Release notes (2026.07.30)

Here's what's new in the latest stable release version (2026.07.30):

New Features

API

• The allow_ec_point parameter has been added to the Member::insert and Member::update endpoints. When enabled, ec_point (fixed EC point) can be set/updated via API requests. It is not honored on endpoints where self_only is enabled.
• The Files::create_temp_upload_url endpoint has been added. It returns a temporary URL for uploading files directly to S3 via HTTP PUT. The request body must declare file_size (in bytes) and ext (extension). The existing Files::temp_upload_url endpoint is deprecated.
• The Files::create_temp_upload_post endpoint has been added. It returns the information required to upload files directly via an S3 presigned POST. The maximum size is included in the upload signature, so S3 itself also rejects uploads that exceed the maximum size.
• The max_size (maximum upload file size in MB), types (allowed extensions), and storage (upload destination) settings have been added to the temporary upload endpoints (Files::create_temp_upload_url / Files::create_temp_upload_post / Files::temp_upload_url). max_size defaults to 100 MB when not set, and this also applies to existing Files::temp_upload_url endpoints. If you handle files larger than 100 MB, set max_size to 0 (unlimited) or to the size you need.
• The max_size parameter (maximum upload file size in MB) has been added to the Files::upload endpoint. The existing size parameter (in bytes) is deprecated but remains available. When both are set, max_size takes precedence.

Member

• An "EC point features" setting has been added to [Environment] -> [Site settings]. When enabled, the "Point information" tab on the member edit screen and point granting/spending/history management via the EC point API become available even on sites that do not use EC (that have no product SKUs registered). It is disabled by default.
• A "Password must contain a number or symbol" setting has been added to [Environment] -> [Site settings]. When enabled, login passwords must include at least one number or symbol.

External Integration

• A "Public folder paths (ACL disabled)" setting has been added to the Amazon S3 admin panel. It is shown when [Disable S3 ACL] is enabled, and lets you specify the folder paths that the file manager treats as public.

Content

• A "Serve at a permanent URL linked to publication status" option has been added to the S3/GCS file columns of content. When enabled, while the content is public, a copy of the file is kept in the public folder (e.g. files/g/public/topics/) and served at a fixed, unsigned URL (permanent URL). When the content becomes private, the copy is deleted and the URL returns 404. Files of contents with view restrictions such as member-only are never published.
• A "Filled repetitions only (can be omitted when the group is entirely empty)" option has been added to the "Child field required setting" of extended fields. The required check is applied only to repetitions that have input, and no error occurs when the whole group is empty.

Custom Functions

• The {copy_s3_temp_file} Smarty plugin has been added. It copies a temporary file uploaded via Files::temp_upload_url to a specified path.

Others

• The admin panel plugin slot parameters topics_group_id and inquiry_id now accept multiple IDs (array or comma-separated), in the same way as group_id. The plugin is shown for any of the specified topic groups / inquiries.

Specification Changes

• The way a Google Analytics property is specified in the External integration > Google Analytics settings has changed. The method of selecting from a list of GA4 properties has been removed; instead, you now directly enter a property ID (123456789 or properties/123456789) or a measurement ID (G-XXXXXXXXXX). When you click "Update", the existence of and your access permission to the specified ID are verified.
• When e-commerce points (ec_point) are updated via member CSV upload, the change is now recorded in the point history. In addition, the point confirmation/expiration batches now run for points granted via the API or CSV.
• AI agent execution is now billed. Execution time (compute) is billed, and for AI agents that use AWS Bedrock, token usage is also billed. In addition, an "AI agent processing time" column has been added to the usage dashboard so you can review execution time.

Bug Fixes

• Fixed an issue where image field thumbnails were not displayed on the content edit page when the content structure used an API field.
• Fixed an issue where, when a before-approval trigger (custom processing) was set on content, approving from the list (bulk approval), approving with a specified date, or approving via an approval link caused the content to become unpublished.

Please note that there may be minor improvements and internal processing fixes that are not listed here. Bug fixes may also be implemented in advance before the official release date.