This issue has been created
There are 3 updates.
 
 
XWiki Platform / cid:jira-generated-image-avatar-50382d9b-f821-4067-8c0b-70843340973c XWIKI-25437 Open

Local extensions are not indexed anymore by the extension index

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-3316bc9f-b0cd-4617-b274-77be6ad9aba9 Thomas Mortagne created this issue on 21/Oct/26 14:19
 
Summary: Local extensions are not indexed anymore by the extension index
Issue Type: cid:jira-generated-image-avatar-50382d9b-f821-4067-8c0b-70843340973c Bug
Affects Versions: 16.8.0
Assignee: Unassigned
Components: Extension
Created: 21/Oct/26 14:19
Labels: regression
Priority: cid:jira-generated-image-static-major-23b67a8e-39c6-407b-86ee-4de7ae27b5ef Major
Reporter: Thomas Mortagne
Description:

Since XWiki 16.8.0, the extension index job doesn't add the extensions found in the local extension repository anymore, even when the request asks for it (which is the case for the first indexing job executed at startup).

As a consequence, an extension which is only available locally (for example installed from a non searchable repository like Maven Central, or from an uploaded file) never ends up in the extension index, so it's missing from everything relying on it, such as the extensions search in the Extension Manager or the list of installed extensions with security vulnerabilities.

The reason is that the call to the method indexing local extensions in ExtensionIndexJob was commented out as part of XCOMMONS-3051 (most probably a debug leftover), and the method itself was later removed as unused.

 
 

3 updates

 
cid:jira-generated-image-avatar-3316bc9f-b0cd-4617-b274-77be6ad9aba9 Changes by Thomas Mortagne on 21/Oct/26 14:19
 
Fix Version: 18.10.0-rc-1
Description: Since XWiki 16.8.0, the extension index job doesn't add the extensions found in the local extension repository anymore, even when the request asks for it (which is the case for the first indexing job executed at startup).

As a consequence, an extension Since the indexing of remote extensions skips the versions which is only are available locally ( for example expecting them to be indexed as local extensions), the consequence is that a version present in the local extension repository (which includes all installed extensions) is not added to the extension index, unless it got there in some other way (like the validation of compatible versions). This includes:
* an extension coming
from a non searchable repository ( like Maven Central , ) or from an uploaded file ) never ends up in the
* an
extension index downloaded from a searchable repository , so it's when the local version is also the last remote version

Such extensions are
missing from everything relying on it the extension index , such as the extensions search in the Extension Manager or the list of installed extensions with security vulnerabilities.

The reason is that the call to the method indexing local extensions in {{ExtensionIndexJob}} was commented out as part of XCOMMONS-3051 (most probably a debug leftover), and the method itself was later removed as unused.
Assignee: Thomas Mortagne