docs: prepare ABP 10.7 RC release post

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/en/Blog-Posts/2026-08-05 v10_7_Preview/POST.md

@@ -0,0 +1,99 @@
+# ABP Platform 10.7 RC Has Been Released
+
+We are happy to release [ABP](https://abp.io) version **10.7 RC** (Release Candidate). This blog post introduces the new features and important changes in this version.
+
+Try this version and provide feedback to help us deliver a more stable ABP v10.7 release. Thanks in advance!
+
+## Get Started with the 10.7 RC
+
+You can check the [Get Started page](https://abp.io/get-started) to see how to get started with ABP. You can either download [ABP Studio](https://abp.io/get-started#abp-studio-tab) or use the [ABP CLI](https://abp.io/docs/latest/cli).
+
+By default, ABP Studio uses stable versions to create solutions. To use a preview version, create your solution and then switch it to the preview version from the ABP Studio UI.
+
+![studio-switch-to-preview](studio-switch-to-preview.png)
+
+## Migration Guide
+
+There are no explicitly marked breaking changes in ABP v10.7 RC. Most applications can upgrade their ABP packages normally. The BLOB encryption and content pipeline features are opt-in; if you enable either feature for a container that already has BLOBs, follow the migration steps in the [ABP Version 10.7 Migration Guide](https://abp.io/docs/10.7/release-info/migration-guides/abp-10-7).
+
+## What's New with ABP v10.7?
+
+In this section, I will introduce some major features released in this version.
+Here is a brief list of the topics explained in the next sections:
+
+- BLOB Encryption at Rest and Content Pipeline
+- HTTP QUERY Method Support
+- Angular Resource API Helpers
+- ABP Suite React CRUD Page Generation
+- ABP Studio MCP Configuration
+- Reliability and Dependency Updates
+
+### BLOB Encryption at Rest and Content Pipeline
+
+ABP v10.7 adds opt-in, transparent encryption at rest for the BLOB Storing system. Encryption uses AES-256-GCM and works on top of the configured storage provider, so application code can continue using `IBlobContainer` as before.
+
+You can enable encryption per container and configure the passphrase from your application's secure configuration:
+
+```csharp
+Configure<AbpBlobStoringOptions>(options =>
+{
+    options.Containers.Configure<ProfilePictureContainer>(container =>
+    {
+        container.UseEncryption();
+    });
+});
+
+Configure<AbpBlobStoringEncryptionOptions>(options =>
+{
+    options.DefaultPassPhrase = context.Configuration["MyApp:BlobPassPhrase"];
+});
+```
+
+The new BLOB content pipeline lets you transparently transform content when it is saved and read. You can create contributors for compression, validation, watermarking, or other stream transformations without changing the storage provider or the code that uses the container.
+
+Both features are disabled by default. When enabling encryption for a container that already contains plaintext BLOBs, first allow legacy plaintext reads, re-save the existing content, and then remove the legacy option so the container reads encrypted data only.
+
+> See the [BLOB Encryption](https://abp.io/docs/10.7/framework/infrastructure/blob-storing/encryption) and [BLOB Content Pipeline](https://abp.io/docs/10.7/framework/infrastructure/blob-storing/pipeline) documents, and [#25836](https://github.com/abpframework/abp/pull/25836), for details.
+
+### HTTP QUERY Method Support
+
+ABP now supports the HTTP `QUERY` method for endpoints that need to send request data without using a query string. A `QUERY` endpoint is treated as a safe method: it is excluded from audit logging and starts a non-transactional unit of work by default, like `GET`.
+
+To expose an action as a `QUERY` endpoint, use the ASP.NET Core `[AcceptVerbs("QUERY")]` attribute. Because the method carries a request body, it still requires an anti-forgery token.
+
+> See the [Auto API Controllers](https://abp.io/docs/10.7/framework/api-development/auto-controllers#http-method) documentation and [#25797](https://github.com/abpframework/abp/pull/25797) for details.
+
+### Angular Resource API Helpers
+
+The Angular proxy generator can now generate optional Resource API helpers for `GET` endpoints. Use the `--resource-api` option with the proxy generator to add `rxResource` helpers while keeping the existing Observable-based services.
+
+This option requires Angular 22 or later and is disabled by default, so existing generated proxies continue to work without changes.
+
+> See the [Angular Service Proxies](https://abp.io/docs/10.7/framework/ui/angular/service-proxies) documentation and [#25761](https://github.com/abpframework/abp/pull/25761) for details.
+
+### ABP Suite React CRUD Page Generation
+
+ABP Suite now supports generating CRUD pages for React applications. The generated pages support common scenarios including master-detail and many-to-many relationships, and the templates can be customized for your application's conventions.
+
+### ABP Studio MCP Configuration
+
+ABP Studio provides a simpler experience for configuring Model Context Protocol (MCP) integrations. You can add common integrations through focused configuration forms or manage the complete MCP server list as JSON, with support for secret placeholders and secure platform storage.
+
+> See the [ABP Studio AI Agent configuration](https://abp.io/docs/10.7/studio/ai-agent-configuration) documentation and [#25870](https://github.com/abpframework/abp/pull/25870) for details.
+
+### Reliability and Dependency Updates
+
+This release also includes important reliability improvements:
+
+- BLOB storage providers have improved support for transformed and non-seekable streams.
+- Identity session cleanup now uses the sign-in time when a session has not yet recorded a last-accessed time, preventing valid token sessions from being removed too early.
+- ABP templates place `UseAntiforgery()` after `UseAuthorization()`, as required by ASP.NET Core.
+- MudBlazor packages have been upgraded to **9.7.0**.
+
+> Check the [Package Version Changes](https://abp.io/docs/10.7/package-version-changes) document for all dependency updates.
+
+## Conclusion
+
+ABP v10.7 RC introduces BLOB encryption and a content pipeline, HTTP QUERY support, Angular Resource API helpers, and new ABP Suite and ABP Studio capabilities. Please try the release and provide feedback to help us finalize ABP v10.7.
+
+For the complete list of changes, see the [ABP 10.7.0-rc.1 release notes](https://github.com/abpframework/abp/releases/tag/10.7.0-rc.1).

docs/en/release-info/migration-guides/abp-10-7.md

@@ -0,0 +1,80 @@
+```json
+//[doc-seo]
+{
+    "Description": "Upgrade your ABP solutions from v10.6 to v10.7 with guidance for BLOB encryption, content pipelines, middleware ordering, and dependency updates."
+}
+```
+
+# ABP Version 10.7 Migration Guide
+
+This document is a guide for upgrading ABP v10.6 solutions to ABP v10.7. There are no explicitly marked breaking changes in this release. Most applications can upgrade their ABP packages without additional migration work.
+
+> **Package Version Changes:** Before upgrading, review the [Package Version Changes](../../package-version-changes.md) document to see version changes on dependent NuGet and NPM packages and align your project with ABP's internal package versions.
+
+## BLOB Encryption and Content Pipeline
+
+**Who is affected**
+
+- Applications that enable BLOB encryption for a container that already stores plaintext BLOBs.
+- Applications that add, remove, or reorder transforming BLOB pipeline contributors for a container that already stores BLOBs.
+
+**What changed**
+
+- ABP v10.7 adds opt-in BLOB encryption at rest and a configurable content pipeline.
+- Encryption and pipeline contributors are disabled by default, so existing containers are not affected unless you enable or configure them.
+- Encrypted BLOBs require the same passphrase that was used to write them.
+- A transforming pipeline contributor becomes part of the stored BLOB format.
+
+**What to do**
+
+No action is required if you do not enable encryption or configure transforming pipeline contributors.
+
+If you enable encryption for a container that already contains plaintext BLOBs:
+
+1. Enable encryption with `allowLegacyPlainText: true`.
+2. Re-save every existing BLOB through the container.
+3. Remove `allowLegacyPlainText` after the migration, so reads fail closed for plaintext content.
+
+```csharp
+options.Containers.Configure<ProfilePictureContainer>(container =>
+{
+    container.UseEncryption(allowLegacyPlainText: true);
+});
+```
+
+If you change transforming pipeline contributors or an encryption passphrase, read and export the existing BLOBs while the old configuration is active, apply the new configuration, and save the content back. Do not change an encryption passphrase in place before migrating the existing BLOBs.
+
+> See the [BLOB Encryption](../../framework/infrastructure/blob-storing/encryption.md) and [BLOB Content Pipeline](../../framework/infrastructure/blob-storing/pipeline.md) documents, and [#25836](https://github.com/abpframework/abp/pull/25836), for details.
+
+## Blazor Antiforgery Middleware Order
+
+**Who is affected**
+
+- Applications that manually configure the ASP.NET Core middleware pipeline in Blazor applications.
+
+**What changed**
+
+- ABP templates now place `UseAntiforgery()` after `UseAuthorization()`, which is the middleware order required by ASP.NET Core.
+
+**What to do**
+
+If your application configures these middleware calls manually, verify that it uses the following order:
+
+```csharp
+app.UseAuthorization();
+app.UseAntiforgery();
+```
+
+## Dependency Updates
+
+**Who is affected**
+
+- Applications that directly reference MudBlazor or pin transitive package versions.
+
+**What changed**
+
+- MudBlazor is upgraded from **9.4.0** to **9.7.0**.
+
+**What to do**
+
+Review direct MudBlazor references, align them with ABP's package versions, and re-test customized MudBlazor components and forms after upgrading.

docs/en/release-info/migration-guides/index.md

@@ -9,6 +9,7 @@
 
 The following documents explain how to migrate your existing ABP applications. We write migration documents only if you need to take an action while upgrading your solution. Otherwise, you can easily upgrade your solution using the [abp update command](../upgrading.md).
 
+- [10.6 to 10.7](abp-10-7.md)
 - [10.5 to 10.6](abp-10-6.md)
 - [10.4 to 10.5](abp-10-5.md)
 - [10.3 to 10.4](abp-10-4.md)