Externa Core 1.1.0 — Live Preview and Public API
1 October 2026 — Externa Core v1.1.0, the first post-GA product cut. Editorial preview, Public API surface, and the official Next.js starter. Notes: GitHub Release v1.1.0 · Changelog.
Who should upgrade
- Anyone on
1.0.0who wants Live Preview, scheduled publish, or OpenAPI. - Frontend teams wiring headless sites — pair with Next.js starter 1.0.0.
What matters
Editorial & preview
- Live Preview — per-collection (or project default) URL template with signed short-lived
{{token}}; item toolbar opens your frontend; frontends callGET /api/v1/preview. Docs: Live Preview. Walkthrough: Live Preview in practice. - Draft / publish UX — badges, discard,
has_draftfilter (Content versioning). - Scheduled publish / unpublish —
publish_at/unpublish_at,collections:process-schedules,item.publishedwebhook.
Public API & integrations
- OpenAPI 3 at
GET /api/v1/openapi.json(YAML source underresources/openapi/). - Outbound webhooks — frozen event catalog in Project settings, last success/error, recent delivery log.
- Official Next.js starter — qiick-io/externa-next-starter (Headless starter).
Collections & AI
- Richer field conditions (
contains, comparisons,in/not_in, flat OR). - AI assistant asks Approve / Reject before destructive tools;
laravel/ai^1.0. - Opt-in
externa:upgrade --sync-upstream=vX.Y.Zdocumented for code sync.
Admin quality
Keyboard-reachable password toggle and critical aria-labels; activity log CSV/JSON export (streamed, 10k row cap); DE admin i18n key parity.
Upgrade steps (from 1.0.0)
- Back up DB +
.env(Backup & restore). - Move code to
v1.1.0(git tag orghcr.io/qiick-io/externa-core:1.1.0). - Install and build:
composer install
npm ci && npm run build
php artisan externa:upgrade
You must migrate before opening existing AI conversations: laravel/ai 1.0 uses a polymorphic participant and stores message steps + status instead of tool_calls / tool_results (Upgrade).
- If you use scheduled publish, ensure the scheduler runs (
schedule:runor the Composeschedulerservice) socollections:process-schedulesfires. - Restart Horizon / queue workers and Reverb if enabled.
Breaking / behavior notes
- AI chat history schema change — migrate first.
- Destructive AI tools require explicit Approve/Reject in the UI.
- Live Preview tokens expire (~15 minutes); treat links like temporary share URLs.
Sources
Verwandt
- Externa Core 1.4.0 — MCP, AI approvals, and accessibility
A rebuilt admin with transparent AI answers, an optional MCP server, human approval for AI write tools, theme presets, GCS and Azure file storage, WCAG 2.2 AA accessibility work, and new Public API batch writes and filters.
- PHP emergency security releases — Oct 2026
PHP CVEs 2026-109618 and 2026-109619 (CVSS 9.2 RCE). Update to 8.4.27 or 8.5.12; what Externa users must do.
- Externa Core 1.2.1 — field rename drafts & deps
Patch for draft/revision field renames, npm audit clean-up, and the repair-renamed-field-drafts artisan command.