The XWiki development team is proud to announce the availability of XWiki 18.9.0RC1. This release improves Live Data (entries are saved automatically and keep their positions while editing), lets you edit Code macros in place in the experimental BlockNote editor, which now shows the same realtime edit actions as the WYSIWYG editor, and asks for a confirmation before performing an export opened from a link. For developers, there are new pickers for one or more locations, export format handlers, new Live Data APIs and plain CSS skin customizations. This release contains security fixes, with the highest severity being 9.3/10. See the release notes for more information. …

The AntiSpam Tool Application 1.13 has been released. It adds navigation in the list of events, fixes several security issues and now reads the last entry of the X-Forwarded-For header by default. …

The Documentation extension 1.18 has been released. It lets documentation pages hold content fragments that other pages display with the new Content Fragment macro, stops renaming a documentation page from logging an error, and fixes false reports from the verb, video attachment and Related link label checks. …

The Release Notes Application 2.8 has been released. It lets changes and release notes be updated over the REST API and from scripts, makes concurrent additions to a release note safe, extends the Java API, and brings a series of security fixes. …

The OAuth2 and OpenID Connect Extension 2.29.0 has been released. It makes authentication work from several browser tabs at the same time, adds configurable timeouts to the requests sent to the provider, and adds CORS support to the provider endpoints meant to be called by JavaScript clients. …