August 2026 - notifications

[xwiki/xwiki-commons] 7924d0: [Misc] Build only the modules a pull request chang...
by XWiki Notifications 27 Aug '26

27 Aug '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-commons Commit: 7924d0e893d1b25f173f121f17e9e77e2f7c0991 https://github.com/xwiki/xwiki-commons/commit/7924d0e893d1b25f173f121f17e9e… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-27 (Thu, 27 Aug 2026) Changed paths: M .github/workflows/sonar-pr.yml Log Message: ----------- [Misc] Build only the modules a pull request changes in its SonarCloud analysis (#1936) * Select the modules owning the files the pull request changes and pass them to the build and to sonar:sonar with -pl, instead of building and scanning the whole reactor. A pull request analysis reports on its own new code only and every condition of the XWiki quality gate is on a new code metric, so an untouched module can neither contribute an issue nor fail the gate. * Select every ancestor aggregator of a changed module along with it, and always select the root: sonar:sonar rebuilds the project tree out of the reactor and fails on an orphan module or on a reactor with no top level project. * Fall back to the whole reactor when the root pom or an aggregator pom changed. * Add the snapshot profile to the build, the modules left out of the selection now being downloaded rather than built. Co-authored-by: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[xwiki/xwiki-commons]
by XWiki Notifications 27 Aug '26

27 Aug '26

Branch: refs/heads/sonar-pr-incremental Home: https://github.com/xwiki/xwiki-commons To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[xwiki/xwiki-commons] 91b95f: wip: license headers on the probe files
by XWiki Notifications 27 Aug '26

27 Aug '26

Branch: refs/heads/sonar-pr-incremental Home: https://github.com/xwiki/xwiki-commons Commit: 91b95f477730a35bf767a98cc58ed40d9c58d494 https://github.com/xwiki/xwiki-commons/commit/91b95f477730a35bf767a98cc58ed… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-27 (Thu, 27 Aug 2026) Changed paths: M xwiki-commons-core/xwiki-commons-job/xwiki-commons-job-api/src/main/java/org/xwiki/job/SonarPrExperimentClean.java M xwiki-commons-core/xwiki-commons-xml/src/main/java/org/xwiki/xml/SonarPrExperiment.java Log Message: ----------- wip: license headers on the probe files To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[xwiki/xwiki-docker] 475b94: [Misc] Update actions/checkout to v7 and let Renov...
by XWiki Notifications 27 Aug '26

27 Aug '26

Branch: refs/heads/checkout-v7-renovate-template Home: https://github.com/xwiki/xwiki-docker Commit: 475b94456414146f7732dcdb05f4c86129e2f6be https://github.com/xwiki/xwiki-docker/commit/475b94456414146f7732dcdb05f4c8… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-27 (Thu, 27 Aug 2026) Changed paths: M .github/renovate.json5 M .github/workflows/docker-build.yml M .github/workflows/gradlew-check.yml M template-github/docker-build.yml Log Message: ----------- [Misc] Update actions/checkout to v7 and let Renovate update the workflow template * Bump actions/checkout to v7 in template-github/docker-build.yml and in .github/workflows/gradlew-check.yml, and regenerate .github/workflows/docker-build.yml. * Add a Renovate custom manager reading the action versions from template-github/, and a package rule disabling updates to the generated .github/workflows/docker-build.yml, so that action bumps land on the template instead of on the file the Gradlew Check action regenerates. A custom manager is needed because the template is not valid YAML before its tokens are expanded, so the native github-actions manager cannot parse it. Co-Authored-By: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-docker/settings/notifications

1 0

[xwiki/xwiki-commons] 5acecc: wip: temporary probe files for the experiment, to ...
by XWiki Notifications 27 Aug '26

27 Aug '26

Branch: refs/heads/sonar-pr-incremental Home: https://github.com/xwiki/xwiki-commons Commit: 5aceccb99f9775d9e3a7e194b5f175d6ef4a1df4 https://github.com/xwiki/xwiki-commons/commit/5aceccb99f9775d9e3a7e194b5f17… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-27 (Thu, 27 Aug 2026) Changed paths: A .claude/handoffs/junit4-cleanup.md A ASPECTJ-XLINT-HANDOFF.md A CLAUDE.md A plans/001-harden-xml-parsers-xxe.md A plans/README.md A plans/checkstyle-loop-status.md A plans/dev-xwiki-org-logging-parameters.xwiki A plans/dev-xwiki-org-logging-section-rewrite.xwiki A xwiki-commons-core/xwiki-commons-job/xwiki-commons-job-api/src/main/java/org/xwiki/job/SonarPrExperimentClean.java A xwiki-commons-core/xwiki-commons-xml/src/main/java/org/xwiki/xml/SonarPrExperiment.java Log Message: ----------- wip: temporary probe files for the experiment, to be removed To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[xwiki/xwiki-commons] 0e9de6: [Misc] Build only the modules a pull request chang...
by XWiki Notifications 27 Aug '26

27 Aug '26

Branch: refs/heads/sonar-pr-incremental Home: https://github.com/xwiki/xwiki-commons Commit: 0e9de6f62230f5b5b8db76dadf7287f26a94c581 https://github.com/xwiki/xwiki-commons/commit/0e9de6f62230f5b5b8db76dadf728… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-27 (Thu, 27 Aug 2026) Changed paths: M .github/workflows/sonar-pr.yml Log Message: ----------- [Misc] Build only the modules a pull request changes in its SonarCloud analysis * Select the modules owning the files the pull request changes and pass them to the build and to sonar:sonar with -pl, instead of building and scanning the whole reactor. A pull request analysis reports on its own new code only and every condition of the XWiki quality gate is on a new code metric, so an untouched module can neither contribute an issue nor fail the gate. * Select every ancestor aggregator of a changed module along with it, and always select the root: sonar:sonar rebuilds the project tree out of the reactor and fails on an orphan module or on a reactor with no top level project. * Fall back to the whole reactor when the root pom or an aggregator pom changed. * Add the snapshot profile to the build, the modules left out of the selection now being downloaded rather than built. Co-Authored-By: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[xwiki/xwiki-rendering] f79357: [Misc] Upgrade the actions of the SonarCloud pull ...
by XWiki Notifications 27 Aug '26

27 Aug '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-rendering Commit: f79357b5907e924a295d3bc134d62a4507d41e47 https://github.com/xwiki/xwiki-rendering/commit/f79357b5907e924a295d3bc134d… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-27 (Thu, 27 Aug 2026) Changed paths: M .github/workflows/sonar-pr.yml Log Message: ----------- [Misc] Upgrade the actions of the SonarCloud pull request analysis workflow * Upgrade actions/checkout to v7 and actions/setup-java to v6. Both run on Node 24, which removes the two deprecation warnings the workflow raised on its runs: the runner forces the Node 20 actions onto Node 24 anyway, and setup-java v4 no longer receives updates. * The three inputs the workflow uses are unchanged in those majors: fetch-depth on checkout, and java-version, distribution and cache on setup-java. The breaking change of checkout v7 concerns pull_request_target and workflow_run, neither of which this workflow uses. Co-authored-by: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-rendering/settings/notifications

1 0

[xwiki/xwiki-commons] 6efdbd: [Misc] Upgrade the actions of the SonarCloud pull ...
by XWiki Notifications 27 Aug '26

27 Aug '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-commons Commit: 6efdbdafe1e74bcc8c5816751fb85d1575ddf813 https://github.com/xwiki/xwiki-commons/commit/6efdbdafe1e74bcc8c5816751fb85… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-27 (Thu, 27 Aug 2026) Changed paths: M .github/workflows/sonar-pr.yml Log Message: ----------- [Misc] Upgrade the actions of the SonarCloud pull request analysis workflow * Upgrade actions/checkout to v7 and actions/setup-java to v6. Both run on Node 24, which removes the two deprecation warnings the workflow raised on its runs: the runner forces the Node 20 actions onto Node 24 anyway, and setup-java v4 no longer receives updates. * The three inputs the workflow uses are unchanged in those majors: fetch-depth on checkout, and java-version, distribution and cache on setup-java. The breaking change of checkout v7 concerns pull_request_target and workflow_run, neither of which this workflow uses. Co-authored-by: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[xwiki/xwiki-rendering]
by XWiki Notifications 27 Aug '26

27 Aug '26

Branch: refs/heads/misc-sonar-pr-workflow Home: https://github.com/xwiki/xwiki-rendering To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-rendering/settings/notifications

1 0

[xwiki/xwiki-rendering] a2ba65: [Misc] Analyze pull requests with SonarCloud and f...
by XWiki Notifications 27 Aug '26

27 Aug '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-rendering Commit: a2ba65e3be127555443a84ca81d8d7127f07b5a5 https://github.com/xwiki/xwiki-rendering/commit/a2ba65e3be127555443a84ca81d… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-27 (Thu, 27 Aug 2026) Changed paths: A .github/workflows/sonar-pr.yml Log Message: ----------- [Misc] Analyze pull requests with SonarCloud and fail on their quality gate (#416) * Add the SonarCloud pull request analysis workflow of xwiki-commons: it compiles the reactor without the tests and runs a SonarCloud pull request analysis with sonar.qualitygate.wait, so that the job fails when the pull request's quality gate fails. Catches a change introducing SonarQube issues before it is merged, instead of after it has turned the master quality gate red. * Build and analyze with the snapshot profile, which supplies the XWiki repositories the parent pom and the xwiki-commons snapshots are downloaded from, a runner having no settings.xml declaring them. This is the only difference with the xwiki-commons version, whose root pom has no parent. Co-authored-by: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-rendering/settings/notifications

1 0