[Snyk] Security upgrade Umbraco.Cms from 17.4.2 to 18.0.0

[jcdc-bot]

Snyk has created this PR to fix 1 vulnerabilities in the nuget dependencies of this project.

Snyk changed the following file(s):

• src/Umbraco.Community.SimpleDashboards.TestSite/Umbraco.Community.SimpleDashboards.TestSite.csproj

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Uncontrolled Recursion SNYK-DOTNET-MICROSOFTOPENAPI-17816696

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled Recursion

[jcdc-bot]

The upgrade from Umbraco.Cms v17 to v18 is a major version with significant breaking changes that require developer action before and after the upgrade.

Key Breaking Changes:

• OpenAPI Documentation Engine Replaced: Umbraco no longer uses Swashbuckle for OpenAPI (Swagger) documentation. It has been replaced with Microsoft.AspNetCore.OpenApi. If you have custom APIs, you must update your code to use the new registration methods. [2, 8]
• Mandatory Block List Migration: A data migration for single-mode Block Lists, which was optional in v17, now runs automatically. If your site uses custom property editors with nested block lists, you must implement and register an ITypedSingleBlockListProcessor before upgrading to prevent data loss. [2]
• API Terminology Changes: The term "Master Template" has been renamed to "Layout Template" throughout the codebase. This affects service parameters (e.g., masterTemplateId is now layoutTemplateId) and interface properties, requiring code updates. [2]
• Media Recycle Bin Behavior: A new setting EnableMediaRecycleBinProtection is now enabled by default, which renames deleted media files. It is recommended to empty the media recycle bin before upgrading to avoid uncertainty with files already in it. [2]
• Obsolete Code Removal: Various obsolete code members have been removed, such as MoveEventInfo.NewParent, which will cause compilation errors if still in use. [1]

Recommendation: This is a high-risk upgrade. Developers must carefully review the official breaking changes documentation, prepare the codebase by implementing necessary interfaces (like ITypedSingleBlockListProcessor), and plan for code modifications related to API documentation and template management before proceeding with the upgrade.

Source: Umbraco 18 Breaking Changes Documentation

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[jcdc-bot]

⚠️ Snyk checks are incomplete.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
⚠️	Open Source Security	0	0	0	0	See details

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.