Bootstrap 4 Package

⚠️ Breaking Changes

• Requires Jahia 8.2.0+ — Jahia 8.0 and 8.1 are end-of-life
• Requires Java 11+ — compiler target raised from Java 8 to Java 11
• Spring removed — OSGi Declarative Services only; no Spring context, no Blueprint extender

🔒 Security Fixes

• XSS: page1Title unescaped in navbar dropdown link (navbar.basenav.jsp)
• XSS: brandText unescaped in navbar body (navbar.jsp)
• Stored XSS: title/caption unescaped in carousel item body text (carouselItem.jsp)
• Stored XSS: footer property unescaped in card (card.jsp)

🐛 Bug Fixes

• Carousel indicators: active class on <button> instead of <li> — visual state broken after first slide
• Carousel: wrong guard variable ${empty ride} defaulted wrap (should be ${empty wrap})
• Carousel JS: pause/play labels injected via fn:escapeXml into <script> string — replaced with data-attribute pattern
• Pagination: disabled prev/next links keyboard-activatable after tabindex="-1" removal — restored alongside aria-disabled
• Card: dynamic tag name for header sanitized with whitelist instead of fn:escapeXml
• Package jar: was named *-root.jar — now correctly bootstrap4-package-4.7.0.jar
• Package: bootstrap4-core dependency version was literally c (typo)

♿ Accessibility (WCAG 2.1 AA)

Full WCAG 2.1 Level AA pass across all components: breadcrumb, carousel, carousel item, tabs, navbar, pagination, button/modal, alert, grid, image. Highlights:

• Carousel: accessible indicators (buttons), prev/next controls, pause/play button (WCAG 2.2.2)
• Navbar: dropdown triggers converted to <button>, aria-current="page" on active links
• All components: proper landmark regions, ARIA roles/labels, keyboard navigation

🏗️ Build

• Maven CI-friendly ${revision} — version defined once in root pom
• Package aligned with Bootstrap 5 pattern (jahia-packages-parent, full manifest entries)
• CodeQL + Dependabot enabled
• LICENSE.txt and SECURITY.md added

📖 Documentation

• CHANGELOG.md introduced
• MIGRATION.md — migration guides extracted from README
• Bootstrap 4 EOL warning with link to Bootstrap 5

Full changelog: bootstrap4-modules-4.6.8...bootstrap4-modules-4.7.0

Add permission to the Bootstrap 4 components to allow for the deactivation of those components.

Update to Bootstrap 4.6.2

Add custom picker for button internal link to be compliant with new UI

What's new in this version?

• QA-13554: Update assets to bootstrap 4.6.0
• QA-13562: Prevent NavBar exception on Studio (in-context mode)
• #26 Order mixin for the Grid / Layout component.

Warning Please read carefully the Migration to Bootstrap 4 v4.6.x section on https://github.com/Jahia/bootstrap4/releases/tag/bootstrap4-modules-4.6.1

What's new in this version?

• Update to Bootstrap 4.5.3
• Move Jahia-Module-Priority part to the maven-bundle-plugin instructions
• Fix language switch menu (add missing mainResourceNode declaration)

Warning Please read carefully the Migration to Bootstrap 4 v4.6.x section on https://github.com/Jahia/bootstrap4/releases/tag/bootstrap4-modules-4.6.1

What's new in this version?

• Add new class language-nav to be able to customize the rendering of the language menu #14

• Add some aria info on language menu

• Allow to limit the number of items on grid & layout component #20

Warning Please read carefully the Migration to Bootstrap 4 v4.6.x section on https://github.com/Jahia/bootstrap4/releases/tag/bootstrap4-modules-4.6.1

What's new in this version?

• Update to Bootstrap v4.5.2

Warning Please read carefully the Migration to Bootstrap 4 v4.6.1 section on https://github.com/Jahia/bootstrap4/releases/tag/bootstrap4-modules-4.6.1

What's new in this version?

•  Rename grid area to allow copy/paste.
•  Fix conflict on card
•  Grid layout support of container-{breakpoint} class

Warning Please read carefully the Migration to Bootstrap 4 v4.6.1 section on https://github.com/Jahia/bootstrap4/releases/tag/bootstrap4-modules-4.6.1

What's new in this version?

•  Rename grid area to allow copy/paste.
•  Fix conflict on card
•  Grid layout support of container-{breakpoint} class

• New package for Jahia 8
• Update Bootstrap to v4.5.0

QA-13554: Update assets to bootstrap 4.6.0
QA-13562: Prevent NavBar exception on Studio (in-context mode)

Warning Please read carefully the Migration to Bootstrap 4 v2.5.0 section on https://github.com/Jahia/bootstrap4/tree/Jahia-73

What's new in this version?

• Update to Bootstrap 4.5.3
• Add new skin for alerts
• Add some aria info on language menu
• Fix language switch menu (add missing mainResourceNode declaration)
• Move Jahia-Module-Priority part to the maven-bundle-plugin instructions
• #14 Add new class language-nav to be able to customize the rendering of the language menu 
• #20 Allow to limit the number of items on grid & layout component 

Warning Please read carefully the Migration to Bootstrap 4 v2.5.x section on https://github.com/Jahia/bootstrap4/releases/tag/bootstrap4-modules-2.5.0

What's new in this version?

Update to Bootstrap 4.5.2

Warning Please read carefully the Migration to Bootstrap 4 v2.5.0 section on https://github.com/Jahia/bootstrap4/releases/tag/bootstrap4-modules-2.5.0

What's new in this version?

• Rename grid area to allow copy/paste.
• Grid layout support of container-{breakpoint} class

Fix a definition conflict on card footer

Add a Brand image for small devices on navbar

Update bootstrap to v4.5.0. See all closed issues and merged pull requests updates on https://github.com/twbs/bootstrap/releases/tag/v4.5.0
Add an ID on button component
Add aria-label management to B4 section
Add a language switch button on navbar
Allow to choose a custom page as root for navbar

Remove spring usage

• Fix on the layout and grid component to prevent duplicate skin loading
• Update popper.js to v1.16.0

 

• Fix on navbar
• Improvement on the grid component

 

• Update bootstrap lib to v4.4.1
• Remove the call to bootstrap.min.css on the jmix_list/html/list.jsp view to prevent bad behaviors on site settings
• Fix navmenu if display subpages is not set
• Refactoring of the Layout / Grid component (move the grid part to the row)
• Add new borderRadiusSize property on advanced image
• Add new groovy script to refactor the Layout / Grid components
• Add new groovy script to set the default borderRadius to rounded-0 on (advanced image)
• Update some labels

How to migrate from a previous Bootstrap 4 version

We did refactor the Layout / Grid component by moving the Grid part to the Create Row.

As a result, when you want to create some columns, you will need to check the Create Row / Columns checkbox and then select the type of grid that you want to use (Predefined or Custom).

How to apply this refactoring?
A groovy script has been made to helps you refactoring existing content. To execute this script, go to the Groovy Console (via the tools http://localhost:8080/tools). The name of the script is grid-refactoring.groovy
First, you can execute this script to test it without checking the Apply refactoring. It will list the nodes that will need to be updated. Then, you can check the Apply refactoring to save the updates by on the default workspace.

What is done on this script?
This script executes a query on your default repository and checks on all Layout / Grid nodes if they use a Predefined or a Custom grid type, and set the right type on the Create Row mixin.

What is not done with this script?
Publication
This script updates the default workspace and publishes nodes without pending modifications; you will need to publish some nodes manually. Note that the publication is not mandatory; the output should be correct on Live even if you don't execute the groovy script.

Templates and other modules
You will also need to update all your modules or templates set that uses the Layout / Grid module, and if you were using the legacy grid, you will need to check the Create Row / Column checkbox and select the right grid type.