October 2026 - Koha-bugs - lists.koha-community.org

[Bug 42949] New: Add configurable complexity score header for WAF rate limiting
by bugzilla-daemon＠bugs.koha-community.org 20 Oct '26

20 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42949 Bug ID: 42949 Summary: Add configurable complexity score header for WAF rate limiting Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Target Milestone: --- We should have an optional complexity score response header that enables per-endpoint rate limiting in things like Cloudflare WAF Rate Limiting Rules. Heavy endpoints (search results, AJAX) get higher scores so they consume more of a client's rate limit budget. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 12

[Bug 43576] New: Add icon-only collapsed mode to staff interface sidebar menus
by bugzilla-daemon＠bugs.koha-community.org 20 Oct '26

20 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43576 Bug ID: 43576 Summary: Add icon-only collapsed mode to staff interface sidebar menus Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff interface Assignee: koha-bugs(a)lists.koha-community.org Reporter: martin.renvoize(a)openfifth.co.uk QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Target Milestone: --- This patch enhances the sidebar collapse feature added in bug 42322. Currently, collapsing the sidebar hides all menu links, leaving only the toggle button. This wastes the remaining horizontal space and removes quick access to the menu's options entirely. This patch: - Moves the collapse toggle button inside the grey sidebar background, so it visually reads as part of the menu it controls, rather than a separate floating button. - Introduces an opt-in icon-collapse mode: once a sidebar menu is enhanced with icons, collapsing it shows a narrow icon-only rail (with hover tooltips and the current page still highlighted) instead of hiding everything. - Persists the collapsed/expanded state across page loads using localStorage. - Converts the following sidebar menus to icon-collapse mode: Circulation (patron-context menu and module nav), Cataloguing, Tools, System preferences, Reports, Bibliographic record view, Serials, Labels, Point of sale, Guided reports view, and the Vue-driven Vendor, Acquisitions and Administration menus. Menus not yet converted (facets/tags/search-filter sidebars, and the ERM/ILL/Preservation/SIP2 Vue module navigation) keep today's collapse-to-blank behaviour and can be converted in follow-up patches using the same pattern. Test plan: 1. Apply the patch and rebuild the staff interface assets (yarn build). 2. Log in to the staff interface and go to a patron's detail page (Patrons > search a patron > Details). 3. Confirm the toggle button now sits flush inside the grey sidebar background rather than floating as a separate bordered button. 4. Click the toggle to collapse the sidebar. Confirm the circulation patron menu collapses to a narrow icon-only rail, each icon shows a tooltip on hover, and the current page's icon is still highlighted. 5. Reload the page. Confirm the sidebar remains collapsed (state is remembered across page loads). 6. Expand the sidebar again and visit a page using a menu that has NOT been converted yet (e.g. a facets/filter sidebar). Collapse it and confirm it still collapses to a blank rail as before (no regression). 7. Repeat steps 2-5 for a sample of the converted menus: Cataloguing (e.g. Inventory), Tools, Administration > System preferences, Reports, a bibliographic record's Detail page, Serials, Label creator, Point of sale, Guided reports. 8. Repeat for the Vue-driven menus: Acquisitions home, a vendor's detail page, and Administration (e.g. Authorized values). Confirm icons show, collapse works, and the active page is still highlighted when collapsed. 9. Run the Sidebar_spec.ts Cypress test and confirm it still passes. 10. Sign off. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 114

[Bug 43700] New: Use background report jobs to schedule reports using the task scheduler
by bugzilla-daemon＠bugs.koha-community.org 20 Oct '26

20 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43700 Bug ID: 43700 Summary: Use background report jobs to schedule reports using the task scheduler Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Reports Assignee: koha-bugs(a)lists.koha-community.org Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: lisette(a)bywatersolutions.com Target Milestone: --- We could replace the need for the "at" command entirely if we utilize the reports background jobs. Reports would need a "don't run before" datetime column and then the query that fetches the jobs could filter out anything where that column is in the future. The form data would need stored somewhere as well so the output can be emailed properly. A possible further enhancement ( likely a report in it's own right ) would be to add periodicity by having periodic reports stored in a table, and a nightly cronjob that would queue up report background jobs for the next 24 hours based on the periodicity! -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 8

[Bug 6532] Way to move items to another record in batches
by bugzilla-daemon＠bugs.koha-community.org 20 Oct '26

20 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6532 Lisette Scheer <lisette(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- QA Contact|koha-bugs(a)lists.koha-commun |jacob.omara(a)openfifth.co.uk |ity.org | -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 42777] New: Authority linker cron job removes punctuation
by bugzilla-daemon＠bugs.koha-community.org 20 Oct '26

20 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42777 Bug ID: 42777 Summary: Authority linker cron job removes punctuation Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: mnero(a)oslri.net QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl We have AutoLinkBiblios enabled, so when we save a bib record, the headings are automatically linked. When doing this, if there is a period at the end of a field being linked, the $9 appears after the period. We also have a cron job that runs once a week to run general authority linking on our system. During that process, if there is a period at the end of the field, it removes it when adding the $9. This is causing an issue with the same heading appearing with the period if it was linked upon saving and without the period if it was linked during the cron job. If the period is before a $2 (Fantasy fiction.$2lcgft for example), the cron job will change it to Fantasy fiction$2lcgft, removing the period. While this doesn't seem to affect access or indexing, it creates a problem when searching for specific strings in the fields or sorting exported information from any of those controlled fields. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 6

[Bug 14806] Action Log for Modifying borrower messaging preferences
by bugzilla-daemon＠bugs.koha-community.org 20 Oct '26

20 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14806 Irene Tortorella <i.tortorella(a)arts.ac.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |i.tortorella(a)arts.ac.uk -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19501] New: New list category to restrict specific lists to staff & hide from OPAC
by bugzilla-daemon＠bugs.koha-community.org 20 Oct '26

20 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19501 Bug ID: 19501 Summary: New list category to restrict specific lists to staff & hide from OPAC Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Lists Assignee: koha-bugs(a)lists.koha-community.org Reporter: Jeremy.evans(a)nibsc.org QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl We are creating various lists of titles that need to be hidden from view in the OPAC for the time being but other staff members need to see them. At the moment the options are Public or Private so this won't do what we require. We would like an additional list category selection of Staff so that those lists are then visible in the staff client (& presumably also to anyone who logs into the OPAC with a staff permissions login) but are not publicly visible in the OPAC. The intention is that multiple staff members may need to add items to some of these lists. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 55

[Bug 43861] New: When prompting a CheckPrevCheckout warning, display the previous time it was checked out
by bugzilla-daemon＠bugs.koha-community.org 20 Oct '26

20 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43861 Bug ID: 43861 Summary: When prompting a CheckPrevCheckout warning, display the previous time it was checked out Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: lari.taskula(a)hypernova.fi QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle(a)bywatersolutions.com Target Milestone: --- Librarians using CheckPrevCheckout with CheckPrevCheckoutDelay = 0 (prompt always) may be interested in knowing the previous checkout date. Currently, they would first have to navigate to circulation history tab. Ease their workflow by displaying the previous checkout date in the warning message itself. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 43401] New: Makefile.PL doesn't compile vue OPAC js to the right directory
by bugzilla-daemon＠bugs.koha-community.org 20 Oct '26

20 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43401 Bug ID: 43401 Summary: Makefile.PL doesn't compile vue OPAC js to the right directory Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: lucas(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Target Milestone: --- We've notices a problem on sites now using 26.05 and problems with vue island related stuff. I found the problem through the new self renewal via OPAC feature which has a modal loaded through: koha-tmpl/intranet-tmpl/prog/js/vue/components/Islands/PatronSelfRenewal/PatronSelfRenewal.vue The compiled js files on the 26.05 server only show in the intranet directory: intranet-tmpl/prog/js/vue/dist/patron-self-renewal The code expects this in an opac directory. I think MakeFile.PL just isnt accounting for this. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 36

[Bug 36633] New: Support anti-the at REST API level
by bugzilla-daemon＠bugs.koha-community.org 20 Oct '26

20 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36633 Bug ID: 36633 Summary: Support anti-the at REST API level Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: jonathan.druart(a)gmail.com CC: tomascohen(a)gmail.com Coming from bug 35560. If we migrate UI tables to DT using the REST API we need support the anti-the sorting type. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 11