From 8635fa5f2bb08d77e6593367afe873b36895ccce Mon Sep 17 00:00:00 2001 From: Philip Durbin Date: Wed, 18 Mar 2026 17:38:21 -0400 Subject: [PATCH 1/8] add a GitHub Workflow to add bugs to the project board --- .github/workflows/add_bugs_to_project.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 .github/workflows/add_bugs_to_project.yml diff --git a/.github/workflows/add_bugs_to_project.yml b/.github/workflows/add_bugs_to_project.yml new file mode 100644 index 00000000000..ee39d7ce5eb --- /dev/null +++ b/.github/workflows/add_bugs_to_project.yml @@ -0,0 +1,18 @@ +name: Add bugs to project board + +on: + issues: + types: + - opened + - labeled + +jobs: + add-to-project: + name: Add bug to project + runs-on: ubuntu-latest + steps: + - uses: actions/add-to-project@v1.0.2 + with: + project-url: https://github.com/orgs/IQSS/projects/34 + github-token: ${{ secrets.ADD_TO_PROJECT_PAT }} + labeled: "Type: Bug" From 697904e32fe1833f1a51d14d5824c2b13b26b1e7 Mon Sep 17 00:00:00 2001 From: Philip Durbin Date: Thu, 19 Mar 2026 16:08:29 -0400 Subject: [PATCH 2/8] update base.image.version post-6.10 #12084 --- modules/dataverse-parent/pom.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/dataverse-parent/pom.xml b/modules/dataverse-parent/pom.xml index 93e8f864b70..a7cedbd049e 100644 --- a/modules/dataverse-parent/pom.xml +++ b/modules/dataverse-parent/pom.xml @@ -461,8 +461,8 @@ Once the release has been made (tag created), change this back to "${parsedVersion.majorVersion}.${parsedVersion.nextMinorVersion}" (These properties are provided by the build-helper plugin below.) --> - - ${revision} + ${parsedVersion.majorVersion}.${parsedVersion.nextMinorVersion} + ${base.image.version} From 0b8ce939cdb15bd6d5b6f30f596659c2b739bbb5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 19 Mar 2026 23:43:47 +0000 Subject: [PATCH 3/8] Bump aquasecurity/setup-trivy from 0.2.5 to 0.2.6 Bumps [aquasecurity/setup-trivy](https://github.com/aquasecurity/setup-trivy) from 0.2.5 to 0.2.6. - [Release notes](https://github.com/aquasecurity/setup-trivy/releases) - [Commits](https://github.com/aquasecurity/setup-trivy/compare/v0.2.5...v0.2.6) --- updated-dependencies: - dependency-name: aquasecurity/setup-trivy dependency-version: 0.2.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/container_maintenance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/container_maintenance.yml b/.github/workflows/container_maintenance.yml index 981cef106a8..34246b523f7 100644 --- a/.github/workflows/container_maintenance.yml +++ b/.github/workflows/container_maintenance.yml @@ -173,7 +173,7 @@ jobs: with: platforms: ${{ env.PLATFORMS }} - name: Setup Trivy binary for vulnerability scanning - uses: aquasecurity/setup-trivy@v0.2.5 + uses: aquasecurity/setup-trivy@v0.2.6 with: version: v0.63.0 From b60a0fbc17333b706e10473efd25d2e5dc3b9cb7 Mon Sep 17 00:00:00 2001 From: Oliver Bertuch Date: Mon, 23 Mar 2026 18:31:04 +0100 Subject: [PATCH 4/8] chore(ci): update Trivy engine to a newer, but safe version #12242 --- .github/workflows/container_maintenance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/container_maintenance.yml b/.github/workflows/container_maintenance.yml index 34246b523f7..fcd304f9b50 100644 --- a/.github/workflows/container_maintenance.yml +++ b/.github/workflows/container_maintenance.yml @@ -175,7 +175,7 @@ jobs: - name: Setup Trivy binary for vulnerability scanning uses: aquasecurity/setup-trivy@v0.2.6 with: - version: v0.63.0 + version: v0.69.3 # Execute matrix build for the discovered branches - name: Execute build matrix script From b0bb89664fd5ea410b80ded3671e051c0d355906 Mon Sep 17 00:00:00 2001 From: Steven Winship <39765413+stevenwinship@users.noreply.github.com> Date: Wed, 25 Mar 2026 11:35:12 -0400 Subject: [PATCH 5/8] fix signature of writeGuestbookAndStartFileDownload in xhtml --- .../webapp/file-download-button-fragment.xhtml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/src/main/webapp/file-download-button-fragment.xhtml b/src/main/webapp/file-download-button-fragment.xhtml index cd6a6b06523..112c2525de8 100644 --- a/src/main/webapp/file-download-button-fragment.xhtml +++ b/src/main/webapp/file-download-button-fragment.xhtml @@ -68,7 +68,7 @@ styleClass="btn-download" process="@this" disabled="#{(fileMetadata.dataFile.ingestInProgress or lockedFromDownload) ? 'disabled' : ''}" - actionListener="#{fileDownloadService.writeGuestbookAndStartFileDownload(guestbookResponse, fileMetadata, 'GlobusTransfer')}"> + actionListener="#{fileDownloadService.writeGuestbookAndStartFileDownload(guestbookResponse, fileMetadata, 'GlobusTransfer', null)}"> #{bundle['file.globus.of']} #{fileMetadata.dataFile.friendlyType == 'Unknown' ? bundle['file.download.filetype.unknown'] : fileMetadata.dataFile.friendlyType} @@ -118,7 +118,7 @@ styleClass="btn-download" process="@this" disabled="#{(fileMetadata.dataFile.ingestInProgress or lockedFromDownload) ? 'disabled' : ''}" - actionListener="#{fileDownloadService.writeGuestbookAndStartFileDownload(guestbookResponse, fileMetadata, 'Download')}"> + actionListener="#{fileDownloadService.writeGuestbookAndStartFileDownload(guestbookResponse, fileMetadata, 'Download', null)}"> #{fileMetadata.dataFile.friendlyType == 'Unknown' ? bundle['file.download.filetype.unknown'] : fileMetadata.dataFile.friendlyType} @@ -142,7 +142,7 @@
  • + actionListener="#{fileDownloadService.writeGuestbookAndStartFileDownload(guestbookResponse, fileMetadata, 'bundle', null)}"> #{bundle['file.downloadBtn.format.all']} + actionListener="#{fileDownloadService.writeGuestbookAndStartFileDownload(guestbookResponse, fileMetadata, 'original', null)}"> @@ -182,7 +182,7 @@ + actionListener="#{fileDownloadService.writeGuestbookAndStartFileDownload(guestbookResponse, fileMetadata, 'tab', null)}"> #{bundle['file.downloadBtn.format.tab']} + actionListener="#{fileDownloadService.writeGuestbookAndStartFileDownload(guestbookResponse, fileMetadata, 'RData', null)}"> #{bundle['file.downloadBtn.format.rdata']} + actionListener="#{fileDownloadService.writeGuestbookAndStartFileDownload(guestbookResponse, fileMetadata, 'var', null)}"> #{bundle['file.downloadBtn.format.var']} Date: Wed, 25 Mar 2026 11:49:36 -0400 Subject: [PATCH 6/8] add rel note --- doc/release-notes/12252-fix-download-with-guestbook.md | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 doc/release-notes/12252-fix-download-with-guestbook.md diff --git a/doc/release-notes/12252-fix-download-with-guestbook.md b/doc/release-notes/12252-fix-download-with-guestbook.md new file mode 100644 index 00000000000..d4b3f413c5f --- /dev/null +++ b/doc/release-notes/12252-fix-download-with-guestbook.md @@ -0,0 +1,4 @@ +## Bug fix for JSF download file +This fixes the issue where the action to download a single file in JSF UI silently fails + +See:12251 From ee335d38d1d4cbc670f59c5762a399dc441479da Mon Sep 17 00:00:00 2001 From: Philip Durbin Date: Thu, 26 Mar 2026 14:02:44 -0400 Subject: [PATCH 7/8] bump to 6.10.1 --- .../12252-fix-download-with-guestbook.md | 4 -- doc/release-notes/6.10.1-release-notes.md | 53 +++++++++++++++++++ doc/sphinx-guides/source/conf.py | 2 +- doc/sphinx-guides/source/versions.rst | 1 + modules/dataverse-parent/pom.xml | 6 +-- 5 files changed, 58 insertions(+), 8 deletions(-) delete mode 100644 doc/release-notes/12252-fix-download-with-guestbook.md create mode 100644 doc/release-notes/6.10.1-release-notes.md diff --git a/doc/release-notes/12252-fix-download-with-guestbook.md b/doc/release-notes/12252-fix-download-with-guestbook.md deleted file mode 100644 index d4b3f413c5f..00000000000 --- a/doc/release-notes/12252-fix-download-with-guestbook.md +++ /dev/null @@ -1,4 +0,0 @@ -## Bug fix for JSF download file -This fixes the issue where the action to download a single file in JSF UI silently fails - -See:12251 diff --git a/doc/release-notes/6.10.1-release-notes.md b/doc/release-notes/6.10.1-release-notes.md new file mode 100644 index 00000000000..9b91f462a1a --- /dev/null +++ b/doc/release-notes/6.10.1-release-notes.md @@ -0,0 +1,53 @@ +# Dataverse 6.10.1 + +This is a bug fix release for Dataverse 6.10 that fixes download bug #12251 that was fixed in pull request #12251. The bug caused single-file downloads (as opposed to multi-file zip download) to silently fail from the web interface (the API was unaffected). + +## Complete List of Changes + +For the complete list of code changes in this release, see the [6.10.1 milestone](https://github.com/IQSS/dataverse/issues?q=milestone%3A6.10.1+is%3Aclosed) in GitHub. + +## Getting Help + +For help with upgrading, installing, or general questions please see [getting help](https://guides.dataverse.org/en/latest/installation/intro.html#getting-help) in the Installation Guide. + +## Installation + +If this is a new installation, please follow our [Installation Guide](https://guides.dataverse.org/en/latest/installation/). Please don't be shy about [asking for help](https://guides.dataverse.org/en/latest/installation/intro.html#getting-help) if you need it! + +Once you are in production, we would be delighted to update our [map of Dataverse installations around the world](https://dataverse.org/installations) to include yours! Please [create an issue](https://github.com/IQSS/dataverse-installations/issues) or email us at support@dataverse.org to join the club! + +You are also very welcome to join the [Global Dataverse Community Consortium](https://www.gdcc.io/) (GDCC). + +## Upgrade Instructions + +Upgrading requires a maintenance window and downtime. Please plan accordingly, create backups of your database, etc. + +Note: These instructions assume that you are upgrading from the immediate previous version. That is to say, you've already upgraded through all the 6.x releases and are now running Dataverse 6.10. See [tags on GitHub](https://github.com/IQSS/dataverse/tags) for a list of versions. If you are running an earlier version, the only supported way to upgrade is to progress through the upgrades to all the releases in between before attempting the upgrade to this version. + +If you are running Payara as a non-root user (and you should be!), **remember not to execute the commands below as root**. By default, Payara runs as the `dataverse` user. In the commands below, we use sudo to run the commands as a non-root user. + +Also, we assume that Payara is installed in `/usr/local/payara7`. If not, adjust as needed. + +1. Undeploy Dataverse, if deployed, using the unprivileged service account ("dataverse", by default). + + `sudo -u dataverse /usr/local/payara7/bin/asadmin list-applications` + + `sudo -u dataverse /usr/local/payara7/bin/asadmin undeploy dataverse-6.10` + +1. Deploy the Dataverse 6.10.1 war file. + + `wget https://github.com/IQSS/dataverse/releases/download/v6.10.1/dataverse-6.10.1.war` + + `sudo -u dataverse /usr/local/payara7/bin/asadmin deploy dataverse-6.10.1.war` + +1. Check that you get a version number from Dataverse. + + This is just a sanity check that Dataverse has been deployed properly. + + `curl http://localhost:8080/api/info/version` + +1. For installations with internationalization or text customizations: + + Please remember to update translations via [Dataverse language packs](https://github.com/GlobalDataverseCommunityConsortium/dataverse-language-packs). + + If you have text customizations you can get the latest English files from . diff --git a/doc/sphinx-guides/source/conf.py b/doc/sphinx-guides/source/conf.py index 4ada263ae00..6ecaeebaf54 100755 --- a/doc/sphinx-guides/source/conf.py +++ b/doc/sphinx-guides/source/conf.py @@ -70,7 +70,7 @@ # built documents. # # The short X.Y version. -version = '6.10' +version = '6.10.1' # The full version, including alpha/beta/rc tags. release = version diff --git a/doc/sphinx-guides/source/versions.rst b/doc/sphinx-guides/source/versions.rst index f374d1008c2..5d75b8e1993 100755 --- a/doc/sphinx-guides/source/versions.rst +++ b/doc/sphinx-guides/source/versions.rst @@ -8,6 +8,7 @@ This list provides a way to refer to the documentation for previous and future v - pre-release `HTML (not final!) `__ and `PDF (experimental!) `__ built from the :doc:`develop ` branch :doc:`(how to contribute!) ` - |version| +- `6.10 `__ - `6.9 `__ - `6.8 `__ - `6.7.1 `__ diff --git a/modules/dataverse-parent/pom.xml b/modules/dataverse-parent/pom.xml index a7cedbd049e..18635728f9b 100644 --- a/modules/dataverse-parent/pom.xml +++ b/modules/dataverse-parent/pom.xml @@ -132,7 +132,7 @@ - 6.10 + 6.10.1 21 UTF-8 @@ -461,8 +461,8 @@ Once the release has been made (tag created), change this back to "${parsedVersion.majorVersion}.${parsedVersion.nextMinorVersion}" (These properties are provided by the build-helper plugin below.) --> - ${parsedVersion.majorVersion}.${parsedVersion.nextMinorVersion} - + + ${revision} ${base.image.version} From 971c11fe79800de3f31486602b7e25a91ef0a538 Mon Sep 17 00:00:00 2001 From: Philip Durbin Date: Thu, 26 Mar 2026 14:04:42 -0400 Subject: [PATCH 8/8] fix PR number --- doc/release-notes/6.10.1-release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/release-notes/6.10.1-release-notes.md b/doc/release-notes/6.10.1-release-notes.md index 9b91f462a1a..37180c336c8 100644 --- a/doc/release-notes/6.10.1-release-notes.md +++ b/doc/release-notes/6.10.1-release-notes.md @@ -1,6 +1,6 @@ # Dataverse 6.10.1 -This is a bug fix release for Dataverse 6.10 that fixes download bug #12251 that was fixed in pull request #12251. The bug caused single-file downloads (as opposed to multi-file zip download) to silently fail from the web interface (the API was unaffected). +This is a bug fix release for Dataverse 6.10 that fixes download bug #12251 that was fixed in pull request #12252. The bug caused single-file downloads (as opposed to multi-file zip download) to silently fail from the web interface (the API was unaffected). ## Complete List of Changes