This is the release notes for XWiki Commons, XWiki Rendering and XWiki Platform. They share the same release notes as they are released together and have the same version.

This is a bug fix release. This release contains security fixes, with the highest severity being 9.3/10.

New and Noteworthy (since XWiki 16.4.5)

Full list of issues fixed and Dashboard for XWiki 16.4.6.

Translations

The following translations have been updated: 

• German

Tested Browsers & Databases

Automated testing

XWiki executes a lot of automated tests during its build, testing all supported configurations. In addition, some manual QA is also executed to try to discover additional problems (see below):

Manual testing

Here is the list of browsers we support and how they have been manually tested for this release:

	Browser	Tested on:
	Mozilla Firefox 133	Jira Tickets Marked as Fixed in the Release Notes
	Microsoft Edge 131	Tests run and results
	Google Chrome 131
	Safari 17	Not Tested

Here is the list of databases we support and how they have been manually tested for this release:

	Database	Tested on:
	HyperSQL 2.7.3	Not Tested
	MariaDB 11.4	Not Tested
	MySQL 9.0.1	Tests run and results
	PostgreSQL 16
	Oracle 19c	Jira Tickets Marked as Fixed in the Release Notes

Here is the list of Servlet Containers we support and how they have been manually tested for this release:

	Servlet Container	Tested on:
	Tomcat 9.0.98	Jira Tickets Marked as Fixed in the Release Notes Tests run and results
	Jetty 10.0.21 (XWiki Standalone packaging)	Tests run and results
	Jetty 10.0.21	Not Tested

Security Issues

Security issues are not listed in issue lists or dashboards to avoid disclosing ways to use them, but they will appear automatically in them once they're disclosed. See the XWiki Security Policy for more details.

Known issues

• Bugs we know about

Backward Compatibility and Migration Notes

General Notes

• When upgrading make sure you compare and merge the following XWiki configuration files since some parameters may have been modified, removed or added:
  • xwiki.cfg
  • xwiki.properties
  • web.xml
  • hibernate.cfg.xml
• Add xwiki.store.migration=1 in xwiki.cfg so that XWiki will attempt to automatically migrate your current database to any new schema. Make sure you backup your Database before doing anything.

Issues specific to XWiki 16.4.6

New query validation in the REST Query HQL endpoint and for the short form queries in the script API

The validation of HQL queries given to the REST Query HQL endpoint and to the Query script API has been modified to be more consistent. This validation is a lot stricter than it used to be for those use cases, which may cause some perfectly valid (but complex enough to not be understood by the validator) queries to be forbidden if the current user (or the author of the script depencing on the user case) does not have programming right.

Don't hesitate to report an issue on https://jira.xwiki.org/browse/XWIKI if this happens. A workaround in the form of a configuration to explicitly indicate allowed query statements has also been introduced to workaround potential false positives. See Query Module for more details about this new configuration.

API Breakages

The following APIs were modified since XWiki 16.4.5:

No breakage!

Credits

The following people have contributed code and translations to this release (sorted alphabetically):

Results:

• LucasC 
• Manuel Leduc 
• Marius Dumitru Florea 
• Michael Hamann 
• Simon Urli 
• Simpel 
• Thomas Mortagne 
• Vincent Massol