Check out what’s new for ScriptRunner for BitBucket Server.


New Features

Built In Script For Viewing And Deleting Orphaned Personal Repositories

This release includes a new built-in administrative script, which allows you to view and delete orphaned personal repositories. An orphaned repository is a personal repository which no longer has an owner, either because the owner has been deleted or become inactive.

Bitbucket has no built in support for viewing orphaned repositories: BSERV-7265.

This new built-in script provides a list of orphaned repositories and optionally allows the administrator to delete all orphaned repositories.

See our Administrative Scripts documentation for more information.

Bug Fixes

  • SRPLAT-873 - Settings could have been null, which caused NPE in various locations.

  • SRPLAT-864 - An invalid object name, null.AO_31728E_SR_USER_PROP, was added when the plugin was run against an instance running on MS SQL Server.


Bug Fixes

  • SRPLAT-670 - An exception was generated when adding or removing an event in the Events field on the Custom Event Listener screen.

  • SRBITB-603 - While on Bitbucket 6, the check icons did not render while using configured mirrors script.

  • SRBITB-584 - Old branch and tag naming standards hooks did not respond to UI-based triggers.


Bug Fixes


New Features

  • SRBITB-548 - Mirroring has been extended to work with GitLab in addition to GitHub. Find out more information about GitLab mirroring in the Administrative Scripts documentation.

  • SRBITB-455 - Mirroring has been extended to work with other Bitbucket Server instances. Find out more information about mirroring for servers in the Administrative Scripts documentation.

  • SRBITB-310 - Audit logging was set up for all ScriptRunner items when they are added, deleted, and updated.

  • SRBITB-246 - Mirroring of GitHub Enterprise was added. Find out more information about GitHub mirroring in the Administrative Scripts documentation.

Bug Fixes

  • SRPLAT-774 - There was a MissingPropertyException in subclasses of AbstractBaseRestEndpoint when accessing the log field.

  • SRPLAT-773 - YAML files were not auto-deploying saved script configurations in custom plugin jars.

  • SRBITB-547 - MaxFilesizeHook checked the LFS pointer files instead of the size of LFS pointers.

  • SRBITB-470 - The user interface (UI) was updated to remove misleading custom event handler and hook user instructions.


New Features

  • SRBITB-475 - Mirroring of private Github user repos is now allowed.

  • Manage your .groovy script files using the new ScriptRunner Script Editor.


New Features

  • SRBITB-397 - A new canned script was added that can enable the Delete Source Branch checkbox to be checked by default on pull request (PR) merges.

Bug Fixes

  • SRPLAT-715 - The use of class autocompletion with an as cast operation was fixed.

  • SRPLAT-712 - An exception thrown by getting docs on a variable no longer occurs.

  • SRPLAT-709 - The fragment finder context variables overlay was added.

  • SRPLAT-703 - The missing Idea Integration icon was added back to code editors.

  • SRBITB-551 - The Auto Add Reviewers REST endpoint checks to see if the handler is disabled. If it is disabled, it does not fill in the Reviewers field in a PR creation UI.

  • SRBITB-541 - Support was added for proxy authentication for Github and Bitbucket mirroring.

  • SRBITB-539 - The Protect Git Refs canned script now responds to UI triggers.

  • SRBITB-398 - Email comparison in the trusted authors hook is now case-insensitive.

  • SRBITB-178 - ScriptRunner for BitBucket captures a full response if HTML is returned in mirroring. Previously, only JSON was captured.

Bug Fixes

  • [SRBITB-555] - Hooks get applied to requests they can't handle


New Features

Critical Security Update

This release fixes a security vulnerability that has been discovered in ScriptRunner for Bitbucket. The vulnerability affects version 3.0.17 - 5.6.1 (inclusive) of ScriptRunner for Bitbucket.

The vulnerability is classified as critical in line with Atlassian’s Security Levels.

ScriptRunner for Bitbucket Server and Data Center prior to version 5.6.3 allowed logged in users to create and execute scripts without the correct privileges being applied by sending a specially crafted request. This could mean that a user can escalate their privileges and execute arbitrary code.

Introducing Data Center Migration Support for ScriptRunner

From release 5.6.3, ScriptRunner for Bitbucket now includes support for Altassian’s Data Center Migration Tool.

Please see the Data Center Migration Support documentation for more details on which ScriptRunner objects are exported by the tool and how they are applied to the import instance.

Other New Features

  • [SRBITB-405] - Allow users to use the Hooks API to write custom merge checks
  • [SRBITB-444] - Provide Importer/Exporter modules for easy DC migration

Bug Fixes

  • [SRBITB-309] - The Send Mail script job ran conditions twice.
  • [SRBITB-553] - User privilege escalation.
  • [SRPLAT-658] - Could not use code completion features with @WithPlugin for some plugins.
  • [SRPLAT-680] - Dependent plugin classes weren't loaded correctly.


New Features

  • [SRPLAT-96] - Custom event listeners should be able to listen to events provided by plugins

Bug Fixes

  • [SRBITB-230] - Allow mirrored repositories that have been moved or deleted to be removed
  • [SRBITB-268] - Log capture doesn't work
  • [SRBITB-427] - Custom email scripts don't run Configuration script until after subject/body templates have already been evaluated
  • [SRBITB-437] - SimpleUserAccessGrant class not found when cloning a repo with branch permissions
  • [SRBITB-449] - Whitelist MinimalRepositoryRef class
  • [SRBITB-451] - Trusted Commit Authors hook doesn't match names when trust level set to "All authors must have WRITE access to this repository"
  • [SRBITB-477] - Switch User isn't compatible with BB 6 API
  • [SRBITB-479] - Static type checker doesn't recognise 'event' as being in the bindings for event handlers

Have questions? Visit the Atlassian Community to connect, share, and learn with other Atlassian users and experts, including Adaptavist staff.

Ask a question about ScriptRunner for JIRA, Bitbucket Server, or Confluence.

Want to learn more? Check out courses on Adaptavist Learn, an online platform to onboard and train new users for Atlassian solutions.