Watch the complete program here, we are adding the complete session abstracts as we get them reviewed and approved by speakers.

We have case stories from Redbull, Sainsbury's, The danish state and german hospitals. Indepth tech sessions on the core API's, data layer and request pipeline. As well as sessions on the Umbraco 7 UI, Umbraco as a Service, Responsive Imaging, designing websites in the browser and so much more. 

All presented by experienced and knowledgeable speakers.

We are running out of tickets

There are only about 40 tickets left now, so if you havn’t already purchased your ticket, it is about time to do so. All codegardens in the past have sold out, and do you really want to miss this? - get your ticket here.

More then just the planned sessions

Besides the planned sessions, there is a complete track of open hackathon sessions, with guidance from Umbraco HQ developes, Core team members and community geniueses.

A whole day of open space sessions, where the community come together to discuss the present and future direction of Umbraco as an open source project, software and community.

Amazing social events like the wednesday canal tour after party with music, champagne and a festival vibe. A delicious organic dinner on thursday evening, complete with live hammond organ and the traditional and bizar Umbraco bingo.

There’s even a pre-conference social meetup tuesday, arranged by other codegarden attendees.

Oppunities to celebrate our community with Umbraco package competions and Umbraco Website awards, as well as meeting all thos helpfull people from our.umbraco.org to give them that well deserved high-five.

About the present and the future

Since codegarden 12 last year, Umbraco as a project and as a company has moved at an amazing pace.

There is not a single major component in the Umbraco core that we havn’t refactored, reimplemented, improved or tweaked, there are new API’s, new major versions, a new hosted service, a brand new UI coming, a lot of new fantastic sites has been launched, and a ton of lessons has been learned.

And there is only one place, where you can learn about all these things and that is at Codegarden, so I look forward to meeting you there. 

Yes, the security fixes have been applied to this version and no, they haven't been committed to source control yet for security reasons. 

MiniProfiler

Many people noticed that in Mvc mode, Umbraco can't give you tracing any more, which made finding bugs and performance issues harder.

This is about to change as we've now built the awesome MiniProfiler - by the great people at StackExchange - into the core of Umbraco!
Over time we can start adding more and more useful information into the profiler so you can find out exactly what is going on on your site.

Oh, and did I mention it works in the backoffice as well? We look forward to optimizing performance with this treasure trove of data we're now easily able to grab!

To get the profiler to show up, make sure that umbracoDebugMode is set to true in your web.config and then add umbDebug=true to your querystring. 

The MiniProfiler is also awesome because you can easily add your own profiling anywhere you want:

Umbraco.Core.Profiling.Profiler.Instance.Step("Hello World");

or nested profiling like:

using (Umbraco.Core.Profiling.Profiler.Instance.Step("This will take long")) {
   Umbraco.Core.Profiling.Profiler.Instance.Step("Here we go...");
   NielsWritesAparsingAlgorithm();
   Umbraco.Core.Profiling.Profiler.Instance.Step("Ahh, finally done");
}

And as an added bonus this also works in WebForms mode!

We're looking forward to your feedback on this release. It looks like we're on track to release it by the end of the month unless we find more serious flaws.

Umbraco 6.1.0 Beta 2 is available now on CodePlex and NuGet.

Update: 4.11.8 / 6.0.5 released, see the last paragraph of this post.
Update 2: 
Version before 4.5.0 is not affected by these new vulnurabilities, however yesterday's security alert still applies (recommendation is still: delete umbraco.webservices.dll).
In light of this information we will not be publishing custom builds for versions lower than 4.5.0. 
Update 3:
Some people are using 4.9.0 / 4.9.1 with a custom patch, the dll versions are now in the table below and patch files have been added ("Inline Xslt Fix" versions).
Update 4:
Unfortunately we can't  provide a patch update for 4.7.1, please email sebastiaan@umbraco.com for alternatives.

We've found two more major vulnerabilities

In parallel with the earlier security alert, we’ve been going through every method in Umbraco that deals with external requests. Based on this analysis, we’ve found two additional vulnerabilities and therefore we strongly recommend that you update your installation(s). The following steps are necessary even if you have already deleted the umbraco.webservices.dll.

To make this as easy as possible, we’ve created patched versions of all Umbraco releases from the past three years. To secure your site, find what version of Umbraco you’re using and download the corresponding patch in the bottom of this post. The patch is a zip file that includes updated and secure versions of umbraco.dll and umbraco.webservices.dll. Once these files are copied to your /bin folder your installation is patched and secured.

We know this is frustrating as you’ve probably already spent time this week updating your installations. We hope you understand that we took this double approach with delete first, patch secondly to ensure that your Umbraco installation would be as secure as possible in the quickest possible way.

In addition to the incredible efforts from the core team in dealing with these issues, I’d like to thank the brilliant partners and security analysts we’ve worked with over the last couple of days for their tireless help and constructive feedback in making Umbraco as secure as possible.

Last year - after Codegarden - we added a new workflow for core submissions with more thorough code reviews of both internal and external code, but unfortunately the vulnerabilities discovered were related to core changes before this governance was implemented.

We apologize for the inconvenience that these security vulnerabilities have caused, we’re doing everything we possibly can to ensure you won’t experience a deja vu anytime soon. We'll share details of the vulnerabilities in June when you've all had time to secure your installations.

How to patch your installation

The updated files can be downloaded from the list below. Back up your /bin/umbraco.dll and /bin/umbraco.webservices.dll and replace them with the versions you find in the zip file below.

• Umbraco version 4.5.0
• Umbraco version 4.5.1
• Umbraco version 4.5.2
• Umbraco version 4.6.1
• Umbraco version 4.7.0
• Umbraco version 4.7.1.1
• Umbraco version 4.7.2
• Umbraco version 4.8.0
• Umbraco version 4.8.1
• Umbraco version 4.9.0
• Umbraco version 4.9.0 - with Inline XSLT fix
• Umbraco version 4.9.1
• Umbraco version 4.9.1 - with Inline XSLT fix
• Umbraco version 4.10.1
• Umbraco version 4.11.7
• Umbraco version 6.0.3
• Umbraco version 6.0.4

Custom Umbraco build or not able to patch?

If you're not able to patch your installation or if you run a modified version of Umbraco - if you have modified the source of Umbraco and build your own version - we recommend that you setup a firewall to protect against external calls to /umbraco. You can see if you run a custom build of Umbraco by comparing your assembly version with the one in the table below. If the dll is of the below version number then you can safely overwrite the current version with the patched version (after making a backup, of course).

Upgrading

We've just released version 4.11.8 and 6.0.5. The only changes from their previous versions is the security fixes, so it's a safe upgrade. Head on out to CodePlex or NuGet to get them.

More details will come in a few weeks when people have had a chance to update their installations, but for now we ask you to remove the following file from all your Umbraco installations:

/bin/umbraco.webservices.dll

The security vulnerability affects all versions of Umbraco that contains the file above. If your installation doesn’t contain the file, you’re not affected.

This will not affect the daily use of your Umbraco installation. It *might* affect integration with your Umbraco installation, but less than 1% use the integration web services. For those who do use the integration web services we recommend that you get in touch with sebastiaan@umbraco.com.

We’re sorry for the inconvenience.

Edit:

• If you do use the webservices in your custom code, adding IP restrictions to /umbraco/webservices/api/ can be an option to secure your servers instead
• Load balancing setups should not be affected by the removal of the dll, the cacherefresher code for that is in a different dll
• uComponents v3+ should not be affected
• The umbraco.webservices.dll file has not been included for a while in some umbraco releases due to a bug in our build environment, so if you can't find it, you're not affected by this issue

It's time again for our regular patch release and this time we've added some improvements to back office security.

As part of a security audit done by a Umbraco Confidence customer and  independent security company MWR Labs we made some updates to the core to prevent that an authenticated Umbraco user would be able to access certain edit screens in sections of Umbraco that the User hadn't been granted access for. 

Don't be scared, the risk of these security issues being exploited is very low.

Other than that, this is a pretty small patch release for both v4 and v6. There's of course bug fixes and and you should see improvements in bulk publishing (more improvements to come soon).

For a full list of changes:

• 19 bug fixes in 4.11.7
• 37 bug fixes in 6.0.4

The releases are now available on CodePlex and on NuGet (6.0.4 & 4.11.7), enjoy!

If you've been keeping an eye on our release schedule then you know today marked the release of version 6.1.0. And it is here! But it is also in beta form because we want to do more real-life testing before we mark this as a final release. 

When the final release of 6.1.0 is coming depends on your feedback and our internal testing. We'll make sure to keep you posted when we have more to say about a final release date.

In the mean time, we're still doing bugfixing on the stable releases (6.0.x and 4.11.x) so you have a solid environment to build your current sites on.

And that's also the plan moving forward for the next few months, releases will be small updates that involve fixes for stability and immediate bugs plus some polish of the editor experience here and there.
Until "Belle"(v7) we're not planning any big new features in the core, we're just smoothing out the core for now. 

Load-balancing

We've been updating a few things to the caching mechanism to make it support load-balancing scenario's much better. Now this is a very touchy area and fixing one thing could possibly lead to other things breaking. We're being careful here and need to do more extensive testing ourselves. Even on single-server sites, we just want to make sure that you can upgrade with confidence.

That said, we need your help putting the new bits to the test. We're pretty sure that we didn't break anything major, but we're looking forward to the community helping us verify that. So if you have a chance, please check out 6.1.0 either on a load-balanced server or not.

What's new

Not so much, we think this release (apart from the load-balancing improvements) will be a total snore. There's a new dialog for managing host names and languages and some fixes in host name/language support on which Stéphane has been working really hard but it should all be very seemless during the upgrade, everything is backwards compatible.

Other than that: 

 As usual, the list of changes is available from the release info page.

There's still a few items not completed on that page, because we intend to include them in the final release of 6.1.0 but they need a little bit of extra work.

Known issues

• Preview doesn't work as expected any more, we'll look at fixing that in a nightly update soon.
• The AutoSort package by TheFarm is currently throwing errors, it's possible that other packages that are adding items in the right-click menu have stopped working. 

Go!

So there you go, we would love for you to give 6.1.0 beta a spin and look forward to hearing your feedback.

Okay, enough tooting of our own horn, we're not perfect and there were bugs:

The first thing we missed was strictly v6 related, and it was a total oversight on our part: when fixing the document type related issues for version 6.0.2, we forgot that the package installer is happily doing it's own thing. Oops, sorry!

So when you were installing a package with nested document types similar problems to the ones we fixed in 6.0.2 cropped up. We've now addressed these issues and tested over 30 of the most popular packages PLUS most packages that we could find that would install a nested node structure.

Another bug fix, in both v4 and v6, was because we accidentally broke a feature in Razor. If you had properties that store something other than text (like a date or an integer), querying those suddenly returned strings, instead of a date or an integer. This is now fully working again.

Contributions

One new thing (in both v4 and v6 releases!) is that you now have much better control over how macro errors are handled. We had help from Adam Nelson who sent in a pull request for this.
The default behaviour for macro error is the same: just show an error inline in the html. However, in your umbracoSettings.config you can now set the MacroErrors behaviour to be completely silent or you can throw an error.
These errors can now also be handled through Application_OnError or the umbraco.macro.Error event. So if you want an email or an SMS whenever a macro fails, no problem, just write a few lines of code! Thanks Adam, #h5yr!

 He's not the only one to contribute though: Steven Lemmens, Andy Butland, Stephen Roberts, Asbjørn Riis-Knudsen and Brian Powell also offered their fixes for various issues. Awesome work, thank you. A big #h5yr to you too AND to the people reporting bugs and responding to our follow up questions, our community is on fire!

Go forth..

Other than that, there's a big number of small(er) bugfixes, mostly relating to MVC and updates to document type editing. Of course you can find a full list of bug fixes on our progress pages:

• Fixes in v4.11.6 (25 fixes)
• Fixes in v6.0.3 (55 fixes)

 The downloads are now available on CodePlex and NuGet and we hope that Microsoft accepts 6.0.3 in the Web Application Gallery soon so it will also show up in the Web Platform Installer.

So with that.. Go forth and download the shiney new bits for your easter enjoyment!

Ps. Sorry, we didn't have time to put any easter eggs in there.. ;-)

Launching with 2 hours of fresh material

5 chapters of new episodes are available today with a total of 33 videos (covering just over 2 hours) learning you the basics to get started with building Umbraco sites. All of these of course cover the latest and greatest Umbraco v6.

New content bi-weekly

We are aiming at having a steady stream of new content coming in bi-weekly, to make sure you are up to date with the latest topics.

Desktop, mobile, tablet

Of course the site is accessible from any device with an internet connection so you should be able to learn from your desktop, mobile and tablet devices. You can even resume a video between devices! And we made sure the video and audio quality is up to standards.

Earn badges

To make sure you fully understand the content of the videos you can  test your knowledge by taking a multiple choice quiz for each chapter. If you score at least 80% you’ll earn a new badge for your profile.

Login with your existing account

Although the tv site is now seperated from umbraco.com you won’t need to register again but can just login with your umbraco.com account. Everyone with an active tv subscription should have access. If you are interested in getting a subscription please take a look at our plans http://beta.umbraco.tv/plans-signup/ (access starting from €12,50 a month).

It’s a beta

Remember it’s a beta launch so you might encounter some minor glitches but by helping us test and provide feedback we can get those final issues sorted!

So what are you waiting for go take a look! http://beta.umbraco.tv

Codegarden, is the annual 3-day Umbraco conference, early bird tickets are available untill April 1st.

For those who don't know Nathanael, he is the man behind one of the most popular .net components: "ImageResizer" - and at the same time one of the people on earth who knows most about handling images on the web. 

Scott Hanselman has a very positive review of ImageResizer, as Nuget Package of the week.

 At Codegarden, Nathanael will talk about Responsive Imaging, how you handle images as part of responsive webdesign, from his session abstract:

Images are a time-consuming part of content management. How can we improve this while supporting an ever-growing range of devices? How do we gain agility while offering even more image variants?

Image management doesn't have to be hard. We will examine packages, techniques, and libraries that can simplify your workflow.

Even with messy photo collections of varying aspect ratios, there are easy ways to implement image galleries, light-boxes, slideshows, and Pinterest-style layouts.

How should you handle exponential growth of media assets? How do you transition to blob storage and a CDN? 

As websites grow more image-heavy each year, how can we leverage new formats like WebP and JPEG XR to cut bandwidth costs and delays?

And last, how can we provide future-proof responsive images *today*?

If you havn't already, I highly recommend that you get your ticket now, we have so many high-quality sessions lined up this year, that you will be forever sorry you decided to stay home, register now and save 150eur