February 2026 - Koha-bugs - lists.koha-community.org

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 --- Comment #70 from Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> --- Created attachment 193745 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193745&action=e… Bug 14962: (QA follow-up) Apply full active-display filter in get_public get_public only checked end_date, allowing disabled displays and displays not yet started to be retrieved by unauthenticated OPAC users. Apply the same criteria used by Koha::Displays->active: enabled must be true, start_date must be null or in the past, and end_date must be null or in the future. Sponsored-by: ByWater Solutions Signed-of-by: Martin Renvoize <martin.renvoize(a)openfifth.co.uk> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 --- Comment #69 from Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> --- Created attachment 193744 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193744&action=e… Bug 14962: (QA follow-up) Fix barcode handling and async form reset in batch components Two bugs in both batch add and batch remove Vue components: 1. Barcodes were coerced to Number via .map(n => Number(n)), which converts alphanumeric barcodes (e.g. BC-00012345) to NaN and strips leading zeros from numeric ones. Replace with trim+filter to keep barcodes as strings. 2. clearForm() was called synchronously after registering the .then() callback, so the form was always cleared before the API response arrived. On error the user lost all entered barcodes. Move clearForm() inside the success callback. Also clean up DisplaysBatchRemoveItems: remove unused useTemplateRef, storeToRefs, config, and setWarning; link success message to the specific background job ID. Sponsored-by: ByWater Solutions Signed-of-by: Martin Renvoize <martin.renvoize(a)openfifth.co.uk> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 --- Comment #68 from Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> --- Created attachment 193743 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193743&action=e… Bug 14962: (QA follow-up) Filter inactive display items from public API The public list_public endpoint in Koha::REST::V1::DisplayItems was returning every display_items row with no filtering. Unauthenticated OPAC users could enumerate items from disabled, expired, or future displays. Apply the same active-display criteria used elsewhere in the feature: parent display must be enabled and within its start/end date range, and the individual item's date_remove must not have passed. Sponsored-by: ByWater Solutions Signed-of-by: Martin Renvoize <martin.renvoize(a)openfifth.co.uk> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 --- Comment #67 from Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> --- Created attachment 193742 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193742&action=e… Bug 14962: (QA follow-up) Prevent staff_note from leaking via public API Add public_read_list to Koha::Display to exclude staff_note from the fields returned by public endpoints. The existing $c->objects->to_api mechanism automatically applies the public read list when is_public is set in the stash, which happens automatically for /public/ routes. Also add missing use C4::Context to Koha::REST::V1::Displays, which calls C4::Context->preference in the config() method. Sponsored-by: ByWater Solutions Signed-of-by: Martin Renvoize <martin.renvoize(a)openfifth.co.uk> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 --- Comment #66 from Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> --- Created attachment 193741 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193741&action=e… Bug 14962: (QA follow-up) Fix stored XSS in display_name rendering in item table display_name was concatenated directly into an HTML string via .format() with no escaping. A display name containing HTML/JS would execute as stored XSS for all staff viewing item details. Use jQuery DOM construction instead so display_name is treated as text, not markup. Sponsored-by: ByWater Solutions Signed-of-by: Martin Renvoize <martin.renvoize(a)openfifth.co.uk> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 --- Comment #65 from Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> --- Created attachment 193740 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193740&action=e… Bug 14962: (QA follow-up) Add missing use Koha::Database to BatchDeleteDisplayItems The process() method calls Koha::Database->new->schema but Koha::Database was never imported. This would cause a fatal error when the background job worker ran the delete job in a separate process context. Sponsored-by: ByWater Solutions Signed-of-by: Martin Renvoize <martin.renvoize(a)openfifth.co.uk> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 --- Comment #64 from Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> --- Created attachment 193739 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193739&action=e… Bug 14962: (QA follow-up) Fix crash in C4::Search when UseDisplayModule is enabled effective_homebranch() and effective_holdingbranch() return a plain branchcode string, not a Koha::Library object. Calling ->branchcode on the return value caused a fatal "Can't call method on unblessed reference" error on every search results page when UseDisplayModule was enabled. Drop the spurious ->branchcode method call. Sponsored-by: ByWater Solutions Signed-of-by: Martin Renvoize <martin.renvoize(a)openfifth.co.uk> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 --- Comment #63 from Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> --- Created attachment 193738 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193738&action=e… Bug 14962: Local DBIC Schema Changes Add boolean markers Sponsored-by: ByWater Solutions Signed-of-by: Martin Renvoize <martin.renvoize(a)openfifth.co.uk> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 --- Comment #62 from Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> --- Created attachment 193737 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193737&action=e… Bug 14962: More spelling Sponsored-by: ByWater Solutions Signed-of-by: Martin Renvoize <martin.renvoize(a)openfifth.co.uk> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14962] Temp Shelving Location
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 --- Comment #61 from Martin Renvoize (ashimema) <martin.renvoize(a)openfifth.co.uk> --- Created attachment 193736 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193736&action=e… Bug 14962: DBIC - DO NOT PUSH Sponsored-by: ByWater Solutions Signed-of-by: Martin Renvoize <martin.renvoize(a)openfifth.co.uk> -- You are receiving this mail because: You are watching all bug changes.

1 0