Want to override a theme's Liquid templates without creating a new theme or restarting your app? Theme Customization, now continuing as Assisted Templates, clones them into the Templates store right from the admin UI.

Tired of hunting for the permissions page after creating a role? The new Save & Configure button takes you straight there.

And has a workflow ever silently done nothing because it had no startup task? Orchard Core now marks the first event as the startup task, and warns you if a workflow doesn't have one.

We also share how we repositioned Lombiq.com for the people who decide on critical platform projects.

This week's changes come from Rajeev Kumar and Sotiris Roussos.

Want to give support staff a way to see role definitions without letting them change anything? A new View Roles permission does exactly that.

Need to cap how long, or short, a text field's content can be? Text Field settings now support Minimum and Maximum length validation.

Building AI features outside of Orchard Core? CrestApps.Core brings the same AI Suite services to any ASP.NET Core project.

And signing into DotNest just got easier, with social sign-in via Microsoft, Google, GitHub, or Facebook.

This week's changes come from Matt Varblow, Antoine Griffard, and Mike Alhayek.

Unlock Agent-to-Agent Communication in Orchard Core today! This time, Mike Alhayek shows the A2A modules, which bring the Agent-to-Agent protocol to Orchard Core, enabling tenants to connect to remote agents or expose local agent profiles to other clients.

Thanks to Georg von Kries, the admin UI just got a usability boost with alphabetical role sorting, making user management-related operations cleaner and faster.

Mike Alhayek added new events to the IDocumentIndexHandler needed to allow other projects to implement more complex synchronization, such as when an index is updated or when another data source is updated. It means these events help keep external systems in sync with changes to the document index.

And the community is buzzing too! Nick Jackson has kicked off an important discussion: Who should the new OrchardCore.net website speak to? Head over to GitHub, read the proposal, and make your voice heard. This is your chance to shape the future of the Orchard Core website.

We have the venue for the Orchard Harvest conference! Our topics for this week are simplifying security headers settings using tabs and a new function to clone existing roles. Don't forget to check out our Open-Source Orchard Core Extensions project, which is updated to the latest and greatest 2.2.0 Orchard Core version.

Support depends-on when using script and style inline, creating system roles by default, and announcing the 3.0 release of the Orchard Core Commerce project are the topics for this week! Without further ado, let's get started!

This week's topics are migrating the OpenID module to OpenIddict 6, adding Recipe Roles permission behavior, and we will mention our latest Orchard Nuggets post, where you can learn how to add media management to an ASP.NET Core app. Without further ado, let's dive in!

New NamedRecipeStepHandler base class and users with permission can disable Two-Factor Authentication are the topics for this week. Don't forget to check out our newest Orchard Nuggets post about how to add an audit trail to an ASP.NET Core app! Let's see the details!

Add deployment for Microsoft Account, deprecate Site Owner permission, and retain Administrator Role as a System Role, and our Open-Source Orchard Core Extensions solution is updated to Orchard Core 2.0! Check out our post for the details!

Adding content item and widget alternates based on the alias and slug, retiring AssignRoles and AssignRole_{RoleName} permissions, and a demo about the URL Rewriting Module are the topics for this week. Let's check them out in detail!

The MiniProfiler visibility is now based on permissions, tenant APIs improvements, and using ListContent permission instead of ViewContent to see the content items list. Interested in the details? Well, then check out our post for the details! Orchard Core updates MiniProfiler visibility based on permissions MiniProfiler is a library and UI for profiling your application. By letting you see where your time is spent, which queries are run, and any other custom timings you want to add, MiniProfiler helps you debug issues and optimize performance. And MiniProfiler is a built-in feature in Orchard Core that has some updates. Let's say an admin needs to profile a production instance. Enabling MiniProfiler for everyone to see is not acceptable in most cases. Also, a user may want to profile an ajax request to analyze a query or other info. The solution here is to provide new permissions when you enable the Mini Profiler feature. If you navigate to Security -> Roles and hit Edit near any role, you can see the new permissions which enable you to view the Mini Profiler widget on the back end and the front-end pages. Tenant APIs improvements Orchard Core tenant APIs got several updates lately. First of all, there was no way to update some tenant settings from API calls. Meaning, the tenant's category was missing in the ApiController. We should be able to set a tenant's description via an API call, so this property is now included in the sent model. Another improvement is the new Edit endpoint because there was no way to update tenant settings from API calls. The new Edit endpoint in the Tenant's ApiController takes care of this and enables us to modify the tenant settings either if the tenant is uninitialized or running. The updateable properties are the same as what is displayed on the tenant editor on the Admin UI. Use ListContent permission instead of ViewContent Currently, we use View Content as a minimal permission to list the contents in the content items UI. We use the same permission to also show the Content -> Content Items admin menu. Here the List Content permission should be used, not View Content. What if someone wants to allow a user to view content using a direct link but does not want them to list the contents in the UI? Currently, this isn't possible. Additionally, ViewContent is granted to all Anonymous and Authenticated roles, which is fine. But, access to list contents should be granted by the ListContent permission to avoid allowing listing content without explicit permission grant. If you check out the change logs in the docs of the upcoming release, you can read about the updated permissions. News from the community Hastlayer is now fully open-source Hastlayer is being developed by Lombiq Technologies, a software, training, and services company focusing on web development with open Microsoft technologies. Hastlayer transforms .NET software into FPGA-implemented logic circuits. (FPGAs are chips that can mimic other chips.) The result is code that runs faster and uses less power than a code-only solution without sacrificing the ability of further developing your software. Using Hastlayer will optimize your performance and lower the power consumption of hardware, which will bring you more satisfied customers who want your solution and a boost in your company’s revenue. And we have just recently fully open-sourced Hastlayer! Orchard Dojo Newsletter Lombiq's Orchard Dojo Newsletter has 410 subscribers! We have started this newsletter to inform the community around Orchard of the latest news about the platform. By subscribing to this newsletter, you will get an e-mail whenever a new post is published to Orchard Dojo, including This week in Orchard of course. Do you know of other Orchard enthusiasts who you think would like to read our weekly articles? Tell them to subscribe here! If you are interested in more news about Orchard and the details of the topics above, don't forget to check out the recording of this Orchard meeting!