For the full list of changes, check out the Webiny 5.44.3external link release on GitHub.

GraphQL API
anchor

Enforce an Authenticated Identity in All APW Resolvers
anchor

APW GraphQL resolvers passed straight through to the CRUD layer without verifying that an identity was present. Anonymous requests to the GraphQL endpoint could read APW data, including reviewer records containing display names and email addresses. This has now been fixed, and all APW resolvers require an authenticated identity to execute.