September 2026 - notifications

[[email protected]][Issue] Updates for OIDC-319: Add support for sending the RP-initiated logout request as POST instead of GET
by XWiki Notifications 11 Sep '26

11 Sep '26

1 0

[xwiki-contrib/oidc] 684779: OIDC-319: Add support for sending the RP-initiated...
by XWiki Notifications 11 Sep '26

11 Sep '26

Branch: refs/heads/master Home: https://github.com/xwiki-contrib/oidc Commit: 6847799dbf95b07dee559ddb07bfaf2430f92253 https://github.com/xwiki-contrib/oidc/commit/6847799dbf95b07dee559ddb07bfaf… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-09-11 (Fri, 11 Sep 2026) Changed paths: M oidc-authenticator-configuration/src/main/java/org/xwiki/contrib/oidc/auth/internal/store/OIDCClientConfigurationClassDocumentInitializer.java M oidc-authenticator/pom.xml M oidc-authenticator/src/main/java/org/xwiki/contrib/oidc/auth/internal/OIDCClientConfiguration.java M oidc-authenticator/src/main/java/org/xwiki/contrib/oidc/auth/internal/OIDCUserManager.java M oidc-authenticator/src/main/resources/ApplicationResources.properties A oidc-authenticator/src/main/resources/templates/oidc/client/logout.vm M oidc-authenticator/src/test/java/org/xwiki/contrib/oidc/auth/internal/OIDCClientConfigurationTest.java M oidc-authenticator/src/test/java/org/xwiki/contrib/oidc/auth/internal/OIDCUserManagerTest.java Log Message: ----------- OIDC-319: Add support for sending the RP-initiated logout request as POST instead of GET * add a logout endpoint method configuration to choose between GET and POST * when POST is configured, send the logout request through a form submitting itself, since only the browser can produce that request * indicate the provider issuer in the logout page message when a provider is configured * expose the logout endpoint method as a GET/POST list in the client configuration class Co-Authored-By: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/oidc/settings/notifications

1 0

[xwiki/xwiki-platform] 83ebdc: [Misc] Replace the non-core UI interactions of Not...
by XWiki Notifications 11 Sep '26

11 Sep '26

Branch: refs/heads/notifications-it-rest-fixture Home: https://github.com/xwiki/xwiki-platform Commit: 83ebdca02c86bcc049ad8754f3f1dcfc655f1316 https://github.com/xwiki/xwiki-platform/commit/83ebdca02c86bcc049ad8754f3f1… Author: Manuel Leduc <manuel.leduc(a)xwiki.com> Date: 2026-09-11 (Fri, 11 Sep 2026) Changed paths: M xwiki-platform-core/xwiki-platform-notifications/xwiki-platform-notifications-test/xwiki-platform-notifications-test-docker/src/test/it/org/xwiki/platform/notifications/test/ui/NotificationsIT.java Log Message: ----------- [Misc] Replace the non-core UI interactions of NotificationsIT by REST calls * Create the two users of the fixture over REST instead of through the browser, and delete them over REST, so that the browser never has to log in as superadmin. * Produce the events the tests observe (page creations, updates, deletions and the comment) over REST as their author, so that only the user whose notification tray is asserted logs in: 13 browser logins and about 120 page loads are removed. * Add the NotificationDisplayerClass xobject over REST instead of going through the object editor. * Name the expected number of update events of compositeNotifications PAGE_UPDATE_COUNT, since the number of REST saves is what produces it. To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for XINFRA-492: Update and Convert Documentation for MySQL Installation
by XWiki Notifications 11 Sep '26

11 Sep '26

1 0

[[email protected]][Issue] Updates for XCOMMONS-2092: Possible race condition in ReadWriteSemaphore
by XWiki Notifications 11 Sep '26

11 Sep '26

1 0

[xwiki/xwiki-platform] ea04dc: XWIKI-18921: Panel Navigation: duplicated IDs
by XWiki Notifications 11 Sep '26

11 Sep '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: ea04dc81e924d39f3f3369ebd7f76f44219adc17 https://github.com/xwiki/xwiki-platform/commit/ea04dc81e924d39f3f3369ebd7f7… Author: Michael Hamann <michael.hamann(a)xwiki.com> Date: 2026-09-11 (Fri, 11 Sep 2026) Changed paths: M xwiki-platform-core/xwiki-platform-panels/xwiki-platform-panels-test/xwiki-platform-panels-test-docker/src/test/it/org/xwiki/panels/test/ui/docker/NavigationPanelIT.java Log Message: ----------- XWIKI-18921: Panel Navigation: duplicated IDs * Delete the page created by NavigationPanelIT#noDuplicateAnchorIds again, it introduced a new top level page that broke NavigationPanelAdministrationIT#navigationPanelAdministration, which asserts the exact list of top level pages in the shared AllIT instance. * Delete it through REST so that the browser doesn't navigate away, and in a finally block so that a failing assertion doesn't leak the page either. Co-Authored-By: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-24864: Active Installs searchInstalls() returns at most 10 pings while its javadoc promises all of them
by XWiki Notifications 11 Sep '26

11 Sep '26

1 0

[xwiki/xwiki-platform] 5d1198: [Misc] Replace the deprecated PackageAPI import re...
by XWiki Notifications 11 Sep '26

11 Sep '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 5d11983f69b05f891c57d966b746a37932c7bd7d https://github.com/xwiki/xwiki-platform/commit/5d11983f69b05f891c57d966b746… Author: LucasC <lucas.charpentier(a)xwiki.com> Date: 2026-09-11 (Fri, 11 Sep 2026) Changed paths: M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-templates/src/main/resources/templates/imported.vm Log Message: ----------- [Misc] Replace the deprecated PackageAPI import report calls in imported.vm (#6359) * Read the import report from the context * Added a macro reading a reported document list from the context * Added a macro displaying the number of reported documents * Passed the context key to the file list macro * Prefixed the internal macros with an underscore To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] 75fab2: XWIKI-24864: Active Installs searchInstalls() retu...
by XWiki Notifications 11 Sep '26

11 Sep '26

Branch: refs/heads/XWIKI-24864 Home: https://github.com/xwiki/xwiki-platform Commit: 75fab2d9677dcd000874f09ba65876f8cc0d4df3 https://github.com/xwiki/xwiki-platform/commit/75fab2d9677dcd000874f09ba658… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-09-11 (Fri, 11 Sep 2026) Changed paths: M xwiki-platform-core/xwiki-platform-activeinstalls2/xwiki-platform-activeinstalls2-api/src/main/java/org/xwiki/activeinstalls2/DataManager.java M xwiki-platform-core/xwiki-platform-activeinstalls2/xwiki-platform-activeinstalls2-api/src/main/java/org/xwiki/activeinstalls2/internal/DefaultDataManager.java M xwiki-platform-core/xwiki-platform-activeinstalls2/xwiki-platform-activeinstalls2-api/src/main/java/org/xwiki/activeinstalls2/script/ActiveInstallsScriptService.java Log Message: ----------- XWIKI-24864: Active Installs searchInstalls() returns at most 10 pings while its javadoc promises all of them * Document the bound instead of promising every matching ping: the javadoc of DataManager, DefaultDataManager and ActiveInstallsScriptService now states that only some of the matching pings come back, that which ones is undefined since they are not sorted, and why the bound exists * Point callers asking "how many" at countInstalls/countDistinctInstalls, which aggregate server-side rather than retrieving pings * Move the "empty json matches all the data" sentence from @return to @param, which is what it describes Co-Authored-By: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-dev-llm] fb8a5c: [Misc] List the legacy package too in a security a...
by XWiki Notifications 11 Sep '26

11 Sep '26

Branch: refs/heads/advisory-affected-packages-include-legacy Home: https://github.com/xwiki/xwiki-dev-llm Commit: fb8a5c5f34902b20de7c53e0eea27945fcd6f5e0 https://github.com/xwiki/xwiki-dev-llm/commit/fb8a5c5f34902b20de7c53e0eea27… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2026-09-11 (Fri, 11 Sep 2026) Changed paths: M xwiki/skills/xwiki-security-advisory/SKILL.md Log Message: ----------- [Misc] List the legacy package too in a security advisory's affected products * A vulnerable module's backward-compatibility counterpart AspectJ-weaves the wrapped module's classes into itself, so it ships its own copy of the vulnerable bytecode: an instance running the legacy jar is vulnerable, and a scanner matching only the main artifact reports it as clean. * Give the naming explicitly ("legacy-" is an infix, xwiki-platform-legacy-oldcore), since the "-legacy module" wording used elsewhere leads to guessing a suffix and a package name GitHub cannot match. * Add the weaveDependencies check and the drop condition, so the rule does not over-list a legacy module that only re-exports unrelated deprecated APIs. Co-Authored-By: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0