Conversation
…lood guard, minor hardening #12435
update keycloak conf to 26.7.0 and remove user-store-qa from persistence.xml used to create spi jar file.
…/setup-java-5.6.0 chore(deps): bump actions/setup-java from 5 to 5.6.0
Added a comment regarding Flyway usage for additional indexes to improve download count query performance.
Verified messages are coming from Bundle. IN addition to the issue noted by AI (The only latent (pre-existing, out of scope) oddity is at line 231-233 where messageSummary/third constructor arg ordering looks slightly off (parseMessages(errors) result assigned to messageSummary, then messageSummaryFail passed as the detail argument) — this bug predates this PR and isn't touched by it, just worth flagging separately if not already known.), as far as I can tell, the PasswordResetPage.resetPassword method tries to send a message to the UI but, due to the switch to the /dataverse.xhtml page, it isn't shown. Again, not related to the PR, so merging.
…login-action-4.5.2 chore(deps): bump docker/login-action from 4 to 4.5.2 - I asked AI, most of the changes were to OIDC login which we don't use, so not expecting any issues.
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.2 to 4.6.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v4.5.2...v4.6.0) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.4 to 4.37.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.37.4...v4.37.7) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.6.0 to 5.7.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@v5.6.0...v5.7.0) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…/setup-java-5.7.0 chore(deps): bump actions/setup-java from 5.6.0 to 5.7.0
…codeql-action-4.37.7 chore(deps): bump github/codeql-action from 4.37.4 to 4.37.7
…login-action-4.6.0 chore(deps): bump docker/login-action from 4.5.2 to 4.6.0
…omponents.client5-httpclient5-5.6.3 chore(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.2.1 to 5.6.3
More JsonUtil additions and forbidden Json.* calls
…uild-failures-configbaker Add retry logic to curl commands in configbaker Dockerfile
Retention period edge case
Switch to Dataverse SPI 2.1.0-M1 release
…adcrumb-fix IQSS 12692 - missing ui:params
…vard/487-fix-dataverse-mgmt-menu Fix access to manage permissions menu
6.12 release notes
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 6.0.0 to 6.0.1. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@v6.0.0...v6.0.1) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.9 to 4.38.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.37.9...v4.38.0) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
As per discussion on Zulip, making this known to the public as interest has sparked. Marking it experimental, as it is a new, experimental feature.
docs(admin): add locally fair to list of features in admin guide
…codeql-action-4.38.0 chore(deps): bump github/codeql-action from 4.37.9 to 4.38.0
…/setup-java-6.0.1 chore(deps): bump actions/setup-java from 6.0.0 to 6.0.1
Clarify Locally FAIR description in admin guide
Co-authored-by: Oliver Bertuch <poikilotherm@users.noreply.github.com>
warn that Payara 7.2026.9 doesn't "just work". Link to #12715
bump to version 6.12
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
Comment on lines
+168
to
+184
| needs: integration-test | ||
| name: Check for Secrets Availability | ||
| runs-on: ubuntu-latest | ||
| outputs: | ||
| available: ${{ steps.secret-check.outputs.available }} | ||
| steps: | ||
| - id: secret-check | ||
| # perform secret check & put boolean result as an output | ||
| shell: bash | ||
| run: | | ||
| if [ "${{ secrets.SONAR_TOKEN }}" != '' ]; then | ||
| echo "available=true" >> "$GITHUB_OUTPUT"; | ||
| else | ||
| echo "available=false" >> "$GITHUB_OUTPUT"; | ||
| fi | ||
|
|
||
| sonarcloud: |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
| assertTrue(false, "Unexpected XMLStreamException when attempting to parse the dataDscr section: " + xse.getMessage()); | ||
| } finally { | ||
| if (xmlr != null) { | ||
| try {xmlr.close();} catch (XMLStreamException e) {} |
There was a problem hiding this comment.
🚫 [reviewdog] <com.puppycrawl.tools.checkstyle.checks.blocks.LeftCurlyCheck> reported by reviewdog 🐶
'{' at column 21 should have line break after.
|
Coverage is 25.412% — develop into master. No base build found for |
This comment has been minimized.
This comment has been minimized.
|
📦 Pushed preview images as 🚢 See on GHCR. Use by referencing with full name as printed above, mind the registry name. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
17 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this PR does / why we need it:
Which issue(s) this PR closes:
Special notes for your reviewer:
Suggestions on how to test this:
Does this PR introduce a user interface change? If mockups are available, please link/include them here:
Is there a release notes update needed for this change?:
Additional documentation: