Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1450 commits
Select commit Hold shift + click to select a range
d6e84fd
Fix updateMissingBitstreams to use single database operation instead …
Aug 13, 2018
677bea1
Fix types used in updateMissingBitstreams HQL
minurmin Aug 15, 2025
a203576
Merge pull request #11757 from DSpace/backport-10500-to-dspace-7_x
tdonohue Jan 15, 2026
8488f06
Add DataCite sandbox url to crosswalk
dheles Jan 21, 2026
c4e7659
Merge pull request #11765 from DSpace/backport-11763-to-dspace-7_x
tdonohue Jan 21, 2026
9d9c031
ZCU-PUB/The bitstream name is encoded in the URL. Updated the test to…
milanmajchrak Apr 15, 2025
fe54d80
Make sure that bitstream downloads have a content-disposition header set
markpatton Dec 15, 2025
aaf6d11
Merge pull request #11773 from DSpace/backport-11737-to-dspace-7_x
tdonohue Jan 23, 2026
a357519
Merge pull request #11776 from DSpace/backport-11689-to-dspace-7_x
tdonohue Jan 23, 2026
f73c38b
Merge pull request #11709 from DSpace/dependabot/maven/dspace-7_x/pdf…
alanorth Jan 26, 2026
9054297
build(deps): bump log4j.version from 2.25.2 to 2.25.3
dependabot[bot] Jan 26, 2026
8a9e5b7
Merge pull request #11731 from DSpace/dependabot/maven/dspace-7_x/log…
alanorth Jan 26, 2026
a70b71f
#11792 Bug fix link checker stops when url has spaces
zhaw-hsb Jan 26, 2026
cf4b044
checkstyle removed trailing spaces
zhaw-hsb Jan 26, 2026
1883352
Merge pull request #11802 from DSpace/backport-11793-to-dspace-7_x
tdonohue Jan 27, 2026
b434d84
Bump the build-tools group with 4 updates
dependabot[bot] Feb 1, 2026
1efdd27
Bump the fasterxml group with 4 updates
dependabot[bot] Feb 1, 2026
4ebae21
Bump org.apache.bcel:bcel from 6.11.0 to 6.12.0
dependabot[bot] Feb 1, 2026
ca4ff14
Bump dnsjava:dnsjava from 3.6.3 to 3.6.4
dependabot[bot] Feb 1, 2026
6fe8d46
Bump org.postgresql:postgresql from 42.7.8 to 42.7.9
dependabot[bot] Feb 1, 2026
e7117be
build(deps): bump the amazon-s3 group with 2 updates
dependabot[bot] Feb 1, 2026
baa994f
Bump the apache-commons group across 1 directory with 4 updates
dependabot[bot] Feb 1, 2026
3368625
Move same-collection check to inheritDefaultPolicies move method
toniprieto Feb 3, 2026
3a458ad
Merge pull request #11863 from DSpace/backport-11859-to-dspace-7_x
tdonohue Feb 4, 2026
6e60ed1
Merge pull request #11825 from DSpace/dependabot/maven/dspace-7_x/org…
alanorth Feb 9, 2026
97ff5e7
Merge pull request #11826 from DSpace/dependabot/maven/dspace-7_x/dns…
alanorth Feb 9, 2026
31df0a5
Merge pull request #11824 from DSpace/dependabot/maven/dspace-7_x/fas…
alanorth Feb 9, 2026
4329375
Merge pull request #11732 from DSpace/dependabot/maven/dspace-7_x/io.…
alanorth Feb 9, 2026
65c880a
Merge pull request #11827 from DSpace/dependabot/maven/dspace-7_x/org…
alanorth Feb 9, 2026
9bef110
Merge pull request #11823 from DSpace/dependabot/maven/dspace-7_x/bui…
alanorth Feb 9, 2026
ed0afda
Merge pull request #11841 from DSpace/dependabot/maven/dspace-7_x/apa…
alanorth Feb 10, 2026
52d4e83
build(deps): bump the test-tools group with 7 updates
dependabot[bot] Feb 10, 2026
eddc804
Merge pull request #11729 from DSpace/dependabot/maven/dspace-7_x/tes…
alanorth Feb 10, 2026
aec2050
Merge pull request #11666 from DSpace/dependabot/maven/dspace-7_x/ama…
tdonohue Feb 10, 2026
f728ae0
added test for getVetsion, fix null pointer exception
Paurikova2 Dec 11, 2025
9cc2e58
fix info message
Paurikova2 Dec 11, 2025
65d7c61
added restoreAuthSystemState to finally block
Paurikova2 Dec 11, 2025
198f2d6
removed empty lines because of the trailing whitespace
Paurikova2 Dec 11, 2025
1e3512f
Merge pull request #11884 from DSpace/backport-11677-to-dspace-7_x
tdonohue Feb 11, 2026
66b4d01
Type date browse startsWith functionality - input date as start date,…
MarieVerdonck Feb 11, 2026
55c5dd3
Merge pull request #11891 from tdonohue/port_10056_to_7x
tdonohue Feb 11, 2026
490f907
return 404 instead of 401 for deleted bitstreams
jesielviana Feb 9, 2026
2039318
Merge pull request #11894 from tdonohue/port_11655_to_7x
tdonohue Feb 12, 2026
6a781f6
Fix broken tests due to random order execution. When CreateMissingId…
tdonohue Feb 13, 2026
6704283
Merge pull request #11907 from DSpace/backport-11905-to-dspace-7_x
tdonohue Feb 13, 2026
44b73e1
Merge pull request #11293 from dataquest-dev/ldap-no-email-fix
tdonohue Feb 13, 2026
fe222ad
Update community indexing to include all ancestor communities, not ju…
toniprieto Nov 29, 2025
892d611
Replace separate community/collection admin checks with unified isCom…
toniprieto Nov 29, 2025
7427e4c
Refactor permission indexing to store only direct object permissions …
toniprieto Nov 29, 2025
c8b8888
Introduce integration tests for the new authorization-based endpoints…
toniprieto Nov 29, 2025
edfe917
Adapt getSubmitAuthorizedTypes to use inherited permissions
toniprieto Dec 4, 2025
14d64e8
build(deps): bump the test-tools group with 6 updates
dependabot[bot] Feb 16, 2026
7da4b55
build(deps): bump io.grpc:grpc-context from 1.78.0 to 1.79.0
dependabot[bot] Feb 16, 2026
60a5a3f
Merge pull request #11953 from toniprieto/solr-authorization-searches-7x
tdonohue Feb 18, 2026
3faf993
Install Apache Ant via apt-get instead of manual download. Manual dow…
tdonohue Feb 18, 2026
e8be734
Merge pull request #11922 from DSpace/dependabot/maven/dspace-7_x/tes…
alanorth Feb 19, 2026
43cfdb7
Merge pull request #11958 from DSpace/backport-11957-to-dspace-7_x
alanorth Feb 19, 2026
2cf99fd
build(deps): bump org.postgresql:postgresql from 42.7.9 to 42.7.10
dependabot[bot] Feb 20, 2026
2c496c3
build(deps): bump the build-tools group with 2 updates
dependabot[bot] Feb 20, 2026
865b908
build(deps): bump the amazon-s3 group with 2 updates
dependabot[bot] Feb 20, 2026
278b857
Pin jboss-logging version
alanorth Feb 20, 2026
8573a99
Merge pull request #11979 from alanorth/jboss-logging-dspace-7_x
tdonohue Feb 20, 2026
7c969de
Merge pull request #11978 from DSpace/dependabot/maven/dspace-7_x/org…
bram-atmire Feb 20, 2026
447e264
Merge pull request #11923 from DSpace/dependabot/maven/dspace-7_x/ama…
bram-atmire Feb 20, 2026
cbe154f
Merge pull request #11918 from DSpace/dependabot/maven/dspace-7_x/bui…
bram-atmire Feb 20, 2026
594cb18
Merge pull request #11942 from DSpace/dependabot/maven/dspace-7_x/io.…
bram-atmire Feb 20, 2026
00d72a1
Merge pull request #11995 from atmire/w2p-138764_fix-11880-openaire-x…
AbhinavS96 Feb 24, 2026
0a52d15
remove unsed collection definition
paulo-graca Feb 25, 2026
6b2e1f9
empty submission definition collections
paulo-graca Feb 25, 2026
3b000d7
adjust test for fixing issue - 10750
paulo-graca Feb 25, 2026
01c2472
Merge pull request #12002 from paulo-graca/bugfix-issue-10750-ds7
tdonohue Feb 25, 2026
cdd5ca0
build(deps): bump docker/build-push-action from 5 to 6
dependabot[bot] Feb 27, 2026
7734a57
build(deps): bump actions/checkout from 4 to 6 (#12021)
dependabot[bot] Mar 1, 2026
327dd3e
build(deps): bump toshimaru/auto-author-assign from 2.1.0 to 3.0.1 (#…
dependabot[bot] Mar 1, 2026
4a0f712
build(deps): bump the amazon-s3 group with 2 updates (#12025)
dependabot[bot] Mar 1, 2026
c416fb0
build(deps): bump actions/setup-java from 4 to 5
dependabot[bot] Mar 1, 2026
3349833
build(deps): bump korthout/backport-action from 2 to 4
dependabot[bot] Mar 1, 2026
c872c7c
build(deps): bump the fasterxml group with 2 updates
dependabot[bot] Mar 2, 2026
c280dac
build(deps): bump Wandalen/wretry.action from 1.3.0 to 3.8.0
dependabot[bot] Mar 2, 2026
99e8e21
build(deps): bump actions/add-to-project from 1.0.0 to 1.0.2
dependabot[bot] Mar 2, 2026
726079a
chore(submission): set repeatable=false for dc.description in bitstre…
MMilosz Mar 2, 2026
06a47e8
Merge pull request #12073 from DSpace/backport-12053-to-dspace-7_x
tdonohue Mar 2, 2026
ac38fe3
Merge pull request #11241 from atmire/w2p-127822_changes-due-to-poten…
tdonohue Mar 2, 2026
31cce39
Merge pull request #12072 from DSpace/dependabot/github_actions/dspac…
tdonohue Mar 2, 2026
9f71de9
Merge pull request #12068 from DSpace/dependabot/maven/dspace-7_x/fas…
alanorth Mar 3, 2026
ce0ed17
Merge pull request #12016 from DSpace/dependabot/github_actions/dspac…
tdonohue Mar 3, 2026
6d259ca
Merge pull request #12017 from DSpace/dependabot/github_actions/dspac…
tdonohue Mar 3, 2026
73c2225
Merge pull request #12019 from DSpace/dependabot/github_actions/dspac…
tdonohue Mar 3, 2026
05e5ff3
Merge pull request #12071 from DSpace/dependabot/github_actions/dspac…
tdonohue Mar 3, 2026
7221e16
build(deps): bump actions/download-artifact from 4 to 8
dependabot[bot] Mar 3, 2026
33fe292
Merge pull request #12084 from DSpace/dependabot/github_actions/dspac…
tdonohue Mar 5, 2026
4b74657
fix multiple empty datasite:sizes tags
Mar 3, 2026
bae24a4
Merge pull request #12100 from DSpace/backport-12099-to-dspace-7_x
tdonohue Mar 11, 2026
ecd76cf
Update authorized Solr searches to escape queries and include dc.titl…
toniprieto Feb 20, 2026
2031bb3
Merge pull request #12107 from DSpace/backport-12093-to-dspace-7_x
kshepherd Mar 12, 2026
218d036
[DURACOM-389] Import from external sources creates invalid metadata
Sep 23, 2025
dbf1493
Merge pull request #12121 from DSpace/backport-11335-to-dspace-7_x
nwoodward Mar 13, 2026
92cf7e6
build(deps): bump software.amazon.awssdk:s3 in the amazon-s3 group (#…
dependabot[bot] Mar 19, 2026
9644e9c
Optimize SQL query in findByEPerson to enhance performance when retri…
toniprieto Oct 29, 2025
724a21b
Merge pull request #12137 from DSpace/backport-11472-to-dspace-7_x
bram-atmire Mar 21, 2026
955a6d0
Replace webui.content_disposition_format with webui.content_dispositi…
tdonohue Feb 17, 2026
abd7932
Enable inline display by default for common, generally safe formats
tdonohue Mar 13, 2026
6c39379
Fix bug with starting up localstack for S3 testing by pinning to 4.14…
tdonohue Mar 24, 2026
c414997
Merge pull request #12149 from tdonohue/port_11956_to_7x
tdonohue Mar 24, 2026
429df10
build(deps): bump pdfbox-version from 3.0.6 to 3.0.7
dependabot[bot] Apr 1, 2026
2149dd0
build(deps): bump tika.version from 3.2.3 to 3.3.0
dependabot[bot] Apr 1, 2026
c234471
build(deps): bump docker/build-push-action from 6 to 7
dependabot[bot] Apr 1, 2026
ed8e76e
build(deps): bump docker/login-action from 3 to 4
dependabot[bot] Apr 1, 2026
ea7b541
build(deps): bump docker/setup-buildx-action from 3 to 4
dependabot[bot] Apr 1, 2026
5a19f6c
build(deps): bump docker/metadata-action from 5 to 6
dependabot[bot] Apr 1, 2026
d59a67b
build(deps): bump actions/upload-artifact from 4 to 7 (#12214)
dependabot[bot] Apr 3, 2026
97353bc
build(deps-dev): bump org.apache.maven.plugins:maven-resources-plugin…
dependabot[bot] Apr 3, 2026
6bfadb6
build(deps): bump commons-logging:commons-logging (#12203)
dependabot[bot] Apr 3, 2026
d8ddc02
build(deps): bump the amazon-s3 group with 2 updates (#12202)
dependabot[bot] Apr 3, 2026
ba46f48
build(deps): bump the fasterxml group with 2 updates (#12204)
dependabot[bot] Apr 3, 2026
168c55c
build(deps): bump the test-tools group with 7 updates (#12199)
dependabot[bot] Apr 3, 2026
b1e7b47
build(deps): bump joda-time:joda-time from 2.14.0 to 2.14.1 (#12212)
dependabot[bot] Apr 3, 2026
847711a
build(deps): bump io.grpc:grpc-context from 1.79.0 to 1.80.0 (#12213)
dependabot[bot] Apr 3, 2026
9aac8da
build(deps): bump jersey.version from 2.47 to 2.48 (#12205)
dependabot[bot] Apr 3, 2026
9a49f0c
Merge pull request #12215 from DSpace/dependabot/github_actions/dspac…
tdonohue Apr 6, 2026
3dfda68
Merge pull request #12216 from DSpace/dependabot/github_actions/dspac…
tdonohue Apr 6, 2026
4bcfbe9
Merge pull request #12218 from DSpace/dependabot/github_actions/dspac…
tdonohue Apr 6, 2026
4793375
Merge pull request #12217 from DSpace/dependabot/github_actions/dspac…
tdonohue Apr 6, 2026
51d4f8c
Update all Docker Compose scripts to allow for environment variable o…
tdonohue Mar 13, 2026
fa53dd8
Merge pull request #12254 from tdonohue/port_12125_to_7x
tdonohue Apr 6, 2026
6bdac9d
Fix NPE in ORCID authentication when request is null
toniprieto Apr 13, 2026
587e9fd
Merge pull request #12287 from DSpace/backport-12284-to-dspace-7_x
nwoodward Apr 13, 2026
ea11820
fix(#9663): Add configurable limit to CSV metadata import
JohnnyMendesC Aug 27, 2025
f66781b
refactor: Rename configuration property per review feedback
JohnnyMendesC Aug 27, 2025
5caa607
Merge pull request #12292 from DSpace/backport-11199-to-dspace-7_x
tdonohue Apr 14, 2026
df75357
133543: DSpaceCSV respect metadata.hide properties
Aug 26, 2025
c4fe996
Merge pull request #12295 from DSpace/backport-11197-to-dspace-7_x
tdonohue Apr 14, 2026
bc28ded
Curator does not support items without handles
pnbecker Dec 11, 2025
be1d8d2
Move code to find items by uuid or handle to DSpaceObjectUtil
pnbecker Feb 19, 2026
0551282
Restore curation task configuration at the end of IT
pnbecker Feb 19, 2026
e2600ea
Merge pull request #12311 from DSpace/backport-11676-to-dspace-7_x
tdonohue Apr 17, 2026
a9d4f43
Fix race condition in LegacyPluginServiceImpl named plugin cache
bram-atmire Mar 13, 2026
87aa23a
Merge pull request #12209 from DSpace/dependabot/maven/dspace-7_x/tik…
bram-atmire Apr 18, 2026
9bd4cbc
Merge pull request #12206 from DSpace/dependabot/maven/dspace-7_x/pdf…
bram-atmire Apr 18, 2026
f5be8dd
Merge pull request #12321 from DSpace/backport-12118-to-dspace-7_x
tdonohue Apr 20, 2026
b0af037
Ensure docker-deploy waits for the backend to fully initialize before…
tdonohue Apr 17, 2026
7f604bf
Merge pull request #12329 from tdonohue/port_12320_to_7x
tdonohue Apr 20, 2026
79a2de0
add custom sql count query for signposting endpoint
tinsch Feb 24, 2026
659e155
Replace jakarta.persistence.Query with javax.persistence.Query
tdonohue Apr 23, 2026
451cfec
Merge pull request #12336 from DSpace/backport-12305-to-dspace-7_x
tdonohue Apr 23, 2026
92b0bf8
[DURACOM-437] add the mime.types file due to a known issue on the ext…
francescopioscognamiglio May 15, 2024
b20e1a3
Merge pull request #12340 from DSpace/backport-11805-to-dspace-7_x
tdonohue Apr 24, 2026
0a08fd3
build(deps): bump the test-tools group with 7 updates
dependabot[bot] May 1, 2026
f9468e6
build(deps): bump the amazon-s3 group with 2 updates
dependabot[bot] May 1, 2026
f9f6654
build(deps): bump the apache-commons group with 3 updates
dependabot[bot] May 1, 2026
1fb12c7
build(deps): bump org.apache.james:apache-mime4j-core
dependabot[bot] May 1, 2026
f2a2bd4
build(deps): bump github/codeql-action from 3 to 4
dependabot[bot] May 1, 2026
3682abf
build(deps): bump com.github.spotbugs:spotbugs-maven-plugin
dependabot[bot] May 1, 2026
3e25875
build(deps): bump xom:xom from 1.3.9 to 1.4.0
dependabot[bot] May 1, 2026
5ce08f3
build(deps): bump org.apache.ant:ant from 1.10.15 to 1.10.17
dependabot[bot] May 1, 2026
9996db4
build(deps): bump log4j.version from 2.25.3 to 2.25.4
dependabot[bot] May 1, 2026
988e57d
Merge pull request #12373 from DSpace/dependabot/github_actions/dspac…
tdonohue May 4, 2026
157e2a2
pom.xml: bump com.google.guava:guava to 33.6.0-jre
alanorth May 4, 2026
12b0d7e
pom.xml: bump postgresql.driver.version to 42.7.11
alanorth May 6, 2026
882dfaf
pom.xml: update comment about org.checkerframework:checker-qual
alanorth May 6, 2026
47c5a60
Merge pull request #12417 from alanorth/postgres-checker-deps-7x
tdonohue May 6, 2026
7050214
Merge pull request #12367 from DSpace/dependabot/maven/dspace-7_x/tes…
tdonohue May 6, 2026
aa000a3
Merge pull request #12374 from DSpace/dependabot/maven/dspace-7_x/com…
tdonohue May 6, 2026
6779fdd
Merge pull request #12369 from DSpace/dependabot/maven/dspace-7_x/apa…
tdonohue May 6, 2026
82fec0e
Merge pull request #12411 from DSpace/backport-12405-to-dspace-7_x
tdonohue May 6, 2026
b2287ae
Merge pull request #12375 from DSpace/dependabot/maven/dspace-7_x/xom…
tdonohue May 6, 2026
d654b94
Merge pull request #12376 from DSpace/dependabot/maven/dspace-7_x/org…
tdonohue May 7, 2026
7d8f540
Merge pull request #12368 from DSpace/dependabot/maven/dspace-7_x/ama…
tdonohue May 7, 2026
9601bf9
Merge pull request #12372 from DSpace/dependabot/maven/dspace-7_x/org…
tdonohue May 7, 2026
fd60eed
Merge pull request #12378 from DSpace/dependabot/maven/dspace-7_x/log…
tdonohue May 7, 2026
87eb144
build(deps): bump jaxen:jaxen from 2.0.0 to 2.0.1
dependabot[bot] May 7, 2026
08fc378
Merge pull request #12377 from DSpace/dependabot/maven/dspace-7_x/jax…
tdonohue May 8, 2026
efae0ed
[DURACOM-477] Fix slow loading times when caching counts for items (#…
steph-ieffam May 8, 2026
d16d40e
Merge pull request #12453 from DSpace/backport-12344-to-dspace-7_x
tdonohue May 8, 2026
cf1a2d7
Fix SWORDv2 deposit with embargo for non-admin submitters
milanmajchrak Apr 16, 2026
993801a
Avoid exception during OAI update caused by uncached entities
toniprieto Mar 7, 2026
5f3306a
Merge pull request #12459 from DSpace/backport-10404-to-dspace-7_x
tdonohue May 8, 2026
04c89c1
Merge pull request #12462 from DSpace/backport-12113-to-dspace-7_x
tdonohue May 9, 2026
949c36e
Bug Fix: Add missing Entity-related metadata fields required by virtu…
tdonohue Apr 24, 2026
69c6694
Bug Fix: RoleDisseminator must add EPerson email to "Name" attribute …
tdonohue Apr 24, 2026
4024e71
Bug Fix: Improve handling of missing or empty Bitstreams. While this …
tdonohue Apr 24, 2026
1fa3696
Minor fix to exception message. Include the metadata schema name in t…
tdonohue Apr 24, 2026
2e76ed7
Merge pull request #12483 from tdonohue/port_12343_to_7x
tdonohue May 15, 2026
5b66f87
DSpace#12470 Force each JWT handler to fall back to documented defaults
kshepherd May 12, 2026
158e511
DSpace#12470 Doc and comment default expiration periods in authentica…
kshepherd May 12, 2026
6a193db
DSpace#12470 Remove unnecessary stubbing in short lived JWT test
kshepherd May 12, 2026
6fa3534
Merge pull request #12484 from DSpace/backport-12471-to-dspace-7_x
tdonohue May 15, 2026
af5a8fb
Handle creation of thumbnails for multi-image TIFF files
markpatton Nov 17, 2025
93b4b10
Controlled vocabulary for accented characters
parphis Mar 9, 2026
633c194
Fixes https://github.com/bme-omikk/repozitorium-config/issues/214 The
parphis Mar 11, 2026
7e4fda2
rebase on current main; refactor to use all unicode characters
parphis Mar 24, 2026
c8453d2
Merge pull request #12488 from DSpace/backport-11561-to-dspace-7_x
tdonohue May 15, 2026
aad5aa7
Merge pull request #12491 from DSpace/backport-12097-to-dspace-7_x
tdonohue May 15, 2026
8cba843
requestItemService.findbyBitstream for more efficient bitstream deletion
kshepherd Mar 25, 2026
32f2d6a
Add IT coverage for findByBitstreamId and bitstream deletion cleanup
bram-atmire Mar 25, 2026
51ca1dd
Merge pull request #12495 from kshepherd/backport-12158-to-dspace-7_x
tdonohue May 18, 2026
f3846c4
Improve caching for entities and relationship types
May 20, 2025
895870e
add expiry to ehcache-config
May 21, 2025
28fd1e5
remove unsupported upper() from H2 migration
May 22, 2025
55f721b
fix cache concurrency strategy
May 22, 2025
1e0ae3b
add cache expiry time
May 30, 2025
482fe48
cache RelationshipDAO#findByItem as well
Jun 2, 2025
1a782f9
update date on migration files
Mar 25, 2026
5846b13
undo cache findByItem query in RelationshipDAOImpl
May 20, 2026
0ca2c2f
add comments to cache configs
May 20, 2026
e59dd84
add comments to h2 migration
May 20, 2026
3185a1c
Fix missing OAI identifier interpolation on config change
ybnd May 19, 2026
5a76678
Merge pull request #12517 from DSpace/backport-12504-to-dspace-7_x
tdonohue May 20, 2026
421ff55
Merge pull request #12350 from dspace-unimr/fix/ds-12349-handle-submi…
EikLoe May 21, 2026
af6c017
Merge pull request #12516 from DSpace/backport-10804-to-dspace-7_x
tdonohue May 21, 2026
42f5c67
Merge pull request #12522 from DSpace/backport-12350-to-dspace-7_x
tdonohue May 21, 2026
c23e08e
build(deps): bump org.apache.commons:commons-configuration2
dependabot[bot] May 20, 2026
27e8ab0
Merge pull request #12530 from DSpace/backport-12514-to-dspace-7_x
tdonohue May 22, 2026
7ac17f6
ORE aggregated resource URI validation
kshepherd May 16, 2026
5b31db5
Velocity and template safety for Email and LDN messages
kshepherd May 5, 2026
46a0dfb
Better null checking in allowed config props
kshepherd May 16, 2026
4be430f
Access configurationService at runtime, not rely on class setup
kshepherd May 27, 2026
655fc62
Remove strict mode Velocity engine configuration (allow nulls)
kshepherd May 27, 2026
7a9daa1
Merge pull request #12542 from kshepherd/ore_fileimport_baseurl_valid…
tdonohue May 27, 2026
dc3e455
Filter requests for JSPs or traversal
kshepherd May 16, 2026
0b1deae
Add additional logging to GlobalRequestSecurityFilter
kshepherd May 16, 2026
2e40077
Fix import order
kshepherd May 27, 2026
1a3dfd7
Update sitemap traversal test expectations
kshepherd May 27, 2026
8a2eee9
Backport GlobalRequestSecurityFilter for javax
kshepherd May 27, 2026
8258c32
Merge pull request #12546 from kshepherd/velocity_introspection_confi…
tdonohue May 27, 2026
22bec44
Add secure file access methods
kshepherd May 27, 2026
55905a2
Backport Curation I/O using secure file access
kshepherd May 27, 2026
4502224
Curation config support for allowed base paths
kshepherd May 27, 2026
277af82
Move curation -r reporter param to CLI only
kshepherd May 26, 2026
a757221
Fix import order
kshepherd May 27, 2026
37cd6eb
Ignore CurationScriptIT -T taskFile tests, to rewrite w/ CLI
kshepherd May 27, 2026
27708ea
Move taskfile -T option to CLI script config only
kshepherd May 27, 2026
8a75b11
Merge pull request #12550 from kshepherd/webapp_hardening-7_x
tdonohue May 27, 2026
a1e7f2f
Merge pull request #12539 from kshepherd/ldn-curate-io-improvement-7_x
tdonohue May 27, 2026
f228458
Update LICENSES_THIRD_PARTY for next release
tdonohue May 27, 2026
7d35ae5
[maven-release-plugin] prepare release dspace-7.6.7
tdonohue May 27, 2026
5d0ff98
[maven-release-plugin] prepare for next development iteration
tdonohue May 27, 2026
c5d4927
Undo partial/flawed 7.6.7 release
tdonohue May 27, 2026
7b754e4
[maven-release-plugin] prepare release dspace-7.6.7
tdonohue May 27, 2026
ce1c00d
[maven-release-plugin] rollback the release of dspace-7.6.7
tdonohue May 27, 2026
79eb174
Undo improper versioning in old REST API.
tdonohue May 27, 2026
ef3524a
[maven-release-plugin] prepare release dspace-7.6.7
tdonohue May 27, 2026
81dac88
Upgrade vanilla base 7.6.5 -> 7.6.7 (diff-apply two-parent merge)
milanmajchrak Jul 21, 2026
51f4b9e
Add CLARIN content-disposition allowlist; use reload-safe helper in S…
milanmajchrak Jul 30, 2026
e4978e2
Correct the content-disposition comment: 8 MB threshold still applies
milanmajchrak Jul 30, 2026
c6a1101
Fix OAI double-escaping and complete the content-disposition allowlist
milanmajchrak Jul 30, 2026
b284571
Also strip unpaired surrogates in the OAI sanitizer
milanmajchrak Jul 30, 2026
1bfc45b
Port the CLARIN S3 stack to AWS SDK v2 (decision D1)
milanmajchrak Aug 3, 2026
75848b2
Fix the S3 defects a 10-reviewer audit found in the SDK v2 port
milanmajchrak Aug 3, 2026
4b5390f
Add the OAI sanitize IT the change never had
milanmajchrak Aug 4, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -53,11 +53,11 @@ jobs:
steps:
# https://github.com/actions/checkout
- name: Checkout codebase
uses: actions/checkout@v4
uses: actions/checkout@v6

# https://github.com/actions/setup-java
- name: Install JDK ${{ matrix.java }}
uses: actions/setup-java@v4
uses: actions/setup-java@v5
with:
java-version: ${{ matrix.java }}
distribution: 'temurin'
Expand All @@ -73,14 +73,14 @@ jobs:
# (This artifact is downloadable at the bottom of any job's summary page)
- name: Upload Results of ${{ matrix.type }} to Artifact
if: ${{ failure() }}
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: ${{ matrix.type }} results
path: ${{ matrix.resultsdir }}

# Upload code coverage report to artifact, so that it can be shared with the 'codecov' job (see below)
- name: Upload code coverage report to Artifact
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: ${{ matrix.type }} coverage report
path: 'dspace/target/site/jacoco-aggregate/jacoco.xml'
Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/codescan.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,19 +31,19 @@ jobs:
steps:
# https://github.com/actions/checkout
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@v6

# https://github.com/actions/setup-java
- name: Install JDK
uses: actions/setup-java@v4
uses: actions/setup-java@v5
with:
java-version: 11
distribution: 'temurin'

# Initializes the CodeQL tools for scanning.
# https://github.com/github/codeql-action
- name: Initialize CodeQL
uses: github/codeql-action/init@v2
uses: github/codeql-action/init@v4
with:
# Codescan Javascript as well since a few JS files exist in REST API's interface
languages: java, javascript
Expand All @@ -52,8 +52,8 @@ jobs:
# NOTE: Based on testing, this autobuild process works well for DSpace. A custom
# DSpace build w/caching (like in build.yml) was about the same speed as autobuild.
- name: Autobuild
uses: github/codeql-action/autobuild@v2
uses: github/codeql-action/autobuild@v4

# Perform GitHub Code Scanning.
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v2
uses: github/codeql-action/analyze@v4
4 changes: 2 additions & 2 deletions .github/workflows/port_merged_pull_request.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,11 +23,11 @@ jobs:
if: github.event.pull_request.merged
steps:
# Checkout code
- uses: actions/checkout@v4
- uses: actions/checkout@v6
# Port PR to other branch (ONLY if labeled with "port to")
# See https://github.com/korthout/backport-action
- name: Create backport pull requests
uses: korthout/backport-action@v2
uses: korthout/backport-action@v4
with:
# Trigger based on a "port to [branch]" label on PR
# (This label must specify the branch name to port to)
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/pull_request_opened.yml
Original file line number Diff line number Diff line change
Expand Up @@ -21,4 +21,4 @@ jobs:
# Assign the PR to whomever created it. This is useful for visualizing assignments on project boards
# See https://github.com/toshimaru/auto-author-assign
- name: Assign PR to creator
uses: toshimaru/auto-author-assign@v2.1.0
uses: toshimaru/auto-author-assign@v3.0.1
14 changes: 9 additions & 5 deletions .github/workflows/reusable-docker-build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -105,15 +105,15 @@ jobs:
steps:
# https://github.com/actions/checkout
- name: Checkout codebase
uses: actions/checkout@v4
uses: actions/checkout@v6

- name: Add version
if: ${{ inputs.run_python_version_script }}
run: python scripts/sourceversion.py ${{ github.server_url }}/${{ github.repository }}/actions/runs/ ${{ github.run_id }} > ${{ inputs.python_version_script_dest }}

# https://github.com/docker/setup-buildx-action
- name: Setup Docker Buildx
uses: docker/setup-buildx-action@v3
uses: docker/setup-buildx-action@v4

# https://github.com/docker/setup-qemu-action
- name: Set up QEMU emulation to build for multiple architectures
Expand All @@ -132,7 +132,7 @@ jobs:
# Get Metadata for docker_build_deps step below
- name: Sync metadata (tags, labels) from GitHub to Docker for image
id: meta_build
uses: docker/metadata-action@v5
uses: docker/metadata-action@v6
with:
images: ${{ env.IMAGE_NAME }}
tags: ${{ env.IMAGE_TAGS }}
Expand All @@ -141,7 +141,7 @@ jobs:
# https://github.com/docker/build-push-action
- name: Build and push image
id: docker_build
uses: docker/build-push-action@v5
uses: docker/build-push-action@v7
with:
build-contexts: |
${{ inputs.dockerfile_additional_contexts }}
Expand All @@ -154,6 +154,10 @@ jobs:
# Use tags / labels provided by 'docker/metadata-action' above
tags: ${{ steps.meta_build.outputs.tags }}
labels: ${{ steps.meta_build.outputs.labels }}
# Use GitHub cache to load cached Docker images and cache the results of this build
# This decreases the number of images we need to fetch from DockerHub
cache-from: type=gha,scope=${{ inputs.build_id }}
cache-to: type=gha,scope=${{ inputs.build_id }},mode=min

# Export the digest of Docker build locally (for non PRs only)
# - name: Export Docker build digest
Expand Down Expand Up @@ -236,4 +240,4 @@ jobs:

# - name: Inspect image
# run: |
# docker buildx imagetools inspect ${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.version }}
# docker buildx imagetools inspect ${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.version }}
15 changes: 5 additions & 10 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -38,16 +38,11 @@ ARG TARGET_DIR=dspace-installer
# COPY the /install directory from 'build' container to /dspace-src in this container
COPY --from=build /install /dspace-src
WORKDIR /dspace-src
# Create the initial install deployment using ANT
ENV ANT_VERSION=1.10.13
ENV ANT_HOME=/tmp/ant-$ANT_VERSION
ENV PATH=$ANT_HOME/bin:$PATH
# Download and install 'ant'
RUN mkdir $ANT_HOME && \
curl --silent --show-error --location --fail --retry 5 --output /tmp/apache-ant.tar.gz \
https://archive.apache.org/dist/ant/binaries/apache-ant-${ANT_VERSION}-bin.tar.gz && \
tar -zx --strip-components=1 -f /tmp/apache-ant.tar.gz -C $ANT_HOME && \
rm /tmp/apache-ant.tar.gz
# Install Apache Ant
RUN apt-get update \
&& apt-get install -y --no-install-recommends ant \
&& apt-get purge -y --auto-remove \
&& rm -rf /var/lib/apt/lists/*
# Run necessary 'ant' deploy scripts
RUN ant init_installation update_configs update_code update_webapps

Expand Down
15 changes: 5 additions & 10 deletions Dockerfile.cli
Original file line number Diff line number Diff line change
Expand Up @@ -34,16 +34,11 @@ ARG TARGET_DIR=dspace-installer
# COPY the /install directory from 'build' container to /dspace-src in this container
COPY --from=build /install /dspace-src
WORKDIR /dspace-src
# Create the initial install deployment using ANT
ENV ANT_VERSION=1.10.13
ENV ANT_HOME=/tmp/ant-$ANT_VERSION
ENV PATH=$ANT_HOME/bin:$PATH
# Download and install 'ant'
RUN mkdir $ANT_HOME && \
curl --silent --show-error --location --fail --retry 5 --output /tmp/apache-ant.tar.gz \
https://archive.apache.org/dist/ant/binaries/apache-ant-${ANT_VERSION}-bin.tar.gz && \
tar -zx --strip-components=1 -f /tmp/apache-ant.tar.gz -C $ANT_HOME && \
rm /tmp/apache-ant.tar.gz
# Install Apache Ant
RUN apt-get update \
&& apt-get install -y --no-install-recommends ant \
&& apt-get purge -y --auto-remove \
&& rm -rf /var/lib/apt/lists/*
# Run necessary 'ant' deploy scripts
RUN ant init_installation update_configs update_code

Expand Down
15 changes: 5 additions & 10 deletions Dockerfile.test
Original file line number Diff line number Diff line change
Expand Up @@ -37,16 +37,11 @@ ARG TARGET_DIR=dspace-installer
# COPY the /install directory from 'build' container to /dspace-src in this container
COPY --from=build /install /dspace-src
WORKDIR /dspace-src
# Create the initial install deployment using ANT
ENV ANT_VERSION=1.10.12
ENV ANT_HOME=/tmp/ant-$ANT_VERSION
ENV PATH=$ANT_HOME/bin:$PATH
# Download and install 'ant'
RUN mkdir $ANT_HOME && \
curl --silent --show-error --location --fail --retry 5 --output /tmp/apache-ant.tar.gz \
https://archive.apache.org/dist/ant/binaries/apache-ant-${ANT_VERSION}-bin.tar.gz && \
tar -zx --strip-components=1 -f /tmp/apache-ant.tar.gz -C $ANT_HOME && \
rm /tmp/apache-ant.tar.gz
# Install Apache Ant
RUN apt-get update \
&& apt-get install -y --no-install-recommends ant \
&& apt-get purge -y --auto-remove \
&& rm -rf /var/lib/apt/lists/*
# Run necessary 'ant' deploy scripts
RUN ant init_installation update_configs update_code update_webapps

Expand Down
Loading
Loading