What's new in XWiki

The Prism.js Macro 1.3 has been released. It makes the highlighted code meet the WCAG AA contrast ratio and fixes some security issues, so upgrading is recommended.

The Change Request Application 1.25 has been released. The error reported when storing changes in a change request fails now includes the reason of the failure.

The LLM extension 0.11 has been released. It contains security fixes with the highest severity of 7.4/10, per-page rights checks and a one-time re-index for collections over wiki pages, opt-in guest access for the MCP endpoint, and a trust check on the MCP configuration.

The AntiSpam Tool Application 1.13 has been released. It adds navigation in the list of events, fixes several security issues and now reads the last entry of the X-Forwarded-For header by default.

The Documentation extension 1.18 has been released. It lets documentation pages hold content fragments that other pages display with the new Content Fragment macro, stops renaming a documentation page from logging an error, and fixes false reports from the verb, video attachment and Related link label checks.

The Release Notes Application 2.8 has been released. It lets changes and release notes be updated over the REST API and from scripts, makes concurrent additions to a release note safe, extends the Java API, and brings a series of security fixes.

The OAuth2 and OpenID Connect Extension 2.29.0 has been released. It makes authentication work from several browser tabs at the same time, adds configurable timeouts to the requests sent to the provider, and adds CORS support to the provider endpoints meant to be called by JavaScript clients.

The Wiki Link URL Normalizer 1.10.2 has been released. It fixes the errors logged when moving or renaming pages while a URL normalizer filter has no link reference pattern.

The XWiki development team is proud to announce the availability of XWiki 18.4.7. This is a bug fix release. This release contains security fixes, with the highest severity being 9.3/10. See the release notes for more information.

The Documentation extension 1.17 has been released. It fixes the Documentation Violations Live Data, which showed the first violation of a page in all of its rows, and improves how violations and false positive marks are saved, how pages are analyzed, and the robustness of several macros, badges, search forms and the navigation panel.