Merge branch 'main' into main_2119_unassigned

Author: cstarcher

.github/pull_request_template.md

@@ -0,0 +1,24 @@
+## Description
+<!-- Briefly describe the changes and link relevant issues -->
+
+## Type of Change
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Breaking change
+
+## AI Usage Disclosure
+
+**AI Tool(s) Used Including Version:**
+<!-- (e.g., ChatGPT 5.3, Claude Opus 4.6, etc.) -->
+
+**Nature of Use:**
+  - [ ] Code generation
+  - [ ] Code suggestions/refactoring
+  - [ ] Documentation
+  - [ ] Tests
+  - [ ] Other (please describe)
+
+**Additional Description:**
+<!-- Briefly describe how AI was used -->
+
+- [ ] No AI Used

.github/workflows/build.yml

@@ -42,6 +42,8 @@ jobs:
           jq 'reduce inputs as $i (.; .source_files += $i.source_files)' target/coveralls.json coverage/coveralls.json > coveralls.json
 
       - name: "Send to Coveralls"
+        if: github.event_name != 'pull_request'
+        continue-on-error: true
         uses: MikeEdgar/github-action@raw_coverage_file
         with:
           github-token: ${{ secrets.github_token }}

COPYING.txt LICENSECOPYING.txt renamed to LICENSE

@@ -35,10 +35,11 @@ var appConfig = {
 
     /*
       Designate whether or not to use the local authentication.
-      Set this to true or false booleans or set it to the the string 'alternate'.
+      Set this to true or false booleans or set it to the literal strings (with quotes) 'alternate' or 'alternateAllowRegister'.
       When set to the boolean true, the login modal and registrations links are available.
       When set to the boolean false, a modal is not used and Shibboleth login is automatically attempted and no registration link is shown.
-      When set to the string 'alternate' to hide the local login (and registration) as if localAuthentication is false and provide an alterate (hidden) login page for local authentication.
+      When set to the string 'alternate' to hide the local login (and registration) as if localAuthentication is false and provide an alternate (hidden) login page for local authentication.
+      When set to the string 'alternateAllowRegister' to hide the local login the same way as 'alternate', but allow for account registration at the /signup route.
      */
     'localAuthentication': ${LOCAL_AUTHENTICATION},
 

LICENSE_NOTICE.txt LICENSE_NOTICELICENSE_NOTICE.txt renamed to LICENSE_NOTICE

@@ -0,0 +1,76 @@
+# AI Usage Policy
+
+The Vireo ETD project allows the responsible and transparent use of Artificial Intelligence (AI) tools in development. This policy is designed to provide flexibility for contributors while ensuring accountability, transparency, and compatibility with institutional policies.
+
+## Guiding Principles
+
+*   **Developer Discretion:** Use of AI tools is optional. Contributors may choose whether and how to use AI in their work.
+*   **Responsibility and Accountability:** All contributors are responsible for the code and content they submit. Any AI-assisted work must be reviewed, tested, and validated to meet project standards.
+*   **Institutional Compliance:** Contributors must ensure their use of AI tools complies with the policies of their home institutions and any applicable laws or regulations.
+*   **Transparency:** AI usage must be disclosed in pull requests to support review and project oversight.
+
+## Acceptable Uses
+
+AI tools may be used for:
+*   Code generation or suggestions
+*   Refactoring assistance
+*   Documentation drafting or editing
+*   Test creation
+*   Debugging support
+
+## Restricted Uses
+
+Contributors should not:
+*   Submit AI-generated content without review and validation
+*   Include sensitive or restricted data in AI prompts
+*   Introduce code with unclear licensing or intellectual property risks
+
+## AI Usage Disclosure Requirement
+
+All pull requests using AI must include an **AI Usage Disclosure** section. This disclosure helps reviewers understand how AI tools were used and allows project maintainers to track usage trends. If no AI tools were used, no AI disclosure is necessary.
+
+### Pull Request Template
+
+When submitting a pull request, please include the following section in your PR description:
+
+```markdown
+## Description
+<!-- Briefly describe the changes and link relevant issues -->
+
+## Type of Change
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Breaking change
+
+## AI Usage Disclosure
+
+**AI Tool(s) Used Including Version:**
+<!-- (e.g., ChatGPT 5.3, Claude Opus 4.6, etc.) -->
+
+**Nature of Use:**
+  - [ ] Code generation
+  - [ ] Code suggestions/refactoring
+  - [ ] Documentation
+  - [ ] Tests
+  - [ ] Other (please describe)
+
+**Additional Description:**
+<!-- Briefly describe how AI was used -->
+
+[ ] No AI Used
+```
+
+## Reviewer Guidance
+
+Reviewers may:
+*   Request clarification about AI-assisted contributions
+*   Apply additional scrutiny where appropriate
+*   Evaluate contributions based on quality, correctness, and maintainability
+
+*Note: The use of AI should not influence acceptance or rejection on its own.*
+
+## Policy Evolution
+
+This policy will evolve as AI tools and institutional requirements change. Contributors are encouraged to provide feedback to the Vireo User Group Steering Committee. 
+
+[Contact Us](https://texasdigitallibrary.atlassian.net/wiki/spaces/VUG/pages/2233303049/Contact+Us)

build/appConfig.js.template

@@ -48,7 +48,7 @@
     <dependency>
       <groupId>org.apache.tomcat.embed</groupId>
       <artifactId>tomcat-embed-core</artifactId>
-      <version>9.0.117</version>
+      <version>9.0.118</version>
     </dependency>
 
     <dependency>

ADVANCED_CUSTOMIZATION.md docs/ADVANCED_CUSTOMIZATION.mdADVANCED_CUSTOMIZATION.md renamed to docs/ADVANCED_CUSTOMIZATION.md

@@ -94,7 +94,7 @@ public synchronized User updateUserByCredentials(Credentials credentials) {
         } else {
             boolean isUserUpdated = false;
 
-            if (StringUtils.isNotEmpty(shibNetid) && (user.getNetid() == null || !user.getNetid().equals(shibNetid))) {
+            if (StringUtils.isNotEmpty(shibNetid) && (user.getNetid() == null || (user.getNetid().trim().length() < 1) || !user.getNetid().equals(shibNetid))) {
                 user.setNetid(shibNetid);
                 isUserUpdated = true;
             }