Merge branch 'main' into pro-8356-match-slug-across-locales

* main:
  fix tooltip prop (#5139)
  Radio icon buttons (#5121)
  Fix typos in some files (#5144)
  PRO-8571: fix the astro section template library bug introduced in astro 4.9.0 (#5140)
  bump nodemailer to v7 (#5138)
  Pro 8563 translation (#5134)

Author: haroun

CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## UNRELEASED
+
+### Adds
+
+* Translation strings added for the layout- and layout-column-widgets.
+
+### Changes
+
+* Bump nodemailer to v7.x.
+
+### Fixes
+
+* Specify the content type when calling back to Astro with JSON to render an area. This is required starting in Astro 4.9.0 and up, otherwise the request is blocked by CSRF protection.
+* Fixes `AposBreadcrumbSwitch` tooltip prop that is supposed to be an object, not a string. Object returned from the shared method `getOperationTooltip`.
+
 ## 4.23.0 (2025-10-30)
 
 ### Adds

modules/@apostrophecms/area/index.js

@@ -376,7 +376,9 @@ module.exports = {
           const response = await fetch(`${self.apos.baseUrl}/api/apos-external-front/render-area`, {
             method: 'POST',
             headers: {
-              'apos-external-front-key': self.apos.externalFrontKey
+              'apos-external-front-key': self.apos.externalFrontKey,
+              // Without this Astro enforces CSRF protection starting in version 4.9.0
+              'content-type': 'application/json'
             },
             body: JSON.stringify({
               area

modules/@apostrophecms/area/ui/apos/components/AposBreadcrumbSwitch.vue

@@ -51,7 +51,7 @@ export default {
       required: true
     },
     tooltip: {
-      type: String,
+      type: Object,
       default: null
     },
     disabled: {

modules/@apostrophecms/asset/index.js

@@ -31,7 +31,7 @@ module.exports = {
     // If false no UI assets sources will be watched in development.
     // This option has no effect in production (watch disabled).
     watch: true,
-    // Miliseconds to wait between asset sources changes before
+    // Milliseconds to wait between asset sources changes before
     // performing a build.
     watchDebounceMs: 1000,
     // Object containing instructions for remapping existing bundles.

modules/@apostrophecms/asset/lib/build/external-module-api.js

@@ -196,7 +196,7 @@ function invoke() {
 }` + '\n'
         : '';
 
-      // Remove the identation per line.
+      // Remove the indentation per line.
       // It may look weird, but the result is nice and formatted import file.
       output += (js && js.invokeCode.trim().split('\n').map(l => l.trim()).join('\n') + '\n') || '';
 

modules/@apostrophecms/asset/lib/build/internals.js

@@ -201,7 +201,7 @@ module.exports = (self) => {
     // return a list of all bundle files.
     //
     // The `bundles` (Set) property added to the entrypoints configuration
-    // contans the bundle files used later when injecting the scripts and
+    // contains the bundle files used later when injecting the scripts and
     // stylesheets in the browser. The `metadata` is the return value of the
     // external build module build method (see `self.build()` and
     // `configureBuildModule()`).

modules/@apostrophecms/asset/lib/webpack/utils.js

@@ -284,7 +284,7 @@ async function verifyBundlesEntryPoints (bundles) {
       // already verified it's unique for the given module
       if (!remapping.source) {
         // Bundle name for "main" "doesn't matter - it will be ignored and
-        // never built, we want to achieve a free from colision name. What
+        // never built, we want to achieve a free from collision name. What
         // matters is main = true. Target is 'main' by convention:
         // `main.bundleName`
         bundleName = `${remapping.target}.${bundleName}`;

modules/@apostrophecms/doc-type/index.js

@@ -2566,7 +2566,7 @@ module.exports = {
             baseQuery.set('choices-query-prefinalize', null);
             for (const filter of filters) {
               // The choices for each filter should reflect the effect of all
-              // filters except this one (filtering by topic pares down the list
+              // filters except this one (filtering by topic pairs down the list
               // of categories and vice versa)
               const _query = baseQuery.clone();
               // Make sure this is a legitimate builder before attempting to

modules/@apostrophecms/doc/index.js

@@ -988,7 +988,7 @@ module.exports = {
         });
       },
       // Set meta data for a given field, that will be live under `aposMeta`
-      // doc property. It returns the path to the meta property withouth the
+      // doc property. It returns the path to the meta property without the
       // key. See `getMetaPath` method for more information.
       //
       // Signature:
@@ -1196,7 +1196,7 @@ module.exports = {
       // See `setMeta` for more information about `subobject` and
       // `pathComponents` arguments.
       //
-      // Returns the path to the meta property withouth the namespace and key.
+      // Returns the path to the meta property without the namespace and key.
       // The returned path can be directly used to access or modify the meta
       // property. It's supported by all meta API methods.
       //
@@ -1516,7 +1516,7 @@ module.exports = {
       // the menu will be shown only for docs which have `autopublish: false`
       // and `localized: true` options.
       //
-      // `conditions` defines the circumstances under which the opetion should
+      // `conditions` defines the circumstances under which the option should
       // be displayed. If all `conditions` are not met, the item is not
       // displayed for this particular document.
       //

modules/@apostrophecms/doc/ui/apos/mixins/AposFieldMetaUtilsMixin.js

@@ -35,7 +35,7 @@ export default {
      * match a value if a key and value are provided. If no key is provided,
      * the namespace is matched.
      * Meta keys (inside `metaObject`) starting with '@' are ignored,
-     * if not explicitely set otherwise, as they are absolute paths
+     * if not explicitly set otherwise, as they are absolute paths
      * and will be yielding false positives.
      *
      * @param {object} metaObject the meta object or any object inside it