November 2025 - Koha-bugs - lists.koha-community.org

[Bug 39324] New: [OMNIBUS] All QA tests should pass
by bugzilla-daemon＠bugs.koha-community.org 13 Nov '25

13 Nov '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39324 Bug ID: 39324 Summary: [OMNIBUS] All QA tests should pass Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: jonathan.druart(a)gmail.com Reporter: jonathan.druart(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Currently we have the QA script (qa-test-tools) running the tests before and after the patches we are testing. Then we compare the results and raise errors in case of new introduced errors. It is causing several problems: 1. Bad detection of deleted/moved files 2. False positives and some errors we don't catch 3. It is slow to run, especially because of the git manipulation (switch of branches) Ideally we need the tests to pass on the whole codebase, so we just need to run the tests on the file modified by the patchset. This is an omnibus bug in order to track the different steps we need to make the tests pass on the whole codebase, before being able to adjust the QA script. See also https://gitlab.com/koha-community/qa-test-tools/-/issues/93 -- You are receiving this mail because: You are watching all bug changes.

1 20

[Bug 39835] New: Tidy is_boolean / tinyint
by bugzilla-daemon＠bugs.koha-community.org 13 Nov '25

13 Nov '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39835 Bug ID: 39835 Summary: Tidy is_boolean / tinyint Change sponsored?: --- Product: Koha Version: 24.11 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: jonathan.druart(a)gmail.com Reporter: jonathan.druart(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Blocks: 39324 We have a test in the QA script to catch missing "is_boolean" in the schema if the column is a tinyint(1)/boolean. We need to add it to all the attributes, so the new version of the script can know if something is missing. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39324 [Bug 39324] [OMNIBUS] All QA tests should pass -- You are receiving this mail because: You are watching all bug changes.

1 24

[Bug 40766] Reflected XSS in set-library.pl
by bugzilla-daemon＠bugs.koha-community.org 13 Nov '25

13 Nov '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40766 David Nind <david(a)davidnind.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED CC| |david(a)davidnind.com Status|Needs documenting |RESOLVED --- Comment #10 from David Nind <david(a)davidnind.com> --- Security/bug fix, no changes to the manual required. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 31345] New: Add ability to exit process_message_queue.pl early if any plugin before_send_messages hook fails
by bugzilla-daemon＠bugs.koha-community.org 13 Nov '25

13 Nov '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31345 Bug ID: 31345 Summary: Add ability to exit process_message_queue.pl early if any plugin before_send_messages hook fails Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Sometimes it would be better for process_message_queue.pl to stop if a plugin hook fails rather than continue processing. It would be nice if that was a command line option. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 25

[Bug 40641] New: Patron.pm can create warnings
by bugzilla-daemon＠bugs.koha-community.org 13 Nov '25

13 Nov '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40641 Bug ID: 40641 Summary: Patron.pm can create warnings Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: lucas(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Use of uninitialized value in concatenation (.) or string at /kohadevbox/koha/Koha/Patron.pm line 797. Because of this t/db_dependent/Patron/Borrower_Debarments.t fails -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 17

[Bug 37930] New: Change how we handle authorised values in Vue
by bugzilla-daemon＠bugs.koha-community.org 13 Nov '25

13 Nov '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37930 Bug ID: 37930 Summary: Change how we handle authorised values in Vue Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: ERM Assignee: jonathan.druart(a)gmail.com Reporter: matt.blenkinsop(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org CC: jonathan.druart(a)gmail.com, jonathan.field(a)ptfs-europe.com, martin.renvoize(a)ptfs-europe.com, matt.blenkinsop(a)ptfs-europe.com, pedro.amorim(a)ptfs-europe.com A concept for abstracting the import of authorised values to make it much easier to set them up in new vue apps throughout Koha -- You are receiving this mail because: You are watching all bug changes.

1 66

[Bug 39262] New: shotCartUpdate indirectly uses eval()
by bugzilla-daemon＠bugs.koha-community.org 13 Nov '25

13 Nov '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39262 Bug ID: 39262 Summary: shotCartUpdate indirectly uses eval() Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org In ./koha-tmpl/opac-tmpl/bootstrap/js/basket.js there is a function "showCartUpdate" which calls the following line: setTimeout("hideCart()", 2000); When you pass a string as the first argument to setTimeout, it performs an eval(). While I don't think there's any security risk in this, it's suboptimal, and it will cause problems when we try to use Content-Security-Policy later. We should just update this to the following: setTimeout(hideCart, 2000); -- There's probably other examples of this, but this is the one that jumped out to me while working on CSP. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 15

[Bug 39772] New: Background Jobs page lists bogus job types for jobs implemented by plugins
by bugzilla-daemon＠bugs.koha-community.org 13 Nov '25

13 Nov '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39772 Bug ID: 39772 Summary: Background Jobs page lists bogus job types for jobs implemented by plugins Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: tadeusz(a)sosnierz.com QA Contact: testopia(a)bugs.koha-community.org Currently the jobs page lists a job type of "Unknown job type 'plugin_*'" for all plugin-sourced jobs. While we don't currently have an institution of a human-readable job name, anything not looking like an error would be an improvement here. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 31

[Bug 39191] New: Add a `format` param to Koha::Exceptions::ArticleRequest::WrongFormat
by bugzilla-daemon＠bugs.koha-community.org 13 Nov '25

13 Nov '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39191 Bug ID: 39191 Summary: Add a `format` param to Koha::Exceptions::ArticleRequest::WrongFormat Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org It would be handy if the exception carried the 'wrong format passed' which happens to be available in the context the exception is thrown. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 13

[Bug 39832] New: Add $basket->vendor() method
by bugzilla-daemon＠bugs.koha-community.org 13 Nov '25

13 Nov '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39832 Bug ID: 39832 Summary: Add $basket->vendor() method Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org For API usage, we need such method. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 17