October 2026 - notifications

[xwiki/xwiki-platform] 1fe159: XWIKI-25171: Upgrade to Snappy 1.1.10.12
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 1fe159968a6abe0342182dd6811458b7c7b0976f https://github.com/xwiki/xwiki-platform/commit/1fe159968a6abe0342182dd68114… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M pom.xml Log Message: ----------- XWIKI-25171: Upgrade to Snappy 1.1.10.12 Commit: 5f3bc7dc3f9dc493b0e44ed5db233e0ff9f819b9 https://github.com/xwiki/xwiki-platform/commit/5f3bc7dc3f9dc493b0e44ed5db23… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M pom.xml Log Message: ----------- XWIKI-25274: Upgrade to Junrar 8.1.2 Compare: https://github.com/xwiki/xwiki-platform/compare/a6747deb542c...5f3bc7dc3f9d To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-commons] 709c58: XCOMMONS-3827: Upgrade to Apache Commons Codec 1.23.0
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-commons Commit: 709c5884cd5440cd384602d2c6133a5498eaa71f https://github.com/xwiki/xwiki-commons/commit/709c5884cd5440cd384602d2c6133… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M pom.xml Log Message: ----------- XCOMMONS-3827: Upgrade to Apache Commons Codec 1.23.0 Commit: fd7f29b714ebc5eda88a61367ebd9a6920520dd1 https://github.com/xwiki/xwiki-commons/commit/fd7f29b714ebc5eda88a61367ebd9… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M pom.xml Log Message: ----------- XCOMMONS-3828: Upgrade to Apache HTTPClient 5.6.5 Commit: 6dfa515331fcc5bbb8c40178a320c53a2a993393 https://github.com/xwiki/xwiki-commons/commit/6dfa515331fcc5bbb8c40178a320c… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M pom.xml Log Message: ----------- XCOMMONS-3796: Upgrade to OpenTelemetry 1.67.0 Commit: 40c924a2ae3e7a9ee4181d8f4b92cfe4bef9eafa https://github.com/xwiki/xwiki-commons/commit/40c924a2ae3e7a9ee4181d8f4b92c… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M pom.xml Log Message: ----------- XCOMMONS-3791: Upgrade to AWS SDK 2.55.14 Commit: 7052db0100bc9d7ec03f12e0970095157b179988 https://github.com/xwiki/xwiki-commons/commit/7052db0100bc9d7ec03f12e097009… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M pom.xml Log Message: ----------- XCOMMONS-3809: Upgrade to Stax2 API 4.3.2 Commit: 8850aaaa52e2cc54f73f28639df3a015765d053b https://github.com/xwiki/xwiki-commons/commit/8850aaaa52e2cc54f73f28639df3a… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M pom.xml Log Message: ----------- XCOMMONS-3829: Upgrade to ASM 9.11.0 Commit: 41c8ccf03436aedd5ecf654ddcfdda3e6cf2d4d7 https://github.com/xwiki/xwiki-commons/commit/41c8ccf03436aedd5ecf654ddcfdd… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M pom.xml Log Message: ----------- XCOMMONS-3497: Upgrade to Infinispan 16.2.3 and Protostream 6.0.12 Commit: 6ae2d8767501325ff06552eeb6c7d08f70a6fbab https://github.com/xwiki/xwiki-commons/commit/6ae2d8767501325ff06552eeb6c7d… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M pom.xml Log Message: ----------- XCOMMONS-3818: Upgrade to Checker Qual 4.3.1 Commit: b477902bbba9da48d15b55c5f0404fdb453e0374 https://github.com/xwiki/xwiki-commons/commit/b477902bbba9da48d15b55c5f0404… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M pom.xml Log Message: ----------- XCOMMONS-3830: Upgrade to Bouncy Castle 1.86.2 Compare: https://github.com/xwiki/xwiki-commons/compare/f4a22add9bb2...b477902bbba9 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[[email protected]][Issue] Updates for XCOMMONS-3818: Upgrade to Checker Qual 4.3.1
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[[email protected]][Issue] Updates for XWIKI-25272: Notification filter preference cleanup events cannot be sent to the other cluster members
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[[email protected]][Issue] Updates for XWIKI-25273: A forced asynchronous placeholder for an already rendered result cannot be resolved
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[[email protected]][Issue] Updates for XCOMMONS-3809: Upgrade to Stax2 API 4.3.2
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[[email protected]][Issue] Updates for XCOMMONS-3497: Upgrade to Infinispan 16.2.3 and Protostream 6.0.12
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[[email protected]][Issue] Updates for XCOMMONS-3829: Upgrade to ASM 9.11
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[xwiki-contrib/application-releasenotes] a4a19e: RN-125: Check that the limit of the release note c...
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/RN-125 Home: https://github.com/xwiki-contrib/application-releasenotes Commit: a4a19e9a59055b2a61be0dee2716dba7c0320698 https://github.com/xwiki-contrib/application-releasenotes/commit/a4a19e9a59… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M application-releasenotes-ui/src/test/java/org/xwiki/contrib/releasenotes/ReleaseNotesChangesMacroPageTest.java Log Message: ----------- RN-125: Check that the limit of the release note changes macro is only read as a number * Add a page test rendering the macro with a limit that is not a number and that holds wiki syntax, asserting that none of it is rendered and that the default limit is used, as the existing tests already do for the product and the version. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/application-releasenotes/settings/notifica…

1 0

[[email protected]][Issue] Updates for XCOMMONS-3796: Upgrade to OpenTelemetry 1.67.0
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[[email protected]][Issue] Updates for XCOMMONS-3791: Upgrade to AWS SDK 2.55.14
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[[email protected]][Issue] Updates for XCOMMONS-3809: Upgrade to Stax2 API 4.3.1
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[xwiki/xwiki-dev-llm] 26ceae: [Misc] Warn against keying a security guard on the...
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/security-context-document Home: https://github.com/xwiki/xwiki-dev-llm Commit: 26ceaef3e79cb04f5c8c17eb06a5cf1c33ed7d18 https://github.com/xwiki/xwiki-dev-llm/commit/26ceaef3e79cb04f5c8c17eb06a5c… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/conventions/security.md Log Message: ----------- [Misc] Warn against keying a security guard on the context-document identity * A page's rights guard must not assume $doc is the page itself: ?sheet and includes let a caller make another document the context document while the page keeps its author rights. * Point to resolving a constant reference or an explicit includer flag instead, and to ?sheet as an audit probe. Co-Authored-By: Claude Opus 4.8 <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[[email protected]][Issue] Updates for XCOMMONS-3828: Upgrade to Apache HTTPClient 5.6.5
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[[email protected]][Issue] Updates for XCOMMONS-3827: Upgrade to Apache Commons Codec 1.23.0
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[[email protected]][Issue] Updates for XWIKI-25272: Notification filter preference cleanup events cannot be sent to the other cluster members
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[xwiki/xwiki-dev-llm]
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/tags/v1.18.6 Home: https://github.com/xwiki/xwiki-dev-llm To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] ff4129: [Misc] Release 1.18.6
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-dev-llm Commit: ff41292a6dafacab1e3da630b2860b3d30b85723 https://github.com/xwiki/xwiki-dev-llm/commit/ff41292a6dafacab1e3da630b2860… Author: github-actions[bot] <41898282+github-actions[bot](a)users.noreply.github.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M .claude-plugin/marketplace.json M kimi.plugin.json M opencode.jsonc M xwiki/.claude-plugin/plugin.json Log Message: ----------- [Misc] Release 1.18.6 * content edits only (no capability added or removed) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm]
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/cvss-impact-from-achievable Home: https://github.com/xwiki/xwiki-dev-llm To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] a5a997: [Misc] Clarify how to score CVSS impacts for gaine...
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-dev-llm Commit: a5a9971a30efec90406129f8b2de8e78a5f05a60 https://github.com/xwiki/xwiki-dev-llm/commit/a5a9971a30efec90406129f8b2de8… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/processes/security-policy.md Log Message: ----------- [Misc] Clarify how to score CVSS impacts for gained rights and preconditions * A right the attack yields never caps the impacts: only a right it needs does. * Score impacts from what the attacker can achieve, not from what a PoC printed. * Check the usual wiki access setups before calling an Attack Requirement rare. * Drop a sentence restating that per-metric values are not cached. Co-Authored-By: Claude Opus 5.5 <noreply(a)anthropic.com> Commit: b5e78b6137a74b6aa34917972da610cd8b27733e https://github.com/xwiki/xwiki-dev-llm/commit/b5e78b6137a74b6aa34917972da61… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/processes/security-policy.md Log Message: ----------- [Misc] Tighten the CVSS impact and Attack Requirements traps * Keep the right cap bullet to the cap; state the 'score by reach' rule once, in the achievable-impact bullet. * Phrase the access-setup check in CVSS terms (setting Attack Requirements to Present) and give it its own bullet, out of the 'no XWiki best practice' one. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> Commit: dc31a70418839b13d567241d41267e8435129476 https://github.com/xwiki/xwiki-dev-llm/commit/dc31a70418839b13d567241d41267… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/processes/security-policy.md Log Message: ----------- [Misc] Add the Attack Complexity trap to the CVSS scoring traps * Attack Complexity is a protection to defeat, never the privilege the attacker holds, which Privileges Required already encodes. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> Commit: 43ecf7f95f116bc3612d1205900c3010cc6e3f79 https://github.com/xwiki/xwiki-dev-llm/commit/43ecf7f95f116bc3612d1205900c3… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/processes/security-policy.md Log Message: ----------- Merge pull request #236 from xwiki/cvss-impact-review-fixes [Misc] Tighten the CVSS impact and Attack Requirements traps Commit: 533a556979d0e66818580dd43a28b9f78e62d44a https://github.com/xwiki/xwiki-dev-llm/commit/533a556979d0e66818580dd43a28b… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/processes/security-policy.md Log Message: ----------- Merge pull request #235 from xwiki/cvss-impact-from-achievable [Misc] Clarify how to score CVSS impacts for gained rights and preconditions Compare: https://github.com/xwiki/xwiki-dev-llm/compare/b1cfcbc91c35...533a556979d0 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm]
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/cvss-impact-review-fixes Home: https://github.com/xwiki/xwiki-dev-llm To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] b5e78b: [Misc] Tighten the CVSS impact and Attack Requirem...
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/cvss-impact-from-achievable Home: https://github.com/xwiki/xwiki-dev-llm Commit: b5e78b6137a74b6aa34917972da610cd8b27733e https://github.com/xwiki/xwiki-dev-llm/commit/b5e78b6137a74b6aa34917972da61… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/processes/security-policy.md Log Message: ----------- [Misc] Tighten the CVSS impact and Attack Requirements traps * Keep the right cap bullet to the cap; state the 'score by reach' rule once, in the achievable-impact bullet. * Phrase the access-setup check in CVSS terms (setting Attack Requirements to Present) and give it its own bullet, out of the 'no XWiki best practice' one. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> Commit: dc31a70418839b13d567241d41267e8435129476 https://github.com/xwiki/xwiki-dev-llm/commit/dc31a70418839b13d567241d41267… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/processes/security-policy.md Log Message: ----------- [Misc] Add the Attack Complexity trap to the CVSS scoring traps * Attack Complexity is a protection to defeat, never the privilege the attacker holds, which Privileges Required already encodes. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> Commit: 43ecf7f95f116bc3612d1205900c3010cc6e3f79 https://github.com/xwiki/xwiki-dev-llm/commit/43ecf7f95f116bc3612d1205900c3… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/processes/security-policy.md Log Message: ----------- Merge pull request #236 from xwiki/cvss-impact-review-fixes [Misc] Tighten the CVSS impact and Attack Requirements traps Compare: https://github.com/xwiki/xwiki-dev-llm/compare/a5a9971a30ef...43ecf7f95f11 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] dc31a7: [Misc] Add the Attack Complexity trap to the CVSS ...
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/cvss-impact-review-fixes Home: https://github.com/xwiki/xwiki-dev-llm Commit: dc31a70418839b13d567241d41267e8435129476 https://github.com/xwiki/xwiki-dev-llm/commit/dc31a70418839b13d567241d41267… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/processes/security-policy.md Log Message: ----------- [Misc] Add the Attack Complexity trap to the CVSS scoring traps * Attack Complexity is a protection to defeat, never the privilege the attacker holds, which Privileges Required already encodes. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] b5e78b: [Misc] Tighten the CVSS impact and Attack Requirem...
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/cvss-impact-review-fixes Home: https://github.com/xwiki/xwiki-dev-llm Commit: b5e78b6137a74b6aa34917972da610cd8b27733e https://github.com/xwiki/xwiki-dev-llm/commit/b5e78b6137a74b6aa34917972da61… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/processes/security-policy.md Log Message: ----------- [Misc] Tighten the CVSS impact and Attack Requirements traps * Keep the right cap bullet to the cap; state the 'score by reach' rule once, in the achievable-impact bullet. * Phrase the access-setup check in CVSS terms (setting Attack Requirements to Present) and give it its own bullet, out of the 'no XWiki best practice' one. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] b1cfcb: [Misc] Release 1.18.5
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-dev-llm Commit: b1cfcbc91c35385d19f88afe08d0e2dc60a25853 https://github.com/xwiki/xwiki-dev-llm/commit/b1cfcbc91c35385d19f88afe08d0e… Author: github-actions[bot] <41898282+github-actions[bot](a)users.noreply.github.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M .claude-plugin/marketplace.json M kimi.plugin.json M opencode.jsonc M xwiki/.claude-plugin/plugin.json Log Message: ----------- [Misc] Release 1.18.5 * content edits only (no capability added or removed) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0