Bug 41142 - Update jQuery-validate plugin to 1.21.0
Summary: Update jQuery-validate plugin to 1.21.0
Status: Needs Signoff
Alias: None
Product: Koha
Classification: Unclassified
Component: Architecture, internals, and plumbing (show other bugs)
Version: Main
Hardware: All All
: P5 - low normal
Assignee: Owen Leonard
QA Contact: Testopia
URL:
Keywords:
: 34623 (view as bug list)
Depends on:
Blocks:
 
Reported: 2025-10-30 13:14 UTC by Owen Leonard
Modified: 2025-10-30 13:23 UTC (History)
2 users (show)

See Also:
GIT URL:
Initiative type: ---
Sponsorship status: ---
Crowdfunding goal: 0
Patch complexity: Small patch
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments
Bug 41142: Update jQuery-validate plugin to 1.21.0 (100.09 KB, patch)
2025-10-30 13:18 UTC, Owen Leonard
Details | Diff | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description Owen Leonard 2025-10-30 13:14:24 UTC
A new bug report for version 1.21.0.

> We've gotten reports that the jQuery-validate plugin is flagging in
> vulnerability scans (https://nvd.nist.gov/vuln/detail/CVE-2022-31147 for
> details on the associated CVE). 
> 
> I've put this in security to be on the safe side but if it should be moved,
> please do.
Comment 1 Owen Leonard 2025-10-30 13:18:58 UTC
Created attachment 188644 [details] [review]
Bug 41142: Update jQuery-validate plugin to 1.21.0

This patch updates the jQuery validation plugin in both the staff
interface and the OPAC to the latest version, 1.21.0.

To test, apply the patch and clear your browser cache if necessary.

Test various pages in the staff client to confirm that form validation
works as expected:

 - Patron password change form:
   - Password must conform to minPasswordLength
   - Password must not contain leading/trailing spaces
   - Passwords must match

 - Administration -> Add or edit budget:
   - Description, start date, and end date are required
   - Start date must be before end date

 - Administration -> Add or edit Z39.50/SRU server:
   - Server name, hostname, port, and database are required
   - Port, rank, and timeout must be a number

Perform the same check of the "Change password" form in the OPAC.

Sponsored-by: Athens County Public Libraries
Comment 2 Owen Leonard 2025-10-30 13:19:40 UTC
*** Bug 34623 has been marked as a duplicate of this bug. ***