Release Notes for $doc.getValue('product') $doc.getValue('version')

Version 4.1 by Thomas Mortagne on 2024/07/29
Warning: For security reasons, the document is displayed in restricted mode as it is not the current version. There may be differences and errors due to this.

Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.16\.6\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

Contents

This is the release notes for XWiki Commons, XWiki Rendering and XWiki Platform. They share the same release notes as they are released together and have the same version.

This release contains a few improvments like better display of icons in object and class editors, or the capability to request the effective author for developpers, but has been mostly focused on bug fixing, including security fixes.

New and Noteworthy (since Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.16\.6\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.
16.5.0)

Full list of issues fixed and Dashboard for XWiki 16.6.0.

For Users

Realtime WYSIWYG Source button

 
When using Realtime WYSIWYG Editing, editing and viewing the source wiki syntax is now possible by clicking the Source button in the toolbar.

When editing the source wiki syntax, the realtime editing session is interrupted temporarily. Once the user is done editing the source wiki syntax, the editor re-joins the realtime editing session automatically if it is safe to do so.
If the user wants to re-join the realtime editing session anyway, they can click the "Allow Realtime" Checkbox.

Icon update for the object and class editors

 
The object and class edit modes available to advanced users now use the icons from the current icon theme.

Note that the class edit mode contains a number of icons from Silk to represent UI components. Those icons are nowhere near any icon available in other icon themes, so they were not changed here.

Miscellaneous

  • Added a new tip to the Tips Panel from the Help application. This tip describes how to access the list of keyboard controls for CKEditor.

  • The tables that contain notification preferences in the user profile now follow the colors from the current Color Theme as expected.

For Admins

No changes!

For Developers

  • Request Effective Author: Before this version, when a request was received by XWiki, the currently authenticated user was considered to be responsible (regarding access rights) for the submitted data and the effects of the request. This made sense most of the time, but there were cases when the current user was not the only author of the request data so giving full responsibility to the current user wasn't ideal.

    Starting with this version we introduce the concept of "request effective author". By default, the currently authenticated user is the request effective author, but XWiki extensions can overwrite this based on the request data and their own logic by setting a UserReference as the value of a request attribute named com.xpn.xwiki.web.XWikiRequest#effectiveAuthor. The only XWiki extension that does this at the moment is the realtime WYSIWYG editor, which sets the request effective author to the user with the least script access rights that has made changes in the realtime session that sent the request.

    We also added a new method XWikiRequest#getEffectiveAuthor() to expose the request effective author. This is used for instance by the Save action to set the effective metadata author of the saved XWiki document. This means that even though the current user will continue to appear in the document history as the one that saved the document, the actual user that is used to check access rights when rendering that document (e.g. when executing script macros such as Velocity) could be different.

Upgrades

The following runtime dependencies have been upgraded (they have a different release cycle than XWiki Commons, XWiki Rendering and XWiki Platform):

Translations

The following translations have been updated: 

Security Issues

Security issues are not listed in issue lists or dashboards to avoid disclosing ways to use them, but they will appear automatically in them once they're disclosed. See the XWiki Security Policy for more details.

Known issues

Backward Compatibility and Migration Notes

General Notes

  • When upgrading make sure you compare and merge the following XWiki configuration files since some parameters may have been modified, removed or added:
    • xwiki.cfg
    • xwiki.properties
    • web.xml
    • hibernate.cfg.xml
  • Add xwiki.store.migration=1 in xwiki.cfg so that XWiki will attempt to automatically migrate your current database to any new schema. Make sure you backup your Database before doing anything.

Issues specific to Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.16\.6\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

<issues specific to the project>

API Breakages

The following APIs were modified since Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.16\.6\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.
<version - 1>:

Credits

The following people have contributed code and translations to this release (sorted alphabetically):

  • Alex Cotiugă 
  • Antoine Mottier 
  • Dorian OUAKLI 
  • LucasC 
  • Manuel Leduc 
  • Mariana Batista 
  • Marius Dumitru Florea 
  • Michael Hamann 
  • Oana-Lavinia Florean 
  • Pierre Jeanjean 
  • Simon Urli 
  • Simpel 
  • Thomas Mortagne 
  • Vincent Massol 
  • xingya1822 
  • Ümit Solmaz 

Get Connected