Aller au contenu principal
Jahia Store
FR

Versions cleaner

community
Télécharger 2.3.2

Informations

Identifiant du module
versions-cleaner
Identifiant de groupe
org.jahia.community
Statut
community
Catégorie
Admin Features
Auteur
Florent BOURASSE
Site web du développeur
http://www.jahia.com
Nécessite Jahia
8.2.0.0
Mis à jour
2026-07-09
Source
scm:git:git@github.com:Jahia/versions-cleaner

Jahia module to clean versions by:

  • keeping the last N versions
  • removing the orphaned versions

Versions

Highlights

  • Security hardening of the cleaner: concurrent-run guard, JCR path-traversal rejection, and cron-expression validation.
  • Accessibility overhaul of the admin UI (Execution + Scheduler Configuration panels) to meet WCAG 2.1 AA.
  • Dependency hygiene: Dependabot enabled, multiple CVE/alert upgrades applied.
  • Repo metadata refresh (AGENTS.md, SECURITY.md, CLAUDE.md reference, README updates for versionsCleanerConfig / saveConfig).

Features

  • Add Dependabot configuration file for weekly updates (7de500d).

Fixes

Security

  • Harden versions-cleaner against race, traversal, and bad cron (e587925):
    • CleanCommand.execute now uses AtomicBoolean.compareAndSet so concurrent GraphQL/Karaf invocations cannot both pass the running guard and start two cleanup threads (race on bulk deletion).
    • CleanCommand.getNode rejects subtree-path segments equal to . or .., preventing redirection of the cleanup scope outside the JCR version-storage subtree.
    • VersionsCleanerMutationExtension.saveConfig validates the supplied Quartz cron expression via CronExpression.isValidExpression before persisting, rejecting malformed schedules.
  • Upgrade @babel/plugin-transform-modules-systemjsfast-uriaxiosip-address to clear Dependabot alerts (5e1d8f4).

Accessibility

  • Resolve WCAG 2.1 AA issues in admin UI (1199e7d) — initial pass covering SchedulerConfig.jsxVersionsCleaner.jsxVersionsCleaner.scss, locale strings.
  • Resolve remaining WCAG 2.1 AA issues — C-1, C-2, M-1..M-6, N-1..N-3, N-6, N-7 (1099ebf).

Refactoring

  • No standalone refactors in this range; UI rework occurred alongside accessibility fixes.

Tests

  • No new test commits in this range. Pending uncommitted change to tests/cypress/e2e/03-versionsCleanerConfiguration.cy.ts.

Docs / Meta

  • Update README.md and CLAUDE.md for versionsCleanerConfig / saveConfig and v2.3.2 (39ae293).
  • Rename CLAUDE.md to AGENTS.md and add CLAUDE.md reference (f5cbf50).
  • Streamline SECURITY.md policy (cdf5add).

Full Changelog2_3_1...2_3_2

Nécessite Jahia 8.2.0.0Mis à jour 2026-05-19
Nécessite Jahia 7.3.7.1Mis à jour 2025-06-12