Release v5.3.0

[slominskir-coding-agent]

Changes VERSION to 5.3.0, and nothing else. Merging it releases: tag, GitHub release with the demo war, the weblib on Maven Central, the docs, the demo Docker image, and the deploy to JLab's test server.

Below are the release notes for the GitHub release, with the upgrade steps first.

Upgrade steps for apps

• Run on jeffersonlab/wildfly 3.1.1 or later, or a Wildfly with its Elytron patch (Apply the Elytron 2.6.4 OIDC patch in the container image wildfly#16). IpReadFilter's login redirect now keeps the page's query string (Keep the query string in IpReadFilter's login redirect #73). Without the patch, a login from a page whose query has encoded characters, such as a report's dates, fails with Incorrect redirect_uri and a 403. Production servers have it (URLs with special characters prevent login dtm#73).
• loose-page's excludeSmoothResources="false" now includes the smoothness CSS and JavaScript, as documented; before, any value excluded them (Keep loose-page's smoothness resources when excludeSmoothResources is false #69). Only "true" excludes them now.

Behavior changes apps may notice

• Stricter date parameters (Make ParamConverter's dates strict and its number errors readable #76, Accept whitespace around friendly dates again #83). ParamConverter rejects impossible dates and text after a date, where it used to adjust or ignore them: 2026-02-30, 32-Jan-2026, 10-Mar-2026 25:00, and a date-time given to convertFriendlyDate. A time that doesn't exist because of the spring clock change, such as 08-Mar-2026 02:30, is now rejected too; 5.2.0 moved it to 03:30. Whitespace around a friendly date is still accepted.
• Number parameter errors (Make ParamConverter's dates strict and its number errors readable #76) are still NumberFormatException, but the message names the parameter (duration must be a whole number) instead of For input string: "x".
• Week ranges on Wednesdays (Fix TimeUtil's quirks, and the week ranges on Wednesdays #75). Current Week (from Wed) is today → next Wednesday, and Previous Week is last Wednesday → today, in both TimeUtil and smoothness.js. Before, on a Wednesday, both were a week earlier.
• TimeUtil (Fix TimeUtil's quirks, and the week ranges on Wednesdays #75). isSameMonth compares the year too. getCrewChief*DayAndHour return whole hours. The startOf* and endOfMonth methods no longer change the Calendar passed in, which only supplies the time zone.
• jlab.initParams (Remember an empty parameter as empty in jlab.initParams #78) remembers an empty multiple select as empty. Later pages no longer get a literal [] value for it.
• CacheFilter (Cache static types set with parameters in CacheFilter #74) caches a static type set with parameters or capitals, such as text/css;charset=UTF-8, for a year, as its Javadoc describes.
• Exported images from /convert are sent as image/png instead of application/png (Send exported images as image/png, not application/png #81).

Fixes

• AuditFilter no longer fails the request for a username with one or two colon-separated parts (Keep usernames with fewer than three parts in AuditFilter #70).
• jlab.decodeRange's fiscal Q3 ranges are right on the 31st of a month (Fix jlab.decodeRange's fiscal Q3 ranges on the 31st of a month #84).

Demo and development

• The demo runs on jeffersonlab/wildfly 3.1.1 (Build the demo on jeffersonlab/wildfly 3.1.1 #72) and jeffersonlab/keycloak 3.1.0 (Use the jeffersonlab/keycloak 3.1.0 image #71). Its Puppet Show container gets SYS_ADMIN instead of privileged, so PDF and image export work on Ubuntu 24.04+ hosts (Give Puppet Show SYS_ADMIN instead of privileged, so export works on Ubuntu #80).
• Report One keeps print and fullscreen through its date redirect (Keep print and fullscreen through Report One's date redirect #82).
• Unit tests for the weblib's helpers, filters, and tags; integration tests against the running demo, including headless Chromium and smoothness.js; and CI runs them (Fix the Compose stack and Dockerfile for running beside other projects #61–Add tests for the weblib's tags, with a demo page of their options #68, Add tests for smoothness.js #77).
• Agent instructions and an agent VM guide (Add agent instructions and an agent VM page #62, Let agents see UI changes: screenshots and browser tests #66).

Checks

• VERSION is the only change. Every pull request above passed CI (build, integration, CodeQL) before it merged.
• I can't check the release itself before it runs: the CD workflow publishes to Maven Central and Docker Hub and deploys to the test server.

🤖 Generated with Claude Code