September 2026 - notifications

[[email protected]][Issue] Updates for RN-88: Two authors adding a change to the same release note at the same time are given the same entry page, and the second save overwrites the first
by XWiki Notifications 01 Sep '26

01 Sep '26

1 0

[xwiki/xwiki-dev-llm]
by XWiki Notifications 01 Sep '26

01 Sep '26

Branch: refs/tags/v1.5.2 Home: https://github.com/xwiki/xwiki-dev-llm To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] 754e4e: [Misc] Release 1.5.2
by XWiki Notifications 01 Sep '26

01 Sep '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-dev-llm Commit: 754e4e9c0fed9be30e7c435db91a8517d5a1b835 https://github.com/xwiki/xwiki-dev-llm/commit/754e4e9c0fed9be30e7c435db91a8… Author: github-actions[bot] <41898282+github-actions[bot](a)users.noreply.github.com> Date: 2026-09-01 (Tue, 01 Sep 2026) Changed paths: M .claude-plugin/marketplace.json M kimi.plugin.json M opencode.jsonc M xwiki/.claude-plugin/plugin.json Log Message: ----------- [Misc] Release 1.5.2 * content edits only (no capability added or removed) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm]
by XWiki Notifications 01 Sep '26

01 Sep '26

Branch: refs/heads/security-structural-interpolation Home: https://github.com/xwiki/xwiki-dev-llm To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] a3fe60: [Misc] Add OKF security rule on structural interpo...
by XWiki Notifications 01 Sep '26

01 Sep '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-dev-llm Commit: a3fe6061421d28ba583d707bf3a335966a5532ec https://github.com/xwiki/xwiki-dev-llm/commit/a3fe6061421d28ba583d707bf3a33… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-09-01 (Tue, 01 Sep 2026) Changed paths: M xwiki/okf/conventions/security.md M xwiki/okf/index.md Log Message: ----------- [Misc] Add OKF security rule on structural interpolation into queries and references * okf/conventions/security.md: new "Structural interpolation" section. bindValue protects only a query's values and a reference's value; the class/space/page identifiers in an XWQL/HQL from, doc.object(...), where doc.space, order by, and the reference of include/display (and getObject/newObject/getDocument) have no escaper and must be literal constants, never interpolated from a variable. Covers the allow-list / matches() escape hatch, and the $doc (caller-chosen rendered page) vs $xcontext.macro.doc / $wikimacro.doc (the macro's own, trusted defining page) distinction. * okf/index.md: extend the security topic line to name the new rule. Co-Authored-By: Claude Opus 4.8 <noreply(a)anthropic.com> Commit: 86a0131c1b1c66a87d7615771eb4cc27e91045b9 https://github.com/xwiki/xwiki-dev-llm/commit/86a0131c1b1c66a87d7615771eb4c… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-09-01 (Tue, 01 Sep 2026) Changed paths: M xwiki/okf/conventions/security.md M xwiki/okf/index.md Log Message: ----------- [Misc] Add OKF security rule on structural interpolation into queries and references Compare: https://github.com/xwiki/xwiki-dev-llm/compare/8b7f693ae14f...86a0131c1b1c To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] a3fe60: [Misc] Add OKF security rule on structural interpo...
by XWiki Notifications 01 Sep '26

01 Sep '26

Branch: refs/heads/security-structural-interpolation Home: https://github.com/xwiki/xwiki-dev-llm Commit: a3fe6061421d28ba583d707bf3a335966a5532ec https://github.com/xwiki/xwiki-dev-llm/commit/a3fe6061421d28ba583d707bf3a33… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-09-01 (Tue, 01 Sep 2026) Changed paths: M xwiki/okf/conventions/security.md M xwiki/okf/index.md Log Message: ----------- [Misc] Add OKF security rule on structural interpolation into queries and references * okf/conventions/security.md: new "Structural interpolation" section. bindValue protects only a query's values and a reference's value; the class/space/page identifiers in an XWQL/HQL from, doc.object(...), where doc.space, order by, and the reference of include/display (and getObject/newObject/getDocument) have no escaper and must be literal constants, never interpolated from a variable. Covers the allow-list / matches() escape hatch, and the $doc (caller-chosen rendered page) vs $xcontext.macro.doc / $wikimacro.doc (the macro's own, trusted defining page) distinction. * okf/index.md: extend the security topic line to name the new rule. Co-Authored-By: Claude Opus 4.8 <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki-contrib/application-releasenotes] 6b9d68: RN-93: The text inputs of the release note, change...
by XWiki Notifications 01 Sep '26

01 Sep '26

Branch: refs/heads/RN-93 Home: https://github.com/xwiki-contrib/application-releasenotes Commit: 6b9d68dfe14d3dbbe2946ec1442a9bd7bec752aa https://github.com/xwiki-contrib/application-releasenotes/commit/6b9d68dfe1… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-09-01 (Tue, 01 Sep 2026) Changed paths: M application-releasenotes-ui/src/main/resources/ReleaseNotes/Code/Change/ChangeSheet.xml M application-releasenotes-ui/src/main/resources/ReleaseNotes/Code/Change/GetChangesMacro.xml M application-releasenotes-ui/src/main/resources/ReleaseNotes/Code/ContributorsSheet.xml M application-releasenotes-ui/src/main/resources/ReleaseNotes/Code/EntryVelocityMacros.xml M application-releasenotes-ui/src/main/resources/ReleaseNotes/Code/HomeCustomReport.xml M application-releasenotes-ui/src/main/resources/ReleaseNotes/Code/HomeReleaseChanges.xml M application-releasenotes-ui/src/main/resources/ReleaseNotes/Code/HomeReleaseNotes.xml M application-releasenotes-ui/src/main/resources/ReleaseNotes/Code/Translations.xml A application-releasenotes-ui/src/test/java/org/xwiki/releasenotes/ChangeSheetPageTest.java A application-releasenotes-ui/src/test/java/org/xwiki/releasenotes/ContributorsSheetPageTest.java M application-releasenotes-ui/src/test/java/org/xwiki/releasenotes/HomeCustomReportPageTest.java A application-releasenotes-ui/src/test/java/org/xwiki/releasenotes/HomeReleaseChangesPageTest.java A application-releasenotes-ui/src/test/java/org/xwiki/releasenotes/HomeReleaseNotesPageTest.java Log Message: ----------- RN-93: The text inputs of the release note, change and report forms have no accessible name * Bind a label to every text input of the release note creation form, the change creation form and the custom report form, and to the report layout selector, with the label text coming from the translation bundle. * Move the prompt of those inputs from their value attribute to a placeholder attribute, so that an untouched field submits nothing instead of submitting its own prompt. * Mark the two version fields required, neither a release note nor a change being creatable without one. * Hold the field label of the change and contributors sheets in a label element bound to the input XWiki generates, through a new #displayEntryField macro shared by both sheets. * Add page tests covering the labelling of the three forms and of the two sheets. Co-Authored-By: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/application-releasenotes/settings/notifica…

1 0

[[email protected]][Issue] Updates for XWIKI-24773: Upgrade to @mantine/core 9.6.0
by XWiki Notifications 01 Sep '26

01 Sep '26

1 0

[[email protected]][Issue] Updates for XWIKI-24479: Upgrade mantine to 9.3.1
by XWiki Notifications 01 Sep '26

01 Sep '26

1 0

[[email protected]][Issue] Updates for XWIKI-24775: Upgrade to vue 3.5.42
by XWiki Notifications 01 Sep '26

01 Sep '26

1 0