- notifications - lists.xwiki.org

[xwiki/xwiki-dev-llm] b5e78b: [Misc] Tighten the CVSS impact and Attack Requirem...
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/cvss-impact-review-fixes Home: https://github.com/xwiki/xwiki-dev-llm Commit: b5e78b6137a74b6aa34917972da610cd8b27733e https://github.com/xwiki/xwiki-dev-llm/commit/b5e78b6137a74b6aa34917972da61… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/processes/security-policy.md Log Message: ----------- [Misc] Tighten the CVSS impact and Attack Requirements traps * Keep the right cap bullet to the cap; state the 'score by reach' rule once, in the achievable-impact bullet. * Phrase the access-setup check in CVSS terms (setting Attack Requirements to Present) and give it its own bullet, out of the 'no XWiki best practice' one. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] b1cfcb: [Misc] Release 1.18.5
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-dev-llm Commit: b1cfcbc91c35385d19f88afe08d0e2dc60a25853 https://github.com/xwiki/xwiki-dev-llm/commit/b1cfcbc91c35385d19f88afe08d0e… Author: github-actions[bot] <41898282+github-actions[bot](a)users.noreply.github.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M .claude-plugin/marketplace.json M kimi.plugin.json M opencode.jsonc M xwiki/.claude-plugin/plugin.json Log Message: ----------- [Misc] Release 1.18.5 * content edits only (no capability added or removed) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm]
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/tags/v1.18.5 Home: https://github.com/xwiki/xwiki-dev-llm To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm]
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/advisory-link-documentation-field Home: https://github.com/xwiki/xwiki-dev-llm To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[xwiki/xwiki-dev-llm] d7ee5d: [Misc] Link a security issue's advisory as a JIRA ...
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-dev-llm Commit: d7ee5db633a046973acf9e760572157099a242fc https://github.com/xwiki/xwiki-dev-llm/commit/d7ee5db633a046973acf9e7605721… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/servers/jira.md M xwiki/skills/xwiki-security-advisory/SKILL.md Log Message: ----------- [Misc] Link a security issue's advisory as a JIRA web link * okf/servers/jira.md says the GHSA goes in a "Security Advisory" web link, not in Documentation, a comment or a label * xwiki-security-advisory Step 6 points to it Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> Commit: e397b9b8497c26cfdb431e06e5e67e1b23276934 https://github.com/xwiki/xwiki-dev-llm/commit/e397b9b8497c26cfdb431e06e5e67… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/servers/jira.md M xwiki/skills/xwiki-security-advisory/SKILL.md Log Message: ----------- Merge pull request #205 from xwiki/advisory-link-documentation-field [Misc] Link a security issue's advisory as a JIRA web link Compare: https://github.com/xwiki/xwiki-dev-llm/compare/5b3e46a3a070...e397b9b8497c To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[[email protected]][Issue] Updates for SPAPP-36: Compute embargo flag is switched after being manually updated
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[xwiki/xwiki-dev-llm] d7ee5d: [Misc] Link a security issue's advisory as a JIRA ...
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/advisory-link-documentation-field Home: https://github.com/xwiki/xwiki-dev-llm Commit: d7ee5db633a046973acf9e760572157099a242fc https://github.com/xwiki/xwiki-dev-llm/commit/d7ee5db633a046973acf9e7605721… Author: Vincent Massol <vincent(a)massol.net> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki/okf/servers/jira.md M xwiki/skills/xwiki-security-advisory/SKILL.md Log Message: ----------- [Misc] Link a security issue's advisory as a JIRA web link * okf/servers/jira.md says the GHSA goes in a "Security Advisory" web link, not in Documentation, a comment or a label * xwiki-security-advisory Step 6 points to it Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications

1 0

[[email protected]][Issue] Updates for XWIKI-25211: The migration increasing the columns size to 768 skips the columns declared in lowercase on HSQLDB and Oracle
by XWiki Notifications 12 Oct '26

12 Oct '26

1 0

[xwiki/xwiki-platform] 466dd6: XWIKI-25236: The realtime WYSIWYG editor remains s...
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 466dd697c08786f95e7da443bd21011ef0ccf755 https://github.com/xwiki/xwiki-platform/commit/466dd697c08786f95e7da443bd21… Author: Marius Dumitru Florea <marius(a)xwiki.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-node/src/main/node/core/autosave/autosave-api/etc/platform-autosave-api.api.md M xwiki-platform-core/xwiki-platform-node/src/main/node/core/autosave/autosave-api/src/__tests__/saver.test.ts M xwiki-platform-core/xwiki-platform-node/src/main/node/core/autosave/autosave-api/src/saveTransport.ts M xwiki-platform-core/xwiki-platform-node/src/main/node/core/autosave/autosave-api/src/saver.ts M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-test-pageobjects/src/main/java/org/xwiki/realtime/test/po/RealtimeEditToolbar.java M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-webjar/src/main/webjar/saver.js M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-wysiwyg/xwiki-platform-realtime-wysiwyg-test/xwiki-platform-realtime-wysiwyg-test-docker/src/test/it/org/xwiki/realtime/wysiwyg/test/ui/RealtimeWYSIWYGEditorIT.java Log Message: ----------- XWIKI-25236: The realtime WYSIWYG editor remains stuck on "Connecting" after reconnecting when it was the only one editing * Stop waiting for the ChainPad save transport to settle when the WebSocket connection is lost, when the transport is disposed or after a timeout, because the acknowledgement may never come and the editor waits for the auto-saver to stop before joining the new realtime session. * Abort ChainPad when the connection is lost, to stop it from resending the pending saver state over a closed connection. * Always dispose the save transport and target when stopping the auto-saver, even if the final push fails, and document that waiting for a transport to settle must always end. * Add a page object method to simulate a connection loss and use it to verify that the realtime editor reconnects when editing alone. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> Commit: a6747deb542c59a4bd80987212344b500983eeea https://github.com/xwiki/xwiki-platform/commit/a6747deb542c59a4bd8098721234… Author: Marius Dumitru Florea <marius(a)xwiki.com> Date: 2026-10-12 (Mon, 12 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-test-pageobjects/src/main/java/org/xwiki/realtime/test/RealtimeTestUtils.java M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-test-pageobjects/src/main/java/org/xwiki/realtime/test/po/RealtimeEditToolbar.java M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-webjar/src/main/webjar/loader.js M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-webjar/src/main/webjar/saver.js M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-webjar/src/main/webjar/userData.js M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-wiki/xwiki-platform-realtime-wiki-test/xwiki-platform-realtime-wiki-test-docker/src/test/it/org/xwiki/realtime/wiki/test/ui/RealtimeWikiEditorIT.java M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-wiki/xwiki-platform-realtime-wiki-webjar/src/main/webjar/wikiEditor.js M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-wysiwyg/xwiki-platform-realtime-wysiwyg-test/xwiki-platform-realtime-wysiwyg-test-docker/src/test/it/org/xwiki/realtime/wysiwyg/test/ui/RealtimeWYSIWYGEditorIT.java M xwiki-platform-core/xwiki-platform-realtime/xwiki-platform-realtime-wysiwyg/xwiki-platform-realtime-wysiwyg-webjar/src/main/webjar/wysiwygEditor.js Log Message: ----------- XWIKI-25236: The realtime WYSIWYG editor remains stuck on "Connecting" after reconnecting when it was the only one editing * Don't rejoin the user data channel after a reconnect if it doesn't exist anymore (the editor starts a new user data synchronization on the new channel), which was causing the ENOENT error. * Fetch the channels only once when the editor and the user data synchronization ask for them at the same time. * Leave the realtime session and continue editing alone, with an error notification, when we fail to join a realtime channel or to fetch the channels while reconnecting (e.g. when the user session has expired), for both the WYSIWYG and the wiki editor. * Catch the failure to notify the other users through the All Users channel, which can be missing right after a reconnect. * Add test utilities to simulate a connection loss without waiting for the reconnect and to simulate the expiration of the user session, and use them to verify the reconnect of the wiki editor and the fallback of the WYSIWYG editor. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply(a)anthropic.com> Compare: https://github.com/xwiki/xwiki-platform/compare/60ade2006e80...a6747deb542c To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0

[xwiki/xwiki-platform]
by XWiki Notifications 12 Oct '26

12 Oct '26

Branch: refs/heads/XWIKI-25211 Home: https://github.com/xwiki/xwiki-platform To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 0