October 2026 - notifications

[xwiki/xwiki-platform] 9e5ee7: XWIKI-24357: Provide new algorithms in PasswordClass
by XWiki Notifications 07 Oct '26

07 Oct '26

Branch: refs/heads/backport/stable-17.10.x/XWIKI-24357 Home: https://github.com/xwiki/xwiki-platform Commit: 9e5ee7b796b127dcaec6d7bea2de973b45b2c384 https://github.com/xwiki/xwiki-platform/commit/9e5ee7b796b127dcaec6d7bea2de… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-10-07 (Wed, 07 Oct 2026) Changed paths: M pom.xml M xwiki-platform-core/pom.xml M xwiki-platform-core/xwiki-platform-oldcore/pom.xml M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/XWiki.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/api/User.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/internal/mandatory/XWikiUsersDocumentInitializer.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/objects/BaseCollection.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/objects/classes/PasswordClass.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/objects/meta/PasswordMetaClass.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/user/impl/xwiki/XWikiAuthServiceImpl.java A xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/internal/migration/R171014001XWIKI24357DataMigration.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/internal/objects/PasswordPropertyParser.java A xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/security/internal/XWikiLegacyPasswordEncoder.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/resources/META-INF/components.txt M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/XWikiTest.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/user/impl/xwiki/XWikiAuthServiceImplTest.java A xwiki-platform-core/xwiki-platform-oldcore/src/test/java/org/xwiki/security/internal/XWikiLegacyPasswordEncoderTest.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java M xwiki-platform-distribution/xwiki-platform-distribution-ui/xwiki-platform-distribution-ui-admin-user/src/main/resources/XWiki/Admin.xml Log Message: ----------- XWIKI-24357: Provide new algorithms in PasswordClass Refactor PasswordClass to rely on Spring Security framework algorithms, format and PasswordEncoder interface. Those changes also provide a migration to re-encode existing passwords in DB with a stronger algorithm. * All previous algorithm for password hash computation in PasswordClass has been moved to the new XWikiLegacyPasswordEncoder which implements the PasswordEncoder interface provided by Spring Security: the same encoder is also used to re-encode the passwords in the migration * I simplified the API for checking if 2 passwords are matching by providing utility methods that allows to perform the check directly at an XObject level, without having to get the class property perform a cast etc * Most changes are obviously in PasswordClass where I added the support of the different algorithm and provided the logic to support both legacy and new formats, and added checks to issue warning when legacy or deprecated encodings are used (cherry picked from commit 25305cb0ef73968465529ed307dda66a249fab2d) (cherry picked from commit 15cfa89ec9d50d7f84d5c812b2a663309ee6bfb0) Commit: dd37e098994ce9f0c8e945c375427c8484ea445a https://github.com/xwiki/xwiki-platform/commit/dd37e098994ce9f0c8e945c37542… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-10-07 (Wed, 07 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/pom.xml Log Message: ----------- XWIKI-24357: Provide new algorithms in PasswordClass * Add missing dependency exclusion (cherry picked from commit 60c507c198727ddec28e35fabeebad610294fe1c) Commit: 1986f9c2628ced1f4ad6bdd332bbcc498a04c433 https://github.com/xwiki/xwiki-platform/commit/1986f9c2628ced1f4ad6bdd332bb… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-07 (Wed, 07 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/objects/BaseCollection.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/XWikiTest.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/objects/BaseCollectionTest.java Log Message: ----------- XWIKI-25027: Regressions in the PasswordClass hash algorithm rework * Add a unit test for BaseCollection#isPasswordValueMatching covering a clear value stored in a StringProperty * Add a unit test for XWiki#validateUser covering an empty validation key * Add missing check for empty passwords * Ensure to have case sensitive check for clear passwords Co-Authored-By: Claude Opus 5 (1M context) <noreply(a)anthropic.com> Co-Authored-By: Simon Urli <simon.urli(a)xwiki.com> (cherry picked from commit 0ea39140592b326cfd5e230f239fd1eed1ca7f7d) (cherry picked from commit 1c27a84317ecbc463f0ba1a18a2f8fc56c46908c) Commit: 944395cc6e78819a6cae24ac31a2d697b2f1c507 https://github.com/xwiki/xwiki-platform/commit/944395cc6e78819a6cae24ac31a2… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-10-07 (Wed, 07 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/objects/classes/PasswordClass.java A xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/objects/classes/PasswordClassTest.java Log Message: ----------- XWIKI-25027: Regressions in the PasswordClass hash algorithm rework * Fix regression with handling placeholder * Provide tests (cherry picked from commit fa3cc8ad5b87ca2800ded0322ef827d5ecf0f29a) (cherry picked from commit 3da7ac27d703a87de223942c2fe802b805147d50) Commit: efe0be75bf91de0d822a2a7550b9cd46d200df7e https://github.com/xwiki/xwiki-platform/commit/efe0be75bf91de0d822a2a7550b9… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-10-07 (Wed, 07 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/security/internal/XWikiLegacyPasswordEncoder.java Log Message: ----------- XWIKI-25027: Regressions in the PasswordClass hash algorithm rework * Prevent logging warnings and errors when the XWikiLegacyPasswordEncoder is used (cherry picked from commit b79d54a537151bc2954eae5c9dd295d6ca6df6a5) (cherry picked from commit 40796d1a0d3f147e0871939ef29988d71eae4e1f) Commit: 62fcd08666b1092bb86be6ce3bbc5b0011b7a191 https://github.com/xwiki/xwiki-platform/commit/62fcd08666b1092bb86be6ce3bbc… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-10-07 (Wed, 07 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/internal/mandatory/XWikiUsersDocumentInitializer.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/objects/BaseCollection.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/objects/classes/PasswordClass.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/org/xwiki/security/internal/XWikiLegacyPasswordEncoder.java Log Message: ----------- XWIKI-24357: Improve PasswordClass hash algorithm * Add `@since 17.10.14` for the backported APIs * Replace the `@since 17.10.13` and `@since 16.10.19` of XWikiLegacyPasswordEncoder, which were never released on those branches, by `@since 17.10.14` Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> Compare: https://github.com/xwiki/xwiki-platform/compare/9e5ee7b796b1%5E...62fcd0866… To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki-contrib/documentation] f55725: DA-90: Add a check for the label format of links i...
by XWiki Notifications 07 Oct '26

07 Oct '26

Branch: refs/heads/da-90-related-link-label Home: https://github.com/xwiki-contrib/documentation Commit: f5572584e4921bb2333334d90bbd6268f94f6668 https://github.com/xwiki-contrib/documentation/commit/f5572584e4921bb233333… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-07 (Wed, 07 Oct 2026) Changed paths: A documentation-xwikiorg/documentation-xwikiorg-api/src/main/java/org/xwiki/contrib/documentation/internal/xwikiorg/RelatedLinkLabelCheck.java M documentation-xwikiorg/documentation-xwikiorg-api/src/main/resources/META-INF/components.txt A documentation-xwikiorg/documentation-xwikiorg-api/src/test/java/org/xwiki/contrib/documentation/internal/xwikiorg/RelatedLinkLabelCheckTest.java Log Message: ----------- DA-90: Add a check for the label format of links in the Related field * Add the relatedLinkLabel check, which parses the Related field of the DocumentationClass object (including the content of macros holding wiki content) and, for every link whose label contains "(for ", reports a Warning when the label is not exactly "<title> (for <target>)". * The expected title is the title of the linked page and the expected target is the audience of its DocumentationClass object (user, administrator, developer mapped to User, Administrator, Developer). The linked page is resolved relative to the current page and loaded through the XWikiContext. * When the linked page cannot be loaded, does not exist, or has no title or target, only what can be verified is checked: the label's own title is kept and the target must be one of User, Administrator or Developer. * Add RelatedLinkLabelCheckTest covering valid labels, wrong capitalization, invalid and mismatched targets, trailing text, missing or partial linked pages, external links, links inside macros, and parse and load failures. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/documentation/settings/notifications

1 0

[xwiki-contrib/documentation]
by XWiki Notifications 07 Oct '26

07 Oct '26

Branch: refs/heads/da-88-highlights Home: https://github.com/xwiki-contrib/documentation To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/documentation/settings/notifications

1 0

[xwiki-contrib/documentation] 853645: DA-88: Add checks for the number and the syntax of...
by XWiki Notifications 07 Oct '26

07 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki-contrib/documentation Commit: 85364564d9816382ecf938d7fdf2ff193cdeb2b8 https://github.com/xwiki-contrib/documentation/commit/85364564d9816382ecf93… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-07 (Wed, 07 Oct 2026) Changed paths: A documentation-xwikiorg/documentation-xwikiorg-api/src/main/java/org/xwiki/contrib/documentation/internal/xwikiorg/HighlightsCheck.java M documentation-xwikiorg/documentation-xwikiorg-api/src/main/resources/META-INF/components.txt A documentation-xwikiorg/documentation-xwikiorg-api/src/test/java/org/xwiki/contrib/documentation/internal/xwikiorg/HighlightsCheckTest.java Log Message: ----------- DA-88: Add checks for the number and the syntax of Highlights (#29) * Add the `highlights` check (`HighlightsCheck`), which parses the Highlights field of the DocumentationClass object and reports more than 6 first-level list items as an Error * Report as a Warning, with the item text as context, every first-level item without a link, and every first-level item without exactly one nested list item (its description) * Report nothing when the field is empty, and log a warning when it can't be parsed * Add `HighlightsCheckTest` Co-authored-by: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/documentation/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-25161: Export modal close button is invisible to screen readers
by XWiki Notifications 07 Oct '26

07 Oct '26

1 0

[[email protected]][Issue] Updates for GUIDEDTOUR-27: Doubling back across a reflex step will then advance multiple steps when clicking
by XWiki Notifications 07 Oct '26

07 Oct '26

1 0

[[email protected]][Issue] Updates for XWIKI-24357: Improve PasswordClass hash algorithm
by XWiki Notifications 07 Oct '26

07 Oct '26

1 0

[[email protected]][Issue] Updates for XWIKI-23827: Store password properties in dedicated table
by XWiki Notifications 07 Oct '26

07 Oct '26

1 0

[[email protected]][Issue] Updates for XWIKI-24490: ORA-00932 error which prevents upgrading from instances pre XWiki 13.10.x to instances post XWiki 18.0.x on Oracle
by XWiki Notifications 07 Oct '26

07 Oct '26

1 0

[xwiki/xwiki-platform]
by XWiki Notifications 07 Oct '26

07 Oct '26

Branch: refs/heads/backport/stable-17.10.x/XWIKI-24490 Home: https://github.com/xwiki/xwiki-platform To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0