Release Notes 5.6
Check out what’s new for ScriptRunner for BitBucket Server.
Built In Script For Viewing And Deleting Orphaned Personal Repositories
This release includes a new built-in administrative script, which allows you to view and delete orphaned personal repositories. An orphaned repository is a personal repository which no longer has an owner, either because the owner has been deleted or become inactive.
Bitbucket has no built in support for viewing orphaned repositories: BSERV-7265.
This new built-in script provides a list of orphaned repositories and optionally allows the administrator to delete all orphaned repositories.
See our Administrative Scripts documentation for more information.
SRPLAT-670 - An exception was generated when adding or removing an event in the Events field on the Custom Event Listener screen.
SRBITB-603 - While on Bitbucket 6, the check icons did not render while using configured mirrors script.
SRBITB-584 - Old branch and tag naming standards hooks did not respond to UI-based triggers.
SRPLAT-774 - There was a
MissingPropertyExceptionin subclasses of
AbstractBaseRestEndpointwhen accessing the log field.
SRPLAT-773 - YAML files were not auto-deploying saved script configurations in custom plugin jars.
MaxFilesizeHookchecked the LFS pointer files instead of the size of LFS pointers.
SRBITB-470 - The user interface (UI) was updated to remove misleading custom event handler and hook user instructions.
SRBITB-397 - A new canned script was added that can enable the Delete Source Branch checkbox to be checked by default on pull request (PR) merges.
SRPLAT-715 - The use of class autocompletion with an as cast operation was fixed.
SRPLAT-712 - An exception thrown by getting docs on a variable no longer occurs.
SRPLAT-709 - The fragment finder context variables overlay was added.
SRPLAT-703 - The missing Idea Integration icon was added back to code editors.
SRBITB-551 - The Auto Add Reviewers REST endpoint checks to see if the handler is disabled. If it is disabled, it does not fill in the Reviewers field in a PR creation UI.
SRBITB-541 - Support was added for proxy authentication for Github and Bitbucket mirroring.
SRBITB-539 - The Protect Git Refs canned script now responds to UI triggers.
SRBITB-398 - Email comparison in the trusted authors hook is now case-insensitive.
SRBITB-178 - ScriptRunner for BitBucket captures a full response if HTML is returned in mirroring. Previously, only JSON was captured.
- [SRBITB-555] - Hooks get applied to requests they can't handle
Critical Security Update
This release fixes a security vulnerability that has been discovered in ScriptRunner for Bitbucket. The vulnerability affects version 3.0.17 - 5.6.1 (inclusive) of ScriptRunner for Bitbucket.
The vulnerability is classified as critical in line with Atlassian’s Security Levels.
ScriptRunner for Bitbucket Server and Data Center prior to version 5.6.3 allowed logged in users to create and execute scripts without the correct privileges being applied by sending a specially crafted request. This could mean that a user can escalate their privileges and execute arbitrary code.
Introducing Data Center Migration Support for ScriptRunner
From release 5.6.3, ScriptRunner for Bitbucket now includes support for Altassian’s Data Center Migration Tool.
Please see the Data Center Migration Support documentation for more details on which ScriptRunner objects are exported by the tool and how they are applied to the import instance.
Other New Features
- [SRPLAT-96] - Custom event listeners should be able to listen to events provided by plugins
- [SRBITB-230] - Allow mirrored repositories that have been moved or deleted to be removed
- [SRBITB-268] - Log capture doesn't work
- [SRBITB-427] - Custom email scripts don't run Configuration script until after subject/body templates have already been evaluated
- [SRBITB-437] - SimpleUserAccessGrant class not found when cloning a repo with branch permissions
- [SRBITB-449] - Whitelist MinimalRepositoryRef class
- [SRBITB-451] - Trusted Commit Authors hook doesn't match names when trust level set to "All authors must have WRITE access to this repository"
- [SRBITB-477] - Switch User isn't compatible with BB 6 API
- [SRBITB-479] - Static type checker doesn't recognise 'event' as being in the bindings for event handlers
Have questions? Visit the Atlassian Community to connect, share, and learn with other Atlassian users and experts, including Adaptavist staff.
Want to learn more? Check out courses on Adaptavist Learn, an online platform to onboard and train new users for Atlassian solutions.