Last modified by Ilie Andriuta on 2022/07/25

Show last authors
1 {{velocity}}
2 #set ($rnObject = $doc.getObject('ReleaseNotes.Code.ReleaseNoteClass'))
3 #set ($product = $rnObject.product)
4 #set ($version = $rnObject.version)
5 #set ($versionPrefix = $stringtool.substringBefore($version, '-'))
6 #set ($versionParts = $stringtool.split($versionPrefix, '.'))
7 #set ($isRC = $version.contains('rc'))
8 #set ($isFinal = !$isRC)
9 #set ($isFirstFinal = $versionParts.size() == 2 && $isFinal)
10 {{/velocity}}
11
12 {{box cssClass="floatinginfobox" title="**Contents**"}}
13 {{toc/}}
14 {{/box}}
15
16 This is the release notes for [[XWiki Commons>>http://commons.xwiki.org]], [[XWiki Rendering>>http://rendering.xwiki.org]] and [[XWiki Platform>>http://platform.xwiki.org]]. They share the same release notes as they are released together and have the same version.
17
18 This release brings paginated attachments, multiple categories support for wiki macros and cancelable multi-page PDF exports. Admins can now control where the PDF export is performed (server-side or client-side) and also security related aspects, such as what HTML elements attributes are allowed in wiki syntax or the HTML macro. The old events store has also been moved to legacy, as it will eventually stop being bundled by default. On the other hand, the CKEditor integration was moved from Contrib into XWiki Platform. Finally, an important security-related migration is now available and configurable regarding the notification and regeneration of user passwords for potentially affected users.
19
20 {{comment}}
21 Uncomment when there's at least one issue listed in the table!
22 {{error}}
23 The following regressions were introduced in this release (and found after it was released). Please check them out and if they impact you we recommend waiting to upgrade to a version where they are fixed.
24
25 {{velocity}}
26 #if ($isFirstFinal)
27 #set ($affectedVersions = "${version}-rc-1, ${version}")
28 #set ($fixVersionJQL = " and (fixVersion != ${version}-rc-1 or fixVersion is empty)")
29 #else
30 #set ($affectedVersions = "${version}")
31 #set ($fixVersionJQL = "")
32 #end
33 {{jira id="xwikiorg" source="jql"}}
34 category = 10000 and affectedVersion in ($affectedVersions)${fixVersionJQL}and priority = Blocker and resolution in (Fixed, Unresolved)
35 {{/jira}}
36 {{/velocity}}
37 {{/error}}
38 {{/comment}}
39
40 = New and Noteworthy (since {{velocity}}$product{{/velocity}} 14.5) =
41
42 [[Full list of issues fixed and Dashboard for 14.6>>https://jira.xwiki.org/secure/Dashboard.jspa?selectPageId=15095]].
43
44 {{releasenotechanges/}}
45
46 === Moved Modules ===
47
48 [[CKEditor Integration>>doc:extensions:Extension.CKEditor Integration.WebHome]] is now part of XWiki Platform. The extension will still be maintained as an independent contribution extension, for bug fixes only, until the ##14.4.x## and ##13.10.x## branches become unsupported. Please create new issues on the [[XWiki Plaform>>https://jira.xwiki.org/projects/XWIKI/issues]] Jira project. Issues can still be created in the [[CKEditor Integration>>https://jira.xwiki.org/projects/CKEDITOR/issues/]] Jira project only for bug that are impacting branches ##14.4.x## and ##13.10.x##.
49
50 === Upgrades ===
51
52 The following runtime dependencies have been upgraded (they have a different release cycle than [[XWiki Commons>>http://commons.xwiki.org]], [[XWiki Rendering>>http://rendering.xwiki.org]] and [[XWiki Platform>>http://platform.xwiki.org]]):
53
54 * [[node 16.15.1>>https://jira.xwiki.org/browse/XWIKI-19881]]
55 * [[@vue/cli-plugin-babel 5.0.8>>https://jira.xwiki.org/browse/XWIKI-19882]]
56 * [[vue-i18n 8.27.2>>https://jira.xwiki.org/browse/XWIKI-19883]]
57 * [[vue-tippy 4.14.0>>https://jira.xwiki.org/browse/XWIKI-19942]]
58 * [[eslint-plugin-vue 8.7.1>>https://jira.xwiki.org/browse/XWIKI-19946]]
59 * [[less 4.1.3>>https://jira.xwiki.org/browse/XWIKI-19943]]
60 * [[less-loader 10.0.0>>https://jira.xwiki.org/browse/XWIKI-18940]]
61 * [[@testing-library/jest-dom 5.16.4>>https://jira.xwiki.org/browse/XWIKI-19947]]
62 * [[@babel/eslint-parser 7.18.2>>https://jira.xwiki.org/browse/XWIKI-19884]]
63 * [[Woodstox 6.3.0>>https://jira.xwiki.org/browse/XCOMMONS-2458]]
64 * [[JNA 5.12.1>>https://jira.xwiki.org/browse/XWIKI-19889]]
65 * [[Protobuf Java 3.21.2>>https://jira.xwiki.org/browse/XCOMMONS-2455]]
66 * [[Byte Buddy 1.12.12>>https://jira.xwiki.org/browse/XCOMMONS-2454]]
67 * [[Liquibase 4.12.0>>https://jira.xwiki.org/browse/XWIKI-19890]]
68 * [[MariaDB connector 3.0.6>>https://jira.xwiki.org/browse/XWIKI-19915]]
69 * [[jsoup 1.15.2>>https://jira.xwiki.org/browse/XWIKI-19934]]
70 * [[Tika 2.4.1>>https://jira.xwiki.org/browse/XWIKI-19891]]
71 * [[Revapi Java 0.27.0 and Maven plugin 0.14.7>>https://jira.xwiki.org/browse/XCOMMONS-2462]]
72 * [[log4j API 2.18.0>>https://jira.xwiki.org/browse/XCOMMONS-2461]]
73 * [[Commons Configuration 2.8.0>>https://jira.xwiki.org/browse/XCOMMONS-2460]]
74 * [[Hibernate 5.6.10>>https://jira.xwiki.org/browse/XWIKI-19991]]
75
76 = Translations =
77
78 The following translations have been updated:
79
80 {{language codes="de, es, fr, sv"}}{{/language}}
81
82 = Tested Browsers & Databases =
83
84 {{include reference="TestReports.ManualTestReportSummaryXWiki146RC1.WebHome"/}}
85
86 {{comment}}
87 TODO: uncomment and update with proper links when the report is ready.
88
89 = Performances tests compared to <last super stable version> =
90
91 {{display reference="test:Performances.Jetty HSQLDB single wiki xxx to yyy" section="HSummary"/}}
92
93 More details on [[performance comparison on single wiki between x.x and y.y>>test:Performances.Jetty HSQLDB single wiki xxx to yyy]].
94 {{/comment}}
95
96 = Known issues =
97
98 * [[Bugs we know about>>https://jira.xwiki.org/issues/?jql=category%20%3D%2010000%20AND%20issuetype%20%3D%20Bug%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20updated%20DESC]]
99
100 = Backward Compatibility and Migration Notes =
101
102 == General Notes ==
103
104 * When upgrading make sure you compare and merge the following XWiki configuration files since some parameters may have been modified, removed or added:
105 ** ##xwiki.cfg##
106 ** ##xwiki.properties##
107 ** ##web.xml##
108 ** ##hibernate.cfg.xml##
109 * Add ##xwiki.store.migration=1## in ##xwiki.cfg## so that XWiki will attempt to automatically migrate your current database to any new schema. Make sure you backup your Database before doing anything.
110
111 == Migration sending emails ==
112
113 A migration is provided as part of this upgrade that might trigger a reset password of some users. As part of this operation, some emails are automatically being sent by default: a first mail informing about a possible data leak, and a second mail for asking users to reset their password.
114
115 It's possible to chose whether the mails should be sent or not by editing the following properties:
116
117 {{code}}
118 #-# [Since 14.6RC1]
119 #-# [Since 14.4.3]
120 #-# [Since 13.10.8]
121 #-# This option is only used when performing a migration from a wiki before the versions mentioned above.
122 #-#
123 #-# This parameter defines if as part of the migration R140600000XWIKI19869 the passwords of impacted user should be
124 #-# reset or not. It's advised to keep this value as true, now for some usecases advertised administrators might want
125 #-# their users to keep their passwords nevertheless, then enable the configuration and set it to false before the
126 #-# migration is executed.
127 # security.migration.R140600000XWIKI19869.resetPassword = true
128
129 #-# [Since 14.6RC1]
130 #-# [Since 14.4.3]
131 #-# [Since 13.10.8]
132 #-# This option is only used when performing a migration from a wiki before the versions mentioned above.
133 #-#
134 #-# This parameter defines if reset password emails should be sent as part of the migration R140600000XWIKI19869.
135 #-# By default this value is set to true, so emails will be automatically produced. Now it's possible for admin to set
136 #-# this option to false: note that in such case a file containing the list of users for whom a reset password email
137 #-# should be sent will still be created in the permanent directory (named 140600000XWIKI19869DataMigration-users.txt).
138 #-# If this file exists and this property is set back to true after the migration, the file will still be consumed to
139 #-# send the emails, so it's possible to perform the migration and send the emails only later if needed.
140 # security.migration.R140600000XWIKI19869.sendResetPasswordEmail = true
141
142 #-# [Since 14.6RC1]
143 #-# [Since 14.4.3]
144 #-# [Since 13.10.8]
145 #-# This option is only used when performing a migration from a wiki before the versions mentioned above.
146 #-#
147 #-# This parameter defines if a security email information should be sent as part of the migration R140600000XWIKI19869.
148 #-# By default this value is set to true, so emails will be automatically produced. Now it's possible for admin to set
149 #-# this option to false: note that in such case a file containing the list of users for whom a reset password email
150 #-# should be sent will still be created in the permanent directory (named 140600000XWIKI19869DataMigration-users.txt).
151 #-# If this file exists and this property is set back to true after the migration, the file will still be consumed to
152 #-# send the emails, so it's possible to perform the migration and send the emails only later if needed.
153 # security.migration.R140600000XWIKI19869.sendSecurityEmail = true
154 {{/code}}
155
156 Note that the mails are sent after the migration is actually performed, during the wiki intialization by reading a file named ##140600000XWIKI19869DataMigration-users.txt## created in the permanent directory during the migration. So it's possible for an administrator to set the properties for sending the emails to false for performing the migration, and to actually set them back to true before a next restart to send the emails at this moment. Be aware that the file is deleted as soon as the emails are processed to be sent: in case of failure for sending the emails, please check the administration of the wiki to see the status of the created emails.
157
158
159 It's also possible for administrators to configure the template of the first mail by creating a file named ##140600000XWIKI19869-mail.txt## in the permanent directory. The format of this template is the following:
160
161 (% class="box" %)
162 (((
163 Subject:<the subject of the email>
164 <the plain text content of the email>
165 )))
166
167 By default, the mail template is the following:
168
169 (% class="box" %)
170 (((
171 {{{Subject: Important security issue
172 Dear user,
173
174 due to a bug your password was stored in plain text in our wiki. We cannot exclude that your plain text password was exposed in a data leak. Therefore, you might receive a second email to choose a new password.
175 Please contact the administrator in case of problem or for further questions.}}}
176 )))
177
178 == API Breakages ==
179
180 The following APIs were modified since {{velocity}}$product{{/velocity}} 14.5:
181
182 {{velocity}}
183 {{backwardCompatibilityReport134 version="$version"/}}
184 {{/velocity}}
185
186 = Credits =
187
188 The following people have contributed code and translations to this release (sorted alphabetically):
189
190 Andreas Jonsson
191 Eduard Moraru
192 Manuel Leduc
193 Marius Dumitru Florea
194 Michael Hamann
195 Oana-Lavinia Florean
196 Simon Urli
197 Simpel
198 Thomas Mortagne
199 Vincent Massol
200 oanalavinia
201 xrichard

Get Connected