Actions: dotCMS/core
Actions
1,733 workflow runs
1,733 workflow runs
/api/v1/system/status) now evaluates Content Analytics readiness
through three sequential checks rather than firing a write event to the
analytics pipeline.
## Changes
### New: Health enum (`com.dotcms.rest.api.v1.syste...
-2 Merge Group Check
#2806:
Merge group checks requested
ServerProperties.WADL_FEATURE_DISABLE=true in DotRestApplication
- /api/application.wadl now returns 404 instead of exposing a
machine-readable inventory of all REST endpoints without authentication
- Enables Maven build cache for faster incremental builds
## Test plan
- [ ] Start dotCMS and verify GET /api/application.wadl returns
404/405
- [ ] Verify all oth...
-2 Merge Group Check
#2804:
Merge group checks requested
.github/workflows/ai_claude-rollback-safety.yml for
managing rollback safety checks as a standalone workflow.
- Moved claude-rollback-safety-check logic from
ai_claude-orchestrator.yml to the new file for better separation of
concerns.
- Introduced a security-check job to ensure only authorized dotCMS
organization members can trigger the workflow.
- Added a preflight-clear-stale-labels step to remove outda...
-2 Merge Group Check
#2803:
Merge group checks requested
/ →
Contentlets → \<ContentType\>), spaces appear in the input but the
result list does not refine. Root cause:
SuggestionsService.getContentlets interpolated the user filter into
+catchall:*${filter}* title:'${filter}'^15. With a multi-word filter
like `White ...
-2 Merge Group Check
#2802:
Merge group checks requested
pi pi-copy, next to the bookmark star)
- the browser URL pill (pi pi-link, on the pill that shows the URL
itself)
Both buttons opened the same $pageURLS popover and called the same
toast. The pill version was added in #35417 when the URL pill itself was
introduced. Since ...
-2 Merge Group Check
#2801:
Merge group checks requested
/ →
Contentlets → \<ContentType\>), spaces appear in the input but the
result list does not refine. Root cause:
SuggestionsService.getContentlets interpolated the user filter into
+catchall:*${filter}* title:'${filter}'^15. With a multi-word filter
like `White ...
-2 Merge Group Check
#2797:
Merge group checks requested
getContentletReferences and
getAllContentletReferencesCount to require AnonymousAccess.NONE,
ensuring unauthenticated callers are blocked.
- Added tests to verify that unauthorized (anonymous) requests throw
SecurityException as expected, mapping to HTTP 401 responses.
- Enhanced OpenAPI documentation, adding 403 Forbidden responses to
describe cases where users lack contentlet read perm...
-2 Merge Group Check
#2796:
Merge group checks requested
git
commit, which takes minutes and exits non-zero even for valid commits —
blocking the skill.
- Step 7 now runs git commit --no-verify automatically instead of just
printing a suggested message.
- Added missing git tool permissions to allowed-tools (git commit,
git add, git show-ref, git status, git push, git checkout).
...
-2 Merge Group Check
#2795:
Merge group checks requested
subscript and superscript mark handling to the renderMarks
macro in dotCMS/src/main/webapp/WEB-INF/velocity/VM_global_library.vm
— previously these marks were silently dropped during Story Block HTML
rendering even though the Block Editor (TipTap) registers both
extensions.
- Branches are added to both the opening loop and the closing
reverse-range loop so nested ...
-2 Merge Group Check
#2794:
Merge group checks requested
/api/portlet/rules/include was still returning **HTTP 200** with
unable to parse: … debug HTML instead of the expected **400 / 404**
for missing/invalid/non-existent id values, even after #35337 merged.
Verified on main.
### Root cause
When a JSP raises any Throwable, Tomcat/Jasper wraps it in a
`Ja...
-2 Merge Group Check
#2793:
Merge group checks requested
CategoryForm declared private boolean active; (a Java primitive that
defaults to false). Because CategoriesResource.fillAndSave() runs
BeanUtils.copyProperties(category, categoryForm) on POST, an omitted
active field on the request silently overwrote the Category model's
true default — every category created from the new Angular categories
portlet (which doesn't send active) was cre...
-2 Merge Group Check
#2790:
Merge group checks requested
BLOCK_FOLDER_DELETE_WITH_LIVE_CONTENT) to
enable/disable the guard
- Uses lazy initialization for the config flag
## Cherry-picked commits
- 839ed42 block-folder-delete-with-live-content
- 32e3936 Issue 35310: block folder delete when n...
-2 Merge Group Check
#2789:
Merge group checks requested
libjemalloc2 and libmimalloc2.0 in the runtime image
(dotCMS/src/main/docker/original/Dockerfile) and the dev-env image
(docker/dev-env/Dockerfile).
- Switch th...
-2 Merge Group Check
#2787:
Merge group checks requested
PageScannerResource to accept injectable HttpClient
via package-private constructor
- [x] Write PageScannerResourceTest covering:
- [x] App not configured (a11y) → 503
- [x] App not configured (geo) → 503
- [x] Missing apiAuthToken → 503
- [x] Empty apiUrl + apiAuthToken → 503
- [x] Token generation fails → 500
- [x] ...
-2 Merge Group Check
#2786:
Merge group checks requested
dot-ca-event-manager\ service, replacing
the previous CubeJS-based analytics integration.
### Key Changes
- **New \EventAnalyticsProxyResource\** (\/v1/analytics/**\): A
JAX-RS REST resource that acts as a transparent proxy between the dotCMS
frontend/clients and the \`dot-ca-event-manager...
-2 Merge Group Check
#2785:
Merge group checks requested
dot-ca-event-manager\ service, replacing
the previous CubeJS-based analytics integration.
### Key Changes
- **New \EventAnalyticsProxyResource\** (\/v1/analytics/**\): A
JAX-RS REST resource that acts as a transparent proxy between the dotCMS
frontend/clients and the \`dot-ca-event-manager...
-2 Merge Group Check
#2784:
Merge group checks requested
dot-ca-event-manager\ service, replacing
the previous CubeJS-based analytics integration.
### Key Changes
- **New \EventAnalyticsProxyResource\** (\/v1/analytics/**\): A
JAX-RS REST resource that acts as a transparent proxy between the dotCMS
frontend/clients and the \`dot-ca-event-manager...
-2 Merge Group Check
#2783:
Merge group checks requested