Apache OFBiz News March 2021

Welcome to our regular monthly round-up of OFBiz news. This month we
have news about the new release, and new committers along with our
usual list of features, improvements, and Statistics.

Apache OFBiz 17.12.06 Released!

During this month the community announced the release of 17.12.06.
The new release consolidates all work done since the previous release in Jan 2021.

The release file can be downloaded following the
instructions on the Downloads page:
https://ofbiz.apache.org/download.html

Please refer to the Release Notes for more details of the changes introduced with this new version:
https://ofbiz.apache.org/release-notes-17.12.06.html

Please note that a security vulnerability has been reported for the previous releases. It is highly recommended that you upgrade to the
17.12.06 release to mitigate this vulnerability.

Refer following links to know more about security vulnerabilities:
https://ofbiz.apache.org/security.html
https://s.apache.org/y282j

As shared in our previous blog, JFrog announced to shut down JCenter services on May 1st, 2021. 17.12.06 comes with migration to the Maven Central repository, hence we highly recommend an upgrade to have a smooth running of systems post-shutdown.

New Committers

During this month, the Project Management Committee (PMC) invited Priya Sharma and Martin Becker to become new committers. Please join us in welcoming and congratulating them in their new role on the project, and also thanking them for all their contributions.

Statistics

Apache Kibble tracks some Apache OFBiz community statistics on its
demo instance, so we have highlighted a few of our stats for the last
month:

  • Code Change and Commit Activity:

    • Framework: 98 commits to the code base that changed 2,050 lines of code ( 9 committers were active)
    • Plugins: 15 commits to the code base that changed 739 lines of code ( 5 committers were active)
  • Mailing Lists:
    • Dev: 79 emails sent and 20 topics discussed ( 29 different people)
    • User: 68 emails sent and 27 topics discussed ( 29 different people)

New features and improvements

Functional enhancements and improvements as well as updates of third party libraries and source code refactoring:

Framework

  • Form widget "checkbox" do not persist selected value with multiple options checked (OFBIZ-12154)
  • Improves encoding in 3 classes (GitHub Link)
  • Removes deprecated ByteWrapper class (OFBIZ-12194)
  • Converts CheckoutServices.xml minilang to groovy (#75) (GitHub Link)
  • Have a status on agreement records (OFBIZ-10902)
  • Removes extra space from eecas.xml file (GitHub Link)
  • Replaces java.rmi.server.UID by java.util.UUID (GitHub Link)
  • Adds german translation for OrderShoppingList Labels (OFBIZ-12208)
  • Secure the uploads (OFBIZ-12080)
  • Improves all the service level error messages for missing required field for webtools component (OFBIZ-8717)
  • Comments out the SOAP and HTTP engines (OFBIZ-12212)
  • Improves UtilObject class (OFBIZ-12216)

Plugins

  • Adds JAX-RS capabilities (Jersey) (GitHub Link)
  • Removes "ofbiz" prefix from files and folders, code cleanup (OFBIZ-12197)
  • Corrects asciidoc levels and follows one-sentence-per-line rule (OFBIZ-12197)
  • Fixes html bugs spotted by sonarcloud (OFBIZ-12197)
  • Fixes sonarcloud error by using the resource integrity feature for embedding external redoc javascript file (OFBIZ-12197)
  • Updates Redoc version and makes it locally available (OFBIZ-12207)
  • Updates swagger ui version to 3.45.1, moves and updates README (OFBIZ-12207)
  • Comments out the SOAP and HTTP engines (OFBIZ-12212)

Bugfixes

Functional and technical bugfixes:

Framework

  • Fixes error in deleting Financial Account (OFBIZ-12153)
  • Fixes: When creating blog or forums, it failed to save (OFBIZ-10426)
  • Fixes: Can't search ViewEntity InventoryItemDetailForSum (OFBIZ-12193)
  • Fixes: webtools/control/threadList no longer works on trunk (only) (OFBIZ-12195)
  • Fixes: Use Labels in themes names (OFBIZ-9863)
  • Fixes: Replace Bintray by a new place to upload the Gradle Wrapper (OFBIZ-12192)
  • Fixes bug preventing proper explosion of BOM containing virtual nodes (OFBIZ-12191)
  • Fixes: Page selection is not working correctly in the lookup-dialog (#287) (GitHub Link)
  • Fixes: createGlReconciliation throws an error (OFBIZ-10675)
  • Fixes: EditFinAccountReconciliations does not work (OFBIZ-12198)
  • Fixes: Upgrade Apache PDFBox to 2.0.23 because of CVE-2021-27807 and CVE-2021-27906 (OFBIZ-12205)
  • Fixes: ChangeReason was not being set on OrderStatus when orderItem was marked cancelled with reason (OFBIZ-12210)
  • Fixes invalid Currency symbol in income statement csv export (OFBIZ-12108)
  • Fixes: Convert ImageManagementServices.xml minilang to groovy (OFBIZ-11604)
  • Fixes: addImageForProduct fails (OFBIZ-12211)
  • Updates Tika because of CVE-2021-2865 (GitHub Link)

Plugins

  • Fixes: Incorrect display name for the Swagger component corrected (OFBIZ-12197)
  • Fixes: Error message is displayed when user clicks on create link after the user quick checkout and user is not logged in (OFBIZ-12188)

Documentation

Framework

  • Puts end of quote block on a newline (GitHub Link)
  • Orders component documentation in the same order than application menu (OFBIZ-12166)
  • Migrates Wiki How to Create the main Company in Party Manager to user-manual (OFBIZ-12065)

Plugins

  • Orders component documentation in the same order than application menu (OFBIZ-12166)
  • Fixes ldap documentation (GitHub Link)