chore: bump version to 26.10.2

.github/workflows/maven.yml

@@ -23,9 +23,9 @@ jobs:
     timeout-minutes: 30
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
     - name: Set up JDK 25
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v6
       with:
         java-version: 25
         architecture: x64

.github/workflows/publish-npm.yml

@@ -16,15 +16,15 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
         with:
           run_install: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
           registry-url: 'https://registry.npmjs.org'

.github/workflows/publish-snapshot.yml

@@ -28,17 +28,17 @@ jobs:
     timeout-minutes: 30
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
     - name: Set up JDK 25
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v6
       with:
         java-version: 25
         architecture: x64
         distribution: temurin
         cache: maven
         server-id: github
-        server-username: MAVEN_USERNAME
-        server-password: MAVEN_PASSWORD
+        server-username-env-var: MAVEN_USERNAME
+        server-password-env-var: MAVEN_PASSWORD
 
     - name: Verify and deploy SNAPSHOT
       # Se invoca deploy:deploy directo porque central-publishing-maven-plugin (extensions=true)

.github/workflows/release.yml

@@ -37,17 +37,17 @@ jobs:
     timeout-minutes: 45
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
     - name: Set up JDK 25
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v6
       with:
         java-version: 25
         architecture: x64
         distribution: temurin
         cache: maven
         server-id: github
-        server-username: MAVEN_USERNAME
-        server-password: MAVEN_PASSWORD
+        server-username-env-var: MAVEN_USERNAME
+        server-password-env-var: MAVEN_PASSWORD
 
     - name: Check the version
       # A wrong version would publish an immutable artifact (and spend Central quota), so fail before building.
@@ -86,17 +86,17 @@ jobs:
     timeout-minutes: 45
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v7
     - name: Set up JDK 25
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v6
       with:
         java-version: 25
         architecture: x64
         distribution: temurin
         cache: maven
         server-id: central
-        server-username: MAVEN_USERNAME # env variable for username in deploy
-        server-password: MAVEN_PASSWORD # env variable for token in deploy
+        server-username-env-var: MAVEN_USERNAME # env variable for username in deploy
+        server-password-env-var: MAVEN_PASSWORD # env variable for token in deploy
         gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
 
     - name: Sign and deploy to Maven Central

docs/backend/ARCHITECTURE.md

@@ -403,6 +403,24 @@ Rules:
   browser on its own.
 - Unauthenticated requests get a JSON 401 (not a redirect to `/login`), so `fetch` callers can handle them.
 
+### Caching the metadata endpoints
+
+View descriptors, entity metadata and navigation (`GET /apps/api/metadata/views/{id}`, `/entities`, `/entities/{id}`,
+`/entities/{id}/views[/{view}]`, `/entities/by-path`, `/navigation`) are practically static, but not always: texts depend
+on the request locale (`Messages.getDefaultLocale()`, which an application resolves per request through its
+`LocaleProvider`), and an application may build descriptors dynamically or vary them per user. The framework therefore
+adds nothing by default and leaves the decision to the application through `MetadataHttpCachePolicy`:
+
+- **Default:** no cache headers, exactly as before.
+- **`dynamia.app.metadata.http-cache=etag`:** the included `ContentEtagMetadataHttpCachePolicy`. A strong ETag from the
+  content and the locale, `Cache-Control: private, no-cache` and `Vary: Accept-Language`. The client revalidates on every
+  use and gets a `304` with no body when nothing changed, and never a stale descriptor after a deployment or a hot-reload.
+- **Your own policy:** register a `MetadataHttpCachePolicy` bean (for example an ETag from the application version, or a
+  `Vary` that includes the user). It replaces the included one.
+
+Only the read-only endpoints above take part; actions, entity data (`/entities/ref/**`) and executions are never cached,
+and neither are `/apps/api/dashboard` or `/apps/api/reports`.
+
 ---
 
 ## Dependency Injection & Spring Integration

examples/demo-zk-books/pom.xml

@@ -47,7 +47,7 @@
         <timestamp>${maven.build.timestamp}</timestamp>
         <maven.build.timestamp.format>yyyyMMdd</maven.build.timestamp.format>
 
-        <tools.version>26.10.1</tools.version>
+        <tools.version>26.10.2</tools.version>
 
     </properties>
 

examples/dynamia-movies/README.md

@@ -2,7 +2,7 @@
 
 A movie catalog in the spirit of IMDb, built to try **everything new in DynamiaTools** in one project that was
 generated with the CLI (`dynamia new`, backend Java + frontend Vue) and runs against the **SNAPSHOT** of this
-repository (`26.10.1`).
+repository (`26.10.2`).
 
 | Folder | What it is |
 |---|---|

examples/dynamia-movies/backend/README.md

@@ -1,6 +1,6 @@
 # Dynamia Movies — backend
 
-Spring Boot 4 + DynamiaTools `26.10.1`. See the [project README](../README.md) for the whole picture.
+Spring Boot 4 + DynamiaTools `26.10.2`. See the [project README](../README.md) for the whole picture.
 
 ```bash
 ./mvnw spring-boot:run     # http://localhost:8484  (admin / adminadmin)

examples/dynamia-movies/backend/pom.xml

@@ -10,12 +10,12 @@
     </parent>
     <groupId>tools.dynamia.demos</groupId>
     <artifactId>movies</artifactId>
-    <version>26.10.1</version>
+    <version>26.10.2</version>
     <name>dynamia-movies</name>
     <description>Movie catalog demo: Dynamia Tools backoffice + public Vue site</description>
     <properties>
         <java.version>25</java.version>
-        <dynamia.version>26.10.1</dynamia.version>
+        <dynamia.version>26.10.2</dynamia.version>
     </properties>
     <dependencies>
         <dependency>

examples/dynamia-movies/frontend/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dynamia-movies",
   "private": true,
-  "version": "26.10.1",
+  "version": "26.10.2",
   "description": "Public movie site (Vue 3) for the Dynamia Movies demo. It reads the automatic REST API of DynamiaTools.",
   "type": "module",
   "scripts": {

extensions/dashboard/packages/dashboard-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamia-tools/dashboard-sdk",
-  "version": "26.10.1",
+  "version": "26.10.2",
   "website": "https://dynamia.tools",
   "description": "TypeScript/JavaScript client SDK for the Dynamia Dashboard extension REST API",
   "keywords": [

extensions/dashboard/packages/dashboard-vue/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamia-tools/dashboard-vue",
-  "version": "26.10.1",
+  "version": "26.10.2",
   "website": "https://dynamia.tools",
   "description": "Vue 3 components and composables to render Dynamia dashboards without ZK",
   "keywords": [

extensions/dashboard/packages/dashboard-vue/src/components/ViewerWidget.vue

@@ -1,16 +1,16 @@
 <!-- ViewerWidget.vue: built-in renderer of `viewer` widgets; uses the DynamiaViewer component of @dynamia-tools/vue -->
 <template>
   <DynamiaViewer
-    ref="viewer"
     :descriptor-id="data?.descriptorId ?? undefined"
     :view-type="data?.viewType ?? undefined"
+    :source="rows"
+    :value="single"
     :read-only="true"
-    @ready="applyValue"
   />
 </template>
 
 <script setup lang="ts">
-import { ref, resolveComponent, watch } from 'vue';
+import { computed, resolveComponent } from 'vue';
 import type { ViewerWidgetData } from '@dynamia-tools/dashboard-sdk';
 
 const props = defineProps<{
@@ -20,11 +20,8 @@ const props = defineProps<{
 
 // Registered globally by `app.use(DynamiaVue)` from @dynamia-tools/vue
 const DynamiaViewer = resolveComponent('DynamiaViewer');
-const viewer = ref<{ setValue(value: unknown): void } | null>(null);
 
-function applyValue(): void {
-  if (props.data) viewer.value?.setValue(props.data.value);
-}
-
-watch(() => props.data?.value, applyValue);
+// A list is the data source of a table/tree view (its rows); anything else is the value of a form-like view.
+const rows = computed(() => (Array.isArray(props.data?.value) ? props.data.value : undefined));
+const single = computed(() => (Array.isArray(props.data?.value) ? undefined : props.data?.value));
 </script>

extensions/dashboard/packages/dashboard-vue/test/components.test.ts

@@ -1,7 +1,7 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
-import { defineComponent } from 'vue';
+import { defineComponent, h } from 'vue';
 import { flushPromises, mount } from '@vue/test-utils';
-import { DynamiaDashboard, KpiWidget, WidgetRendererRegistry, registerBuiltinWidgets } from '../src/index.js';
+import { DynamiaDashboard, KpiWidget, ViewerWidget, WidgetRendererRegistry, registerBuiltinWidgets } from '../src/index.js';
 import { dashboardDescriptor, makeClient, widgetResponse } from './helpers.js';
 
 const chartCtor = vi.fn();
@@ -139,3 +139,23 @@ describe('built-in widgets', () => {
     expect(chartDestroy).toHaveBeenCalled();
   });
 });
+
+describe('ViewerWidget', () => {
+  const Viewer = defineComponent({ props: ['descriptorId', 'viewType', 'source', 'value', 'readOnly'], setup: () => () => h('div', { 'data-testid': 'viewer' }) });
+  const mountWidget = (data: unknown) => mount(ViewerWidget, { props: { data: data as never }, global: { stubs: { DynamiaViewer: Viewer } } });
+
+  it('gives a list value to the viewer as its data source', () => {
+    const rows = [{ a: 1 }, { a: 2 }];
+    const props = mountWidget({ descriptorId: 'clientesWidget', value: rows }).findComponent(Viewer).props();
+
+    expect(props).toMatchObject({ descriptorId: 'clientesWidget', source: rows, readOnly: true });
+    expect(props.value).toBeUndefined();
+  });
+
+  it('gives any other value to the viewer as its value', () => {
+    const props = mountWidget({ viewType: 'form', value: { name: 'Ana' } }).findComponent(Viewer).props();
+
+    expect(props).toMatchObject({ viewType: 'form', value: { name: 'Ana' } });
+    expect(props.source).toBeUndefined();
+  });
+});

extensions/dashboard/sources/core/pom.xml

@@ -23,7 +23,7 @@
     <parent>
         <groupId>tools.dynamia.modules</groupId>
         <artifactId>tools.dynamia.modules.dashboard.parent</artifactId>
-        <version>26.10.1</version>
+        <version>26.10.2</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
@@ -36,12 +36,12 @@
         <dependency>
             <groupId>tools.dynamia</groupId>
             <artifactId>tools.dynamia.viewers</artifactId>
-            <version>26.10.1</version>
+            <version>26.10.2</version>
         </dependency>
         <dependency>
             <groupId>tools.dynamia</groupId>
             <artifactId>tools.dynamia.web</artifactId>
-            <version>26.10.1</version>
+            <version>26.10.2</version>
         </dependency>
 
         <!-- TEST DEPENDENCIES -->

extensions/dashboard/sources/pom.xml

@@ -23,7 +23,7 @@
     <parent>
         <groupId>tools.dynamia.modules</groupId>
         <artifactId>tools.dynamia.modules.parent</artifactId>
-        <version>26.10.1</version>
+        <version>26.10.2</version>
         <relativePath>../../pom.xml</relativePath>
     </parent>
 

extensions/dashboard/sources/zk/pom.xml

@@ -23,7 +23,7 @@
     <parent>
         <groupId>tools.dynamia.modules</groupId>
         <artifactId>tools.dynamia.modules.dashboard.parent</artifactId>
-        <version>26.10.1</version>
+        <version>26.10.2</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
@@ -38,17 +38,17 @@
         <dependency>
             <groupId>tools.dynamia.modules</groupId>
             <artifactId>tools.dynamia.modules.dashboard.core</artifactId>
-            <version>26.10.1</version>
+            <version>26.10.2</version>
         </dependency>
         <dependency>
             <groupId>tools.dynamia</groupId>
             <artifactId>tools.dynamia.zk</artifactId>
-            <version>26.10.1</version>
+            <version>26.10.2</version>
         </dependency>
         <dependency>
             <groupId>tools.dynamia.modules</groupId>
             <artifactId>tools.dynamia.modules.saas.api</artifactId>
-            <version>26.10.1</version>
+            <version>26.10.2</version>
         </dependency>
 
         <!-- TEST DEPENDENCIES -->

extensions/email-sms/sources/core/pom.xml

@@ -23,7 +23,7 @@
     <parent>
         <artifactId>tools.dynamia.modules.email.parent</artifactId>
         <groupId>tools.dynamia.modules</groupId>
-        <version>26.10.1</version>
+        <version>26.10.2</version>
     </parent>
 
     <artifactId>tools.dynamia.modules.email</artifactId>
@@ -50,17 +50,17 @@
         <dependency>
             <groupId>tools.dynamia</groupId>
             <artifactId>tools.dynamia.domain.jpa</artifactId>
-            <version>26.10.1</version>
+            <version>26.10.2</version>
         </dependency>
         <dependency>
             <groupId>tools.dynamia</groupId>
             <artifactId>tools.dynamia.crud</artifactId>
-            <version>26.10.1</version>
+            <version>26.10.2</version>
         </dependency>
         <dependency>
             <groupId>tools.dynamia</groupId>
             <artifactId>tools.dynamia.templates</artifactId>
-            <version>26.10.1</version>
+            <version>26.10.2</version>
         </dependency>
         <dependency>
             <groupId>org.springframework</groupId>

extensions/email-sms/sources/pom.xml

@@ -23,7 +23,7 @@
     <parent>
         <groupId>tools.dynamia.modules</groupId>
         <artifactId>tools.dynamia.modules.parent</artifactId>
-        <version>26.10.1</version>
+        <version>26.10.2</version>
         <relativePath>../../pom.xml</relativePath>
     </parent>
 
@@ -85,7 +85,7 @@
         <dependency>
             <groupId>tools.dynamia.modules</groupId>
             <artifactId>tools.dynamia.modules.saas.jpa</artifactId>
-            <version>26.10.1</version>
+            <version>26.10.2</version>
         </dependency>
 
 

extensions/email-sms/sources/ui/pom.xml

@@ -22,7 +22,7 @@
 	<parent>
 		<artifactId>tools.dynamia.modules.email.parent</artifactId>
 		<groupId>tools.dynamia.modules</groupId>
-		<version>26.10.1</version>
+		<version>26.10.2</version>
 	</parent>
 
 	<name>DynamiaModules - Email UI</name>
@@ -34,12 +34,12 @@
 		<dependency>
 			<groupId>tools.dynamia</groupId>
 			<artifactId>tools.dynamia.zk</artifactId>
-			<version>26.10.1</version>
+			<version>26.10.2</version>
 		</dependency>
 		<dependency>
 			<groupId>tools.dynamia.modules</groupId>
 			<artifactId>tools.dynamia.modules.email</artifactId>
-			<version>26.10.1</version>
+			<version>26.10.2</version>
 		</dependency>
 		<dependency>
 			<groupId>tools.dynamia.zk.addons</groupId>

extensions/entity-files/packages/files-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamia-tools/files-sdk",
-  "version": "26.10.1",
+  "version": "26.10.2",
   "website": "https://dynamia.tools",
   "description": "TypeScript/JavaScript client SDK for the Dynamia Entity Files extension REST API",
   "keywords": [