Actions: dotCMS/core
Actions
1,871 workflow runs
1,871 workflow runs
providerConfig JSON in
the dotAI config UI from dall-e-3 to gpt-image-1
- **Image Playground overflow**: fix JSON.stringify(json, 2) (wrong
signature — JSON was not pretty-printed) and add overflow-wrap,
word-break, and <pre> wrapping so the response JSON no longer
ov...
-2 Merge Group Check
#3003:
Merge group checks requested
FEATURE_FLAG_REPORT_ISSUE_ENABLED (default **false**) to gate
the "Report an Issue" entry in the toolbar user menu added by #35717.
- Whitelists the new key in ConfigurationResource and exposes it in
the frontend FeaturedFlags enum so DotPropertiesService can read it.
- Flag check intentionally lives in DotToolbarUserComponent (not the
store) so it can be cleanly removed once the...
-2 Merge Group Check
#3002:
Merge group checks requested
EncryptPlainPasswordsJob** — a Quartz StatefulJob that runs
every 5 minutes, scans the user_ table for rows whose
passwordEncrypted flag is false, hashes the cleartext value via
PasswordFactoryProxy.generateHash, and flips the flag to true.
Defense-in-depth against any code path that lands a plaintext password
in user_.password_ — migrations, bulk imports, manual SQL r...
-2 Merge Group Check
#3001:
Merge group checks requested
language_id = -1 FK violation when their request bodies omit
languageId
and WorkflowResource falls back to the -1L default.
This is **Option B** from #35780 — Postman fixture hardening. Option A
(server-side fail-fast in
WorkflowResource.fireActionDefaultSinglePart) is intentionally **out
of scope** here; the goal of...
-2 Merge Group Check
#3000:
Merge group checks requested
.github/scripts/release-qa-status/ (TypeS...
-2 Merge Group Check
#2999:
Merge group checks requested
language_id = -1 FK violation when their request bodies omit
languageId
and WorkflowResource falls back to the -1L default.
This is **Option B** from #35780 — Postman fixture hardening. Option A
(server-side fail-fast in
WorkflowResource.fireActionDefaultSinglePart) is intentionally **out
of scope** here; the goal of...
-2 Merge Group Check
#2998:
Merge group checks requested
.github/scripts/release-qa-status/ (TypeS...
-2 Merge Group Check
#2997:
Merge group checks requested
EncryptPlainPasswordsJob** — a Quartz StatefulJob that runs
every 5 minutes, scans the user_ table for rows whose
passwordEncrypted flag is false, hashes the cleartext value via
PasswordFactoryProxy.generateHash, and flips the flag to true.
Defense-in-depth against any code path that lands a plaintext password
in user_.password_ — migrations, bulk imports, manual SQL r...
-2 Merge Group Check
#2996:
Merge group checks requested
providerConfig JSON in
the dotAI config UI from dall-e-3 to gpt-image-1
- **Image Playground overflow**: fix JSON.stringify(json, 2) (wrong
signature — JSON was not pretty-printed) and add overflow-wrap,
word-break, and <pre> wrapping so the response JSON no longer
ov...
-2 Merge Group Check
#2995:
Merge group checks requested
RequestCostApiImpl monitor scheduler tick
(default 60s, controlled by REQUEST_COST_TIME_WINDOW_SECONDS) — no new
threads, no new schedulers.
- HTTP POST runs on DotConcurrentFactory.getInstance().getSubmitter()
so a slow or dead collector ...
-2 Merge Group Check
#2993:
Merge group checks requested
RequestCostApiImpl monitor scheduler tick
(default 60s, controlled by REQUEST_COST_TIME_WINDOW_SECONDS) — no new
threads, no new schedulers.
- HTTP POST runs on DotConcurrentFactory.getInstance().getSubmitter()
so a slow or dead collector ...
-2 Merge Group Check
#2991:
Merge group checks requested
EncryptPlainPasswordsJob** — a Quartz StatefulJob that runs
every 5 minutes, scans the user_ table for rows whose
passwordEncrypted flag is false, hashes the cleartext value via
PasswordFactoryProxy.generateHash, and flips the flag to true.
Defense-in-depth against any code path that lands a plaintext password
in user_.password_ — migrations, bulk imports, manual SQL r...
-2 Merge Group Check
#2990:
Merge group checks requested
RequestCostApiImpl monitor scheduler tick
(default 60s, controlled by REQUEST_COST_TIME_WINDOW_SECONDS) — no new
threads, no new schedulers.
- HTTP POST runs on DotConcurrentFactory.getInstance().getSubmitter()
so a slow or dead collector ...
-2 Merge Group Check
#2989:
Merge group checks requested
EncryptPlainPasswordsJob** — a Quartz StatefulJob that runs
every 5 minutes, scans the user_ table for rows whose
passwordEncrypted flag is false, hashes the cleartext value via
PasswordFactoryProxy.generateHash, and flips the flag to true.
Defense-in-depth against any code path that lands a plaintext password
in user_.password_ — migrations, bulk imports, manual SQL r...
-2 Merge Group Check
#2988:
Merge group checks requested
.github/scripts/release-qa-status/ (TypeS...
-2 Merge Group Check
#2987:
Merge group checks requested
ConfigurationResource):** recoveryFromConfig previously
fell through to Config.getStringProperty for all unprefixed
FEATURE_FLAG_* keys, returning raw strings ("True", "FALSE",
"1") that the frontend could not reliably coerce. A new
BOOLEAN_FEATURE_FLAGS set identifies every boolean flag in the
whitelist. For those keys, a dedicated `par...
-2 Merge Group Check
#2985:
Merge group checks requested
GET /api/v1/workflow/contenttypes/schemes endpoint
(findAllSchemesByContentTypeList) that accepts a comma-separated
contentTypeIds query parameter and returns workflow schemes grouped by
content type
* Created AbstractContentTypeWorkflowSchemesView (Immutables) with
contentTypeId + contentTypeSchemes fields, and
ResponseEntityContentTypeWorkflowSchemesView as the typed resp...
-2 Merge Group Check
#2984:
Merge group checks requested
dijit.form.DateTextBox) for each date and date_time field in the
selected content type
- Pickers automatically build a Lucene range value ([YYYYMMDD000000 TO
YYYYMMDD235959]) stored in the existing hidden field consumed by
ContentletAjax — no backend changes required
- `clearSearc...
-2 Merge Group Check
#2981:
Merge group checks requested
.github/filters.yaml to include refined exclusion patterns
under specific directories:
- Added
dotCMS/src/main/webapp/WEB-INF/messages/!(Language*.properties) to
avoid excluding language property files.
- Updated patterns to ensure that non-relevant changes in
src/main/webapp/html and WEB-INF/messages directories are correctly
filtered.
- Updated area_backend filters to align with the modified path
matching rul...
-2 Merge Group Check
#2980:
Merge group checks requested
AllPushPublishEndpointsFailureEvent and
SinglePushPublishEndpointFailureEvent with an optional
List<EndpointFailureDetail> payload (new EndpointFailureDetail value
object + FailureCategory enum). Subscribers can now distinguish
authentication, authorization, server, network and bundle failures,
capture HTTP status codes, and inspect a per-endpoint retryable hint.
- **Backwar...
-2 Merge Group Check
#2979:
Merge group checks requested