- notifications - lists.xwiki.org

[[email protected]][Issue] Updates for XCOMMONS-3734: Upgrade to Apache Commons Codec 1.22.1
by XWiki Notifications 03 Aug '26

03 Aug '26

1 0

[[email protected]][Issue] Updates for XCOMMONS-3732: Upgrade to Groovy 5.0.8
by XWiki Notifications 03 Aug '26

03 Aug '26

1 0

[xwiki/xwiki-platform] c85b51: [Misc] Make the optional OSV list fields never nul...
by XWiki Notifications 03 Aug '26

03 Aug '26

Branch: refs/heads/misc-osv-optional-list-fields Home: https://github.com/xwiki/xwiki-platform Commit: c85b51555960a96524df73a52db981b25298f529 https://github.com/xwiki/xwiki-platform/commit/c85b51555960a96524df73a52db9… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-03 (Mon, 03 Aug 2026) Changed paths: M xwiki-platform-core/xwiki-platform-extension/xwiki-platform-extension-security/xwiki-platform-extension-security-index/src/main/java/org/xwiki/extension/security/internal/analyzer/osv/model/response/AffectObject.java M xwiki-platform-core/xwiki-platform-extension/xwiki-platform-extension-security/xwiki-platform-extension-security-index/src/main/java/org/xwiki/extension/security/internal/analyzer/osv/model/response/VulnObject.java M xwiki-platform-core/xwiki-platform-extension/xwiki-platform-extension-security/xwiki-platform-extension-security-index/src/test/java/org/xwiki/extension/security/internal/analyzer/osv/model/response/AffectObjectTest.java M xwiki-platform-core/xwiki-platform-extension/xwiki-platform-extension-security/xwiki-platform-extension-security-index/src/test/java/org/xwiki/extension/security/internal/analyzer/osv/model/response/VulnObjectTest.java Log Message: ----------- [Misc] Make the optional OSV list fields never null instead of null-checking the getters Following Simon's review: returning List.of() from the getter when the field is absent made the returned list immutable in that case and mutable (the live internal list) otherwise, and left the field itself null. The ranges, affected and references fields are now initialized to an empty list and the getters are back to returning the field directly. The setters store null as an empty list too, so that an explicit null in the JSON response (which Jackson routes to the setter, bypassing the field initializer) cannot reintroduce the NPE. VulnObject#getAliases() is aligned to the same pattern, replacing its lazy initialization in the getter. Its observable behaviour is unchanged since it was already never returning null. Co-Authored-By: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-rendering] 2248e2: Update dependency com.gradle:common-custom-user-da...
by XWiki Notifications 03 Aug '26

03 Aug '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-rendering Commit: 2248e21d98daf33a6bce4c571e7376eb0dd81d45 https://github.com/xwiki/xwiki-rendering/commit/2248e21d98daf33a6bce4c571e7… Author: Mend Renovate <bot(a)renovateapp.com> Date: 2026-07-31 (Fri, 31 Jul 2026) Changed paths: M .mvn/extensions.xml Log Message: ----------- Update dependency com.gradle:common-custom-user-data-maven-extension to v2.4.0 Commit: a8d6029da9f0a8c1e8e4ba1bb843d22199720ef6 https://github.com/xwiki/xwiki-rendering/commit/a8d6029da9f0a8c1e8e4ba1bb84… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-08-03 (Mon, 03 Aug 2026) Changed paths: M .mvn/extensions.xml Log Message: ----------- Merge pull request #395 from renovate-bot/renovate/com.gradle-common-custom-user-data-maven-extension-2.x Update dependency com.gradle:common-custom-user-data-maven-extension to v2.4.0 Compare: https://github.com/xwiki/xwiki-rendering/compare/80c4e16bf436...a8d6029da9f0 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-rendering/settings/notifications

1 0

[xwiki/xwiki-platform] 6f6fa9: Update dependency com.gradle:common-custom-user-da...
by XWiki Notifications 03 Aug '26

03 Aug '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 6f6fa90b5d2594623d494763698112833f456b99 https://github.com/xwiki/xwiki-platform/commit/6f6fa90b5d2594623d4947636981… Author: Mend Renovate <bot(a)renovateapp.com> Date: 2026-07-31 (Fri, 31 Jul 2026) Changed paths: M .mvn/extensions.xml Log Message: ----------- Update dependency com.gradle:common-custom-user-data-maven-extension to v2.4.0 Commit: 1d3ef75ec2107f89bd2715aebcda89ccbbd6fe32 https://github.com/xwiki/xwiki-platform/commit/1d3ef75ec2107f89bd2715aebcda… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-08-03 (Mon, 03 Aug 2026) Changed paths: M .mvn/extensions.xml Log Message: ----------- Merge pull request #6051 from renovate-bot/renovate/com.gradle-common-custom-user-data-maven-extension-2.x Update dependency com.gradle:common-custom-user-data-maven-extension to v2.4.0 Compare: https://github.com/xwiki/xwiki-platform/compare/b6eb4ad13498...1d3ef75ec210 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-commons] 877040: Update dependency com.gradle:common-custom-user-da...
by XWiki Notifications 03 Aug '26

03 Aug '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-commons Commit: 877040b0b723d4cc5bb8a09ea75b17304cd6d164 https://github.com/xwiki/xwiki-commons/commit/877040b0b723d4cc5bb8a09ea75b1… Author: Mend Renovate <bot(a)renovateapp.com> Date: 2026-07-31 (Fri, 31 Jul 2026) Changed paths: M .mvn/extensions.xml Log Message: ----------- Update dependency com.gradle:common-custom-user-data-maven-extension to v2.4.0 Commit: 4e11d1b6b7c1e24b62637328f4fdf1cdb6c12165 https://github.com/xwiki/xwiki-commons/commit/4e11d1b6b7c1e24b62637328f4fdf… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2026-08-03 (Mon, 03 Aug 2026) Changed paths: M .mvn/extensions.xml Log Message: ----------- Merge pull request #1864 from renovate-bot/renovate/com.gradle-common-custom-user-data-maven-extension-2.x Update dependency com.gradle:common-custom-user-data-maven-extension to v2.4.0 Compare: https://github.com/xwiki/xwiki-commons/compare/a4d51f791dce...4e11d1b6b7c1 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 0

[xwiki/xwiki-dev-llm] a97185: [Misc] Record how to query ci.xwiki.org through th...
by XWiki Notifications 03 Aug '26

03 Aug '26

Branch: refs/heads/record-jenkins-rest-api Home: https://github.com/xwiki/xwiki-dev-llm Commit: a97185e825cd0e2d80952f4fd03bf6dd92ae0ba1 https://github.com/xwiki/xwiki-dev-llm/commit/a97185e825cd0e2d80952f4fd03bf… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-03 (Mon, 03 Aug 2026) Changed paths: M .claude-plugin/marketplace.json M kimi.plugin.json M opencode.jsonc M xwiki/.claude-plugin/plugin.json M xwiki/instructions/xwiki-org.md M xwiki/okf/index.md M xwiki/okf/servers/index.md A xwiki/okf/servers/jenkins.md Log Message: ----------- [Misc] Record how to query ci.xwiki.org through the Jenkins REST API The server map only said "WebFetch a job/build URL", which is misleading: ci.xwiki.org sits behind Cloudflare and answers 403 to anything sending a browser User-Agent, while plain curl gets 200. It also has a full anonymous REST API that removes any need to scrape the UI. Add okf/servers/jenkins.md with the endpoints that answer the questions that actually come up (failing tests with messages, changesets, the exact commit built, archived screenshots, consoleText), and the traps in reading a result: FAILURE means it broke outside the tests while UNSTABLE means tests failed, a test case's age/failedSince only counts builds that produced test results so it is not a reliable first-failure, changeSets can be empty, and a UI test that breaks with no source change is usually the parent pom moving ${platform.version}. Correct the ci.xwiki.org row and the build-status verify recipe in okf/servers/index.md accordingly, and register the topic in okf/index.md and the injected mirror in instructions/xwiki-org.md. Co-Authored-By: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] dbef10: [Misc] Record that a log argument is an object, no...
by XWiki Notifications 03 Aug '26

03 Aug '26

Branch: refs/heads/misc-logging-arguments Home: https://github.com/xwiki/xwiki-dev-llm Commit: dbef10b59a6277ab243867b802d5379c0792b30c https://github.com/xwiki/xwiki-dev-llm/commit/dbef10b59a6277ab243867b802d53… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-03 (Mon, 03 Aug 2026) Changed paths: M xwiki/instructions/xwiki-org.md A xwiki/okf/conventions/logging.md M xwiki/okf/index.md Log Message: ----------- [Misc] Record that a log argument is an object, not text A logging pass over commons and platform removed explicit toString() calls on log arguments as "redundant, since SLF4J calls toString() itself". That reasoning is wrong for XWiki, because SLF4J is not the only consumer of a log event: AbstractJobStatus captures every warn/error on a job thread, the LogEvent keeps the raw Object[], SafeMessageConverter XStream-serializes each argument as a full object graph whenever XStreamUtils.isSerializable() accepts it (which defaults to true), SafeArrayConverter turns any read failure into null, and consumers read arguments by type -- the log displayers render references as links and Importer casts getArgumentArray()[0] to EntityReference. So both directions are wrong in different cases, which is what the new conventions/logging.md records: the decision table for when to keep an argument typed (references, extension ids, enums, components, collections) and when to force an eager String (arbitrary sources, live resources such as a Hibernate Session, mutable builders, requests, an object whose toString() is deliberately narrower than its fields, a Class from an extension jar), plus the two wrong justifications for removing a toString() and how java:S2629 actually behaves -- String-typed arguments only, no-arg getters and catch blocks exempt -- so that a suppression is only added where one is really needed. The always-on instructions get the short form, since the damaging case is an agent "cleaning up" a toString() without having loaded the OKF file. Co-authored-by: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-platform]
by XWiki Notifications 03 Aug '26

03 Aug '26

Branch: refs/heads/misc-log-argument-strings Home: https://github.com/xwiki/xwiki-platform To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform] b6eb4a: [Misc] Keep the eager String for log arguments tha...
by XWiki Notifications 03 Aug '26

03 Aug '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: b6eb4ad13498ccc9ee9e07ab396ac3203538c665 https://github.com/xwiki/xwiki-platform/commit/b6eb4ad13498ccc9ee9e07ab396a… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-08-03 (Mon, 03 Aug 2026) Changed paths: M xwiki-platform-core/xwiki-platform-attachment/xwiki-platform-attachment-api/src/main/java/org/xwiki/attachment/internal/listener/MovedAttachmentListener.java M xwiki-platform-core/xwiki-platform-component/xwiki-platform-component-wiki/src/main/java/org/xwiki/component/wiki/internal/DefaultWikiComponentInvocationHandler.java M xwiki-platform-core/xwiki-platform-mail/xwiki-platform-mail-send/xwiki-platform-mail-send-storage/src/main/java/org/xwiki/mail/internal/DatabaseMailStatusStore.java M xwiki-platform-core/xwiki-platform-mailsender/src/main/java/com/xpn/xwiki/plugin/mailsender/MailSenderPlugin.java M xwiki-platform-core/xwiki-platform-mailsender/src/main/java/com/xpn/xwiki/plugin/mailsender/MailSenderPluginApi.java M xwiki-platform-core/xwiki-platform-observation/xwiki-platform-observation-remote/src/main/java/org/xwiki/observation/remote/internal/jgroups/JGroupsNetworkAdapter.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/store/XWikiHibernateBaseStore.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/store/migration/hibernate/R40000XWIKI6990DataMigration.java M xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-solr/xwiki-platform-search-solr-api/src/main/java/org/xwiki/search/solr/internal/SolrIndexAvailableLocalesListener.java M xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-solr/xwiki-platform-search-solr-api/src/main/java/org/xwiki/search/solr/internal/SolrIndexEventListener.java M xwiki-platform-core/xwiki-platform-wiki/xwiki-platform-wiki-workspaces-migrator/src/main/java/org/xwiki/wiki/workspacesmigrator/internal/WorkspacesMigration.java M xwiki-platform-core/xwiki-platform-wiki/xwiki-platform-wiki-workspaces-migrator/src/test/java/org/xwiki/wiki/workspacesmigrator/internal/WorkspaceMigrationTest.java Log Message: ----------- [Misc] Keep the eager String for log arguments that must not be serialized (#6085) Same fix as xwiki-commons#1872, for the sites the logging best practices pass (#6055 ... #6079) changed here. Log arguments are kept as objects in the captured LogEvent and XStream-serialized into the job log (SafeMessageConverter in xwiki-commons), so dropping an explicit toString() changes what lands in the job log file: the whole object graph is written out, and it is read back as null once its class can no longer be resolved. * XWikiHibernateBaseStore: a live Hibernate Session, which implements Serializable, so it would be walked field by field. * MailSenderPluginApi: a MailConfiguration, whose toString() masks the SMTP password that the object itself carries in clear text. * MailSenderPlugin x3 and MailSenderPluginApi: a Mail, which holds the body and the attachments, none of which its toString() prints. * MovedAttachmentListener: a MoveAttachmentRequest. A Request is Serializable, so the move job would end up with a copy of its own request in its own log. * SolrIndexEventListener and SolrIndexAvailableLocalesListener: an arbitrary source object, as in DefaultJobProgress. * JGroupsNetworkAdapter x2: a RemoteEventData, Serializable by design since it is the replicated payload. * DatabaseMailStatusStore, WorkspacesMigration: a StringBuilder, which would be written out as its internal char array. * R40000XWIKI6990DataMigration: a StringBuilder holding the whole Liquibase XML of the migration. The String it is converted to is now reused for the return value instead of being built twice. * DefaultWikiComponentInvocationHandler: getTypeName() on the role Type, which is backed by a Class that cannot always be resolved. The document reference stays an object, since the log displayers render it as a link. Left alone on purpose: EntityReference arguments (the case the displayers are for), enums, a File, and a QueryFilter, which is a component and is therefore already stringified by the converter. Each site carries a comment explaining why the String is built eagerly, so that the next logging pass does not remove it again. java:S2629 only looks at String-typed arguments, exempts no-arg getters and skips catch blocks, so only four of these sites need a suppression. Co-authored-by: Claude Opus 5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0