Release Notes for $doc.getValue('product') $doc.getValue('version')

Version 9.1 by Simon Urli on 2025/06/30
Warning: For security reasons, the document is displayed in restricted mode as it is not the current version. There may be differences and errors due to this.

Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.17\.5\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.17\.5\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

Contents

This is the release notes for XWiki Commons, XWiki Rendering and XWiki Platform. They share the same release notes as they are released together and have the same version.

<insert description of release here>
This release contains security fixes, with the highest severity being 9.3/10

Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.17\.5\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

New and Noteworthy (since Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.17\.5\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.
17.4.1)

Full list of issues fixed and Dashboard for 17.5.0.

Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.17\.5\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

Upgrades

The following runtime dependencies have been upgraded (they have a different release cycle than XWiki Commons, XWiki Rendering and XWiki Platform):

Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.17\.5\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

Translations

The following translations have been updated: 

Security Issues

Security issues are not listed in issue lists or dashboards to avoid disclosing ways to use them, but they will appear automatically in them once they're disclosed. See the XWiki Security Policy for more details.

Known issues

Backward Compatibility and Migration Notes

General Notes

  • When upgrading make sure you compare and merge the following XWiki configuration files since some parameters may have been modified, removed or added:
    • xwiki.cfg
    • xwiki.properties
    • web.xml
    • hibernate.cfg.xml
  • Add xwiki.store.migration=1 in xwiki.cfg so that XWiki will attempt to automatically migrate your current database to any new schema. Make sure you backup your Database before doing anything.

Issues specific to Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.17\.5\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

XWiki now overwrites the standard application server request URL resolution

We had too many erratic/buggy behaviors with various application servers not properly following proxy headers, so we decided to not trust them anymore: XWiki now overwrite in a Servlet filter the behavior of ServletRequest#getScheme(), ServletRequest#getServerName(), ServletRequest#getServerPort() and HttpServletRequest#getRequestURL() so those should now have the same behavior to matter the application server used and its setup.

REST wiki and space keyword search API uses Solr by default

We've changed the backend that is used for keyword search in the REST API at the wiki and space level from the database to Solr as the database search just doesn't scale – we saw running times above a minute in installations with a million documents. While the general feature of the API is the same, finding pages from potentially partial user input, the specific behavior including the default sort order of the results is different. In case you want to restore the previous behavior, you can change the backend in the configuration of the REST API.

Inplace editable macro parameters are visible in the macro configuration UI

Following the revamping of the macro configuration UI, the inplace editable macro parameters are now by default always displayed in the configuration UI, while they used to only be displayed in the configuration UI when not editable in the editor (e.g. the optional title of an optional box was displayed in the macro configuration UI before being first set only, after it was only editable through the editor itself). However, it's possible to revert to the old behaviour if needed by using the following configuration in the Administration > WYSIWYG Editor: config['xwiki-macro'].showInlineEditableParameters=false.

API Breakages

The following APIs were modified since Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.17\.5\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.
17.4.1:

Failed to execute the [velocity] macro. Cause: [The execution of the [velocity] script macro is not allowed in [xwiki:ReleaseNotes.Data.XWiki.17\.5\.0.WebHome]. Check the rights of its last author or the parameters if it's rendered from another script.]. Click on this message for details.

Credits

The following people have contributed code and translations to this release (sorted alphabetically):

  • anonymous 
  • jasongwq 
  • Leif Erik Andersen 
  • LucasC 
  • Manuel Leduc 
  • Marius Dumitru Florea 
  • Mend Renovate 
  • Michael Hamann 
  • Simon Urli 
  • Simpel 
  • Thomas Mortagne 
  • Vincent Massol 
  • Xiaofei Cui 
  • xrichard

Get Connected