The monthly Oqtane Core Contributor Meeting was held on January 8, 2025.

2024 Retro

Oqtane was the most active open source Community project in the .NET Foundation in 2024 (based on public activity metrics from GitHub). This included 10 releases... 2 of which were major releases (5.1 for Blazor SSR and 6.0 for .NET 9).

Status Updates

6.0.1 released on December 20, 2024

• 58 Pull Requests (2743 Total)
• 132 Commits (6152 Total)
• 7 Contributors (57 Total)

Contributors: @sbwalker, @leigh-pointer, @zyhfish, @W6HBR, @tvatavuk, @markdav-is, @thabaum

Release Highlights

• .NET 9 cleanup (ie. remove legacy assemblies on upgrade, handle new static assets, update dependencies)
• Security fixes related to Notification, UserRole, User APIs
• Implemented dynamic TargetFramework and ProjectName properties in module/theme templates (@ leigh-pointer)
• Added support for Script Type and DataAttributes in Resource class
• Added new Script and Stylesheet subclasses for Resources
• Improved Static Blazor JavaScript support

Security

As mentioned last month, Oqtane added a security policy to its main repository and enabled the GitHub feature for working with independent security researchers. Unfortunately, it appears that the desire to receive personal recognition is higher than the motivation to follow a confidential and professional security vulnerability workflow process. This resulted in a number of CVE's being published to public databases without proper validation or coordination with the project maintainers. As a result, Oqtane has since disabled the GitHub feature and will rely on its own process for managing secuirity vulnberabilities going forward.

Static Blazor and JavaScript

Blazor Web Applications (ie. Static Server-Side Blazor using Enhanced Navigation) only process <script> elements during the initial page load. This means that any <script> elements which are encountered during subsequent "enhanced" navigations are ignored, resulting in unexpected behavior and broken functionality. In Oqtane 6.0.1 a solution was introduced which is referred to as "Blazor Script Reload" and allows <script> elements to behave in a standard manner - both in razor components as well as user generated content. An open source project was created for Blazor Script Reload so that all .NET developers can take advantage of it in their Blazor Web Applications.

Roadmap

The next Oqtane release will be version 6.0.2 and is expected to be available in January.

The next Oqtane Core Team Meeting will be on February 5, 2025.