You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@roller.apache.org by mr...@apache.org on 2026/09/25 17:14:05 UTC
(roller) branch feature/oidc-login updated (212dad602 -> 94269ac9a)
This is an automated email from the ASF dual-hosted git repository.
mraible pushed a change to branch feature/oidc-login
in repository https://gitbox.apache.org/repos/asf/roller.git
from 212dad602 Fix the OIDC account views, upgrades, and provider resolution raised by code review
add dade07032 Update install guide with working JavaMail download links
add d4cfb98e8 Merge pull request #153 from mraible/update-install-guide-javamail-link
add f1422f444 Set up default protection ruleset for default and release branches (#152)
add c3539827e Remove legacy outbound trackback action (#163)
add a19542712 Use a shared JDOM builder for bookmark and configuration parsing (#173)
add 8a15bed51 Separate submitted and response salts in UI filters (#167)
add ca85e2e38 Resolve weblog template resources within the active theme (#172)
add 3b67aa9c0 Disable vendor extension types on the XML-RPC servlet (#171)
add c83ae52d3 Move frontpage selection into the administrator setup workflow (#170)
add 862e4cb11 Normalize frontpage directory parameters before rendering the bundled theme (#169)
add 6bb6060b6 Move authoring UI inline JS handlers to data attributes (#168)
add 1b3c6bea5 Fix release signing script argument handling and checksums (#177)
add 2bffdea23 Retire the WSSE AtomPub authentication mode (#166)
add 1663b41e5 Derive media content types from file content, not the request (#174)
add 75560cdaa Use the current Roller session during OAuth authorization (#165)
add 19fc81451 Scope authoring resource lookups to the action weblog (#162)
add 388db86ff Check weblog permission in XML-RPC Blogger/MetaWeblog handlers (#164)
add d76c2379e Store enclosure metadata without fetching remote URLs (#175)
add 48cc24b66 Retire incoming Trackback support and normalize comment links (#178)
add 45361335c Add release notes and stop shipping third-party jars in the source release (#179)
add f7f40498d Set version to 6.1.6 and complete the source distribution
add 3a5801f0e Update dependencies across project and add JDK 25 to test matrix (#180)
add 6b7e246b2 Use double-quoted href attributes on the comment management page (#181)
add 69fcaf744 Improve installer form initialization and preview navigation (#182)
add 610d1d0bb Fix jQuery UI 404 on authoring pages by dropping the webjar +1 from the URL (#185)
add 3bb6edab8 Track schema upgrades with a flag instead of a hardcoded version check (#184)
add 6e85f24f4 Fix blank Font Awesome icons in preset themes (CSP font-src) and document H2 VALUE workaround (#183)
add 531f6c45b Add a roller-release developer skill documenting the release procedure (#186)
add 59aeab100 Format LDAP comment form values consistently (#191)
add aa03eaa13 Normalize links in HTML subset formatting (#190)
add ea63849ea Secure initial Roller setup with one-time operator token (#189)
add 75742f1a7 Make sure bootstrap tables.less .table-striped > tbody > tr:nth-of-type(2n+1) is overridden (#188)
add 47c5cf0bb Scope installer table detection to the connection's catalog
add 067afeeea Merge remote-tracking branch 'upstream/master' into feature/jakarta-ee-10-migration
add 14993e291 Address review feedback: drop committed logs, inject servlet objects, target Servlet 6.1
add fc2d81948 Update dependencies to their latest compatible releases and clear known CVEs
add d4f1ca96e Merge branch 'feature/jakarta-ee-10-migration' into feature/oidc-login
add 3a94a0d75 Update jackson-databind to 2.22.3 to clear known CVEs
add c5d854bd3 Update the JDBC driver and mail jars the Docker image downloads
add da09b1b15 Merge branch 'feature/jakarta-ee-10-migration' into feature/oidc-login
add 6129f439b Let the setup token page share UIAction's injected request
add 94269ac9a Merge branch 'feature/jakarta-ee-10-migration' into feature/oidc-login
No new revisions were added by this update.
Summary of changes:
.asf.yaml | 14 +
.github/workflows/codeql-analysis.yml | 10 +-
.github/workflows/main.yml | 12 +-
.gitignore | 1 +
CHANGES.md | 74 +++
Dockerfile | 10 +-
app/pom.xml | 88 ++--
.../roller/weblogger/business/BookmarkManager.java | 31 +-
.../weblogger/business/FrontpageSettings.java | 132 ++++++
.../weblogger/business/MediaFileManager.java | 19 +
.../weblogger/business/PropertiesManager.java | 9 +
.../weblogger/business/WeblogEntryManager.java | 41 +-
.../roller/weblogger/business/WeblogManager.java | 23 +-
.../roller/weblogger/business/WebloggerImpl.java | 2 +
.../business/jpa/JPABookmarkManagerImpl.java | 53 ++-
.../business/jpa/JPAMediaFileManagerImpl.java | 45 ++
.../business/jpa/JPAPropertiesManagerImpl.java | 16 +
.../business/jpa/JPAWeblogEntryManagerImpl.java | 77 ++-
.../business/jpa/JPAWeblogManagerImpl.java | 25 +-
.../business/startup/DatabaseInstaller.java | 42 +-
.../business/themes/ThemeMetadataParser.java | 4 +-
.../business/themes/WeblogCustomTheme.java | 50 +-
.../config/runtime/RuntimeConfigDefsParser.java | 4 +-
.../roller/weblogger/planet/ui/PlanetConfig.java | 12 +-
.../weblogger/planet/ui/PlanetGroupSubs.java | 3 +-
.../roller/weblogger/planet/ui/PlanetGroups.java | 3 +-
.../roller/weblogger/pojos/WeblogEntryComment.java | 8 +
.../pojos/wrapper/WeblogEntryCommentWrapper.java | 9 +-
.../roller/weblogger/ui/core/RollerContext.java | 8 +
.../weblogger/ui/core/filters/BootstrapFilter.java | 2 +
.../ui/core/filters/BootstrapSecurityFilter.java | 29 ++
.../weblogger/ui/core/filters/LoadSaltFilter.java | 1 +
.../weblogger/ui/core/filters/SaltValidator.java | 110 +++++
.../ui/core/filters/ValidateSaltFilter.java | 59 +--
...SessionFilter.java => XmlRpcEnabledFilter.java} | 70 ++-
.../ui/core/security/BasicUserAutoProvision.java | 1 +
.../ui/core/security/BootstrapSecurity.java | 166 +++++++
.../weblogger/ui/core/util/menu/MenuHelper.java | 4 +-
.../ui/rendering/WeblogRequestMapper.java | 48 +-
.../weblogger/ui/rendering/model/ConfigModel.java | 6 -
.../weblogger/ui/rendering/model/URLModel.java | 15 +-
.../ui/rendering/model/UtilitiesModel.java | 9 +
.../plugins/comments/LdapCommentAuthenticator.java | 9 +-
.../TrackbackLinkbackCommentValidator.java | 63 +--
.../ui/rendering/servlets/CommentServlet.java | 26 +-
.../rendering/servlets/MediaResourceServlet.java | 7 +-
.../rendering/servlets/PreviewResourceServlet.java | 18 +-
.../ui/rendering/servlets/ResourceServlet.java | 18 +-
.../ui/rendering/servlets/TrackbackServlet.java | 258 ----------
.../ui/rendering/util/WeblogTrackbackRequest.java | 205 --------
.../ui/rendering/velocity/RollerVelocity.java | 4 +-
.../velocity/ThemeIncludeEventHandler.java | 103 ++++
.../ui/struts2/admin/GlobalCommentManagement.java | 3 +-
.../weblogger/ui/struts2/admin/GlobalConfig.java | 55 ++-
.../ui/struts2/ajax/CommentDataServlet.java | 45 +-
.../ui/struts2/ajax/ThemeDataServlet.java | 13 +-
.../weblogger/ui/struts2/core/BootstrapToken.java | 83 ++++
.../weblogger/ui/struts2/core/FrontpageSetup.java | 137 ++++++
.../roller/weblogger/ui/struts2/core/Install.java | 20 +-
.../roller/weblogger/ui/struts2/core/Register.java | 25 +-
.../roller/weblogger/ui/struts2/core/Setup.java | 115 +++--
.../weblogger/ui/struts2/editor/BookmarkEdit.java | 16 +-
.../weblogger/ui/struts2/editor/Bookmarks.java | 27 +-
.../weblogger/ui/struts2/editor/CategoryEdit.java | 14 +-
.../ui/struts2/editor/CategoryRemove.java | 8 +-
.../weblogger/ui/struts2/editor/Comments.java | 58 ++-
.../ui/struts2/editor/EntryAddWithMediaFile.java | 20 +-
.../weblogger/ui/struts2/editor/EntryBean.java | 22 +
.../weblogger/ui/struts2/editor/EntryEdit.java | 190 ++++----
.../weblogger/ui/struts2/editor/EntryRemove.java | 2 +-
.../weblogger/ui/struts2/editor/FolderEdit.java | 27 +-
.../weblogger/ui/struts2/editor/MediaFileAdd.java | 34 +-
.../weblogger/ui/struts2/editor/MediaFileBase.java | 58 ++-
.../weblogger/ui/struts2/editor/MediaFileEdit.java | 377 ++++++++-------
.../ui/struts2/editor/MediaFileImageChooser.java | 2 +-
.../ui/struts2/editor/MediaFileImageDim.java | 6 +-
.../weblogger/ui/struts2/editor/MediaFileView.java | 6 +-
.../weblogger/ui/struts2/editor/Members.java | 10 +-
.../weblogger/ui/struts2/editor/TemplateEdit.java | 3 +-
.../weblogger/ui/struts2/editor/Templates.java | 2 +-
.../weblogger/ui/struts2/editor/WeblogConfig.java | 19 +-
.../roller/weblogger/ui/struts2/util/UIAction.java | 22 +-
.../ui/struts2/util/ValidateSaltInterceptor.java | 71 +++
.../weblogger/util/BannedwordslistChecker.java | 14 +-
.../roller/weblogger/util/CommentAuthorUrl.java | 113 +++++
.../roller/weblogger/util/EnclosureMetadata.java | 154 ++++++
.../roller/weblogger/util/LinkbackExtractor.java | 393 ----------------
.../roller/weblogger/util/MediaTypePolicy.java | 203 ++++++++
.../roller/weblogger/util/MediacastException.java | 62 ---
.../roller/weblogger/util/MediacastResource.java | 78 ---
.../roller/weblogger/util/MediacastUtil.java | 88 ----
.../roller/weblogger/util/SafeSAXBuilder.java | 77 +++
.../apache/roller/weblogger/util/Trackback.java | 201 --------
.../util/TrackbackNotAllowedException.java | 34 --
.../apache/roller/weblogger/util/Utilities.java | 41 +-
.../roller/weblogger/util/WSSEUtilities.java | 83 ----
.../webservices/atomprotocol/MediaCollection.java | 50 +-
.../atomprotocol/RollerAtomHandler.java | 72 +--
.../webservices/xmlrpc/BaseAPIHandler.java | 176 ++++---
.../webservices/xmlrpc/BloggerAPIHandler.java | 280 ++++++-----
.../webservices/xmlrpc/MetaWeblogAPIHandler.java | 56 ++-
.../main/resources/ApplicationResources.properties | 63 ++-
.../resources/ApplicationResources_de.properties | 22 +-
.../resources/ApplicationResources_es.properties | 13 +-
.../resources/ApplicationResources_fr.properties | 22 +-
.../resources/ApplicationResources_ja.properties | 28 +-
.../resources/ApplicationResources_ko.properties | 26 +-
.../resources/ApplicationResources_ru.properties | 17 +-
.../ApplicationResources_zh_CN.properties | 33 +-
.../roller/weblogger/config/roller.properties | 16 +-
.../roller/weblogger/config/runtimeConfigDefs.xml | 15 +-
.../roller/weblogger/pojos/MediaFile.orm.xml | 3 +
.../weblogger/pojos/MediaFileDirectory.orm.xml | 3 +
.../roller/weblogger/pojos/WeblogBookmark.orm.xml | 3 +
.../weblogger/pojos/WeblogBookmarkFolder.orm.xml | 3 +
.../roller/weblogger/pojos/WeblogCategory.orm.xml | 3 +
.../roller/weblogger/pojos/WeblogEntry.orm.xml | 3 +
.../weblogger/pojos/WeblogEntryComment.orm.xml | 3 +
.../roller/weblogger/pojos/WeblogTemplate.orm.xml | 3 +
app/src/main/resources/struts.xml | 28 +-
.../webapp/WEB-INF/jsps/core/BootstrapToken.jsp | 25 +
.../main/webapp/WEB-INF/jsps/core/CreateWeblog.jsp | 2 +-
.../webapp/WEB-INF/jsps/core/DatabaseError.jsp | 2 +-
app/src/main/webapp/WEB-INF/jsps/core/Setup.jsp | 13 +-
.../main/webapp/WEB-INF/jsps/editor/Bookmarks.jsp | 40 +-
.../main/webapp/WEB-INF/jsps/editor/Categories.jsp | 57 ++-
.../main/webapp/WEB-INF/jsps/editor/Comments.jsp | 46 +-
.../main/webapp/WEB-INF/jsps/editor/Entries.jsp | 15 +-
.../main/webapp/WEB-INF/jsps/editor/EntryEdit.jsp | 41 +-
.../WEB-INF/jsps/editor/MediaFileAddSuccess.jsp | 24 +-
.../WEB-INF/jsps/editor/MediaFileImageChooser.jsp | 23 +-
.../webapp/WEB-INF/jsps/editor/MediaFileView.jsp | 54 ++-
.../webapp/WEB-INF/jsps/editor/TemplateEdit.jsp | 16 +-
.../main/webapp/WEB-INF/jsps/editor/Templates.jsp | 12 +-
.../main/webapp/WEB-INF/jsps/editor/ThemeEdit.jsp | 2 +-
app/src/main/webapp/WEB-INF/jsps/tiles/head.jsp | 13 +-
app/src/main/webapp/WEB-INF/tiles.xml | 5 +
app/src/main/webapp/WEB-INF/velocity.properties | 16 +-
app/src/main/webapp/WEB-INF/velocity/feeds.vm | 6 +-
app/src/main/webapp/WEB-INF/velocity/weblog.vm | 28 +-
app/src/main/webapp/WEB-INF/web.xml | 56 ++-
app/src/main/webapp/robots.txt | 3 +-
app/src/main/webapp/roller-ui/styles/roller.css | 10 +-
app/src/main/webapp/themes/base.css | 5 -
app/src/main/webapp/themes/basic/_day.vm | 1 -
app/src/main/webapp/themes/basic/weblog.vm | 2 +-
app/src/main/webapp/themes/basicmobile/_day.vm | 1 -
app/src/main/webapp/themes/basicmobile/weblog.vm | 2 +-
app/src/main/webapp/themes/fauxcoly/weblog.vm | 2 +-
.../main/webapp/themes/frontpage/_blogdirectory.vm | 18 +-
app/src/main/webapp/themes/frontpage/_header.vm | 2 +-
app/src/main/webapp/themes/frontpage/directory.vm | 18 +-
app/src/main/webapp/themes/gaurav/std_head.vm | 2 +-
.../business/BookmarkImportParsingTest.java | 136 ++++++
.../roller/weblogger/business/PropertiesTest.java | 51 ++
.../weblogger/business/WeblogScopedLookupTest.java | 413 ++++++++++++++++
.../roller/weblogger/business/WeblogStatsTest.java | 12 +-
.../startup/DatabaseInstallerCreationTest.java | 102 ++++
.../startup/DatabaseInstallerUpgradeTest.java | 114 +++++
.../business/themes/WeblogCustomThemeTest.java | 60 +++
.../wrapper/WeblogEntryCommentWrapperTest.java | 72 +++
.../ui/core/filters/LoadSaltFilterTest.java | 35 ++
.../ui/core/filters/SaltConfigurationTest.java | 79 ++++
.../ui/core/filters/ValidateSaltFilterTest.java | 88 ++--
.../ui/core/security/BootstrapSecurityTest.java | 97 ++++
.../ui/rendering/IncomingTrackbackRemovalTest.java | 101 ++++
.../comments/LdapCommentAuthenticatorTest.java | 96 ++++
.../velocity/FrontpageDirectoryRenderingTest.java | 233 +++++++++
.../velocity/ThemeIncludeConfinementTest.java | 212 +++++++++
.../ui/struts2/ajax/CommentDataServletTest.java | 165 +++++++
.../ui/struts2/core/FrontpageSetupAccessTest.java | 91 ++++
.../weblogger/ui/struts2/core/InstallTest.java | 31 ++
.../struts2/editor/AuthoringActionScopingTest.java | 455 ++++++++++++++++++
.../struts2/editor/AuthoringUiSinkAuditTest.java | 165 +++++++
.../ui/struts2/editor/EntryEditEnclosureTest.java | 85 ++++
.../ui/struts2/editor/EntryEditPreviewTest.java | 47 ++
.../struts2/editor/EntryTrackbackRemovalTest.java | 77 +++
.../ui/struts2/editor/TemplateEditScopingTest.java | 133 ++++++
.../struts2/util/ValidateSaltInterceptorTest.java | 219 +++++++++
.../weblogger/util/EnclosureMetadataTest.java | 135 ++++++
.../weblogger/util/LinkbackExtractorTest.java | 52 --
.../roller/weblogger/util/MediaTypePolicyTest.java | 277 +++++++++++
.../roller/weblogger/util/SafeSAXBuilderTest.java | 56 +++
.../roller/weblogger/util/UtilitiesTest.java | 56 +++
.../atomprotocol/MediaCollectionTest.java | 61 +++
.../atomprotocol/RollerAtomHandlerTest.java | 137 ++++++
.../webservices/xmlrpc/BaseAPIHandlerTest.java | 92 ++++
.../xmlrpc/XMLRPCWeblogPermissionTest.java | 521 +++++++++++++++++++++
.../xmlrpc/XmlRpcExtensionTypeTest.java | 180 +++++++
app/src/test/resources/WEB-INF/velocity.properties | 18 +-
.../test/resources/confinement-probe.properties | 1 +
assembly-release/pom.xml | 2 +-
assembly-release/sign-release.sh | 93 +++-
assembly-release/src/main/assembly/source.xml | 2 +
db-utils/pom.xml | 6 +-
docs/examples/configs/tomcat/mod_jk.conf | 1 -
docs/examples/scripting/bsf/README.txt | 3 +-
docs/examples/scripting/bsf/lib/bsf.jar | Bin 113369 -> 0 bytes
.../groovy/examples/adminprotocol/README.txt | 4 +-
.../adminprotocol/lib/commons-codec-1.3.jar | Bin 46725 -> 0 bytes
.../groovy/examples/adminprotocol/lib/jdom.jar | Bin 153253 -> 0 bytes
.../examples/adminprotocol/lib/roller-rap-sdk.jar | Bin 32149 -> 0 bytes
docs/roller-install-guide.adoc | 39 +-
docs/roller-template-guide.adoc | 18 -
docs/roller-user-guide.adoc | 70 +--
it-selenium/logs/roller-2026-08-11-165858.log.gz | Bin 4784 -> 0 bytes
it-selenium/logs/roller-2026-08-11-165926.log.gz | Bin 4718 -> 0 bytes
it-selenium/logs/roller-2026-08-11-170101.log.gz | Bin 4694 -> 0 bytes
it-selenium/logs/roller-2026-08-11-170125.log.gz | Bin 4702 -> 0 bytes
it-selenium/logs/roller-2026-08-11-170214.log.gz | Bin 4719 -> 0 bytes
it-selenium/logs/roller-2026-08-11-170353.log.gz | Bin 9616 -> 0 bytes
it-selenium/logs/roller-2026-08-11-170505.log.gz | Bin 19730 -> 0 bytes
it-selenium/logs/roller-2026-08-11-170652.log.gz | Bin 4815 -> 0 bytes
it-selenium/logs/roller.log | 199 --------
it-selenium/pom.xml | 29 +-
.../apache/roller/selenium/InitialLoginTestIT.java | 21 +-
.../roller/selenium/core/BootstrapTokenPage.java | 71 +++
.../selenium/core/BootstrapTokenPageTest.java | 46 ++
.../org/apache/roller/selenium/core/SetupPage.java | 13 +-
.../roller/selenium/view/SingleBlogEntryPage.java | 1 -
pom.xml | 27 +-
skills/README.md | 67 +++
skills/roller-release/SKILL.md | 95 ++++
skills/roller-release/references/asf-policy.md | 45 ++
skills/roller-release/references/atr.md | 36 ++
skills/roller-release/references/dist-svn.md | 59 +++
skills/roller-release/references/signing-key.md | 54 +++
.../roller-release/references/vote-and-announce.md | 76 +++
skills/roller-release/references/website.md | 39 ++
skills/roller-release/scripts/bump-version.sh | 68 +++
skills/roller-release/scripts/check-release.sh | 205 ++++++++
skills/roller-security/SKILL.md | 120 +++++
skills/roller-security/assets/SUMMARY.md | 92 ++++
.../assets/item-template/CVE_FORM.md | 92 ++++
.../assets/item-template/IMPLEMENTATION.md | 70 +++
.../assets/item-template/TRACKING.md | 109 +++++
skills/roller-security/references/asf-process.md | 47 ++
.../roller-security/references/comms-templates.md | 88 ++++
skills/roller-security/references/cve-portal.md | 52 ++
.../references/obsidian-tasks-tracking.md | 140 ++++++
.../references/roller-codebase-map.md | 41 ++
.../references/severity-and-cvss.md | 39 ++
skills/roller-security/scripts/check-private.sh | 249 ++++++++++
skills/roller-security/scripts/migrate-status.py | 263 +++++++++++
skills/roller-security/scripts/triage-status.py | 418 +++++++++++++++++
245 files changed, 11450 insertions(+), 3304 deletions(-)
create mode 100644 .asf.yaml
create mode 100644 CHANGES.md
create mode 100644 app/src/main/java/org/apache/roller/weblogger/business/FrontpageSettings.java
create mode 100644 app/src/main/java/org/apache/roller/weblogger/ui/core/filters/BootstrapSecurityFilter.java
create mode 100644 app/src/main/java/org/apache/roller/weblogger/ui/core/filters/SaltValidator.java
copy app/src/main/java/org/apache/roller/weblogger/ui/core/filters/{PersistenceSessionFilter.java => XmlRpcEnabledFilter.java} (50%)
create mode 100644 app/src/main/java/org/apache/roller/weblogger/ui/core/security/BootstrapSecurity.java
delete mode 100644 app/src/main/java/org/apache/roller/weblogger/ui/rendering/servlets/TrackbackServlet.java
delete mode 100644 app/src/main/java/org/apache/roller/weblogger/ui/rendering/util/WeblogTrackbackRequest.java
create mode 100644 app/src/main/java/org/apache/roller/weblogger/ui/rendering/velocity/ThemeIncludeEventHandler.java
create mode 100644 app/src/main/java/org/apache/roller/weblogger/ui/struts2/core/BootstrapToken.java
create mode 100644 app/src/main/java/org/apache/roller/weblogger/ui/struts2/core/FrontpageSetup.java
create mode 100644 app/src/main/java/org/apache/roller/weblogger/ui/struts2/util/ValidateSaltInterceptor.java
create mode 100644 app/src/main/java/org/apache/roller/weblogger/util/CommentAuthorUrl.java
create mode 100644 app/src/main/java/org/apache/roller/weblogger/util/EnclosureMetadata.java
delete mode 100644 app/src/main/java/org/apache/roller/weblogger/util/LinkbackExtractor.java
create mode 100644 app/src/main/java/org/apache/roller/weblogger/util/MediaTypePolicy.java
delete mode 100644 app/src/main/java/org/apache/roller/weblogger/util/MediacastException.java
delete mode 100644 app/src/main/java/org/apache/roller/weblogger/util/MediacastResource.java
delete mode 100644 app/src/main/java/org/apache/roller/weblogger/util/MediacastUtil.java
create mode 100644 app/src/main/java/org/apache/roller/weblogger/util/SafeSAXBuilder.java
delete mode 100644 app/src/main/java/org/apache/roller/weblogger/util/Trackback.java
delete mode 100644 app/src/main/java/org/apache/roller/weblogger/util/TrackbackNotAllowedException.java
delete mode 100644 app/src/main/java/org/apache/roller/weblogger/util/WSSEUtilities.java
create mode 100644 app/src/main/webapp/WEB-INF/jsps/core/BootstrapToken.jsp
create mode 100644 app/src/test/java/org/apache/roller/weblogger/business/BookmarkImportParsingTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/business/WeblogScopedLookupTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/business/startup/DatabaseInstallerCreationTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/business/startup/DatabaseInstallerUpgradeTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/business/themes/WeblogCustomThemeTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/pojos/wrapper/WeblogEntryCommentWrapperTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/core/filters/SaltConfigurationTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/core/security/BootstrapSecurityTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/rendering/IncomingTrackbackRemovalTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/rendering/plugins/comments/LdapCommentAuthenticatorTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/rendering/velocity/FrontpageDirectoryRenderingTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/rendering/velocity/ThemeIncludeConfinementTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/struts2/ajax/CommentDataServletTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/struts2/core/FrontpageSetupAccessTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/struts2/core/InstallTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/struts2/editor/AuthoringActionScopingTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/struts2/editor/AuthoringUiSinkAuditTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/struts2/editor/EntryEditEnclosureTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/struts2/editor/EntryEditPreviewTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/struts2/editor/EntryTrackbackRemovalTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/struts2/editor/TemplateEditScopingTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/ui/struts2/util/ValidateSaltInterceptorTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/util/EnclosureMetadataTest.java
delete mode 100644 app/src/test/java/org/apache/roller/weblogger/util/LinkbackExtractorTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/util/MediaTypePolicyTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/util/SafeSAXBuilderTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/webservices/atomprotocol/MediaCollectionTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/webservices/atomprotocol/RollerAtomHandlerTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/webservices/xmlrpc/BaseAPIHandlerTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/webservices/xmlrpc/XMLRPCWeblogPermissionTest.java
create mode 100644 app/src/test/java/org/apache/roller/weblogger/webservices/xmlrpc/XmlRpcExtensionTypeTest.java
create mode 100644 app/src/test/resources/confinement-probe.properties
delete mode 100644 docs/examples/scripting/bsf/lib/bsf.jar
delete mode 100644 docs/examples/scripting/groovy/examples/adminprotocol/lib/commons-codec-1.3.jar
delete mode 100644 docs/examples/scripting/groovy/examples/adminprotocol/lib/jdom.jar
delete mode 100644 docs/examples/scripting/groovy/examples/adminprotocol/lib/roller-rap-sdk.jar
delete mode 100644 it-selenium/logs/roller-2026-08-11-165858.log.gz
delete mode 100644 it-selenium/logs/roller-2026-08-11-165926.log.gz
delete mode 100644 it-selenium/logs/roller-2026-08-11-170101.log.gz
delete mode 100644 it-selenium/logs/roller-2026-08-11-170125.log.gz
delete mode 100644 it-selenium/logs/roller-2026-08-11-170214.log.gz
delete mode 100644 it-selenium/logs/roller-2026-08-11-170353.log.gz
delete mode 100644 it-selenium/logs/roller-2026-08-11-170505.log.gz
delete mode 100644 it-selenium/logs/roller-2026-08-11-170652.log.gz
delete mode 100644 it-selenium/logs/roller.log
create mode 100644 it-selenium/src/test/java/org/apache/roller/selenium/core/BootstrapTokenPage.java
create mode 100644 it-selenium/src/test/java/org/apache/roller/selenium/core/BootstrapTokenPageTest.java
create mode 100644 skills/README.md
create mode 100644 skills/roller-release/SKILL.md
create mode 100644 skills/roller-release/references/asf-policy.md
create mode 100644 skills/roller-release/references/atr.md
create mode 100644 skills/roller-release/references/dist-svn.md
create mode 100644 skills/roller-release/references/signing-key.md
create mode 100644 skills/roller-release/references/vote-and-announce.md
create mode 100644 skills/roller-release/references/website.md
create mode 100755 skills/roller-release/scripts/bump-version.sh
create mode 100755 skills/roller-release/scripts/check-release.sh
create mode 100644 skills/roller-security/SKILL.md
create mode 100644 skills/roller-security/assets/SUMMARY.md
create mode 100644 skills/roller-security/assets/item-template/CVE_FORM.md
create mode 100644 skills/roller-security/assets/item-template/IMPLEMENTATION.md
create mode 100644 skills/roller-security/assets/item-template/TRACKING.md
create mode 100644 skills/roller-security/references/asf-process.md
create mode 100644 skills/roller-security/references/comms-templates.md
create mode 100644 skills/roller-security/references/cve-portal.md
create mode 100644 skills/roller-security/references/obsidian-tasks-tracking.md
create mode 100644 skills/roller-security/references/roller-codebase-map.md
create mode 100644 skills/roller-security/references/severity-and-cvss.md
create mode 100755 skills/roller-security/scripts/check-private.sh
create mode 100644 skills/roller-security/scripts/migrate-status.py
create mode 100644 skills/roller-security/scripts/triage-status.py