Fixes:

• SRCONF-581 - Information box for Space Tools is incorrectly showing a blank message
• SRCONF-503 - Attempting to use the Confluence Search bar while in any of the ScriptRunner pages throws an error
• SRCONF-386 - Group Rest endpoint access in Lock content Macro is not restricted
• SRCONF-620 - Jackson-databind Vulnerabilities Assessment and Patch

Features:

• SRCONF-492 - ScriptRunner for Confluence users are now able to get notified when a page hasn’t been updated for some time, therefore, ensuring your content is always relevant
• SRCONF-641 - ScriptRunner for Confluence users can now better integrate their custom codes with Comala Workflow App.

Fixes:

• SRCONF-581 - Information box for Space Tools is incorrectly showing a blank message
• SRCONF-503 - Attempting to use the Confluence Search bar while in any of the ScriptRunner pages throws an error
• SRCONF-386 - Group Rest endpoint access in Lock content Macro is not restricted
• SRCONF-620 - Jackson-databind Vulnerabilities Assessment and Patch

Features:

• SRCONF-492 - ScriptRunner for Confluence users are now able to get notified when a page hasn’t been updated for some time, therefore, ensuring your content is always relevant
• SRCONF-641 - ScriptRunner for Confluence users can now better integrate their custom codes with Comala Workflow App.

Fixes:

• SRCONF-566 - Getting started page documentation button is now linked correctly to the ScriptRunner for Confluence documentation.
• SRCONF-545 - CQL Search link is now visible to all users, once ScriptRunner for Confluence is installed.
• SRCONF-542 - Fixed a bug where Copy Page Tree threw an error after being run.
• SRCONF-525 - Fixed typos in the documentation.

Enhancement:

• SRCONF-421 - Markdown macro now accepts inline markdown tags and not just URLs.

Fixes:

• SRCONF-566 - Getting started page documentation button is now linked correctly to the ScriptRunner for Confluence documentation.
• SRCONF-545 - CQL Search link is now visible to all users, once ScriptRunner for Confluence is installed.
• SRCONF-542 - Fixed a bug where Copy Page Tree threw an error after being run.
• SRCONF-525 - Fixed typos in the documentation.

Enhancement:

• SRCONF-421 - Markdown macro now accepts inline markdown tags and not just URLs.

Important Instructions

If you are currently using either version 5.4.16 to 5.4.22 and you are moving to the latest release, you may experience issues updating if you are using ScriptRunner dependent plugins and they are enabled. There are workarounds documented as part of SRCONF-439.

Workaround

You can avoid this issue simply by disabling dependent plugins BEFORE you update ScriptRunner. You can then simply update ScriptRunner and re-enable your dependent plugins. Once you update to 5.4.26 or later, you will no longer need to perform this workaround.

Fixed:

• SRCONF-455 - Parameter button is missing in the Custom Script Macros
• SRCONF-454 - Fixes issue where browsing server log files functionality is broken
• Minor security update in 3rd party libraries.
• Compatibility - Adding Compatibility with Confluence 6.12.x

Important Instructions

If you are currently using either version 5.4.16 to 5.4.22 and you are moving to the latest release, you may experience issues updating if you are using ScriptRunner dependent plugins and they are enabled. There are workarounds documented as part of SRCONF-439.

Workaround

You can avoid this issue simply by disabling dependent plugins BEFORE you update ScriptRunner. You can then simply update ScriptRunner and re-enable your dependent plugins. Once you update to 5.4.26 or later, you will no longer need to perform this workaround.

Fixed:

• SRCONF-455 - Parameter button is missing in the Custom Script Macros
• SRCONF-454 - Fixes issue where browsing server log files functionality is broken
• Minor security update in 3rd party libraries.
• Compatibility - Adding Compatibility with Confluence 6.12.x

Important Instructions

If you are currently using either version 5.4.16 to 5.4.22 and you are moving to the latest release, you may experience issues updating if you are using ScriptRunner dependent plugins and they are enabled. There are workarounds documented as part of SRCONF-439.

Workaround

You can avoid this issue simply by disabling dependent plugins BEFORE you update ScriptRunner. You can then simply update ScriptRunner and re-enable your dependent plugins. Once you update to 5.4.26 or later, you will no longer need to perform this workaround.

Features

• [SRCONF-334] - Add a script to set page restrictions recursively

• [SRCONF-314] - Create a new Rename Pages built-in script

Bugs

• [SRCONF-285] - JS and CSS files are not working, has to be inline

• [SRCONF-445] - ScriptRunner macros not present in Macro Manager

• [SRCONF-439] - ScriptRunner hanging on update

Compatibility

Adding Compatibility with Confluence 6.11.x

Important Instructions

If you are currently using either version 5.4.16 to 5.4.22 and you are moving to the latest release, you may experience issues updating if you are using ScriptRunner dependent plugins and they are enabled. There are workarounds documented as part of SRCONF-439.

Workaround

You can avoid this issue simply by disabling dependent plugins BEFORE you update ScriptRunner. You can then simply update ScriptRunner and re-enable your dependent plugins. Once you update to 5.4.26 or later, you will no longer need to perform this workaround.

Features

• [SRCONF-334] - Add a script to set page restrictions recursively

• [SRCONF-314] - Create a new Rename Pages built-in script

Bugs

• [SRCONF-285] - JS and CSS files are not working, has to be inline

• [SRCONF-445] - ScriptRunner macros not present in Macro Manager

• [SRCONF-439] - ScriptRunner hanging on update

Compatibility

Adding Compatibility with Confluence 6.11.x

Support Escalation

Each of our DC Apps has it's own support escalation process, together with an improved SLA (24 hr - reasonable responses).

Robust DC Testing Framework

Our new DC Testing Framework means that when customers raise support tickets against our new DC offering we can more easily try to reproduce their problem in an actual DC environment.

Data Center Testing Framework

Developed our own process to enable us to spin up DC instances of BitBucket, Confluence and JIRA in a cluster. This allows us to quickly and easily test the performances of our Apps in different DC environments.

Performance Testing

We developed solutions using tools like nGrinder, JMeter and Gatling to help us measure the performance of BitBucket, Confluence and JIRA with and without our Apps so we can be sure we have the best offering at scale.

Large Data Sets

We invested in scripts to help us create larger data sets so that our Atlassian instances better reflect larger instances our DC customers are using.

• [SRCONF-420] - Bug in CQL Search Macro
• [SRCONF-419] - Script Macros: Lazy macros are not loading
• [SRCONF-338] - All the page trees should have a lazy select 2 and only when selected should fetch the page tree for that space

Compatibility

• Compatibility with Confluence 6.10.x

Bug fixes

• [SRCONF-385] - Permissions only allow selection of a single space
• [SRCONF-384] - Broken macro after ScriptRunner update
• [SRCONF-381] - Bulk Purge Trash does not work using the "All" checkbox
• [SRCONF-380] - Inherit Permissions are not being maintained when upgrading to 5.4.9
• [SRCONF-362] - Groups are not being lazily fetched
• [SRCONF-341] - Example does not work
• [SRCONF-284] - Built-in scripts pop-up dialogue not locked to the 'Space Tools' tab
• [SRCONF-407] - ScriptConsole is showing up in the Space Admin Built-in Scripts

Note: Due to an issue in the Space Admin Permissions we advise to navigate to that specific screen and verify if the permissions are correctly set for your instance.

Compatibility with Confluence 6.9.x

Bug fixes

• [SRCONF-360] - Copy space does not work with Meeting Notes
• [SRCONF-307] - CQL Search should preview attachments
• [SRCONF-318] - ScriptRunner Macro's not found when Confluence is restarted
• [SRCONF-333] - "Language Manager" plugin breaks the Lock Content Macro save
• [SRCONF-336] - Copy Space should have the dropdown lazy fetching
• [SRCONF-353] - Lock Content performance issue

This update fixes a critical security vulnerability in ScriptRunner for Confluence discovered during an internal review. We strongly recommend customers apply this update at their earliest opportunity. Further details will be released in the coming weeks as part of Adaptavist's commitment to responsible disclosure.

All versions of ScriptRunner for Confluence are affected. Below are instructions on which version we recommend you upgrade to:

• If you have Confluence 5.10 or above, upgrade to ScriptRunner for Confluence version 5.3.35
• If you have Confluence 5.9, upgrade to ScriptRunner for Confluence version 5.3.34
• If you have Confluence 5.8, upgrade to ScriptRunner for Confluence version 4.3.25

This update fixes a critical security vulnerability in ScriptRunner for Confluence discovered during an internal review. We strongly recommend customers apply this update at their earliest opportunity. Further details will be released in the coming weeks as part of Adaptavist's commitment to responsible disclosure.

All versions of ScriptRunner for Confluence are affected. Below are instructions on which version we recommend you upgrade to:

• If you have Confluence 5.10 or above, upgrade to ScriptRunner for Confluence version 5.3.35
• If you have Confluence 5.9, upgrade to ScriptRunner for Confluence version 5.3.34
• If you have Confluence 5.8, upgrade to ScriptRunner for Confluence version 4.3.25

This update fixes a critical security vulnerability in ScriptRunner for Confluence discovered during an internal review. We strongly recommend customers apply this update at their earliest opportunity. Further details will be released in the coming weeks as part of Adaptavist's commitment to responsible disclosure.

All versions of ScriptRunner for Confluence are affected. Below are instructions on which version we recommend you upgrade to:

• If you have Confluence 5.10 or above, upgrade to ScriptRunner for Confluence version 5.3.35
• If you have Confluence 5.9, upgrade to ScriptRunner for Confluence version 5.3.34
• If you have Confluence 5.8, upgrade to ScriptRunner for Confluence version 4.3.25

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 5.3.35 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

ScriptRunner audit logging service added

As a Confluence administrator you can now inspect script configuration changes from Confluence audit. For more information check Audit Logging.

Compatibility

Compatibility with Confluence 6.8.x

Bug fixes

• [SRCONF-308] - Page with Lock Content macro does not save page after edit
• [SRCONF-313] - Space field is eagerly fetching and should fetch lazy based on the user input
• [SRCONF-306] - More reliable loading of ScriptRunner using MySQL
• [SRPLAT-261] - ScriptRunner custom REST endpoints in Data Center only setup on one node
• [SRCONF-265] - Copy Space Builtin Script Doesn't Copy all the properties

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 5.3.34 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

• Compatibility with Confluence 6.7.x

Bug fixes

• [SRCONF-272] - Lock Content is not pre-filling groups
• [SRCONF-268] - Hide the panel "Advanced space Functionality" in space
• [SRCONF-274] - Markdown Macro is not displaying Tables

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 5.3.34 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

• Fixed issue with XSS security issue in the tree view https://productsupport.adaptavist.com/browse/SRPLAT-254

Note, this version is the same as 5.2.8 so there's no need to update to it if you already have 5.2.8 installed.

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 4.3.25 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

• Fxed issue with XSS security issue in the tree view https://productsupport.adaptavist.com/browse/SRPLAT-254

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 5.3.34 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

• Fixed issue with XSS security issue in the tree view https://productsupport.adaptavist.com/browse/SRPLAT-254

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 5.3.34 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

• [SRCONF-266] - Markdown Macro allows access to the filesystem
• [SRCONF-264] - Include Version macro error
• [SRCONF-263] - Permissions pulling groups are using always lower case so if a group is uppercase it fails

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 5.3.34 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

• Space Statistics - We’re excited to introduce the space statistics feature. This feature allows Confluence and space admins to better understand what their spaces are made up of. Get a snapshot of information like attachment count and size, likes, comments and blogs.
• Improved Copy Page Tree - Now not only is the copy page tree able to prepend and append page titles but also is able to transform your entire page title when copying it.
• Compatibility with Confluence 6.5.0

To know more about it, please take a look at our documentation:

https://scriptrunner.adaptavist.com/latest/confluence/builtin-scripts.html#_space_statistics

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 5.3.34 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

Introducing built-in scripts for space admins. Space admins can take advantage of some of the built-in scripts that were only available to Confluence admins resulting in quicker resolution of administration tasks. Support includes:

• Bulk delete attachments
• Bulk purge trash
• Copy page tree
• Delete page tree
• Bulk delete comments
• Copy space
• Inherit permissions
• Add or Remove Labels

To onboard your space admins quickly we’ve created a helpful how-to guide

Please note that you may disable this feature or limit it by user or group should your users not require it. See the documentation here

The Lock Content Macro now allows to hide content from users that do not have permission. You can now customise your content for different audiences.

release notes here

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 5.3.34 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

• [SRCONF-237] - Fixed event handler inline comment example.
• [SRCONF-242] - Fixed user interface issue with script jobs.

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 5.3.34 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

See release notes at:

https://scriptrunner.adaptavist.com/5.0.8/confluence/releases/current-release.html

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 5.3.34 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

See release notes at:

https://scriptrunner.adaptavist.com/5.0.5/confluence/releases/current-release.html

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 5.3.34 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

See release notes at:

https://scriptrunner.adaptavist.com/5.0.3/confluence/releases/current-release.html

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 4.3.25 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

See release notes at:

https://scriptrunner.adaptavist.com/4.3.17/confluence/releases/current-release.html

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 4.3.25 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

See release notes at

https://scriptrunner.adaptavist.com/4.3.16/confluence/releases/current-release.html

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 4.3.25 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

See release notes at

https://scriptrunner.adaptavist.com/4.3.13/confluence/releases/current-release.html

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 4.3.25 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

See full release notes at

https://scriptrunner.adaptavist.com/4.3.8/confluence/releases/current-release.html

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 4.3.25 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

See full release notes at

https://scriptrunner.adaptavist.com/4.3.7/confluence/releases/current-release.html

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 4.3.25 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details

See full release notes at

https://scriptrunner.adaptavist.com/4.3.4/confluence/releases/current-release.html

WARNING: This version contains a critical security vulnerability. We recommend you download/upgrade to version 4.3.25 instead. Thank you. Please see https://productsupport.adaptavist.com/browse/SRCONF-356 for more details