commits  

Messages by Date

• 2026/03/27 (ofbiz-plugins) branch trunk updated: Bump vite from 8.0.2 to 8.0.3 in /example/vite-react-app (#171) jleroux
• 2026/03/26 Buildbot failure in on ofbizTrunkFrameworkPlugins buildbot
• 2026/03/26 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.3 created (now ef4340fc2) github-bot
• 2026/03/26 (ofbiz-plugins) branch trunk updated: Add to dependabot.yml configuration for the release24.09 branch jacopoc
• 2026/03/26 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.3 created (now 7e73375f3) github-bot
• 2026/03/26 (ofbiz-site) branch master updated: Improved: Use browser validation for input element, support types (OFBIZ-13183) (#862) jleroux
• 2026/03/26 (ofbiz-framework) branch trunk updated: OFBIZ-13248 Calculate labor cost when production run is completed (#1026) diveshdutta
• 2026/03/26 (ofbiz-framework) branch release24.09 updated: Improved: Extend URL_RESOURCE validation to writeDataResourceText, completing the work of af8ee514a2 jacopoc
• 2026/03/26 (ofbiz-framework) branch trunk updated: Improved: Extend URL_RESOURCE validation to writeDataResourceText, completing the work of af8ee514a2 jacopoc
• 2026/03/25 (ofbiz-framework) branch release24.09 updated: Fixed: generateSecretKeys task no longer overwrites already-set keys jacopoc
• 2026/03/25 (ofbiz-framework) branch trunk updated: Fixed: generateSecretKeys task no longer overwrites already-set keys jacopoc
• 2026/03/25 (ofbiz-framework) branch trunk updated: Add README file to document the current CI/CD configuration jacopoc
• 2026/03/24 Buildbot success in on ofbizTrunkFramework buildbot
• 2026/03/24 Buildbot failure in on ofbizTrunkFramework buildbot
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/release24.09/actions/setup-java-5.2.0 deleted (was 12675c3598) github-bot
• 2026/03/24 (ofbiz-framework) branch release24.09 updated: Bump actions/setup-java from 4.0.0 to 5.2.0 jacopoc
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/release24.09/actions/upload-artifact-7.0.0 deleted (was 38f3d747ee) jacopoc
• 2026/03/24 (ofbiz-framework) branch release24.09 updated: Bump actions/upload-artifact from 4.3.1 to 7.0.0 jacopoc
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/actions/upload-artifact-7.0.0 deleted (was f07672d1ca) jacopoc
• 2026/03/24 (ofbiz-framework) branch trunk updated: Bump actions/upload-artifact from 4.3.1 to 7.0.0 jacopoc
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/actions/setup-java-5.2.0 deleted (was 3b048c987b) jacopoc
• 2026/03/24 (ofbiz-framework) branch trunk updated: Bump actions/setup-java from 4.0.0 to 5.2.0 jacopoc
• 2026/03/24 (ofbiz-framework) branch release24.09 updated: Copy GitHub workflow definition files from the default branch (trunk) since they now work correctly in any branch without modification jacopoc
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/release24.09/actions/checkout-6.0.2 deleted (was 47a6f30db4) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/release24.09/step-security/harden-runner-2.16.0 deleted (was b185aac3fd) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/release24.09/ossf/scorecard-action-2.4.3 deleted (was 9105e03316) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/release24.09/jquery-4.0.0 created (now 57f2a82c61) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/docker/release24.09/eclipse-temurin-25 created (now fd2dbe3d01) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/actions/upload-artifact-7.0.0 created (now f07672d1ca) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/release24.09/ossf/scorecard-action-2.4.3 created (now 9105e03316) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/release24.09/step-security/harden-runner-2.16.0 created (now b185aac3fd) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/release24.09/actions/checkout-6.0.2 created (now 47a6f30db4) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/release24.09/jquery-migrate-4.0.2 created (now 5526a084a4) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/release24.09/actions/setup-java-5.2.0 created (now d021858efb) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/release24.09/actions/upload-artifact-7.0.0 created (now 38f3d747ee) github-bot
• 2026/03/24 (ofbiz-framework) branch dependabot/github_actions/actions/setup-java-5.2.0 created (now 3b048c987b) github-bot
• 2026/03/24 (ofbiz-framework) branch trunk updated: Modify GitHub workflow definition files in the default branch (trunk) to work correctly in any branch without modification jacopoc
• 2026/03/24 (ofbiz-plugins) branch release24.09 updated: Fixed: Upgrade example/vite-react-app jacopoc
• 2026/03/24 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/typescript-6.0.2 deleted (was 06efa6796) github-bot
• 2026/03/24 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.2 deleted (was d98879439) github-bot
• 2026/03/24 (ofbiz-plugins) branch trunk updated: Fixed: update TypeScript and Vite to latest versions; adjust tsconfig module resolution jacopoc
• 2026/03/23 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.2 created (now d98879439) github-bot
• 2026/03/23 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/typescript-6.0.2 created (now 06efa6796) github-bot
• 2026/03/23 (ofbiz-framework) branch trunk updated: Bump github/codeql-action from 4.33.0 to 4.34.1 jacopoc
• 2026/03/23 (ofbiz-framework) branch dependabot/github_actions/docker/metadata-action-6.0.0 deleted (was aa92eaf550) jacopoc
• 2026/03/23 (ofbiz-framework) branch trunk updated: Bump docker/metadata-action from 5.10.0 to 6.0.0 jacopoc
• 2026/03/23 (ofbiz-framework) branch dependabot/github_actions/actions/checkout-6.0.2 deleted (was 603df2957a) jacopoc
• 2026/03/23 (ofbiz-framework) branch trunk updated: Bump actions/checkout from 3.6.0 to 6.0.2 jacopoc
• 2026/03/23 (ofbiz-framework) branch dependabot/github_actions/docker/login-action-4.0.0 deleted (was 796f648485) jacopoc
• 2026/03/23 (ofbiz-framework) branch trunk updated: Bump docker/login-action from 3.7.0 to 4.0.0 jacopoc
• 2026/03/23 (ofbiz-framework) branch dependabot/github_actions/ossf/scorecard-action-2.4.3 deleted (was ffa5f3069c) jacopoc
• 2026/03/23 (ofbiz-framework) branch trunk updated: Bump ossf/scorecard-action from 2.3.1 to 2.4.3 jacopoc
• 2026/03/23 (ofbiz-framework) branch dependabot/github_actions/github/codeql-action-4.34.1 created (now d521f26105) github-bot
• 2026/03/23 (ofbiz-framework) branch dependabot/github_actions/docker/metadata-action-6.0.0 created (now aa92eaf550) github-bot
• 2026/03/23 (ofbiz-framework) branch dependabot/github_actions/actions/checkout-6.0.2 created (now 603df2957a) github-bot
• 2026/03/23 (ofbiz-framework) branch dependabot/github_actions/docker/login-action-4.0.0 created (now 796f648485) github-bot
• 2026/03/23 (ofbiz-framework) branch dependabot/github_actions/ossf/scorecard-action-2.4.3 created (now ffa5f3069c) github-bot
• 2026/03/23 (ofbiz-framework) branch trunk updated: Revert "Bump actions/setup-java from 4.0.0 to 5.2.0 (#1001)" jleroux
• 2026/03/23 (ofbiz-framework) branch trunk updated: Bump docker/metadata-action from v5.5.1 to v5.10.0 in CI/CD workflows jacopoc
• 2026/03/23 (ofbiz-framework) branch trunk updated: Improved: <text/> form widget supports "range" and "color" types (#965) florianmo
• 2026/03/23 (ofbiz-framework) branch trunk updated: Bump docker/login-action from v3.0.0 to v3.7.0 and docker/metadata-action from v5.5.1 to v5.10.0 jacopoc
• 2026/03/23 (ofbiz-framework) branch trunk updated: Remove Harden Runner from CI/CD workflows jacopoc
• 2026/03/22 (ofbiz-framework) branch trunk updated: Bump step-security/harden-runner from 2.7.0 to 2.16.0 (#1004) jleroux
• 2026/03/22 (ofbiz-framework) branch dependabot/github_actions/step-security/harden-runner-2.16.0 deleted (was 95ccbed1b9) github-bot
• 2026/03/21 (ofbiz-framework) branch dependabot/github_actions/github/codeql-action-4.33.0 deleted (was 367d626db6) github-bot
• 2026/03/21 (ofbiz-framework) branch trunk updated: Bump github/codeql-action from 3.29.0 to 4.33.0 (#1003) jleroux
• 2026/03/21 (ofbiz-framework) branch dependabot/github_actions/docker/build-push-action-7.0.0 deleted (was ad31726eb0) github-bot
• 2026/03/21 (ofbiz-framework) branch trunk updated: Bump docker/build-push-action from 5.1.0 to 7.0.0 (#1002) jleroux
• 2026/03/21 (ofbiz-framework) branch dependabot/github_actions/actions/dependency-review-action-4.9.0 deleted (was 4fa749ba4b) github-bot
• 2026/03/21 (ofbiz-framework) branch trunk updated: Bump actions/dependency-review-action from 2.5.1 to 4.9.0 (#1000) jleroux
• 2026/03/21 (ofbiz-framework) branch dependabot/github_actions/actions/setup-java-5.2.0 deleted (was 784a4676e3) github-bot
• 2026/03/21 (ofbiz-framework) branch trunk updated: Bump actions/setup-java from 4.0.0 to 5.2.0 (#1001) jleroux
• 2026/03/21 (ofbiz-framework) branch dependabot/github_actions/actions/setup-java-5.2.0 updated (b4f5c7f7eb -> 784a4676e3) github-bot
• 2026/03/21 (ofbiz-framework) branch trunk updated: Improved: Upgrade java version to 21 (OFBIZ-13306) jleroux
• 2026/03/20 (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/jquery-migrate-4.0.2 updated (938e24c6f8 -> b5af64f7a6) github-bot
• 2026/03/20 (ofbiz-framework) branch dependabot/docker/eclipse-temurin-25 deleted (was faa80abddf) github-bot
• 2026/03/20 (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/jquery-4.0.0 updated (b5c1bfaa9e -> 7bd29705bd) github-bot
• 2026/03/20 (ofbiz-framework) branch trunk updated: Fixed: DateTime pickers displayed according to the locale (OFBIZ-13328) (#933) mleila
• 2026/03/20 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/typescript-5.9.3 deleted (was a3fe2d91f) github-bot
• 2026/03/20 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/multi-c6586c7467 deleted (was bec9d6a66) github-bot
• 2026/03/20 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/prettier-3.8.1 deleted (was 71e0d40dc) github-bot
• 2026/03/20 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vitejs/plugin-react-6.0.1 deleted (was 744c24424) github-bot
• 2026/03/20 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/multi-d88693a43a deleted (was 5edde95ba) github-bot
• 2026/03/20 (ofbiz-plugins) branch trunk updated: Fixed: update dependencies and devDependencies to latest versions; refactor ApiContextProvider type jacopoc
• 2026/03/20 (ofbiz-framework) branch dependabot/github_actions/step-security/harden-runner-2.16.0 created (now 95ccbed1b9) github-bot
• 2026/03/20 (ofbiz-framework) branch dependabot/github_actions/github/codeql-action-4.33.0 created (now 367d626db6) github-bot
• 2026/03/20 (ofbiz-framework) branch dependabot/github_actions/docker/build-push-action-7.0.0 created (now ad31726eb0) github-bot
• 2026/03/20 (ofbiz-framework) branch dependabot/github_actions/actions/setup-java-5.2.0 created (now b4f5c7f7eb) github-bot
• 2026/03/20 (ofbiz-framework) branch dependabot/github_actions/actions/dependency-review-action-4.9.0 created (now 4fa749ba4b) github-bot
• 2026/03/20 (ofbiz-framework) branch dependabot/docker/eclipse-temurin-25 created (now faa80abddf) github-bot
• 2026/03/20 (ofbiz-framework) branch trunk updated: Remove duplicated npm configuration from dependabot.yml jacopoc
• 2026/03/20 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/prettier-3.8.1 created (now 71e0d40dc) github-bot
• 2026/03/20 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/typescript-5.9.3 created (now a3fe2d91f) github-bot
• 2026/03/20 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/multi-d88693a43a created (now 5edde95ba) github-bot
• 2026/03/20 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vitejs/plugin-react-6.0.1 created (now 744c24424) github-bot
• 2026/03/20 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/multi-c6586c7467 created (now bec9d6a66) github-bot
• 2026/03/20 (ofbiz-plugins) branch trunk updated: Update Dependabot configuration for package ecosystems jacopoc
• 2026/03/20 (ofbiz-plugins) branch release24.09 updated: Fixed: Remove the Gantt feature from projectmgr (OFBIZ-13339) jacopoc
• 2026/03/20 (ofbiz-plugins) 02/02: Fixed: Remove the Gantt feature from projectmgr (OFBIZ-13339) jacopoc
• 2026/03/20 (ofbiz-plugins) 01/02: Updated baseline-browser-mapping to version 2.10.9 in package-lock.json of the example component jacopoc
• 2026/03/20 (ofbiz-plugins) branch trunk updated (fd53f4d52 -> 297f34ee3) jacopoc
• 2026/03/19 (ofbiz-framework) branch trunk updated: Improved: this follows commit 185c9a0 and GH PR-981 jleroux
• 2026/03/19 (ofbiz-framework) branch release24.09 updated: Improved: this follows commit 185c9a0 and GH PR-981 jleroux
• 2026/03/19 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-7.1.11 deleted (was 7780c568c) github-bot
• 2026/03/19 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/multi-44bf388a45 deleted (was 820ef2315) github-bot
• 2026/03/19 (ofbiz-framework) branch release24.09 updated: Bump Node.js version to 20.19.0 and update package-lock.json jacopoc
• 2026/03/19 (ofbiz-framework) branch trunk updated: Bump Node.js version to 20.19.0 and update package-lock.json jacopoc
• 2026/03/19 (ofbiz-framework) branch release24.09 updated: Fixed: Suppress warning for try block in isPdfFile method jacopoc
• 2026/03/19 (ofbiz-framework) branch trunk updated: Fixed: Suppress warning for try block in isPdfFile method jacopoc
• 2026/03/18 (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/moment-timezone-0.6.1 deleted (was 588ffdb2a1) github-bot
• 2026/03/18 (ofbiz-framework) branch trunk updated (aa684ad140 -> a86cbb95db) jleroux
• 2026/03/18 (ofbiz-framework) branch release24.09 updated: Fixed: Ensure safe writing of sanitized images by opening output stream after image processing jacopoc
• 2026/03/18 (ofbiz-framework) branch trunk updated: Fixed: Ensure safe writing of sanitized images by opening output stream after image processing jacopoc
• 2026/03/18 (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/moment-timezone-0.6.1 created (now 588ffdb2a1) github-bot
• 2026/03/18 (ofbiz-framework) branch release24.09 updated: Improved: No functional change jleroux
• 2026/03/18 (ofbiz-framework) branch trunk updated: Improved: No functional change jleroux
• 2026/03/17 (ofbiz-framework) branch release24.09 updated (76be5d90fe -> 372e4fe025) jacopoc
• 2026/03/17 (ofbiz-framework) 02/02: Fixed: Enhance temporary file creation for image uploads by using original file extensions and ensuring safe copying to the destination jacopoc
• 2026/03/17 (ofbiz-framework) 01/02: Fixed: Enhance temporary file handling for uploads by using original file extensions and ensuring safe copying of files jacopoc
• 2026/03/17 (ofbiz-framework) 01/02: Fixed: Enhance temporary file handling for uploads by using original file extensions and ensuring safe copying of files jacopoc
• 2026/03/17 (ofbiz-framework) branch trunk updated (3475b96c67 -> 0dcd1faf18) jacopoc
• 2026/03/17 (ofbiz-framework) 02/02: Fixed: Enhance temporary file creation for image uploads by using original file extensions and ensuring safe copying to the destination jacopoc
• 2026/03/16 (ofbiz-framework) branch release24.09 updated: Fixed: Improve image upload handling by using file extensions for temporary files and ensuring safe copying of sanitized images jacopoc
• 2026/03/16 (ofbiz-framework) branch trunk updated: Fixed: Improve image upload handling by using file extensions for temporary files and ensuring safe copying of sanitized images jacopoc
• 2026/03/16 (ofbiz-framework) branch release24.09 updated: Improved: Allow opting-out from the whitelist-restricted static models in freemarker (OFBIZ-13371) jacopoc
• 2026/03/16 (ofbiz-framework) branch trunk updated: Improved: Allow opting-out from the whitelist-restricted static models in freemarker (OFBIZ-13371) jacopoc
• 2026/03/14 (ofbiz-framework) branch release24.09 updated: Improved the code of ProgramExport and did the sandboxing/sanitising enhancements for the groovy script use. (#984) ashish
• 2026/03/14 (ofbiz-framework) branch trunk updated: Improved the code of ProgramExport and did the sandboxing/sanitising enhancements for the groovy script use. (#984) ashish
• 2026/03/13 (ofbiz-framework) branch trunk updated: Abandoned: Dependency verification (OFBIZ-12186) jleroux
• 2026/03/13 Buildbot success in on ofbizBranch24FrameworkPlugins buildbot
• 2026/03/13 (ofbiz-framework) branch release24.09 updated: Improve parameter handling and JSON construction in form renderer and related macros (#982) ashish
• 2026/03/13 (ofbiz-framework) branch trunk updated: Improve parameter handling and JSON construction in form renderer and related macros (#982) ashish
• 2026/03/13 (ofbiz-framework) branch trunk updated: Enable rebase button in .asf.yaml of the trunk branch jacopoc
• 2026/03/12 Buildbot success in on ofbizTrunkFrameworkPlugins buildbot
• 2026/03/12 (ofbiz-plugins) branch trunk updated: Improved: Minor changes, Moved the ExampleTests.groovy file into the right folder. ashish
• 2026/03/12 Buildbot failure in on ofbizBranch24FrameworkPlugins buildbot
• 2026/03/12 (ofbiz-framework) branch release24.09 updated: Align securedLoginId cookie processing with JWT-based verification (#981) ashish
• 2026/03/11 (ofbiz-framework) branch trunk updated: Align securedLoginId cookie processing with JWT-based verification (#981) ashish
• 2026/03/11 Buildbot failure in on ofbizTrunkFrameworkPlugins buildbot
• 2026/03/11 (ofbiz-framework) 05/10: Improved: Enhance data resource validation and permission checks Backported from trunk af8ee514a2 with minor modifications. jacopoc
• 2026/03/11 (ofbiz-framework) 06/10: Fixed: Update viewShipmentLabel request to require authentication jacopoc
• 2026/03/11 (ofbiz-framework) 08/10: Fixed: Enhance sanitization of FreeMarker parameters to check both strings and lists jacopoc
• 2026/03/11 (ofbiz-framework) branch release24.09 updated (fa11d34490 -> 6b519ed996) jacopoc
• 2026/03/11 (ofbiz-framework) 01/10: Improved: Rename 2 UtilValidate class methods for clarity (OFBIZ-13160) Backported from trunk efb43da46a with minor modifications. jacopoc
• 2026/03/11 (ofbiz-framework) 09/10: Fixed: Enhance URL verification to handle jar URLs jacopoc
• 2026/03/11 (ofbiz-framework) 07/10: Fixed: Validate URLs in widget factories to reject invalid locations jacopoc
• 2026/03/11 (ofbiz-framework) 04/10: Implemented: Introduce RestrictedStaticModels to enforce whitelist access to static methods and fields by means of the FreeMarker "Static" shared variable jacopoc
• 2026/03/11 (ofbiz-framework) 02/10: Implemented: Remove demo secret keys from security.property and add a gradle task to generate and set the keys Backported from trunk 185c9a0406 with minor modifications. jacopoc
• 2026/03/11 (ofbiz-framework) 10/10: Improved: Enhance file upload validation with allowlist and path checks Backported from trunk da0febe182 with minor modifications. jacopoc
• 2026/03/11 (ofbiz-framework) 03/10: Improved: Enhance GroovyUtil with secure AST customizations for eval() expressions to implement an execution sandbox jacopoc
• 2026/03/11 (ofbiz-plugins) branch release24.09 updated: Improved: Remove unnecessary permissions and comment-out code in ecommerce templates and controller for better security and maintainability. jacopoc
• 2026/03/11 (ofbiz-framework) branch trunk updated (da0febe182 -> dd30bb1905) jleroux
• 2026/03/11 (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/dompurify-3.3.3 deleted (was 62471b0876) github-bot
• 2026/03/11 (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/dompurify-3.3.3 created (now 62471b0876) github-bot
• 2026/03/11 Buildbot success in on ofbizTrunkFrameworkPlugins buildbot
• 2026/03/11 (ofbiz-framework) branch trunk updated: Improved: Enhance file upload validation with allowlist and path checks jacopoc
• 2026/03/11 (ofbiz-framework) branch trunk updated: Fixed: Enhance URL verification to handle jar URLs jacopoc
• 2026/03/11 (ofbiz-framework) branch trunk updated: Fixed: Validate URLs in widget factories to reject invalid locations jacopoc
• 2026/03/11 (ofbiz-framework) branch trunk updated: Fixed: Enhance sanitization of FreeMarker parameters to check both strings and lists jacopoc
• 2026/03/11 (ofbiz-framework) branch trunk updated: Fixed: Update viewShipmentLabel request to require authentication jacopoc
• 2026/03/11 (ofbiz-framework) branch trunk updated: Improved: Enhance data resource validation and permission checks jacopoc
• 2026/03/11 (ofbiz-framework) branch trunk updated: Improved: Enhance GroovyUtil with secure AST customizations for eval() expressions to implement an execution sandbox jacopoc
• 2026/03/11 (ofbiz-framework) branch trunk updated: Implemented: Introduce RestrictedStaticModels to enforce whitelist access to static methods and fields by means of the FreeMarker "Static" shared variable jacopoc
• 2026/03/10 Buildbot failure in on ofbizTrunkFrameworkPlugins buildbot
• 2026/03/10 (ofbiz-plugins) branch trunk updated: Improved: Remove unnecessary permissions and comment-out code in ecommerce templates and controller for better security and maintainability. jacopoc
• 2026/03/10 (ofbiz-framework) branch trunk updated: Implemented: Remove demo secret keys from security.property and add a gradle task to generate and set the keys jacopoc
• 2026/03/10 (ofbiz-plugins) branch ai-agent-skills updated (02a3f48a0 -> e868741e8) arunpatidar
• 2026/03/10 (ofbiz-plugins) branch ai-agent-skills created (now 02a3f48a0) arunpatidar
• 2026/03/10 (ofbiz-plugins) 01/01: Added: AI Agent Skills plugin (OFBIZ-13367) arunpatidar
• 2026/03/09 (ofbiz-framework) branch release24.09 updated: Improved: Move solr component to Attic (OFBIZ-13220) jleroux
• 2026/03/05 (ofbiz-framework) branch trunk updated: Improved: Made wording for error during login consistent across supported languages (OFBIZ-13340) (#937) jleroux
• 2026/03/05 (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/dompurify-3.3.2 deleted (was 0c656bdd1d) github-bot
• 2026/03/05 (ofbiz-framework) branch trunk updated: Bump dompurify from 3.3.1 to 3.3.2 in /themes/common-theme/webapp/common-theme/js (#971) jleroux
• 2026/03/05 (ofbiz-plugins) branch release24.09 updated: Fixed : Remove obsolete enableRemoteStreaming from solrconfig.xml (OFBIZ-13368) (#153) jleroux
• 2026/03/05 (ofbiz-plugins) branch trunk updated: Fixed : Remove obsolete enableRemoteStreaming from solrconfig.xml (OFBIZ-13368) (#153) jleroux
• 2026/03/05 (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/dompurify-3.3.2 created (now 0c656bdd1d) github-bot
• 2026/03/01 (ofbiz-plugins) branch release24.09 updated: Bump rollup from 3.29.5 to 3.30.0 in /example/vite-react-app (#152) jleroux
• 2026/03/01 (ofbiz-plugins) branch release24.09 updated: Bump ajv from 6.12.6 to 6.14.0 in /projectmgr/webapp/projectmgr (#151) jleroux
• 2026/03/01 (ofbiz-plugins) branch trunk updated: Improved: Disable the Birt component in all branches (including trunk) because of CVE-2022-25371 (OFBIZ-12824) jleroux
• 2026/02/26 (ofbiz-site) 02/02: Improved: Enhance security vulnerability reporting guidelines on the security page jacopoc
• 2026/02/26 (ofbiz-site) 01/02: Improved: Update security page content and headings jacopoc
• 2026/02/26 (ofbiz-site) branch master updated (59a9b70 -> ab2872a) jacopoc
• 2026/02/26 (ofbiz-framework) branch trunk updated: Implemented: Expand SECURITY.md to provide a comprehensive security model and policy for the Apache OFBiz project. jacopoc
• 2026/02/25 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/rollup-3.30.0 deleted (was 6e5c498e2) github-bot
• 2026/02/25 (ofbiz-plugins) branch trunk updated: Bump rollup from 3.29.5 to 3.30.0 in /example/vite-react-app (#152) jleroux
• 2026/02/25 (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/rollup-3.30.0 created (now 6e5c498e2) github-bot
• 2026/02/24 Buildbot success in on ofbizBranch24Framework buildbot
• 2026/02/24 Buildbot failure in on ofbizBranch24Framework buildbot
• 2026/02/24 (ofbiz-framework) branch release24.09 updated: Fixed: ERR_TOO_MANY_REDIRECTS on stable demo (OFBIZ-13363) jleroux
• 2026/02/24 (ofbiz-site) branch master updated: Revert "Improved: This time all is down. Seems a DB issue in Docker." jleroux
• 2026/02/24 (ofbiz-framework) branch release24.09 updated: Fixed: Set template directory permissions in docker container images (OFBIZ-13363) (#967) jleroux
• 2026/02/24 (ofbiz-framework) branch trunk updated: Fixed: Set template directory permissions in docker container images (OFBIZ-13363) (#967) danwatford
• 2026/02/21 (ofbiz-plugins) branch dependabot/npm_and_yarn/projectmgr/webapp/projectmgr/ajv-6.14.0 deleted (was 99ee86cd7) github-bot
• 2026/02/21 (ofbiz-plugins) branch trunk updated: Bump ajv from 6.12.6 to 6.14.0 in /projectmgr/webapp/projectmgr (#151) jleroux
• 2026/02/19 (ofbiz-framework) branch trunk updated: Fixed: Some widget form targets violate security checks (OFBIZ-) jleroux
• 2026/02/19 (ofbiz-framework) branch release24.09 updated: Fixed: Some widget form targets violate security checks (OFBIZ-) jleroux
• 2026/02/19 (ofbiz-framework) branch trunk updated: No functional change, try to see if that helps on demo jleroux
• 2026/02/18 (ofbiz-site) branch master updated: Improved: This time all is down. Seems a DB issue in Docker. jleroux
• 2026/02/18 (ofbiz-site) branch master updated: Improved: next and trunk are currently unavailable jleroux
• 2026/02/18 (ofbiz-framework) branch trunk updated: Bump jquery-validation from 1.22.0 to 1.22.1 in /themes/common-theme/webapp/common-theme/js (#966) jleroux

• Earlier messages
• Later messages