OpenEMR Weekly Conference Call Meeting Notes

• August 4, 2026
  • Topics:
    • The public CVE disclosure and what it says about severity inflation
    • PR 13374 (OAuth client ID in the audit log)
    • ACL gaps for AI agents and system credential grants
    • The future of backup.php.
    • Neil Kimber's GAI modernization experiment.
    • Release call moved to next week.
  • 📄 OpenEMR Weekly Meeting Detailed Summary 2026-08-04.pdf

• July 28, 2026
  • Topics:
    • Release 8.3.0 and semantic versioning under ONC constraints
    • Front controller: current state, benefits, and why adoption must be universal
    • Proposed enforcement path — PHPStan rule, soft deprecation, hard failure
    • Web server configuration impact for operators
    • Multisite deprecation
    • Demo farm and Docker front controller configuration
    • Docker refactor — consolidating to a single Compose file with profiles
    • NSF I-Corps update
  • 📄 OpenEMR Weekly Meeting Detailed Summary 2026-07-28.pdf

• July 21, 2026
  • Topics:
    • Release automation complete; security release strategy and disclosure timing
    • Reporter recognition and the CVE/GHSA credit question
    • Downstream update obligations and what blocks version upgrades
    • CI and test infrastructure funding for embargoed security work
    • Getting users to update: admin warnings, webinars, and culture change
    • Module architecture — async vs. sync and the plugin migration path
    • Front controller as the prerequisite for the plugin system
    • NSF I-Corps program accepted; interview window August 3–13
  • 📄 OpenEMR Weekly Meeting Detailed Summary 2026-07-21.pdf

• July 14, 2026
  • Meeting Notes