26.4.7

A follow-up to the Suramadu rename.

Source availability

The AGPL v3 section 13 source notice is now shown on every page a network user
can reach — the application selector, the hosted applications, and the admin
console. It renders as a small unobtrusive link that expands on hover.

Build

The remaining node and protobuf convention plugins move to the suramadu
namespace, completing the rename of the build. No effect on the published
artefacts.

Upgrading

Nothing to do. Configuration files, system properties, Java packages and the
public API are unchanged from 26.4.6.

26.4.6 — Suramadu

The project has been renamed from its WebSwing-derived naming to Suramadu,
after the bridge that crosses from Java to the island of Madura.

Everything a user or administrator touches now carries the new name. Everything
a running deployment depends on is unchanged.

Renamed

• Distribution archive, WAR, Gradle modules and jars
• Configuration files: suramadu.config, suramadu.properties
• Server scripts, admin console and client assets
• Docker image: manticore-projects/suramadu

Unchanged

• Java packages and the public API (org.webswing.*)
• System properties (-Dwebswing.*)
• Jetty properties keys (org.webswing.server.*)

Upgrading

No action required. Existing webswing.config and webswing.properties
files are still read, so an installation created before the rename keeps working
untouched. Rename them when convenient, or leave them. Where both names are
present, the suramadu.* files take precedence.

See Upgrading
in the README for the full mapping.

Origin

Suramadu is derived from WebSwing v20.2.5, the last release published under the
GNU AGPL v3. It is not affiliated with, endorsed by, or supported by Webswing
Limited or Webswing s.r.o.

Javascript module updates

Superseded by 26.4.6. The project has been renamed to Suramadu; see the README.

Full Changelog: 26.4.4...26.4.5

26.4.4 Node Module updates

Superseded by 26.4.6. The project has been renamed to Suramadu; see the README.

Upgrade Node Modules, adopt Junit6

Full Changelog: 26.4.3...26.4.4

26.4.3 - Fixes

Superseded by 26.4.6. The project has been renamed to Suramadu; see the README.

Full Changelog: 26.4.1...26.4.3

26.4.1

Superseded by 26.4.6. The project has been renamed to Suramadu; see the README.

• Hot fix
• CSP adjusted to allow IFRAME downloads

Full Changelog: 26.4...26.4.1

26.4

Superseded by 26.4.6. The project has been renamed to Suramadu; see the README.

Truly headless w/o dependency on X11/Xorg or XFVB.

Full Changelog: 26.3...26.4

26.3

Superseded by 26.4.6. The project has been renamed to Suramadu; see the README.

• switch to SSE/AVX/NEON ZPNG encoder for better compression and ARM/NEON support
• adopt Vector Window Decorations, drop the XFWM4 bitmap theme
• HTTP2 support
• Update Shiro 3

26.2

Superseded by 26.4.6. The project has been renamed to Suramadu; see the README.

Security fixes

What's Changed

• fix: replace insecure AES/ECB encryption with AES/CBC in JwtUtil by @semgrep-code-manticore-projects[bot] in #1
• Fix XSS vulnerability in FileTransferHandlerImpl file upload error message by @semgrep-code-manticore-projects[bot] in #3

New Contributors

• @semgrep-code-manticore-projects[bot] made their first contribution in #1

Full Changelog: 26.1...26.2

Jetty 12 EE8

Superseded by 26.4.6. The project has been renamed to Suramadu; see the README.

• Support Jetty 12
• Drop some obsolete dependencies
• Drop the Maven build support

Full Changelog: 26.0...26.1