October 2026 - notifications

[xwiki/xwiki-platform] f33406: XWIKI-25275: Attachments stored in the S3 blob sto...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/backport/stable-18.4.x/pr-6865 Home: https://github.com/xwiki/xwiki-platform Commit: f33406ce974d99f4987244e65dcb92abcb961d8c https://github.com/xwiki/xwiki-platform/commit/f33406ce974d99f4987244e65dcb… Author: ciaens <github.elongated262(a)passmail.net> Date: 2026-10-14 (Wed, 14 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/pom.xml M xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/src/main/java/org/xwiki/filter/xar/internal/output/XAROutputFilterStream.java A xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/src/test/java/org/xwiki/filter/xar/internal/output/XAROutputFilterStreamTest.java Log Message: ----------- XWIKI-25275: Attachments stored in the S3 blob store are truncated when a page is deleted or exported as XAR (#6865) * Fill each 4095-byte chunk of attachment content with InputStream#readNBytes in XAROutputFilterStream instead of stopping at the first read returning fewer bytes, which a network stream such as an S3 object does before its end * Add XAROutputFilterStreamTest: attachment and attachment revision content read from a stream returning short reads, contents of 0, 4095, 8190 and 13140 bytes read with short reads (same output as with a stream filling each read), XAR to XAR conversion of a multi-chunk attachment, read error after several short reads * Raise the coverage threshold of xwiki-platform-filter-stream-xar from 0.72 to 0.84 Co-authored-by: Claude <noreply(a)anthropic.com> (cherry picked from commit 6286e0557c1efd44989b293a12d5faa51cd298fc) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-25281: Edit button for page older version edits the latest version
by XWiki Notifications 14 Oct '26

14 Oct '26

1 0

[xwiki/xwiki-platform] 6286e0: XWIKI-25275: Attachments stored in the S3 blob sto...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 6286e0557c1efd44989b293a12d5faa51cd298fc https://github.com/xwiki/xwiki-platform/commit/6286e0557c1efd44989b293a12d5… Author: ciaens <github.elongated262(a)passmail.net> Date: 2026-10-14 (Wed, 14 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/pom.xml M xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/src/main/java/org/xwiki/filter/xar/internal/output/XAROutputFilterStream.java A xwiki-platform-core/xwiki-platform-filter/xwiki-platform-filter-streams/xwiki-platform-filter-stream-xar/src/test/java/org/xwiki/filter/xar/internal/output/XAROutputFilterStreamTest.java Log Message: ----------- XWIKI-25275: Attachments stored in the S3 blob store are truncated when a page is deleted or exported as XAR (#6865) * Fill each 4095-byte chunk of attachment content with InputStream#readNBytes in XAROutputFilterStream instead of stopping at the first read returning fewer bytes, which a network stream such as an S3 object does before its end * Add XAROutputFilterStreamTest: attachment and attachment revision content read from a stream returning short reads, contents of 0, 4095, 8190 and 13140 bytes read with short reads (same output as with a stream filling each read), XAR to XAR conversion of a multi-chunk attachment, read error after several short reads * Raise the coverage threshold of xwiki-platform-filter-stream-xar from 0.72 to 0.84 Co-authored-by: Claude <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki-contrib/application-blog] 420801: BLOG-270: Convert the functional tests to Docker-b...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/vmassol/BLOG-270 Home: https://github.com/xwiki-contrib/application-blog Commit: 42080177f4229079688ac2f0c63be4d34d1ed0db https://github.com/xwiki-contrib/application-blog/commit/42080177f422907968… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-14 (Wed, 14 Oct 2026) Changed paths: M README.md A application-blog-test/application-blog-test-docker/pom.xml A application-blog-test/application-blog-test-docker/src/test/it/org/xwiki/blog/test/ui/AllIT.java A application-blog-test/application-blog-test-docker/src/test/it/org/xwiki/blog/test/ui/BlogArchiveAndCategoriesIT.java A application-blog-test/application-blog-test-docker/src/test/it/org/xwiki/blog/test/ui/BlogCalendarDisplayIT.java A application-blog-test/application-blog-test-docker/src/test/it/org/xwiki/blog/test/ui/BlogCategoriesIT.java A application-blog-test/application-blog-test-docker/src/test/it/org/xwiki/blog/test/ui/BlogManagementIT.java A application-blog-test/application-blog-test-docker/src/test/it/org/xwiki/blog/test/ui/BlogPostIT.java A application-blog-test/application-blog-test-docker/src/test/it/org/xwiki/blog/test/ui/BlogPostListMacroIT.java A application-blog-test/application-blog-test-docker/src/test/it/org/xwiki/blog/test/ui/BlogPostVisibilityIT.java A application-blog-test/application-blog-test-docker/src/test/it/org/xwiki/blog/test/ui/BlogTitleSecurityIT.java M application-blog-test/application-blog-test-pageobjects/src/main/java/org/xwiki/blog/test/po/BlogManagementPage.java R application-blog-test/application-blog-test-tests/pom.xml R application-blog-test/application-blog-test-tests/src/test/it/org/xwiki/blog/test/ui/AllTests.java R application-blog-test/application-blog-test-tests/src/test/it/org/xwiki/blog/test/ui/BlogArchiveAndCategoriesTest.java R application-blog-test/application-blog-test-tests/src/test/it/org/xwiki/blog/test/ui/BlogCalendarDisplayTest.java R application-blog-test/application-blog-test-tests/src/test/it/org/xwiki/blog/test/ui/BlogCategoriesTest.java R application-blog-test/application-blog-test-tests/src/test/it/org/xwiki/blog/test/ui/BlogManagementTest.java R application-blog-test/application-blog-test-tests/src/test/it/org/xwiki/blog/test/ui/BlogPostListMacroTest.java R application-blog-test/application-blog-test-tests/src/test/it/org/xwiki/blog/test/ui/BlogPostTest.java R application-blog-test/application-blog-test-tests/src/test/it/org/xwiki/blog/test/ui/BlogPostVisibilityTest.java R application-blog-test/application-blog-test-tests/src/test/it/org/xwiki/blog/test/ui/BlogTitleSecurityTest.java M application-blog-test/pom.xml M pom.xml Log Message: ----------- BLOG-270: Convert the functional tests to Docker-based tests * Add the application-blog-test-docker module with an AllIT suite and the 8 test classes converted to JUnit5 `*IT` classes (10 tests, same assertions as before) * Remove the old JUnit4 application-blog-test-tests module * Override the Testcontainers version (testcontainers-bom 1.21.4, jna 5.13.0, docker-java exclusions) since XWiki 14.10.20 ships Testcontainers 1.17.5, which is too old for recent Docker Engines * Configure `@UITest` with resolveExtraJARs and set up the JodaTime plugin needed by the blog * Make BlogManagementPage open the location picker edit mode when its fields are hidden * Add the docker profile to the release arguments and to the README release commands Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/application-blog/settings/notifications

1 0

[xwiki/xwiki-dev-llm] 594281: [Misc] Release documentation skill: define the SIN...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/vmassol/release-documentation-gaps Home: https://github.com/xwiki/xwiki-dev-llm Commit: 59428174241498e78d354519a556e45a71495aff https://github.com/xwiki/xwiki-dev-llm/commit/59428174241498e78d354519a556e… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-13 (Tue, 13 Oct 2026) Changed paths: M xwiki/skills/xwiki-release-documentation/SKILL.md Log Message: ----------- [Misc] Release documentation skill: define the SINGLE version, the previous tag, the plan file and the N/A bar * SINGLE mode picks the non-bugfix Fix Version (asks if several) and runs an issue not resolved Fixed only on the developer's say-so * Define <previous-release-tag> per line and say release tags are not ancestors of master, which the two-dot range handles * One plan file per version, SINGLE runs included, resumed whatever its date * The noteworthiness verify: runs in the main session once per run and counts N/A (reason) values as N/A Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] c691a1: [Misc] Review skill: close the gaps found by the t...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/vmassol/review-gaps Home: https://github.com/xwiki/xwiki-dev-llm Commit: c691a1555e07a4073d571c79199d103099475f5b https://github.com/xwiki/xwiki-dev-llm/commit/c691a1555e07a4073d571c79199d1… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-13 (Tue, 13 Oct 2026) Changed paths: M xwiki/skills/xwiki-review/SKILL.md M xwiki/skills/xwiki-review/references/reviewer-contract.md M xwiki/skills/xwiki-review/references/skeptic.md Log Message: ----------- [Misc] Review skill: close the gaps found by the trial run * Context pack goes to one file passed by path; reviewers read it and their sources in full * Commit subjects come from git log, since gh truncates messageHeadline * Drop the routing table's Grounded-in column: the briefs alone say what an angle loads * Backward compatibility runs on src/main/java outside -legacy (page objects included); i18n & UX on any XAR .xml page * Comment: plugin rule links to the release tag, empty severity headings left out, angles comma-separated, singular count * Load security-policy.md before the fan-out it binds * Reviewers return Candidate conventions separately, for section 7 * The skeptic reads its finding's angle section of briefs.md, so a skill-owned citation checks out Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] 5cae60: [Misc] Capture UI change skill: restore every swap...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/vmassol/capture-ui-change-gaps Home: https://github.com/xwiki/xwiki-dev-llm Commit: 5cae608a0d9ba359faade572a93de7501e4520ce https://github.com/xwiki/xwiki-dev-llm/commit/5cae608a0d9ba359faade572a93de… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-13 (Tue, 13 Oct 2026) Changed paths: M xwiki/skills/xwiki-capture-ui-change/SKILL.md M xwiki/skills/xwiki-capture-ui-change/references/jar-route.md M xwiki/skills/xwiki-capture-ui-change/references/released-image.md M xwiki/skills/xwiki-capture-ui-change/sync-static-resource.sh Log Message: ----------- [Misc] Capture UI change skill: restore every swapped file, cover the "after" without a fixed instance, and fix stale paths * Back up each overwritten jar under $CAPTURE_DIR/original/ by file name, so a fix spanning several jar modules restores all of them * Add --backup-dir to sync-static-resource.sh, so the file-copy paths restore what the instance had rather than the pre-fix files * Make step 4's restore one copy for jar and file-copy paths, say a file the fix added is deleted, and say the xar route has no restore * Say where the "after" comes from when no running instance has the fix, and that the released-image "before" is steps 2-3 only * Say a jar swap's restart clears XWiki's compiled-LESS cache, a skin .less copy needs clearCache() or a restart, and reopen the browser between states (webjar files carry a one-year Expires) * Fix INSTANCE_DIR's name to the real jetty-hsqldb distribution directory and name a repo-built distribution zip as a source to copy * Say how to create a fixture page on both instances (base URL, Admin:admin) in released-image.md * Say the commands run from the checkout holding the fix, and where okf/servers/jira.md sits Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm]
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/vmassol/ci-check-tool-rules Home: https://github.com/xwiki/xwiki-dev-llm To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] 44b1ab: [Misc] Security advisory skill: check for an exist...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/vmassol/security-advisory-gaps Home: https://github.com/xwiki/xwiki-dev-llm Commit: 44b1ab6b270591208c22cc34ffb2c806cf43725c https://github.com/xwiki/xwiki-dev-llm/commit/44b1ab6b270591208c22cc34ffb2c… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-13 (Tue, 13 Oct 2026) Changed paths: M xwiki/skills/xwiki-security-advisory/SKILL.md M xwiki/skills/xwiki-security-advisory/references/affected-products.md Log Message: ----------- [Misc] Security advisory skill: check for an existing advisory, read CVSS 4 vectors, find assembly repackaging * Step 1 checks for an existing advisory (JIRA `Security Advisory` web link and a GHSA referencing the key) before drafting, and Step 6 re-runs it before creating one * Step 1 says what an empty `security` field means (disclosed, or filed public and to be made Confidential first) * Step 3 reads the vector from `.cvss_severities.cvss_v4` (`.cvss` is CVSS 3 only), filters on `state=published` server side and paginates * Step 3 no longer assumes precedents with a CVSS table: it names the two published advisories that comment each metric and falls back on Step 2's guidance * affected-products.md finds repackaging through assembly `<dependencySet>` as well as `<artifactItem>`, with one `git grep` tested on xwiki-platform * affected-products.md covers non-jar packages, distributions that repackage the code, and sibling variants the fix did not touch Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] dec53f: [Misc] CI check skill: fix the gaps the trial and ...
by XWiki Notifications 14 Oct '26

14 Oct '26

Branch: refs/heads/vmassol/ci-check-gaps Home: https://github.com/xwiki/xwiki-dev-llm Commit: dec53f8ed4b2bd477faa55c427bcbfc7d26ba5b2 https://github.com/xwiki/xwiki-dev-llm/commit/dec53f8ed4b2bd477faa55c427bcb… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-13 (Tue, 13 Oct 2026) Changed paths: M xwiki/scripts/jenkins.mjs M xwiki/scripts/jira-flickers.mjs M xwiki/skills/xwiki-ci-check/SKILL.md M xwiki/skills/xwiki-ci-check/references/deep-analysis.md M xwiki/skills/xwiki-ci-check/references/fix-signals.md M xwiki/skills/xwiki-ci-check/references/flicker-issues.md M xwiki/skills/xwiki-ci-check/references/local-run.md M xwiki/skills/xwiki-ci-check/references/paste.md M xwiki/skills/xwiki-ci-check/references/quality-gate.md M xwiki/skills/xwiki-ci-check/tools/ci-check.mjs Log Message: ----------- [Misc] CI check skill: fix the gaps the trial and the routine dry run found * jira-flickers.mjs: closed flicker issues carry `resolution`; ci-check.mjs no longer prints "closed as fixed" or "already fixed" for one closed Cannot Reproduce / Won't Fix (XWIKI-22818, XWIKI-18540), and fix-signals.md says such an issue is no backport candidate. * ci-check.mjs: `flickerGroup` only on the incident that carries the cause, never on a `primary: false` peer, which also stops the paste dropping a group member (HomepageTourIT on 18.4.x); flicker-issues.md loses the paragraph the code now applies. * ci-check.mjs: `summary.stabilise.blockers` lists every blocker, not the first five; `summary.stabilise.configuration` is the worst configuration on the pick's own branch. * ci-check.mjs: the stale-snapshot check counts `-pageobjects/src/main/` as taken from Nexus, so a commit adding a page-object method and the IT calling it is recognised (LikeIT, PanelsAdministrationIT). * jenkins.mjs: drops script and style content when turning a log page into lines, so the Cloudflare beacon no longer lands in `evidence`. * SKILL.md, deep-analysis.md, flicker-issues.md, paste.md: "an incident with a fixState" becomes one a fixState answers whole, matching the code (a `partial` or `candidate` answer leaves the incident live). * SKILL.md: the description no longer says a local run never touches JIRA (§0 and flicker-issues.md ask before filing), the §0 row covers a comment on a closed issue, and §1 says the run's files go to a scratch directory. * fix-signals.md: no JIRA comment naming the line release.md keeps out of public artifacts; quality-gate.md: a routine opens the gate fix PR with pull-request.mjs, not the gh that xwiki-fix-sonarqube-issue names; local-run.md: a local fix PR is asked about before it is prepared. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0