Payara Platform Community 6.2024.2

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.1

Improvements

• [FISH-7868] Allow Setting of System Properties over 512 characters via Admin Console

• [FISH-8035] Add Hyperlink to NPS question in Admin Console

• [FISH-8054] Add Proxy Support to OpenID Security Connector

• [FISH-8152] Micro Maven - Devmode - Store session state

• [FISH-8215] Refactor to fix 'JAASRealm.java:70: error: package java.security.acl does not exist' Java 21 Compilation Error

• [FISH-8216] Refactor to fix 'The Security Manager is deprecated and will be removed in a future release' Java 21 Compilation Error

• [FISH-8259] Improve Dev Mode Fail-Safe Mechanism in Payara Micro Maven Plugin

Bug Fixes

• [FISH-7430] Warning Falsely Logged with Custom Error Pages

• [FISH-8044] [Community Contribution - ctabin]] Avoid crashing due to FileSystemNotFound while behind a Spring boot

Component Upgrades

• [FISH-8262] Upgrade Docker JDK to 11.0.22

• [FISH-8263] Upgrade Docker JDK to 17.0.10

• [FISH-8264] Upgrade Docker JDK to 21.0.2

Payara Platform Community 6.2024.1

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.1

Improvements

• [FISH-7821] Add support for Payara Micro Docker Images for ARM

• [FISH-8190] Add support for Payara Server Docker Images for ARM

Security Fixes

• [FISH-7833] CVE-2023-3635: Update okio to 3.4.0

• [FISH-7835] Upgrade OkHTTP to 4.9.2 or higher

Bug Fixes

• [FISH-5877] Using the @LoginConfig Annotation with 'security-constraints' Leaves Server in an Inconsistent State

• [FISH-6659] Modules and Components Lost After Server Restart

• [FISH-7993] Remote JMS Broker Fails to Start

• [FISH-8100] MP metrics 5.1 not showing correct value for buckets

Component Upgrades

• [FISH-6872] Upgrade Jakarta EL API to 5.0.1

• [FISH-6873] Upgrade Jakarta Inject to 2.0.1

• [FISH-6874] Upgrade Jakarta Security Enterprise to 3.0.3

• [FISH-6875] Upgrade Jakarta Validation to 3.0.2

• [FISH-6877] Upgrade JSTL Impl to 3.0.1

• [FISH-7223] Upgrade IMQJMX to 5.1

• [FISH-8048] [Community Contribution - ctabin] Upgrade H2DB to 2.2.224

• [FISH-8050] Upgrade EclipseLink ASM to 9.6.0

• [FISH-8172] Upgrade to Jersey 3.1.5

• [FISH-8085] Upgrade JAXB-API to 4.0.1

Payara Platform Community 6.2023.12

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.1

Improvements

• [FISH-8083] Enhance Payara BOM for Version Consistency with Payara API Dependency

• [FISH-8129] Publish JDK 21 Docker Images

Bug Fixes

• [FISH-6466] Health checker reporting false positive stuck threads

• [FISH-7132] JMS High Availability is not working as expected in Deployment Groups for LOCAL JMS Service

• [FISH-7841] Payara Micro does not load Hazelcast config file when placed in subdirectory

Component Upgrades

• [FISH-7129] Upgrade Jersey to 3.1.3

• [FISH-7222] Upgrade Woodstox Core to 6.5.1

• [FISH-7236] Upgrade Apache Ant to 1.10.14

• [FISH-7239] Upgrade Santaurio XMLSEC to 4.0.0

• [FISH-7964] Upgrade Metro to 4.0.3

• [FISH-8051] Upgrade Hazelcast to 5.3.6

• [FISH-8128] Upgrade Monitoring Console to 2.0.2

Payara Platform Community 6.2023.11

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.1

Improvements

• [FISH-7158] Implement Payara Micro "warmup" command in Payara Server

• [FISH-7869] Add Individual Timeout Options for Start, Stop, and Restart Domains Commands

• [FISH-7997] Update Docker JDK to 11.0.21

• [FISH-7998] Update Docker JDK to 17.0.9

Security Fixes

• [FISH-7947] Fix CVE-2023-41699 URL Redirection to Untrusted Site

Bug Fixes

• [FISH-7531] Fix EclipseLink L2 Caching NullPointer Exception

• [FISH-7808] Fix EclipseLink L2 Caching Deadlock

• [FISH-7953] Fix Cannot Load Custom Realm Class Error on Windows

• [FISH-7959] [Community Contribution - ctabin] Fix Multirelease JAR Lookup for Specific Version Classes

Component Upgrades

• [FISH-7880] Upgrade Maven Bundle Plugin to 5.1.9

Payara Platform Community 6.2023.10

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.0

Improvements

• [FISH-7454] Add --timeout argument to the start-domain command

Security Fixes

• [FISH-7820] CVE-2023-1370: Upgrade json-smart to 2.4.11 in OIDC Client

Bug Fixes

• [FISH-6519] useBundledJsf Doesn't Remove Old JSF From Classpath Entirely

• [FISH-7817] Missing --add-opens in Payara Micro

• [FISH-7846] Missing Asadmin Help Manpages

• [FISH-7847] Fix InaccessibleObjectException for javax.management and javax.management.openmbean on JDK 17 & 21

Component Upgrades

• [FISH-6858] Upgrade JBoss Classfilewriter to 1.3.0.Final

• [FISH-6870] Upgrade Jakarta Batch API to 2.1.1

• [FISH-6871] Upgrade Jakarta EJB API to 4.0.1

• [FISH-6885] Upgrade Tyrus to 2.1.3

• [FISH-7378] Upgrade Yasson to 3.0.3

• [FISH-7827] Upgrade JSON Smart to 2.4.11

• [FISH-7828] Upgrade Accessors Smart to 2.4.11

• [FISH-7829] Upgrade Nimbus-Jose-JWT to 9.35

• [FISH-7865] [Community Contribution - ctabin] Update ASM to 9.6

Payara Platform Community 6.2023.9

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.0

Improvements

• [FISH-7340] [Community Contribution - eirbjo] Remove Obsolete EJBContext Methods

• [FISH-7640] [Community Contribution - lprimak] Improve Hazelcast CP Subsystem Integration Behaviour

• [FISH-7716] Add Opens on java.base/java.io & on java.base/jdk.internal.misc

Security Fixes

• [FISH-7647] Port Fixes for CVE-2017-12617

• [FISH-7648] Fix CVE-2023-1370, json-smart Uncontrolled Recursion vulnerability

Bug Fixes

• [FISH-7044] Enabling HSTS breaks long responses

• [FISH-7597] MicroProfile health checks added by CDI extension are not used

Component Upgrades

• [FISH-6863] Upgrade H2DB to 2.2.220

• [FISH-6865] Upgrade istack commons to 4.2.0

• [FISH-6866] Upgrade Santuario to 3.0.2

• [FISH-6867] Upgrade Weld API to 5.0.SP3

• [FISH-7226] Upgrade OpenTelemetry to 1.29.0

Payara Platform Community 6.2023.8

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.0

Improvements

• [FISH-7639] [Community Contribution - lprimak] Adjust Hazelcast Session Key to Avoid Monitoring Warning

Bug Fixes

• [FISH-6773] Error while removing application reference from deployment group

• [FISH-7273] Fix Incorrect 'imqcmd' calculations for the number of consumers after cluster restart

• [FISH-7409] Unable to Instantiate LdapCtxFactory with JDK 17 Micro

• [FISH-7451] [Community Contribution - Thehpi] Fix for DataSource.getConnection() blows up on transaction with wrong status

• [FISH-7528] Staged upgrade from Payara 5 to Payara 6 fail after moving osgi-cache

• [FISH-7553] Java EE 8 Applications are not Transformed after Payara 5 to Payara 6 Upgrade

• [FISH-7563] First Attempt to Start Instance Fails After Payara 5 to Payara 6 Upgrade on Windows

• [FISH-7635] Hazelcast Enterprise License Field Not Big Enough

• [FISH-7641] Payara BOM version cannot be empty

• [FISH-7665] Cannot Start Payara Server on 11.0.20 or 17.0.8

Component Upgrades

• [FISH-7662] Update Docker Image JDK Versions to 11.0.20 & 17.0.8

Payara Platform Community 6.2023.7

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.0

Known Issue

Hazelcast Warning

• The Hazelcast 5.3.1 upgrade adds socket options for per-socket keep-alive configuration. When running Payara on Windows, this version of Hazelcast throws a warning in the server logs, similar to this: "Ignoring TCP_KEEPCOUNT. It seems your JDK does not support jdk.net.ExtendedSocketOptions on this OS. Try upgrading to the latest JDK or check with your JDK vendor.Alternatively, on Linux, configure tcp_keepalive_probes in the kernel (affecting default keep-alive configuration for all sockets): For more info see [keep alive]. If this isn’t dealt with, idle connections could be closed prematurely." This is a Hazelcast known issue that is documented [here].

Improvements

• [FISH-1419] [Community Contribution - lprimak] Hazelcast Partition Group according to Instance Group

• [FISH-7480] Reduce Duplication in POMs & BOMs

Bug Fixes

• [FISH-6291] Data synchronization issue in a @Clustered @Singleton

• [FISH-7426] Fix MicroProfile Config Cache Performance Degradation

• [FISH-7452] Cannot Start Instance After Payara 5 to Payara 6 Upgrade

• [FISH-7453] Cannot Create an Instance After Payara 5 to Payara 6 Upgrade

• [FISH-7462] Remote EJB Calls not working in JDK 11

Component Upgrades

• [FISH-7341] [Community Contribution - eirbjo] Upgrade ASM from 9.4 to 9.5

• [FISH-7377] Upgrade Hazelcast to 5.3.1

• [FISH-7380] Upgrade EclipseLink ASM to 9.5.0

Payara Platform Community 6.2023.6

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.0

Improvements

• FISH-7331 [Community Contribution - ctabin] Fix HK2 Config for JDK17 Compilation

Bug Fixes

• FISH-7204 [Community Contribution - ctabin] Removes Internal Throwable Reference to Avoid Potential Class Loader Leaks

• FISH-7354 ClassNotFoundException on org.apache.jasper.servlet.JspServlet after Payara 5 to Payara 6 Upgrade

Component Upgrades

• FISH-6869 Upgrade Concurrent API to 3.0.2

Payara Platform Community 6.2023.5

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.0

Improvements

• FISH-7096 Upgrade Service for JACC

Bug Fixes

• FISH-7127 Unable to create JVM option using Web UI
• FISH-7337 Don't Block Hazelcast by Default
• FISH-7359 Fix change-master-password for P12 Keystore Format
• FISH-7363 Add support for JKS to the `change-master-password` command in Payara 6

Security Fixes

• FISH-7292 Fix CVE-2023-1370, json-smart Uncontrolled Recursion vulnerability

Component Upgrades

• FISH-7128 Upgrade Jackson to 2.15.0
• FISH-7216 Upgrade SnakeYaml to 2.0
• FISH-7245 Upgrade MicroProfile API BOM to 6
• FISH-7374 Upgrade JSON Smart to 2.4.10
• FISH-7404 Upgrade Docker Image JDKs to 11.0.19 and 17.0.7