- notifications - lists.xwiki.org

[[email protected]][Issue] Updates for XWIKI-23462: Reflected Cross-Site Scripting (XSS) in Error Messages
by XWiki Notifications 22 Jan '26

22 Jan '26

1 0

[xwiki/xwiki-platform] d75289: Bump lodash-es from 4.17.22 to 4.17.23
by XWiki Notifications 22 Jan '26

22 Jan '26

Branch: refs/heads/dependabot/npm_and_yarn/lodash-es-4.17.23 Home: https://github.com/xwiki/xwiki-platform Commit: d75289164d83f55cebe5c2ceee57ae27e918022c https://github.com/xwiki/xwiki-platform/commit/d75289164d83f55cebe5c2ceee57… Author: dependabot[bot] <49699333+dependabot[bot](a)users.noreply.github.com> Date: 2026-01-22 (Thu, 22 Jan 2026) Changed paths: M pnpm-lock.yaml M pnpm-workspace.yaml Log Message: ----------- Bump lodash-es from 4.17.22 to 4.17.23 Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.22 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/commits/4.17.23) --- updated-dependencies: - dependency-name: lodash-es dependency-version: 4.17.23 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support(a)github.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] 883ac4: Bump org.apache.solr:solr-core from 9.4.1 to 9.10.1
by XWiki Notifications 21 Jan '26

21 Jan '26

Branch: refs/heads/dependabot/maven/org.apache.solr-solr-core-9.10.1 Home: https://github.com/xwiki/xwiki-platform Commit: 883ac4f5777e4088974c8e936dc31edfd97af588 https://github.com/xwiki/xwiki-platform/commit/883ac4f5777e4088974c8e936dc3… Author: dependabot[bot] <49699333+dependabot[bot](a)users.noreply.github.com> Date: 2026-01-21 (Wed, 21 Jan 2026) Changed paths: M pom.xml Log Message: ----------- Bump org.apache.solr:solr-core from 9.4.1 to 9.10.1 Bumps org.apache.solr:solr-core from 9.4.1 to 9.10.1. --- updated-dependencies: - dependency-name: org.apache.solr:solr-core dependency-version: 9.10.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support(a)github.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] 65fcde: Bump qs and body-parser
by XWiki Notifications 21 Jan '26

21 Jan '26

Branch: refs/heads/dependabot/npm_and_yarn/xwiki-platform-core/xwiki-platform-bootstrap/src/main/multi-a0817b5bb4 Home: https://github.com/xwiki/xwiki-platform Commit: 65fcde9bbf2b6b7dd9002e5d4a772f51eec66519 https://github.com/xwiki/xwiki-platform/commit/65fcde9bbf2b6b7dd9002e5d4a77… Author: dependabot[bot] <49699333+dependabot[bot](a)users.noreply.github.com> Date: 2026-01-21 (Wed, 21 Jan 2026) Changed paths: M xwiki-platform-core/xwiki-platform-bootstrap/src/main/package-lock.json Log Message: ----------- Bump qs and body-parser Bumps [qs](https://github.com/ljharb/qs) and [body-parser](https://github.com/expressjs/body-parser). These dependencies needed to be updated together. Updates `qs` from 6.13.0 to 6.14.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](https://github.com/ljharb/qs/compare/v6.13.0...v6.14.1) Updates `body-parser` from 1.20.3 to 1.20.4 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](https://github.com/expressjs/body-parser/compare/1.20.3...1.20.4) --- updated-dependencies: - dependency-name: qs dependency-version: 6.14.1 dependency-type: indirect - dependency-name: body-parser dependency-version: 1.20.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support(a)github.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[[email protected]][Issue] Updates for CLI-20: Macro are not correctly detected
by XWiki Notifications 21 Jan '26

21 Jan '26

1 0

[[email protected]][Issue] Updates for CLI-21: Improve support for velocity macros
by XWiki Notifications 21 Jan '26

21 Jan '26

1 0

[xwiki-contrib/cli] 872c7b: CLI-20: Macro are not correctly detected
by XWiki Notifications 21 Jan '26

21 Jan '26

Branch: refs/heads/master Home: https://github.com/xwiki-contrib/cli Commit: 872c7bc3ac14728eae9888ff6a666e65631f54e0 https://github.com/xwiki-contrib/cli/commit/872c7bc3ac14728eae9888ff6a666e6… Author: Josué Tille <josue.tille(a)xwiki.com> Date: 2026-01-21 (Wed, 21 Jan 2026) Changed paths: M src/main/java/org/xwiki/contrib/cli/Editing.java M src/main/java/org/xwiki/contrib/cli/Utils.java M src/main/resources/generate_dependencies.xwiki Log Message: ----------- CLI-20: Macro are not correctly detected Commit: 819050f5004daea68b6aee76fd816f59a63fd0ac https://github.com/xwiki-contrib/cli/commit/819050f5004daea68b6aee76fd816f5… Author: Josué Tille <josue.tille(a)xwiki.com> Date: 2026-01-21 (Wed, 21 Jan 2026) Changed paths: M src/main/java/org/xwiki/contrib/cli/XWikiDirSync.java Log Message: ----------- [misc] Fix checkstyle Commit: 3b4537f09dad485e74e145b19faf08eff314a8b8 https://github.com/xwiki-contrib/cli/commit/3b4537f09dad485e74e145b19faf08e… Author: Josué Tille <josue.tille(a)xwiki.com> Date: 2026-01-21 (Wed, 21 Jan 2026) Changed paths: M src/main/java/org/xwiki/contrib/cli/Utils.java M src/main/java/org/xwiki/contrib/cli/XWikiDirSync.java A src/main/java/org/xwiki/contrib/cli/scriptservicesbinding/BindingClass.java A src/main/java/org/xwiki/contrib/cli/scriptservicesbinding/BindingClassMap.java A src/main/java/org/xwiki/contrib/cli/scriptservicesbinding/ScriptContextGenerator.java A src/main/resources/ensure_scripting_doc_api_installed.xwiki R src/main/resources/generate_class.xwiki A src/main/resources/get_binding.xwiki A src/main/resources/get_macros_vm_content.xwiki Log Message: ----------- CLI-21: Improve support for velocity macros Commit: bfeffa35efdec16fc515daa07fc56e46c8917c3e https://github.com/xwiki-contrib/cli/commit/bfeffa35efdec16fc515daa07fc56e4… Author: Josué Tille <josue.tille(a)xwiki.com> Date: 2026-01-21 (Wed, 21 Jan 2026) Changed paths: M src/main/java/org/xwiki/contrib/cli/Editing.java M src/main/java/org/xwiki/contrib/cli/Utils.java M src/main/java/org/xwiki/contrib/cli/scriptservicesbinding/BindingClass.java M src/main/java/org/xwiki/contrib/cli/scriptservicesbinding/BindingClassMap.java M src/main/java/org/xwiki/contrib/cli/scriptservicesbinding/ScriptContextGenerator.java Log Message: ----------- [misc] Fix checkstyle Compare: https://github.com/xwiki-contrib/cli/compare/e7374ceb2bd4...bfeffa35efde To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/cli/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-21246: CSS minification removes spaces around operator in calc expressions
by XWiki Notifications 21 Jan '26

21 Jan '26

1 0

[[email protected]][Issue] Updates for XWIKI-23933: Upgrade to Frontend Maven Plugin 2.0.0
by XWiki Notifications 21 Jan '26

21 Jan '26

1 0

[xwiki-contrib/cristal] c81a53: [Misc] Update dependency eslint-plugin-prettier to...
by XWiki Notifications 21 Jan '26

21 Jan '26

Branch: refs/heads/main Home: https://github.com/xwiki-contrib/cristal Commit: c81a53789a37c9f3b21cfbf7007017dded5de044 https://github.com/xwiki-contrib/cristal/commit/c81a53789a37c9f3b21cfbf7007… Author: Manuel Leduc <manuel.leduc(a)xwiki.com> Date: 2026-01-21 (Wed, 21 Jan 2026) Changed paths: M pnpm-lock.yaml M pnpm-workspace.yaml Log Message: ----------- [Misc] Update dependency eslint-plugin-prettier to v5.5.5 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/cristal/settings/notifications

1 0