before it reaches production, not after? Lombiq's new SQL query monitoring feature, built on the same open-source toolkit Lombiq uses on client projects, does precisely that.

This week's changes come from Mike Alhayek, plus agent skills work from Antoine Griffard and Sébastien Ros, and a new tool from Lombiq.

Ever wondered how much storage your content version history is quietly eating? A new background task now prunes old, superseded versions automatically.

Curious about a faster way to add and configure parts and fields in the content editor? New Add & Configure and Save & Configure buttons cut out the extra round-trip.

Did you catch that the new Orchard Core website is live, built on vanilla Orchard Core with double-A accessibility?

And curious how a few lines of config can swap out a custom login flow for Microsoft SSO?

This week we've got all four, courtesy of PUXVSE (their first contribution!), Mike Alhayek, and Nick Jackson.

Ever lost a minute scrolling past features you'll never toggle, just to find the one you need?

Wondered which shape template actually rendered a fragment on one of your pages?

Curious what the redesigned Orchard Harvest website will look like?

And ready to simplify your Orchard Core hosting?

This week we've got all four, courtesy of Mike Alhayek and Nick Jackson, plus a look at DotNest.

Read on for the details, or jump to the section that matters to you!

When you add a custom settings page, does it look like it belongs in the admin UI?

When you utilize workflow activities, does JavaScript syntax have to be the only option?

After checking out this week's Orchard news, both have better answers.

Thanks to Mike Alhayek, admin forms across settings and configuration pages now use the same ocat-* CSS class conventions, replacing legacy Bootstrap and Orchard-specific helpers. And all workflow tasks that previously only supported JavaScript now also support Liquid, with a new LiquidTask added to match ScriptTask.

Also this week: Nick Jackson's Orchard Core website redesign is open for community feedback, and GoRide joins the showcase of sites running on Orchard Core.

Read on for the details, or jump to the section that matters to you!

Does your admin UI tell you when an SSL certificate is about to expire?

Does your deployment pipeline carry Security settings between environments, or does someone have to reconfigure them by hand?

After this week's post, the answer to both is yes!

This issue covers: SSL Check (color-coded expiration warnings on the Tenants page), Security settings import/export via deployment plans, and notification alerts converted to dismissible toasts.

Plus an interview with Antoine Griffard, one of Orchard's longest-running contributors!

Discover the brand-new Vue 3-powered Media Library by Jasmin Savard with real-time updates, resumable uploads, and a sleek new UI.

Get inspired by a real-world case study of long-term Orchard Core maintenance for the City of Santa Monica.

And of course, we continue to show the new features of Orchard Core v3 targeted at developers, such as Sára El-Saig's contribution on using Jint's async scripting APIs to avoid a sync-over-async call that can cause a thread deadlock, so it's always preferable.

The other change by Mike Alhayek introduces support for cancellation tokens throughout the email and SMS sending infrastructure and improves code documentation by adding XML doc comments.