Bye-bye “outil de suivi” and “artéfact”
For people using Tuleap in French, the “UX writing” evolves to align with international terms:
- “Outil de suivi” becomes “Tracker”
- “Artéfact” becomes “Artifact”
Trackers and Artifacts are the most powerful features of Tuleap and both terms exist only in Tuleap. Artifacts may have other names in competing tools (issue, case, bug, work item, etc.). However, Trackers are unique, there are no equivalent. Using different terms in translations makes it more difficult to create documentation or searchable content. If you look for information about “outil de suivi”, it’s very difficult to find relevant content. Moreover, during the summer, we will be working on a major overhaul of documentation and tutorials around Tuleap. Having clear, unique terms in that documentation will help both search engines and AI agents.
Cross-Tracker Search: Faster Results
We rewrote the way column results are fetched from the database, and the results are now significantly faster. We observed a speedup of 10% to 30%, depending on the number of columns involved in the query.
Bugs and requests
During the 16.9 release cycle, 33 requests were implemented. Bugs and security fixes have already been back-ported on Tuleap Enterprise builds. You will find below a detailed list of fixes. The most notable ones are in bold.
Security
- #43357 Missing CSRF protection on tracker reports manipulation – CVE-2025-50179 – Moderate
- #43326 Missing CSRF protection on tracker canned responses administration – CVE-2025-48991 – Moderate
- #43327 Scan for secrets in Tuleap source code
- #43305 Password should not be requested when creating an account linked to an OIDC provider
- #42977 Harden CSRF protection by blocking all cross-site state modifying queries to the Web UI
- #42976 Clear sensitive information of deleted users
- #42980 Library jquery 1.9.1 is vulnerable
Trackers
- #43344 Artifact link field check update permission even if no changes
- #43328 Broken artifact tooltip when linking sprint
Backlog
- #43360 Duplicating artifact not in planning add the new artifact in backlog
- #43351 User cannot create a Kanban if Backlog has not been installed first
Cross-Tracker Search
- #43345 Error when SQL query is built in Cross Tracker Search
- #42984 Be able to save the new/edited query without searching for the result before in XTS widget
Program Management
- #42988 Program increments are not synchronized when adding a team
Roadmap
- #43340 Tooltips are not shown anymore in Gantt
Onlyoffice
- #43321 Impossible to open documents with an extension in uppercase in OnlyOffice