Skip to content

Bump smoothness to 5.3.0, wildfly to 3.1.1 and keycloak to 3.1.0 - #55

Merged
slominskir merged 2 commits into
mainfrom
bump-smoothness-wildfly-keycloak
Nov 10, 2026
Merged

slominskir merged 2 commits into
mainfrom
bump-smoothness-wildfly-keycloak

Conversation

@slominskir-coding-agent

Copy link
Copy Markdown
Contributor

Brings sim to the latest smoothness weblib and JeffersonLab wildfly and keycloak images. Its AGENTS.md already has the latest coding-agents shared rules (7.2.0). One commit each:

  1. Smoothness weblib 5.0.2 → 5.3.0. Fixes and tests: stricter ParamConverter dates (2026-02-30 or 32-Jan-2026 are now errors rather than adjusted) with number errors that name the parameter, TimeUtil and week-range fixes, IpReadFilter keeping the query string on its login redirect, AuditFilter keeping short usernames, CacheFilter caching static types set with parameters.
  2. jeffersonlab/wildfly 3.0.1 → 3.1.1 and jeffersonlab/keycloak 2.6.0 → 3.1.0, the images Smoothness 5.3.0 builds on. WildFly gets the Elytron 2.6.4 OIDC patch (login from a page with encoded parameters works) and a SameSite=Lax session cookie; it is still WildFly 37.0.1. The image's self-signed certificate changed, so src/integration/resources/wildfly-localhost.crt is the new one, the same as Smoothness's demo tests trust.

Checks

  • ./gradlew build: passes (spotless, PMD, SpotBugs, unit tests, war).
  • ./gradlew integrationTest against docker compose -f build.yaml up -d --build --wait from this branch (on other ports, with SIM_URL and KEYCLOAK_URL): 52 tests, 0 failures. Keycloak 3.1.0 ran 03_customize.sh, so the acg role and password logins work. The app log's only errors are the permission-denied and duplicate-name cases the tests make on purpose.
  • Looked for app code relying on what 5.3.0 tightened (convertFriendlyDate with date-times, For input string messages, TimeUtil calls reading back their Calendar): none.
  • Not done: a look at the pages in a browser.

Release notes

Uses smoothness weblib 5.3.0 (stricter date parameters: invalid dates such as 2026-02-30 are now errors, not adjusted). Demo image builds on jeffersonlab/wildfly 3.1.1 (Elytron OIDC patch, SameSite=Lax session cookie); demo Keycloak 3.1.0.

🤖 Generated with Claude Code

Prepared-by: Anthropic Claude Code:claude-opus-5-5

slominskir-coding-agent Bot and others added 2 commits November 10, 2026 12:09
Move the weblib from 5.0.2 to 5.3.0, the latest release. Its changes
since 5.0.2 are fixes and tests: stricter ParamConverter dates with
readable number errors, TimeUtil and week-range fixes, IpReadFilter
keeping the query string on its login redirect, AuditFilter keeping
short usernames, and CacheFilter caching static types set with
parameters.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Match the images Smoothness 5.3.0 builds its demo on. The app image's
WildFly base moves from 3.0.1 to 3.1.1, which applies the Elytron
2.6.4 OIDC patch and sets the session cookie's SameSite attribute to
Lax; it is still WildFly 37.0.1. The demo Keycloak moves from 2.6.0 to
3.1.0 (upstream Keycloak 26.6.4 and entrypoint fixes).

The image's self-signed certificate is new, so the integration tests
trust the new one in src/integration/resources/wildfly-localhost.crt,
the same certificate as Smoothness's demo tests (its SHA-256
fingerprint starts E1:1B:1C:D1).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@slominskir-coding-agent slominskir-coding-agent Bot added the source::ai Prepared by an AI coding agent label Nov 10, 2026
@slominskir
slominskir merged commit 8bf16ed into main Nov 10, 2026
5 checks passed
@slominskir
slominskir deleted the bump-smoothness-wildfly-keycloak branch November 10, 2026 18:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

source::ai Prepared by an AI coding agent

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant