This is the release notes for XWiki Commons, XWiki Rendering and XWiki Platform. They share the same release notes as they are released together and have the same version.

This release provides two Quick Actions improvements. It is now possible to insert icons, and to upload new attachments, from the Quick Actions. It also comes with several bug fixes, including a security issue.

New and Noteworthy (since XWiki 15.6)

Full list of issues fixed and Dashboard for 15.7.

For Users

Quick Icon Insertion

 
You can now search for and insert icons using the keyboard, by typing / (slash) and selecting the icon Quick Action. This opens a drop down that lists all the available icons.

Quick Link to a new Attachment

 
You can now upload and link to an attachment using the keyboard, by typing / (slash) and selecting the Link Quick Action. This opens a drop-down that now supports uploading attachments.

Miscellaneous

• Improved contrast on the App Within Minute application creation wizard for the active (green) and already finished steps (light grey).

• Added keyboard support for the rich select used to pick a page template at page creation.

For Admins

Fine-grained control over how Chrome accesses XWiki

 
The "XWiki Host" PDF Export configuration parameter has been replaced by a new configuration parameter named "XWiki URI". While the old parameter was used to specify only the domain name or IP address of XWiki (required by the headless Chrome web browser to open the print preview page) the new parameter allows you to specify additionally the scheme (e.g. HTTP versus HTTPS) and the port number (e.g. 8080). This makes it easier to configure the remote Chrome so that it bypasses the proxy (e.g. SSO) in front of XWiki (e.g. by accessing directly the servlet engine that runs XWiki, such as Tomcat).

Note that the old "XWiki Host" configuration parameter is still taken into account (e.g. if it was set before upgrading to XWiki 15.7+) but the new "XWiki URI" parameter takes precedence (when set). We recommend updating your configuration to use the new parameter (in case you're using a remote Chrome and not the user's browser for PDF export). Migration is easy: just copy the value from the old parameter to the new one. This is possible because the scheme and port number are optional when specifying the "XWiki URI".

For more information checkout the PDF Export Application documentation.

For Developers

No changes!

Upgrades

The following runtime dependencies have been upgraded (they have a different release cycle than XWiki Commons, XWiki Rendering and XWiki Platform):

• dompurify 3.0.5
• Maven Resolver 1.9.15
• commons-lang3 3.13.0
• Protobuf Java 3.24.0
• Caffeine 3.1.8
• Logback 1.3.9
• MySQL connector 8.1.0
• XStream 1.4.20
• Liquibase 4.23.1
• Plexus Archiver 4.8.0
• Netty 4.1.96.Final
• Snappy 1.1.10.3
• Calcite 1.35.0
• Checker Qual 3.37.0
• Embedded Maven 3.9.4
• Closure Compiler v20230802
• Snakeyaml 2.1
• Error Prone annotations 2.21.1
• Bouncy Castle 1.76
• Plexus Utils 4.0.0 and Plexus XML Plexus Utils 4.0.2
• Guava 32.1.2-jre
• PagedJS 0.4.3

Translations

The following translations have been updated: 

• German
• French
• Portuguese (Brazil)
• Ukrainian
• Simplified Chinese

Tested Browsers & Databases

Here is the list of browsers we support and how they have been tested for this release:

	Browser	Tested on:
	Mozilla Firefox 119	Jira Tickets Marked as Fixed in the Release Notes
	Google Chrome 119	Not Tested
	Microsoft Edge 119	Not Tested
	Safari 16	Not Tested

Here is the list of databases we support and how they have been tested for this release:

	Database	Tested on:
	HyperSQL 2.7.2	Not Tested
	MariaDB 11.1	Not Tested
	MySQL 8.2	Not Tested
	PostgreSQL 16	Jira Tickets Marked as Fixed in the Release Notes
	Oracle 19c	Not Tested

Here is the list of Servlet Containers we support and how they have been tested for this release:

	Servlet Container	Tested on:
	Tomcat 9.0.83	Jira Tickets Marked as Fixed in the Release Notes
	Jetty 10.0.15 (XWiki Standalone packaging)	Not Tested
	Jetty 10.0.15	Not Tested

Security Issues

Security issues are not listed in issue lists or dashboards to avoid disclosing ways to use them, but they will appear automatically in them once they're disclosed. See the XWiki Security Policy for more details.

Known issues

• Bugs we know about

Backward Compatibility and Migration Notes

General Notes

• When upgrading make sure you compare and merge the following XWiki configuration files since some parameters may have been modified, removed or added:
  • xwiki.cfg
  • xwiki.properties
  • web.xml
  • hibernate.cfg.xml
• Add xwiki.store.migration=1 in xwiki.cfg so that XWiki will attempt to automatically migrate your current database to any new schema. Make sure you backup your Database before doing anything.

Issues specific to XWiki 15.7-rc-1

On startup after the upgrade, the search index will be emptied and all documents will be re-indexed to purge sensitive data from the search index. Features relying on the search index like the search itself but also the image picker or backlinks might be temporarily unavailable or incomplete.

API Breakages

The following APIs were modified since XWiki 15.6:

Unstable APIs

Not real backward compatibility breakages since they were done on APIs marked @Unstable (a.k.a Young APIs). Thus it's part of the contract that they can be broken until they become stable. They're listed purely for reference in case you decided to still use them (and thus agreed to be broken).

• Replaced getXWikiHost() with getXWikiURI() in unstable configuration API.
  • Violation type:
    java.method.removed
  • Code:
    ## Old:
    method java.lang.String org.xwiki.export.pdf.PDFExportConfiguration::getXWikiHost()
• Replaced getXWikiHost() with getXWikiURI() in unstable configuration API.
  • Violation type:
    java.method.addedToInterface
  • Code:
    ## Old:
    
    
    ## New:
    method java.net.URI org.xwiki.export.pdf.PDFExportConfiguration::getXWikiURI() throws java.net.URISyntaxException

Credits

The following people have contributed code and translations to this release (sorted alphabetically):

• Anca Luca 
• Dorian OUAKLI 
• Gankov Andrey 
• Manuel Leduc 
• Marius Dumitru Florea 
• Michael Hamann 
• Nikita Petrenko 
• Oana-Lavinia Florean 
• Sautner 
• Sereza7 
• Simon Urli 
• Simpel 
• Thomas Mortagne 
• Vincent Massol 
• WestFarmer