What's new in XWiki

The Blog Application 9.15.15 has been released. This release focuses on resolving several bugs to improve stability and display consistency.

The PlantUML extension 2.5 has been released. It fixes several security issues, no longer configures a remote PlantUML server by default, upgrades to PlantUML 1.2026.9 and now requires XWiki 16.10 or later.

The Prism.js Macro 1.3 has been released. It makes the highlighted code meet the WCAG AA contrast ratio and fixes some security issues, so upgrading is recommended.

The Change Request Application 1.25 has been released. The error reported when storing changes in a change request fails now includes the reason of the failure.

The LLM extension 0.11 has been released. It contains security fixes with the highest severity of 7.4/10, per-page rights checks and a one-time re-index for collections over wiki pages, opt-in guest access for the MCP endpoint, and a trust check on the MCP configuration.

The AntiSpam Tool Application 1.13 has been released. It adds navigation in the list of events, fixes several security issues and now reads the last entry of the X-Forwarded-For header by default.

The Documentation extension 1.18 has been released. It lets documentation pages hold content fragments that other pages display with the new Content Fragment macro, stops renaming a documentation page from logging an error, and fixes false reports from the verb, video attachment and Related link label checks.

The Release Notes Application 2.8 has been released. It lets changes and release notes be updated over the REST API and from scripts, makes concurrent additions to a release note safe, extends the Java API, and brings a series of security fixes.

The OAuth2 and OpenID Connect Extension 2.29.0 has been released. It makes authentication work from several browser tabs at the same time, adds configurable timeouts to the requests sent to the provider, and adds CORS support to the provider endpoints meant to be called by JavaScript clients.

The Wiki Link URL Normalizer 1.10.2 has been released. It fixes the errors logged when moving or renaming pages while a URL normalizer filter has no link reference pattern.