Merge branch 'develop' into OREBag1.0.2

Author: qqmyers

conf/keycloak/builtin-users-spi/pom.xml

@@ -100,7 +100,7 @@
     </build>
 
     <properties>
-        <keycloak.version>26.3.4</keycloak.version>
+        <keycloak.version>26.5.0</keycloak.version>
         <java.version>17</java.version>
         <jakarta.persistence.version>3.2.0</jakarta.persistence.version>
         <mindrot.jbcrypt.version>0.4</mindrot.jbcrypt.version>

doc/release-notes/11670-notification-of-moved-datasets.md

@@ -0,0 +1,6 @@
+## Notifications
+
+New notification was added for Datasets moving between Dataverses.
+Requires SettingsServiceBean.Key.SendNotificationOnDatasetMove setting to be enabled.
+
+See #11670

doc/release-notes/11714-prevent-exclude-email-from-export-for-permitted-user-get-dataset-version.md

@@ -0,0 +1,7 @@
+New query parameter (ignoreSettingExcludeEmailFromExport) for API /api/datasets/:persistentId/versions/{versionId}
+
+SPA requires the ability to have the contact emails included in the response for this API call
+This query parameter prevents the contact email from being excluded when the setting (ExcludeEmailFromExport) is set to true and the user has EditDataset permissions.
+
+See:
+- [#11714](https://github.com/IQSS/dataverse/issues/11714)  

doc/release-notes/11773-incorrect-roles-listed-in-assignrole-notifications.md

@@ -0,0 +1,4 @@
+This release changes the text in assign role notifications to list only the role being assigned that generated the specific notification.
+The previous implementation listed all the roles associated with the dataset in each notification.
+
+See also [the guides](https://dataverse-guide--11664.org.readthedocs.build/en/11664/user/account.html#notifications) and #11773.

doc/release-notes/11787-signed-url-improvement.md

@@ -0,0 +1 @@
+In prior versions of Dataverse, configuring a proxy to forward to Dataverse over an http connection could result in failure of signed Urls (e.g. for external tools). This version of Dataverse supports having a proxy send an X-Forwarded-Proto header set to https to avoid this issue. 

doc/release-notes/11914-set-template-default-api.md

@@ -0,0 +1,15 @@
+## New Endpoint: POST `/dataverses/{id}/template/default/{templateId}`
+
+A new endpoint has been implemented to set the default template to a given dataverse collection.
+
+### Functionality
+- Sets the default template of the given dataverse collection.
+- You must have edit dataverse permission in the collection in order to use this endpoint.
+
+## New Endpoint: DELETE `/dataverses/{id}/template/default`
+
+A new endpoint has been implemented to remove the default template to a given dataverse collection.
+
+### Functionality
+- Removes the default template of the given dataverse collection.
+- You must have edit dataverse permission in the collection in order to use this endpoint.

doc/release-notes/11918-template-apis.md

@@ -0,0 +1,17 @@
+## New Endpoint: GET `/dataverses/{id}/template`
+
+A new endpoint has been implemented to manage templates belonging to a given dataverse collection.
+
+### Functionality
+- Returns the template of the given {id} in json format.
+- You must have add dataset permission in the collection in order to use this endpoint.
+
+## New Endpoint: DELETE `/dataverses/{id}/template`
+
+A new endpoint has been implemented to manage templates belonging to a given dataverse collection.
+
+### Functionality
+- Deletes the template of the given {id}.
+- You must have Edit Dataverse permission in order to use this endpoint.
+
+

doc/release-notes/12009-my-data-api-params.md

@@ -0,0 +1 @@
+The My Data API now supports the `metadata_fields`, `sort` and `order`, `show_collections` and `fq` parameters, which enhances its functionality and brings it in line with the search API.

doc/release-notes/12065-allow-crud-on-archival-status-for-deaccessioned.md

@@ -0,0 +1 @@
+This release removes an undocumented restriction on the API calls to get, set, and delete archival status. They did not work on deaccessioned dataset versions and now do. (See https://guides.dataverse.org/en/latest/api/native-api.html#get-the-archival-status-of-a-dataset-by-version )

doc/release-notes/315-fix-handle-to-citation-processing.md

@@ -0,0 +1,5 @@
+### Bug Fix
+
+Handles from hdl.handle.net with urls of `/citation` instead of `/dataset.xhtml` were not properly redirecting. This fix adds a lookup for alternate PID so `/citation` endpoint will redirect to `/dataset.xhtml`
+
+