chore: Release release/2026-W17

[github-actions]

🚀 Release Notes

TL;DR

This release significantly improves:

• Database performance & observability (MariaDB 11.8, lock reports)
• Deployment robustness (validation states, dependency automation)
• Security posture (API hardening, validation, OAuth fixes)
• User experience (keyboard shortcuts, cleaner notifications)
• Operational tooling (CI improvements, domain management)

---

Core / Infra / Database

• Added Lock Timeout Report to improve visibility into database contention issues (#6123)
• Increased default disk size for better scalability (#6096)
• Upgraded database to MariaDB 11.8 for performance and stability improvements (#6078)

---

Site Management

• Prevented accidental site drop when migrations are pending (#6104)
• Introduced archival flow for suspended sites (#6139)
• CLI guidance improved by suggesting CLI tools over migrate scripts (#6094)

---

Server

• Virtual machine name updates now occur only when VM is explicitly set (#6180)

---

Deploy / Bench / Apps

Reliability & Dependency Management

• Introduced mandatory app installation policies (#6129)
• Ensured correct Python version during builds (#6128)
• Auto-corrected bench dependency issues (#6106)
• Prevented duplicate dependency additions (#6101)
• Automatically resolved implicit dependencies (#6097)

Deployment Flow Improvements

• Introduced validating state in deploy lifecycle (#6197)
• Moved new deploy flow behind a feature flag (#6098)
• Fixed candidate selection on successful deployments (#6105)

---

Marketplace

• Added type hints to whitelisted endpoints (#6136)
• Strengthened validation and permission checks (#6127)
• Simplified Marketplace audits with automated release yanking, approval rejection, and unified status model (#6161)

---

UI / UX Improvements

• Up to 4× faster asset builds with Vite 8 and Frappe UI upgrade (#6111)
• Added keyboard shortcuts for search modal (Windows support) (#6168)
• Fixed platform-specific shortcut and layout issues (#6167)

UI Consistency

• Improved padding and hover states (#6150)
• Fixed notification routing (#6151)

Reduced Noise

• Moved build warnings to notifications (#6148)

Notifications & Activity

• Fixed unread count behaviour:
  • Decrement only on actual interaction (#6143)
  • Open support modal instead of navigation (#6121)

Monitoring

• Updated PromQL queries to support empty datapoints (#6076)

---

Security Enhancements

• Tightened site backup link validation (#6085)
• Hardened GitHub OAuth callback and improved log redaction (#6084)
• Replaced has_permission with stricter check_permission in sensitive APIs (#6082)

Secured Endpoints

• Advanced analytics endpoints (#6083)

• Slow logs endpoints (#6083)

• Candidate execution paths (#6086)

• Ensured baseline role assignment for all users (#6109)

---

SSH

• Fixed proxy/jump host handling with correct principal and command logic (#6177)

---

PRM (Partner Relationship Management)

• Added auto-approve link workflow (#6174)
• Introduced support for certification courses (#6172)
• Included certifications in renewal criteria (#6130)

---

Domain Management

• Enabled domain management directly from site level (#6141)
• Simplified argument passing in domain operations (#6176)

---

CI Improvements

• Build dashboard assets before Playwright tests for consistency (#6165)
• Improved CI performance by speeding up subsequent test runs (#5678)

---

Chores & Maintenance

• Improved typing across APIs and endpoints (#6158, #6073)

Dependency Updates

• Added semgrep v1.159.0 (#6162)

Resilience Improvements

• Better handling of MySQL connection loss variants (#6115)
• Fixed dependency update filters (#6116)

Misc

• Minor refactors and import cleanups (#6175)

[mergify]

@github-actions[bot], thanks for the contribution, but we do not accept pull requests on a master. Please close this PR and raise PR on an develop branch.

[codecov]

Codecov Report

❌ Patch coverage is 65.76648% with 431 lines in your changes missing coverage. Please review.
✅ Project coverage is 55.90%. Comparing base (c9b66e3) to head (5a951b4).
⚠️ Report is 247 commits behind head on master.

Files with missing lines	Patch %	Lines
press/api/partner.py	0.00%	72 Missing ⚠️
...s/press/doctype/mariadb_upgrade/mariadb_upgrade.py	0.00%	69 Missing ⚠️
press/saas/api/domain.py	0.00%	38 Missing ⚠️
...ype/marketplace_app_audit/marketplace_app_audit.py	21.42%	33 Missing ⚠️
press/api/github.py	71.55%	31 Missing ⚠️
press/api/analytics.py	56.06%	29 Missing ⚠️
press/press/doctype/server/server.py	18.51%	22 Missing ⚠️
press/press/doctype/site/site.py	50.00%	20 Missing ⚠️
...s/press/doctype/database_server/database_server.py	15.00%	17 Missing ⚠️
press/api/bench.py	31.81%	15 Missing ⚠️
... and 29 more

❌ Your patch status has failed because the patch coverage (65.76%) is below the target coverage (75.00%). You can increase the patch coverage or adjust the target coverage.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #6186      +/-   ##
==========================================
+ Coverage   51.65%   55.90%   +4.24%     
==========================================
  Files         905      908       +3     
  Lines       75199    75534     +335     
  Branches      272      522     +250     
==========================================
+ Hits        38847    42227    +3380     
+ Misses      36329    33279    -3050     
- Partials       23       28       +5     

Flag	Coverage Δ
dashboard	90.78% <91.79%> (+17.72%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.