diff --git a/.github/workflows/backend-ci.yaml b/.github/workflows/backend-ci.yaml
index 00aede37..b8912ac7 100644
--- a/.github/workflows/backend-ci.yaml
+++ b/.github/workflows/backend-ci.yaml
@@ -1,38 +1,42 @@
-name: CI
+name: Backend CI
 
 on:
     push:
         branches:
-            - main
             - '[0-9]+.[0-9]+'
     pull_request: ~
+    workflow_dispatch: ~
 
 jobs:
     cs-fix:
         name: Run code style check
-        runs-on: ubuntu-24.04
+        runs-on: ubuntu-26.04
         strategy:
             matrix:
                 php:
                     - '8.3'
         steps:
-            -   uses: actions/checkout@v6
+            -   uses: actions/checkout@v7
 
             -   uses: ibexa/gh-workflows/actions/setup-composer-root-version@main
 
             -   uses: ibexa/gh-workflows/actions/composer-install@main
                 with:
+                    php-version: ${{ matrix.php }}
                     gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                     gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
                     satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
                     satis-network-token: ${{ secrets.SATIS_NETWORK_TOKEN }}
 
             -   name: Run code style check
-                run: composer run-script check-cs -- --format=checkstyle | cs2pr
+                shell: bash
+                run: |
+                    set -euo pipefail
+                    composer run-script check-cs -- --format=checkstyle | cs2pr
 
     tests:
         name: Tests
-        runs-on: ubuntu-24.04
+        runs-on: ubuntu-26.04
         timeout-minutes: 10
 
         strategy:
@@ -44,12 +48,13 @@ jobs:
                     - '8.4'
 
         steps:
-            -   uses: actions/checkout@v6
+            -   uses: actions/checkout@v7
 
             -   uses: ibexa/gh-workflows/actions/setup-composer-root-version@main
 
             -   uses: ibexa/gh-workflows/actions/composer-install@main
                 with:
+                    php-version: ${{ matrix.php }}
                     gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                     gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
                     satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
@@ -84,7 +89,7 @@ jobs:
                     --health-timeout 5s
                     --health-retries 5
                     --tmpfs /var/lib/postgresql/data
-        runs-on: ubuntu-24.04
+        runs-on: ubuntu-26.04
         timeout-minutes: 10
 
         strategy:
@@ -99,12 +104,13 @@ jobs:
                     - '18'
 
         steps:
-            -   uses: actions/checkout@v6
+            -   uses: actions/checkout@v7
 
             -   uses: ibexa/gh-workflows/actions/setup-composer-root-version@main
 
             -   uses: ibexa/gh-workflows/actions/composer-install@main
                 with:
+                    php-version: ${{ matrix.php }}
                     gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                     gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
                     satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
@@ -139,7 +145,7 @@ jobs:
                     --health-timeout=5s
                     --health-retries=5
                     --tmpfs=/var/lib/mysql
-        runs-on: ubuntu-24.04
+        runs-on: ubuntu-26.04
         timeout-minutes: 10
 
         strategy:
@@ -151,12 +157,13 @@ jobs:
                     - '8.4'
 
         steps:
-            -   uses: actions/checkout@v6
+            -   uses: actions/checkout@v7
 
             -   uses: ibexa/gh-workflows/actions/setup-composer-root-version@main
 
             -   uses: ibexa/gh-workflows/actions/composer-install@main
                 with:
+                    php-version: ${{ matrix.php }}
                     gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                     gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
                     satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
@@ -173,7 +180,7 @@ jobs:
 
     solr-integration:
         name: "Solr integration tests"
-        runs-on: ubuntu-24.04
+        runs-on: ubuntu-26.04
         timeout-minutes: 10
         permissions:
             packages: read
@@ -189,12 +196,13 @@ jobs:
                     --health-timeout 5s
                     --health-retries 10
         steps:
-            -   uses: actions/checkout@v6
+            -   uses: actions/checkout@v7
 
             -   uses: ibexa/gh-workflows/actions/setup-composer-root-version@main
 
             -   uses: ibexa/gh-workflows/actions/composer-install@main
                 with:
+                    php-version: '8.3'
                     gh-client-id: ${{ secrets.AUTOMATION_CLIENT_ID }}
                     gh-client-secret: ${{ secrets.AUTOMATION_CLIENT_SECRET }}
                     satis-network-key: ${{ secrets.SATIS_NETWORK_KEY }}
diff --git a/.github/workflows/browser-tests.yaml b/.github/workflows/browser-tests.yaml
index bb4c3fe4..7b70e184 100644
--- a/.github/workflows/browser-tests.yaml
+++ b/.github/workflows/browser-tests.yaml
@@ -4,7 +4,6 @@ name: Browser tests
 on:
     push:
         branches:
-            - main
             - '[0-9]+.[0-9]+'
     pull_request: ~
 
diff --git a/.github/workflows/frontend-ci.yaml b/.github/workflows/frontend-ci.yaml
index 9306cbbe..be3a66f2 100644
--- a/.github/workflows/frontend-ci.yaml
+++ b/.github/workflows/frontend-ci.yaml
@@ -3,19 +3,18 @@ name: Frontend build
 on:
     push:
         branches:
-            - main
             - '[0-9]+.[0-9]+'
     pull_request: ~
 
 jobs:
     frontend-test:
         name: Frontend build test
-        runs-on: 'ubuntu-24.04'
+        runs-on: 'ubuntu-26.04'
         timeout-minutes: 5
 
         steps:
-            - uses: actions/checkout@v5
-            - uses: actions/setup-node@v2
+            - uses: actions/checkout@v7
+            - uses: actions/setup-node@v7
               with:
                   node-version: '18'
             - run: yarn install
diff --git a/.github/workflows/pr-assign.yaml b/.github/workflows/pr-assign.yaml
deleted file mode 100644
index 302423e3..00000000
--- a/.github/workflows/pr-assign.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-name: Assign Pull Request to maintainers
-
-on:
-    pull_request_target:
-
-jobs:
-    assign:
-        uses: ibexa/gh-workflows/.github/workflows/pr-assign.yml@main
-        secrets:
-            robot-token: ${{ secrets.EZROBOT_PAT }}
diff --git a/src/bundle/Resources/richtext/stylesheets/docbook/xhtml5/edit/core.xsl b/src/bundle/Resources/richtext/stylesheets/docbook/xhtml5/edit/core.xsl
index db6dc7c9..df71dd21 100644
--- a/src/bundle/Resources/richtext/stylesheets/docbook/xhtml5/edit/core.xsl
+++ b/src/bundle/Resources/richtext/stylesheets/docbook/xhtml5/edit/core.xsl
@@ -82,7 +82,10 @@
         </xsl:attribute>
       </xsl:if>
       <xsl:call-template name="ezattribute"/>
-      <xsl:value-of select="./text()"/>
+      <!-- Iterate over all text nodes: since libxml2 2.14 adjacent CDATA sections are no longer merged -->
+      <xsl:for-each select="./text()">
+        <xsl:value-of select="."/>
+      </xsl:for-each>
     </xsl:element>
   </xsl:template>
 
diff --git a/src/bundle/Resources/richtext/stylesheets/docbook/xhtml5/output/core.xsl b/src/bundle/Resources/richtext/stylesheets/docbook/xhtml5/output/core.xsl
index 1d6ef99f..ab5e8b71 100644
--- a/src/bundle/Resources/richtext/stylesheets/docbook/xhtml5/output/core.xsl
+++ b/src/bundle/Resources/richtext/stylesheets/docbook/xhtml5/output/core.xsl
@@ -48,7 +48,10 @@
         </xsl:attribute>
       </xsl:if>
       <xsl:call-template name="ezattribute"/>
-      <xsl:value-of select="./text()"/>
+      <!-- Iterate over all text nodes: since libxml2 2.14 adjacent CDATA sections are no longer merged -->
+      <xsl:for-each select="./text()">
+        <xsl:value-of select="."/>
+      </xsl:for-each>
     </xsl:element>
   </xsl:template>