fafef8d73b1384bb239f11ba35996b32630f9ab3 Tomáš Müller <muller@unitime.org> 2-Oct-2026 4:14 PM Course Timetabling: Suggestions - Committed student conflicts: improved handling of committed student conflict when they are loaded in (not computed) 6eb57433e66df50486c9744556a88ab5f76cead0 Tomáš Müller <muller@unitime.org> 2-Oct-2026 4:14 PM Examinations: Table - do not wrap assigned periods or individual assigned rooms e0909ee4bc0e609342e7afe63a419c31ad6531ec Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:57 PM Hibernate Statistics: GWT - Hibernate Statistics page rewritten to GWT (set unitime.legacy.hibernateStats to true for the old Struts-based page) 27b7e020ebe8dfe9a2afaca1afbadbd434540c31 Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:57 PM Solver Configurations: GWT - Solver Configurations page rewritten to GWT (set unitime.legacy.solverConfig to true for the old Struts-based page) 90e2386e6e8b62c08269d843a72d2cad677f3daf Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:57 PM GWT: Buttons - when AriaButton.setAccessKey(char) is used, underline the matching character in on the button 653d8e32d9526cb24f985322458b14301e60da84 Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:57 PM Application Configuration: GWT - Application Configuration page rewritten to GWT (set unitime.legacy.applicationConfig to true for the old Struts-based page) c35cab9a44bfac01524042627641c032b5a03e6f Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:57 PM Test HQL - fixed an error when __Link or __Details are used a8ea3f069b7469db9022c8ff0643fc7c213d1531 Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:57 PM Code Cleanup: GWT - fixed a few Java warnings e3c8478cac1aa227ff6997cd1cbba8de3c047ea3 Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:56 PM Data Exchange: Academic Session Export - exclude scheduled tasks from the academic session export 659b6a73bdc08b9f258200e7ab6d25ff9f9822a9 Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:56 PM XML API: disallow-doctype-decl - also secure XML parser against XXE attacks ae456b36107b49e9d2da109e5e6c9ab1693edfd8 Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:56 PM XML Security: Use Default SAXReader - use SAXReader.createDefault() when reading an XML file that disables external-general-entities, external-parameter-entities, and load-external-dtd - this is to fix the CWE-611 weakness (Improper Restriction of XML External Entity Reference) ecfc418b4c04328960b97df16ffbc3b4ff302166 Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:55 PM Dependencies: Apache FreeMarker - Apache FreeMarker updated to 2.3.35 (was 2.3.34) - this is to fix CVE-2026-84939 Apache FreeMarker template loading mechanism vulnerable to path traversal 021d598541f2d65b08636e7ca6223a7cff09b6fc Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:55 PM Users: API Token - new GWT-based page: make sure API token fits the page (does not get trimmed) ad5439740e4903c7b8d69defb6d6b0fc3ed950a2 Tomáš Müller <muller@unitime.org> 1-Oct-2026 5:55 PM Add/Edit Academic Session: Dates - new GWT-based page: set the dates in server timezone a485676bd9dbd8ca3deb21fbdc45766115a5c7be Tomáš Müller <muller@unitime.org> 24-Sep-2026 7:32 AM Code Cleanup: Unique Ids - do not convert unique ids to integers fd7f76c2e130233ada35e4bd81fd17ef00b9003c Tomáš Müller <muller@unitime.org> 23-Sep-2026 9:16 AM Room Availability: GWT - Room Availability page rewritten to GWT (set unitime.legacy.roomAvailability to true for the old Struts-based page) 65cd05b990f5439d5d4292458a7cdbfdd1b3bc35 Tomáš Müller <muller@unitime.org> 23-Sep-2026 9:16 AM Instructional Types, Users: GWT - Instructional Types page rewritten to GWT (set unitime.legacy.itypes to true for the old Struts-based page) - Users page rewritten to GWT (set unitime.legacy.users to true for the old Struts-based page) 1255fd45a4018cdc68f426d00e17c0616846d7b3 Tomáš Müller <muller@unitime.org> 23-Sep-2026 9:16 AM Administration: GWT - admin pages using SimpleEditPage - when list field must be unique, only show current and unused items on the detail page - added long label for lists (long labels are used on the detail, short label when all records are edited at once) - field description can be an HTML 4aceb9a3225836cf2e3d655837e062b5d0b6b438 Tomáš Müller <muller@unitime.org> 23-Sep-2026 9:16 AM Administration: GWT - admin pages using SimpleEditPage - set max length for number fields - when multi field must be unique, each item can be selected at most once across all the records 64d0f624fa28ce02348551ae37bb059bba765939 Tomáš Müller <muller@unitime.org> 23-Sep-2026 9:15 AM Customization: Banner 9 Catalog Course Details - improved error checking on the Ellucian API calls 3bf03def29c7139d443279207ee12847cab6c175 Tomáš Müller <muller@unitime.org> 23-Sep-2026 9:15 AM Edit Class, Edit Scheduling Subpart: Date Pattern - old Struts-version of the page: fixed date pattern checking when date pattern id exceeds the max integer value 4c22860ea3e59ecd97f0e04732e226445170b18e Tomáš Müller <muller@unitime.org> 23-Sep-2026 9:15 AM Instructor Detail: GWT - fixed the ability for the new GWT-based Instructor Detail page to be used the instructor