Tuleap 17.3 (feb.2026)

  • Published on Feb 17, 2026
  • 3 minute(s) read
Prev Next

Deleting artifact is easier to access

Deleting an artifact is now directly accessible from the artifact Action menu.

New artifact deletion menu

No change to the conditions for accessing this feature. The availability of this option depends on the user's permissions (tracker admin) and the platform configuration (number of deletions allowed per day).

Previously, deletion required going through the administration interface and accessing a dedicated menu. This page has been removed.

XLSX export with all columns

A tracker report can be exported to CSV, at the user's choice, with only the report columns or with all tracker columns. The “Document Generation” plugin also allows export to Excel format (XLSX), but until now only for report columns. It is now possible to export all tracker columns in XLSX format.

XLSX export with all columns

Beyond feature parity, this is also interesting from a performance standpoint on large trackers. CSV export is generated server-side in one block; with large structures or high data volumes, timeout risks are significant. XLSX export, on the other hand, is implemented client-side based on the REST API and fetches data progressively, reducing timeout risk.

The great migration to Burning Parrot

The major migration effort to Burning Parrot continues, mostly hidden for now. Current work focuses on the Trackers interface, more specifically field administration and the artifact view. Regarding the artifact view, partial replacements have been made, for example the date picker has been changed, and most of the conversion work will be carried out in a second phase. For now, we are focusing our efforts on field configuration; an initial version can be shared for feedback as early as the next release.

Simplifying Git repository management

Creating or modifying a Git repository no longer depends on the internal SSH server.

This change is invisible to end users and most system administrators. It mainly impacts deployments in constrained environments, especially when SSH server configurations are customized.

Historically, to create a Git repository, Tuleap had to perform operations through the machine's SSH server. This is no longer necessary, making this operation more reliable in constrained environments.

Bugs and requests

59 requests or bugs were implemented during cycle 17.3, and most have already been backported to weekly Tuleap Enterprise Edition releases. The changes outside the development process are listed below. Significant items are in bold.

Security

  • request #46389 Missing CSRF protection in the Overview inconsistent items - CVE-2026-24007 - Moderate

  • request #44081 Internal symmetric cryptographic API should be resistant against Invisible Salamanders / Confused Deputies attacks

Trackers

  • request #46390 Date with time entered manually is lost when clicking outside the calendar dropdown

  • request #46354 Masschange open list field create same open values multiple times

  • request #46384 Type error on POST /api/artifacts

  • request #46356 Create by email modal does not work on BP pages

Backlog

  • request #45619 Backlog : Cannot drag and drop an artifact to an off-screen release

Document

MediaWiki

  • request #46368 Support usage of a DB with TLS during MW standalone installation

  • request #46001 Crash on MW Standalone migration page when MW plugin is not installed

Jira

Git / Pull Requests / GitLab

File release system

Project administration

  • request #46360 description of reference is always truncated at first word on edit

Miscellaneous

Related articles
© 2025 Enalean SAS