Worried about malicious file uploads reaching your media library? A new ClamAV integration by Mike Alhayek scans files before Orchard Core ever stores them.

Need a friendlier way to let users pick their time zone? A new ITimeZoneSelectListProvider interface makes that pluggable across the whole site.

And want to share a draft with a client without publishing it? A community module adds shareable, revocable draft links, demoed by Hisham Bin Ateya. We also point back to our latest Sponsorship Spotlight interview with him.

Want tighter control over your login screen's security policy? A new setting lets you turn the Remember Me option off site-wide, not just hide it.

Wondering how a team actually keeps its AI-assisted development consistent? New documentation and two updated agent skills cover exactly that.

And curious how you catch a performance regression before it reaches production, not after? Lombiq's new SQL query monitoring feature, built on the same open-source toolkit Lombiq uses on client projects, does precisely that.

This week's changes come from Mike Alhayek, plus agent skills work from Antoine Griffard and Sébastien Ros, and a new tool from Lombiq.

Does your admin UI tell you when an SSL certificate is about to expire?

Does your deployment pipeline carry Security settings between environments, or does someone have to reconfigure them by hand?

After this week's post, the answer to both is yes!

This issue covers: SSL Check (color-coded expiration warnings on the Tenants page), Security settings import/export via deployment plans, and notification alerts converted to dismissible toasts.

Plus an interview with Antoine Griffard, one of Orchard's longest-running contributors!

The full Orchard Harvest 2026 conference program is live, with the event taking place in Vancouver on September 10-11. Grab your early-bird ticket for just $280 and join the community for two days of sessions and networking!

Form submissions shouldn't end up in manual copy-paste routines. Orchard Core connects directly with Zapier, Make, and n8n to automatically trigger CRM updates, notifications, and more. DotNest's managed hosting makes the whole setup hassle-free!

The Health Checks module by Hisham Bin Ateya lets you restrict access by IP, apply rate limiting, and DoS protection for your health check endpoints, all configurable via JSON.

Managing multiple tenants on the same database just got easier. New RequireTablePrefix and TablePrefixPattern options, introduced by Mike Alhayek, let you enforce or auto-generate table prefixes (e.g., using the tenant name), so your setup is consistent and error-free out of the box.

No more guessing which properties to use for the Settings recipe step. Every module with configurable settings now includes a dedicated Recipe Configuration section with examples!

Ready to explore? Let's dive in!

This week, Mike Alhayek shows new features to the AI Suite: Initial Prompt, data extraction, post-session processing, and AI Chat Session Analytics!

But before that, check out how Hisham Bin Ateya and Georg von Kries improved the feature dependency display and interactivity, and the new protect global method provider by Mike Alhayek!

Harvest speaker applications are now open until May 15! If you’ve been considering speaking at Orchard Harvest, this is a great opportunity to share your ideas with the Orchard Core community. Join us on the 10th and 11th of September in Vancouver!

Let's see the details!

This week, you can see a demo by Mike Alhayek of the AI Chat Admin widget that adds a floating chat widget to the Orchard Core admin dashboard. A Frontend Chat Widget is also available, which allows site visitors to interact with AI chat directly on the frontend.

See the new IJSLocalizer infrastructure, which you can use to load the localization from the PO files and make it available in JavaScript.

Georg von Kries added new validation that warns against unsafe Liquid output in SQL queries. So, whenever you edit an unsafe SQL query, it will tell you not to utilize this kind of usage in Liquid.

Check out DotNest, the Orchard Core SaaS, which has a new look! The new site is built with Tailwind CSS and a much more user-friendly content management approach.

As we mentioned, we started publishing last year's Harvest recordings to YouTube. Check them out for some inspiration and apply to be a speaker for this year's Harvest!

Ready to explore? Let's dive in!

This time, you can see a demo by Hisham Bin Ateya of a bulk option for attaching the Localization Part to content types.

Before that, let's check out the new Data Protection guide, thanks to Laode Muhammad Al Fatih, which provides information on implementing data protection in Orchard Core applications, particularly in multi-tenant and load-balanced environments.

And thanks to Nick Jackson, there is a new settings panel with a CodeMirror textarea for customizing the EasyMDE editor options on both the Markdown Field and the MarkdownBody Part when using the WYSIWYG editor.

Without further ado, let's dive in!

We have the venue for the Orchard Harvest conference! Our topics for this week are simplifying security headers settings using tabs and a new function to clone existing roles. Don't forget to check out our Open-Source Orchard Core Extensions project, which is updated to the latest and greatest 2.2.0 Orchard Core version.

This week's topics include adding an opacity option for the Text Color Field, adding KnownNetworks and KnownProxies to reverse proxy settings, and a demo about lining with GitHub Actions using our Node.js Extensions project! Check out our post for the details!

This week's topics include displaying a badge when a user is locked out, renaming the ResetIndexProfile and RebuildIndexProfile recipe steps, and enhancing documentation for the indexing module. And have we mentioned that we've released a new version of our Orchard Visual Studio Extension, which now includes support for Razor Pages to the Dependency Injector?