[MNT-25896] Introduce page rotation button in pdf viewer (#12241)

* [MNT-25896] Introduce page rotation button in pdf viewer

* [MNT-25896] CR fixes

.eslintignore

@@ -1,14 +0,0 @@
-.angular
-nxcache
-node_modules
-dist
-coverage
-.github
-.vscode
-scripts
-/angular.json
-docs/**/*.md
-lib/js-api/docs/**/*.md
-.storybook
-webpack.config.js
-lib/core/src/lib/icon

.eslintrc.js

@@ -1,213 +0,0 @@
-module.exports = {
-    root: true,
-
-    ignorePatterns: ['projects/**/*', '**/node_modules/**/*', 'lib/cli/node_modules/**/*', '**/node_modules', '**/assets', '**/scripts', '**/docs'],
-
-    plugins: ['@nx'],
-
-    overrides: [
-        {
-            files: ['*.ts'],
-            parserOptions: {
-                project: ['tsconfig.json'],
-                createDefaultProgram: true
-            },
-            extends: [
-                'plugin:@nx/typescript',
-                'plugin:@nx/angular',
-                'plugin:@cspell/recommended',
-                'plugin:@angular-eslint/recommended',
-                'plugin:@angular-eslint/template/process-inline-templates',
-                'plugin:jsdoc/recommended-typescript-error'
-                // Uncomment this once all linting issues are fixed
-                // Note to developers:
-                //  you can uncomment the full ruleset locally when fixing issues, and then comment
-                //  that will allow splitting the work into smaller chunks
-                // 'plugin:unicorn/recommended'
-            ],
-            plugins: [
-                'eslint-plugin-unicorn',
-                'eslint-plugin-rxjs',
-                'prettier',
-                'ban',
-                'license-header',
-                '@cspell',
-                'eslint-plugin-import',
-                '@angular-eslint/eslint-plugin',
-                '@typescript-eslint',
-                'jsdoc'
-            ],
-            rules: {
-                // Uncomment this to enable prettier checks as part of the ESLint
-                // 'prettier/prettier': 'error',
-                'ban/ban': [
-                    'error',
-                    { name: 'eval', message: 'Calls to eval is not allowed.' },
-                    { name: 'fdescribe', message: 'Calls to fdescribe is not allowed' },
-                    { name: 'fit', message: 'Calls to fit is not allowed' },
-                    { name: 'xit', message: 'Calls to xit is not allowed' },
-                    { name: 'xdescribe', message: 'Calls to xdescribe is not allowed' },
-                    { name: ['test', 'only'], message: 'Calls to test.only is not allowed' },
-                    { name: ['describe', 'only'], message: 'Calls to describe.only is not allowed' }
-                ],
-                '@angular-eslint/component-selector': [
-                    'error',
-                    {
-                        type: 'element',
-                        prefix: ['adf', 'app'],
-                        style: 'kebab-case'
-                    }
-                ],
-                '@angular-eslint/directive-selector': [
-                    'error',
-                    {
-                        type: ['element', 'attribute'],
-                        prefix: ['adf', 'app'],
-                        style: 'kebab-case'
-                    }
-                ],
-                '@angular-eslint/no-host-metadata-property': 'off',
-                '@angular-eslint/no-input-prefix': 'error',
-                '@typescript-eslint/consistent-type-definitions': 'error',
-                '@typescript-eslint/dot-notation': 'off',
-                '@typescript-eslint/explicit-member-accessibility': [
-                    'off',
-                    {
-                        accessibility: 'explicit'
-                    }
-                ],
-                '@typescript-eslint/await-thenable': 'error',
-                '@typescript-eslint/prefer-optional-chain': 'warn',
-                '@typescript-eslint/no-inferrable-types': 'off',
-                '@typescript-eslint/no-require-imports': 'off',
-                '@typescript-eslint/no-var-requires': 'error',
-                '@typescript-eslint/naming-convention': [
-                    'error',
-                    {
-                        selector: [
-                            'classProperty',
-                            'objectLiteralProperty',
-                            'typeProperty',
-                            'classMethod',
-                            'objectLiteralMethod',
-                            'typeMethod',
-                            'accessor',
-                            'enumMember'
-                        ],
-                        format: null,
-                        modifiers: ['requiresQuotes']
-                    }
-                ],
-                '@typescript-eslint/member-ordering': 'off',
-                '@typescript-eslint/no-empty-function': 'off',
-                'prefer-arrow/prefer-arrow-functions': 'off',
-                'prefer-promise-reject-errors': 'error',
-                'brace-style': 'off',
-                '@typescript-eslint/brace-style': 'error',
-                'comma-dangle': 'error',
-                'default-case': 'error',
-                'import/order': 'off',
-                'max-len': [
-                    'error',
-                    {
-                        code: 240
-                    }
-                ],
-                'no-bitwise': 'off',
-                'no-console': [
-                    'error',
-                    {
-                        allow: [
-                            'warn',
-                            'dir',
-                            'timeLog',
-                            'assert',
-                            'clear',
-                            'count',
-                            'countReset',
-                            'group',
-                            'groupEnd',
-                            'table',
-                            'dirxml',
-                            'error',
-                            'groupCollapsed',
-                            'Console',
-                            'profile',
-                            'profileEnd',
-                            'timeStamp',
-                            'context'
-                        ]
-                    }
-                ],
-                'no-duplicate-imports': 'error',
-                'no-multiple-empty-lines': 'error',
-                'no-redeclare': 'error',
-                'no-return-await': 'error',
-                'rxjs/no-create': 'error',
-                'rxjs/no-subject-unsubscribe': 'error',
-                'rxjs/no-subject-value': 'error',
-                'rxjs/no-unsafe-takeuntil': 'error',
-                'unicorn/filename-case': 'error',
-                'unicorn/prefer-optional-catch-binding': 'error',
-                '@typescript-eslint/no-unused-expressions': [
-                    'error',
-                    {
-                        allowShortCircuit: true,
-                        allowTernary: true
-                    }
-                ],
-                'license-header/header': [
-                    'error',
-                    [
-                        '/*!',
-                        ' * @license',
-                        ' * Copyright © 2005-2025 Hyland Software, Inc. and its affiliates. All rights reserved.',
-                        ' *',
-                        ' * Licensed under the Apache License, Version 2.0 (the "License");',
-                        ' * you may not use this file except in compliance with the License.',
-                        ' * You may obtain a copy of the License at',
-                        ' *',
-                        ' *     http://www.apache.org/licenses/LICENSE-2.0',
-                        ' *',
-                        ' * Unless required by applicable law or agreed to in writing, software',
-                        ' * distributed under the License is distributed on an "AS IS" BASIS,',
-                        ' * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.',
-                        ' * See the License for the specific language governing permissions and',
-                        ' * limitations under the License.',
-                        ' */'
-                    ]
-                ]
-            }
-        },
-        {
-            files: ['*.html'],
-            extends: ['plugin:@angular-eslint/template/recommended', 'plugin:@angular-eslint/template/accessibility'],
-            parser: '@angular-eslint/template-parser',
-            rules: {
-                '@angular-eslint/template/prefer-self-closing-tags': 'error'
-            }
-        },
-        {
-            files: ['*.spec.ts'],
-            plugins: ['@alfresco/eslint-angular'],
-            rules: {
-                '@alfresco/eslint-angular/no-angular-material-selectors': 'error',
-                '@angular-eslint/component-class-suffix': 'off'
-            }
-        },
-        {
-            files: ['*.ts'],
-            extends: ['plugin:@angular-eslint/template/process-inline-templates'],
-            excludedFiles: ['*.spec.ts']
-        },
-        {
-            files: ['*.json'],
-            parser: 'jsonc-eslint-parser',
-            rules: {
-                'comma-dangle': ['error', 'never']
-            }
-        }
-    ],
-
-    extends: ['plugin:storybook/recommended']
-};

.eslintrc.json

@@ -1,3 +0,0 @@
-{
-  "extends": ["./.eslintrc.js"]
-}

.gitattributes

@@ -0,0 +1 @@
+.github/workflows/*.lock.yml linguist-generated=true merge=ours

.github/CODEOWNERS

@@ -4,15 +4,15 @@
 # the repo. Unless a later match takes precedence,
 # these users will be requested for
 # review when someone opens a pull request.
-*   @eromano @popovicsandras @DenysVuika
+*   @eromano
 
  # Order is important; the last matching pattern takes the most
 # precedence. When someone opens a pull request that only
 # modifies JS files, only @js-owner and not the global
 # owner(s) will be requested for a review.
-/e2e/   @eromano @cristinaj
+/e2e/   @eromano
 
  # The `docs/*` pattern will match files like
 # `docs/getting-started.md` but not further nested files like
 # `docs/build-app/troubleshooting.md`.
-/docs/  @m-hulbert  @eromano
+/docs/  @eromano

.github/actions/before-install/action.yml

@@ -12,9 +12,14 @@ runs:
     - name: base vars
       shell: bash
       run: |
+        if [ -n "${GITHUB_BASE_REF:-}" ]; then
+          BASE_HASH=$(git merge-base "origin/${GITHUB_BASE_REF}" HEAD 2>/dev/null || git rev-parse HEAD)
+        else
+          BASE_HASH=$(git rev-parse HEAD)
+        fi
         {
           echo "GIT_HASH=$(git rev-parse HEAD)";
-          echo "BASE_HASH=$(git merge-base origin/${GITHUB_BASE_REF} HEAD)";
+          echo "BASE_HASH=${BASE_HASH}";
           echo "HEAD_HASH=HEAD";
           echo "HEAD_COMMIT_HASH=${GH_COMMIT}";
           echo "NX_CALCULATION_FLAGS=--all";
@@ -25,10 +30,22 @@ runs:
 
     - name: affected:* flag parser
       shell: bash
-      if: ${{ contains(github.event.head_commit.message , '[affected:*]') }}
+      env:
+        EVENT_NAME: ${{ github.event_name }}
+        PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
       run: |
-        echo "Setting up CI to run with commit flag [affected:*] flag."
-        echo "BREAK_ACTION=true" >> $GITHUB_ENV
+        # Get commit message safely from git to avoid script injection
+        # For PRs, use the PR head SHA; for other events use HEAD
+        if [ "$EVENT_NAME" == "pull_request" ] && [ -n "$PR_HEAD_SHA" ]; then
+          COMMIT_MSG=$(git log -1 --format=%B "$PR_HEAD_SHA" 2>/dev/null || echo "")
+        else
+          COMMIT_MSG=$(git log -1 --format=%B 2>/dev/null || echo "")
+        fi
+
+        if echo "$COMMIT_MSG" | grep -qF "[affected:*]"; then
+          echo "Setting up CI to run with commit flag [affected:*] flag."
+          echo "BREAK_ACTION=true" >> $GITHUB_ENV
+        fi
 
     - name: PULL_REQUEST event
       if: ${{ env.BREAK_ACTION == false && github.event_name == 'pull_request' && !github.event.pull_request.merged }}
@@ -43,7 +60,7 @@ runs:
         } >> $GITHUB_ENV
 
     - name: RELEASE on master/develop patch branch
-      if: ${{ env.BREAK_ACTION == false && github.event.pull_request.merged }}
+      if: ${{ env.BREAK_ACTION == false && (github.event.pull_request.merged || github.event_name == 'push') }}
       shell: bash
       env:
         REF_NAME: ${{ github.ref_name }}

.github/actions/create-git-tag/action.yml

@@ -12,7 +12,7 @@ inputs:
 runs:
   using: 'composite'
   steps:
-    - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+    - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       name: Create git tag
       env:
         TAG_NAME: ${{ inputs.tagName }}

.github/actions/download-node-modules-and-artifacts/action.yml

@@ -4,7 +4,7 @@ runs:
   using: "composite"
   steps:
     - name: Restore dist from cache
-      uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+      uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: dist
         key: dist-${{ github.run_id }}-${{ github.run_attempt }}
@@ -13,7 +13,7 @@ runs:
         fail-on-cache-miss: true
 
     - name: Restore nxcache from cache
-      uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+      uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: nxcache
         key: nxcache-${{ github.run_id }}-${{ github.run_attempt }}
@@ -22,7 +22,7 @@ runs:
         fail-on-cache-miss: true
 
     - name: Restore node_modules from cache
-      uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+      uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: node_modules
         key: node-modules-${{ github.run_id }}-${{ github.run_attempt }}

.github/actions/enable-dryrun/action.yml

@@ -23,8 +23,8 @@ runs:
       env:
         DRY_RUN_FLAG: ${{ inputs.dry-run-flag }}
       run: |
-          if [[ '$DRY_RUN_FLAG' == 'true' ]]; then
-            echo "dryrun=--dryrun" >> $GITHUB_OUTPUT;
+          if [[ "$DRY_RUN_FLAG" == 'true' ]]; then
+            echo "dryrun=--dry-run" >> $GITHUB_OUTPUT;
             echo "enabling dryrun"
           else
             echo "dryrun=" >> $GITHUB_OUTPUT;

.github/actions/npm-check-bundle/action.yml

@@ -26,6 +26,24 @@ runs:
           echo "TAG_NPM not set, aborting"
           exit 1
         fi
-        ADF_VERSION=$(npm view @alfresco/adf-core@${TAG_NPM} version)
+
+        # Retry to absorb npm registry propagation delay right after publish.
+        NPM_VIEW_RETRIES=24
+        NPM_VIEW_RETRY_DELAY=20
+        for attempt in $(seq 1 "$NPM_VIEW_RETRIES"); do
+          ADF_VERSION=$(npm view @alfresco/adf-core@${TAG_NPM} version 2>/dev/null) || true
+          if [[ -n $ADF_VERSION ]]; then
+            break
+          fi
+          if [[ $attempt -lt $NPM_VIEW_RETRIES ]]; then
+            sleep "$NPM_VIEW_RETRY_DELAY"
+          fi
+        done
+
+        if [[ -z $ADF_VERSION ]]; then
+          echo "Could not resolve @alfresco/adf-core@${TAG_NPM} version, aborting" >&2
+          exit 1
+        fi
+
         echo "check bundle on TAG_NPM='${TAG_NPM}' and ADF_VERSION='${ADF_VERSION}'"
         ./scripts/github/build/npm-check-bundles.sh -v ${ADF_VERSION}

.github/actions/save-nx-cache/action.yml

@@ -0,0 +1,17 @@
+name: 'Save Nx Cache'
+description: 'Save Nx cache and dist outputs only when the job succeeds'
+inputs:
+  cache-suffix:
+    description: 'Must match the cache-suffix used in the setup action'
+    required: true
+runs:
+  using: "composite"
+  steps:
+    - name: Save nx cache
+      uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+      with:
+        path: |
+          nxcache
+          .nx
+          dist
+        key: ${{ runner.os }}-nxcache-${{ inputs.cache-suffix }}-${{ hashFiles('nx.json') }}-${{ github.sha }}

.github/actions/setup/action.yml

@@ -1,8 +1,12 @@
 name: 'Setup'
 description: 'Initialize cache, env var load'
 inputs:
-  enable-node-modules-cache:
-    description: 'enable caching for node modules'
+  cache-suffix:
+    description: 'Suffix to make Nx cache key unique per job (e.g. matrix project name)'
+    required: false
+    default: 'default'
+  full-setup:
+    description: 'Run git-latest-tag, npm-tag, and before-install (requires fetch-depth: 0). Set to false for matrix jobs that only need node/cache.'
     required: false
     type: boolean
     default: 'true'
@@ -18,33 +22,43 @@ outputs:
 runs:
   using: "composite"
   steps:
-      - name: install NPM
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+      - name: Set consistent machine ID for Nx cache
+        shell: bash
+        run: echo "nx-github-actions" | sudo tee /etc/machine-id > /dev/null
+      - name: Setup pnpm
+        uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
+      - name: Setup Node
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: '.nvmrc'
-          cache-dependency-path: package-lock.json
+          cache: 'pnpm'
       - name: get latest tag sha
+        if: ${{ inputs.full-setup == 'true' }}
         id: tag-sha
-        uses: Alfresco/alfresco-build-tools/.github/actions/git-latest-tag@d2333816055ff07f7497ff8f8176f789dbe7e811 # v12.7.0
-# CACHE
-      - name: Node Modules cache
-        id: node-modules-cache
-        if: ${{ inputs.enable-node-modules-cache == 'true' }}
-        uses: actions/cache@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
-        env:
-          cache-name: node-modules-cache
-        with:
-          path: |
-            node_modules
-          key: .npm-${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/package-lock.json') }}
-          restore-keys: |
-            node_modules-${{ runner.os }}-build-${{ env.cache-name }}-
-            node_modules-${{ runner.os }}-build-
-            node_modules-${{ runner.os }}-
+        uses: Alfresco/alfresco-build-tools/.github/actions/git-latest-tag@a297ff6c5bf20c667047db658dd23f60241b270a # v18.28.0
       - name: load "NPM TAG"
+        if: ${{ inputs.full-setup == 'true' }}
         id: set-npm-tag
         uses: ./.github/actions/set-npm-tag
+      - name: Install dependencies
+        shell: bash
+        run: pnpm install --frozen-lockfile
+      - name: Security audit
+        shell: bash
+        run: pnpm audit --audit-level=critical
+      - name: Restore nx cache
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            nxcache
+            .nx
+            dist
+          key: ${{ runner.os }}-nxcache-${{ inputs.cache-suffix }}-${{ hashFiles('nx.json') }}-${{ github.sha }}
+          restore-keys: |
+            ${{ runner.os }}-nxcache-${{ inputs.cache-suffix }}-${{ hashFiles('nx.json') }}-
+            ${{ runner.os }}-nxcache-${{ inputs.cache-suffix }}-
       - name: before install script
+        if: ${{ inputs.full-setup == 'true' }}
         uses: ./.github/actions/before-install
         with:
           act: ${{ inputs.act }}

.github/actions/upload-node-modules-and-artifacts/action.yml

@@ -5,19 +5,19 @@ runs:
   using: "composite"
   steps:
     - name: Save dist to cache
-      uses: actions/cache/save@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+      uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: dist
         key: dist-${{ github.run_id }}-${{ github.run_attempt }}
 
     - name: Save nxcache to cache
-      uses: actions/cache/save@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+      uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: nxcache
         key: nxcache-${{ github.run_id }}-${{ github.run_attempt }}
 
     - name: Save node_modules to cache
-      uses: actions/cache/save@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+      uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: node_modules
         key: node-modules-${{ github.run_id }}-${{ github.run_attempt }}

.github/aw/actions-lock.json

@@ -0,0 +1,56 @@
+{
+  "entries": {
+    "github/gh-aw-actions/setup@v0.88.7": {
+      "repo": "github/gh-aw-actions/setup",
+      "version": "v0.88.7",
+      "sha": "5e508589e03a7757a7e05b26e834292f5445bfb6"
+    }
+  },
+  "containers": {
+    "ghcr.io/github/gh-aw-firewall/agent:0.27.44": {
+      "image": "ghcr.io/github/gh-aw-firewall/agent:0.27.44",
+      "digest": "sha256:0d727725c737b58c7bdf51f640cffb928385ec46517e0917c7f1a02f1bada8b4",
+      "pinned_image": "ghcr.io/github/gh-aw-firewall/agent:0.27.44@sha256:0d727725c737b58c7bdf51f640cffb928385ec46517e0917c7f1a02f1bada8b4"
+    },
+    "ghcr.io/github/gh-aw-firewall/agent:0.28.14": {
+      "image": "ghcr.io/github/gh-aw-firewall/agent:0.28.14",
+      "digest": "sha256:f7df036c86575527b61f3f7df91c4412349a12b2a74988d929eafa2999230c98",
+      "pinned_image": "ghcr.io/github/gh-aw-firewall/agent:0.28.14@sha256:f7df036c86575527b61f3f7df91c4412349a12b2a74988d929eafa2999230c98"
+    },
+    "ghcr.io/github/gh-aw-firewall/api-proxy:0.27.44": {
+      "image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.27.44",
+      "digest": "sha256:b50fbadba138f6e9aba94aca09711335c489bb3b15861220cb66f6092e042dc7",
+      "pinned_image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.27.44@sha256:b50fbadba138f6e9aba94aca09711335c489bb3b15861220cb66f6092e042dc7"
+    },
+    "ghcr.io/github/gh-aw-firewall/api-proxy:0.28.14": {
+      "image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.28.14",
+      "digest": "sha256:6f95e2234dd9bd6333a8ff28ccea7ecf0204acd4a09108723844dbd2bf6268c5",
+      "pinned_image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.28.14@sha256:6f95e2234dd9bd6333a8ff28ccea7ecf0204acd4a09108723844dbd2bf6268c5"
+    },
+    "ghcr.io/github/gh-aw-firewall/squid:0.27.44": {
+      "image": "ghcr.io/github/gh-aw-firewall/squid:0.27.44",
+      "digest": "sha256:83e48bbe12c634be8c228a576832fe45f66c529ac3659db92bddbcf2eeb6d627",
+      "pinned_image": "ghcr.io/github/gh-aw-firewall/squid:0.27.44@sha256:83e48bbe12c634be8c228a576832fe45f66c529ac3659db92bddbcf2eeb6d627"
+    },
+    "ghcr.io/github/gh-aw-firewall/squid:0.28.14": {
+      "image": "ghcr.io/github/gh-aw-firewall/squid:0.28.14",
+      "digest": "sha256:2ce8df3abf3e9b76e9c0cf5863da41f1ab3f89b20ad14b988806ab89e7bf2cd5",
+      "pinned_image": "ghcr.io/github/gh-aw-firewall/squid:0.28.14@sha256:2ce8df3abf3e9b76e9c0cf5863da41f1ab3f89b20ad14b988806ab89e7bf2cd5"
+    },
+    "ghcr.io/github/gh-aw-mcpg:v0.4.18": {
+      "image": "ghcr.io/github/gh-aw-mcpg:v0.4.18",
+      "digest": "sha256:85b940556a8faa4e1fdbef124bfd75f2c4ebd855a10b88a1c3b6f3e97f6f1a53",
+      "pinned_image": "ghcr.io/github/gh-aw-mcpg:v0.4.18@sha256:85b940556a8faa4e1fdbef124bfd75f2c4ebd855a10b88a1c3b6f3e97f6f1a53"
+    },
+    "ghcr.io/github/gh-aw-node": {
+      "image": "ghcr.io/github/gh-aw-node",
+      "digest": "sha256:87366cb93b06d7a4e3db08a705875efc027b6c394da336119e7a067abacbb39b",
+      "pinned_image": "ghcr.io/github/gh-aw-node@sha256:87366cb93b06d7a4e3db08a705875efc027b6c394da336119e7a067abacbb39b"
+    },
+    "ghcr.io/github/github-mcp-server:v1.11.0": {
+      "image": "ghcr.io/github/github-mcp-server:v1.11.0",
+      "digest": "sha256:fbec75de11c255213fa08d80fb166abe73d851fff631c51c0079872967720699",
+      "pinned_image": "ghcr.io/github/github-mcp-server:v1.11.0@sha256:fbec75de11c255213fa08d80fb166abe73d851fff631c51c0079872967720699"
+    }
+  }
+}

.github/copilot-instructions.md

@@ -0,0 +1,78 @@
+# General Code Review Instructions
+
+## Review Priorities
+When performing a code review, prioritize issues in the following order:
+
+🔴 CRITICAL (Block merge)
+* Security: Vulnerabilities, exposed secrets, authentication/authorization issues, injection, XSS
+* Memory/resource leaks
+* Crashes or undefined behavior
+* Correctness: Logic errors, data corruption risks, race conditions, missing error handling
+* Data Loss: Risk of data loss or corruption
+
+🟡 IMPORTANT (Requires discussion)
+* Code Quality: Severe violations of SOLID principles, excessive duplication
+* Test Coverage: Missing tests for critical paths or new functionality
+* Performance: Obvious performance bottlenecks (N+1 queries, memory leaks)
+* Architecture: Significant deviations from established patterns
+
+🟢 SUGGESTION (Non-blocking improvements)
+* Readability: Poor naming, complex logic that could be simplified
+* Optimization: Performance improvements without functional impact
+* Best Practices: Minor deviations from conventions
+* Documentation: Missing or incomplete comments/documentation
+
+## General Review Principles
+When performing a code review, follow these principles:
+
+* Be specific: Reference exact lines, files, and provide concrete examples
+* Be pragmatic: Not every suggestion needs immediate implementation
+* Provide context: Explain WHY something is an issue and the potential impact
+* Suggest solutions: Show corrected code when applicable, not just what's wrong
+* Be constructive: Focus on improving the code, not criticizing the author
+* Recognize good practices: Acknowledge well-written code and smart solutions
+* Group related comments: Avoid multiple comments about the same topic
+* Ask clarifying questions when code intent is unclear
+
+## Code Quality Standards
+When performing a code review, check for:
+
+### Clean Code
+* Descriptive and meaningful names for variables, functions, and classes
+* Single Responsibility Principle: each function/class does one thing well
+* DRY (Don't Repeat Yourself): no code duplication
+* Functions should be small and focused (ideally < 20-30 lines)
+* Avoid deeply nested code (max 3-4 levels), unit tests should be an exception from this rule
+* Avoid magic numbers and strings (use constants)
+* Code should be self-documenting; comments only when necessary
+* Code follows consistent style and conventions
+* No commented-out code or TODO without tickets
+
+## Error Handling
+* Proper error handling at appropriate levels
+* Meaningful error messages
+* No silent failures or ignored exceptions
+* Fail fast: validate inputs early
+* Use appropriate error types/exceptions
+
+## Testing Standards
+When performing a code review, verify test quality:
+
+* Coverage: Critical paths and new functionality must have tests
+* Test Names: Descriptive names that explain what is being tested
+* Independence: Tests should not depend on each other or external state
+* Assertions: Use specific assertions, avoid generics
+* Edge Cases: Test boundary conditions, null values, empty inputs
+* Mock Appropriately: Mock external dependencies, not domain logic
+* New code has appropriate test coverage
+*  No tests that always pass or are commented out
+
+## Architecture and Design
+When performing a code review, verify architectural principles:
+
+* Separation of Concerns: Clear boundaries between layers/modules
+* Dependency Direction: High-level modules don't depend on low-level details
+* Interface Segregation: Prefer small, focused interfaces
+* Loose Coupling: Components should be independently testable
+* High Cohesion: Related functionality grouped together
+* Consistent Patterns: Follow established patterns in the codebase

.github/dependabot.yml

@@ -6,6 +6,8 @@ updates:
       interval: "weekly"
       day: "sunday"
       time: "07:00"
+    cooldown:
+      default-days: 3
     open-pull-requests-limit: 5
     target-branch: develop
     groups:
@@ -21,44 +23,38 @@ updates:
       nrwl:
         patterns:
           - "@nrwl/*"
+      typescript-eslint:
+        patterns:
+          - "@typescript-eslint/*"
     ignore:
       - dependency-name: "pdfjs-dist"
       - dependency-name: "@types/*"
       - dependency-name: "typescript"
 
   - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-  - package-ecosystem: "github-actions"
-    directory: "/.github/actions/before-install"
-    schedule:
-      interval: "weekly"
-  - package-ecosystem: "github-actions"
-    directory: "/.github/actions/download-node-modules-and-artifacts"
-    schedule:
-      interval: "weekly"
-  - package-ecosystem: "github-actions"
-    directory: "/.github/actions/enable-dryrun"
-    schedule:
-      interval: "weekly"
-  - package-ecosystem: "github-actions"
-    directory: "/.github/actions/get-latest-tag-sha"
-    schedule:
-      interval: "weekly"
-  - package-ecosystem: "github-actions"
-    directory: "/.github/actions/npm-check-bundle"
-    schedule:
-      interval: "weekly"
-  - package-ecosystem: "github-actions"
-    directory: "/.github/actions/set-npm-tag"
-    schedule:
-      interval: "weekly"
-  - package-ecosystem: "github-actions"
-    directory: "/.github/actions/setup"
-    schedule:
-      interval: "weekly"
-  - package-ecosystem: "github-actions"
-    directory: "/.github/actions/upload-node-modules-and-artifacts"
+    directories:
+      - "/"
+      - "/.github/actions/before-install"
+      - "/.github/actions/create-git-tag"
+      - "/.github/actions/download-node-modules-and-artifacts"
+      - "/.github/actions/enable-dryrun"
+      - "/.github/actions/get-latest-tag-sha"
+      - "/.github/actions/npm-check-bundle"
+      - "/.github/actions/save-nx-cache"
+      - "/.github/actions/set-npm-tag"
+      - "/.github/actions/setup"
+      - "/.github/actions/upload-node-modules-and-artifacts"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 3
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+    ignore:
+      # Managed by gh aw add. Version-locked to the gh-aw compiler; do not bump.
+      - dependency-name: "github/gh-aw-actions"

.github/instructions/html.instructions.md

@@ -0,0 +1,23 @@
+---
+applyTo: "**/*.html"
+---
+
+# HTML Development Standards
+
+* Simple Templates: Keep templates as simple as possible, avoiding complex logic directly in the template. Delegate complex logic to the component's TypeScript code.
+* Native Control Flow: Use the new built-in control flow syntax (`@if`, `@for`, `@switch`) instead of the older structural directives (`*ngIf`, `*ngFor`, `*ngSwitch`).
+* NgOptimizedImage: Use `NgOptimizedImage` for all static images to automatically optimize image loading and performance.
+* Async Pipe: Use the `async` pipe to handle observables in templates. This automatically subscribes and unsubscribes, preventing memory leaks.
+* Prefer pipes over functions in templates for performance reasons, as pipes are only re-evaluated when their inputs change.
+
+## Accessibility Standards
+
+* Add `alt` text to all images
+* Label form inputs with `<mat-label>` or `aria-label`
+* Ensure interactive elements have accessible names
+* Add `role`, `aria-labelledby`, and `aria-describedby` when semantic HTML isn't sufficient
+* All interactive elements must be keyboard accessible
+* Ensure 4.5:1 contrast ratio for normal text, 3:1 for large text
+* Use `aria-live="polite"` for status updates
+* Watch out for misused/non-semantic elements (e.g., <div> instead of <section>)
+* Avoid broken heading hierarchy (e.g., h1 → h3 without h2)

.github/instructions/scss.instructions.md

@@ -0,0 +1,19 @@
+---
+applyTo: "**/*.scss"
+---
+
+# SCSS Development Standards
+
+* Avoid using `!important` to override styles unless absolutely necessary; instead, increase specificity or refactor the code structure.
+* Avoid using Angular Material internal class; prefer using Angular Material Design 3 theming and tokens.
+* Use variables for colors, fonts, and other design tokens to maintain consistency across the project.
+* Use mixins for reusable styles and to avoid code duplication.
+* Ensure that styles are responsive and work well across different screen sizes and devices.
+* Use CSS Grid and Flexbox for layout to create flexible and responsive designs.
+* Avoid using overly specific selectors (e.g., #header .nav ul li a)
+* Be DRY (avoid repeated styles for similar elements)
+* Check for inconsistent naming (e.g., mixing BEM and arbitrary classes)
+* Make sure selected colors have right contrast (satisfy WCAG AA)
+* All interactive elements should have focus state
+* Avoid disabled outline without alternative focus indicators
+

.github/instructions/ts.instructions.md

@@ -0,0 +1,96 @@
+---
+applyTo: "**/*.ts"
+---
+
+# TypeScript Development Standards
+
+## Type Safety
+
+* Strict Type Checking: Always enable and adhere to strict type checking. This helps catch errors early and improves code quality.
+* Prefer Type Inference: Allow TypeScript to infer types when they are obvious from the context. This reduces verbosity while maintaining type safety.
+* Avoid `any`: Do not use the `any` type unless absolutely necessary as it bypasses type checking. Prefer `unknown` when a type is uncertain and you need to handle it safely.
+* Use strict null checks (no `null` or `undefined` without explicit handling)
+* Use type guards and union types for robust type checking
+* Check for missing return types in function signatures
+* Avoid implicit `any` (untyped function parameters)
+
+## Naming Conventions
+
+* Use PascalCase for types, interfaces, and classes
+* Use camelCase for variables, functions, and methods
+* Use UPPER_CASE for constants
+
+## Modern TypeScript Patterns
+
+* Use optional chaining (`?.`) and nullish coalescing (`??`)
+* Prefer `const` over `let`; never use `var`
+* Use arrow functions for callbacks and short functions
+* Avoid enums - they generate additional code at compile time, which increases the size of the final file. This can have a negative impact on the loading speed and performance of the app. Prefer union types or literal types instead.
+* Avoid unhandled promise rejections (missing .catch() or try/catch)
+* Use proper async/await pattern
+* Avoid inefficient array operations (e.g., nested .map())
+* Use destructuring for object/array access
+* Prefer arrow functions
+
+## Angular Best Practices
+
+* Standalone Components: Always use standalone components, directives, and pipes. Avoid using `NgModules` for new features or refactoring existing ones.
+* Implicit Standalone: When creating standalone components, you do not need to explicitly set `standalone: true` inside the `@Component`, `@Directive` and `@Pipe` decorators, as it is implied by default.
+* Lazy Loading: Implement lazy loading for feature routes to improve initial load times of your application.
+* Use Angular Material or other modern UI libraries for consistent styling and UI components.
+* Implement proper error handling with RxJS operators (e.g., catchError)
+* Verify if newly added functionalities can utilize Angular Signals for fine-grained reactivity, reducing change detection overhead.
+* Utilize AOT (Ahead-of-Time) compilation and tree-shaking for efficient, smaller bundle sizes.
+* Prefer class binding over `ngClass` and `ngStyle` for better performance.
+* Use protected on class members that are only used by a component's template, as it allows for better encapsulation while still being accessible to the template.
+* Use readonly for properties that shouldn't change.
+* Use `takeUntilDestroyed` & `destroyRef`: The `takeUntilDestroyed` and `destroyRef` have been introduced with Angular 16 and help to reduce boilerplate code related to unsubscribing on the `OnDestroy` hook.
+* Organize the order of properties and methods in Angular components for readability and maintainability. Recommended order is:
+  1. **Injected services** Whether they are public or private, it's clear they are dependencies of the class.
+  2. **Inputs**: Properties that receive data from outside.
+  3. **Outputs**: Events that the component can trigger.
+  4. **ViewChild/ContentChild**: References to HTML elements.
+  5. **Public static properties**: Constants and static members that are accessible to everyone.
+  6. **Readonly properties**: Immutable public properties.
+  7. **Public properties**: Data and functions available to everyone.
+  8. **Private static properties**: Constants and static members that are only accessible within the class.
+  9. **Private readonly properties**: Immutable private properties.
+  10. **Private properties**: Data and functions used only inside the component.
+  11. **Setters and Getters**: Methods for accessing and modifying properties.
+  12. **Constructor**: Used to initialize the component.
+  13. **Lifecycle Hooks**: Methods that run at specific times in the component’s lifecycle.
+  14. **Public methods**: Functions available to everyone.
+  15. **Private methods**: Functions used only inside the component.
+
+## Components
+
+* Single Responsibility: Keep components small, focused, and responsible for a single piece of functionality.
+* Reactive Forms: Prefer Reactive forms over Template-driven forms for complex forms, validation, and dynamic controls due to their explicit, immutable, and synchronous nature.
+* Use Typed Forms: Typed Forms in Angular are a new feature introduced in Angular 14 that provide stronger type checking for reactive forms. They allow developers to define the structure and types of form controls, making it easier to catch errors at compile-time rather than runtime.
+
+## Services
+
+* Single Responsibility: Design services around a single, well-defined responsibility.
+* `providedIn: 'root'`: Use the `providedIn: 'root'` option when declaring injectable services to ensure they are singletons and tree-shakable.
+* `inject()` Function: Prefer the `inject()` function over constructor injection when injecting dependencies, especially within `provide` functions, `computed` properties, or outside of constructor context.
+
+## Unit testing
+
+* Write unit tests for components, services, and pipes using Jasmine and Karma.
+* Test cases should be reasonably groupped based on tested functionality/behaviour using describe blocks.
+* Use plain English test names based on the should <expectedBehavior> when <stateUnderTest> pattern as a guideline.
+* Use Angular's TestBed for component testing with mocked dependencies
+* Avoid Direct Calls to Component Lifecycle Hooks: Instead of directly invoking lifecycle hooks like `ngOnInit()`, use Angular's testing utilities to trigger them naturally. For example, use `fixture.detectChanges()` to trigger change detection, which will automatically call `ngOnInit()` and other lifecycle hooks in the correct order.
+* Use fixture.componentRef.setInput() Instead of Direct Input Assignment: When testing components with inputs, use `fixture.componentRef.setInput()` to set input values. This method ensures that Angular's change detection is properly triggered, allowing the component to react to input changes as it would in a real application.
+* Use the Provide Mock Store for testing components that rely on NgRx state management. This allows you to mock the store and control the state during tests without needing to set up a full NgRx environment.
+* Mock HTTP requests using provideHttpClientTesting
+* Import only the minimal required modules
+* Avoid NO_ERRORS_SCHEMA and CUSTOM_ELEMENTS_SCHEMA in tests to ensure proper error detection
+* Do not verify mocked methods
+* Avoid mocking component methods unless necessary; prefer testing actual behavior
+* Avoid testing private methods directly; test them through public methods instead
+* Avoid testing methods or behaviours of children components; use shallow testing or mock child components instead
+* Use the overrideProviders API to replace components, directives, pipes, or services declared deep within the module hierarchy
+* Avoid async/await in synchronous unit tests
+* Prefer data-automation-id over CSS class when possible
+* Do not use toBeDefined() to check if an element is visible.

.github/workflows/build-lib-workflow.yml

@@ -0,0 +1,39 @@
+name: "Build Lib Workflow"
+
+on:
+  workflow_call:
+    inputs:
+      base_ref:
+        description: 'Base branch for affected calculation'
+        required: false
+        type: string
+        default: 'develop'
+
+env:
+  NODE_OPTIONS: "--max-old-space-size=5120"
+
+jobs:
+  build:
+    name: "Build affected libs"
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+      - name: Setup environment
+        id: setup-env
+        uses: ./.github/actions/setup
+        with:
+          cache-suffix: build
+          full-setup: 'false'
+      - name: Build affected libs
+        env:
+          BASE_REF: ${{ inputs.base_ref }}
+        run: pnpm nx affected --target=build --base=origin/$BASE_REF --head=HEAD --configuration=production --exclude=stories
+      - name: Save nx cache
+        if: ${{ success() }}
+        uses: ./.github/actions/save-nx-cache
+        with:
+          cache-suffix: build

.github/workflows/codeql-analysis.yml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
@@ -30,7 +30,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@19b2f06db2b6f5108140aeb04014ef02b648f789 # v3.29.5
+      uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v3.29.5
       # Override language selection by uncommenting this and choosing your languages
       with:
         languages: javascript
@@ -39,7 +39,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@19b2f06db2b6f5108140aeb04014ef02b648f789 # v3.29.5
+      uses: github/codeql-action/autobuild@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v3.29.5
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -53,4 +53,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@19b2f06db2b6f5108140aeb04014ef02b648f789 # v3.29.5
+      uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v3.29.5

.github/workflows/git-tag.yml

@@ -1,58 +0,0 @@
-name: "git-tag"
-
-on:
-  workflow_call:
-    inputs:
-      dry-run-flag:
-        description: 'enable dry-run on artifact push'
-        required: false
-        type: boolean
-        default: true
-
-  push:
-    branches:
-      - master
-      - master-patch-*
-
-env:
-  BASE_REF: ${{ github.base_ref }}
-  HEAD_REF: ${{ github.head_ref }}
-  GH_COMMIT: ${{ github.sha }}
-  GH_BUILD_NUMBER: ${{ github.run_id }}
-  LOG_LEVEL: "ERROR"
-  NODE_OPTIONS: "--max-old-space-size=5120"
-  NPM_REGISTRY_ADDRESS: ${{ secrets.NPM_REGISTRY_ADDRESS }}
-  BOT_GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
-
-jobs:
-
-  release:
-    uses: ./.github/workflows/release.yml
-    secrets: inherit
-    with:
-      dry-run-flag: false
-
-  setup:
-    needs: release
-    timeout-minutes: 20
-    name: "Release tag"
-    runs-on: ubuntu-latest
-    env:
-      GITHUB_TOKEN: $BOT_GITHUB_TOKEN
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - id: set-dryrun
-        uses: ./.github/actions/enable-dryrun
-        with:
-          dry-run-flag: ${{ inputs.dry-run-flag }}
-      - name: install NPM
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
-        with:
-          node-version-file: '.nvmrc'
-      - name: "Release tag"
-        env:
-          DRYRUN_FLAG: ${{ steps.set-dryrun.outputs.dryrun }}
-        run: |
-          git fetch --all --quiet
-          BRANCH=${GITHUB_REF##*/} ./scripts/github/release/git-tag.sh $DRYRUN_FLAG

.github/workflows/notify-on-an-bdu-label.yml

@@ -0,0 +1,67 @@
+name: "Sends notification when A/N BDU label is attached to PR"
+
+on:
+  pull_request:
+    types: [labeled]
+    branches: [develop]
+
+permissions:
+  pull-requests: read
+  issues: read
+
+jobs:
+  notify-bdu:
+    name: Notify Teams when A/N BDU label is added
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    if: >-
+      github.event.action == 'labeled' &&
+      github.event.label.name == 'A/N BDU' &&
+      github.event.pull_request.state == 'open'
+    steps:
+      - name: Check if label was added after PR creation (with time threshold)
+        id: check_label_timing
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        with:
+          script: |
+            const prCreatedAt = new Date('${{ github.event.pull_request.created_at }}');
+            
+            const timeline = await github.rest.issues.listEvents({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+            });
+            
+            const labelEvent = timeline.data.reverse().find(event => 
+              event.event === 'labeled' && 
+              event.label.name === 'A/N BDU'
+            );
+            
+            if (!labelEvent) {
+              core.setOutput('should_notify', 'false');
+              return;
+            }
+            
+            const labelAddedAt = new Date(labelEvent.created_at);
+            const timeDiffSeconds = (labelAddedAt - prCreatedAt) / 1000;
+            
+            if (timeDiffSeconds > 15) {
+              core.setOutput('should_notify', 'true');
+            } else {
+              core.setOutput('should_notify', 'false');
+            }
+
+      - name: Send Teams notification
+        if: steps.check_label_timing.outputs.should_notify == 'true'
+        uses: Alfresco/alfresco-build-tools/.github/actions/send-teams-notification@a297ff6c5bf20c667047db658dd23f60241b270a # v18.28.0
+        with:
+          webhook-url: ${{ secrets.TEAMS_NOTIFICATION_ADF_BDU_WEBHOOK }}
+          skip_checkout: true
+          status: success
+          title: "A/N BDU PR: ${{ github.event.pull_request.title }}"
+          message: |
+            A pull request has been marked with the **A/N BDU** label.
+
+            - **Repository:** ${{ github.repository }}
+            - **PR:** [#${{ github.event.pull_request.number }} ${{ github.event.pull_request.title }}](${{ github.event.pull_request.html_url }})
+            - **Author:** ${{ github.event.pull_request.user.login }}

.github/workflows/package_dispatch.yml

@@ -8,13 +8,22 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.registry_package.package_type == 'npm' && github.event.registry_package.name == 'adf-core'
     steps:
+      - name: Generate app token
+        id: app-token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        with:
+          client-id: ${{ vars.GH_APP_ENGINEERING_CONTRIB_CLIENT_ID }}
+          private-key: ${{ secrets.GH_APP_ENGINEERING_CONTRIB_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: alfresco-apps
+          permission-contents: write
       - name: Dispatch event to monorepo
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           PACKAGE_NAME: ${{ github.event.registry_package.name }}
           PACKAGE_VERSION: ${{ github.event.registry_package.package_version.name }}
         with:
-          github-token: ${{ secrets.PAT_WRITE_PKG }}
+          github-token: ${{ steps.app-token.outputs.token }}
           retries: 3
           script: |
             const payload = {

.github/workflows/pull-from-crowdin.yml

@@ -5,21 +5,31 @@ on:
   workflow_dispatch:
   workflow_call:
     secrets:
-      BOT_GITHUB_TOKEN:
+      GH_APP_ENGINEERING_CONTRIB_PRIVATE_KEY:
         required: true
       CROWDIN_TRANSLATIONS_TOKEN:
         required: true
+      HXPS_GIT_COMMIT_SIGNING_PRIVATE_KEY:
+        required: true
 jobs:
   pull-from-crowdin:
     runs-on: ubuntu-latest
     steps:
+      - name: Generate app token
+        id: app-token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        with:
+          client-id: ${{ vars.GH_APP_ENGINEERING_CONTRIB_CLIENT_ID }}
+          private-key: ${{ secrets.GH_APP_ENGINEERING_CONTRIB_PRIVATE_KEY }}
+          permission-contents: write
+          permission-pull-requests: write
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: develop
-          token: ${{ secrets.BOT_GITHUB_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
       - name: Pull translations from Crowdin
-        uses: crowdin/github-action@b4b468cffefb50bdd99dd83e5d2eaeb63c880380 # v2.14.0
+        uses: crowdin/github-action@0d5670f539973aea2f01abce61a8989934df0025 # v3.0.2
         with:
           skip_ref_checkout: true
           upload_sources: false
@@ -28,6 +38,9 @@ jobs:
           localization_branch_name: automated-translations-update
           pull_request_title: "GH auto: Automated Update of Translations from Crowdin"
           pull_request_base_branch_name: develop
+          github_user_name: ${{ vars.HXPS_GIT_USERNAME }}
+          github_user_email: ${{ vars.HXPS_GIT_EMAIL }}
+          gpg_private_key: ${{ secrets.HXPS_GIT_COMMIT_SIGNING_PRIVATE_KEY }}
         env:
-          GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
           CROWDIN_TOKEN: ${{ secrets.CROWDIN_TRANSLATIONS_TOKEN }}

.github/workflows/pull-request.yml

@@ -31,249 +31,297 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  BASE_REF: ${{ github.base_ref }}
-  HEAD_REF: ${{ github.head_ref }}
   GH_COMMIT: ${{ github.sha }}
-  GH_BUILD_NUMBER: ${{ github.run_id }}
-  LOG_LEVEL: "ERROR"
   NODE_OPTIONS: "--max-old-space-size=5120"
 
 jobs:
   pre-checks:
     runs-on: ubuntu-latest
+    outputs:
+      code-changed: ${{ steps.path-filter.outputs.code-changed }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Ensure SHA pinned actions
-        uses: hyland/github-actions-ensure-sha-pinned-actions@22ca7a8cf33e873ba1d6fbcd2b71fa0ec5006b17 # v1.1.0
+        uses: hyland/github-actions-ensure-sha-pinned-actions@7957efb76aba0eec7580a9c0392d3e5bec381359 # v2.0.1
 
-      - name: Check package-lock.json version
+      - name: Check pnpm-lock.yaml version
         run: |
-          if [[ $(jq '.lockfileVersion == 3' package-lock.json) == "true" ]] ; then
-            echo "package-lock.json has a correct version"
+          if [[ -f "pnpm-lock.yaml" ]]; then
+            LOCKFILE_VERSION=$(grep "^lockfileVersion:" pnpm-lock.yaml | cut -d"'" -f2)
+            if [[ "$LOCKFILE_VERSION" == "9.0" ]]; then
+              echo "pnpm-lock.yaml has correct version: $LOCKFILE_VERSION"
+            else
+              echo "pnpm-lock.yaml must be version 9.0, found: $LOCKFILE_VERSION"
+              exit 1
+            fi
           else
-            echo "package-lock must be version 3"
+            echo "pnpm-lock.yaml is missing"
             exit 1
           fi
 
+      - name: Detect code changes
+        id: path-filter
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          if [ "${{ github.event_name }}" != "pull_request" ]; then
+            echo "Not a PR event — assuming code changed"
+            echo "code-changed=true" >> $GITHUB_OUTPUT
+            exit 0
+          fi
+
+          FILES=$(gh api /repos/$GITHUB_REPOSITORY/pulls/${{ github.event.pull_request.number }}/files --paginate --jq '.[].filename')
+
+          CODE_CHANGED="false"
+          while IFS= read -r file; do
+            case "$file" in
+              *.md|docs/*|.github/*.md|.github/CODEOWNERS|.github/dependabot.yml|LICENSE*|NOTICE*|.editorconfig|.gitattributes)
+                ;;
+              *)
+                CODE_CHANGED="true"
+                break
+                ;;
+            esac
+          done <<< "$FILES"
+
+          echo "code-changed=$CODE_CHANGED" >> $GITHUB_OUTPUT
+          echo "Code changed: $CODE_CHANGED"
+
   check-if-pr-is-approved:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        if: ${{ github.event_name == 'pull_request' }}
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
-          fetch-depth: 0
+          ref: ${{ github.event.pull_request.head.sha }}
+          fetch-depth: 1
 
-      - name: Get branch name
-        uses: Alfresco/alfresco-build-tools/.github/actions/get-branch-name@d2333816055ff07f7497ff8f8176f789dbe7e811 # v12.7.0
-
-      - name: Save commit message
-        uses: Alfresco/alfresco-build-tools/.github/actions/get-commit-message@d2333816055ff07f7497ff8f8176f789dbe7e811 # v12.7.0
-        with:
-          header-only: true
-
-      - name: ci:force flag parser
-        shell: bash
+      - name: Check if PR approval can be skipped
+        id: skip-check
         env:
           EVENT_NAME: ${{ github.event_name }}
           ACTOR: ${{ github.actor }}
+          DEVEL_FLAG: ${{ inputs.devel }}
+          PR_TITLE: ${{ github.event.pull_request.title }}
+          PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
         run: |
-          if [ "$EVENT_NAME" == "schedule" ] || [ "$ACTOR" == "dependabot[bot]" ]; then
-            echo -e "\033[32mci:force check can be skipped\033[0m"
-            skip_check="true"
-          elif [[ "$COMMIT_MESSAGE" == *"[ci:force]"* ]]; then
-              echo -e "\033[32m[ci:force] flag detected. No need for approval.\033[0m"
-              skip_check="true"
+          skip="false"
+
+          # Get commit message safely from git to avoid script injection
+          if [ "$EVENT_NAME" == "pull_request" ] && [ -n "$PR_HEAD_SHA" ]; then
+            COMMIT_MESSAGE=$(git log -1 --format=%B "$PR_HEAD_SHA" 2>/dev/null || echo "")
+          else
+            COMMIT_MESSAGE=$(git log -1 --format=%B 2>/dev/null || echo "")
           fi
 
+          if [ "$EVENT_NAME" == "schedule" ] || [ "$EVENT_NAME" == "workflow_dispatch" ]; then
+            echo -e "\033[32mSchedule/dispatch event — skipping approval check\033[0m"
+            skip="true"
+          elif [ "$ACTOR" == "dependabot[bot]" ] || [ "$ACTOR" == "alfresco-build" ]; then
+            echo -e "\033[32mCommit by $ACTOR — skipping approval check\033[0m"
+            skip="true"
+          elif echo "$PR_TITLE" | grep -qF "[ci:force]"; then
+            echo -e "\033[32m[ci:force] flag detected in PR title — skipping approval check\033[0m"
+            skip="true"
+          elif echo "$COMMIT_MESSAGE" | grep -qF "[ci:force]"; then
+            echo -e "\033[32m[ci:force] flag detected in commit message — skipping approval check\033[0m"
+            skip="true"
+          elif [[ "$DEVEL_FLAG" == "true" ]]; then
+            echo -e "\033[32mDevel flag — skipping approval check\033[0m"
+            skip="true"
+          fi
+
+          echo "skip=$skip" >> $GITHUB_OUTPUT
+
       - name: Get PR number
-        if: ${{ github.event_name != 'schedule' && github.event_name != 'workflow_dispatch' }}
-        uses: kamatama41/get-pr-number-action@0bcaab5752c0b699149e74667c8ce2f764cbb7fa # v0.9.1
-        id: action
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: show pr number
-        shell: bash
+        if: ${{ steps.skip-check.outputs.skip != 'true' }}
+        id: pr-number
         env:
-          PR_NUMBER: ${{ steps.action.outputs.number }}
+          GH_TOKEN: ${{ github.token }}
         run: |
+          PR_NUMBER="${{ github.event.pull_request.number }}"
+          if [ -z "$PR_NUMBER" ]; then
+            PR_NUMBER=$(gh pr view --json number --jq '.number' 2>/dev/null || echo "")
+          fi
+          echo "pr_number=$PR_NUMBER" >> $GITHUB_OUTPUT
           echo "PR: $PR_NUMBER"
 
-      - name: check if pr is approved
+      - name: Check if PR is approved
+        if: ${{ steps.skip-check.outputs.skip != 'true' && steps.pr-number.outputs.pr_number != '' }}
         env:
-          DEVEL_FLAG: ${{ inputs.devel }}
           GH_TOKEN: ${{ github.token }}
-          skip_check: "false"
-          EVENT_NAME: ${{ github.event_name }}
-          ACTOR: ${{ github.actor }}
-          PR_NUMBER: ${{ steps.action.outputs.number }}
+          PR_NUMBER: ${{ steps.pr-number.outputs.pr_number }}
         run: |
-          if [ "$EVENT_NAME" == "schedule" ] || [ "$ACTOR" == "dependabot[bot]" ]; then
-            echo -e "\033[32mci:force check can be skipped\033[0m"
-            skip_check="true"
-          elif [[ "$COMMIT_MESSAGE" == *"[ci:force]"* ]]; then
-            echo -e "\033[32m[ci:force] flag detected. No need for approval.\033[0m"
-            skip_check="true"
-          fi
-
-          if [ "$ACTOR" == "dependabot[bot]" ] || [ "$ACTOR" == "alfresco-build" ]; then
-            echo -e "\033[32mCommit by $ACTOR. No need for approval.\033[0m"
-            skip_check="true"
-          fi
-          if [ "$EVENT_NAME" == "schedule" ] || [ "$EVENT_NAME" == "workflow_dispatch" ]; then
-            echo -e "\033[32mSchedule event\033[0m"
-            skip_check="true"
-          fi
-
-          if [[ "$DEVEL_FLAG" == "true" ]]; then
-            echo -e "\033[32mDevel flag\033[0m"
-            skip_check="true"
-          fi
-
-          if [ "$skip_check" == "false" ]; then
-            echo "Checking PR approval"
-            prNumber=$PR_NUMBER
-            echo "PR: $prNumber"
-            checkApproval=$(gh api /repos/$GITHUB_REPOSITORY/pulls/$prNumber/reviews | jq '.[] | select(.state == "APPROVED") | .user.login')
-            if [[ $checkApproval ]]; then
-              echo -e "\033[32mPR approved\033[0m"
-            else
-              echo -e "\033[31mPR NOT approved\033[0m"
-              exit 1
-            fi
+          echo "Checking approval for PR: $PR_NUMBER"
+          checkApproval=$(gh api /repos/$GITHUB_REPOSITORY/pulls/$PR_NUMBER/reviews | jq '.[] | select(.state == "APPROVED") | .user.login')
+          if [[ $checkApproval ]]; then
+            echo -e "\033[32mPR approved\033[0m"
+          else
+            echo -e "\033[31mPR NOT approved\033[0m"
+            exit 1
           fi
 
   setup:
-    # long timeout required when cache has to be recreated
     timeout-minutes: 30
     name: "Setup"
     runs-on: ubuntu-latest
     needs: [check-if-pr-is-approved, pre-checks]
+    if: ${{ needs.pre-checks.outputs.code-changed == 'true' }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
-          fetch-depth: 0 # Fetch all history for all tags and branches
-      - uses: ./.github/actions/setup
-      - name: install
-        run: |
-          npm ci
-          npm run bundle:js-api
-          npm run bundle:cli
-      - uses: ./.github/actions/upload-node-modules-and-artifacts
-
-  unit-tests:
-    timeout-minutes: 30
-    name: "Unit tests: ${{ matrix.unit-tests.name }}"
-    runs-on: ubuntu-latest
-    needs: [setup]
-    strategy:
-      fail-fast: false
-      # max-parallel: 4
-      matrix:
-        unit-tests:
-          - name: js-api
-            exclude: "core,insights,content-services,process-services,process-services-cloud,eslint-plugin-eslint-angular"
-          - name: content-services
-            exclude: "insights,core,extensions,process-services,process-services-cloud,eslint-plugin-eslint-angular,js-api"
-          - name: core
-            exclude: "insights,content-services,process-services,process-services-cloud,eslint-plugin-eslint-angular,js-api"
-          - name: insights
-            exclude: "core,extensions,content-services,process-services-cloud,process-services,eslint-plugin-eslint-angular,js-api"
-          - name: process-services
-            exclude: "core,extensions,content-services,process-services-cloud,insights,eslint-plugin-eslint-angular,js-api"
-          - name: process-services-cloud
-            exclude: "insights,core,extensions,content-services,process-services$,eslint-plugin-eslint-angular,js-api"
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+          fetch-depth: 0
+      - name: Setup environment
+        id: setup-env
+        uses: ./.github/actions/setup
         with:
-          fetch-depth: 0 # Fetch all history for all tags and branches
-      - uses: ./.github/actions/setup
-      - uses: ./.github/actions/download-node-modules-and-artifacts
-      - name: Run unit tests
-        env:
-          EXCLUDE_PATTERN: ${{ matrix.unit-tests.exclude }}
+          cache-suffix: setup
+      - name: Bundle
         run: |
-          /usr/bin/xvfb-run --auto-servernum npm run test:affected -- $NX_CALCULATION_FLAGS --exclude=$EXCLUDE_PATTERN
+          pnpm bundle:js-api
+          pnpm bundle:cli
+      - name: Save nx cache
+        if: ${{ success() }}
+        uses: ./.github/actions/save-nx-cache
+        with:
+          cache-suffix: setup
 
   lint:
-    # long timeout required when cache has to be recreated
     timeout-minutes: 30
     name: "Lint"
     runs-on: ubuntu-latest
     needs: [setup]
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
-          fetch-depth: 0 # Fetch all history for all tags and branches
-      - uses: ./.github/actions/setup
-      - uses: ./.github/actions/download-node-modules-and-artifacts
-      - run: npm run lint:affected -- $NX_CALCULATION_FLAGS
+          fetch-depth: 0
+      - name: Setup environment
+        id: setup-env
+        uses: ./.github/actions/setup
+        with:
+          cache-suffix: lint
+          full-setup: 'false'
+      - name: Run lint
+        env:
+          BASE_REF: ${{ github.base_ref || 'develop' }}
+        run: pnpm nx affected --target=lint --base=origin/$BASE_REF --head=HEAD
+      - name: Save nx cache
+        if: ${{ success() }}
+        uses: ./.github/actions/save-nx-cache
+        with:
+          cache-suffix: lint
 
-  build-libs:
-    # long timeout required when cache has to be recreated
-    timeout-minutes: 30
-    name: "Build libs"
-    runs-on: ubuntu-latest
+  trigger-build:
+    name: "Build Libs"
     needs: [setup]
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-        with:
-          fetch-depth: 0 # Fetch all history for all tags and branches
-      - uses: ./.github/actions/setup
-      - uses: ./.github/actions/download-node-modules-and-artifacts
-      - run: NX_REJECT_UNKNOWN_LOCAL_CACHE=0 npm run build:affected -- $NX_CALCULATION_FLAGS --prod
-      - uses: ./.github/actions/upload-node-modules-and-artifacts
+    uses: ./.github/workflows/build-lib-workflow.yml
+    with:
+      base_ref: ${{ github.base_ref || 'develop' }}
 
   build-storybook:
     timeout-minutes: 30
-    name: "Build storybook"
-    runs-on: ubuntu-latest
+    name: "Build Storybook"
     needs: [setup]
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
-          fetch-depth: 0 # Fetch all history for all tags and branches
-      - uses: ./.github/actions/setup
-      - uses: ./.github/actions/download-node-modules-and-artifacts
-      - run: npm run build-storybook
-      - uses: ./.github/actions/upload-node-modules-and-artifacts
+          fetch-depth: 0
+      - name: Setup environment
+        id: setup-env
+        uses: ./.github/actions/setup
+        with:
+          cache-suffix: storybook
+          full-setup: 'false'
+      - name: Build Storybook
+        env:
+          BASE_REF: ${{ github.base_ref || 'develop' }}
+        run: |
+          pnpm nx affected --target=build-storybook --base=origin/$BASE_REF --head=HEAD --configuration=ci
+      - name: Save nx cache
+        if: ${{ success() }}
+        uses: ./.github/actions/save-nx-cache
+        with:
+          cache-suffix: storybook
+
+  trigger-unit-tests:
+    name: "Unit Tests"
+    needs: [setup]
+    uses: ./.github/workflows/unit-test-workflow.yml
+    secrets:
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+    with:
+      base_ref: ${{ github.base_ref || 'develop' }}
+
+  PR-size-check:
+    if: ${{ github.event_name == 'pull_request' }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check PR size
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        with:
+          script: |
+            const { data: pr } = await github.rest.pulls.get({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.issue.number,
+            });
+
+            const additions = pr.additions;
+            const deletions = pr.deletions;
+            const totalChanges = additions + deletions;
+            const changedFiles = pr.changed_files;
+
+            let size = 'S';
+            if (totalChanges > 1000 || changedFiles > 30) size = 'XL';
+            else if (totalChanges > 500 || changedFiles > 20) size = 'L';
+            else if (totalChanges > 200 || changedFiles > 10) size = 'M';
+
+            core.summary
+              .addHeading('PR Size: ' + size, 3)
+              .addTable([
+                [{data: 'Metric', header: true}, {data: 'Count', header: true}],
+                ['Files changed', String(changedFiles)],
+                ['Additions', '+' + String(additions)],
+                ['Deletions', '-' + String(deletions)],
+                ['Total changes', String(totalChanges)],
+              ]);
+
+            if (size === 'XL') {
+              core.summary.addRaw('⚠️ This PR is very large. Consider splitting it into smaller PRs for easier review.');
+            }
+
+            await core.summary.write();
+
+            if (size === 'XL') {
+              core.warning('This PR has ' + totalChanges + ' changes across ' + changedFiles + ' files. Consider splitting it for easier review.');
+            }
 
   PR-forbidden-labels:
     if: ${{ inputs.cron-run == '' || inputs.cron-run == 'false' }}
     runs-on: ubuntu-latest
     steps:
-      - id: checkoutRepo
-        name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-        with:
-          fetch-depth: 1
-      - name: PR contains forbidden labels
-        id: pr-forbidden
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      - name: Check for forbidden labels
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
-            const issueHasLabels = require('./scripts/github/update/check-issue-has-label.js');
-            const checkLabels = ['next version ➡️', 'do not merge🙅🏻‍♂️'];
+            const { data: issue } = await github.rest.issues.get({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+            });
+            const labels = issue.labels?.map(item => item.name) || [];
+            const forbidden = ['next version ➡️', 'do not merge🙅🏻‍♂️'];
 
-            const hasLabel = await issueHasLabels({github, context, checkLabels})
-
-            if(hasLabel) {
+            if (forbidden.some(l => labels.includes(l))) {
               core.setFailed('The PR contains a forbidden label! You are not allowed to merge until the label is there.');
             }
-      - name: Check value after
-        env:
-          STEP_RESULT: ${{ toJson(steps.pr-forbidden.*.result) }}
-          HAS_FAILURE: ${{ contains(toJson(steps.pr-forbidden.*.result), 'failure') }}
-        run: |
-          echo "Step result: $STEP_RESULT"
-          echo "Has failure: $HAS_FAILURE"
 
   finalize:
     if: ${{ always() }}
@@ -284,16 +332,13 @@ jobs:
         check-if-pr-is-approved,
         pre-checks,
         setup,
-        unit-tests,
+        trigger-unit-tests,
         lint,
-        build-libs,
+        trigger-build,
         build-storybook,
+        PR-forbidden-labels,
       ]
     steps:
       - name: Check job execution status
-        if: >-
-          ${{
-              contains(needs.*.result, 'failure')
-            || contains(needs.*.result, 'cancelled')
-          }}
+        if: ${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}
         run: exit 1

.github/workflows/rebase.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout the latest code
-      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         fetch-depth: 0
     - name: Automatic Rebase

.github/workflows/release.yml

@@ -1,13 +1,6 @@
 name: "release"
 
 on:
-  workflow_call:
-    inputs:
-      dry-run-flag:
-        description: 'enable dry-run on artifact push'
-        required: false
-        type: boolean
-        default: true
   workflow_dispatch:
     inputs:
       dry-run-flag:
@@ -15,13 +8,12 @@ on:
         required: false
         type: boolean
         default: true
-  pull_request:
-    types: [closed]
+  push:
     branches:
       - develop
-      - master
       - develop-patch*
-      - master-patch*
+      - master
+      - master-patch-*
 
 permissions:
   id-token: write  # Required for OIDC
@@ -32,8 +24,6 @@ concurrency:
   cancel-in-progress: false
 
 env:
-  BASE_REF: ${{ github.base_ref }}
-  HEAD_REF: ${{ github.head_ref }}
   GH_COMMIT: ${{ github.sha }}
   GH_BUILD_NUMBER: ${{ github.run_id }}
   LOG_LEVEL: "ERROR"
@@ -42,22 +32,23 @@ env:
 jobs:
   setup:
     timeout-minutes: 20
-    if: github.event.pull_request.merged == true || github.ref_name == 'master' || github.ref_name == 'master-patch-*' || github.event_name == 'workflow_dispatch'
+    if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     name: "Setup"
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - uses: ./.github/actions/setup
-        with:
-          enable-node-modules-cache: false
       - name: install
         run: |
-          npm ci
-          npm run bundle:js-api
-          npm run bundle:cli
+          pnpm install --frozen-lockfile
+          pnpm bundle:js-api
+          pnpm bundle:cli
       - uses: ./.github/actions/upload-node-modules-and-artifacts
 
   release-npm:
@@ -65,21 +56,20 @@ jobs:
     outputs:
       release_version: ${{ steps.set-version.outputs.release_version }}
     timeout-minutes: 30
-    if: github.event.pull_request.merged == true || github.ref_name == 'master' || github.ref_name == 'master-patch-*' || github.event_name == 'workflow_dispatch'
+    if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     runs-on: ubuntu-latest
     permissions:
       id-token: write  # Required for OIDC
       contents: read
       packages: write
+      actions: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - id: setup
         uses: ./.github/actions/setup
-        with:
-          enable-node-modules-cache: false
       - id: set-dryrun
         uses: ./.github/actions/enable-dryrun
         with:
@@ -91,31 +81,31 @@ jobs:
           set -u;
           ./scripts/github/build/bumpversion.sh
       - name: Set migrations
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const setMigrations = require('./scripts/github/release/set-migrations.js');
             setMigrations();
       - name: build libraries
         run: |
-          npm run build:libs
-          npm run build:schematics
-      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+          pnpm build:libs
+          pnpm build:schematics
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         name: release libraries GH registry
         with:
           node-version-file: '.nvmrc'
           registry-url: 'https://npm.pkg.github.com'
           scope: '@alfresco'
-      - run: npm run publish -- --tag=${{ steps.setup.outputs.npm-tag }}
+      - run: pnpm run publish --tag ${{ steps.setup.outputs.npm-tag }} --provenance=false ${{ steps.set-dryrun.outputs.dryrun }}
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         name: release libraries Npm registry
         with:
           node-version-file: '.nvmrc'
           registry-url: 'https://${{ vars.NPM_REGISTRY_ADDRESS }}'
           scope: '@alfresco'
-      - run: npm run publish -- --tag=${{ steps.setup.outputs.npm-tag }}
+      - run: pnpm run publish --tag ${{ steps.setup.outputs.npm-tag }} ${{ steps.set-dryrun.outputs.dryrun }}
 
   create-git-tag:
     runs-on: ubuntu-latest
@@ -126,41 +116,21 @@ jobs:
       contents: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 1
       - uses: './.github/actions/create-git-tag'
         with:
           tagName: ${{ needs.release-npm.outputs.release_version }}
 
-  propagate:
-    needs: [release-npm]
-    if: ${{ contains(toJson(github.event.pull_request.labels.*.name), 'hxp-upstream') }}
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - name: HxP upstream invoke
-        uses: the-actions-org/workflow-dispatch@3133c5d135c7dbe4be4f9793872b6ef331b53bc7 # v4.0.0
-        with:
-          repo: Alfresco/hxp-frontend-apps
-          ref: develop
-          workflow: upstream-adf.yml
-          token: ${{ secrets.ALFRESCO_BUILD_GH_TOKEN }}
-          wait-for-completion: false
-          inputs: >
-            {
-              "tag_version": "alpha"
-            }
-
   npm-check-bundle:
     needs: [release-npm]
-    timeout-minutes: 15
-    if: github.event.pull_request.merged == true || github.ref_name == 'master' || github.ref_name == 'master-patch-*' || github.event_name == 'workflow_dispatch'
+    timeout-minutes: 25
+    if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: ./.github/actions/npm-check-bundle
 
   push-translation-keys-to-crowdin:
@@ -174,10 +144,10 @@ jobs:
       actions: read
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Push Source Files to Crowdin
-        uses: crowdin/github-action@b4b468cffefb50bdd99dd83e5d2eaeb63c880380 # v2.14.0
+        uses: crowdin/github-action@0d5670f539973aea2f01abce61a8989934df0025 # v3.0.2
         with:
           upload_sources: true
           upload_sources_args: --delete-obsolete
@@ -189,8 +159,9 @@ jobs:
     name: Run Crowdin pull pipeline for up-to-date sync
     uses: ./.github/workflows/pull-from-crowdin.yml
     secrets:
-      BOT_GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
+      GH_APP_ENGINEERING_CONTRIB_PRIVATE_KEY: ${{ secrets.GH_APP_ENGINEERING_CONTRIB_PRIVATE_KEY }}
       CROWDIN_TRANSLATIONS_TOKEN: ${{ secrets.CROWDIN_TRANSLATIONS_TOKEN }}
+      HXPS_GIT_COMMIT_SIGNING_PRIVATE_KEY: ${{ secrets.HXPS_GIT_COMMIT_SIGNING_PRIVATE_KEY }}
 
   finalize:
     if: always()

.github/workflows/sonar-develop.yml

@@ -0,0 +1,22 @@
+name: "SonarCloud Full Scan (develop)"
+
+on:
+  schedule:
+    - cron: '0 5 * * *'
+  workflow_dispatch: {}
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  pull-requests: read
+
+jobs:
+  full-unit-tests-and-sonar-scan:
+    name: "Full Unit Tests + SonarCloud Scan"
+    uses: ./.github/workflows/unit-test-workflow.yml
+    secrets: inherit
+    with:
+      full: true

.github/workflows/stale-pr-cleanup.yml

@@ -0,0 +1,14 @@
+name: Stale PR Cleanup
+
+on:
+  schedule:
+    - cron: "0 0 * * *"
+  workflow_dispatch:
+
+permissions:
+  pull-requests: write
+  issues: write
+
+jobs:
+  stale-pr-cleanup:
+    uses: Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml@a297ff6c5bf20c667047db658dd23f60241b270a # v18.28.0

.github/workflows/supply-chain-pr-instructions.yml

@@ -0,0 +1,31 @@
+name: Supply Chain Review - PR Instructions
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+    paths:
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "**/package.json"
+      - "pom.xml"
+      - "**/pom.xml"
+
+jobs:
+  instructions:
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    steps:
+      - uses: Alfresco/alfresco-build-tools/.github/actions/github-upsert-comment@a297ff6c5bf20c667047db658dd23f60241b270a # v18.28.0
+        with:
+          comment-identifier: supply-chain-review-instructions
+          comment-body: |
+            ## 🔒 Supply Chain Security
+
+            This PR modifies dependencies. To run a security analysis, comment:
+
+            ```
+            /supply-chain-review
+            ```
+
+            The analysis will check for vulnerabilities, typosquatting, maintainer takeovers, and other supply chain risks.

.github/workflows/supply-chain-review.md

@@ -0,0 +1,391 @@
+---
+on:
+  slash_command:
+    name: supply-chain-review
+  reaction: rocket
+
+permissions:
+  contents: read
+  pull-requests: read
+
+model: gpt-5-mini
+engine:
+  id: copilot
+tools:
+  github:
+    toolsets: [context, pull_requests, repos]
+
+network:
+  allowed:
+    - defaults
+    - node
+    - java
+    - api.osv.dev
+    - api.scorecard.dev
+    - search.maven.org
+    - api.github.com
+    - github.com
+
+safe-outputs:
+  add-comment:
+    hide-older-comments: true
+  add-labels:
+    allowed: [security:low, security:medium, security:high]
+    issue-intent: false
+  remove-labels:
+    allowed: [security:low, security:medium, security:high]
+  submit-pull-request-review:
+    allowed-events: [COMMENT, REQUEST_CHANGES]
+    supersede-older-reviews: true
+  dismiss-pull-request-review:
+
+source: Alfresco/alfresco-build-tools/.github/workflows/supply-chain-review.md@599eebd2a1b84e76d540e41036520df3a64c7cbd
+---
+
+# Supply Chain Review
+
+You are a supply chain security analyst reviewing a pull request for dependency changes.
+Your goal is to identify any dependency additions or upgrades and produce a thorough risk assessment for each change, covering known vulnerabilities, typosquatting, maintainer takeover, install script abuse, version anomalies, source code changes, and project health.
+
+You are the primary and only analysis engine. There is no secondary check. Be thorough but calibrated: false positives erode trust, but missed threats have severe consequences.
+
+## Step 1 — Identify Dependency Changes
+
+Read the **full** pull request diff — every commit in the PR, not just the latest one — and find all modified dependency files (`package.json`, `package-lock.json`, `yarn.lock`, `pnpm-lock.yaml`/`pnpm-lock.yml`, `pnpm-workspace.yaml`/`pnpm-workspace.yml`, `npm-shrinkwrap.json`, `pom.xml`, `build.gradle`, etc.).
+
+**CRITICAL**: always use the GitHub MCP Server `pull_requests` toolset (e.g. `get_diff` / `get_files`) to fetch the diff — this always reflects every commit in the PR, regardless of local git history, against the correct base branch. Do NOT rely on local git commands or assumptions about the PR's commit history.
+
+For each changed dependency extract:
+
+- Package name (including scope/groupId if applicable)
+- Ecosystem (`npm` or `maven`)
+- Old version (or mark as `NEW DEPENDENCY` if newly added)
+- New version
+
+If no dependency files were changed, post a brief PR comment stating that no dependency changes were detected, then go directly to Step 6 — treating this as LOW risk — to remove any stale `security:*` labels and submit the required pull request review, then stop.
+
+## Step 1b — Filter Internal Dependencies
+
+Before collecting external data, identify and exclude internal/private dependencies that cannot be resolved by public APIs.
+
+**Internal dependency namespaces (skip these):**
+
+- **Maven**: Any dependency with a `groupId` starting with `com.hyland.`, `org.alfresco.`, or `org.activiti.`
+- **npm**: Any package under the `@hyland/`, `@hylandsoftware/`, or `@alfresco/` scopes
+
+For each internal dependency found:
+
+1. Remove it from the analysis pipeline — do NOT query OSV.dev, OpenSSF Scorecard, or registry APIs for these packages (they will fail or return irrelevant data).
+2. Record the package name (with `@` replaced by `(at)` for GitHub comment compatibility), ecosystem, old version, and new version in a separate "Internal Dependencies (Skipped)" list.
+3. Continue with Step 2 only for the remaining external/public dependencies.
+
+If ALL changed dependencies are internal, skip Steps 2-4 and proceed directly to Step 5 — treating this as LOW risk for Step 6 — posting a report that lists the internal dependencies and notes that no external supply chain analysis was performed.
+
+## Step 2 — Collect Data for Each Dependency
+
+For every changed dependency, gather the following data. Fetch all data sources in parallel where possible. If any request fails or returns no data, note it and continue — missing data alone is not proof of malice, but factor it into your confidence level.
+
+### 2a. Known Vulnerabilities (OSV.dev)
+
+Query the OSV.dev API for vulnerabilities affecting the **new** version:
+
+- **npm**: `POST https://api.osv.dev/v1/query` with body `{"package":{"name":"<package-name>","ecosystem":"npm"},"version":"<new-version>"}`
+- **Maven**: `POST https://api.osv.dev/v1/query` with body `{"package":{"name":"<groupId>:<artifactId>","ecosystem":"Maven"},"version":"<new-version>"}`
+
+Record all returned vulnerability IDs, severity ratings, and summaries. CRITICAL and HIGH severity CVEs in the new version are the most urgent signal.
+
+### 2b. OpenSSF Scorecard
+
+Fetch the project health score. First determine the source repository from the package metadata (see 2c), then query:
+
+`GET https://api.scorecard.dev/projects/github.com/{owner}/{repo}`
+
+Record the overall score (0-10) and individual check results. Pay special attention to: Maintained, Code-Review, Vulnerabilities, Branch-Protection, Signed-Releases. A score below 3 is very concerning; below 5 warrants caution. If the package has no linked source repository, the scorecard will be unavailable — this is itself a risk signal.
+
+### 2c. Package Metadata (Registry)
+
+**For npm packages**, fetch:
+
+`GET https://registry.npmjs.org/<package-name>`
+
+From the full registry document, extract for BOTH the old and new versions:
+
+- `versions[<version>]._npmUser` — the publisher
+- `versions[<version>].maintainers` — the maintainer list
+- `versions[<version>].scripts` — lifecycle scripts (`preinstall`, `install`, `postinstall`)
+- `versions[<version>].dependencies` — runtime dependencies
+- `time[<version>]` — publish timestamp
+- `repository` — source repository URL
+
+Also extract the `time` object to build a version history (last 10 versions with publish dates).
+
+**For Maven packages**, fetch:
+
+`GET https://central.sonatype.com/api/v1/search?q=g:<groupId>+AND+a:<artifactId>&sort=published&limit=10`
+
+For POM details (build plugins, dependencies): `GET https://repo1.maven.org/maven2/<groupId-as-path>/<artifactId>/<version>/<artifactId>-<version>.pom`
+
+### 2d. Source Code Diff and Release Notes
+
+Use the PR diff itself to review the actual file changes for dependency manifest files. Additionally, if a source repository is identified (from 2c), fetch release notes and compare tags:
+
+- Release notes: `GET https://api.github.com/repos/{owner}/{repo}/releases/tags/v<new-version>` (try with and without the `v` prefix)
+- For a code-level diff between old and new versions: `GET https://api.github.com/repos/{owner}/{repo}/compare/v<old-version>...v<new-version>` (try with and without the `v` prefix)
+
+## Step 3 — Analyze Against Threat Taxonomy
+
+Evaluate each dependency against ALL of the following threat categories. Not every category applies to every package — use judgment.
+
+### 3a. Known Vulnerabilities
+
+Assess the severity and exploitability of any CVEs or advisories returned from OSV.dev. CRITICAL and HIGH severity vulnerabilities in the new version are the most urgent signal. Also check whether the upgrade itself fixes known vulnerabilities in the old version (a positive signal).
+
+### 3b. Typosquatting / Name Confusion
+
+Determine if the package name could be a typosquatting attempt targeting a well-known package. Consider:
+
+- Levenshtein distance to popular packages (e.g., `lodas` vs `lodash`)
+- Dash/underscore/separator swaps (e.g., `my_package` vs `my-package`)
+- Suffix variants (e.g., `express-js`, `express.js`)
+- Scope squatting for npm (e.g., `@attacker/lodash` vs `lodash`)
+- GroupId squatting for Maven (e.g., `org.apach.commons` vs `org.apache.commons`)
+
+Use your knowledge of the ecosystem to identify plausible targets. Reason from your training data about popular packages.
+
+### 3c. Maintainer Takeover
+
+Compare the publisher and maintainer metadata between the old and new versions. Red flags:
+
+- Publisher changed between versions (different `_npmUser`)
+- Old maintainers removed and replaced
+- New publisher has no prior history with the package
+- Classic pattern: publisher change + maintainer removal (like the event-stream incident)
+
+### 3d. Install Script Abuse
+
+**For npm**: Analyze lifecycle scripts (`preinstall`, `install`, `postinstall`) from the registry metadata. Red flags:
+
+- Scripts that download and execute remote code (`curl`, `wget`, `http://`)
+- `eval()`, `Function()`, `child_process` usage
+- Environment variable access (`process.env`) for credential theft
+- Base64/hex decoding of payloads
+- Access to sensitive paths (`~/.ssh`, `~/.aws`, `~/.npmrc`, `/etc/passwd`)
+- Network calls (`dns.lookup`, `net.connect`) for exfiltration
+- Scripts that are NEW in this version (not present in the old version) are especially suspicious
+
+**For Maven**: Look for dangerous build plugins in POM changes:
+
+- `exec-maven-plugin`, `maven-antrun-plugin` with `<exec>`
+- `<extensions>true</extensions>` on untrusted plugins
+- Download plugins, Groovy/script plugins
+
+### 3e. Version Anomalies
+
+Analyze the version change pattern and history from the registry metadata:
+
+- Major version jumps (skipping 1+ major versions)
+- Version downgrade (new version < old version)
+- Stable to prerelease transition
+- Very recent publish (less than 48 hours old) — could indicate a rush to distribute malicious code
+- Rapid successive publishes (many versions in a short window)
+- Long dormancy then sudden publish (more than 1 year gap) — may indicate account takeover
+
+### 3f. Source Code Changes
+
+If source diffs are available (from the GitHub compare API or the PR diff itself), analyze for:
+
+- Obfuscated code (minified without source maps, hex/unicode escapes, string concatenation to hide function names)
+- Data exfiltration (network calls sending `process.env`, API keys, tokens to external endpoints)
+- Filesystem access outside the package directory
+- Dynamic code execution (`eval()`, `Function()`, `vm.runInNewContext`, `WebAssembly.instantiate`)
+- Encoded payloads (Base64/hex decoded and executed at runtime)
+- Inconsistency between release notes and actual changes (changelog says "bug fix" but diff adds network calls)
+- Cryptocurrency mining patterns
+- Suspicious new transitive dependencies
+
+### 3g. Project Health
+
+Interpret the OpenSSF Scorecard data:
+
+- Overall score below 3/10 is very concerning
+- Score below 5/10 warrants caution
+- Pay attention to specific failing checks: Maintained, Code-Review, Vulnerabilities, Branch-Protection, Signed-Releases
+- Missing scorecard data (no source repo linked) is itself a risk signal
+
+### 3h. Missing Source Repository
+
+A package with no linked source repository prevents code audit and is a risk signal, especially combined with other concerns.
+
+### 3i. Tag Poisoning / Build Provenance
+
+Evaluate whether the published artifact can be traced back to a verified source commit. This category covers attacks where a legitimate-looking version tag is manipulated to distribute malicious code.
+
+#### Tag-to-Registry Provenance Mismatch
+
+Check whether the git tag for the new version corresponds to the published artifact:
+
+- Compare the tag commit date with the registry publish timestamp. A discrepancy of more than a few hours (allowing for CI/CD pipeline time) is suspicious.
+- If the source diff between the tag and the previous tag includes changes not documented in release notes, flag as suspicious.
+
+#### Mutable/Moved Tags
+
+Check if the tag appears to have been recreated:
+
+- Use `GET https://api.github.com/repos/{owner}/{repo}/git/refs/tags/{tag}` to get the tag reference.
+- For annotated tags, use `GET https://api.github.com/repos/{owner}/{repo}/git/tags/{sha}` to check the tag object and its `tagger.date`.
+- If the tag creation date is significantly newer than the commit it points to (e.g., more than 7 days), this may indicate the tag was deleted and recreated pointing to a different commit.
+
+#### Unsigned Tags
+
+Determine tag type and signing status:
+
+- **Annotated + signed tags** (GPG or SSH signature present) — strongest integrity signal.
+- **Annotated but unsigned tags** — moderate integrity; the tag is immutable but unverified.
+- **Lightweight tags** — weakest integrity; easily moved without trace. Flag as a risk signal for high-profile or security-critical packages.
+
+For the tag object, check the `verification` field in the GitHub API response for signature status.
+
+#### Build Provenance / Attestation
+
+Check for SLSA provenance attestations or Sigstore signatures:
+
+**For npm packages**: Query `GET https://registry.npmjs.org/-/npm/v1/attestations/<package-name>@<new-version>`. If attestations are present, verify:
+
+- The `predicateType` matches a known SLSA provenance type
+- The `subject` digest matches the published package tarball
+- The build was performed by a trusted CI system (e.g., GitHub Actions)
+
+**For Maven packages**: Check if Sigstore `.sigstore` bundle files exist alongside the artifact at:
+`GET https://repo1.maven.org/maven2/<groupId-as-path>/<artifactId>/<version>/<artifactId>-<version>.jar.sigstore`
+
+The absence of provenance attestations on a high-profile package (>1000 weekly downloads for npm, or widely used in the ecosystem) is a moderate risk signal. Packages that previously published with provenance but stopped doing so are especially suspicious.
+
+#### Tag Mimicry on Forks
+
+Verify that the source repository URL in registry metadata points to the canonical repository:
+
+- Cross-reference the `repository` field from package metadata (Step 2c) with the GitHub API response.
+- If the repository URL points to a fork rather than the original project, flag as HIGH risk — this may indicate a hijacked tag on a lookalike fork.
+- Check that the repository owner matches known maintainers of the package.
+
+## Step 4 — Score and Classify Risk
+
+Assign a risk score (0-100) to each dependency using these guidelines:
+
+| Priority | Signal                                                                                                                                                                                                                                                     | Typical Impact |
+|----------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------|
+| Highest  | Known CRITICAL/HIGH CVEs in new version, confirmed typosquatting, malicious code in diff, build provenance mismatch (tag points to different code than published artifact), tag mimicry on fork                                                            | 60+ points     |
+| High     | Maintainer takeover pattern (publisher changed + old maintainers removed), dangerous install scripts, known compromised package, moved/recreated tag with different commit, provenance attestations removed from package that previously had them          | 20-40 points   |
+| Medium   | Low OpenSSF Scorecard (< 3), publisher changed (without full takeover), new install scripts, very recent publish (< 48h), obfuscated code in diff, unsigned lightweight tags on security-critical packages, absence of provenance on high-profile packages | 10-20 points   |
+| Lower    | Scorecard 3-5, version anomalies, missing source repository, long dormancy, rapid publishes, tag date slightly newer than commit (within 7 days), annotated but unsigned tags                                                                              | 5-10 points    |
+
+These are guidelines, not rigid formulas. Use judgment to combine signals — multiple medium signals can compound into a high-risk assessment.
+
+**Risk level thresholds**: 0-20 = LOW, 21-50 = MEDIUM, 51-80 = HIGH, 81-100 = CRITICAL.
+
+If no suspicious patterns are found, assign a score of 0-10 and risk level LOW. Most legitimate upgrades should score LOW.
+
+## Step 5 — Post Findings as PR Comment
+
+Post a structured report in the following format.
+
+**CRITICAL: Sanitize all `@` symbols before posting**
+
+GitHub enforces a maximum of 10 mentions per comment. Package names containing `@` (like `@hyland/core`, `@alfresco/js-api`) are interpreted as user/team mentions and trigger this limit, causing comment post failures.
+
+**Before generating the comment text**:
+
+1. Replace **every** `@` symbol in package names with `(at)` — e.g., `@hyland/core` → `(at)hyland/core`
+2. Apply this transformation to ALL occurrences: table cells, headings, inline code blocks, findings sections, reason columns
+3. This applies to both external and internal dependencies
+4. Do NOT skip this step — even if only a few packages are affected, GitHub counts all `@` symbols
+
+```txt
+## Supply Chain Security Review
+
+| Package | Ecosystem | Old Version | New Version | Risk Score | Risk Level |
+|---------|-----------|-------------|-------------|------------|------------|
+| example | npm       | 1.0.0       | 2.0.0       | 5          | LOW        |
+
+### Internal Dependencies (Skipped)
+
+| Package         | Ecosystem | Old Version | New Version | Reason                        |
+|-----------------|-----------|-------------|-------------|-------------------------------|
+| (at)hyland/core | npm       | 3.1.0       | 3.2.0       | Internal ((at)hyland/* scope) |
+
+_These dependencies are internal packages not available on public registries. External API checks were skipped._
+
+### Findings
+
+#### `<package-name-sanitized>` (<old-version> -> <new-version>) — <RISK_LEVEL>
+
+**Risk Score**: <score>/100
+
+<If findings exist, list each one:>
+
+**<Category>** (<severity>) — <title>
+<detailed explanation with specific evidence>
+
+<If no findings:>
+No suspicious patterns detected. Routine upgrade.
+
+---
+
+### Data Collection Notes
+
+<List any APIs that were unavailable or returned errors, so reviewers know what was and wasn't checked.>
+
+---
+
+### Overall Risk: <highest risk level across all dependencies>
+
+**Recommendation**: <approve|review|block>
+- **approve**: LOW risk, routine upgrade, no concerns found
+- **review**: MEDIUM risk, a human should examine specific findings before merging
+- **block**: HIGH/CRITICAL risk, should not be merged without security team review
+```
+
+## Step 6 — Apply Label and Review Status
+
+### 6a. Labels — order-independent update
+
+Determine the single target label for the highest risk level found: `security:low`, `security:medium`, or `security:high`.
+
+- Remove only the OTHER `security:*` labels (the ones that do NOT match the target) if present on the PR — this clears stale risk labels left by a previous review (e.g., after a new commit changed the risk level).
+- Add the target label if it is not already present.
+- **Never remove the target label itself.** Because the remove and add operations act on disjoint labels, the final state is correct regardless of which of the two safe-output calls (`add_labels` / `remove_labels`) happens to be processed first — do NOT rely on emitting them in a particular order, since that ordering is not guaranteed. (Do not, for example, remove all three `security:*` labels and then add the target back — if the removal is processed after the add, the target label would be stripped again, leaving the PR with no risk label at all.)
+
+### 6b. Dismiss stale reviews from this workflow
+
+Every review this workflow posts (see 6c) MUST start its body with the exact literal marker line `**Supply Chain Review**` as the first line, so future runs can recognize their own prior reviews.
+
+Before posting the new review:
+
+1. Fetch the PR's existing reviews (GitHub MCP `pull_requests` toolset).
+2. Identify any review that is authored by this workflow's actor AND whose body starts with the `**Supply Chain Review**` marker AND is still in the `CHANGES_REQUESTED` state — that is a stale review from an earlier run of this same workflow (e.g., posted before the flagged dependency was fixed, downgraded, or removed).
+3. For each such review, call `dismiss_pull_request_review` with its explicit numeric `review_id` (do NOT use `'auto'` — this repository may run other agentic workflows that also post as the same actor, and `'auto'` would dismiss their reviews too) and a justification of at least 20 characters (e.g., "Superseded by a newer Supply Chain Review run.").
+
+Do this even though `submit-pull-request-review` is also configured with `supersede-older-reviews: true` — that setting is best-effort and may not always recognize the prior review, so the explicit dismissal above is the reliable mechanism and must always be attempted.
+
+### 6c. Submit the review
+
+**Always submit a pull request review — in every invocation, with no exceptions.** This is not conditional on risk level. Submit a review even when there are no dependency changes, when all dependencies are internal, or when risk is LOW — skipping it would mean a stale `REQUEST_CHANGES` review from an earlier run is never replaced or dismissed.
+
+The review body must start with the `**Supply Chain Review**` marker line (see 6b), followed by the assessment:
+
+- If the highest risk level is HIGH or CRITICAL, submit the review as **request changes**, with a summary of the critical findings.
+- If the risk is MEDIUM, submit the review as a **comment**, noting that human review is recommended.
+- If the risk is LOW (including when there are no dependency changes, or all changed dependencies are internal), submit the review as a **comment**, summarizing that no concerns were found and the PR comment has the full detail.
+- **Never submit the review as an approval, under any circumstance** — this workflow only ever comments or requests changes; a human always makes the merge decision.
+
+## Important Guidelines
+
+- **Never approve or merge the PR** — all actions are advisory or blocking only. A human always makes the merge decision. Every review this workflow submits must use the comment or request-changes event — never the approve event.
+- **Always submit exactly one pull request review per invocation, regardless of outcome**, and always prefix its body with the `**Supply Chain Review**` marker — this is required so that a later run of this same workflow can find and dismiss it via `dismiss_pull_request_review` once it becomes stale (see Step 6b). Do not rely on `supersede-older-reviews` alone; it is best-effort.
+- **Never remove the `security:*` label matching the current risk level** when clearing stale labels — only remove the other ones, so the final label state is correct no matter which safe-output call is processed first (see Step 6a).
+- Be specific in findings — cite exact data (vulnerability ID, maintainer name, script content, file path, API response) rather than vague warnings.
+- For Maven packages, adapt npm-specific checks appropriately (e.g., install scripts become build plugin analysis, maintainer metadata may be limited).
+- When a package is a NEW dependency (no old version), pay extra attention to project health, name legitimacy, and install scripts since there is no historical baseline to compare against.
+- If data collection fails for all external APIs, still analyze the PR diff directly and provide the best assessment you can with available information, noting the limitations clearly.
+- For tag poisoning checks, not all packages will have provenance attestations — this is still an emerging practice. Weight the absence of attestations proportionally to the package's profile and criticality. Do not flag low-download utility packages for missing provenance.
+- When checking tag dates, allow for reasonable CI/CD pipeline delays (up to a few hours between tag push and publish). Only flag significant discrepancies (days or weeks).

.github/workflows/unit-test-workflow.yml

@@ -0,0 +1,144 @@
+name: "Unit Tests Workflow"
+
+on:
+  workflow_call:
+    secrets:
+      SONAR_TOKEN:
+        description: 'Token for SonarCloud analysis'
+        required: false
+    inputs:
+      base_ref:
+        description: 'Base branch for affected calculation'
+        required: false
+        type: string
+        default: 'develop'
+      full:
+        description: 'Run the full (non-affected) test suite for every project instead of only affected ones'
+        required: false
+        type: boolean
+        default: false
+
+jobs:
+  generate-affected-matrix:
+    name: "Generate affected matrix"
+    runs-on: ubuntu-latest
+    outputs:
+      unitMatrix: ${{ steps.set-matrix.outputs.unitMatrix }}
+      hasProjects: ${{ steps.set-matrix.outputs.hasProjects }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+      - name: Setup environment
+        id: setup-env
+        uses: ./.github/actions/setup
+        with:
+          cache-suffix: test-matrix
+      - name: Generate affected projects matrix
+        id: set-matrix
+        env:
+          BASE_REF: ${{ inputs.base_ref }}
+          FULL_RUN: ${{ inputs.full }}
+        run: |
+          if [ "$FULL_RUN" == "true" ]; then
+            echo "Running full (non-affected) test suite"
+            AFFECTED_UNIT=$(pnpm nx show projects --target=test --select=projects --plain --exclude=cli,stories,eslint-angular)
+          else
+            echo "Base ref is $BASE_REF"
+            AFFECTED_UNIT=$(pnpm nx show projects --affected --target=test --base=origin/$BASE_REF --head=HEAD --select=projects --plain --exclude=cli,stories,eslint-angular)
+          fi
+          echo "Affected projects for UNIT: $AFFECTED_UNIT"
+
+          if [ -z "$AFFECTED_UNIT" ]; then
+            echo "No affected projects found"
+            echo "hasProjects=false" >> $GITHUB_OUTPUT
+            echo "unitMatrix=[]" >> $GITHUB_OUTPUT
+          else
+            UNIT_MATRIX_JSON=$(echo "$AFFECTED_UNIT" | xargs -n1 | jq -R -s -c 'split("\n") | map(select(length > 0)) | map({ "project": . })')
+            echo "Matrix UNIT: $UNIT_MATRIX_JSON"
+            echo "hasProjects=true" >> $GITHUB_OUTPUT
+            echo "unitMatrix=$UNIT_MATRIX_JSON" >> $GITHUB_OUTPUT
+          fi
+      - name: Save nx cache
+        if: ${{ success() }}
+        uses: ./.github/actions/save-nx-cache
+        with:
+          cache-suffix: test-matrix
+
+  unit-tests:
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    needs: generate-affected-matrix
+    if: ${{ needs.generate-affected-matrix.outputs.hasProjects == 'true' }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include: ${{ fromJson(needs.generate-affected-matrix.outputs.unitMatrix) }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Setup environment
+        id: setup-env
+        uses: ./.github/actions/setup
+        with:
+          cache-suffix: test-${{ matrix.project }}
+          full-setup: 'false'
+      - name: Run unit tests for ${{ matrix.project }}
+        env:
+          NODE_OPTIONS: "--max-old-space-size=5120"
+        run: |
+          xvfb-run --auto-servernum pnpm nx run ${{ matrix.project }}:test
+      - name: Upload coverage report
+        if: ${{ always() }}
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: coverage-${{ matrix.project }}
+          path: coverage/${{ matrix.project }}/lcov.info
+          if-no-files-found: ignore
+          retention-days: 1
+      - name: Save nx cache
+        if: ${{ success() }}
+        uses: ./.github/actions/save-nx-cache
+        with:
+          cache-suffix: test-${{ matrix.project }}
+
+  sonarcloud:
+    name: "SonarCloud Scan"
+    runs-on: ubuntu-latest
+    needs: [generate-affected-matrix, unit-tests]
+    if: ${{ needs.generate-affected-matrix.outputs.hasProjects == 'true' && always() && needs.unit-tests.result != 'cancelled' }}
+    permissions:
+      contents: read
+      pull-requests: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+      - name: Download all coverage artifacts
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          pattern: coverage-*
+          path: coverage-reports
+      - name: Merge coverage reports
+        run: |
+          mkdir -p coverage
+          echo "Artifact structure:"
+          find coverage-reports -type f -name 'lcov.info' 2>/dev/null || true
+          for dir in coverage-reports/coverage-*/; do
+            project_name=$(basename "$dir" | sed 's/^coverage-//')
+            lcov_file=$(find "$dir" -name 'lcov.info' -type f | head -1)
+            if [ -n "$lcov_file" ]; then
+              mkdir -p "coverage/${project_name}"
+              cp "$lcov_file" "coverage/${project_name}/lcov.info"
+              echo "Copied coverage for ${project_name}"
+            fi
+          done
+          echo "Coverage files found:"
+          find coverage -name 'lcov.info' -type f
+      - name: SonarCloud Scan
+        uses: SonarSource/sonarqube-scan-action@22918119ff8e1ca75a623e15c8296b6ea4fbe28f # v8.2.1
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: https://sonarcloud.io

.gitignore

@@ -8,7 +8,6 @@ bundles
 dist
 tmp
 temp
-*.npmrc
 .history
 .ng_pkg_build/
 coverage/
@@ -24,3 +23,4 @@ nxcache
 .husky
 .cursor/rules/nx-rules.mdc
 .github/instructions/nx.instructions.md
+lib/eslint-angular/dist/

.husky/pre-commit

@@ -1,4 +1,5 @@
 #!/bin/sh
 
 export NODE_OPTIONS=--max_old_space_size=8192
+
 lint-staged

.npmrc

@@ -0,0 +1,5 @@
+# Fail on high severity vulnerabilities during audit
+audit-level=high
+
+# Use exact versions to prevent unexpected updates
+save-exact=true

.nvmrc

@@ -1 +1 @@
-24.11.1
+24.14.0

.storybook/main.ts

@@ -11,6 +11,9 @@ const config: StorybookConfig = {
     stories: ['lib/**/*.stories.ts'],
     features: {
         backgrounds: false
+    },
+    core: {
+        disableTelemetry: true
     }
 };
 

.stylelintrc.json

@@ -1,6 +1,12 @@
 {
   "extends": ["stylelint-config-standard-scss"],
   "rules": {
+    "custom-property-pattern": [
+      "^(mat-sys|mdc)",
+      {
+        "message": "Use only Angular Material system variables (--mat-sys-*, --mdc-*)"
+      }
+    ],
     "color-function-notation": "legacy",
     "alpha-value-notation": "number",
     "color-no-invalid-hex": true,

.vscode/extensions.json

@@ -0,0 +1,5 @@
+{
+  "recommendations": [
+    "meterian.meterian-heidi"
+  ]
+}

.vscode/settings.json

@@ -20,10 +20,8 @@
   "stylelint.enable": true,
   "css.validate": false,
   "scss.validate": false,
-  "stylelint.config": {
-      "extends": "./.stylelintrc.json"
-  },
-  "stylelint.configFile": ".stylelintrc.json",
+  "stylelint.configFile": "${workspaceFolder}/.stylelintrc.json",
+  "stylelint.configBasedir": "${workspaceFolder}",
   "stylelint.validate": [
     "css",
     "less",

README.md

@@ -21,6 +21,29 @@ for full details on what you may need to install before using ADF.
 - [Node Version Manager](docs/tutorials/nvm.md)
 - [CORS guide](ALFRESCOCORS.md)
 
+## Installation
+
+This project uses **pnpm** for package management with built-in supply chain attack protection.
+
+```bash
+pnpm install            # install all packages
+pnpm run add <package>  # add a new package (with security check)
+```
+
+### Supply Chain Security
+
+**Layer 1: pnpm script blocking**
+- All lifecycle scripts (postinstall, etc.) are blocked by default
+- Only trusted packages in `pnpm-workspace.yaml` can run scripts
+- Protects during `pnpm install` and `pnpm add`
+
+**Layer 2: Security database check**
+- `pnpm run add` checks packages against OSV and GitHub Advisory databases BEFORE installing
+- Pre-commit hook blocks commits containing known malicious packages
+
+**Layer 3: npm blocked**
+- Running `npm install` will fail - enforces pnpm usage
+
 ## Components
 
 You can find the sources for all ADF components in the [`lib`](/lib) folder.

cspell.json

@@ -145,7 +145,8 @@
     "Whitespaces",
     "xdescribe",
     "xsrf",
-    "zestiria"
+    "zestiria",
+    "webscript"
   ],
   "dictionaries": [
     "html",
@@ -156,7 +157,8 @@
   ],
   "ignorePaths": [
     "lib/{content-services,core,extensions,insights,process-services}/**/*.spec.ts",
-    "lib/{content-services,core,extensions,insights,process-services}/**/*.mock.ts"
+    "lib/{content-services,core,extensions,insights,process-services}/**/*.mock.ts",
+    "**/*.stories.ts"
   ],
   "ignoreRegExpList": [
     "(\"|'|`)((?:\\\\1|(?:(?!\\1).))*)\\1"

docs/README.md

@@ -323,7 +323,6 @@ for more information about installing and using the source code.
 | [Node Favorite directive](content-services/directives/node-favorite.directive.md) | Selectively toggles nodes as favorites. | [Source](../lib/content-services/src/lib/directives/node-favorite.directive.ts) |
 | [Node Lock directive](content-services/directives/node-lock.directive.md) | Locks or unlocks a node. | [Source](../lib/content-services/src/lib/directives/node-lock.directive.ts) |
 | [Node Restore directive](content-services/directives/node-restore.directive.md) | Restores deleted nodes to their original location. | [Source](../lib/content-services/src/lib/directives/node-restore.directive.ts) |
-| [Toggle Icon directive](content-services/directives/toggle-icon.directive.md) | Toggle icon on mouse or keyboard event for a selectable element. | [Source](../lib/content-services/src/lib/upload/directives/toggle-icon.directive.ts) |
 | [Version Compatibility Directive](content-services/directives/version-compatibility.directive.md) | Enables/disables components based on ACS version in use. | [Source](../lib/content-services/src/lib/version-compatibility/version-compatibility.directive.ts) |
 
 ### Dialogs
@@ -348,17 +347,10 @@ for more information about installing and using the source code.
 | [Permission Style model](content-services/models/permissions-style.model.md) | Sets custom CSS styles for rows of a Document List according to the item's permissions. | [Source](../lib/content-services/src/lib/document-list/models/permissions-style.model.ts) |
 | [Row Filter Model](content-services/models/row-filter.model.md) | Defines the Row Filter function used by the Document List Component. | [Source](../lib/content-services/document-list/data/row-filter.model.ts) |
 
-### Pipes
-
-| Name | Description | Source link |
-| ---- | ----------- | ----------- |
-| [File upload error pipe](content-services/pipes/file-upload-error.pipe.md) | Converts an upload error code to an error message. | [Source](../lib/content-services/src/lib/upload/pipes/file-upload-error.pipe.ts) |
-
 ### Services
 
 | Name | Description | Source link |
 | ---- | ----------- | ----------- |
-| [Agent Service](content-services/services/agent.service.md) | Manages agents in Content Services. | [Source](../lib/content-services/src/lib/agent/services/agent.service.ts) |
 | [Audit Service](content-services/services/audit.service.md) | Manages Audit apps and entries. | [Source](../lib/content-services/src/lib/audit/audit.service.ts) |
 | [Card View Content Update Service](content-services/services/card-view-content-update.service.md) | Manages Card View properties in the content services environment. Implements BaseCardViewContentUpdate. | [Source](../lib/content-services/src/lib/common/services/card-view-content-update.service.ts) |  |
 | [Category tree datasource service](content-services/services/category-tree-datasource.service.md) | Datasource service for category tree. | [Source](../lib/content-services/src/lib/category/services/category-tree-datasource.service.ts) |
@@ -374,7 +366,6 @@ for more information about installing and using the source code.
 | [Node Comments Service](content-services/services/node-comments.service.md) | Adds and retrieves comments for nodes in Content Services. | [Source](../lib/content-services/src/lib/node-comments/services/node-comments.service.ts) |
 | [Node permission dialog service](content-services/services/node-permission-dialog.service.md) | Displays dialogs to let the user set node permissions. | [Source](../lib/content-services/src/lib/permission-manager/services/node-permission-dialog.service.ts) |
 | [Node Permission service](content-services/services/node-permission.service.md) | Manages role permissions for content nodes. | [Source](../lib/content-services/src/lib/permission-manager/services/node-permission.service.ts) |
-| [Search Ai Service](content-services/services/search-ai.service.md) | Manages search AI in Content Services. | [Source](../lib/content-services/src/lib/search-ai/services/search-ai.service.ts) |
 | [Search filter service](content-services/services/search-filter.service.md) | Registers widgets for use with the Search Filter component. | [Source](../lib/content-services/src/lib/search/services/search-filter.service.ts) |
 | [Search Query Builder service](content-services/services/search-query-builder.service.md) | Stores information from all the custom search and faceted search widgets, compiles and runs the final search query. | [Source](../lib/content-services/src/lib/search/services/search-query-builder.service.ts) |
 | [Security Controls service](content-services/services/security-controls.service.md) | Manages security groups & marks in Content Services. | [Source](../lib/content-services/src/lib/security/services/security-controls-groups-marks-security.service.ts) |
@@ -574,3 +565,12 @@ Contains all custom rules used by ESLint.
 <!--eslint-angular end-->
 
 [(Back to Contents)](#contents)
+
+## Notes
+
+### Knowledge Discovery removal (v9.0.0)
+
+The Knowledge Discovery components, services, and APIs have been removed as of version 9.0.0.
+The integrated Knowledge Discovery features have been replaced with a section in the side navigation panel containing a link to the standalone Knowledge Discovery UI application in higher level apps such as ACA and ADW.
+
+If you were using those features, please consider cleaning Local Storage in your browser as *aiReferences* entry may remain.

docs/ci-commands.md

@@ -0,0 +1,62 @@
+# CI Commands and Labels
+
+Reference for flags and labels that control CI behavior on pull requests.
+
+## PR Title Flags
+
+Include these flags anywhere in the **PR title** to modify CI behavior.
+
+| Flag | Effect |
+|------|--------|
+| `[ci:force]` | Skips the PR approval check, allowing the full pipeline to run without an approved review. Useful for testing CI changes on draft PRs. |
+
+Example: `[AAE-12345] Fix pagination component [ci:force]`
+
+## Commit Message Flags
+
+Include these flags in a **commit message** to modify CI behavior.
+
+| Flag | Effect |
+|------|--------|
+| `[ci:force]` | Skips the PR approval check (same as PR title flag). |
+| `[affected:*]` | Forces all Nx targets to run against all projects, ignoring the affected calculation. Equivalent to `--all`. |
+
+## PR Labels
+
+Labels applied to the PR that affect CI behavior.
+
+| Label | Effect |
+|-------|--------|
+| `do not merge` | Blocks the PR from passing the finalize check. CI will fail until the label is removed. |
+| `next version` | Same as above - blocks the PR from merging. Used to hold PRs for the next release cycle. |
+
+## Automatic Skip Conditions
+
+The approval check is automatically skipped for:
+
+- **Scheduled runs** (`schedule` event)
+- **Workflow dispatch** (`workflow_dispatch` event)
+- **Dependabot PRs** (actor is `dependabot[bot]`)
+- **Build bot PRs** (actor is `alfresco-build`)
+- **Devel flag** (when `devel: true` is passed via `workflow_call`)
+
+## Path-Based Filtering
+
+PRs that only modify non-code files skip the build, test, and lint jobs entirely. Files considered non-code:
+
+- Markdown files (`*.md`)
+- Documentation (`docs/`)
+- `LICENSE`, `NOTICE`
+- `.editorconfig`, `.gitattributes`
+- `.github/CODEOWNERS`, `.github/dependabot.yml`
+
+## PR Size Check
+
+Every PR gets an automatic size classification displayed in the job summary:
+
+| Size | Criteria |
+|------|----------|
+| **S** | < 200 total changes and < 10 files |
+| **M** | 200-500 total changes or 10-20 files |
+| **L** | 500-1000 total changes or 20-30 files |
+| **XL** | > 1000 total changes or > 30 files (warning annotation added) |

docs/content-services/components/alfresco-viewer.component.md

@@ -92,8 +92,8 @@ See the [Custom layout](#custom-layout) section for full details of all availabl
 | showRightSidebar     | `boolean`             | false         | Toggles right sidebar visibility. Requires `allowRightSidebar` to be set to `true`.                                         |
 | showToolbar          | `boolean`             | true          | Hide or show the toolbar                                                                                                    |
 | showViewer           | `boolean`             | true          | Hide or show the viewer                                                                                                     |
-| sidebarLeftTemplate  | `TemplateRef<any>`    | null          | The template for the left sidebar. The template context contains the loaded node data.                                      |
-| sidebarRightTemplate | `TemplateRef<any>`    | null          | The template for the right sidebar. The template context contains the loaded node data.                                     |
+| sidebarLeftTemplate  | `TemplateRef<unknown>`    | null          | The template for the left sidebar. The template context contains the loaded node data.                                      |
+| sidebarRightTemplate | `TemplateRef<unknown>`    | null          | The template for the right sidebar. The template context contains the loaded node data.                                     |
 | versionId            | `string`              | null          | Version Id of the file to load.                                                                                             |
 
 ### Events

docs/content-services/components/content-metadata-card.component.md

@@ -417,7 +417,8 @@ Once you have enabled this feature you will be able to double click on your meta
            "exif:exif": [ "exif:pixelXDimension", "exif:pixelYDimension"]
        }
    },
-   "copy-to-clipboard-action": true
+   "copy-to-clipboard-action": true,
+   "display-copy-to-clipboard-icon": true
 }
 ```
 

docs/content-services/components/file-uploading-dialog.component.md

@@ -40,4 +40,3 @@ This component should be used in combination with the
 
 -   [Upload button component](upload-button.component.md)
 -   [Upload drag area component](upload-drag-area.component.md)
--   [File upload error pipe](../pipes/file-upload-error.pipe.md)

docs/content-services/components/search-chip-autocomplete-input.component.md

@@ -2,7 +2,7 @@
 Title: Search Chip Autocomplete Input component
 Added: v6.1.0
 Status: Active
-Last reviewed: 2023-06-13
+Last reviewed: 2026-09-09
 ---
 
 # [Search Chip Autocomplete Input component](../../../lib/content-services/src/lib/search/components/search-chip-autocomplete-input/search-chip-autocomplete-input.component.ts "Defined in search-chip-autocomplete-input.component.ts")
@@ -31,6 +31,7 @@ Represents an input with autocomplete options.
 | preselectedOptions         | `AutocompleteOption[]`                                                 | [] | Options which are selected from start                                                                                                         |
 | onReset$                   | [`Observable`](https://rxjs.dev/guide/observable)`<void>`              |    | Observable that will listen to any reset event causing component to clear the chips and input                                                 |
 | allowOnlyPredefinedValues  | boolean                                                                | true | A flag that indicates whether it is possible to add a value not from the predefined ones                                                      |
+| loading                    | [`Observable`](https://rxjs.dev/guide/observable)`<boolean>`          | `of(false)` | Stream driving a loading spinner shown inside the autocomplete panel while a new batch of options is being fetched. While it emits `true`, the options list is replaced by the spinner. |
 | placeholder                | string                                                                 | 'SEARCH.FILTER.ACTIONS.ADD_OPTION' | Placeholder which should be displayed in input.                                                                                               |
 | compareOption              | (option1: AutocompleteOption, option2: AutocompleteOption) => boolean  |  | Function which is used to selected options with all options so it allows to detect which options are already selected.                        |
 | formatChipValue            | (option: string) => string                                             |  | Function which is used to format custom typed options.                                                                                        |

docs/content-services/components/search-filter-autocomplete-chips.component.md

@@ -2,7 +2,7 @@
 Title: Search Filter Autocomplete Chips component
 Added: v6.1.0
 Status: Active
-Last reviewed: 2023-06-13
+Last reviewed: 2026-09-09
 ---
 
 # [Search Filter Autocomplete Chips component](../../../lib/content-services/src/lib/search/components/search-filter-autocomplete-chips/search-filter-autocomplete-chips.component.ts "Defined in search-filter-autocomplete-chips.component.ts")
@@ -39,18 +39,61 @@ Implements a [search widget](../../../lib/content-services/src/lib/search/models
 
 ### Settings
 
-| Name | Type     | Description                                                                                                        |
-| ---- |----------|--------------------------------------------------------------------------------------------------------------------|
-| field | `string`   | Field to apply the query to. Required value                                                                        |
-| autocompleteOptions | `AutocompleteOption[]` | Predefined options for autocomplete                                                                                |
-| allowOnlyPredefinedValues | `boolean` | Specifies whether the input values should only be from predefined                                                  |
-| allowUpdateOnChange | `boolean` | Enable/Disable the update fire event when text has been changed. By default is true                                |
-| hideDefaultAction | `boolean` | Show/hide the widget actions. By default is false |
+| Name                      | Type                   | Description                                                                                                                                   |
+| ------------------------- | ---------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
+| field                     | `string`               | Field to apply the query to. Required value. See [Supported fields](#supported-fields) for the values that enable dynamically fetched options |
+| label                     | `string`               | Label displayed for the autocomplete input                                                                                                    |
+| autocompleteOptions       | `AutocompleteOption[]` | Predefined options for autocomplete                                                                                                           |
+| allowOnlyPredefinedValues | `boolean`              | Specifies whether the input values should only be from predefined                                                                             |
+| allowUpdateOnChange       | `boolean`              | Enable/Disable the update fire event when text has been changed. By default is true                                                           |
+| hideDefaultAction         | `boolean`              | Show/hide the widget actions. By default is false                                                                                             |
+
+### Supported fields
+
+Besides using static `autocompleteOptions`, the `field` value can be set to one of the following to fetch options dynamically from the repository as the user types:
+
+| `field` value   | Source of options                                           |
+| --------------- | ----------------------------------------------------------- |
+| `TAG`           | Existing tags                                               |
+| `cm:categories` | Existing categories                                         |
+| `SITE`          | Available sites (plus any predefined `autocompleteOptions`) |
+| `ANCESTOR`      | Folders matching the typed name (parent folder search)      |
+
+While a batch of options is being fetched for any of these fields, a loading spinner is shown inside the autocomplete panel until the results arrive. Only the results of the latest request are applied, so quickly changing the input does not display stale options.
+
 ## Details
 
 This component allows the user to choose filter options for the search query.
 See the [Search Chip Autocomplete Input component](search-chip-autocomplete-input.component.md) for more details.
 
+### Parent folder search
+
+Set `field` to `ANCESTOR` to let the user search for and select a parent folder to scope the search to. The following example also uses `label` to set the input label:
+
+```json
+{
+    "search": {
+        "categories": [
+            {
+                "id": "parentFolder",
+                "name": "Parent folder",
+                "enabled": true,
+                "component": {
+                    "selector": "autocomplete-chips",
+                    "settings": {
+                        "allowUpdateOnChange": false,
+                        "hideDefaultAction": true,
+                        "allowOnlyPredefinedValues": false,
+                        "field": "ANCESTOR",
+                        "label": "Parent folder"
+                    }
+                }
+            }
+        ]
+    }
+}
+```
+
 ## See also
 
 -   [Search Configuration Guide](../../user-guide/search-configuration-guide.md)

docs/content-services/components/search-text.component.md

@@ -46,9 +46,9 @@ Implements a [search widget](../../../lib/content-services/src/lib/search/models
 | field | string | Field to apply the query fragment to. Required value |
 | pattern | string | Regular expression pattern to restrict the format of the input text |
 | placeholder | string | Text displayed in the widget when the input string is empty |
-| searchSuffix | string | Text to append always in the search of a string |
-| searchPrefix | string | Text to prepend always in the search of a string |
-| allowUpdateOnChange | `boolean` | Enable/Disable the update fire event when text has been changed. By default is true. |
+| searchSuffix | string | Text to append in the search of a string. Only applied when wildcard matching is enabled (the `search-wildcards-enabled` app config flag, default `true`). |
+| searchPrefix | string | Text to prepend in the search of a string. Only applied when wildcard matching is enabled (the `search-wildcards-enabled` app config flag, default `true`). |
+| allowUpdateOnChange | `boolean` | Enable/Disable firing the search update when the text changes. Defaults to `false`; when disabled the search runs only when the user submits the value. |
 | hideDefaultAction | boolean | Show/hide the widget actions. By default is false. |
 
 ## Details

docs/content-services/components/tree.component.md

@@ -18,7 +18,6 @@ Shows the nodes in tree structure, each node containing children is collapsible/
     [displayName]="'Tree display name'"
     [loadMoreSuffix]="'subnodes'"
     [emptyContentTemplate]="emptyContentTemplate"
-    [nodeActionsMenuTemplate]="nodeActionsMenuTemplate"
     (paginationChanged)="onPaginationChanged($event)">
 </adf-tree>
 ```
@@ -34,7 +33,6 @@ Shows the nodes in tree structure, each node containing children is collapsible/
 | emptyContentTemplate | [`TemplateRef`](https://angular.io/api/core/TemplateRef)`<any>` |  | [TemplateRef](https://angular.io/api/core/TemplateRef) to provide empty template when no nodes are loaded |
 | expandIcon | `string` | "chevron_right" | Icon shown when node has children and is collapsed. By default set to chevron_right |
 | loadMoreSuffix | `string` |  | Load more suffix for load more button |
-| nodeActionsMenuTemplate | [`TemplateRef`](https://angular.io/api/core/TemplateRef)`<any>` |  | [TemplateRef](https://angular.io/api/core/TemplateRef) to provide context menu items for context menu displayed on each row |
 | selectableNodes | `boolean` | false | Variable defining if tree nodes should be selectable. By default set to false |
 | stickyHeader | `boolean` | false | Variable defining if tree header should be sticky. By default set to false |
 | contextMenuOptions | `any[]` |  | Array of context menu options which should be displayed for each row. |
@@ -88,7 +86,6 @@ First step is to provide necessary input value.
     [loadMoreSuffix]="'subnodes'"
     [selectableNodes]="true"
     [emptyContentTemplate]="emptyContentTemplate"
-    [nodeActionsMenuTemplate]="nodeActionsMenuTemplate"
     (paginationChanged)="onPaginationChanged($event)">
 </adf-tree>
 ```

docs/content-services/components/upload-button.component.md

@@ -86,4 +86,3 @@ export class MyComponent {
 ## See also
 
 -   [Upload Version Button component](upload-version-button.component.md)
--   [File upload error pipe](../pipes/file-upload-error.pipe.md)

docs/content-services/components/upload-drag-area.component.md

@@ -141,4 +141,3 @@ This could be either a selection of 2 or more files, or a folder with multiple e
 
 -   [File uploading dialog component](file-uploading-dialog.component.md)
 -   [Upload button component](upload-button.component.md)
--   [File upload error pipe](../pipes/file-upload-error.pipe.md)

docs/content-services/directives/inherited-button.directive.md

@@ -13,7 +13,6 @@ Update the current node by adding/removing the inherited permissions.
 
 ```html
     <button mat-raised-button
-            color="primary"
             adf-inherit-permission [nodeId]="nodeId"
             (updated)="onUpdatedPermissions($node)">PERMISSION</button>
 ```

docs/content-services/directives/toggle-icon.directive.md

@@ -1,27 +0,0 @@
----
-Title: Toggle Icon directive
-Added: v2.0.0
-Status: Active
-Last reviewed: 2019-04-09
----
-
-# [Toggle Icon directive](../../../lib/content-services/src/lib/upload/directives/toggle-icon.directive.ts "Defined in toggle-icon.directive.ts")
-
-Toggle icon on mouse or keyboard event for a selectable element.
-
-## Example Usage
-
-```html
-<button mat-icon-button adf-toggle-icon #toggle="toggleIcon">
-    <mat-icon *ngIf="!toggle.isToggled">
-        check_circle
-    </mat-icon>
-
-    <mat-icon *ngIf="toggle.isToggled">
-        remove_circle
-    </mat-icon>
-    <button></button>
-</button>
-```
-
-## Class members

docs/content-services/interfaces/search-widget.interface.md

@@ -115,8 +115,8 @@ that will be used when performing the actual query.
 Every query fragment is stored and retrieved using its widget `id`.
 It is your responsibility to format the query correctly.
 
-Once your change to the query is finished, update the context and call the `update` method
-to inform other components about the change:
+Once your change to the query is finished, update the context and call the `execute` method
+to rebuild and run the query so the results reflect your change:
 
 ```ts
 @Component({...})
@@ -126,12 +126,15 @@ export class MyComponent implements SearchWidget, OnInit {
 
     onUIChanged() {
         this.context.queryFragments[this.id] = `some query`;
-        this.context.update();
+        void this.context.execute();
     }
 
 }
 ```
 
+> **Note:** Earlier versions called `this.context.update()` here. The `update()` method and the
+> `updated` stream have been removed; call `this.context.execute()` directly instead.
+
 When executed, your fragment will be injected into the resulting query based on the category order in the application configuration file.
 
 ```text

docs/content-services/pipes/file-upload-error.pipe.md

@@ -1,34 +0,0 @@
----
-Title: File upload error pipe
-Added: v3.0.0
-Status: Active
-Last reviewed: 2019-01-17
----
-
-# [File upload error pipe](../../../lib/content-services/src/lib/upload/pipes/file-upload-error.pipe.ts "Defined in file-upload-error.pipe.ts")
-
-Converts an upload error code to an error message.
-
-## Basic Usage
-
-<!-- {% raw %} -->
-
-```HTML
-<div>
-    Upload failed: {{ errorCode | adfFileUploadError }}
-</div>
-```
-
-<!-- {% endraw %} -->
-
-## Details
-
-The pipe takes an upload error code (eg, from the `error` event of one of the
-upload components) and converts it to a human-readable message. The message is
-automatically translated to the user's chosen language.
-
-## See also
-
--   [File uploading dialog component](../components/file-uploading-dialog.component.md)
--   [Upload drag area component](../components/upload-drag-area.component.md)
--   [Upload button component](../components/upload-button.component.md)

docs/content-services/services/agent.service.md

@@ -1,27 +0,0 @@
----
-Title: Agent service
-Added: v7.0.0-alpha.3
-Status: Active
-Last reviewed: 2024-07-12
----
-
-# [Agent service](../../../lib/content-services/src/lib/agent/services/agent.service.ts "Defined in agent.service.ts")
-
-Manages agents in Content Services.<br/>
-
-<b>In order to use this service, you need to have the HX Insights Connector (additional ACS module) installed.</b>
-
-## Class members
-
-### Methods
-
--   **getAgents**(): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`AgentPaging`](../../../lib/js-api/src/api/content-rest-api/docs/AgentsApi.md#agentpaging)`>`<br/>
-    Gets all agents.
-    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`AgentPaging`](../../../lib/js-api/src/api/content-rest-api/docs/AgentsApi.md#agentpaging)`>` - AgentPaging object containing the agents.
-
-## Details
-
-See the
-[Agents API](../../../lib/js-api/src/api/content-rest-api/docs/AgentsApi.md) for more information about the types returned by [Agent
-service](agent.service.md) methods and for the implementation of the REST API the service is
-based on.

docs/content-services/services/custom-resources.service.md

@@ -23,11 +23,12 @@ Manages Document List information that is specific to a user.
     -   _node:_ `any`  - Node object
     -   _nodeId:_ `string`  - ID of the node object
     -   **Returns** `string` - ID value
--   **getRecentFiles**(personId: `string`, pagination: [`PaginationModel`](../../../lib/core/src/lib/models/pagination.model.ts), filters?: `string[]`): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodePaging`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/content-rest-api/docs/NodePaging.md)`>`<br/>
+-   **getRecentFiles**(personId: `string`, pagination: [`PaginationModel`](../../../lib/core/src/lib/models/pagination.model.ts), filters?: `string[]`, includeFields: `string[]` = `[]`): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodePaging`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/content-rest-api/docs/NodePaging.md)`>`<br/>
     Gets files recently accessed by a user.
     -   _personId:_ `string`  - ID of the user
     -   _pagination:_ [`PaginationModel`](../../../lib/core/src/lib/models/pagination.model.ts)  - Specifies how to paginate the results
     -   _filters:_ `string[]`  - (Optional) Specifies additional filters to apply (joined with **AND**)
+    -   _includeFields:_ `string[]`  - List of data field names to include in the results
     -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodePaging`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/content-rest-api/docs/NodePaging.md)`>` - List of nodes for the recently used files
 -   **hasCorrespondingNodeIds**(nodeId: `string`): `boolean`<br/>
     Does the well-known alias have a corresponding node ID?

docs/content-services/services/document-list.service.md

@@ -2,7 +2,7 @@
 Title: Document List service
 Added: v2.0.0
 Status: Active
-Last reviewed: 2019-01-16
+Last reviewed: 2026-06-16
 ---
 
 # Document List Service
@@ -21,10 +21,11 @@ import { DocumentListService } from '@alfresco/adf-core';
 
 ### Events
 
-| Name              | Description                                     |
-|-------------------|-------------------------------------------------|
-| `reload$`         | Emits when the document list should be reloaded |
-| `resetSelection$` | Emits when the selection should be reset        |
+| Name              | Description                                                                                  |
+|-------------------|----------------------------------------------------------------------------------------------|
+| `reload$`         | Emits when the document list should be reloaded.                                             |
+| `resetSelection$` | Emits when the selection should be reset.                                                    |
+| `reloadSilently$` | Emits when the document list should be reloaded **without** resetting the current selection. |
 
 ### Methods
 
@@ -32,6 +33,8 @@ import { DocumentListService } from '@alfresco/adf-core';
     Reloads the document list.
 - **resetSelection**(): `void`<br/>
     Resets the selection.
+- **reloadSilently**(): `void`<br/>
+    Reloads the document list **without** resetting the current selection.
 -   **copyNode**(nodeId: `string`, targetParentId: `string`): `Observable<NodeEntry>`<br/>
     Copy a node to destination node
     -   _nodeId:_ `string`  - The id of the node to be copied

docs/content-services/services/search-ai.service.md

@@ -1,43 +0,0 @@
----
-Title: Search Ai service
-Added: v7.0.0-alpha.3
-Status: Active
-Last reviewed: 2024-07-12
----
-
-# [Search Ai service](../../../lib/content-services/src/lib/search-ai/services/search-ai.service.ts "Defined in search-ai.service.ts")
-
-Manages search AI in Content Services.
-
-<b>In order to use this service, you need to have the HX Insights Connector (additional ACS module) installed.</b>
-
-## Class members
-
-### Methods
-
--   **updateSearchAiInputState**(state: `SearchAiInputState`): `void`<br/>
-    Update the state of the search AI input.
-    -   _state:_ `SearchAiInputState` - The new state of the search AI input.
--   **ask**(question: [`QuestionRequest`](../../../lib/js-api/src/api/content-rest-api/docs/SearchAiApi.md#questionrequest)): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`QuestionModel`](../../../lib/js-api/src/api/content-rest-api/docs/SearchAiApi.md#questionmodel)`>`<br/>
-    Ask a question to the AI.
-    -   _question:_ [`QuestionRequest`](../../../lib/js-api/src/api/content-rest-api/docs/SearchAiApi.md#questionrequest) - The question to ask.
-    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`QuestionModel`](../../../lib/js-api/src/api/content-rest-api/docs/SearchAiApi.md#questionmodel)`>` - QuestionModel object containing information about questions.
--   **getAnswer**(questionId: `string`): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`AiAnswerEntry`](../../../lib/js-api/src/api/content-rest-api/docs/SearchAiApi.md#aianswerentry)`>`<br/>
-    Get an answer to specific question.
-    -   _questionId:_ `string` - The ID of the question to get an answer for.
-    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`AiAnswerEntry`](../../../lib/js-api/src/api/content-rest-api/docs/SearchAiApi.md#aianswerentry)`>` - AiAnswerEntry object containing the answer.
--   **getConfig**(): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`KnowledgeRetrievalConfigEntry`](../../../lib/js-api/src/api/content-rest-api/docs/SearchAiApi.md#knowledgeretrievalconfigentry)`>`<br/>
-    Get the knowledge retrieval configuration.
-    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`KnowledgeRetrievalConfigEntry`](../../../lib/js-api/src/api/content-rest-api/docs/SearchAiApi.md#knowledgeretrievalconfigentry)`>` - KnowledgeRetrievalConfigEntry object containing the configuration.
--   **checkSearchAvailability**(selectedNodesState: `SelectionState`, maxSelectedNodes: `number`): `string`<br/>
-    Check if using of search is possible (if all conditions are met).
-    -   _selectedNodesState:_ `SelectionState` - information about selected nodes.
-    -   _maxSelectedNodes:_ `number` - max number of selected nodes. Default 100.
-    -   **Returns** `string` - string with error if any condition is not met, empty string otherwise.
-
-## Details
-
-See the
-[Search Ai API](../../../lib/js-api/src/api/content-rest-api/docs/SearchAiApi.md) for more information about the types returned by [Search Ai
-service](search-ai.service.md) methods and for the implementation of the REST API the service is
-based on.

docs/content-services/services/search-query-builder.service.md

@@ -2,7 +2,7 @@
 Title: Search Query Builder service 
 Added: v2.3.0
 Status: Active
-Last reviewed: 2019-03-19
+Last reviewed: 2026-06-29
 ---
 
 # [Search Query Builder service](../../../lib/content-services/src/lib/search/services/search-query-builder.service.ts "Defined in search-query-builder.service.ts")
@@ -11,6 +11,17 @@ Stores information from all the custom search and faceted search widgets, compil
 
 ## Class members
 
+### Properties
+
+| Name                    | Type                     | Description                                                                                                                                                                                                     |
+| ----------------------- | ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| userQuery               | `string`                 | The raw query string typed by the user. Setting it stores the value, records it in `filterRawParams` and recomputes `parsedQuery` according to the current `searchMode`.                                        |
+| parsedQuery             | `string` (read-only)     | The query derived from `userQuery`. In `regular` mode the user terms are expanded against the configured fields (see `app:fields`) and optionally wildcarded; in `formula` mode it is identical to `userQuery`. |
+| searchMode              | `'regular' \| 'formula'` | Controls how `userQuery` is turned into `parsedQuery`. `regular` (default) parses the user input into a field query; `formula` uses the user input verbatim as an AFTS expression.                              |
+| selectedConfigurationId | `string`                 | Id of the currently active search configuration. Setting it also records the value in `filterRawParams`.                                                                                                        |
+| encodedQuery            | `string` (read-only)     | The Base64-encoded `filterRawParams`, produced by `encodeQuery()` and written to the `q` route query parameter.                                                                                                 |
+| wildcardsEnabled        | `boolean` (read-only)    | Reads the `search-wildcards-enabled` app config flag (default `true`). When enabled, query terms are suffixed with `*` so partial matches are returned.                                                         |
+
 ### Methods
 
 -   **addFilterQuery**(query: `string`)<br/>
@@ -25,9 +36,10 @@ Stores information from all the custom search and faceted search widgets, compil
     -   **Returns** `SearchRequest` - The finished query
 -   **encodeQuery**()<br/>
     Encodes query shards stored in `filterRawParams` property.    
--   **execute**(queryBody?: `SearchRequest`)<br/>
-    Builds and executes the current query.
-    -   _queryBody:_ `SearchRequest`  - (Optional)
+-   **execute**(updateQueryParams: `boolean` = `true`, queryBody?: `SearchRequest`)<br/>
+    Builds and executes the current query, then emits the result on the `executed` stream.
+    -   _updateQueryParams:_ `boolean`  - (Optional) When `true` (default) the encoded query is written to the `q` route query parameter. Pass `false` to execute without updating the URL.
+    -   _queryBody:_ `SearchRequest`  - (Optional) Pre-built query to execute instead of building one from the current state.
 -   **getDefaultConfiguration**(): [`SearchConfiguration`](../../../lib/content-services/src/lib/search/models/search-configuration.interface.ts)`|undefined`<br/>
 
     -   **Returns** [`SearchConfiguration`](../../../lib/content-services/src/lib/search/models/search-configuration.interface.ts)`|undefined` - 
@@ -70,6 +82,11 @@ Stores information from all the custom search and faceted search widgets, compil
 
     -   **Returns** `boolean` - 
 
+-   **isOperator**(input: `string`): `boolean`<br/>
+    Checks whether the supplied string is a logical `AND` or `OR` operator. Used when parsing a multi-word user query in `regular` search mode.
+    -   _input:_ `string`  - String to check
+    -   **Returns** `boolean` - `true` if the trimmed string is `AND` or `OR`, otherwise `false`
+
 -   **loadConfiguration**(): [`SearchConfiguration`](../../../lib/content-services/src/lib/search/models/search-configuration.interface.ts)<br/>
 
     -   **Returns** [`SearchConfiguration`](../../../lib/content-services/src/lib/search/models/search-configuration.interface.ts) -
@@ -86,7 +103,10 @@ Stores information from all the custom search and faceted search widgets, compil
     Removes an existing bucket from a field.
     -   _field:_ [`FacetField`](../../../lib/content-services/src/lib/search/models/facet-field.interface.ts)  - The target field
     -   _bucket:_ [`FacetFieldBucket`](../../../lib/content-services/src/lib/search/models/facet-field-bucket.interface.ts)  - Bucket to remove
--   **resetToDefaults**()<br/>
+-   **resetToDefaults**(withNavigate: `boolean` = `false`, resetUserQuery: `boolean` = `true`)<br/>
+    Resets the query builder back to the default search configuration.
+    -   _withNavigate:_ `boolean`  - (Optional) When `true`, clears the `q` route query parameter while resetting. Defaults to `false`.
+    -   _resetUserQuery:_ `boolean`  - (Optional) When `true` (default), the `userQuery` and its parsed form are cleared. Pass `false` to keep the current user query while resetting the rest of the options.
 
 -   **search**(queryBody: `SearchRequest`): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`ResultSetPaging`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/search-rest-api/docs/ResultSetPaging.md)`>`<br/>
 
@@ -97,14 +117,13 @@ Stores information from all the custom search and faceted search widgets, compil
 
     -   _scope:_ `RequestScope`  - 
 
--   **update**(queryBody?: `SearchRequest`)<br/>
-    Builds the current query and triggers the `updated` event.
-    -   _queryBody:_ `SearchRequest`  - (Optional)
 -   **updateSearchQueryParams**() <br/>
     Encodes the query and navigates to existing search route adding encoded query as a search param.
--   **updateSelectedConfiguration**(index: `number`)<br/>
-
-    -   _index:_ `number`  -
+-   **updateSelectedConfiguration**(id: `string`, resetFilters: `boolean` = `true`, shouldExecute: `boolean` = `true`)<br/>
+    Switches the active search configuration to the one matching the supplied id (only relevant when multiple configurations are provided).
+    -   _id:_ `string`  - Id of the configuration to select
+    -   _resetFilters:_ `boolean`  - (Optional) When `true` (default), the current search options are reset before applying the new configuration. Pass `false` to keep them.
+    -   _shouldExecute:_ `boolean`  - (Optional) When `true` (default), the query is executed immediately after switching configuration.
 
 ## Details
 
@@ -127,10 +146,6 @@ You can use custom widgets to populate and edit the following parts of the resul
 ```ts
 constructor(queryBuilder: SearchQueryBuilderService) {
 
-    queryBuilder.updated.subscribe(query => {
-        this.queryBuilder.execute();
-    });
-
     queryBuilder.executed.subscribe(data => {
         this.onDataLoaded(data);
     });
@@ -138,6 +153,29 @@ constructor(queryBuilder: SearchQueryBuilderService) {
 }
 ```
 
+To run a search, build the query state (for example by setting `userQuery` or by letting a
+search widget update `queryFragments`) and then call `execute()`. The result is delivered
+through the `executed` stream.
+
+```ts
+this.queryBuilder.userQuery = 'invoice';
+void this.queryBuilder.execute();
+```
+
+> **Note:** Earlier versions exposed an `updated` stream and an `update()` method that built the
+> query and emitted it so that a subscriber could call `execute()`. Both have been removed; build
+> the query state and call `execute()` directly instead.
+
+### Search modes
+
+The builder supports two search modes, selected through the `searchMode` property:
+
+-   **regular** (default) - the text in `userQuery` is treated as user input and parsed into a
+    field query. The query is split into terms, each term is matched against the fields listed in
+    the `app:fields` search configuration entry (falling back to `cm:name`), and a `*` wildcard is
+    appended when wildcards are enabled. Bare `AND`/`OR` words are preserved as operators.
+-   **formula** - the text in `userQuery` is used verbatim as an [AFTS](https://docs.alfresco.com/content-services/latest/develop/search-api/) expression, allowing callers that already build their own query syntax to bypass parsing.
+
 > **Note:** From ADF 3.0.0, the query contains the `"facetFormat": "V2"` parameter so that all the responses have the same structure whether they come from search queries containing facetFields, facetQueries, grouped facetQueries or facetIntervals.
 
 ## Runtime Configuration

docs/core/components/card-view.component.md

@@ -109,6 +109,7 @@ Defining properties from Typescript:
 | Name | Type | Default value | Description |
 | ---- | ---- | ------------- | ----------- |
 | copyToClipboardAction | `boolean` | true | Toggles whether or not to enable copy to clipboard action. |
+| displayCopyToClipboardIcon | `boolean` | true | Toggles whether or not to show copy to clipboard icon. |
 | displayClearAction | `boolean` | true | Toggles whether or not to display clear action. |
 | displayEmpty | `boolean` | true | Toggles whether or not to show empty items in non-editable mode. |
 | displayNoneOption | `boolean` | true | Toggles whether or not to display none option. |
@@ -193,6 +194,7 @@ const textItemProperty = new CardViewTextItemModel(options);
 | clickable | boolean | false | Toggles whether the property responds to clicks |
 | clickableCallBack | function | null | Function to execute when click the element |
 | copyToClipboardAction | `boolean` | true | Toggles whether or not to enable copy to clipboard action. |
+| displayCopyToClipboardIcon | `boolean` | true | Toggles whether or not to show copy to clipboard icon. |
 | useChipsForMultiValueProperty | `boolean` | true | Toggles whether or not to enable chips for multivalued properties. |
 | multiValueSeparator | `string` | ',' | String separator between multi-value property items. |
 | icon | string |  | The material icon to show beside the item if it is clickable |
@@ -249,6 +251,7 @@ const dateItemProperty = new CardViewDateItemModel(options);
 | label\* | string |  | Item label |
 | value\* | any |  | The original data value for the item |
 | copyToClipboardAction | `boolean` | true | Toggles whether or not to enable copy to clipboard action. |
+| displayCopyToClipboardIcon | `boolean` | true | Toggles whether or not to show copy to clipboard icon. |
 | key\* | string |  | Identifying key (important when editing the item) |
 | default | any |  | The default value to display if the value is empty |
 | displayValue\* | any |  | The value to display |

docs/core/components/datatable.component.md

@@ -351,7 +351,6 @@ while the data for the table is loading:
             <!--Add your custom loading template here-->
             <mat-progress-spinner
                 class="adf-document-list-loading-margin"
-                [color]="'primary'"
                 [mode]="'indeterminate'">
             </mat-progress-spinner>
         </ng-template>

docs/core/components/header.component.md

@@ -14,9 +14,8 @@ Reusable header for Alfresco applications.
 ```html
 <adf-layout-header 
     title="title" 
-    logo="logo.png" 
+    logo="logo.svg" 
     [redirectUrl]="'/home'"
-    color="primary"
     (clicked)=toggleMenu($event)>
 </adf-layout-header>
 ```
@@ -38,7 +37,7 @@ body of the element:
 
 | Name | Type | Default value | Description |
 | ---- | ---- | ------------- | ----------- |
-| color | [`ThemePalette`](https://github.com/angular/components/blob/master/src/material/core/common-behaviors/color.ts) |  | Background color for the header. It can be any hex color code or one of the Material theme colors: 'primary', 'accent' or 'warn'. |
+| backgroundColor | [`string`] | Background color for the header. It can be any hex color code or CSS variable. |
 | expandedSidenav | `boolean` | true | expandedSidenav: Toggles the expanded state of the component. |
 | logo | `string` |  | Path to an image file for the application logo. |
 | position | `string` | "start" | The side of the page that the drawer is attached to (can be 'start' or 'end') |
@@ -58,5 +57,5 @@ body of the element:
 ## Details
 
 This component displays a customizable header that can be reused. Use the input properties to
-configure the left side (title, button) and the primary color of the header. The right part of the
+configure the left side (title, button) and the background color of the header. The right part of the
 header can contain other components which are transcluded in the header component.

docs/core/components/notification-history.component.md

@@ -27,6 +27,21 @@ The main purpose of the [Notification history component](../../core/components/n
 | maxNotifications | `number` | 5 | Maximum number of notifications to display. The rest will remain hidden until load more is clicked |
 | menuPositionX | [`MenuPositionX`](https://github.com/angular/components/blob/master/src/material/menu/menu-positions.ts) | "after" | Custom choice for opening the menu at the bottom. Can be `before` or `after`. |
 | menuPositionY | [`MenuPositionY`](https://github.com/angular/components/blob/master/src/material/menu/menu-positions.ts) | "below" | Custom choice for opening the menu at the bottom. Can be `above` or `below`. |
+| badgeSize | [`MatBadgeSize`](https://v19.material.angular.dev/components/badge/api#MatBadgeSize) | `small` | Badge size. Can be `small`, `medium` or `large`. |
+
+### App config
+
+You can set a default badge size in `app.config.json`:
+
+```json
+{
+    "notification": {
+        "badgeSize": "medium"
+    }
+}
+```
+
+The `notification.badgeSize` value is applied on init when the `badgeSize` input is not set explicitly on the component.
 
 ## See also
 

docs/core/components/toolbar.component.md

@@ -19,7 +19,6 @@ Simple container for headers, titles, actions and breadcrumbs.
     -   [Properties](#properties)
 -   [Details](#details)
     -   [Dropdown menu](#dropdown-menu)
-    -   [Custom color](#custom-color)
 -   [See also](#see-also)
 
 ## Basic Usage
@@ -74,7 +73,6 @@ pushed to the right by a spacer:
 
 | Name | Type | Default value | Description |
 | ---- | ---- | ------------- | ----------- |
-| color | [`ThemePalette`](https://github.com/angular/components/blob/master/src/material/core/common-behaviors/color.ts) |  | Toolbar color. Can be changed to empty value (default), `primary`, `accent` or `warn`. |
 | title | `string` | "" | Toolbar title. |
 
 ## Details
@@ -116,21 +114,6 @@ when you click the menu button:
 
 ![](../../docassets/images/adf-toolbar-04.png)
 
-### Custom color
-
-Besides the default color you can use 'primary', 'accent', or 'warn' values:
-
-You might also want to change colors to follow your application's color
-[theme](../../user-guide/theming.md):
-
-For example:
-
-![](../../docassets/images/adf-toolbar-05.png)
-
-![](../../docassets/images/adf-toolbar-06.png)
-
-![](../../docassets/images/adf-toolbar-07.png)
-
 ## See also
 
 -   [Toolbar Divider component](toolbar-divider.component.md)

docs/core/components/viewer-render.component.md

@@ -236,7 +236,7 @@ Next in your component you need to get a reference of created template
 
 ```ts
 @ViewChild('viewerExtensions')
-viewerTemplateExtensions: TemplateRef<any>;
+viewerTemplateExtensions: TemplateRef<unknown>;
 ```
 
 and pass it via `viewerTemplateExtensions` input:

docs/core/dialogs/dialog.md

@@ -53,8 +53,8 @@ With icon:
 ```
 
 ```ts
-@ViewChild('contentDialogTemplate') contentDialogTemplate: TemplateRef<any>;
-@ViewChild('actionsDialogTemplate') actionsDialogTemplate: TemplateRef<any>;
+@ViewChild('contentDialogTemplate') contentDialogTemplate: TemplateRef<unknown>;
+@ViewChild('actionsDialogTemplate') actionsDialogTemplate: TemplateRef<unknown>;
 
 constructor(private dialog: MatDialog) {}
 

docs/core/interfaces/datatable-adapter.interface.md

@@ -68,7 +68,7 @@ interface DataColumn {
     title?: string;
     srTitle?: string;
     cssClass?: string;
-    template?: TemplateRef<any>;
+    template?: TemplateRef<unknown>;
     formatTooltip?: Function;
     focus?: boolean;
 }

docs/core/interfaces/dialog.interface.md

@@ -21,9 +21,9 @@ interface DialogData {
     isCloseButtonHidden?: boolean;
     isCancelButtonHidden?: boolean;
     dialogSize?: DialogSizes;
-    contentTemplate?: TemplateRef<any>;
-    actionsTemplate?: TemplateRef<any>;
-    descriptionTemplate?: TemplateRef<any>;
+    contentTemplate?: TemplateRef<unknown>;
+    actionsTemplate?: TemplateRef<unknown>;
+    descriptionTemplate?: TemplateRef<unknown>;
     headerIcon?: string;
     additionalActionButtons?: AdditionalDialogActionButton[];
     componentData?: any;
@@ -46,9 +46,9 @@ interface DialogData {
 | dialogSize | `DialogSize` | `Medium` | Set dialog size. Can be `Large`, `Medium`, `Alert`. (optional) |
 | contentText | `string` |    | Inserts a content text. (optional) |
 | contentComponent | `Type<any>` |    | Inserts a content component. (optional) |
-| contentTemplate | `TemplateRef<any>` |    | Inserts a content template. (optional) |
-| actionsTemplate | `TemplateRef<any>` |    | Inserts a template styled on the left. Should be used for additional `mat-button` style buttons. (optional) |
-| descriptionTemplate | `TemplateRef<any>` |    | Inserts a description template. (optional) |
+| contentTemplate | `TemplateRef<unknown>` |    | Inserts a content template. (optional) |
+| actionsTemplate | `TemplateRef<unknown>` |    | Inserts a template styled on the left. Should be used for additional `mat-button` style buttons. (optional) |
+| descriptionTemplate | `TemplateRef<unknown>` |    | Inserts a description template. (optional) |
 | additionalActionButtons | `AdditionalDialogActionButton[]` |    | Inserts additional base-styled buttons into the action bar on the left. (optional) |
 | componentData | `any` |    | Data that injected in contentComponent. (optional) |
 | dataOnConfirm$ | `Subject<any>` |    | Data to be passed on confirm action after dialog closed. (optional) |

docs/core/models/form-field.model.md

@@ -50,8 +50,10 @@ Contains the value and metadata for a field of a [`Form`](../../../lib/process-s
 | numberOfColumns | number | 1 | Number of columns defined by a container field |
 | fields | [`FormFieldModel`](../../core/models/form-field.model.md)\[] | \[] | Fields contained within a container field |
 | columns | [`ContainerColumnModel`](../../../lib/core/src/lib/form/components/widgets/core/container-column.model.ts)\[] | \[] | Column definitions for a container field |
+| rows | [`ContainerRowModel`](../../../lib/core/src/lib/form/components/widgets/core/container-row.model.ts)\[] | \[] | Row definitions for a repeatable section field |
 | emptyOption | [`FormFieldOption`](../../../lib/core/src/lib/form/components/widgets/core/form-field-option.ts) |  | Dropdown menu item to use when no option is chosen |
-| validationSummary | string |  | Error/information message added during field validation (see [`FormFieldValidator`](../../../lib/core/src/lib/form/components/widgets/core/form-field-validator.ts) interface) |
+| validationSummary | [`ErrorMessageModel`](../../../lib/core/src/lib/form/components/widgets/core/error-message.model.ts) |  | Error/information message added during field validation (see [`FormFieldValidator`](../../../lib/core/src/lib/form/components/widgets/core/form-field-validator.ts) interface) |
+| validationSummaryChanges$ | Observable<[`ErrorMessageModel`](../../../lib/core/src/lib/form/components/widgets/core/error-message.model.ts)> |  | Replays the current validation summary to subscribers and emits the completed summary after each validation |
 
 ## Details
 
@@ -95,6 +97,17 @@ The [REST Call Task 101](https://community.alfresco.com/community/bpm/blog/2016/
 tutorial on the [APS community site](https://community.alfresco.com/community/bpm)
 contains full details about how the REST calls work, along with a worked example.
 
+### Repeatable sections
+
+Repeatable section fields (`type: 'repeatable-section'`) support an `initialNumberOfRows` parameter in `params`.
+Setting `initialNumberOfRows` to `0` is valid: the section starts with no runtime rows and users add rows via the **Add row** action.
+
+When no rows exist, `columns` holds a design-time column template (used by form editors and form-rules).
+Template fields are bound to the form for rendering but are marked as templates and do not write to `form.values`.
+No row data is written to `form.values` until the user adds a row or saved values are loaded from the server.
+
+If saved values are present on the field (`value` array), row count is derived from `value.length` (subject to `maxNumberOfRows`), regardless of `initialNumberOfRows`.
+
 ## See also
 
 -   [Extensibility](../../user-guide/extensibility.md)

docs/core/pipes/decimal-number.pipe.md

@@ -5,7 +5,7 @@ Status: Active
 Last reviewed: 2019-08-05
 ---
 
-# [Decimal Number Pipe](../../../lib/core/src/lib/pipes/decimal-number.pipe.ts "Defined in decimal-number.pipe.ts")
+# Decimal Number Pipe
 
 Transforms a number to have a certain amount of digits in its integer part and also in its decimal part.
 
@@ -15,7 +15,7 @@ Transforms a number to have a certain amount of digits in its integer part and a
 
 | Name | Type | Default value | Description |
 | ---- | ---- | ------------- | ----------- |
-| digitsInfo | [`DecimalNumberModel`](../../../lib/core/src/lib/models/decimal-number.model.ts) |  | A format to apply to the date value. [Date Pipe Formats.](https://angular.io/api/common/DatePipe#custom-format-options) |
+| digitsInfo | `DecimalNumberModel` |  | A format to apply to the date value. [Date Pipe Formats.](https://angular.io/api/common/DatePipe#custom-format-options) |
 | locale | string | 'en-US' | A locale id for the locale format rules to use. |
 
 ## Details
@@ -30,11 +30,11 @@ This pipe transforms a given number so it follows the set configuration for the
   }
 ```
 
-You can also overwrite this config by passing a [`DecimalNumberModel`](../../../lib/core/src/lib/models/decimal-number.model.ts) as an argument for this pipe.
+You can also overwrite this config by passing a `DecimalNumberModel` as an argument for this pipe.
 
 The number can be also localized so it applies commas and dots in the right place depending on the locale id in use.
 
-#### Result
+### Result
 
 ```ts
 decimalNumberPipe.transform(1234.567);

docs/core/services/nodes-api.service.md

@@ -18,6 +18,7 @@ Accesses and manipulates ACS document nodes using their node IDs.
     -   [Getting folder node contents](#getting-folder-node-contents)
     -   [Creating and updating nodes](#creating-and-updating-nodes)
     -   [Deleting and restoring nodes](#deleting-and-restoring-nodes)
+    -   [Checking out nodes](#checking-out-nodes)
 -   [See also](#see-also)
 
 ## Class members
@@ -98,6 +99,21 @@ Accesses and manipulates ACS document nodes using their node IDs.
     -   _nodeId:_ `string` - ID of the target node
     -   _jobId:_ `string` - ID of the job started by the `initiateFolderSizeCalculation` request
     -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`SizeDetailsEntry`](../../../lib/js-api/src/api/content-rest-api/docs/NodesApi.md#sizedetailsentry)`>` - Details of the folder
+-   **listParents**(nodeId: `string`, opts: `{ where?: string; includeSource?: boolean;} & NodesIncludeQuery & ContentPagingQuery`): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodeAssociationPaging`](../../../lib/js-api/src/api/content-rest-api/docs/NodesApi.md#NodeAssociationPaging)`>`<br/>
+    Lists parents of a node.
+    -   _nodeId:_ `string` - ID of the target node
+    -   _opts:_ `{ where?: string; includeSource?: boolean;} & NodesIncludeQuery & ContentPagingQuery` - additional options that API can take
+    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodeAssociationPaging`](../../../lib/js-api/src/api/content-rest-api/docs/NodesApi.md#NodeAssociationPaging)`>` - List of node's parents.
+-   **checkoutNode**(nodeId: `string`, opts?: `NodesIncludeQuery`): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodeEntry`](https://github.com/Alfresco/alfresco-ng2-components/blob/develop/lib/js-api/src/api/content-rest-api/docs/NodeEntry.md)`>`<br/>
+    Checks out a file node for offline editing. Creates a private working copy and locks the original.
+    -   _nodeId:_ `string`  - ID of the file node to check out
+    -   _opts:_ `NodesIncludeQuery`  - (Optional) Additional query parameters (`include`, `fields`)
+    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodeEntry`](https://github.com/Alfresco/alfresco-ng2-components/blob/develop/lib/js-api/src/api/content-rest-api/docs/NodeEntry.md)`>` - The working copy node
+-   **cancelCheckoutNode**(nodeId: `string`, opts?: `NodesIncludeQuery`): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodeEntry`](https://github.com/Alfresco/alfresco-ng2-components/blob/develop/lib/js-api/src/api/content-rest-api/docs/NodeEntry.md)`>`<br/>
+    Cancels a checkout. Accepts either the working copy or the original checked-out node. Deletes the working copy and unlocks the original.
+    -   _nodeId:_ `string`  - ID of the working copy or original checked-out node
+    -   _opts:_ `NodesIncludeQuery`  - (Optional) Additional query parameters (`include`, `fields`)
+    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodeEntry`](https://github.com/Alfresco/alfresco-ng2-components/blob/develop/lib/js-api/src/api/content-rest-api/docs/NodeEntry.md)`>` - The original (unlocked) node
 
 ## Details
 
@@ -155,6 +171,12 @@ and
 pages in the Alfresco JS API for further details and options. Note that you can also use the
 [Deleted Nodes Api service](deleted-nodes-api.service.md) get a list of all items currently in the trashcan.
 
+### Checking out nodes
+
+Use `checkoutNode` to lock a file node for offline editing. This creates a private working copy and locks the original node so other users cannot modify it. On success, the Observable emits the working copy `NodeEntry`.
+
+Use `cancelCheckoutNode` to discard the working copy and unlock the original. You can pass either the working copy node ID or the original node ID. On success, the Observable emits the original (unlocked) `NodeEntry`.
+
 ## See also
 
 -   [Deleted nodes api service](deleted-nodes-api.service.md)

docs/core/services/process-content.service.md

@@ -66,12 +66,19 @@ Manipulates content related to a Process Instance or Task Instance in APS.
     -   _taskId:_ `string`  - ID of the target task
     -   _opts:_ `any`  - (Optional) Options supported by JS-API
     -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<any>` - Metadata for the content
--   **getProcessesAndTasksOnContent**(sourceId: `string`, source: `string`, size?: `number`, page?: `number`): [`Observable`](http://reactivex.io/documentation/observable.html)<[`ResultListDataRepresentationRelatedProcessTask`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/activiti-rest-api/docs/ResultListDataRepresentation%C2%ABRelatedContentRepresentation%C2%BB.md)><br/>
+-   **getProcessesAndTasksOnContent**(sourceId: `string`, source: `string`, size?: `number`, page?: `number`): [`Observable`](http://reactivex.io/documentation/observable.html)<[`ResultListDataRepresentationRelatedProcessTask`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/activiti-rest-api/docs/ResultListDataRepresentationRelatedProcessTask.md)><br/>
     Lists processes and tasks on workflow started with provided document
     -   _sourceId:_ `string` - id of the document that workflow or task has been started with
     -   _source:_ `string` - source of the document that workflow or task has been started with
     -   _size:_ `number` - size of the entries to get
     -   _page:_ `number` - page number
+-   **getProcessesAndTasksOnContentBatch**(sourceIds: `string[]`, source: `string`, size?: `number`, page?: `number`): [`Observable`](http://reactivex.io/documentation/observable.html)<[`ResultListDataRepresentationRelatedProcessTask`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/activiti-rest-api/docs/ResultListDataRepresentationRelatedProcessTask.md)><br/>
+    Batch variant of getProcessesAndTasksOnContent. Accepts multiple source document ids in one request (up to 500) and returns the related processes and tasks for all of them.
+    -   _sourceIds:_ `string[]` - ids of the documents to query process participation for (up to 500)
+    -   _source:_ `string` - source of the documents that workflows or tasks have been started with
+    -   _size:_ `number` - (Optional) size of the entries to get
+    -   _page:_ `number` - (Optional) page number
+    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)<[`ResultListDataRepresentationRelatedProcessTask`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/activiti-rest-api/docs/ResultListDataRepresentationRelatedProcessTask.md)>
 -   **handleError**(error: `any`): [`Observable`](http://reactivex.io/documentation/observable.html)`<any>`<br/>
     Reports an error message.
     -   _error:_ `any`  - Data object with optional `message` and `status` fields for the error
@@ -95,7 +102,7 @@ Let's say we have an upload button as follows:
 
 ```html
   <div>
-    <button mat-button color="accent" mat-mini-fab (click)="fileInput.click()">
+    <button mat-button mat-mini-fab (click)="fileInput.click()">
       <mat-icon>attachment</mat-icon>
     </button>
     <input hidden type="file" #fileInput (change)="onUploadFile($event)"/>
@@ -422,6 +429,21 @@ this.contentService.getProcessesAndTasksOnContent(sourceId, source).subscribe(
    });
 ```
 
+#### getProcessesAndTasksOnContentBatch(sourceIds: string[], source: string, size?: number, page?: number): Observable`<ResultListDataRepresentationRelatedProcessTask>`
+
+Batch variant of `getProcessesAndTasksOnContent`. Accepts multiple source document ids in one request (up to 500) and returns the related processes and tasks for all of them.
+
+```ts
+const sourceIds = ['sourceId1', 'sourceId2'];
+const source = 'source';
+this.contentService.getProcessesAndTasksOnContentBatch(sourceIds, source).subscribe(
+   res  => {
+     console.log('Response: ', res);
+   }, error => {
+     console.log('Error: ', error);
+   });
+```
+
 ## Details
 
 ## Importing

docs/core/services/search.service.md

@@ -13,26 +13,27 @@ Accesses the Content Services Search API.
 
 ### Methods
 
--   **getNodeQueryResults**(term: `string`, options?: [`SearchOptions`](../../../lib/content-services/src/lib/search/services/search.service.ts)): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodePaging`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/content-rest-api/docs/NodePaging.md)`>`<br/>
+-   **getNodeQueryResults**(term: `string`, options?: [`SearchOptions`](../../../lib/content-services/src/lib/search/services/search.service.ts)): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodePaging`](../../../lib/js-api/src/api/content-rest-api/model/nodePaging.ts)`>`<br/>
     Gets a list of nodes that match the given search criteria.
     -   _term:_ `string`  - Term to search for
     -   _options:_ [`SearchOptions`](../../../lib/content-services/src/lib/search/services/search.service.ts)  - (Optional) Options for delivery of the search results
-    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodePaging`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/content-rest-api/docs/NodePaging.md)`>` - List of nodes resulting from the search
--   **search**(searchTerm: `string`, maxResults: `number`, skipCount: `number`): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`ResultSetPaging`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/search-rest-api/docs/ResultSetPaging.md)`>`<br/>
+    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`NodePaging`](../../../lib/js-api/src/api/content-rest-api/model/nodePaging.ts)`>` - List of nodes resulting from the search
+-   **search**(searchTerm: `string`, maxResults: `number`, skipCount: `number`): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`ResultSetPaging`](../../../lib/js-api/src/api/search-rest-api/docs/ResultSetPaging.md)`>`<br/>
     Performs a search.
     -   _searchTerm:_ `string`  - Term to search for
     -   _maxResults:_ `number`  - Maximum number of items in the list of results
     -   _skipCount:_ `number`  - Number of higher-ranked items to skip over in the list
-    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`ResultSetPaging`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/search-rest-api/docs/ResultSetPaging.md)`>` - List of search results
--   **searchByQueryBody**(queryBody: `SearchRequest`): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`ResultSetPaging`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/search-rest-api/docs/ResultSetPaging.md)`>`<br/>
+    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`ResultSetPaging`](../../../lib/js-api/src/api/search-rest-api/docs/ResultSetPaging.md)`>` - List of search results
+-   **searchByQueryBody**(queryBody: `SearchRequest`, shouldEmit: `boolean` = `true`): [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`ResultSetPaging`](../../../lib/js-api/src/api/search-rest-api/docs/ResultSetPaging.md)`>`<br/>
     Performs a search with its parameters supplied by a SearchRequest object.
     -   _queryBody:_ `SearchRequest`  - Object containing the search parameters
-    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`ResultSetPaging`](https://github.com/Alfresco/alfresco-js-api/blob/develop/src/api/search-rest-api/docs/ResultSetPaging.md)`>` - List of search results
+    -   _shouldEmit:_ `boolean`  - Whether the `dataLoaded` event should be emitted with the results. Set to `false` for auxiliary searches (for example populating autocomplete options) that should not notify the main results subscribers. Defaults to `true`
+    -   **Returns** [`Observable`](http://reactivex.io/documentation/observable.html)`<`[`ResultSetPaging`](../../../lib/js-api/src/api/search-rest-api/docs/ResultSetPaging.md)`>` - List of search results
 
 ## Details
 
 See the
-[search method](https://github.com/Alfresco/alfresco-js-api/blob/master/src/alfresco-search-rest-api/docs/SearchApi.md#search)
+[search method](../../../lib/js-api/src/api/search-rest-api/docs/SearchApi.md#search)
 in the Alfresco JS-API for the format of the query and returned data.
 The [Search Configuration service](../services/search-configuration.service.md)
 has a method to generate the QueryBody object used by `searchByQueryBody`. The properties of the

docs/license-info/README.md

@@ -60,3 +60,7 @@ The pages linked below contain the licenses for all third party dependencies of
 - [ADF 8.1.1](license-info-8.1.1.md)
 - [ADF 8.2.0](license-info-8.2.0.md)
 - [ADF 8.2.1](license-info-8.2.1.md)
+- [ADF 8.3.1](license-info-8.3.1.md)
+- [ADF 8.4.1](license-info-8.4.1.md)
+- [ADF 8.5.0](license-info-8.5.0.md)
+- [ADF 9.0.0](license-info-9.0.0.md)

docs/license-info/license-info-8.3.1.md

@@ -0,0 +1,48 @@
+---
+Title: License info, alfresco-ng2-components 8.3.1
+---
+
+# License information for alfresco-ng2-components 8.3.1
+
+This page lists all third party libraries the project depends on.
+
+## Libraries
+
+| Name | Version | License |
+| --- | --- | --- |
+| [@angular/animations](https://github.com/angular/angular) | 19.2.19 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@angular/cdk](https://github.com/angular/components) | 19.2.19 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@angular/common](https://github.com/angular/angular) | 19.2.19 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@angular/compiler](https://github.com/angular/angular) | 19.2.19 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@angular/core](https://github.com/angular/angular) | 19.2.19 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@angular/forms](https://github.com/angular/angular) | 19.2.19 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@angular/material-date-fns-adapter](https://github.com/angular/components) | 19.2.19 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@angular/material](https://github.com/angular/components) | 19.2.19 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@angular/platform-browser-dynamic](https://github.com/angular/angular) | 19.2.19 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@angular/platform-browser](https://github.com/angular/angular) | 19.2.19 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@angular/router](https://github.com/angular/angular) | 19.2.19 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@apollo/client](https://github.com/apollographql/apollo-client) | 3.13.1 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@cspell/eslint-plugin](https://github.com/streetsidesoftware/cspell) | 9.4.0 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [@mat-datetimepicker/core](https://github.com/kuhnroyal/mat-datetimepicker) | 15.0.2 | [MIT](http://www.opensource.org/licenses/MIT) |
+| @ngx-translate/core | 16.0.4 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [angular-oauth2-oidc-jwks](https://github.com/manfredsteyer/angular-oauth2-oidc) | 17.0.2 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [angular-oauth2-oidc](https://github.com/manfredsteyer/angular-oauth2-oidc) | 17.0.2 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [apollo-angular](https://github.com/kamilkisiela/apollo-angular) | 10.0.3 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [chart.js](https://github.com/chartjs/Chart.js) | 4.4.4 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [cropperjs](https://github.com/fengyuanchen/cropperjs) | 1.6.2 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [date-fns](https://github.com/date-fns/date-fns) | 2.30.0 | [MIT](http://www.opensource.org/licenses/MIT) |
+| dotenv-expand | 5.1.0 | [BSD-2-Clause](http://www.opensource.org/licenses/BSD-2-Clause) |
+| editorjs-html | 4.0.5 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [eventemitter3](https://github.com/primus/eventemitter3) | 5.0.4 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [graphql-ws](https://github.com/enisdenjo/graphql-ws) | 6.0.6 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [material-icons](https://github.com/marella/material-icons) | 1.13.14 | [Apache-2.0](http://www.apache.org/licenses/LICENSE-2.0) |
+| [minimatch-browser](https://github.com/isaacs/minimatch) | 1.0.0 | [ISC](https://www.isc.org/downloads/software-support-policy/isc-license/) |
+| [ng2-charts](https://github.com/valor-software/ng2-charts) | 4.1.1 | [ISC](https://www.isc.org/downloads/software-support-policy/isc-license/) |
+| [node-fetch](https://github.com/node-fetch/node-fetch) | 3.3.2 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [pdfjs-dist](https://github.com/mozilla/pdf.js) | 5.1.91 | [Apache-2.0](http://www.apache.org/licenses/LICENSE-2.0) |
+| [raphael](https://github.com/DmitryBaranovskiy/raphael) | 2.3.0 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [rxjs](https://github.com/reactivex/rxjs) | 7.8.2 | [Apache-2.0](http://www.apache.org/licenses/LICENSE-2.0) |
+| [superagent](https://github.com/ladjs/superagent) | 9.0.2 | [MIT](http://www.opensource.org/licenses/MIT) |
+| [tslib](https://github.com/Microsoft/tslib) | 2.8.1 | [0BSD](http://landley.net/toybox/license.html) |
+| [zone.js](https://github.com/angular/angular) | 0.15.0 | [MIT](http://www.opensource.org/licenses/MIT) |
+

docs/license-info/license-info-8.4.1.md

@@ -0,0 +1,48 @@
+---
+Title: License info, alfresco-ng2-components 8.4.1
+---
+
+# License information for alfresco-ng2-components 8.4.1
+
+This page lists all third party libraries the project depends on.
+
+## Libraries
+
+| Name | Version | License |
+| --- | --- | --- |
+| [@angular/animations](https://github.com/angular/angular) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/cdk](https://github.com/angular/components) | 19.2.19 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/common](https://github.com/angular/angular) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/compiler](https://github.com/angular/angular) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/core](https://github.com/angular/angular) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/forms](https://github.com/angular/angular) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/material-date-fns-adapter](https://github.com/angular/components) | 19.2.19 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/material](https://github.com/angular/components) | 19.2.19 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/platform-browser-dynamic](https://github.com/angular/angular) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/platform-browser](https://github.com/angular/angular) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/router](https://github.com/angular/angular) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@apollo/client](https://github.com/apollographql/apollo-client) | 3.13.1 | [MIT](https://opensource.org/license/mit/) |
+| [@cspell/eslint-plugin](https://github.com/streetsidesoftware/cspell) | 9.4.0 | [MIT](https://opensource.org/license/mit/) |
+| [@mat-datetimepicker/core](https://github.com/kuhnroyal/mat-datetimepicker) | 15.0.2 | [MIT](https://opensource.org/license/mit/) |
+| [@ngx-translate/core](https://github.com/ngx-translate/core) | 17.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [angular-oauth2-oidc-jwks](https://github.com/manfredsteyer/angular-oauth2-oidc) | 17.0.2 | [MIT](https://opensource.org/license/mit/) |
+| [angular-oauth2-oidc](https://github.com/manfredsteyer/angular-oauth2-oidc) | 17.0.2 | [MIT](https://opensource.org/license/mit/) |
+| [apollo-angular](https://github.com/kamilkisiela/apollo-angular) | 10.0.3 | [MIT](https://opensource.org/license/mit/) |
+| [chart.js](https://github.com/chartjs/Chart.js) | 4.4.4 | [MIT](https://opensource.org/license/mit/) |
+| [cropperjs](https://github.com/fengyuanchen/cropperjs) | 1.6.2 | [MIT](https://opensource.org/license/mit/) |
+| [date-fns](https://github.com/date-fns/date-fns) | 2.30.0 | [MIT](https://opensource.org/license/mit/) |
+| dotenv-expand | 5.1.0 | [BSD-2-Clause](https://opensource.org/licenses/BSD-2-Clause) |
+| editorjs-html | 4.0.5 | [MIT](https://opensource.org/license/mit/) |
+| [eventemitter3](https://github.com/primus/eventemitter3) | 5.0.4 | [MIT](https://opensource.org/license/mit/) |
+| [graphql-ws](https://github.com/enisdenjo/graphql-ws) | 6.0.7 | [MIT](https://opensource.org/license/mit/) |
+| [material-icons](https://github.com/marella/material-icons) | 1.13.14 | [Apache-2.0](https://www.apache.org/licenses/LICENSE-2.0) |
+| [minimatch-browser](https://github.com/isaacs/minimatch) | 1.0.0 | [ISC](https://www.isc.org/licenses/) |
+| [ng2-charts](https://github.com/valor-software/ng2-charts) | 4.1.1 | [ISC](https://www.isc.org/licenses/) |
+| [node-fetch](https://github.com/node-fetch/node-fetch) | 3.3.2 | [MIT](https://opensource.org/license/mit/) |
+| [pdfjs-dist](https://github.com/mozilla/pdf.js) | 5.1.91 | [Apache-2.0](https://www.apache.org/licenses/LICENSE-2.0) |
+| [raphael](https://github.com/DmitryBaranovskiy/raphael) | 2.3.0 | [MIT](https://opensource.org/license/mit/) |
+| [rxjs](https://github.com/reactivex/rxjs) | 7.8.2 | [Apache-2.0](https://www.apache.org/licenses/LICENSE-2.0) |
+| [superagent](https://github.com/ladjs/superagent) | 9.0.2 | [MIT](https://opensource.org/license/mit/) |
+| [tslib](https://github.com/Microsoft/tslib) | 2.8.1 | [0BSD](http://landley.net/toybox/license.html) |
+| [zone.js](https://github.com/angular/angular) | 0.15.0 | [MIT](https://opensource.org/license/mit/) |
+

docs/license-info/license-info-8.5.0.md

@@ -0,0 +1,79 @@
+---
+Title: License info, alfresco-ng2-components 8.5.0
+---
+
+# License information for alfresco-ng2-components 8.5.0
+
+This page lists all third party libraries the project depends on.
+
+## Libraries
+
+| Name | Version | License |
+| --- | --- | --- |
+| [@angular/animations](https://github.com/angular/angular.git) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/cdk](https://github.com/angular/components.git) | 19.2.19 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/common](https://github.com/angular/angular.git) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/compiler](https://github.com/angular/angular.git) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/core](https://github.com/angular/angular.git) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/forms](https://github.com/angular/angular.git) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/material](https://github.com/angular/components.git) | 19.2.19 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/material-date-fns-adapter](https://github.com/angular/components.git) | 19.2.19 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/platform-browser](https://github.com/angular/angular.git) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/platform-browser-dynamic](https://github.com/angular/angular.git) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/router](git+https://github.com/angular/angular.git) | 19.2.20 | [MIT](https://opensource.org/license/mit/) |
+| [@apollo/client](git+https://github.com/apollographql/apollo-client.git) | 3.13.1 | [MIT](https://opensource.org/license/mit/) |
+| [@babel/runtime](https://github.com/babel/babel.git) | 7.26.10 | [MIT](https://opensource.org/license/mit/) |
+| [@cspell/eslint-plugin](https://github.com/streetsidesoftware/cspell.git) | 10.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [@graphql-typed-document-node/core](git@github.com:dotansimha/graphql-typed-document-node.git) | 3.2.0 | [MIT](https://opensource.org/license/mit/) |
+| [@mat-datetimepicker/core](https://github.com/kuhnroyal/mat-datetimepicker.git) | 15.0.2 | [MIT](https://opensource.org/license/mit/) |
+| [@napi-rs/canvas](git+https://github.com/Brooooooklyn/canvas.git) | 0.1.100 | [MIT](https://opensource.org/license/mit/) |
+| [@napi-rs/canvas-darwin-arm64](git+https://github.com/Brooooooklyn/canvas.git) | 0.1.100 | [MIT](https://opensource.org/license/mit/) |
+| [@ngx-translate/core](https://github.com/ngx-translate/core) | 17.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [@wry/caches](git+https://github.com/benjamn/wryware.git) | 1.0.1 | [MIT](https://opensource.org/license/mit/) |
+| [@wry/context](git+https://github.com/benjamn/wryware.git) | 0.7.4 | [MIT](https://opensource.org/license/mit/) |
+| [@wry/equality](git+https://github.com/benjamn/wryware.git) | 0.5.7 | [MIT](https://opensource.org/license/mit/) |
+| [@wry/trie](git+https://github.com/benjamn/wryware.git) | 0.5.0 | [MIT](https://opensource.org/license/mit/) |
+| [angular-oauth2-oidc](https://github.com/manfredsteyer/angular-oauth2-oidc) | 19.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [apollo-angular](https://github.com/kamilkisiela/apollo-angular) | 10.0.3 | [MIT](https://opensource.org/license/mit/) |
+| [balanced-match](git://github.com/juliangruber/balanced-match.git) | 1.0.2 | [MIT](https://opensource.org/license/mit/) |
+| [brace-expansion](git://github.com/juliangruber/brace-expansion.git) | 1.1.15 | [MIT](https://opensource.org/license/mit/) |
+| [brace-expansion](git://github.com/juliangruber/brace-expansion.git) | 2.1.1 | [MIT](https://opensource.org/license/mit/) |
+| [concat-map](git://github.com/substack/node-concat-map.git) | 0.0.1 | [MIT](https://opensource.org/license/mit/) |
+| [cropperjs](git+https://github.com/fengyuanchen/cropperjs.git) | 1.6.2 | [MIT](https://opensource.org/license/mit/) |
+| [date-fns](https://github.com/date-fns/date-fns) | 2.30.0 | [MIT](https://opensource.org/license/mit/) |
+| dotenv-expand | 5.1.0 | [BSD-2-Clause](https://opensource.org/licenses/BSD-2-Clause) |
+| editorjs-html | 4.0.5 | [MIT](https://opensource.org/license/mit/) |
+| [eve-raphael](https://github.com/tomasAlabes/eve.git) | 0.5.0 | UNKNOWN |
+| [eventemitter3](git://github.com/primus/eventemitter3.git) | 5.0.4 | [MIT](https://opensource.org/license/mit/) |
+| [fetch-blob](https://github.com/node-fetch/fetch-blob.git) | 3.2.0 | [MIT](https://opensource.org/license/mit/) |
+| [formdata-polyfill](git+https://jimmywarting@github.com/jimmywarting/FormData.git) | 4.0.10 | [MIT](https://opensource.org/license/mit/) |
+| [graphql-tag](git+https://github.com/apollographql/graphql-tag.git) | 2.12.6 | [MIT](https://opensource.org/license/mit/) |
+| [graphql-ws](git+https://github.com/enisdenjo/graphql-ws.git) | 6.0.8 | [MIT](https://opensource.org/license/mit/) |
+| [hoist-non-react-statics](git://github.com/mridgway/hoist-non-react-statics.git) | 3.3.2 | [BSD-3-Clause](https://opensource.org/licenses/BSD-3-Clause) |
+| [js-tokens](lydell/js-tokens) | 4.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [lodash-es](lodash/lodash) | 4.18.1 | [MIT](https://opensource.org/license/mit/) |
+| [loose-envify](git://github.com/zertosh/loose-envify.git) | 1.4.0 | [MIT](https://opensource.org/license/mit/) |
+| [material-icons](git+https://github.com/marella/material-icons.git) | 1.13.14 | [Apache-2.0](https://www.apache.org/licenses/LICENSE-2.0) |
+| [minimatch](git://github.com/isaacs/minimatch.git) | 5.1.9 | [ISC](https://www.isc.org/licenses/) |
+| [minimatch-browser](git://github.com/isaacs/minimatch.git) | 1.0.0 | [ISC](https://www.isc.org/licenses/) |
+| [ng2-charts](git+https://github.com/valor-software/ng2-charts.git) | 4.1.1 | [ISC](https://www.isc.org/licenses/) |
+| [node-domexception](git+https://github.com/jimmywarting/node-domexception.git) | 1.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [node-fetch](https://github.com/node-fetch/node-fetch.git) | 3.3.2 | [MIT](https://opensource.org/license/mit/) |
+| [object-assign](sindresorhus/object-assign) | 4.1.1 | [MIT](https://opensource.org/license/mit/) |
+| [optimism](git+https://github.com/benjamn/optimism.git) | 0.18.1 | [MIT](https://opensource.org/license/mit/) |
+| [pdfjs-dist](git+https://github.com/mozilla/pdf.js.git) | 5.1.91 | [Apache-2.0](https://www.apache.org/licenses/LICENSE-2.0) |
+| [prop-types](facebook/prop-types) | 15.8.1 | [MIT](https://opensource.org/license/mit/) |
+| [raphael](git://github.com/DmitryBaranovskiy/raphael.git) | 2.3.0 | [MIT](https://opensource.org/license/mit/) |
+| [react-is](https://github.com/facebook/react.git) | 16.13.1 | [MIT](https://opensource.org/license/mit/) |
+| [regenerator-runtime](https://github.com/facebook/regenerator/tree/main/packages/runtime) | 0.14.1 | [MIT](https://opensource.org/license/mit/) |
+| [rehackt](git+https://github.com/phryneas/rehackt.git) | 0.1.0 | [MIT](https://opensource.org/license/mit/) |
+| [rxjs](https://github.com/reactivex/rxjs.git) | 7.8.2 | [Apache-2.0](https://www.apache.org/licenses/LICENSE-2.0) |
+| [symbol-observable](blesh/symbol-observable) | 4.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [ts-invariant](git+https://github.com/apollographql/invariant-packages.git) | 0.10.3 | [MIT](https://opensource.org/license/mit/) |
+| [tslib](https://github.com/Microsoft/tslib.git) | 2.8.1 | [0BSD](http://landley.net/toybox/license.html) |
+| [uuid](https://github.com/uuidjs/uuid.git) | 14.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [web-streams-polyfill](git+https://github.com/MattiasBuelens/web-streams-polyfill.git) | 3.3.3 | [MIT](https://opensource.org/license/mit/) |
+| [zen-observable](zenparsing/zen-observable) | 0.8.15 | [MIT](https://opensource.org/license/mit/) |
+| [zen-observable-ts](git+https://github.com/apollographql/zen-observable-ts.git) | 1.2.5 | [MIT](https://opensource.org/license/mit/) |
+| [zone.js](git://github.com/angular/angular.git) | 0.15.0 | [MIT](https://opensource.org/license/mit/) |
+

docs/license-info/license-info-9.0.0.md

@@ -0,0 +1,81 @@
+---
+Title: License info, alfresco-ng2-components 9.0.0
+---
+
+# License information for alfresco-ng2-components 9.0.0
+
+This page lists all third party libraries the project depends on.
+
+## Libraries
+
+| Name | Version | License |
+| --- | --- | --- |
+| [@angular-eslint/bundled-angular-compiler](https://github.com/angular-eslint/angular-eslint.git) | 20.7.0 | [MIT](https://opensource.org/license/mit/) |
+| [@angular-eslint/utils](https://github.com/angular-eslint/angular-eslint.git) | 20.7.0 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/animations](https://github.com/angular/angular.git) | 20.3.25 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/cdk](https://github.com/angular/components.git) | 20.2.14 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/common](https://github.com/angular/angular.git) | 20.3.25 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/compiler](https://github.com/angular/angular.git) | 20.3.25 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/core](https://github.com/angular/angular.git) | 20.3.25 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/forms](https://github.com/angular/angular.git) | 20.3.25 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/material](https://github.com/angular/components.git) | 20.2.14 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/material-date-fns-adapter](https://github.com/angular/components.git) | 20.2.14 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/platform-browser](https://github.com/angular/angular.git) | 20.3.25 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/platform-browser-dynamic](https://github.com/angular/angular.git) | 20.3.25 | [MIT](https://opensource.org/license/mit/) |
+| [@angular/router](git+https://github.com/angular/angular.git) | 20.3.25 | [MIT](https://opensource.org/license/mit/) |
+| [@apollo/client](git+https://github.com/apollographql/apollo-client.git) | 3.13.1 | [MIT](https://opensource.org/license/mit/) |
+| [@babel/runtime](https://github.com/babel/babel.git) | 7.26.10 | [MIT](https://opensource.org/license/mit/) |
+| [@cspell/eslint-plugin](https://github.com/streetsidesoftware/cspell.git) | 10.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [@graphql-typed-document-node/core](git@github.com:dotansimha/graphql-typed-document-node.git) | 3.2.0 | [MIT](https://opensource.org/license/mit/) |
+| [@mat-datetimepicker/core](https://github.com/kuhnroyal/mat-datetimepicker.git) | 16.0.1 | [MIT](https://opensource.org/license/mit/) |
+| [@napi-rs/canvas](git+https://github.com/Brooooooklyn/canvas.git) | 0.1.100 | [MIT](https://opensource.org/license/mit/) |
+| [@napi-rs/canvas-darwin-arm64](git+https://github.com/Brooooooklyn/canvas.git) | 0.1.100 | [MIT](https://opensource.org/license/mit/) |
+| [@ngx-translate/core](https://github.com/ngx-translate/core) | 17.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [@wry/caches](git+https://github.com/benjamn/wryware.git) | 1.0.1 | [MIT](https://opensource.org/license/mit/) |
+| [@wry/context](git+https://github.com/benjamn/wryware.git) | 0.7.4 | [MIT](https://opensource.org/license/mit/) |
+| [@wry/equality](git+https://github.com/benjamn/wryware.git) | 0.5.7 | [MIT](https://opensource.org/license/mit/) |
+| [@wry/trie](git+https://github.com/benjamn/wryware.git) | 0.5.0 | [MIT](https://opensource.org/license/mit/) |
+| [angular-oauth2-oidc](https://github.com/manfredsteyer/angular-oauth2-oidc) | 19.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [apollo-angular](https://github.com/kamilkisiela/apollo-angular) | 11.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [balanced-match](git://github.com/juliangruber/balanced-match.git) | 1.0.2 | [MIT](https://opensource.org/license/mit/) |
+| [brace-expansion](git://github.com/juliangruber/brace-expansion.git) | 1.1.15 | [MIT](https://opensource.org/license/mit/) |
+| [brace-expansion](git://github.com/juliangruber/brace-expansion.git) | 2.1.1 | [MIT](https://opensource.org/license/mit/) |
+| [concat-map](git://github.com/substack/node-concat-map.git) | 0.0.1 | [MIT](https://opensource.org/license/mit/) |
+| [cropperjs](git+https://github.com/fengyuanchen/cropperjs.git) | 1.6.2 | [MIT](https://opensource.org/license/mit/) |
+| [date-fns](https://github.com/date-fns/date-fns) | 2.30.0 | [MIT](https://opensource.org/license/mit/) |
+| dotenv-expand | 5.1.0 | [BSD-2-Clause](https://opensource.org/licenses/BSD-2-Clause) |
+| editorjs-html | 4.0.5 | [MIT](https://opensource.org/license/mit/) |
+| [eve-raphael](https://github.com/tomasAlabes/eve.git) | 0.5.0 | UNKNOWN |
+| [eventemitter3](git://github.com/primus/eventemitter3.git) | 5.0.4 | [MIT](https://opensource.org/license/mit/) |
+| [fetch-blob](https://github.com/node-fetch/fetch-blob.git) | 3.2.0 | [MIT](https://opensource.org/license/mit/) |
+| [formdata-polyfill](git+https://jimmywarting@github.com/jimmywarting/FormData.git) | 4.0.10 | [MIT](https://opensource.org/license/mit/) |
+| [graphql-tag](git+https://github.com/apollographql/graphql-tag.git) | 2.12.7 | [MIT](https://opensource.org/license/mit/) |
+| [graphql-ws](git+https://github.com/enisdenjo/graphql-ws.git) | 6.0.8 | [MIT](https://opensource.org/license/mit/) |
+| [hoist-non-react-statics](git://github.com/mridgway/hoist-non-react-statics.git) | 3.3.2 | [BSD-3-Clause](https://opensource.org/licenses/BSD-3-Clause) |
+| [js-tokens](lydell/js-tokens) | 4.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [lodash-es](lodash/lodash) | 4.18.1 | [MIT](https://opensource.org/license/mit/) |
+| [loose-envify](git://github.com/zertosh/loose-envify.git) | 1.4.0 | [MIT](https://opensource.org/license/mit/) |
+| [material-icons](git+https://github.com/marella/material-icons.git) | 1.13.14 | [Apache-2.0](https://www.apache.org/licenses/LICENSE-2.0) |
+| [minimatch](git://github.com/isaacs/minimatch.git) | 5.1.9 | [ISC](https://www.isc.org/licenses/) |
+| [minimatch-browser](git://github.com/isaacs/minimatch.git) | 1.0.0 | [ISC](https://www.isc.org/licenses/) |
+| [ng2-charts](git+https://github.com/valor-software/ng2-charts.git) | 4.1.1 | [ISC](https://www.isc.org/licenses/) |
+| [node-domexception](git+https://github.com/jimmywarting/node-domexception.git) | 1.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [node-fetch](https://github.com/node-fetch/node-fetch.git) | 3.3.2 | [MIT](https://opensource.org/license/mit/) |
+| [object-assign](sindresorhus/object-assign) | 4.1.1 | [MIT](https://opensource.org/license/mit/) |
+| [optimism](git+https://github.com/benjamn/optimism.git) | 0.18.1 | [MIT](https://opensource.org/license/mit/) |
+| [pdfjs-dist](git+https://github.com/mozilla/pdf.js.git) | 5.1.91 | [Apache-2.0](https://www.apache.org/licenses/LICENSE-2.0) |
+| [prop-types](facebook/prop-types) | 15.8.1 | [MIT](https://opensource.org/license/mit/) |
+| [raphael](git://github.com/DmitryBaranovskiy/raphael.git) | 2.3.0 | [MIT](https://opensource.org/license/mit/) |
+| [react-is](https://github.com/facebook/react.git) | 16.13.1 | [MIT](https://opensource.org/license/mit/) |
+| [regenerator-runtime](https://github.com/facebook/regenerator/tree/main/packages/runtime) | 0.14.1 | [MIT](https://opensource.org/license/mit/) |
+| [rehackt](git+https://github.com/phryneas/rehackt.git) | 0.1.0 | [MIT](https://opensource.org/license/mit/) |
+| [rxjs](https://github.com/reactivex/rxjs.git) | 7.8.2 | [Apache-2.0](https://www.apache.org/licenses/LICENSE-2.0) |
+| [symbol-observable](blesh/symbol-observable) | 4.0.0 | [MIT](https://opensource.org/license/mit/) |
+| [ts-invariant](git+https://github.com/apollographql/invariant-packages.git) | 0.10.3 | [MIT](https://opensource.org/license/mit/) |
+| [tslib](https://github.com/Microsoft/tslib.git) | 2.8.1 | [0BSD](http://landley.net/toybox/license.html) |
+| [uuid](https://github.com/uuidjs/uuid.git) | 14.0.1 | [MIT](https://opensource.org/license/mit/) |
+| [web-streams-polyfill](git+https://github.com/MattiasBuelens/web-streams-polyfill.git) | 3.3.3 | [MIT](https://opensource.org/license/mit/) |
+| [zen-observable](zenparsing/zen-observable) | 0.8.15 | [MIT](https://opensource.org/license/mit/) |
+| [zen-observable-ts](git+https://github.com/apollographql/zen-observable-ts.git) | 1.2.5 | [MIT](https://opensource.org/license/mit/) |
+| [zone.js](git://github.com/angular/angular.git) | 0.15.0 | [MIT](https://opensource.org/license/mit/) |
+

docs/process-services-cloud/components/form-cloud.component.md

@@ -89,7 +89,7 @@ The template defined inside `empty-form` will be shown when no form definition i
 | path | `string` |  | Path of the folder where the metadata will be stored. |
 | processInstanceId | `string` |  | ProcessInstanceId id to fetch corresponding form and values. |
 | readOnly | `boolean` | false | Toggle readonly state of the form. Forces all form widgets to render as readonly if enabled. |
-| showCompleteButton | `boolean` | true | Toggle rendering of the `Complete` outcome button. |
+| showCompleteButton | `boolean` | false | Toggle rendering of the `Complete` outcome button. |
 | showRefreshButton | `boolean` | true | Toggle rendering of the `Refresh` button. |
 | showSaveButton | `boolean` | true | Toggle rendering of the `Save` outcome button. |
 | showTitle | `boolean` | true | Toggle rendering of the form title. |

docs/process-services-cloud/components/process-filters-cloud.component.md

@@ -27,6 +27,7 @@ Lists all available process filters and allows to select a filter.
 | appName     | `string`                       | ""            | (required) The application name                               |
 | filterParam | `UserTaskFilterRepresentation` |               | (optional) The filter to be selected by default               |
 | showIcons   | `boolean`                      | false         | (optional) Toggles showing an icon by the side of each filter |
+| useBatchedCounters | `boolean` | false | Get all the filter counters with one call to `POST /query/v1/count` (needs Activiti 8.7.0). Turn it on for both filter components. |
 
 ### Events
 

docs/process-services-cloud/components/task-filters-cloud.component.md

@@ -36,6 +36,7 @@ Shows all available filters.
 | appName     | `string`            | ""            | Display filters available to the current user for the application with the specified name.                                         |
 | filterParam | `FilterParamsModel` |               | Parameters to use for the task filter cloud. If there is no match then the default filter (the first one in the list) is selected. |
 | showIcons   | `boolean`           | false         | Toggles display of the filter's icons.                                                                                             |
+| useBatchedCounters | `boolean` | false | Get all the filter counters with one call to `POST /query/v1/count` (needs Activiti 8.7.0). Turn it on for both filter components. |
 
 ### Events
 

docs/release-notes/README.md

@@ -9,6 +9,10 @@ The first **General Availability** release was v2.0.0.
 
 ## General Availability
 
+- [9.0.0](RelNote-9.0.0.md)
+- [8.5.0](RelNote-8.5.0.md)
+- [8.4.1](RelNote-8.4.1.md)
+- [8.3.1](RelNote-8.3.1.md)
 - [8.2.1](RelNote-8.2.1.md)
 - [8.2.0](RelNote-8.2.0.md)
 - [8.1.1](RelNote-8.1.1.md)

docs/release-notes/RelNote-8.3.1.md

@@ -0,0 +1,193 @@
+---
+Title: Changelog for alfresco-ng2-components v8.3.1
+---
+
+# Changelog
+
+- [68b1b98c83](git@github.com:Alfresco/alfresco-ng2-components/commit/68b1b98c83) AAE-42904 Escape html in evaluated fields and variables for rich-text display widget (#11718)
+- [3e44f2d358](git@github.com:Alfresco/alfresco-ng2-components/commit/3e44f2d358) [ACS-11259] Fix categories deletion in content metadata component (#11717)
+- [dc8e6a9fb3](git@github.com:Alfresco/alfresco-ng2-components/commit/dc8e6a9fb3) [PRODSEC-11289] Fix Angular i18n vulnerable to CSS (#11710)
+- [0b7b89e5d8](git@github.com:Alfresco/alfresco-ng2-components/commit/0b7b89e5d8) [ACS-11213] Reverted ngx translate upgrade (#11702)
+- [a15b1f4c85](git@github.com:Alfresco/alfresco-ng2-components/commit/a15b1f4c85) AAE-42804 Fixing task filter query param (#11701)
+- [294e6254c2](git@github.com:Alfresco/alfresco-ng2-components/commit/294e6254c2) AAE-42804 Adding adf active class to activated link (#11698)
+- [ec312d49ab](git@github.com:Alfresco/alfresco-ng2-components/commit/ec312d49ab) [ACS-11213] Updated ngx translate in libs (#11699)
+- [c216cea81b](git@github.com:Alfresco/alfresco-ng2-components/commit/c216cea81b) Fix minimatch version for adf-cli (#11697)
+- [ad966af662](git@github.com:Alfresco/alfresco-ng2-components/commit/ad966af662) [ACS-11213] Upgrade ngx-translate to v17 (#11692)
+- [8b23b61d9c](git@github.com:Alfresco/alfresco-ng2-components/commit/8b23b61d9c) [PRODSEC-11257] audit fix @cspell/eslint-plugin (#11696)
+- [dd66ecc72a](git@github.com:Alfresco/alfresco-ng2-components/commit/dd66ecc72a) AAE-42804 Cleaning up tasks and process filter components (#11693)
+- [3b14351389](git@github.com:Alfresco/alfresco-ng2-components/commit/3b14351389) [ACS-11225] Remove @nx/webpack dependency (#11688)
+- [3535fa3d89](git@github.com:Alfresco/alfresco-ng2-components/commit/3535fa3d89) ACS-11224 Migrate upload components to Angular control flow (#11691)
+- [68d174c3e6](git@github.com:Alfresco/alfresco-ng2-components/commit/68d174c3e6) [ACS-11033] add node id field to ai answer references (#11690)
+- [4cc56421ee](git@github.com:Alfresco/alfresco-ng2-components/commit/4cc56421ee) AAE-42658 Remove check for outcome.id as name based outcomes are valid (#11685)
+- [1061e762f8](git@github.com:Alfresco/alfresco-ng2-components/commit/1061e762f8) Apply Copilot suggestion
+- [358367bcb1](git@github.com:Alfresco/alfresco-ng2-components/commit/358367bcb1) AAE-42643 Fix long error messages overlapping with icon
+- [52ad50fbc7](git@github.com:Alfresco/alfresco-ng2-components/commit/52ad50fbc7) refactor: update PDF viewer component imports and types for better compatibility (#11686)
+- [2a0d5df2d5](git@github.com:Alfresco/alfresco-ng2-components/commit/2a0d5df2d5) [ACS-11173] Initial set of rules for Copilot review (#11683)
+- [7405b2d2e4](git@github.com:Alfresco/alfresco-ng2-components/commit/7405b2d2e4) fix pdf import for the Viewer (#11684)
+- [7a3650e6a7](git@github.com:Alfresco/alfresco-ng2-components/commit/7a3650e6a7) [ACS-11204] Fix: Duplicated site name is displayed instead of id when there are two libraries with the same name (#11682)
+- [de34579038](git@github.com:Alfresco/alfresco-ng2-components/commit/de34579038) AAE-42156 Update text and multiline fields to show custom regex validation message. (#11670)
+- [2f8d8c2007](git@github.com:Alfresco/alfresco-ng2-components/commit/2f8d8c2007) chore: update ESLint and cspell configurations to ignore story files (#11681)
+- [303a9efb3e](git@github.com:Alfresco/alfresco-ng2-components/commit/303a9efb3e) chore: eslint fixes for @typescript-eslint/no-explicit-any (#11672)
+- [7f8b49cb07](git@github.com:Alfresco/alfresco-ng2-components/commit/7f8b49cb07) Remove excess disabled attribute (#11680)
+- [f1f2000db8](git@github.com:Alfresco/alfresco-ng2-components/commit/f1f2000db8) AAE-42525 Updated condition for mat-error (#11669)
+- [5935fbfb5b](git@github.com:Alfresco/alfresco-ng2-components/commit/5935fbfb5b) [ACS-11153] Changed eslint rule for ng-reflect after copilot suggestion in ACA (#11673)
+- [57b8fe7174](git@github.com:Alfresco/alfresco-ng2-components/commit/57b8fe7174) [ACS-11153] Corrected eslint rule for ng-reflect (#11671)
+- [cfb9a505e4](git@github.com:Alfresco/alfresco-ng2-components/commit/cfb9a505e4) [ACS-10847] Location filter breaks the page when user value used (#11667)
+- [e5471c8741](git@github.com:Alfresco/alfresco-ng2-components/commit/e5471c8741) Add missing input type (#11668)
+- [1baddb2b37](git@github.com:Alfresco/alfresco-ng2-components/commit/1baddb2b37) AAE-42291 Double-click to copy to clipboard does not work on disabled/read-only fields in card-view-textitem (#11656)
+- [e48950b200](git@github.com:Alfresco/alfresco-ng2-components/commit/e48950b200) [MNT-25123] Fixed incorrectly displayed some annotations (#11662)
+- [4581f714d7](git@github.com:Alfresco/alfresco-ng2-components/commit/4581f714d7) [ACS-11153] remove the usage of ng reflect from the unit tests (#11666)
+- [bc30b74213](git@github.com:Alfresco/alfresco-ng2-components/commit/bc30b74213) AAE-39679 Counting click event twice for attach file widget (#11645)
+- [3f542d99ba](git@github.com:Alfresco/alfresco-ng2-components/commit/3f542d99ba) Migrate to @angular-eslint/prefer-inject and @typescript-eslint/prefer-readonly (#11665)
+- [f8fa996b04](git@github.com:Alfresco/alfresco-ng2-components/commit/f8fa996b04) AAE-33828 Fix for the runtime errors on data-table should be handled (#11639)
+- [93fc7c166c](git@github.com:Alfresco/alfresco-ng2-components/commit/93fc7c166c) AAE-41605 Add ability to filter by linked processes (#11664)
+- [b6a6c1bc86](git@github.com:Alfresco/alfresco-ng2-components/commit/b6a6c1bc86) [MNT-24175]: fixes non node values handling (#11641)
+- [5850dafca7](git@github.com:Alfresco/alfresco-ng2-components/commit/5850dafca7) [ACS-11158]: removes mat selectors for tooltips (#11659)
+- [fafa5d6c41](git@github.com:Alfresco/alfresco-ng2-components/commit/fafa5d6c41) ACS-11160: improve context menu overlay service implementation (#11661)
+- [1f49af4c8f](git@github.com:Alfresco/alfresco-ng2-components/commit/1f49af4c8f) ACS-11154 Viewer stabilisation, lint fixes (#11660)
+- [84affe9f37](git@github.com:Alfresco/alfresco-ng2-components/commit/84affe9f37) ACS-11155: update conditional checks to use optional chaining (#11658)
+- [40b15689d5](git@github.com:Alfresco/alfresco-ng2-components/commit/40b15689d5) AAE-21047 Get rid of enums (#11643)
+- [d274d62d73](git@github.com:Alfresco/alfresco-ng2-components/commit/d274d62d73) AAE-40604 Fix edge case for REST/Variable for dropdown showing required message (#11638)
+- [1fa683e2a9](git@github.com:Alfresco/alfresco-ng2-components/commit/1fa683e2a9) Fix for ACA upstream (#11642)
+- [faa22f2fde](git@github.com:Alfresco/alfresco-ng2-components/commit/faa22f2fde) Fix for ACA upstream (#11640)
+- [4df5b9282c](git@github.com:Alfresco/alfresco-ng2-components/commit/4df5b9282c) [MNT-25478] Expose list parents method in nodes api service (#11622)
+- [30afd2d863](git@github.com:Alfresco/alfresco-ng2-components/commit/30afd2d863) AAE-42151 [FE - Studio Admin] Improve types for Integration Contexts (#11633)
+- [0b805f3e9b](git@github.com:Alfresco/alfresco-ng2-components/commit/0b805f3e9b) Revert "AAE-40604 Fix case when rest/variable are okay and dropdown is requir…" (#11634)
+- [4d99262ba3](git@github.com:Alfresco/alfresco-ng2-components/commit/4d99262ba3) AAE-41699 Evaluate variables in form display text (#11620)
+- [14899931d2](git@github.com:Alfresco/alfresco-ng2-components/commit/14899931d2) AAE-41742 Add processRelatedTo payload for processes list (#11632)
+- [283b996063](git@github.com:Alfresco/alfresco-ng2-components/commit/283b996063) [MNT-25541] PDFs containing JP2 images (JPEG 2000) cannot be displayed in ADW viewer (#11618)
+- [5df193b255](git@github.com:Alfresco/alfresco-ng2-components/commit/5df193b255) [MNT-25123] pdf annotations incorrect and or not visible (#11621)
+- [dcf133b37e](git@github.com:Alfresco/alfresco-ng2-components/commit/dcf133b37e) [MNT-25410] ADW - Saved Searches can load the wrong search set, and t… (#11599)
+- [31bafd718e](git@github.com:Alfresco/alfresco-ng2-components/commit/31bafd718e) AAE-40604 Fix case when rest/variable are okay and dropdown is required and not selected (#11619)
+- [0c50bfd4e3](git@github.com:Alfresco/alfresco-ng2-components/commit/0c50bfd4e3) [ACS-10957] new locators for errors in ACC dialogs (#11617)
+- [e859923541](git@github.com:Alfresco/alfresco-ng2-components/commit/e859923541) [ACS-10304] KN: personal files: Column resizing available via mouse but not accessible via keyboard (#11616)
+- [6ff7ce4add](git@github.com:Alfresco/alfresco-ng2-components/commit/6ff7ce4add) [MNT-25501]: APS - Process instance pagination failure in ADF due to conflicting parameters sent from ADF to APS API (#11615)
+- [302b3e18ec](git@github.com:Alfresco/alfresco-ng2-components/commit/302b3e18ec) AAE-40604 Fix for Dropdown required validation message is not present (#11600)
+- [84de7c7765](git@github.com:Alfresco/alfresco-ng2-components/commit/84de7c7765) Satori adotion icon fix (#11614)
+- [b74ffc81f4](git@github.com:Alfresco/alfresco-ng2-components/commit/b74ffc81f4) [ACS-10247] a11y: SR not announce Start/End Date as required fields (#11613)
+- [3e9b5a097c](git@github.com:Alfresco/alfresco-ng2-components/commit/3e9b5a097c) [ACS-10193] Other A11y My Libraries Link (#11587)
+- [ba3d9d5be4](git@github.com:Alfresco/alfresco-ng2-components/commit/ba3d9d5be4) [ACS-7768] Styling fixes for permission management page (#11597)
+- [8cda30db45](git@github.com:Alfresco/alfresco-ng2-components/commit/8cda30db45) [ACS-10203]: Checkbox "Select All" has no visible label (#11594)
+- [1780aa9663](git@github.com:Alfresco/alfresco-ng2-components/commit/1780aa9663) [ACS-10281] a11y fix: Approve step folder control is focusable twice (#11589)
+- [3bba02264a](git@github.com:Alfresco/alfresco-ng2-components/commit/3bba02264a) [ACS-10241]: Personal files: Column sorting state and role not communicated by buttons (parially reverted to align with hxp) (#11598)
+- [4987bbadef](git@github.com:Alfresco/alfresco-ng2-components/commit/4987bbadef) [ACS-10302] Add aria-live to selected aspects counter (#11593)
+- [9cb8b962ae](git@github.com:Alfresco/alfresco-ng2-components/commit/9cb8b962ae) [ACS-10213] Libraries: Radio buttons for Public, Private, and Moderated lack a grouped label (#11590)
+- [6bb78f9d26](git@github.com:Alfresco/alfresco-ng2-components/commit/6bb78f9d26) [ACS-10274] sr personal files sr announces white heavy check mark in entitlements row of repository section (#11595)
+- [2b79f18d79](git@github.com:Alfresco/alfresco-ng2-components/commit/2b79f18d79) [ACS-10247] a11y fix: SR announces Start/End Date fields incorrectly in date popup (#11592)
+- [4a6e9fc5d6](git@github.com:Alfresco/alfresco-ng2-components/commit/4a6e9fc5d6) [ACS-10241]: SR: Personal files: Column sorting state and role not communicated by buttons (#11591)
+- [6131bf3890](git@github.com:Alfresco/alfresco-ng2-components/commit/6131bf3890) AAE-38626 Reload columns on appname change (#11560)
+- [15806d7c9f](git@github.com:Alfresco/alfresco-ng2-components/commit/15806d7c9f) HXIDP-5181 Allow form text fields to render custom field status content (#11523)
+- [42c2f78baf](git@github.com:Alfresco/alfresco-ng2-components/commit/42c2f78baf) Fixes icon button color in array item (#11588)
+- [1028df91da](git@github.com:Alfresco/alfresco-ng2-components/commit/1028df91da) [ACS-7768] ADF Form fields cleanup (#11484)
+- [1c59b2fb15](git@github.com:Alfresco/alfresco-ng2-components/commit/1c59b2fb15) [ACS-10307] SR: Personal files: No confirmation announced when creating new folder or document (#11549)
+- [198e18bef5](git@github.com:Alfresco/alfresco-ng2-components/commit/198e18bef5) [ACS-10239] Add aria hidden to visual separators (#11572)
+- [1022e1e51f](git@github.com:Alfresco/alfresco-ng2-components/commit/1022e1e51f) [ACS-10276] Add proper title and aria label to chip remove button (#11569)
+- [6927af4ec3](git@github.com:Alfresco/alfresco-ng2-components/commit/6927af4ec3) [ACS-10288] Aria label for user initials pipe (#11568)
+- [3f01a92d67](git@github.com:Alfresco/alfresco-ng2-components/commit/3f01a92d67) AAE-34140 Asynchronous Forms - automatically populated value cannot be used in another task (#11574)
+- [e78da9dea0](git@github.com:Alfresco/alfresco-ng2-components/commit/e78da9dea0) ACS-8395: remove old and unused search picker components (#11573)
+- [a3c309c676](git@github.com:Alfresco/alfresco-ng2-components/commit/a3c309c676) AAE-41613 Hiding tooltip card on click (#11571)
+- [6eaaff33bb](git@github.com:Alfresco/alfresco-ng2-components/commit/6eaaff33bb) [ACS-10289] No notifications info is no longer mat menu item (#11566)
+- [22478f8097](git@github.com:Alfresco/alfresco-ng2-components/commit/22478f8097) Update Storybook & Regenerate lockfile [ci:force][affected:*] (#11567)
+- [b04e1ca081](git@github.com:Alfresco/alfresco-ng2-components/commit/b04e1ca081) [ACS-10323] Fix not announced aria-label (#11553)
+- [0edb04eeb2](git@github.com:Alfresco/alfresco-ng2-components/commit/0edb04eeb2) [ACS-10301] Add aria-hidden to a decorative icon (#11564)
+- [5c536079c9](git@github.com:Alfresco/alfresco-ng2-components/commit/5c536079c9) Refactor alfresco-viewer component tests to use [adf-icon] directive for icons (#11565)
+- [6c4bdf0c5c](git@github.com:Alfresco/alfresco-ng2-components/commit/6c4bdf0c5c) Exclude adf-icon from linting (#11563)
+- [f5c696ed7e](git@github.com:Alfresco/alfresco-ng2-components/commit/f5c696ed7e) AAE-41553 Fix again crowdin exec from release workflow_call (#11562)
+- [5cdcd97201](git@github.com:Alfresco/alfresco-ng2-components/commit/5cdcd97201) [ACS-10259] Add an option to reorder rows with keyboard (#11548)
+- [670e77580d](git@github.com:Alfresco/alfresco-ng2-components/commit/670e77580d) AAE-41553 Fix crowdin exec from release workflow_call (#11561)
+- [c81a64be79](git@github.com:Alfresco/alfresco-ng2-components/commit/c81a64be79) [ACS-10206]: setting haspopup after init (#11475)
+- [506aeecdc2](git@github.com:Alfresco/alfresco-ng2-components/commit/506aeecdc2) [ACS-10280] Keyboard Navigation: Search: Unnecessary stops in the results table using the Tab key: (#11529)
+- [5076862e07](git@github.com:Alfresco/alfresco-ng2-components/commit/5076862e07) AAE-41553 Fix CI validation on crowdin PRs (#11557)
+- [ee7fa5bfa4](git@github.com:Alfresco/alfresco-ng2-components/commit/ee7fa5bfa4) Revert "AAE-38626 Updating columns when appName changes (#11554)" (#11556)
+- [934765f2f6](git@github.com:Alfresco/alfresco-ng2-components/commit/934765f2f6) [ACS-10304] KN: personal files: Column resizing available via mouse but not accessible via keyboard (#11525)
+- [d838d93abc](git@github.com:Alfresco/alfresco-ng2-components/commit/d838d93abc) AAE-41496 Deprecate icon component (#11550)
+- [69b73c8490](git@github.com:Alfresco/alfresco-ng2-components/commit/69b73c8490) AAE-38626 Updating columns when appName changes (#11554)
+- [d411d93689](git@github.com:Alfresco/alfresco-ng2-components/commit/d411d93689) AAE-41500 Added linked processes properties (#11552)
+- [1c53dfa42e](git@github.com:Alfresco/alfresco-ng2-components/commit/1c53dfa42e) chore: add peer flag to multiple dependencies in package-lock.json
+- [4200f9abce](git@github.com:Alfresco/alfresco-ng2-components/commit/4200f9abce) AAE-40748 Bug fixes for translation and storage services (#11551)
+- [0b7124a638](git@github.com:Alfresco/alfresco-ng2-components/commit/0b7124a638) remove unused blank page component (#11533)
+- [50913dd4e4](git@github.com:Alfresco/alfresco-ng2-components/commit/50913dd4e4) [ACS-10335] Corrected screen reader reading for between group in search date range component (#11534)
+- [219f52a361](git@github.com:Alfresco/alfresco-ng2-components/commit/219f52a361) [ACS-6821] Adjust the search filter icon in document list (#11528)
+- [4bf065561a](git@github.com:Alfresco/alfresco-ng2-components/commit/4bf065561a) [ACS-10313] KN: Personal Files: Row selection checkboxes are not accessible for keyboard and screen reader users (#11531)
+- [17f9b3eeba](git@github.com:Alfresco/alfresco-ng2-components/commit/17f9b3eeba) ACS-8224 Make Multi Value Pipe internal (#11530)
+- [08725100d8](git@github.com:Alfresco/alfresco-ng2-components/commit/08725100d8) [ACS-10331] Corrected columns visibility title (#11526)
+- [304216b36b](git@github.com:Alfresco/alfresco-ng2-components/commit/304216b36b) AAE-41330 Unify adf-icon use in adf-core (#11527)
+- [e01cd40b1f](git@github.com:Alfresco/alfresco-ng2-components/commit/e01cd40b1f) [ACS-10205]: Extends DataTableAdapter interface to handle focus for accessibility (#11506)
+- [e44e00304a](git@github.com:Alfresco/alfresco-ng2-components/commit/e44e00304a) AAE-38334 Add link process payload (#11524)
+- [236726b67c](git@github.com:Alfresco/alfresco-ng2-components/commit/236726b67c) AAE-40657 Support multiple integration contexts in task service (#11463)
+- [8ed1f4d8df](git@github.com:Alfresco/alfresco-ng2-components/commit/8ed1f4d8df) [ACS-1882] Keyboard Navigation: Personal files: Wrong focus order when adding a comment in "Details" section (#11521)
+- [8824331f3b](git@github.com:Alfresco/alfresco-ng2-components/commit/8824331f3b) [ACS-10884] Keyboard interactions for crop tool in image viewer (#11522)
+- [716ce228ce](git@github.com:Alfresco/alfresco-ng2-components/commit/716ce228ce) ACS-8772: Migrate node tooltip to Angular signals (#11498)
+- [d7c01d3558](git@github.com:Alfresco/alfresco-ng2-components/commit/d7c01d3558) Update Angular packages to version 19.2.18 [ci:force] (#11518)
+- [572231bf49](git@github.com:Alfresco/alfresco-ng2-components/commit/572231bf49) AAE-41225 update typescript target to es2022 and fix FormService propagation (#11508)
+- [0c3cdaa006](git@github.com:Alfresco/alfresco-ng2-components/commit/0c3cdaa006) [ACS-10335] Grouped input controls with radio buttons for search date range component (#11507)
+- [38070c210c](git@github.com:Alfresco/alfresco-ng2-components/commit/38070c210c) Remove unused adf-button component (#11520)
+- [d6aaede8d8](git@github.com:Alfresco/alfresco-ng2-components/commit/d6aaede8d8) [MNT-25408]: improves facet resetting flow (#11485)
+- [5f9de1fde8](git@github.com:Alfresco/alfresco-ng2-components/commit/5f9de1fde8) AAE-40269 Add storybook v10 (#11401)
+- [f0c6cc0ff7](git@github.com:Alfresco/alfresco-ng2-components/commit/f0c6cc0ff7) ACS-10937 Remove unused mat-progress wrapper (#11505)
+- [1950bbe7be](git@github.com:Alfresco/alfresco-ng2-components/commit/1950bbe7be) AAE-41138 Fix commit message extraction (#11501)
+- [c64c6e4f7e](git@github.com:Alfresco/alfresco-ng2-components/commit/c64c6e4f7e) [ACS-10242] - Personal files: Filter by Size popup announces entire c… (#11468)
+- [d0b3faad6a](git@github.com:Alfresco/alfresco-ng2-components/commit/d0b3faad6a) [ACS-10201] Snackbar content is hidden and not announced by SR (#11504)
+- [d2021b9ae9](git@github.com:Alfresco/alfresco-ng2-components/commit/d2021b9ae9) AAE-40714 fixing the filter cut issue on admin-hxp (#11499)
+- [66911491e3](git@github.com:Alfresco/alfresco-ng2-components/commit/66911491e3) AAE-39182 Update (some) Angular packages to version 19.2.19
+- [c25690cf84](git@github.com:Alfresco/alfresco-ng2-components/commit/c25690cf84) ACS-10936: Remove unused LANDING_PAGE_TOKEN (#11503)
+- [74262fcc17](git@github.com:Alfresco/alfresco-ng2-components/commit/74262fcc17) AAE-40934 style: replace mat-raise-button with mat-flat-button (#11502)
+- [98ce8d810c](git@github.com:Alfresco/alfresco-ng2-components/commit/98ce8d810c) AAE-41025 Add adf-icon to process-services-cloud lib (#11497)
+- [d93d963a8d](git@github.com:Alfresco/alfresco-ng2-components/commit/d93d963a8d) AAE-41024 Add adf-icon to content-services lib (#11496)
+- [b13ae23173](git@github.com:Alfresco/alfresco-ng2-components/commit/b13ae23173) ACS-10914 Remove unused allowable operation directive (#11476)
+- [41b97eb835](git@github.com:Alfresco/alfresco-ng2-components/commit/41b97eb835) AAE-40911 Add adf-icon to core lib (#11471)
+- [4113eeb2ab](git@github.com:Alfresco/alfresco-ng2-components/commit/4113eeb2ab) Allows closing dropdown with Escape key (#11489)
+- [fcb15868f8](git@github.com:Alfresco/alfresco-ng2-components/commit/fcb15868f8) ACS-7579 Remove unused process audit directive (#11474)
+- [744bb671f1](git@github.com:Alfresco/alfresco-ng2-components/commit/744bb671f1) ACS-10908 Cleanup unit test configuration for Content (#11470)
+- [52cadb5b8a](git@github.com:Alfresco/alfresco-ng2-components/commit/52cadb5b8a) AAE-40896 Create adf-icon directive (#11467)
+- [fe39b3c1bd](git@github.com:Alfresco/alfresco-ng2-components/commit/fe39b3c1bd) [AAE-40028] Added group/section validation skipping to cloud forms for workspace (#11466)
+- [8c1118984d](git@github.com:Alfresco/alfresco-ng2-components/commit/8c1118984d) remove webpack and webpack cli [ci:force] (#11464)
+- [21d6818de5](git@github.com:Alfresco/alfresco-ng2-components/commit/21d6818de5) ACS-10083 Fixes filters behavior with queryParams  (#11426)
+- [331b4459a8](git@github.com:Alfresco/alfresco-ng2-components/commit/331b4459a8) AAE-40359 Filter out service processes on start process (#11446)
+- [062b8060bc](git@github.com:Alfresco/alfresco-ng2-components/commit/062b8060bc) ACS-7461 Remove ADF_DOCUMENT_PARENT_COMPONENT token (#11372)
+- [8da24884ec](git@github.com:Alfresco/alfresco-ng2-components/commit/8da24884ec) AAE-40703 Add support for content projection (#11462)
+- [0f9969a387](git@github.com:Alfresco/alfresco-ng2-components/commit/0f9969a387) AAE-39668 Add ability to filter by unlinked processes (#11461)
+- [f6c7d90578](git@github.com:Alfresco/alfresco-ng2-components/commit/f6c7d90578) AAE-38626 Made cloud services extentable (#11450)
+- [205b5c7df5](git@github.com:Alfresco/alfresco-ng2-components/commit/205b5c7df5) AAE-40700 Add remapping icons support (#11449)
+- [7dddbf7d91](git@github.com:Alfresco/alfresco-ng2-components/commit/7dddbf7d91) [ACS-10232][ACS-10326] Fix focus trap for search filters (#11447)
+- [8a7359c769](git@github.com:Alfresco/alfresco-ng2-components/commit/8a7359c769) Update Simpleapp (#11448)
+- [7eb2034008](git@github.com:Alfresco/alfresco-ng2-components/commit/7eb2034008) AAE-40093 Support defining translations from code (#11442)
+- [68ab5b1c16](git@github.com:Alfresco/alfresco-ng2-components/commit/68ab5b1c16) AAE-39923 Placholeder is formatted according to the enableFractions (#11441)
+- [ec7ede3830](git@github.com:Alfresco/alfresco-ng2-components/commit/ec7ede3830) AAE-40544 Add ability to filter out subprocesses (#11445)
+- [34a929ec47](git@github.com:Alfresco/alfresco-ng2-components/commit/34a929ec47) [AAE-40654] added space for label (#11443)
+- [8c0d5fc8a1](git@github.com:Alfresco/alfresco-ng2-components/commit/8c0d5fc8a1) [ACS-10282] screen reader personal files perform actions empty state not announced by screen reader (#11444)
+- [8fa3e6acdf](git@github.com:Alfresco/alfresco-ng2-components/commit/8fa3e6acdf) [MNT-25408]: updates changing search config logic; exposes stream for active filters (#11386)
+- [6567c02220](git@github.com:Alfresco/alfresco-ng2-components/commit/6567c02220) AAE-40269 Cleanup deprecated global sass mixins (#11420)
+- [9717a88818](git@github.com:Alfresco/alfresco-ng2-components/commit/9717a88818) [ACS-10226] Improve color contrast for better accessibility (#11429)
+- [58591c67dc](git@github.com:Alfresco/alfresco-ng2-components/commit/58591c67dc) [ACS-10835] Add new param for recent filters in custom resources services (#11428)
+- [ab0cb46065](git@github.com:Alfresco/alfresco-ng2-components/commit/ab0cb46065) AAE-40641 Upgarde Nx Workspace to latest (v22) (#11440)
+- [de62fe181a](git@github.com:Alfresco/alfresco-ng2-components/commit/de62fe181a) [MNT-24950] Preview a file from APS doesn't work in ADW (#11439)
+- [cc053a76ae](git@github.com:Alfresco/alfresco-ng2-components/commit/cc053a76ae) AAE-40540 fixing tab misplacement issue on ADW (#11427)
+- [10eae07cc0](git@github.com:Alfresco/alfresco-ng2-components/commit/10eae07cc0) [AAE-39923] provide transformed placeholder if possible (#11422)
+- [4dab69d4dc](git@github.com:Alfresco/alfresco-ng2-components/commit/4dab69d4dc) Revert "[ACS-10281] a11y fix - Approve step folder control is focusable twice…" (#11424)
+- [e6fe929b02](git@github.com:Alfresco/alfresco-ng2-components/commit/e6fe929b02) [ACS-10260] Add required format to search date range (#11423)
+- [40df22b576](git@github.com:Alfresco/alfresco-ng2-components/commit/40df22b576) AAE-40028 Added improvement to ignore field validation if it is inside a group/section that is hidden (#11362)
+- [06d8f48862](git@github.com:Alfresco/alfresco-ng2-components/commit/06d8f48862) AAE-40492 Align chip content in cardview arrayitem component (#11421)
+- [5625cf72d6](git@github.com:Alfresco/alfresco-ng2-components/commit/5625cf72d6) AAE-40254 Remove excludeByProcessCategoryName input (#11406)
+- [f379d99474](git@github.com:Alfresco/alfresco-ng2-components/commit/f379d99474) [ACS-10281] a11y fix - Approve step folder control is focusable twice causing duplicate screen reader (#11385)
+- [f317374a2e](git@github.com:Alfresco/alfresco-ng2-components/commit/f317374a2e) [ACS-10306] Proper alt for user or group icons (#11403)
+- [a9efe36e5f](git@github.com:Alfresco/alfresco-ng2-components/commit/a9efe36e5f) AAE-40427 Replace shelljs with native node api (#11404)
+- [c5f3008301](git@github.com:Alfresco/alfresco-ng2-components/commit/c5f3008301) [MNT-25276] sorting using sorting key configuration is not correctly saved in localstorage (#11383)
+- [514754d0eb](git@github.com:Alfresco/alfresco-ng2-components/commit/514754d0eb) AAE-40395 Security fixes (#11400)
+- [57090bd76e](git@github.com:Alfresco/alfresco-ng2-components/commit/57090bd76e) Stabilize data conversion methods for rows and columns in datatable (#11398)
+- [0f911b1259](git@github.com:Alfresco/alfresco-ng2-components/commit/0f911b1259) CSX-268 Remove outdated css rule (#11397)
+- [91447f8646](git@github.com:Alfresco/alfresco-ng2-components/commit/91447f8646) [ACS-10765] Switch to NPM trusted publishing (#11388)
+- [533bf89b18](git@github.com:Alfresco/alfresco-ng2-components/commit/533bf89b18) Revert "AAE-40254 Remove excludeByProcessCategoryName input (#11392)" (#11395)
+- [f5f7c04a85](git@github.com:Alfresco/alfresco-ng2-components/commit/f5f7c04a85) [ACS-10219] add class selector (#11387)
+- [3d07d7e942](git@github.com:Alfresco/alfresco-ng2-components/commit/3d07d7e942) AAE-40254 Remove excludeByProcessCategoryName input (#11392)
+- [2009a4ec27](git@github.com:Alfresco/alfresco-ng2-components/commit/2009a4ec27) AAE-40356 Fix misaligned datetime card view element (#11391)
+- [dbdc402756](git@github.com:Alfresco/alfresco-ng2-components/commit/dbdc402756) AAE-40078 Fix visibility condition not working (#11389)
+- [f63f0a85c0](git@github.com:Alfresco/alfresco-ng2-components/commit/f63f0a85c0) [ACS-10765] Enable workflow_dispatch for release workflow (#11390)
+- [3031ec1f66](git@github.com:Alfresco/alfresco-ng2-components/commit/3031ec1f66) AAE-39988 Dropdown conditional not working for repeatable section (#11360)
+- [c68f638992](git@github.com:Alfresco/alfresco-ng2-components/commit/c68f638992) AAE-39796 Reduce customizations of card view fields (#11373)
+- [eff64284e9](git@github.com:Alfresco/alfresco-ng2-components/commit/eff64284e9) Revert "AAE-39923 Placeholder transformed with currency based on locale (#11342)" (#11370)
+- [9a6cd813de](git@github.com:Alfresco/alfresco-ng2-components/commit/9a6cd813de) ACS-10745 File size columns not translating the tooltips (#11368)
+- [03f67c861f](git@github.com:Alfresco/alfresco-ng2-components/commit/03f67c861f) [ACS-10740] Adjust Karma and Jest config (#11365)
+- [58a25fe19e](git@github.com:Alfresco/alfresco-ng2-components/commit/58a25fe19e) AAE-40136 Migrate locale settings to signals (#11361)
+- [2f5139df73](git@github.com:Alfresco/alfresco-ng2-components/commit/2f5139df73) fix post release version bump
+- [9fd304b66d](git@github.com:Alfresco/alfresco-ng2-components/commit/9fd304b66d) post release version bump (#11366)

docs/release-notes/RelNote-8.4.1.md

@@ -0,0 +1,40 @@
+---
+Title: Changelog for alfresco-ng2-components v8.4.1
+---
+
+# Changelog
+
+- [af95723f30](https://github.com/Alfresco/alfresco-ng2-components/commit/af95723f30) [ACS-11589] [ACA] info drawer test-area does not show full text (#11816)
+- [d70ae599c7](https://github.com/Alfresco/alfresco-ng2-components/commit/d70ae599c7) Fix security vulnerabilities in npm dependencies (#11815)
+- [07c6a4d923](https://github.com/Alfresco/alfresco-ng2-components/commit/07c6a4d923) Remove jasmine-spec-reporter dependency from package.json and package-lock.json (#11814)
+- [6fc8dda887](https://github.com/Alfresco/alfresco-ng2-components/commit/6fc8dda887) Remove mocha and jasmine-ajax dependencies (#11813)
+- [48eb258311](https://github.com/Alfresco/alfresco-ng2-components/commit/48eb258311) AAE-44184 Colspan setting on form fields is ignored or not properly applied (#11800)
+- [32850a0ce8](https://github.com/Alfresco/alfresco-ng2-components/commit/32850a0ce8) [MNT-25185] Display authority name instead of id if provided (#11809)
+- [8a6bcac29e](https://github.com/Alfresco/alfresco-ng2-components/commit/8a6bcac29e) [ACS-11506]: moved aria-live region (#11808)
+- [8ce0561ef5](https://github.com/Alfresco/alfresco-ng2-components/commit/8ce0561ef5) AAE-44086 Unify styling and coloring of errors in forms (#11797)
+- [69a9dc1386](https://github.com/Alfresco/alfresco-ng2-components/commit/69a9dc1386) AAE-44002 Allow user input for date and datetime fields (#11791)
+- [70a6f42649](https://github.com/Alfresco/alfresco-ng2-components/commit/70a6f42649) AAE-40741 Form rule `Validate form` doesn't do anything (#11788)
+- [74252797b7](https://github.com/Alfresco/alfresco-ng2-components/commit/74252797b7) AAE-28918 Fix for start process button is enabled when required widgets are read only without value (#11781)
+- [79871455f4](https://github.com/Alfresco/alfresco-ng2-components/commit/79871455f4) [ACS-10242] SR: Personal files: Filter by Size popup announces entire content instead of dialog title (#11782)
+- [d7a8f03dbf](https://github.com/Alfresco/alfresco-ng2-components/commit/d7a8f03dbf) AAE-43749 Added date formatting according to locale (#11769)
+- [a3e13da3a4](https://github.com/Alfresco/alfresco-ng2-components/commit/a3e13da3a4) [ACS-10280]: Keyboard Navigation: Search: Unnecessary stops in the results table using the Tab key (#11736)
+- [565db01819](https://github.com/Alfresco/alfresco-ng2-components/commit/565db01819) [MNT-25635] Search filter autocomplete search for tags when input changes (#11780)
+- [f321b74be0](https://github.com/Alfresco/alfresco-ng2-components/commit/f321b74be0) AAE-21162 Add deploymentCompletion property to ApplicationInstance model (#11784)
+- [28fe6d3a76](https://github.com/Alfresco/alfresco-ng2-components/commit/28fe6d3a76) AAE-43710 Fix form field spacing misalignments (#11763)
+- [d526d31425](https://github.com/Alfresco/alfresco-ng2-components/commit/d526d31425) AAE-34137 Fix for disabling `complete` button on the form after declining form confirmation dialog (#11766)
+- [e97439f09b](https://github.com/Alfresco/alfresco-ng2-components/commit/e97439f09b) AAE-43391 Disable 'Start process' and 'Complete' when whitespace is entered into required form fields (#11760)
+- [bdd4b687c6](https://github.com/Alfresco/alfresco-ng2-components/commit/bdd4b687c6) AAE-43290 updating the minor version for angular in ADF (#11752)
+- [46989ae081](https://github.com/Alfresco/alfresco-ng2-components/commit/46989ae081) [ACS-11319] Move tree actions menu item buttons inside the component (#11749)
+- [a50dfd050d](https://github.com/Alfresco/alfresco-ng2-components/commit/a50dfd050d) CSX-460 Revert Remove excess disabled attribute PR (#11748)
+- [e57910f5c3](https://github.com/Alfresco/alfresco-ng2-components/commit/e57910f5c3) [ACS-11271] Rebranding of FE apps (#11746)
+- [3bea95b8e0](https://github.com/Alfresco/alfresco-ng2-components/commit/3bea95b8e0) Revert "[ACS-10219] add class selector (#11387)" (#11745)
+- [adce4cabf5](https://github.com/Alfresco/alfresco-ng2-components/commit/adce4cabf5) [MNT-25447] Fix: Viewing preview renditions for versions fails (#11747)
+- [ebf742c54b](https://github.com/Alfresco/alfresco-ng2-components/commit/ebf742c54b) AAE-43331 Expand adf-icon (#11744)
+- [759d206302](https://github.com/Alfresco/alfresco-ng2-components/commit/759d206302) HXIDP-6471 Provide start process variables to custom screen (#11712)
+- [a865372819](https://github.com/Alfresco/alfresco-ng2-components/commit/a865372819) [ACS-10267] Announce titles for repository info as headings (#11728)
+- [2bab587876](https://github.com/Alfresco/alfresco-ng2-components/commit/2bab587876) [ACS-11205] Bring back removed getter (#11735)
+- [e325ad3871](https://github.com/Alfresco/alfresco-ng2-components/commit/e325ad3871) AAE-39678 Apply visibility conditions if dependent field's value is changed with form rules (#11729)
+- [a8ae3d3b4e](https://github.com/Alfresco/alfresco-ng2-components/commit/a8ae3d3b4e) AAE-42908 Evaluate expressions for rich-text-display list types (#11726)
+- [bc41c33ba8](https://github.com/Alfresco/alfresco-ng2-components/commit/bc41c33ba8) [ACS-11205] Add LazyApi decorator (#11711)
+- [83e80906d8](https://github.com/Alfresco/alfresco-ng2-components/commit/83e80906d8) [ACS-11213] upgrade ngx translate to v17  (#11719)
+- [ef5944a09c](https://github.com/Alfresco/alfresco-ng2-components/commit/ef5944a09c) Post-release version bump (#11734)

docs/release-notes/RelNote-8.5.0.md

@@ -0,0 +1,83 @@
+---
+Title: Changelog for alfresco-ng2-components v8.5.0
+---
+
+# Changelog
+
+- [ec04358796](https://github.com/Alfresco/alfresco-ng2-components/commit/ec04358796) AAE-46943 Rename git signing secret/vars to HXPS_GIT_* (#11978)
+- [49a28b357c](https://github.com/Alfresco/alfresco-ng2-components/commit/49a28b357c) AAE-46943 Sign Crowdin translation PR commits with GPG (#11974)
+- [dd9e58ddaa](https://github.com/Alfresco/alfresco-ng2-components/commit/dd9e58ddaa) [ACS-11927] init acs aps scripts update terraform (#11976)
+- [c723e19b6d](https://github.com/Alfresco/alfresco-ng2-components/commit/c723e19b6d) AAE-46971 Update Supply Chain Review GH AW to latest (#11972)
+- [bb6f9b1f3d](https://github.com/Alfresco/alfresco-ng2-components/commit/bb6f9b1f3d) AAE-46434 Fix disabled stying for people widgets (#11967)
+- [7bb219e4dd](https://github.com/Alfresco/alfresco-ng2-components/commit/7bb219e4dd) AAE-46654 Fix - return empty string when no value is provided in card… (#11969)
+- [70038bea26](https://github.com/Alfresco/alfresco-ng2-components/commit/70038bea26) AAE-46246 Format typed values in form display widgets v2 (#11952)
+- [5ad3dca38d](https://github.com/Alfresco/alfresco-ng2-components/commit/5ad3dca38d) AAE-46684 fix release workflow eslint publish fix provenance (#11963)
+- [fd3802f2dc](https://github.com/Alfresco/alfresco-ng2-components/commit/fd3802f2dc) AAE-46684 fix release workflow eslint publish fix (#11962)
+- [a8eee9fe3a](https://github.com/Alfresco/alfresco-ng2-components/commit/a8eee9fe3a) Improvements/aae 46684 fix release workflow fixed command (#11961)
+- [0a7fa14d0f](https://github.com/Alfresco/alfresco-ng2-components/commit/0a7fa14d0f) Improvements/aae 46684 fix release workflow ignore (#11960)
+- [4dde6d2a45](https://github.com/Alfresco/alfresco-ng2-components/commit/4dde6d2a45) [AAE-46514] - Fix release workflow (#11959)
+- [78661f11c5](https://github.com/Alfresco/alfresco-ng2-components/commit/78661f11c5) [AAE-46514] -  Migration to PNPM (#11926)
+- [faf9d3faac](https://github.com/Alfresco/alfresco-ng2-components/commit/faf9d3faac) AAE-46388 Update Supply Chain Review GH AW to latest (#11957)
+- [5c8eb21ab3](https://github.com/Alfresco/alfresco-ng2-components/commit/5c8eb21ab3) AAE-46387 Standardize DependaBot config schedule/grouping (#11953)
+- [7d76d789b2](https://github.com/Alfresco/alfresco-ng2-components/commit/7d76d789b2) AAE-41418 Add process instance id input to task header cloud component (#11897)
+- [a71cc84f11](https://github.com/Alfresco/alfresco-ng2-components/commit/a71cc84f11) AAE-46507 Next Task Endpoint (#11943)
+- [34acdd20cf](https://github.com/Alfresco/alfresco-ng2-components/commit/34acdd20cf) Revert "AAE-46246 Format typed values in form display widgets (#11935)" (#11951)
+- [f39b9167b8](https://github.com/Alfresco/alfresco-ng2-components/commit/f39b9167b8) AAE-46246 Format typed values in form display widgets (#11935)
+- [aa2a357fb2](https://github.com/Alfresco/alfresco-ng2-components/commit/aa2a357fb2) AAE-46434 Fix read-only field styling on forms (#11928)
+- [f9899883dc](https://github.com/Alfresco/alfresco-ng2-components/commit/f9899883dc) Revert AAE-46242 crowdin locale mapping changes (#11949)
+- [46b2d0380b](https://github.com/Alfresco/alfresco-ng2-components/commit/46b2d0380b) AAE-45774 Shorten invalid date error message (#11920)
+- [274ddb3098](https://github.com/Alfresco/alfresco-ng2-components/commit/274ddb3098) AAE-46386 Set DependaBot cooldown for all ecosystems as 3d (#11947)
+- [f602070f1e](https://github.com/Alfresco/alfresco-ng2-components/commit/f602070f1e) AAE-46388 Fix DependaBot config to ignore gh-aw-actions (#11946)
+- [d206d28f1c](https://github.com/Alfresco/alfresco-ng2-components/commit/d206d28f1c) [AAE-32905] Fix commit messages commands aren't working (#11922)
+- [80e9e51cfa](https://github.com/Alfresco/alfresco-ng2-components/commit/80e9e51cfa) AAE-46242 - Looks like we need to override the mapping as crowding config is not set to this format (#11939)
+- [345e1e69ad](https://github.com/Alfresco/alfresco-ng2-components/commit/345e1e69ad) AAE-46242 - should use the variable osx_locale to match the format xx-YY (#11936)
+- [a2b026ed7e](https://github.com/Alfresco/alfresco-ng2-components/commit/a2b026ed7e) [AAE-46242] - Changed the name convention for translation files to ISO standard naming (#11924)
+- [e40fd2250e](https://github.com/Alfresco/alfresco-ng2-components/commit/e40fd2250e) AAE-46388 Add Supply Chain Review agentic workflow (#11927)
+- [cfdd3f9c50](https://github.com/Alfresco/alfresco-ng2-components/commit/cfdd3f9c50) MD3 migration fixes (#11919)
+- [1314f0751f](https://github.com/Alfresco/alfresco-ng2-components/commit/1314f0751f) AAE-46476 Fix sorting functionality of task list retrieval from runtime bundle (#11921)
+- [f4882e99be](https://github.com/Alfresco/alfresco-ng2-components/commit/f4882e99be) Revert "New Crowdin translations by GitHub Action (#11796)" (#11923)
+- [b5d2de583d](https://github.com/Alfresco/alfresco-ng2-components/commit/b5d2de583d) build(deps): update 3rd party dependencies (#11916)
+- [70f90c65a5](https://github.com/Alfresco/alfresco-ng2-components/commit/70f90c65a5) AAE-46392 Fix card view select item crash on numeric initial value (#11917)
+- [f339647f40](https://github.com/Alfresco/alfresco-ng2-components/commit/f339647f40) refactor: migrate license checks off license-checker (#11905)
+- [a7fa68056d](https://github.com/Alfresco/alfresco-ng2-components/commit/a7fa68056d) chore: remove unused @nx/node dependency (#11895)
+- [8280aa2f6d](https://github.com/Alfresco/alfresco-ng2-components/commit/8280aa2f6d) chore: update NX packages to version 22.7.2 and related dependencies (#11904)
+- [5553aaaefe](https://github.com/Alfresco/alfresco-ng2-components/commit/5553aaaefe) [MNT-25522] Add support for fileLink icon (#11903)
+- [15814380a5](https://github.com/Alfresco/alfresco-ng2-components/commit/15814380a5) [ci:force] AAE-46219 [TEST] Revert cli build/installDeps changes from #11880 and #11899 (#11901)
+- [4044fafc39](https://github.com/Alfresco/alfresco-ng2-components/commit/4044fafc39) AAE-46219 Skip prod deps in cli:installDeps to unblock release (#11899)
+- [ece50ac32c](https://github.com/Alfresco/alfresco-ng2-components/commit/ece50ac32c) [MNT-25149] Card view select item multivalued property support (#11891)
+- [1d163c6749](https://github.com/Alfresco/alfresco-ng2-components/commit/1d163c6749) Revert "AAE-44065 Change date picker to match other styles (#11868)" (#11896)
+- [1fbd869902](https://github.com/Alfresco/alfresco-ng2-components/commit/1fbd869902) chore: remove unused eslint-plugin-prefer-arrow (#11894)
+- [165d0fc521](https://github.com/Alfresco/alfresco-ng2-components/commit/165d0fc521) chore: remove unused moment dependency (#11893)
+- [64d9f3a6d4](https://github.com/Alfresco/alfresco-ng2-components/commit/64d9f3a6d4) AAE-45774 Show error for date fields if invalid format (#11886)
+- [9e106b006c](https://github.com/Alfresco/alfresco-ng2-components/commit/9e106b006c) AAE-43881 Fix for form rules not applying when new [data] comes in (#11879)
+- [8309d2dc55](https://github.com/Alfresco/alfresco-ng2-components/commit/8309d2dc55) AAE-44065 Change date picker to match other styles (#11868)
+- [e3430ae36e](https://github.com/Alfresco/alfresco-ng2-components/commit/e3430ae36e) AAE-45695 Group @typescript-eslint/* packages in dependabot (#11880)
+- [1860fefd42](https://github.com/Alfresco/alfresco-ng2-components/commit/1860fefd42) [MNT-25647] Handle facets label wrapped in quotes (#11866)
+- [9fe4006a0d](https://github.com/Alfresco/alfresco-ng2-components/commit/9fe4006a0d) AAE-45391 Lazy loading and improvements for pdfJS (#11869)
+- [62fb51e910](https://github.com/Alfresco/alfresco-ng2-components/commit/62fb51e910) Update CODEOWNERS
+- [b7783d2259](https://github.com/Alfresco/alfresco-ng2-components/commit/b7783d2259) AAE-39830 Removing Material components color property (#11865)
+- [410490158f](https://github.com/Alfresco/alfresco-ng2-components/commit/410490158f) AAE-30881 Remove jsrassign (#11863)
+- [57bf066164](https://github.com/Alfresco/alfresco-ng2-components/commit/57bf066164) AAE-30882 Remove superagent for fetch (#11856)
+- [9cdacf3ebf](https://github.com/Alfresco/alfresco-ng2-components/commit/9cdacf3ebf) AAE-45312 Removing propagate job from release workflow (#11864)
+- [8821980913](https://github.com/Alfresco/alfresco-ng2-components/commit/8821980913) AAE-38566 Remove globals mixin (#11798)
+- [a73b100fae](https://github.com/Alfresco/alfresco-ng2-components/commit/a73b100fae) AAE-45003 Extend task cloud services (#11850)
+- [2649cdea2d](https://github.com/Alfresco/alfresco-ng2-components/commit/2649cdea2d) AAE-44003 Allow manual input for date field (#11830)
+- [3a543d8a0a](https://github.com/Alfresco/alfresco-ng2-components/commit/3a543d8a0a) AAE-32905 Rework pr pipeline (#11853)
+- [3fc59b2358](https://github.com/Alfresco/alfresco-ng2-components/commit/3fc59b2358) AAE-45216 Removing custom theme from core (#11862)
+- [337b82e988](https://github.com/Alfresco/alfresco-ng2-components/commit/337b82e988) AAE-45215 Removing unused breadcrumb theme (#11861)
+- [0faa2e1a56](https://github.com/Alfresco/alfresco-ng2-components/commit/0faa2e1a56) [AAE-0000] - fixed run for process-service-cloud (#11855)
+- [d6262eafc6](https://github.com/Alfresco/alfresco-ng2-components/commit/d6262eafc6) [ACS-11628] small for for init-acs-env.ts (#11860)
+- [d3ad66d25b](https://github.com/Alfresco/alfresco-ng2-components/commit/d3ad66d25b) AAE-44435 Fix incorrect Start process button on user task forms (#11837)
+- [aa2de3bde6](https://github.com/Alfresco/alfresco-ng2-components/commit/aa2de3bde6) AAE-45173 Adding background color to tooltip card (#11852)
+- [d1d06a68bc](https://github.com/Alfresco/alfresco-ng2-components/commit/d1d06a68bc) AAE-44098 Bottom tab navigation buttons (#11834)
+- [0a6da1ba13](https://github.com/Alfresco/alfresco-ng2-components/commit/0a6da1ba13) AAE-45076 Fix svg icon style (#11849)
+- [d3ac5362ba](https://github.com/Alfresco/alfresco-ng2-components/commit/d3ac5362ba) AAE-44946 - Sending also previous value to allow valuation and valida… (#11836)
+- [ddb8adc0e4](https://github.com/Alfresco/alfresco-ng2-components/commit/ddb8adc0e4) AAE-44752 Add type to ProcessInstanceCloud (#11847)
+- [85005c9c1c](https://github.com/Alfresco/alfresco-ng2-components/commit/85005c9c1c) AAE-44987 Applying color and background to sidenav (#11846)
+- [407c6c1829](https://github.com/Alfresco/alfresco-ng2-components/commit/407c6c1829) [ACS-11350] keyboard navigation user incorrect focus order after collapsing the left navigation menu (#11835)
+- [e3fc03c58d](https://github.com/Alfresco/alfresco-ng2-components/commit/e3fc03c58d) Revert "AAE-44098 Bottom Tab nav buttons (#11801)" (#11832)
+- [510a813ed2](https://github.com/Alfresco/alfresco-ng2-components/commit/510a813ed2) [ACS-11472] Fix file icon is not updated for version renditions (#11807)
+- [7864f1a8e0](https://github.com/Alfresco/alfresco-ng2-components/commit/7864f1a8e0) AAE-44098 Bottom Tab nav buttons (#11801)
+- [c09edd71ff](https://github.com/Alfresco/alfresco-ng2-components/commit/c09edd71ff) AAE-44761 Remove unused imports (#11829)
+- [64826c3a99](https://github.com/Alfresco/alfresco-ng2-components/commit/64826c3a99) AAE-40649 Material Design 3 migration (#11286)
+- [423c646bac](https://github.com/Alfresco/alfresco-ng2-components/commit/423c646bac) Post release version bump (#11828)

docs/release-notes/RelNote-9.0.0.md

@@ -0,0 +1,48 @@
+---
+Title: Changelog for alfresco-ng2-components v9.0.0
+---
+
+# Changelog
+
+- [0a19be090e](git@github.com:Alfresco/alfresco-ng2-components/commit/0a19be090e) [ACS-12286] Pass includeFields through to getRecentFiles for -recent- (#12067)
+- [b69c3ae1ae](git@github.com:Alfresco/alfresco-ng2-components/commit/b69c3ae1ae) [MNT-25230] Displayed modified time for node version (#12066)
+- [ce907417b7](git@github.com:Alfresco/alfresco-ng2-components/commit/ce907417b7) AAE-48166 Compensate for VM/Citrix clock drift in token expiry check (#12024)
+- [4c7765e3fa](git@github.com:Alfresco/alfresco-ng2-components/commit/4c7765e3fa) AAE-46517 Add onRowCountChange form event for Repeatable Sections (#12062)
+- [407a64996e](git@github.com:Alfresco/alfresco-ng2-components/commit/407a64996e) AAE-46248 Format dropdown/radio option labels in display-text expressions (#12045)
+- [01cea60490](git@github.com:Alfresco/alfresco-ng2-components/commit/01cea60490) [MNT-25230] adw version history does not provide user information (#12050)
+- [09ef05038c](git@github.com:Alfresco/alfresco-ng2-components/commit/09ef05038c) chore: remove deprecated MaterialModule and its references (#12051)
+- [c7bd56f244](git@github.com:Alfresco/alfresco-ng2-components/commit/c7bd56f244) AAE-43974 Fix for alfresco-content-app e2e failure (#12055)
+- [b86e41515e](git@github.com:Alfresco/alfresco-ng2-components/commit/b86e41515e) [ACS-12037] Remove Knowledge Discovery from ADF (#12042)
+- [0b35118dee](git@github.com:Alfresco/alfresco-ng2-components/commit/0b35118dee) AAE-47880 UI breaks when pasting very large text into text field (#12043)
+- [fe2b3d85dd](git@github.com:Alfresco/alfresco-ng2-components/commit/fe2b3d85dd) [ACS-12108] Introduce signed commits into ADF workflows (#12040)
+- [b0dc85422c](git@github.com:Alfresco/alfresco-ng2-components/commit/b0dc85422c) Improvement/AAE-43974 Refactoring form fields (#11945)
+- [23f0392c12](git@github.com:Alfresco/alfresco-ng2-components/commit/23f0392c12) AAE-47634 Refactor: switch form service getTask to use runtime bundle API (#12020)
+- [997303e6a7](git@github.com:Alfresco/alfresco-ng2-components/commit/997303e6a7) [ACS-11325] remove chevron button from tab order in adf-tree (#12041)
+- [45d1818f04](git@github.com:Alfresco/alfresco-ng2-components/commit/45d1818f04) [ACS-12098] firefox headless race condition viewer fix (#12023)
+- [448e667c52](git@github.com:Alfresco/alfresco-ng2-components/commit/448e667c52) [MNT-25681] Content node selector panel filtering fixed (#12032)
+- [18e602aa85](git@github.com:Alfresco/alfresco-ng2-components/commit/18e602aa85) [PRODSEC-13253] Increased peerDependencies versions to allow to increase angular version in other projects (#12031)
+- [4cd8648a05](git@github.com:Alfresco/alfresco-ng2-components/commit/4cd8648a05) Adjust release triggers to use cache-writable token (#12030)
+- [7f57b3936b](git@github.com:Alfresco/alfresco-ng2-components/commit/7f57b3936b) AAE-39528 Session timeout features (#12008)
+- [5a30baad99](git@github.com:Alfresco/alfresco-ng2-components/commit/5a30baad99) Release cache read/write fix (#12029)
+- [5050c3d974](git@github.com:Alfresco/alfresco-ng2-components/commit/5050c3d974) [ACS-12041] Add debounceTime in PeopleWidgetComponent to limit API calls on every keystroke (#12027)
+- [d8b36606e2](git@github.com:Alfresco/alfresco-ng2-components/commit/d8b36606e2) [MNT-25681] Search refactoring and unification (#12019)
+- [37f8fe47ac](git@github.com:Alfresco/alfresco-ng2-components/commit/37f8fe47ac) AAE-46695 Upgrade to pnpm 11.9 (#12028)
+- [af0d1e4ead](git@github.com:Alfresco/alfresco-ng2-components/commit/af0d1e4ead) AAE-47093 Update Supply Chain Review GH AW to latest (#12025)
+- [bd7f393db9](git@github.com:Alfresco/alfresco-ng2-components/commit/bd7f393db9)  AAE-47634 Fix block task claim checking status on Runtime Bundle (#12009)
+- [d2d6696c05](git@github.com:Alfresco/alfresco-ng2-components/commit/d2d6696c05) Migrate to Angular 20, TypeScript 5.9, and Angular Material 20 (#11657)
+- [7546aa91a3](git@github.com:Alfresco/alfresco-ng2-components/commit/7546aa91a3) AAE-47577 Form Spinner persists outside of Automate Form (#12005)
+- [74d67c39a0](git@github.com:Alfresco/alfresco-ng2-components/commit/74d67c39a0) [ACS-11317] a11y Fix: Tags interactive controls are not manageable via keyboard (#11845)
+- [20c20f2749](git@github.com:Alfresco/alfresco-ng2-components/commit/20c20f2749) AAE-46247 Add type-aware form field value adapter service (#11968)
+- [b498d5744c](git@github.com:Alfresco/alfresco-ng2-components/commit/b498d5744c) [AAE-47470] - Upgrade Pnpm to 11.8.0 (#12004)
+- [80eef35e1d](git@github.com:Alfresco/alfresco-ng2-components/commit/80eef35e1d) [ACS-11325] Add keyboard navigation and a11y support for adf-tree component (#11973)
+- [49a3f1e104](git@github.com:Alfresco/alfresco-ng2-components/commit/49a3f1e104) AAE-47412 Update suprocesses and linked processes for process instance model (#11996)
+- [0beaa18452](git@github.com:Alfresco/alfresco-ng2-components/commit/0beaa18452) [ACS-11973] Fix: context menu disappears during bulk upload (#11994)
+- [76fd461741](git@github.com:Alfresco/alfresco-ng2-components/commit/76fd461741) AAE-47042 Add auto grow support to multiline text widget (#11981)
+- [78697ee62a](git@github.com:Alfresco/alfresco-ng2-components/commit/78697ee62a) [AAE-0000] - Fixed js-api error index.js (#11970)
+- [43c5bc17fb](git@github.com:Alfresco/alfresco-ng2-components/commit/43c5bc17fb) [ACS-12020] Updated init-aps passwords with secret ones (#11993)
+- [cda20e0386](git@github.com:Alfresco/alfresco-ng2-components/commit/cda20e0386) Post-release version bump (#11988)
+- [8f5099e822](git@github.com:Alfresco/alfresco-ng2-components/commit/8f5099e822) [ACS-11928] convert ReadStream to Blob before appending to FormData (#11987)
+- [5dd709ed58](git@github.com:Alfresco/alfresco-ng2-components/commit/5dd709ed58) AAE-44809 Fix form multi-file attachment - document viewer not updated on file selection (#11980)
+- [9d353bf271](git@github.com:Alfresco/alfresco-ng2-components/commit/9d353bf271) [ACS-11974] [ACA] Upload new version button is no longer disabled when clicked once (#11977)
+- [633702860f](git@github.com:Alfresco/alfresco-ng2-components/commit/633702860f) Post-release version bump (#11984)
+- [bf5b3af285](git@github.com:Alfresco/alfresco-ng2-components/commit/bf5b3af285) AAE-47094 Add Stale PR Cleanup workflow (#11983)

docs/tutorials/content-metadata-component.md

@@ -109,9 +109,10 @@ Now that the `my-preset` configuration is defined, let's use it in a view of the
 
 ### Properties
 
-| Name     | Type      | Default value | Description                                                                  |
-|----------|-----------|---------------|------------------------------------------------------------------------------|
-| readOnly | `boolean` | false         | (optional) This flag sets the metadata in read only mode preventing changes. |
+| Name                       | Type      | Default value | Description                                                                  |
+|----------------------------|-----------|---------------|------------------------------------------------------------------------------|
+| readOnly                   | `boolean` | false         | (optional) This flag sets the metadata in read only mode preventing changes. |
+| displayCopyToClipboardIcon | `boolean` | true          | Toggles whether or not to display the copy to clipboard icon.                |
 
 ### Viewing the result
 

docs/tutorials/using-components.md

@@ -38,7 +38,7 @@ Open the `src/app/login/login.component.html` file. The contents will look like
 
 ```html
 <adf-login
-	copyrightText="© 2005-2025 Hyland Software, Inc. and its affiliates. All rights reserved."
+	copyrightText="© 2005-2026 Hyland Software, Inc. and its affiliates. All rights reserved."
 	successRoute="/documentlist">
 </adf-login>
 ```
@@ -49,7 +49,7 @@ Looking at the documentation, we can see that the `<adf-login/>` component has a
 <adf-login
 	[showRememberMe]="false"
 	[showLoginActions]="false"
-	copyrightText="© 2005-2025 Hyland Software, Inc. and its affiliates. All rights reserved."
+	copyrightText="© 2005-2026 Hyland Software, Inc. and its affiliates. All rights reserved."
 	successRoute="/documentlist">
 </adf-login>
 ```
@@ -80,7 +80,7 @@ Open `src/app/login/login.component.html` and add `(executeSubmit)="myExecuteSub
 	[showRememberMe]="false"
 	[showLoginActions]="false"
 	(executeSubmit)="myExecuteSubmitMethod($event)"
-	copyrightText="© 2005-2025 Hyland Software, Inc. and its affiliates. All rights reserved."
+	copyrightText="© 2005-2026 Hyland Software, Inc. and its affiliates. All rights reserved."
 	successRoute="/documentlist">
 </adf-login>
 ```
@@ -147,7 +147,7 @@ Let's add a simple Hello World message in the footer. Open the template `src/app
 	[showRememberMe]="false"
 	[showLoginActions]="false"
 	(executeSubmit)="myExecuteSubmitMethod($event)"
-	copyrightText="© 2005-2025 Hyland Software, Inc. and its affiliates. All rights reserved."
+	copyrightText="© 2005-2026 Hyland Software, Inc. and its affiliates. All rights reserved."
 	successRoute="/documentlist">
 		<adf-login-footer>
 			<ng-template>

docs/upgrade-guide/README.md

@@ -6,6 +6,23 @@ Title: Upgrade guides
 
 Below are links to the upgrade guides notes for all released versions of ADF back to v2.6.0
 
+- [Upgrading from ADF v8.5 to v9.0](upgrade850-900.md)
+- [Upgrading from ADF v8.4 to v8.5](upgrade841-850.md)
+- [Upgrading from ADF v8.3.1 to v8.4.1](upgrade831-841.md)
+- [Upgrading from ADF v8.2.1 to v8.3.1](upgrade821-831.md)
+- [Upgrading from ADF v8.1.1 to v8.2.1](upgrade811-821.md)
+- [Upgrading from ADF v8.0 to v8.1.1](upgrade80-811.md)
+- [Upgrading from ADF v7.0 to v8.0](upgrade70-80.md)
+- [Upgrading from ADF v6.9 to v7.0](upgrade69-70.md)
+- [Upgrading from ADF v6.8 to v6.9](upgrade68-69.md)
+- [Upgrading from ADF v6.7.1 to v6.8.0](upgrade671-68.md)
+- [Upgrading from ADF v6.6.0 to v6.7.1](upgrade66-671.md)
+- [Upgrading from ADF v6.5.2 to v6.6.0](upgrade652-66.md)
+- [Upgrading from ADF v6.4 to v6.5.2](upgrade64-652.md)
+- [Upgrading from ADF v6.3 to v6.4](upgrade63-64.md)
+- [Upgrading from ADF v6.2 to v6.3](upgrade62-63.md)
+- [Upgrading from ADF v6.1 to v6.2](upgrade61-62.md)
+- [Upgrading from ADF v6.0 to v6.1](upgrade60-61.md)
 - [Upgrading from ADF v5.0 to v6.0](upgrade50-60.md)
 - [Upgrading from ADF v4.11 to v5.0](upgrade411-50.md)
 - [Upgrading from ADF v4.6 to v4.7](upgrade46-47.md)

docs/upgrade-guide/upgrade-6.0.0-6.9.0.md

@@ -1,155 +0,0 @@
----
-Title: Upgrading from ADF v5.0 to v6.0
----
-
-# Upgrading from ADF v6.0 to v6.9
-
-This guide provides instructions on how to upgrade your v6.0.0 ADF projects to v6.9.0.
-
-## Before you begin
-
-Always perform upgrades on "clean" project state, backup your changes or make a project backup.
-
-```shell
-# Recommended clean up
-nx reset && rm -rf .angular .nx dist node_modules nxcache tmp
-```
-
-## .env file
-
-If you are using .env file, make sure to update it with the latest configuration:
-
-```yaml
-APP_CONFIG_OAUTH2_HOST="<oauth2_host>"
-APP_CONFIG_ENABLE_MOBILE_APP_SWITCH=false
-APP_CONFIG_PLUGIN_AOS=true
-APP_CONFIG_PLUGIN_CONTENT_SERVICE=true
-APP_CONFIG_PLUGIN_FOLDER_RULES=true
-APP_CONFIG_ENABLE_DOWNLOAD_PROMPT=false
-APP_CONFIG_ENABLE_DOWNLOAD_PROMPT_REMINDERS=false
-APP_CONFIG_DOWNLOAD_PROMPT_DELAY=30
-APP_CONFIG_DOWNLOAD_PROMPT_REMINDER_DELAY=30
-APP_CONFIG_ENABLE_FILE_AUTO_DOWNLOAD=false
-APP_CONFIG_FILE_AUTO_DOWNLOAD_SIZE_THRESHOLD_IN_MB=10
-```
-
-> [!IMPORTANT]
-> The configuration values are for migration purposes only.
-> Please refer to the documentation for more details on the configuration settings and values.
-
-## Library versions
-
-Update the `package.json` file with the latest library versions:
-
-- Angular: 14.1.3
-- Alfresco Component Libraries: 6.9.0
-- Alfresco JS-API: 7.6.1
-
-```json
-{
-    "dependencies": {
-        "@alfresco/adf-core": "6.9.0",
-        "@alfresco/adf-content-services": "6.9.0",
-        "@alfresco/adf-process-services-cloud": "6.9.0",
-        "@alfresco/adf-insights": "6.9.0",
-        "@alfresco/js-api": "7.6.1"
-    }
-}
-```
-
-> [!NOTE]  
-> You can also refer to the Alfresco Content Application [4.4.1 release](https://github.com/Alfresco/alfresco-content-app/blob/4.4.1/package.json) for the latest version of the libraries.
-
-### Remove old dependencies
-
-```json
-{
-    "dependencies": {
-        "@angular/material-moment-adapter": "14.1.3",
-        "@mat-datetimepicker/moment": "^9.0.68",
-        "moment": "^2.29.4",
-        "moment-es6": "1.0.0",
-        "@angular/flex-layout": "^14.0.0-beta.40"
-    }
-}
-```
-
-### Add extra dependencies
-
-```json
-{
-    "dependencies": {
-        "@angular/material-date-fns-adapter": "14.1.3",
-        "date-fns": "^2.30.0"
-    }
-}
-```
-
-Reinstall your dependencies and make initial build
-
-```sh
-npm i --legacy-peer-deps
-npm run build
-```
-
-### Update code
-
-If you are using the `@alfresco/js-api` library, make sure to update the code according to the latest version:
-
-| Before                 | After              |
-|------------------------|--------------------|
-| MinimalNodeEntity      | NodeEntry          |
-| SiteBody               | SiteBodyCreate     |
-| MinimalNodeEntryEntity | Node               |
-| MinimalNode            | Node               |
-| PathInfoEntity         | PathInfo           |
-| SiteBody               | SiteBodyCreate     |
-| FavoriteBody           | FavoriteBodyCreate |
-| PathElementEntity      | PathElement        |
-
-#### NullInjectorError: No provider for RedirectAuthService!
-
-If you are facing the `NullInjectorError: No provider for RedirectAuthService!` error, make sure to add the `AuthModule` to the `AppModule`:
-
-```typescript
-import { AuthModule } from '@alfresco/adf-core';
-
-@NgModule({
-    imports: [
-        // other imports
-        AuthModule.forRoot({ useHash: true })
-    ]
-})
-export class AppModule {}
-```
-
-For the development purposes, you may want to update the `app.config.json`:
-
-```json5
-{
-    "oauth2": {
-        // other configurations
-        "skipIssuerCheck": true,
-        "strictDiscoveryDocumentValidation": false
-    }
-}
-```
-
-### Document List component
-
-For document list components, remove the `display` property if used:
-
-```html
-[display]="documentDisplayMode$ | async"
-```
-
-## Final steps
-
-After you have updated the code, make sure to test your application thoroughly to ensure that everything is working as expected.
-
-You can build and run your application using the following commands:
-
-```sh
-npm run build
-npm start content-ce
-```

docs/upgrade-guide/upgrade-6.9.0-7.0.0.md

@@ -1,183 +0,0 @@
----
-Title: Upgrading from ADF v6.9 to v7.0
----
-
-# Upgrading from ADF v6.9 to v7.0
-
-This guide provides instructions on how to upgrade your v6.9.0 ADF projects to v7.0.0.
-
-## Before you begin
-
-Always perform upgrades on "clean" project state, backup your changes or make a project backup.
-
-```shell
-# Recommended clean up
-nx reset && rm -rf .angular .nx dist node_modules nxcache tmp
-```
-
-## Libraries updates
-
-Node version used is now 20.18.1.
-
-### Breaking changes with libraries:
-
-- Angular: 17.1.3
-- Angular Material: 17.1.2
-- Typescript: 5.3.3
-- RXJS: 7.8.1
-- NX: 20.0.0
-
-Angular updates can be done with "Update Guide" from Angular documentation.
-
-### Added libraries:
-- eslint-plugin-storybook
-- jasmine-marbles
-- @editorjs/paragraph
-- editorjs-text-alignment-blocktune
-- graphql-ws
-
-### Deleted libraries:
-- protractor
-- selenium-webdriver
-- webdriver-manager
-- shx
-- monaco-editor
-- ngx-monaco-editor-v2
-- @types/selenium-webdriver
-- protractor-retry-angular-cli
-- protractor-screenshoter-plugin
-- protractor-smartrunner
-
-Reinstall your dependencies and make initial build:
-
-```shell
-npm i
-npm run build
-```
-
-Review your applications as some styles and classes of Angular Material components might have changed.
-
-## Demo-Shell and e2e
-Demo shell and its e2e tests have been deleted.
-
-
-## Material module
-Material module is deprecated and will be removed in a future release. Please import components and modules independently.
-
-
-## Standalone components
-Most components have been changed to "standalone" and their modules have been deleted. Please import components directly.
-
-| Deleted modules                |
-|--------------------------------|
-| AttachmentModule               |
-| AppsListModule                 |
-| TaskListModule                 |
-| ProcessListModule              |
-| ProcessUserInfoModule          |
-| TaskCommentsModule             |
-| ProcessCommentsModule          |
-| PeopleModule                   |
-| DynamicTableModule             |
-| ContentWidgetModule            |
-| AnalyticsProcessModule         |
-| DiagramsModule                 |
-| ButtonsMenuModule              |
-| SitesDropdownModule            |
-| DataColumnModule               |
-| ContentUserInfoModule          |
-| AppCardViewModule              |
-| AppCloudSharedModule           |
-| FileViewModule                 |
-| AppProcessListModule           |
-| FolderDirectiveModule          |
-| ContentTypeModule              |
-| SortingPickerModule            |
-| ProcessServicesCloudPipeModule |
-| StartTaskCloudModule           |
-| ProcessDirectiveModule         |
-| StartProcessCloudModule        |
-| TaskDirectiveModule            |
-
-
-
-## Removed components, directives and pipes
-| Deleted components, directives and pipes |
-|------------------------------------------|
-| IsIncludedPipe                           |
-| TabLabelsPipe                            |
-| BooleanPipe                              |
-| FilterOutArrayObjectsByPropPipe          |
-| LocalizedRolePipe                        |
-| MimeTypeIconPipe                         |
-| FilterStringPipe                         |
-| ProcessNameCloudPipe                     |
-| FormStylePipe                            |
-| CancelProcessDirective                   |
-| MomentDateTimePipe                       |
-| MomentDatePipe                           |
-
-
-## A11y changes
-Components have been reviewed and changed to fix most important issues with accessibility. Please test your application thoroughly to ensure that everything is working as expected, as some components have changed their structure, html roles or attributes.
-
-| Components changed             | Description of changes                                               |
-|--------------------------------|----------------------------------------------------------------------|
-| Tooltips                       | Tooltips have been changed from Angular Material to standard tooltip |
-| Search Page and Search Filters | mat-chip-option replaced with mat-chip                               |
-| Columns Selector               | role attribute changes                                               |
-| DataTable                      | role attribute changes                                               |
-| Aspect List                    | structure of html changed                                            |
-
-
-## Guards
-All guards have been converted to functional guards (using the new Angular functional route guard pattern). Please review any custom guards in your application and adapt them to the functional pattern as needed.
-
-Example of converting a class-based guard to a functional guard:
-
-```typescript
-// Before (class-based)
-@Injectable({
-  providedIn: 'root'
-})
-export class AuthGuard implements CanActivate {
-  constructor(private authService: AuthService, private router: Router) {}
-  
-  canActivate() {
-    if (this.authService.isLoggedIn()) {
-      return true;
-    }
-    this.router.navigate(['/login']);
-    return false;
-  }
-}
-
-// After (functional)
-export const authGuard = () => {
-  const authService = inject(AuthService);
-  const router = inject(Router);
-  
-  if (authService.isLoggedIn()) {
-    return true;
-  }
-  return router.parseUrl('/login');
-};
-```
-
-## Model and interface changes
-
-Some models and interfaces have changed:
-
-| Before                        | After                 | Notes                        |
-|-------------------------------|-----------------------|------------------------------|
-| TaskDetailsModel              | TaskRepresentation    | Rename all instances         |
-| IdentityUserFilterInterface   | Removed               | Use type definitions instead |
-| IdentityUserServiceInterface  | Removed               | Use type definitions instead |
-| TaskCloudServiceInterface     | Removed               | Use type definitions instead |
-
-
-## Final steps
-
-After you have updated the code, make sure to test your application thoroughly to ensure that everything is working as expected. Pay special attention to areas that use the renamed models or interfaces, and make sure all components are properly imported as standalone components.
-
-If you encounter any issues during the upgrade process, refer to the Angular update guide or the ADF community for assistance.

docs/upgrade-guide/upgrade-7.0.0-8.0.0.md

@@ -1,164 +0,0 @@
----
-Title: Upgrading from ADF v7.0 to v8.0
----
-
-# Upgrading from ADF v7.0 to v8.0
-
-This guide provides instructions for upgrading your v7.0.0 ADF projects to v8.0.0.
-
-## Before you begin
-
-Always perform upgrades on a "clean" project state. Back up your changes or create a full project backup before proceeding.
-
-```shell
-# Recommended clean up
-nx reset && rm -rf .angular .nx dist node_modules nxcache tmp
-```
-
-## Libraries
-
-Update your dependencies to the versions introduced in the 8.0.0 release:
-
-```json
-{
-    "dependencies": {
-        "@alfresco/adf-core": "8.0.0",
-        "@alfresco/adf-content-services": "8.0.0",
-        "@alfresco/adf-process-services-cloud": "8.0.0",
-        "@alfresco/adf-insights": "8.0.0",
-        "@alfresco/adf-extensions": "8.0.0",
-        "@alfresco/adf-cli": "8.0.0",
-        "@alfresco/eslint-plugin-eslint-angular": "8.0.0",
-        "@alfresco/adf-testing": "8.0.0",
-        "@alfresco/js-api": "9.0.0"
-    }
-}
-```
-
-Currently used Node version: 22.14.0.
-
-### Breaking changes
-
-Major version updates have been applied to the following core libraries:
-
-- Angular: 19.2.6
-- Angular Material: 19.2.9
-- Typescript: 5.8.2
-
-> Details on Angular update can be found in *Update Guide* from Angular documentation.
-
-### Added libraries
-
-```json
-{
-    "dependencies": {
-        "node-fetch": "^3.3.2"
-    },
-    "devDependencies": {
-        "resize-observer-polyfill": "^1.5.1",
-        "webdriver-manager": "12.1.9"
-    }
-}
-```
-
-### Deleted libraries
-
-```json
-{
-    "devDependencies": {
-        "mini-css-extract-plugin": "X.X.X",
-        "css-loader": "X.X.X"
-    }
-}
-```
-
-Reinstall your dependencies and perform an initial build:
-
-```shell
-npm i
-npm run build
-```
-
-Review your applications as some styles and classes of Angular Material components might have changed.
-
-## Deprecations
-
-The following table lists deprecated features and modules that will be removed in upcoming releases. Consider replacing them as soon as you update ADF to minimize future technical debt.
-
-| Name                          | Notes                                                                                         |
-|-------------------------------|-----------------------------------------------------------------------------------------------|
-| Custom Theme                  | Refer to [Custom Theme documentation](../../lib/core/custom-theme/README.md)                  |
-| ShellModule                   | Refer to [Shell documentation](../../lib/core/shell/README.md)                                |
-| FormBaseModule                | Use standalone components instead.                                                            |
-| CoreTestingModule             | Use standalone components instead.                                                            |
-| ProcessServicesCloudModule    | Refer to [ProcessServicesCloudModule replacement](#processservicescloudmodule-replacement)    |
-
-### ProcessServicesCloudModule replacement
-
-To replace this module, import the standalone components directly or use the following provider API to replicate its behavior:
-
-```typescript
-providers: [
-    provideTranslations('adf-process-services-cloud', 'assets/adf-process-services-cloud'),
-    provideCloudPreferences(),
-    provideCloudFormRenderer(),
-    { provide: TASK_LIST_CLOUD_TOKEN, useClass: TaskListCloudService }
-]
-```
-
-## New features and APIs
-
-You can start using the new features and APIs introduced in the 8.0.0 release.
-
-### XMLHttpRequest.withCredentials
-
-Support for disabling the `withCredentials` property in `app.config.json` for identity providers that disallow credentials has been introduced. You can configure it as shown below:
-
-```json
-{
-    "auth": {
-        "withCredentials": false
-    }
-}
-```
-
-### provideShell
-
-The new provideShell API for providing the main application layout can replace the `withRoutes(routes: Routes | AppShellRoutesConfig)` method, as shown below.
-
-```typescript
-import { provideShell } from '@alfresco/adf-core/shell';
-
-provideShell(
-    {
-        routes: [],
-        appService: AppService,
-        authGuard: AuthGuard,
-        navBar: {
-            minWidth: 0,
-            maxWidth: 100
-        }
-    }
-)
-```
-
-### provideI18N
-
-The new `provideI18N` API for providing translation can replace `provideTranslations('app', 'assets')` method, as shown below.
-
-```typescript
-import { provideI18N } from '@alfresco/adf-core';
-
-provideI18N(
-    {
-        defaultLanguage: "en", // optional, defaults to "en"
-        assets: [['en', '/assets/i18n/en.json'], ['fr', '/assets/i18n/fr.json']] 
-    }
-)
-```
-
-## Final steps
-
-After updating your code, thoroughly test your application to ensure everything works as expected.
-
-If you encounter any issues during the upgrade process, refer to the Angular update guide or seek assistance from the ADF community.

docs/upgrade-guide/upgrade60-61.md

@@ -0,0 +1,147 @@
+---
+Title: Upgrading from ADF v6.0 to v6.1
+---
+
+# Upgrading from ADF v6.0 to v6.1
+
+This guide provides instructions on how to upgrade your v6.0.0 ADF projects to v6.1.0.
+
+## Before you begin
+
+Always perform upgrades on a "clean" project state, back up your changes or make a project backup.
+
+Do not skip this task if you want your application to be updated to the most recent version of ADF.
+Upgrades of multiple versions of ADF cannot be done in one step only, but should follow the chain of sequential updates.
+
+After the upgrade, check the other sections below to see if there are any changes affecting your project.
+
+## Contents
+
+- [Library updates](#library-updates)
+- [Breaking changes](#breaking-changes)
+  - [Angular Flex-Layout removed](#angular-flex-layout-removed)
+  - [`@mat-datetimepicker` peer dependency major bump](#mat-datetimepicker-peer-dependency-major-bump)
+  - [`@alfresco/js-api` and ADF peers use a caret range](#alfrescojs-api-and-adf-peers-use-a-caret-range)
+- [Third-party libraries](#third-party-libraries)
+- [New components and features](#new-components-and-features)
+  - [Display Rich Text form widget (cloud)](#display-rich-text-form-widget-cloud)
+  - [Configurable header text color](#configurable-header-text-color)
+- [Behavioural changes](#behavioural-changes)
+
+## Library updates
+
+Update the `package.json` file with the latest library versions:
+
+```json
+{
+    "dependencies": {
+        "@alfresco/adf-core": "6.1.0",
+        "@alfresco/adf-content-services": "6.1.0",
+        "@alfresco/adf-process-services": "6.1.0",
+        "@alfresco/adf-process-services-cloud": "6.1.0",
+        "@alfresco/adf-insights": "6.1.0",
+        "@alfresco/adf-extensions": "6.1.0",
+        "@alfresco/js-api": ">=6.1.0"
+    }
+}
+```
+
+Clean your old distribution and dependencies by deleting `node_modules` and `package-lock.json`.
+
+Reinstall your dependencies
+
+```sh
+npm install
+```
+
+**Note:** the ADF libraries now depend on `@alfresco/js-api` (and on each other) through a `^6.1.0` caret range,
+where `6.0.0` used an exact pin. Make sure your application resolves a JS-API build of `6.1.0` or later.
+
+**Tooling note:** the repository's pinned Node version (`.nvmrc`) moved from **14** to **18**, so the libraries are
+now built and tested on Node 18. Align your build/CI Node version accordingly.
+
+## Breaking changes
+
+The ADF project follows the [semver](https://semver.org/) conventions. `6.1.0` is a minor release, so there are
+no removed or renamed public exports; the items below are dependency-level changes that can still affect your build.
+
+### Angular Flex-Layout removed
+
+`@angular/flex-layout` (`^14.0.0-beta.40`) has been **removed** as a dependency from every ADF library
+(`@alfresco/adf-core`, `@alfresco/adf-content-services`, `@alfresco/adf-process-services`,
+`@alfresco/adf-process-services-cloud` and `@alfresco/adf-insights`). All internal usage of `fxLayout`,
+`fxFlex`, `fxHide` and `FlexLayoutModule` was removed from the component templates and modules.
+
+ADF no longer re-exports `FlexLayoutModule`, and it was never part of the public API barrels, so this does not
+break any ADF import. However, if your own application relied on ADF transitively installing
+`@angular/flex-layout` and you use flex-layout directives in your **own** templates, add the dependency to your
+application directly:
+
+```sh
+npm install @angular/flex-layout@^14.0.0-beta.40
+```
+
+### `@mat-datetimepicker` peer dependency major bump
+
+`@alfresco/adf-core` bumped its `@mat-datetimepicker` peer dependencies by a major version:
+
+| Peer dependency              | Before    | After     |
+| ---------------------------- | --------- | --------- |
+| `@mat-datetimepicker/core`   | `^9.0.68` | `^10.1.1` |
+| `@mat-datetimepicker/moment` | `^9.0.68` | `^10.1.1` |
+
+If your application pins these packages, update them to the `^10.1.1` range so your installed version matches
+the one ADF is built against.
+
+### `@alfresco/js-api` and ADF peers use a caret range
+
+The peer dependencies inside the ADF libraries changed from exact pins (`6.0.0`) to caret ranges (`^6.1.0`). This
+applies to `@alfresco/js-api` and to the inter-library ADF peers (for example `@alfresco/adf-core` and
+`@alfresco/adf-extensions`). Ensure your lockfile resolves compatible `6.x` builds; a stale exact pin of
+`@alfresco/js-api@6.0.0` should be updated to `>=6.1.0`.
+
+## Third-party libraries
+
+| Name                         | Version   | Notes                                                                                                        |
+| ---------------------------- | --------- | ------------------------------------------------------------------------------------------------------------ |
+| `@angular/flex-layout`       | removed   | No longer a dependency of any ADF library (see [Angular Flex-Layout removed](#angular-flex-layout-removed)). |
+| `@mat-datetimepicker/core`   | `^10.1.1` | Major bump from `^9.0.68` (peer of `@alfresco/adf-core`).                                                    |
+| `@mat-datetimepicker/moment` | `^10.1.1` | Major bump from `^9.0.68` (peer of `@alfresco/adf-core`).                                                    |
+
+## New components and features
+
+### Display Rich Text form widget (cloud)
+
+A new form widget, `DisplayRichTextWidgetComponent` (selector `display-rich-text`), is now declared and exported
+by `FormCloudModule` in `@alfresco/adf-process-services-cloud`. Previously the widget class existed but was not
+wired into the module, so it could not be used. It renders read-only rich-text content within a cloud form.
+
+### Configurable header text color
+
+`[HeaderLayoutComponent](../core/components/header.component.md)` (selector `adf-layout-header`) now reads a new
+`headerTextColor` key from `app.config.json` and, when present, applies it to the
+`--theme-header-text-color` CSS custom property (which defaults to the primary palette's contrast color).
+
+```json
+{
+    "headerTextColor": "#ffffff"
+}
+```
+
+## Behavioural changes
+
+| Area                                                                     | Change                                                                                                                                                                            |
+| ------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| [Tree component](../content-services/components/tree.component.md)       | Pagination is now emitted only when the top-level entries change, and an expand/collapse regression was fixed.                                                                    |
+| Form save button (cloud)                                                 | On clicking the system **save** outcome the save button is now disabled, and it is re-enabled when a form field value changes.                                                    |
+| Task / process lists (cloud)                                             | Changing only column visibility no longer triggers a reload of the task or process list.                                                                                          |
+| Task lists (cloud)                                                       | The loading spinner no longer disappears before the list has finished loading.                                                                                                    |
+| Task details (cloud)                                                     | The loading spinner alignment after opening task details was corrected.                                                                                                           |
+| [Tags creator](../content-services/components/tags-creator.component.md) | The "required field" message is no longer shown after discarding changes; the first tag position and an extra scrollbar (shown while the spinner is visible) were also corrected. |
+| [Image viewer](../core/components/viewer.component.md)                   | Navigation between images was fixed, and image display in full-screen mode was corrected.                                                                                         |
+| User roles fetch                                                         | `UserAccessService` now appends an `appkey` query parameter (read from the `application.key` app-config value) when fetching identity roles, if that value is configured.         |
+| Search facets                                                            | Facet, filter and widget chips had markup/icon adjustments in the facets section.                                                                                                 |
+| [Card view select item](../core/components/card-view.component.md)       | The select input's position in the edit template was changed.                                                                                                                     |
+| Start process / task outcomes                                            | Outcome button positioning in the start-process form and the attach-file button style were corrected.                                                                             |
+| Group cloud                                                              | The identity group validation error message was replaced with a shorter version.                                                                                                  |
+| Theme                                                                    | A task-filter color was changed to use the accent-contrast color.                                                                                                                 |

docs/upgrade-guide/upgrade61-62.md

@@ -0,0 +1,380 @@
+---
+
+## Title: Upgrading from ADF v6.1 to v6.2
+
+# Upgrading from ADF v6.1 to v6.2
+
+This guide provides instructions on how to upgrade your v6.1.0 ADF projects to v6.2.0.
+
+## Before you begin
+
+Always perform upgrades on a "clean" project state, back up your changes or make a project backup.
+
+Do not skip this task if you want your application to be updated to the most recent version of ADF.
+Upgrades of multiple versions of ADF cannot be done in one step only, but should follow the chain of sequential updates.
+
+After the upgrade, check the other sections below to see if there are any changes affecting your project.
+
+## Contents
+
+- [Library updates](#library-updates)
+- [Breaking changes](#breaking-changes)
+  - [Dependency injection refactor (](#dependency-injection-refactor-inject)`inject()`[)](#dependency-injection-refactor-inject)
+  - [SharedLinksApiService.createSharedLinks](#sharedlinksapiservicecreatesharedlinks)
+  - [Share dialog: expiry is now date-only](#share-dialog-expiry-is-now-date-only)
+  - [Route-aware filter selection](#route-aware-filter-selection)
+- [Removed items](#removed-items)
+- [Renamed items](#renamed-items)
+  - [CSS class renames](#css-class-renames)
+  - [Encapsulation changes](#encapsulation-changes)
+  - [SCSS reference variables](#scss-reference-variables)
+- [Third-party libraries](#third-party-libraries)
+- [New components and features](#new-components-and-features)
+  - [Logical search filter](#logical-search-filter)
+  - [Advanced search: autocomplete chips](#advanced-search-autocomplete-chips)
+  - [Header customization](#header-customization)
+  - [Icon font set](#icon-font-set)
+  - [OAuth2 configuration handling](#oauth2-configuration-handling)
+- [Behavioural changes](#behavioural-changes)
+- [Theme changes](#theme-changes)
+
+
+
+## Library updates
+
+Update the `package.json` file with the latest library versions:
+
+```json
+{
+    "dependencies": {
+        "@alfresco/adf-core": "6.2.0",
+        "@alfresco/adf-content-services": "6.2.0",
+        "@alfresco/adf-process-services": "6.2.0",
+        "@alfresco/adf-process-services-cloud": "6.2.0",
+        "@alfresco/adf-insights": "6.2.0",
+        "@alfresco/adf-extensions": "6.2.0",
+        "@alfresco/js-api": ">=6.2.0"
+    }
+}
+```
+
+Clean your old distribution and dependencies by deleting `node_modules` and `package-lock.json`.
+
+Reinstall your dependencies
+
+```sh
+npm install
+```
+
+**Note:** the ADF libraries now depend on `@alfresco/js-api` with a `>=6.2.0` range (previously a `^6.1.0` caret range). Make sure your application resolves a JS-API build of `6.2.0` or later.
+
+## Breaking changes
+
+### Dependency injection refactor (`inject()`)
+
+A large number of exported services, components and abstract base classes were refactored
+to use Angular's `inject()` function instead of constructor-parameter injection.
+As a result **their public constructor signatures changed** — most now take no arguments
+(or a reduced set).
+
+This affects you only if you **subclass** one of these classes and call `super(...)`,
+or if you **instantiate them directly** (for example, `new AuthenticationService(...)` in a unit test).
+
+
+| Library                                | Affected classes                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
+| -------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `@alfresco/adf-core`                   | `[BaseAuthenticationService](../../lib/core/src/lib/services/base-authentication.service.ts)`, `[AuthenticationService](../core/services/authentication.service.md)`, `[OIDCAuthenticationService](../../lib/core/src/lib/auth/oidc/oidc-authentication.service.ts)`, `[AuthGuardBase](../../lib/core/src/lib/auth/guard/auth-guard-base.ts)`, `AuthGuard`, `AuthGuardBpm`, `AuthGuardEcm`, `BaseCardView`, `[CardViewTextItemComponent](../../lib/core/src/lib/card-view/components/card-view-textitem/card-view-textitem.component.ts)`, `CardViewDateItemComponent`, `CardViewSelectItemComponent`, `CardViewArrayItemComponent`, `CardViewBoolItemComponent`, `CardViewKeyValuePairsItemComponent`, `CardViewMapItemComponent` |
+| `@alfresco/adf-content-services`       | `UploadBase`, `[UploadButtonComponent](../content-services/components/upload-button.component.md)`, `[UploadDragAreaComponent](../content-services/components/upload-drag-area.component.md)`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
+| `@alfresco/adf-process-services`       | `[FormComponent](../process-services/components/form.component.md)`, `[StartFormComponent](../core/components/start-form.component.md)`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
+| `@alfresco/adf-process-services-cloud` | `BaseCloudService`, `FormCloudService`, `FormDefinitionSelectorCloudService`, `ProcessListCloudService`, `ProcessTaskListCloudService`, `ProcessCloudService`, `StartProcessCloudService`, `NotificationCloudService`, `UserPreferenceCloudService`, `StartTaskCloudService`, `TaskCloudService`, `TaskFilterCloudService`, `ServiceTaskListCloudService`, `TaskListCloudService`                                                                                                                                                                                                                                                                                                                                                  |
+
+
+If you extend one of these classes, drop the old positional arguments from your `super(...)` call.
+
+Before:
+
+```ts
+export class MyUpload extends UploadButtonComponent {
+    constructor(uploadService, contentService, nodesApiService, translationService, logService, ngZone) {
+        super(uploadService, contentService, nodesApiService, translationService, logService, ngZone);
+    }
+}
+```
+
+After:
+
+```ts
+export class MyUpload extends UploadButtonComponent {
+    constructor() {
+        super();
+    }
+}
+```
+
+If you were instantiating these classes manually in tests, note that `inject()` only works
+inside an Angular injection context. Use `TestBed` and retrieve the instance from the injector
+instead of calling `new`.
+
+**Note:** `BaseCloudService` now injects `[LogService](../core/services/log.service.md)` itself,
+so `this.logService` is available to every cloud-service subclass. Subclasses that previously
+declared their own `logService` no longer need to.
+
+### SharedLinksApiService.createSharedLinks
+
+A new middle parameter was added to `[createSharedLinks](../core/services/shared-links-api.service.md)`
+so that expiry settings can be applied to the shared link itself.
+
+Before:
+
+```ts
+createSharedLinks(nodeId: string, options: any = {}): Observable<SharedLinkEntry>
+```
+
+After:
+
+```ts
+createSharedLinks(nodeId: string, sharedLinkWithExpirySettings?: SharedLinkBodyCreate, options: any = {}): Observable<SharedLinkEntry>
+```
+
+If you call this method with positional arguments, update the call:
+
+```ts
+// Before
+this.sharedLinksApiService.createSharedLinks(nodeId, options);
+
+// After
+this.sharedLinksApiService.createSharedLinks(nodeId, undefined, options);
+```
+
+
+
+### Share dialog: expiry is now date-only
+
+The share-link expiry control in `[ShareDialogComponent](../../lib/content-services/src/lib/content-node-share/content-node-share.dialog.ts)`
+changed from a date-**time** picker to a **date-only** picker, and the date library moved from
+`moment` to `date-fns`.
+
+- The `sharedLinkDateTimePickerType` app-config key is **no longer read**. Setting it has no effect; the picker is date-only.
+- Methods that previously accepted/returned `moment.Moment` now use the native `Date` type (for example `onTimeChanged(date: Date)`). Update any override accordingly.
+- The template handler `onDatetimepickerClosed` was renamed to `onDatePickerClosed`, and the `#dateTimePickerInput` template reference to `#datePickerInput` — this affects you only if you override the dialog template.
+
+
+
+### Route-aware filter selection
+
+`[ProcessFiltersComponent](../process-services/components/process-filters.component.md)` and
+`[TaskFiltersComponent](../process-services/components/task-filters.component.md)` (in `@alfresco/adf-process-services`)
+now inject `Router` (plus `Location` / `ActivatedRoute` respectively) to highlight the active
+filter based on the current route. If you instantiate these components in a test, provide routing
+(for example, import `RouterTestingModule`).
+
+## Removed items
+
+
+| Item                                                   | Package              | Notes                                                                                                                                                                             |
+| ------------------------------------------------------ | -------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `NotificationIconPipe` (`notificationIcon`)            | `@alfresco/adf-core` | Internal, non-exported pipe. Icon resolution now happens in the notification factory. Only affects unsupported use of the deep `notifications/pipes/notification-icon.pipe` path. |
+| `mockAuthConfigImplicitFlow`, `mockAuthConfigCodeFlow` | `@alfresco/adf-core` | Test mocks removed. Inline your own equivalents if your tests imported them.                                                                                                      |
+| `sharedLinkDateTimePickerType` (app-config key)        | `app.config.json`    | No longer read — the share-link expiry picker is date-only.                                                                                                                       |
+
+
+
+
+## Renamed items
+
+
+
+### CSS class renames
+
+If you target these selectors from your own stylesheets, update them:
+
+
+| Component                                                                                          | Before                                 | After                                                               |
+| -------------------------------------------------------------------------------------------------- | -------------------------------------- | ------------------------------------------------------------------- |
+| [About server settings](../core/components/about.component.md)                                     | `.adf-github-link-container`           | `.adf-about-server-settings` (+ `.adf-about-server-settings__card`) |
+| [Edit task filter](../process-services-cloud/components/edit-task-filter-cloud.component.md)       | `.adf-edit-task-filter-description`    | `.adf-edit-task-filter-header__description`                         |
+| [Edit process filter](../process-services-cloud/components/edit-process-filter-cloud.component.md) | `.adf-edit-process-filter-description` | `.adf-edit-process-filter-header__description`                      |
+
+
+
+
+### Encapsulation changes
+
+`AboutServerSettingsComponent` and `PackageListComponent` **no longer use** `ViewEncapsulation.None`.
+Global CSS overrides that previously "bled into" these components will no longer apply — theme them
+through the new [CSS custom properties](#theme-changes) instead.
+
+### SCSS reference variables
+
+If you import ADF's `[_reference-variables.scss](../../lib/core/src/lib/styles/_reference-variables.scss)`
+directly, note that several `$adf-ref-*` primitives were consolidated/renamed. The public `--adf-*`
+CSS custom property names are unchanged — prefer overriding those instead.
+
+
+| Before                                                           | After                           |
+| ---------------------------------------------------------------- | ------------------------------- |
+| `$adf-ref-edit-task-and-service-filter-header-title-color`       | `$adf-ref-title-color`          |
+| `$adf-ref-edit-task-and-service-filter-header-description-color` | `$adf-ref-description-color`    |
+| `$adf-ref-edit-task-and-service-filter-header-height`            | `$adf-ref-height-48`            |
+| `$adf-ref-card-border-radius`                                    | `$adf-ref-card-border-radius-0` |
+
+
+
+
+## Third-party libraries
+
+
+| Name             | Version   | Notes                                                                                                                                                                                                                                                           |
+| ---------------- | --------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `material-icons` | `^1.13.8` | The bundled Material Icons font and its `material-icons.css` were removed from the build in favour of the published `[material-icons](https://www.npmjs.com/package/material-icons)` package. If your app relied on ADF bundling the font, provide it yourself. |
+| `date-fns`       | `^2.30.0` | New dependency (replaces `moment` in the share dialog).                                                                                                                                                                                                         |
+
+
+
+
+## New components and features
+
+
+| Name                                                                                                                     | Package                          | Description                                           |
+| ------------------------------------------------------------------------------------------------------------------------ | -------------------------------- | ----------------------------------------------------- |
+| `[SearchLogicalFilterComponent](../content-services/components/search-logical-filter.component.md)`                      | `@alfresco/adf-content-services` | `logical-filter` search widget (AND / OR / AND-NOT).  |
+| `[SearchChipInputComponent](../content-services/components/search-chip-input.component.md)`                              | `@alfresco/adf-content-services` | Reusable chip text-entry field.                       |
+| `[SearchFilterAutocompleteChipsComponent](../content-services/components/search-filter-autocomplete-chips.component.md)` | `@alfresco/adf-content-services` | `autocomplete-chips` search widget (Tags / Location). |
+| `[SearchChipAutocompleteInputComponent](../content-services/components/search-chip-autocomplete-input.component.md)`     | `@alfresco/adf-content-services` | Chip input with `mat-autocomplete`.                   |
+| `[IsIncludedPipe](../content-services/pipes/is-included.pipe.md)` (`adfIsIncluded`)                                      | `@alfresco/adf-content-services` | Returns whether a value is contained in an array.     |
+
+
+
+
+### Logical search filter
+
+A new search widget, `logical-filter`, lets users build AND / OR / AND-NOT queries from three
+phrase inputs. Enable it by referencing the `logical-filter` widget type in your search configuration:
+
+```json
+{
+    "search": {
+        "categories": [
+            {
+                "id": "logic",
+                "name": "Query",
+                "enabled": true,
+                "component": {
+                    "selector": "logical-filter",
+                    "settings": { "field": "cm:name,cm:title" }
+                }
+            }
+        ]
+    }
+}
+```
+
+
+
+### Advanced search: autocomplete chips
+
+A new search widget, `autocomplete-chips`, provides chip-based multi-select with autocomplete for
+filters such as Tags and Location. For `field: 'TAG'` it loads options through the tag service;
+otherwise it uses the `options` from the widget settings. `[SearchWidgetSettings](../../lib/content-services/src/lib/search/models/search-widget-settings.interface.ts)`
+gains a new optional property `allowOnlyPredefinedValues?: boolean`.
+
+```json
+{
+    "id": "tags",
+    "name": "Tags",
+    "enabled": true,
+    "component": {
+        "selector": "autocomplete-chips",
+        "settings": { "field": "TAG", "allowOnlyPredefinedValues": true }
+    }
+}
+```
+
+
+
+### Header customization
+
+`[HeaderLayoutComponent](../core/components/header.component.md)` gained two new inputs:
+
+
+| Input        | Type      | Default  | Description                              |
+| ------------ | --------- | -------- | ---------------------------------------- |
+| `showLogo`   | `boolean` | `true`   | Whether the logo is displayed.           |
+| `toggleIcon` | `string`  | `'menu'` | Icon used for the sidenav toggle button. |
+
+
+
+
+### Icon font set
+
+`[IconComponent](../core/components/icon.component.md)` gained a new `fontSet` input, letting you
+render an icon from a custom Material icon font set:
+
+```html
+<adf-icon value="my_icon" fontSet="my-font-set"></adf-icon>
+```
+
+
+
+### OAuth2 configuration handling
+
+`[AppConfigService](../core/services/app-config.service.md)` now exposes a normalized `oauth2` getter.
+
+Before:
+
+```ts
+const oauth = this.appConfigService.get(AppConfigValues.OAUTHCONFIG, {});
+```
+
+After:
+
+```ts
+const oauth = this.appConfigService.oauth2; // returns an OauthConfigModel, defaulting to {}
+```
+
+- The `implicitFlow`, `silentLogin` and `codeFlow` flags now accept the string values `'true'` / `'false'` in `app.config.json` in addition to real booleans, and are coerced to booleans by the getter. The `oauth2.silentLogin` schema type was widened to `["boolean", "string"]`.
+- `[OauthConfigModel](../../lib/core/src/lib/auth/models/oauth-config.model.ts)` gains an optional `redirectSilentIframeUri?: string` field.
+
+
+
+## Behavioural changes
+
+
+| Area                                                                                                                  | Change                                                                                                                                                                                                                       |
+| --------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Search facets                                                                                                         | Facet chips with no results are rendered disabled and show a `remove` icon instead of the dropdown arrow.                                                                                                                    |
+| Search facet/filter chips                                                                                             | The dropdown arrow flips between `keyboard_arrow_down` / `keyboard_arrow_up` with the menu state, the toggled-chip border uses the primary color, and the filter "cancel" action was relabeled from **Remove** to **Clear**. |
+| [People (cloud)](../process-services-cloud/components/people-cloud.component.md)                                      | No longer triggers an identity search for an empty value; at least one character is required.                                                                                                                                |
+| Process / task filters                                                                                                | A filter is highlighted as active only when the current route matches the filter context and it is the current filter.                                                                                                       |
+| [Card view text item](../../lib/core/src/lib/card-view/components/card-view-textitem/card-view-textitem.component.ts) | On an invalid edit, `CardViewUpdateService.update` is now also emitted (with the edited value) after clearing previous errors.                                                                                               |
+| [App config](../core/services/app-config.service.md)                                                                  | When `app.config.json` fails schema validation, `AppConfigService` now logs `console.error('app.config.json contains validation errors')` and continues with the existing config.                                            |
+| Shared link expiry (security)                                                                                         | Setting an expiry now recreates the shared link with an `expiresAt` value so the backend enforces expiry on the link itself; turning the expiry off recreates a non-expiring link.                                           |
+| Accessibility                                                                                                         | The filter-menu close control is now a real `button`, Shift+Tab is trapped inside filter menu cards, and the autocomplete input is associated with its listbox via `aria-controls`.                                          |
+
+
+
+
+## Theme changes
+
+Several components now expose their styles through `--adf-*` CSS custom properties, so you can theme
+them without overriding internal selectors. Defaults preserve the previous appearance. Override a
+property in your global stylesheet, for example:
+
+```scss
+:root {
+    --adf-card-view-background: #fafafa;
+    --adf-card-view-border-radius: 8px;
+}
+```
+
+The notable additions in this release:
+
+
+| Component                                                                                              | CSS custom properties                                                                                                                                                                                                                                                                                      |
+| ------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| [Card view](../core/components/card-view.component.md)                                                 | `--adf-card-view-background` (default `white`), `--adf-card-view-border` (`unset`), `--adf-card-view-border-color` (`unset`), `--adf-card-view-border-radius` (`0`)                                                                                                                                        |
+| [About panel](../core/components/about.component.md)                                                   | `--adf-about-panel-header-height` (`48px`), `--adf-about-panel-header-title-color`                                                                                                                                                                                                                         |
+| About server settings                                                                                  | `--adf-about-server-settings-background`, `--adf-about-server-settings-color`, `--adf-about-server-settings-border-radius`, `--adf-about-server-settings-padding`                                                                                                                                          |
+| Package list table                                                                                     | `--adf-package-list-table-background`, plus `--adf-package-list-table-header-*` and `--adf-package-list-table-row-*` (borders, min-height, cell colors)                                                                                                                                                    |
+| [Edit task / service filter](../process-services-cloud/components/edit-task-filter-cloud.component.md) | `--adf-edit-task-and-service-filter-header-title-color`, `--adf-edit-task-and-service-filter-header-description-color`, `--adf-edit-task-and-service-filter-header-height`, `--adf-edit-task-and-service-filter-content-text-label-color`, `--adf-edit-task-and-service-filter-content-select-label-color` |
+| [Edit process filter](../process-services-cloud/components/edit-process-filter-cloud.component.md)     | `--adf-edit-process-filter-header-height`, `--adf-edit-process-filter-header-title-color`, `--adf-edit-process-filter-header-description-color`, `--adf-edit-process-filter-content-text-label-color`, `--adf-edit-process-filter-content-select-label-color`                                              |

docs/upgrade-guide/upgrade62-63.md

@@ -0,0 +1,377 @@
+## Title: Upgrading from ADF v6.2 to v6.3
+
+# Upgrading from ADF v6.2 to v6.3
+
+This guide provides instructions on how to upgrade your v6.2.0 ADF projects to v6.3.0.
+
+---
+
+## Before you begin
+
+Always perform upgrades on a "clean" project state, back up your changes or make a project backup.
+
+Do not skip this task if you want your application to be updated to the most recent version of ADF.
+Upgrades of multiple versions of ADF cannot be done in one step only, but should follow the chain of sequential updates.
+
+After the upgrade, check the other sections below to see if there are any changes affecting your project.
+
+## Contents
+
+- [Library updates](#library-updates)
+- [Breaking changes](#breaking-changes)
+  - [JS-API v7 and type migrations](#js-api-v7-and-type-migrations)
+  - [Third-party libraries](#third-party-libraries)
+  - [HTTP client and auth](#http-client-and-auth)
+  - [Breadcrumbs moved to a secondary entry point](#breadcrumbs-moved-to-a-secondary-entry-point)
+  - [Search API changes](#search-api-changes)
+  - [Comments component](#comments-component)
+  - [Removed and hidden items](#removed-and-hidden-items)
+  - [CSRF default changed](#csrf-default-changed)
+  - [Role-based authorization](#role-based-authorization)
+  - [Other breaking changes](#other-breaking-changes)
+- [Deprecated items](#deprecated-items)
+- [New components and features](#new-components-and-features)
+  - [Advanced search](#advanced-search)
+  - [Core breadcrumbs](#core-breadcrumbs)
+  - [Data Table form widget](#data-table-form-widget)
+  - [Content metadata](#content-metadata)
+  - [Other additions](#other-additions)
+- [Behavioural changes](#behavioural-changes)
+- [Theme changes](#theme-changes)
+
+
+
+## Library updates
+
+Update the `package.json` file with the latest library versions:
+
+```json
+{
+    "dependencies": {
+        "@alfresco/adf-core": "6.3.0",
+        "@alfresco/adf-content-services": "6.3.0",
+        "@alfresco/adf-process-services": "6.3.0",
+        "@alfresco/adf-process-services-cloud": "6.3.0",
+        "@alfresco/adf-insights": "6.3.0",
+        "@alfresco/adf-extensions": "6.3.0",
+        "@alfresco/js-api": ">=7.0.0"
+    }
+}
+```
+
+**Important:** ADF 6.3.0 requires `@alfresco/js-api` **v7 or later** (`>=7.0.0`). This is the biggest
+single change to take into account — see [JS-API v7 and type migrations](#js-api-v7-and-type-migrations).
+
+The advanced date-range search and several date pickers now use `date-fns`. Make sure the new
+peer dependency `@angular/material-date-fns-adapter` is installed.
+
+Clean your old distribution and dependencies by deleting `node_modules` and `package-lock.json`, then reinstall:
+
+```sh
+npm install
+```
+
+
+
+## Breaking changes
+
+
+
+### JS-API v7 and type migrations
+
+ADF now consumes the strongly-typed models from `@alfresco/js-api` v7 directly instead of its own
+handwritten wrappers. Update your type references accordingly.
+
+
+| Before (ADF wrapper / old type) | After (`@alfresco/js-api` type) |
+| ------------------------------- | ------------------------------- |
+| `MinimalNode`                   | `Node`                          |
+| `MinimalNodeEntryEntity`        | `Node`                          |
+| `AssocChildBody`                | `ChildAssociationBody`          |
+| `QueryBody`                     | `SearchRequest`                 |
+| `SiteBody`                      | `SiteBodyCreate`                |
+| `FavoriteBody`                  | `FavoriteBodyCreate`            |
+
+
+The wrapper model file `document-library.model.ts` was **removed** from `@alfresco/adf-content-services`.
+The following exports are no longer available from ADF — import the equivalents from `@alfresco/js-api`:
+`NodePaging`, `NodePagingList`, `NodeMinimalEntry`, `NodeMinimal`, `Pagination`, `UserInfo`,
+`ContentInfo`, `PathInfoEntity` (→ `PathInfo`), `PathElementEntity` (→ `PathElement`), `NodeProperties`.
+
+Public service signatures changed as a result — for example:
+
+```ts
+// NodesApiService — before
+getNode(nodeId: string, options?: any): Observable<MinimalNode>
+// after
+getNode(nodeId: string, options?: any): Observable<Node>
+```
+
+- `[ContentService](../core/services/content.service.md)`: `folderCreate` / `folderEdit` are now `Subject<Node>`.
+- `[SearchService](../core/services/search.service.md)`: `searchByQueryBody(queryBody: SearchRequest)`.
+- `BaseQueryBuilderService` (base of `[SearchQueryBuilderService](../content-services/services/search-query-builder.service.md)`): `updated` is now `Subject<SearchRequest>`; `update`, `execute`, `search`, `buildQuery` all use `SearchRequest`.
+- `SearchConfigurationInterface.generateQueryBody(...)` now returns `SearchRequest`. Note `SearchRequest` is a **class** (`new SearchRequest({...})`), whereas `QueryBody` was a plain interface — object literals still assign structurally.
+- `User` from `@alfresco/js-api` is now a **class** rather than a type alias.
+
+
+
+### Third-party libraries
+
+To support Angular 14+, several dependencies were upgraded (major bumps with their own breaking changes):
+
+
+| Package                              | Before    | After                                        |
+| ------------------------------------ | --------- | -------------------------------------------- |
+| `@alfresco/js-api`                   | `>=6.2.0` | `>=7.0.0`                                    |
+| `chart.js`                           | `2.9.4`   | `^4.3.0`                                     |
+| `ng2-charts`                         | `2.4.2`   | `^4.1.1`                                     |
+| `ngx-monaco-editor`                  | `8.1.1`   | replaced by `ngx-monaco-editor-v2` `^14.0.4` |
+| `@angular/material-date-fns-adapter` | —         | new dependency                               |
+
+
+If you use the Insights charts, migrate to the `ng2-charts` v4 / `chart.js` v4 API (tree-shakeable
+registration, new chart config). If you use the Monaco editor, switch the import from
+`ngx-monaco-editor` to `ngx-monaco-editor-v2`.
+
+### HTTP client and auth
+
+- The Alfresco API HTTP client was replaced by an Angular `HttpClient`-based `AdfHttpClient`
+(the old `alfresco-api.http-client` identifier is gone). Update any references to `AdfHttpClient`.
+- HTTP-client and auth configuration moved out of `CoreModule` into `AuthModule`. Make sure your
+application imports `AuthModule` so the API client and auth config are provided.
+- Read the username/token from `[AuthenticationService](../core/services/authentication.service.md)`
+rather than from `AlfrescoApi`'s `oauth2Auth`.
+- **`NullInjectorError: No provider for RedirectAuthService!`** — because auth moved into `AuthModule`, importing
+`CoreModule` alone no longer provides the OIDC `RedirectAuthService`. Import `AuthModule.forRoot()` in your root
+module (use `AuthModule.forRoot({ useHash: true })` for hash-based routing) to resolve the error.
+
+
+
+### Breadcrumbs moved to a secondary entry point
+
+The new breadcrumb components ship from a dedicated secondary entry point rather than the root barrel:
+
+```ts
+// Components
+import { BreadcrumbComponent, BreadcrumbItemComponent } from '@alfresco/adf-core/breadcrumbs';
+```
+
+```scss
+// Theme
+@use '@alfresco/adf-core/breadcrumbs' as breadcrumbs;
+```
+
+They are **not** exported from the root `@alfresco/adf-core`, and their theme is no longer part of the
+core styles index — add the imports above where needed.
+
+### Search API changes
+
+- `SearchChipInputComponent` **was removed.** Remove any imports/usages (the logical filter no longer uses it).
+- `disableUpdateOnSubmit` was removed from search widget settings — delete it from your `search.config`.
+- `[SearchLogicalFilterComponent](../content-services/components/search-logical-filter.component.md)` changed its value model. The per-field condition type went from `string[]` to a single space-separated `string`, and a new `MATCH_EXACT = 'matchExact'` field was added:
+  ```ts
+  // LogicalSearchCondition — before: { matchAll: string[]; matchAny: string[]; exclude: string[] }
+  // after:                            { matchAll: string; matchAny: string; matchExact: string; exclude: string }
+  ```
+- `SearchChipAutocompleteInputComponent` and `SearchFilterAutocompleteChipsComponent` now use an
+`AutocompleteOption` object model instead of plain strings. If you configured these with `string[]`
+options, migrate to `AutocompleteOption[]` (`{ value: string; id?: string; fullPath?: string }`),
+and note the new optional `SearchWidgetSettings.autocompleteOptions` field.
+
+
+
+### Comments component
+
+The comments components (`[adf-comments](../core/components/comments.component.md)` and
+`adf-comment-list`) were cleaned up, with several consumer-facing consequences:
+
+- **The** `interfaces` **barrel was removed.** Import `CommentsService` / the comments token from their
+specific files (or the top-level `public-api`) instead of `.../comments/interfaces`.
+- **Comment text is no longer sanitised as HTML** — the message is rendered as plain text
+(`white-space: pre-line`), not via `[innerHTML]`. Any HTML in a comment now shows as literal text.
+- **Comment data must be** `CommentModel` **instances.** Display logic moved into new `CommentModel`
+getters (`hasAvatarPicture`, `userDisplayName`, `userInitials`); plain object literals cast as
+`CommentModel` will no longer render correctly. Build them with `new CommentModel({...})`.
+- `CommentListComponent` removed the public members `selectedComment`, `currentLocale`, and the
+methods `getUserShortName()` and `isPictureDefined()`; selection side-effects and the
+`.adf-is-selected` styling were dropped (the component just emits `clickRow`).
+- Several template element IDs (`adf-comment-{id}`, `comment-user-*`, `comment-message-*`, …) were
+removed — update any CSS/E2E selectors that relied on them.
+
+
+
+### Removed and hidden items
+
+
+| Item                                                           | Package                                                | Notes                                                                                                                                                                                                                                                           |
+| -------------------------------------------------------------- | ------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `SearchChipInputComponent`                                     | `@alfresco/adf-content-services`                       | Removed (see [Search API changes](#search-api-changes)).                                                                                                                                                                                                        |
+| `document-library.model` exports                               | `@alfresco/adf-content-services`                       | Removed; use `@alfresco/js-api` types.                                                                                                                                                                                                                          |
+| `AlfrescoApiCompatibility` usage                               | `@alfresco/adf-process-services`                       | `ExternalAlfrescoApiService` now extends `[AlfrescoApiService](../core/services/alfresco-api.service.md)` and uses `AlfrescoApi` (v7). Migrate any code typed against `AlfrescoApiCompatibility`.                                                               |
+| Several `DocumentListComponent` / `DataTableComponent` methods | `@alfresco/adf-content-services`, `@alfresco/adf-core` | Made `private` (`updateCustomSourceData`, `setupDefaultColumns`, `preserveExistingSelection`, `isSingleSelectionMode`, `isMultipleSelectionMode`, `hasPreselectedNodes`, `hasPreselectedRows`, `hasCustomLayout`). `resetNewFolderPagination()` remains public. |
+| `CallApiParams` (interface)                                    | `@alfresco/adf-process-services-cloud`                 | Removed from the `BaseCloudService` public surface — it now uses `RequestOptions` from `@alfresco/js-api`. Only affects code that imported `CallApiParams` directly.                                                                                            |
+
+
+
+
+### CSRF default changed
+
+The default for the `disableCSRF` app-config key changed to `true`. When the key is **absent**
+from `app.config.json`, CSRF handling is now disabled by default. If your backend requires the ADF
+CSRF token, set it explicitly:
+
+```json
+{
+    "disableCSRF": false
+}
+```
+
+
+
+### Role-based authorization
+
+Roles are now resolved from the JWT access token instead of the remote `identity-adapter-service`
+roles endpoint (a new `hxp_authorization` claim is supported alongside `realm_access`). As a result:
+
+- `UserAccessService.fetchUserAccess()` is now **synchronous** (returns `void`, was `Promise`).
+- `UserAccessService.resetAccess()` was **removed**, and its constructor no longer injects `OAuth2Service`.
+- `AuthGuardSsoRoleService.canActivate()` is now **synchronous** (returns `boolean`, was `Promise<boolean>`).
+
+
+
+### Other breaking changes
+
+- **Bearer-excluded URL matching** is now anchored to the host + first path segment
+(`^https?://[^/]+/<pattern>`) instead of matching anywhere in the URL. Review any custom
+`bearerExcludedUrls` patterns that relied on substring matching.
+- **DataTable multiselect checkbox** wrapper changed from a `<div>` to a `<label>` (same classes),
+and row padding moved onto the first/last cells. Update CSS/E2E selectors targeting
+`div.adf-datatable-checkbox` or the old `.adf-datatable-row` padding.
+- The header user-info container's default right margin changed from `16px` to `8px`.
+- Date pickers/filters that used `moment.Moment` values now use native `Date`
+(see [Behavioural changes](#behavioural-changes)).
+
+
+
+## Deprecated items
+
+The following components are deprecated (still functional, but slated for removal). Their exact
+`@deprecated` notes:
+
+
+| Component                                                                     | Selector            | Note                                                                                                         |
+| ----------------------------------------------------------------------------- | ------------------- | ------------------------------------------------------------------------------------------------------------ |
+| `[WebscriptComponent](../content-services/components/webscript.component.md)` | `adf-webscript-get` | "Webscript component has never been turned into a product and has no UI/UX and no use cases in ACA/ADW/ACC." |
+| `[LikeComponent](../content-services/components/like.component.md)`           | `adf-like`          | "Like component is not used in ACA/ADW/ACC, can be removed."                                                 |
+| `[RatingComponent](../content-services/components/rating.component.md)`       | `adf-rating`        | "Rating component is not used in ACA/ADW/ACC, can be removed."                                               |
+
+
+
+
+The NgModules that bundle those components are also now `@deprecated` (`@alfresco/adf-content-services`):
+**`SocialModule`** (bundles the Like/Rating components) and **`WebScriptModule`** (bundles the Webscript
+component). Stop importing them.
+
+## New components and features
+
+
+
+### Advanced search
+
+Several new advanced-search building blocks were added in `@alfresco/adf-content-services`, along with
+two new widget selector types (`date-range-advanced`, `properties`):
+
+
+| Component                                                                                                                                                                                       | Selector                                               | Description                                                                 |
+| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------ | --------------------------------------------------------------------------- |
+| `[SearchDateRangeAdvancedComponent](../../lib/content-services/src/lib/search/components/search-date-range-advanced-tabbed/search-date-range-advanced/search-date-range-advanced.component.ts)` | `adf-search-date-range-advanced`                       | Date-range form with "Any / In the last / Between" modes (date-fns based).  |
+| `SearchDateRangeAdvancedTabbedComponent`                                                                                                                                                        | `adf-search-date-range-advanced-tabbed`                | Search widget (`date-range-advanced`) wrapping the date-range form in tabs. |
+| `[SearchFilterTabbedComponent](../../lib/content-services/src/lib/search/components/search-filter-tabbed/search-filter-tabbed.component.ts)` (+ `SearchFilterTabDirective`)                     | `adf-search-filter-tabbed` / `[adf-search-filter-tab]` | Tabbed layout for grouping filter content.                                  |
+| `SearchFacetChipTabbedComponent`                                                                                                                                                                | `adf-search-facet-chip-tabbed`                         | Facet chip grouping two facet fields (e.g. creator + modifier) into tabs.   |
+| `SearchPropertiesComponent`                                                                                                                                                                     | `adf-search-properties`                                | Search widget (`properties`) to filter by file size and file type.          |
+
+
+`BaseQueryBuilderService` is now a public export. See the search configuration docs for how to wire
+the new widget selectors into your `search.config`.
+
+### Core breadcrumbs
+
+A new breadcrumb component set is available from the `@alfresco/adf-core/breadcrumbs` secondary entry
+point (see [Breadcrumbs moved to a secondary entry point](#breadcrumbs-moved-to-a-secondary-entry-point)).
+
+
+| Component                 | Selector              | Description                                                                                                                                        |
+| ------------------------- | --------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `BreadcrumbComponent`     | `adf-breadcrumb`      | Standalone breadcrumb with `@Input() compact` and `@Output() compactChange`; collapses to first + last item with an overflow menu in compact mode. |
+| `BreadcrumbItemComponent` | `adf-breadcrumb-item` | Content-projected breadcrumb item.                                                                                                                 |
+
+
+
+
+### Data Table form widget
+
+A new **Data Table** cloud form widget renders tabular data inside a form, backed by process/form
+variables or a direct JSON value.
+
+- New `FormFieldTypes.DATA_TABLE = 'data-table'` and `FormFieldModel.schemaDefinition: DataColumn[]` in `@alfresco/adf-core`.
+- New `DataTableWidgetComponent` (selector `data-table`) and `WidgetDataTableAdapter` in `@alfresco/adf-process-services-cloud`, auto-registered by `CloudFormRenderingService`.
+- The `VariableConfig` interface is now exported from `@alfresco/adf-core` (`{ variableName; optionsPath?; optionsId?; optionsLabel? }`), and form-field `optionType` gained a `'variable'` value so dropdowns can resolve their options from a process/form variable.
+
+
+
+### Content metadata
+
+`[ContentMetadataCardComponent](../content-services/components/content-metadata-card.component.md)` gained new configuration:
+
+
+| Member                       | Type                    | Default | Description                                                                       |
+| ---------------------------- | ----------------------- | ------- | --------------------------------------------------------------------------------- |
+| `@Input() editable`          | `boolean`               | `false` | Toggles editable state of the content metadata (supports two-way `[(editable)]`). |
+| `@Output() editableChange`   | `EventEmitter<boolean>` | —       | Emitted when the editable state changes.                                          |
+| `@Input() displayTags`       | `boolean`               | `true`  | Show tags in the card.                                                            |
+| `@Input() displayCategories` | `boolean`               | `true`  | Show categories in the card.                                                      |
+
+
+
+
+### Other additions
+
+- **CardView chip labels** — `[CardViewComponent](../core/components/card-view.component.md)`,
+`CardViewItemDispatcherComponent` and `CardViewTextItemComponent` gained
+`@Input() displayLabelForChips: boolean = false` to render a header label above multivalued chip properties.
+- **About panel automation id** — `AboutPanelDirective` gained `@Input() automationId: string`, rendered as `data-automation-id`.
+- `provideTranslations(id, path)` — a convenience provider factory exported from `@alfresco/adf-core`, replacing the verbose `TRANSLATION_PROVIDER` literal (the old form still works).
+- `ALFRESCO_API_FACTORY` — a new injection token (with `AlfrescoApiFactory` interface) lets applications supply a custom `AlfrescoApi` implementation, e.g. to invalidate the session on HTTP 401.
+- New additive `adfDateTime` pipe (`DateTimePipe`) in `@alfresco/adf-core`.
+
+
+
+## Behavioural changes
+
+
+| Area          | Change                                                                                                                                                                                                                                                                                                                                  |
+| ------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Date handling | Several pipes/components migrated from `moment` to `date-fns`: `TimeAgoPipe`, process-name pipes, `LockService`, `DateRangeFilterComponent`/service, `StartTaskCloudComponent`, `TaskListComponent`. Date-picker/filter values are now native `Date` objects instead of `moment.Moment`. (moment is still a dependency for other code.) |
+| DataTable     | Whole checkbox cell is clickable; in single-selection mode clicking a selected row now **unselects** it and emits `row-unselect`; actions menus open on `Enter`; sorting matches on `sortingKey`; the header row is retained when a filter is active with no results.                                                                   |
+| Version list  | The restore action is disabled for the latest version of a file.                                                                                                                                                                                                                                                                        |
+| People        | `PeopleContentService.getPerson(id)` no longer overwrites the cached current user (that side-effect moved to `getCurrentUserInfo()`).                                                                                                                                                                                                   |
+| Viewers       | Viewer form widgets accept a single file object (not just arrays) and no longer show a file after it was removed.                                                                                                                                                                                                                       |
+| Notifications | The "mark all as read" control is now an icon button (`done_all`).                                                                                                                                                                                                                                                                      |
+| Security      | Input sanitisation hardened: search highlight uses safer tag stripping, comment text is HTML-escaped, the login component guards against prototype pollution (`__proto__`/`constructor`/`prototype`), and user initials are built via the DOM to escape user names.                                                                     |
+
+
+
+
+## Theme changes
+
+The Identity User Info avatar styles are now themeable via CSS custom properties:
+
+
+| Property                                 | Default                                |
+| ---------------------------------------- | -------------------------------------- |
+| `--adf-identity-user-info-background`    | `var(--adf-theme-primary-300)`         |
+| `--adf-identity-user-info-height`        | `40px`                                 |
+| `--adf-identity-user-info-width`         | `40px`                                 |
+| `--adf-identity-user-info-line-height`   | `40px`                                 |
+| `--adf-identity-user-info-font-size`     | `var(--theme-adf-picture-1-font-size)` |
+| `--adf-user-info-container-margin-right` | `8px`                                  |