April 2026 - Koha-bugs - lists.koha-community.org

[Bug 41587] New: node audit identified several vulnerable node dependencies
by bugzilla-daemon＠bugs.koha-community.org 14 Apr '26

14 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41587 Bug ID: 41587 Summary: node audit identified several vulnerable node dependencies Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: paul.derscheid(a)lmscloud.de QA Contact: testopia(a)bugs.koha-community.org Created attachment 191211 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=191211&action=e… Dependency report from Jenkins Koha_Main_node_audit run #121 identified several vulnerable node dependencies. Not sure yet whether it makes more sense to attach the generated artifact or copy paste it into the summary, attached it this time. Let me know what you think. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 35

[Bug 40306] New: Use GET in form of value_builder/unimarc_field_4XX.pl
by bugzilla-daemon＠bugs.koha-community.org 14 Apr '26

14 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40306 Bug ID: 40306 Summary: Use GET in form of value_builder/unimarc_field_4XX.pl Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: fridolin.somers(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl Since CSRF procetion form without CUD action must use GET instead of POST Fix value_builder/unimarc_field_4XX.pl -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 26

[Bug 37569] New: Serials without history cannot be edited
by bugzilla-daemon＠bugs.koha-community.org 14 Apr '26

14 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37569 Bug ID: 37569 Summary: Serials without history cannot be edited Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Serials Assignee: koha-bugs(a)lists.koha-community.org Reporter: baptiste.wojtkowski(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org Serials cannot be edited if there is no history associated to the serial. Fetching a subscription matching a given serialnumber results in an hashref containing two fields named serial number. One of them is undef and is used by the form and is therefore not submitted at the end. This is not supposed to happen since creating an exemplary automatically creates a new exemplary, but if serials are created through DB, they are not editable. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 14

[Bug 35722] New: Item transfer operations should be available from the API
by bugzilla-daemon＠bugs.koha-community.org 14 Apr '26

14 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35722 Bug ID: 35722 Summary: Item transfer operations should be available from the API Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: martin.renvoize(a)ptfs-europe.com CC: tomascohen(a)gmail.com We don't expose the item transfer queue in the API yet.. we should. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 13

[Bug 38600] New: NoticeBCC needs granularity
by bugzilla-daemon＠bugs.koha-community.org 14 Apr '26

14 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38600 Bug ID: 38600 Summary: NoticeBCC needs granularity Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: hebah(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com As Koha adds more notices for new functionality, libraries should be able to customize what notices to have delivered as bcc notices so that they are receiving only the pertinent ones. When the system preference was only overdues, it made sense for it to be all or nothing. Now, NoticeBCC includes notices that libraries may not want to receive - like CART and LIST notices, for example. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 42346] New: Add per-language template snippet system for translatable Template Toolkit sysprefs
by bugzilla-daemon＠bugs.koha-community.org 14 Apr '26

14 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42346 Bug ID: 42346 Summary: Add per-language template snippet system for translatable Template Toolkit sysprefs Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: I18N/L10N Assignee: koha-bugs(a)lists.koha-community.org Reporter: martin.renvoize(a)openfifth.co.uk QA Contact: testopia(a)bugs.koha-community.org CC: f.demians(a)tamil.fr, jonathan.druart(a)gmail.com A growing number of Koha system preferences accept Template Toolkit content for use in the staff interface and OPAC (e.g. SlipCSS, OpacUserCSS-style customisations, the forthcoming DuplicateCheckAdditionalInfo from bug 41902, various display customisations, report templates, etc.). These preferences are not translatable: the value is a single string regardless of the user's interface language. To work around this, sites have either: a) used inline TT conditionals on a 'lang' variable (ugly, doesn't scale), or b) bastardised the Notices and slips system to store per-language template variants (wrong - notices have their own lifecycle, audience, and management UI), or c) accepted a single language only. Proposal: Build a proper per-language template snippet store, separate from notices, that any TT-accepting feature can hook into. Likely shape: - DB table 'template_snippets' keyed by (snippet_name, lang) - Admin UI for managing variants per language, similar in spirit to the notices editor but scoped to UI snippets - A Koha::TemplateSnippet object/resultset - Integration helper so that a syspref or feature can say 'render this snippet for the current language, fall back to default' - Migration path for existing TT sysprefs that would benefit from translation This would also let us properly migrate any 'pseudo-notices' that exist today (notices being used for non-notice UI purposes solely to get translation support). Identified during work on bug 41902. The duplicate-check additional info syspref added there will be a candidate consumer once this lands. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 4

[Bug 42352] New: Add ability to do multi level breadcrumbs in wrapper-staff-tool-plugin.inc
by bugzilla-daemon＠bugs.koha-community.org 13 Apr '26

13 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42352 Bug ID: 42352 Summary: Add ability to do multi level breadcrumbs in wrapper-staff-tool-plugin.inc Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: lisette(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 5

[Bug 12855] Scripts that support logging should enable logging by default
by bugzilla-daemon＠bugs.koha-community.org 13 Apr '26

13 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12855 Lisette Scheer <lisette(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lisette(a)bywatersolutions.co | |m -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36656] New: Add ability to see (limited) error logs from within the Koha inteface
by bugzilla-daemon＠bugs.koha-community.org 13 Apr '26

13 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36656 Bug ID: 36656 Summary: Add ability to see (limited) error logs from within the Koha inteface Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff interface Assignee: koha-bugs(a)lists.koha-community.org Reporter: wizzyrea(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com We should expose the error messages we collect in the plack-*-error.log and plack-error.log to superlibrarians by flag in the Koha Conf or by syspref enabling. This could help librarians solve their own problems with items that don't have item types or identifying bad dates. Nagios does this fairly well, if an example is required. Aspen Discovery as well. It might mean we tidy up our error handling, but I think the trade is worth it. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 5

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 13 Apr '26

13 Apr '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Chloé Zermatten <chloe.zermatten(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |chloe.zermatten(a)openfifth.c | |o.uk Status|Pushed to main |Needs documenting --- Comment #434 from Chloé Zermatten <chloe.zermatten(a)openfifth.co.uk> --- Is an enhancement, dependency unmet -> not backporting to 25.11 - please do tell me if that needs changing! -- You are receiving this mail because: You are watching all bug changes.

1 0