Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-dev-llm Commit: ca8ef45326698280adc755ede180e490a4d81bdf https://github.com/xwiki/xwiki-dev-llm/commit/ca8ef45326698280adc755ede180e4... Author: Michael Hamann <[email protected]> Date: 2026-10-07 (Wed, 07 Oct 2026) Changed paths: M xwiki/okf/conventions/commit-messages.md M xwiki/skills/xwiki-security-advisory/SKILL.md Log Message: ----------- [Misc] Sharpen the advisory Impact, CWE and JIRA sync guidance * xwiki-security-advisory: in Impact, keep the attacker's requirements exact (each right needed, and which ones standard rights give everyone) but the mechanism general; one line per paragraph * xwiki-security-advisory: while Fix Version/s is empty, take each branch's next release from its root pom * xwiki-security-advisory: check the CWE's MITRE "Usage" field and pick an allowed Base-level entry (CWE-269 is discouraged) * xwiki-security-advisory: keep the JIRA Priority in sync with the CVSS score * commit-messages.md: the neutral summary of a security fix's first commit is reused by its follow-ups and backports Co-Authored-By: Claude Opus 5.5 <[email protected]> Commit: fb393b3990c512efc202e3c57d60b43de5d0969a https://github.com/xwiki/xwiki-dev-llm/commit/fb393b3990c512efc202e3c57d60b4... Author: Vincent Massol <[email protected]> Date: 2026-10-08 (Thu, 08 Oct 2026) Changed paths: M .claude-plugin/marketplace.json M CLAUDE.md M README.md M docs/setup.md M kimi.plugin.json M opencode.jsonc M xwiki/.claude-plugin/plugin.json M xwiki/.mcp.json M xwiki/instructions/xwiki-org.md M xwiki/okf/conventions/backward-compatibility.md M xwiki/okf/conventions/code-style.md M xwiki/okf/conventions/documentation.md M xwiki/okf/conventions/versioning.md M xwiki/okf/index.md M xwiki/okf/processes/release-notes.md M xwiki/okf/processes/release.md M xwiki/okf/servers/index.md M xwiki/okf/servers/jira.md M xwiki/okf/sonarqube/verification.md M xwiki/okf/testing/strategy.md R xwiki/scripts/start-sonarqube-mcp.mjs M xwiki/skills/xwiki-backport-testneeded/SKILL.md M xwiki/skills/xwiki-backport/SKILL.md A xwiki/skills/xwiki-capture-ui-change/SKILL.md A xwiki/skills/xwiki-capture-ui-change/references/gotchas.md A xwiki/skills/xwiki-capture-ui-change/sync-static-resource.sh M xwiki/skills/xwiki-ci-check/SKILL.md M xwiki/skills/xwiki-ci-check/tools/ci-check.mjs M xwiki/skills/xwiki-contrib-release-blog-post/SKILL.md A xwiki/skills/xwiki-contrib-release/SKILL.md M xwiki/skills/xwiki-convert-tests-docker/SKILL.md M xwiki/skills/xwiki-doc-writing/tools/README.md M xwiki/skills/xwiki-doc-writing/tools/docshot.sh M xwiki/skills/xwiki-javadoc/SKILL.md M xwiki/skills/xwiki-jira-bfd/SKILL.md M xwiki/skills/xwiki-jira-bfd/tools/README.md M xwiki/skills/xwiki-jira-bfd/tools/eval/RESULTS.md M xwiki/skills/xwiki-jira-bfd/tools/eval/backtest.py M xwiki/skills/xwiki-jira-bfd/tools/lib/claude_judge.py M xwiki/skills/xwiki-jira-bfd/tools/lib/judge.py M xwiki/skills/xwiki-jira-bfd/tools/score_issues.py M xwiki/skills/xwiki-jira-bfd/tools/tests/test_claude_judge.py M xwiki/skills/xwiki-jira/SKILL.md M xwiki/skills/xwiki-jira/references/rest-api.md M xwiki/skills/xwiki-pull-request/SKILL.md M xwiki/skills/xwiki-test-guidelines/SKILL.md Log Message: ----------- Merge remote-tracking branch 'origin/master' into security-advisory-impact-cwe Commit: a708fae8cdfe43bed3d00a95556b6c9b8be2dd80 https://github.com/xwiki/xwiki-dev-llm/commit/a708fae8cdfe43bed3d00a95556b6c... Author: Vincent Massol <[email protected]> Date: 2026-10-08 (Thu, 08 Oct 2026) Changed paths: M xwiki/skills/xwiki-security-advisory/SKILL.md Log Message: ----------- [Misc] Sharpen the advisory Impact, CWE and JIRA sync guidance * Moved the exact-requirements rule into the No-PoC section and dropped what it already said * Read the Critical/Major threshold from the policy instead of hardcoding it * Shortened the CWE usage check * Said that an obfuscated security commit keeps its JIRA key Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> Commit: 2e01c62315c882444c000ebec434b84f0c274390 https://github.com/xwiki/xwiki-dev-llm/commit/2e01c62315c882444c000ebec434b8... Author: Vincent Massol <[email protected]> Date: 2026-10-08 (Thu, 08 Oct 2026) Changed paths: M xwiki/okf/conventions/commit-messages.md M xwiki/skills/xwiki-security-advisory/SKILL.md Log Message: ----------- Merge pull request #203 from michitux/security-advisory-impact-cwe [Misc] Sharpen the advisory Impact, CWE and JIRA sync guidance Compare: https://github.com/xwiki/xwiki-dev-llm/compare/d9b4cd8362f5...2e01c62315c8 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications