Merge pull request #4796 from OpenLiberty/26.0.0.4-post

Update 26.0.0.4-post into draft

Author: navaneethsnair1

blog_tags.json

@@ -2,7 +2,8 @@
     "blog_tags": [
         {
             "name": "announcements",
-            "posts": ["26.0.0.4-beta", "26.0.0.3", "26.0.0.3-beta", 
+            "posts": ["26.0.0.4", "26.0.0.4-beta", 
+                      "26.0.0.3", "26.0.0.3-beta", 
                       "26.0.0.2", "26.0.0.2-beta", 
                       "26.0.0.1", "26.0.0.1-beta", 
                       "25.0.0.12", "25.0.0.12-beta", 
@@ -100,7 +101,8 @@
             "featured": "true"
         },{
             "name": "microprofile",
-            "posts": ["26.0.0.3", "25.0.0.8", "25.0.0.7-beta", 
+            "posts": ["26.0.0.4", "26.0.0.3", 
+                      "25.0.0.8", "25.0.0.7-beta", 
                       "25.0.0.6", "25.0.0.6-beta", 
                       "25.0.0.5", "25.0.0.4", 
                       "25.0.0.4-beta", "microprofile-telemetry-20",
@@ -175,7 +177,8 @@
         },
         {
             "name": "java-se",
-            "posts": ["26.0.0.4-beta", "26.0.0.3", "25.0.0.10", 
+            "posts": ["26.0.0.4", "26.0.0.4-beta", 
+                      "26.0.0.3", "25.0.0.10", 
                       "25.0.0.10-beta", "25.0.0.6", 
                       "25.0.0.6-beta", "25.0.0.4", 
                       "25.0.0.4-beta", "24.0.0.10",
@@ -196,7 +199,8 @@
         },
         {
             "name": "release",
-            "posts": ["26.0.0.4-beta", "26.0.0.3", "26.0.0.3-beta", 
+            "posts": ["26.0.0.4", "26.0.0.4-beta", 
+                      "26.0.0.3", "26.0.0.3-beta", 
                       "26.0.0.2", "26.0.0.2-beta", 
                       "26.0.0.1", "26.0.0.1-beta", 
                       "25.0.0.12", "25.0.0.12-beta", 
@@ -331,7 +335,8 @@
         },
         {
             "name": "security",
-            "posts": ["26.0.0.4-beta", "26.0.0.3", "25.0.0.12", "25.0.0.12-beta", 
+            "posts": ["26.0.0.4", "26.0.0.4-beta", "26.0.0.3", 
+                      "25.0.0.12", "25.0.0.12-beta", 
                       "25.0.0.9", "25.0.0.9-beta", 
                       "25.0.0.3", "25.0.0.3-beta",
                       "25.0.0.2", "25.0.0.1-beta",

posts/2026-04-21-26.0.0.4.adoc

@@ -22,7 +22,7 @@ This release introduces support for selecting JWT signature algorithms from JOSE
 
 In link:{url-about}[Open Liberty] 26.0.0.4:
 
-* <<TAG_1, File Transfer changes for 26.0.0.4>>
+* <<file_transfer, File Transfer changes for 26.0.0.4>>
 * <<ltpa, Default LTPA keys password removal>>
 * <<jwt,  Support selecting JWT signature and decryption algorithms from JOSE header>>
 * <<java_26, Support for Java 26>>
@@ -111,17 +111,13 @@ If you're using link:https://plugins.jetbrains.com/plugin/14856-liberty-tools[In
 [link=https://stackoverflow.com/tags/open-liberty]
 image::img/blog/blog_btn_stack.svg[Ask a question on Stack Overflow, align="center"]
 
-[#TAG_1]
+[#file_transfer]
 === File Transfer changes for 26.0.0.4
 Liberty's FileService MBean provided by the `restConnector-2.0` feature now includes an extra `blocklist` attribute. This attribute is configured by the `<blockDir>` config element in the `server.xml` file. The default value of this attribute is `${server.output.dir}/resources/security`. This behavior change resolves the security vulnerability link:https://github.com/advisories/GHSA-c39w-6qgm-5cp7[CVE-2025-14915], by restricting default FileTransfer access to `${server.output.dir}/resources/security`. 
 
 If FileTransfer access to `${server.output.dir}/resources/security` is required, the original behavior can be restored by setting an empty blocklist.
 
-For more information, see:
-
-* link:https://www.ibm.com/docs/en/was-liberty/nd?topic=liberty-list-provided-mbeans#rwlp_mbeans_list__FileService[]
-* link:https://www.ibm.com/docs/en/was-liberty/nd?topic=liberty-list-provided-mbeans#rwlp_mbeans_list__FileTransfer[]
-* link:https://www.ibm.com/docs/en/was-liberty/nd?topic=manually-file-transfer[]
+For more information, see the link:https://www.ibm.com/docs/en/was-liberty/nd?topic=manually-file-transfer[documentation].
 
 [#ltpa]
 == Default LTPA keys password removal