Contao Open Source CMS Changelog for the version 5.6

About Contao 5.6

The first stable version of Contao 5.6 has been released on 18 August 2025 and has been the successor of Contao 5.5. 5.6 will be updated until 14 February 2026, after which it will be replaced by Contao 5.7.

Changelog Contao 5.6

Contao 5.6.4 (2025-10-31)

Changelog of the fixed issues in Contao 5.6.4:

#8958 Change the variable name for the active mobile navigation color (Werbeagentur-Kopfnuss)
#8956 Do not swallow DCA exceptions (aschempp)
#8953 Add a viewport tag to the new default layout template (leofeyer)
#8954 Define a minimum height for `.tl_content .inside` (leofeyer)
#8952 Use `deprecation_info` instead of `deprecated_info` (leofeyer)
#8951 Replace a leftover MooTools function call in the tooltips controller (leofeyer)
#8905 Fix the protected icon in the content element preview (aschempp)
#8944 Cast the slug to string when getting the theme path (Tastaturberuf)
#8921 Allow disabling the back end search (fritzmg)
#8919 Remove the `.operations > ul` padding caused by user-agent styles (lukasbableck)
#8913 Prevent the mobile navigation from flashing on page load (heimseiten)

Contao 5.6.3 (2025-09-30)

Changelog of the fixed issues in Contao 5.6.3:

#8691 Use the locale switcher to set the user language (fritzmg)
#8894 Do not double-encode the operation title (aschempp)
#8758 Add more custom properties for the accessible navigation (zoglo)
#8823 Improve the `DC_Folder` permission checks and use the operation builder (aschempp)
#8773 Fix the legacy header buttons layout (aschempp)
#8760 Make the accessible navigation breakpoint adjustable (zoglo)
#8878 Show the titles in the fragment list view (fritzmg)
#8892 Map the backup object to file names (zoglo)
#8855 Display the form field label if the widget is missing (fritzmg)
#8886 Fix the `datetime` types in the Doctrine entities (fritzmg)
#8777 Harden against deleted templates when analyzing slots (m-vo)
#8858 Fix the main headline styling in regular back end controllers (fritzmg)
#8854 Use a pointer cursor for the preview toolbar toggle (fritzmg)
#8866 Hide the content element preview if it's empty (fritzmg)
#8841 Handle having no request in the scope matcher (m-vo)
#8843 Make the "share preview link" operation primary (Toflar)
#8824 Reduce the jobs polling interval to 5 seconds (Toflar)
#8822 Fix a regression with the limit height toggle not being colored on hover (zoglo)
#8820 Add operation list attributes to hide the limit height toggle by default (aschempp)
#8812 Move the preview toolbar into the shadow DOM (zoglo)
#8810 Preload the reader modules (ausi)
#8768 Fix the Stimulus color picker preview (zoglo)
#8788 Ensure no-op when the back end search is not available (Toflar)
#8790 Prefetch the source editor links (aschempp)
#8793 Use the media range query in the flexible theme (zoglo)
#8784 Only set the request format when rendering a Turbo stream template (m-vo)
#8775 Also apply cache headers in Twig layouts (m-vo)

Contao 5.6.2 (2025-09-05)

Changelog of the fixed issues in Contao 5.6.2:

#8722 Show the remove button for all file selections (zoglo)
#8769 Adjust the widget grid alignment (zoglo)
#8766 Make a job optional for the back end search reindex (Toflar)
#8764 Fix the `var/logs` symlink under Symfony 7.3+ (fritzmg)

Contao 5.6.1 (2025-08-28)

Security vulnerabilities closed:

Information disclosure in the front end search index (CVE-2025-57756)
Information disclosure in the news module (CVE-2025-57757)
Improper access control in the back end voters (CVE-2025-57758)
Improper privilege management for page and article fields (CVE-2025-57759)

Changelog of the fixed issues in Contao 5.6.1:

#8747 Correctly handle non-array DCA operation labels (aschempp)
#8743 Check if there are arguments before using `func_get_arg()` (leofeyer)
#8736 Fix moving multiple items via the clipboard (aschempp)
#8720 Do not create a response context if one already exists (fritzmg)
#8667 Update the `input-map` CSS to match the previous `MooTools Sortables` (zoglo)
#8710 Only apply the Turbo request cache to 200 OK responses (Toflar)
#8707 Fix the search indexer migration when migrating from Contao 4.13 to 5.6 (fritzmg)
#8715 Restore the previous `autoFocus` when navigating with Turbo Drive (zoglo)
#8603 Fix the `getAllEvents` hook (fritzmg)
#8700 A completed job must always be set to 100% progress (Toflar)
#8689 Update to SEAL 0.12 (Toflar)

Contao 5.6.0 (2025-08-18)

Changelog of the fixed issues in Contao 5.6.0:

#8697 Rename the layout template (aschempp)
#8696 Enable the `appendGroupInSearch` option for Choices (zoglo)
#8695 Remove the debug markup from the Combiner (ausi)
#8684 Show the context menu even if all operations are primary (zoglo)
#8678 Adjust the `Cache-Control` for Turbo requests in the back end (zoglo)
#8682 Fix the title tag in Twig layouts (fritzmg)
#8666 Add the page class to the body element (aschempp)
#8636 Fix the record fallback label (aschempp)
#8664 Fix an undefined array key warning in the `AbstractLayoutPageController` (zoglo)
#8663 Do not make the new Twig layouts the default (leofeyer)

Changelog of the fixed issues in Contao 5.6.0-RC3:

#8513 Use `data-turbo-track="dynamic"` instead of reloading (fritzmg)
#8634 Move the `tl_buttons` ID to the top element (aschempp)
#8625 Use the operations builder for the versions view (aschempp)
#8620 Fix the new buttons and allow to override the configuration (aschempp)
#8653 Make the navigation burger color adjustable (zoglo)
#8623 Do not add a CSS class to the operation attributes (aschempp)
#8626 Fall back to the label if an operation has no title (aschempp)
#8643 Use `node` instead of `element` in the passkey mutation observer (zoglo)
#8645 Output the global data for additional head/body content in layout pages (m-vo)
#8578 Open the browser context menu on the second right-click again (fritzmg)
#8621 Fix the drag handle of the image size items (aschempp)
#8619 Always hide the parent node of invisible drag handles (aschempp)
#8624 Optimize the theme import/export operations (aschempp)
#8617 Do not add a leading white space in the `deeplink-controller` migration (zoglo)
#8614 Remove `aria-hidden` on drag handles (aschempp)
#8612 Remove a superfluous `"` in the `data-action` attribute of the `be_main` template (lukasbableck)
#8570 Use a security voter to check the form field type access (aschempp)

Changelog of the fixed issues in Contao 5.6.0-RC2:

#8586 Remove the close button from non-gallery `fileTree` widgets (fritzmg)
#8583 Use the page finder in the fragment insert tag (leofeyer)
#8594 Add the event dates to the calendar feed titles again (fritzmg)
#8590 Deprecate `Contao\Feed` and `Contao\FeedItem` (fritzmg)
#8593 Switch to `php-feed-io/feed-io` (fritzmg)
#8566 Highlight the selected row in the single source picker (de-es)
#8575 Show the drag handle in `MODE_PARENT` again (fritzmg)
#8560 Properly reassign the active item in the accessible navigation (zoglo)
#8576 Simplify the theme operations (aschempp)
#8574 Fix a JS error in the operations menu controller after Turbo navigation (aschempp)
#8573 Fix the separator spacing in the global context menu (aschempp)
#8556 Fix the infinite loop on `encore dev --watch` (zoglo)

Changelog of the new features in Contao 5.6.0-RC1:

#8094 Use a close icon instead of `×` or `×` (m-vo)
#8434 Add "create new" buttons to the tree view (aschempp)
#8519 Use security voters in the comments bundle (aschempp)
#8242 Deprecate `Backend.enableImageSizeWidgets()` (fritzmg)
#8011 Implement passkey support for the front end (fritzmg)
#8511 Make the registration expiration time configurable (zoglo)
#8012 Provide a template for an accessible navigation (zoglo)
#8533 Refactor the "switch user" operations (aschempp)
#8390 Add a calendar feed page controller (fritzmg)
#8483 Always add a close button to messages (aschempp)
#8523 Use a voter instead of a button callback for the alias element (aschempp)
#8372 Simplify the operations menu labels (aschempp)
#8066 Add the foundation for jobs (Toflar)
#8529 Add a `hide()` method to the `DataContainerOperation` class (Toflar)
#8522 Make the table dynamic in the `DisableAppConfiguredSettingsListener` (Tastaturberuf)
#8437 Use POST requests for non-safe operations (aschempp)
#8480 Use the jump target navigation in the "edit multiple" view (zoglo)
#8204 Improve the "copy to clipboard" functionality (m-vo)
#8346 Refactor the global operations (aschempp)
#8479 Enable `postcss-preset-env` for the `flexible` theme (zoglo)
#8495 Add a general `From` override for the `ContaoMailer` (fritzmg)
#8418 Deprecate legacy content elements with fragment replacements (fritzmg)
#8252 Add the "search indexer" page setting (CMSworker)
#8462 Support ISO 3166-2 country subdivision codes (ausi)
#8456 Implement rate limiting on the search indexer (Toflar)
#8510 Update the `flexible` theme - reorder the `main.pcss` imports (zoglo)
#8509 Update the `flexible` theme - move the responsive styles (zoglo)
#8508 Update the `flexible` theme - move the highlight colors (zoglo)
#8507 Update the `flexible` theme - cleanup the variables (zoglo)
#8506 Update the `flexible` theme - clean up utilities and miscellaneous styles (zoglo)
#8472 Add the Contao date formats to the Twig global (fritzmg)
#8476 Add `HtmlAttributes` to `be_main` and meta tags to the `HtmlHeadBag` (fritzmg)
#8473 Compress the serialized search document (Toflar)
#8469 Restructure the `flexible` theme and rewrite it using PostCSS (zoglo)
#8446 Rewrite the wizards to use Twig templates (aschempp)
#8465 Allow selecting the backup within the `backup:restore` command (zoglo)
#8400 Use SortableJS and move the drag handle to the left side of elements (aschempp)
#8411 Add a separator to the DCA operations menu (aschempp)
#8424 Make the subscribed services optional in the abstract controllers (leofeyer)
#8404 Add the current member groups to the schema.org output (Toflar)
#8410 Use listeners to set the dynamic parent table and the default labels (aschempp)
#8393 Add a shortcut to get the `HtmlHeadBag` (aschempp)
#8245 Implement a "store in session" setting for forms (fritzmg)
#7825 Add a help text to form fields in the form generator (de-es)
#8285 Extract the building of palletes and boxes into the data container (aschempp)
#8395 Allow search indexers to index protected content (Toflar)
#8370 Add a helper for the searchable content on the search document (Toflar)
#8302 Add a palette helper to support working with the palette manipulator (Toflar)
#8366 Update to SEAL 0.9 (Toflar)
#8331 Deprecate the messenger priority interfaces in favor of the new `#[AsMessage]` attribute (Toflar)
#8257 Rewrite the SERP widget to a Stimulus controller (m-vo)
#8224 Do not require CSRF token checks on preflight requests (Toflar)
#8212 Deprecate the `Contao\Messages` class (fritzmg)
#8207 Rewrite the back end search to use Turbo streams (m-vo)
#8226 Make `Backend.modalSelector()` work from within a modal dialog (m-vo)
#6955 Support reloading DCAs (ausi)
#8191 Deprecate the usage of the `typePrefix` property on models (fritzmg)
#8064 Extract messages and the dialog element from the Template Studio (m-vo)
#8072 Refactor the Turbo stream handling into a separate module (m-vo)
#8184 Add the `Countable` interface to the `FilesystemItemIterator` (m-vo)
#8052 Add a directory filter VFS decorator (m-vo)
#8054 Add a `count()` helper method to the `FilesystemItemIterator` (m-vo)
#8000 Add a "skip to content" link in the back end (leofeyer)
#8010 Upgrade to PHPUnit 11 (Toflar)
#8006 Add modern page layouts (m-vo)
#8007 Add an "edit" action to the 2FA view (bytehead)
#8002 Allow overwriting metadata via the `{{empty}}` insert tag (ausi)
#7999 Add support for content elements in page layouts (Toflar)
#7998 Enable format conversion for more image formats (ausi)

Changelog of the fixed issues in Contao 5.6.0-RC1:

#8550 Adjust the text indentation of the menu buttons (m-vo)
#8549 Correctly hide disabled operations (leofeyer)
#6859 Unlock `doctrine/dbal` 4.x and `doctrine/orm` 3.x (fritzmg)
#8544 Only apply the button width in the `operations-menu` (zoglo)
#8542 Fix the clickable area of the operation buttons (aschempp)
#8537 Fix the operation menu position in the "paste into" view (zoglo)
#8530 Distinguish between "copy" and "duplicate" (leofeyer)
#8538 Use the default translations for the "new" button (aschempp)
#8531 Consider the previous `as-grid` view for `DataContainer::MODE_PARENT` (zoglo)
#8518 Simplify the positioning of the operations menu (zoglo)
#8528 Handle empty `Content-Type` header in CORS (aschempp)
#8517 Use `Backend::addToUrl()` when switching to "edit multiple" mode (aschempp)
#8490 Switch the DCA request on `kernel.request` and `kernel.finish_request` (ausi)
#8482 Fix the width of the select wizard (zoglo)
#8478 Fix the DCA loading performance in dev mode (ausi)
#8467 Fix the `width` within the `allowedAttributes` widget (zoglo)
#8468 Fix a merge error in the guests migration (aschempp)
#8459 Consider the `<hr>` element as a `menuLinkSelector` (zoglo)
#8412 Do not use `MooTools.getElements()` in the `toggle-nodes-controller` (zoglo)
#8398 Correctly close the `header_outlets` block (Toflar)
#8296 Add the lost commit of #8207 again (m-vo)
#8216 Copy the session in the DCA request switcher (ausi)
#8178 Fix the module wizard and section wizard scripts (m-vo)
#8071 Fix the "overwrite metadata fields" migration (ausi)