Payara Platform Community 6.2024.5

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.1

Bug Fixes

• [FISH-6456] Remove the HTTP/2 warning

• [FISH-8273] Unable to delete System Properties via admin console

• [FISH-8482] Payara server admin console - Version number appears to remove any non-numerical character

Component Upgrades

• [FISH-8503] Upgrade Javassist to 3.30.2-GA

• [FISH-8504] Upgrade Classmate to 1.7.0

• [FISH-8505] Upgrade Nimbus Jose JWT to 9.37.3

• [FISH-8507] Upgrade STAX2 API to 4.2.2

• [FISH-8548] Upgrade Wasp to 3.2.2

• [FISH-8549] Upgrade Hibernate Validator to 8.0.1.Final

• [FISH-8550] Upgrade Woodstox Core to 6.6.2

• [FISH-8556] Upgrade VirtualBox JWS to 4.2.8

• [FISH-8558] Upgrade ASM to 9.7

• [FISH-8560] Upgrade Accessors Smart to 2.5.1

• [FISH-8627] Upgrade Docker JDK 11 Image to 11.0.23

• [FISH-8628] Upgrade Docker JDK 17 Image to 17.0.11

• [FISH-8629] Upgrade Docker JDK 21 Image to 21.0.3

• [FISH-8640] Upgrade Grizzly Gmbal API to 4.0.3

• [FISH-8641] Upgrade Felix Web Console to 5.0.2

Payara Platform Community 6.2024.4

Supported APIs and Applications

• Jakarta EE 10

• Jakarta EE 10 Applications

• MicroProfile 6.1

Security Fixes

• [FISH-8344] JSON-P/Parsson (CVE-2023-4043) affected by DoS vulnerability

Bug Fixes

• [FISH-8317] [Community Contribution - poikilotherm] Microprofile Config NPE for profiled setting

Component Upgrades

• [FISH-8421] Upgrade Reactive Streams to 1.0.4

• [FISH-8435] Upgrade JSON Smart to 2.5.1

• [FISH-8447] Upgrade Reactor Core to 3.6.4

• [FISH-8451] Upgrade Jackson to 2.17.0

• [FISH-8452] Upgrade Websocket API to 2.1.1

• [FISH-8454] Upgrade SnakeYaml to 2.2

Payara Platform Community 7.2024.1.Alpha1

Supported APIs and Applications

• Jakarta EE 11

• Jakarta EE 11 Applications

• MicroProfile 6.1

Features

• Payara 7 Aplha adds partial support for Concurrency 3.1, mainly using virtual threads, produced by ManagedExecutorService or ManagedThreadFactory.

• Supports jdk21 & Virtual threads were added on JDK 21.

Payara Platform Community 6.2024.3

Supported APIs and Applications

• Jakarta EE 10

• Jakarta EE 10 Applications

• MicroProfile 6.1

Improvements

• [FISH-7048] Let Felix choose its system packages

Bug Fixes

• [FISH-7212] Tmp files are being generated in /tmp upon deployment and not getting deleted

• [FISH-7364] Restarting a standalone instance just stops and not start it back

• [FISH-7367] Stop use of Hazelcast ReplicatedMap in ClusteredConfig Class on --lite Payara micro instance

Component Upgrades

• [FISH-7253] Upgrade OSGi Util Promise to 1.3.0

• [FISH-7254] Upgrade OSGi Core to 8.0.0

• [FISH-7255] Upgrade OSGi Annotation to 8.1.0

• [FISH-8219] Upgrade Felix SCR to 2.2.10

• [FISH-8220] Upgrade Felix Webconsole to 5.0.0

• [FISH-8320] Update OSGi & Felix in HK2

Payara Platform Community 6.2024.2

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.1

Improvements

• [FISH-7868] Allow Setting of System Properties over 512 characters via Admin Console

• [FISH-8035] Add Hyperlink to NPS question in Admin Console

• [FISH-8054] Add Proxy Support to OpenID Security Connector

• [FISH-8152] Micro Maven - Devmode - Store session state

• [FISH-8215] Refactor to fix 'JAASRealm.java:70: error: package java.security.acl does not exist' Java 21 Compilation Error

• [FISH-8216] Refactor to fix 'The Security Manager is deprecated and will be removed in a future release' Java 21 Compilation Error

• [FISH-8259] Improve Dev Mode Fail-Safe Mechanism in Payara Micro Maven Plugin

Bug Fixes

• [FISH-7430] Warning Falsely Logged with Custom Error Pages

• [FISH-8044] [Community Contribution - ctabin]] Avoid crashing due to FileSystemNotFound while behind a Spring boot

Component Upgrades

• [FISH-8262] Upgrade Docker JDK to 11.0.22

• [FISH-8263] Upgrade Docker JDK to 17.0.10

• [FISH-8264] Upgrade Docker JDK to 21.0.2

Payara Platform Community 6.2024.1

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.1

Improvements

• [FISH-7821] Add support for Payara Micro Docker Images for ARM

• [FISH-8190] Add support for Payara Server Docker Images for ARM

Security Fixes

• [FISH-7833] CVE-2023-3635: Update okio to 3.4.0

• [FISH-7835] Upgrade OkHTTP to 4.9.2 or higher

Bug Fixes

• [FISH-5877] Using the @LoginConfig Annotation with 'security-constraints' Leaves Server in an Inconsistent State

• [FISH-6659] Modules and Components Lost After Server Restart

• [FISH-7993] Remote JMS Broker Fails to Start

• [FISH-8100] MP metrics 5.1 not showing correct value for buckets

Component Upgrades

• [FISH-6872] Upgrade Jakarta EL API to 5.0.1

• [FISH-6873] Upgrade Jakarta Inject to 2.0.1

• [FISH-6874] Upgrade Jakarta Security Enterprise to 3.0.3

• [FISH-6875] Upgrade Jakarta Validation to 3.0.2

• [FISH-6877] Upgrade JSTL Impl to 3.0.1

• [FISH-7223] Upgrade IMQJMX to 5.1

• [FISH-8048] [Community Contribution - ctabin] Upgrade H2DB to 2.2.224

• [FISH-8050] Upgrade EclipseLink ASM to 9.6.0

• [FISH-8172] Upgrade to Jersey 3.1.5

• [FISH-8085] Upgrade JAXB-API to 4.0.1

Payara Platform Community 6.2023.12

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.1

Improvements

• [FISH-8083] Enhance Payara BOM for Version Consistency with Payara API Dependency

• [FISH-8129] Publish JDK 21 Docker Images

Bug Fixes

• [FISH-6466] Health checker reporting false positive stuck threads

• [FISH-7132] JMS High Availability is not working as expected in Deployment Groups for LOCAL JMS Service

• [FISH-7841] Payara Micro does not load Hazelcast config file when placed in subdirectory

Component Upgrades

• [FISH-7129] Upgrade Jersey to 3.1.3

• [FISH-7222] Upgrade Woodstox Core to 6.5.1

• [FISH-7236] Upgrade Apache Ant to 1.10.14

• [FISH-7239] Upgrade Santaurio XMLSEC to 4.0.0

• [FISH-7964] Upgrade Metro to 4.0.3

• [FISH-8051] Upgrade Hazelcast to 5.3.6

• [FISH-8128] Upgrade Monitoring Console to 2.0.2

Payara Platform Community 6.2023.11

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.1

Improvements

• [FISH-7158] Implement Payara Micro "warmup" command in Payara Server

• [FISH-7869] Add Individual Timeout Options for Start, Stop, and Restart Domains Commands

• [FISH-7997] Update Docker JDK to 11.0.21

• [FISH-7998] Update Docker JDK to 17.0.9

Security Fixes

• [FISH-7947] Fix CVE-2023-41699 URL Redirection to Untrusted Site

Bug Fixes

• [FISH-7531] Fix EclipseLink L2 Caching NullPointer Exception

• [FISH-7808] Fix EclipseLink L2 Caching Deadlock

• [FISH-7953] Fix Cannot Load Custom Realm Class Error on Windows

• [FISH-7959] [Community Contribution - ctabin] Fix Multirelease JAR Lookup for Specific Version Classes

Component Upgrades

• [FISH-7880] Upgrade Maven Bundle Plugin to 5.1.9

Payara Platform Community 6.2023.10

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.0

Improvements

• [FISH-7454] Add --timeout argument to the start-domain command

Security Fixes

• [FISH-7820] CVE-2023-1370: Upgrade json-smart to 2.4.11 in OIDC Client

Bug Fixes

• [FISH-6519] useBundledJsf Doesn't Remove Old JSF From Classpath Entirely

• [FISH-7817] Missing --add-opens in Payara Micro

• [FISH-7846] Missing Asadmin Help Manpages

• [FISH-7847] Fix InaccessibleObjectException for javax.management and javax.management.openmbean on JDK 17 & 21

Component Upgrades

• [FISH-6858] Upgrade JBoss Classfilewriter to 1.3.0.Final

• [FISH-6870] Upgrade Jakarta Batch API to 2.1.1

• [FISH-6871] Upgrade Jakarta EJB API to 4.0.1

• [FISH-6885] Upgrade Tyrus to 2.1.3

• [FISH-7378] Upgrade Yasson to 3.0.3

• [FISH-7827] Upgrade JSON Smart to 2.4.11

• [FISH-7828] Upgrade Accessors Smart to 2.4.11

• [FISH-7829] Upgrade Nimbus-Jose-JWT to 9.35

• [FISH-7865] [Community Contribution - ctabin] Update ASM to 9.6

Payara Platform Community 6.2023.9

Release notes

Supported APIs and Applications

• Jakarta EE 10
• Jakarta EE 10 Applications
• MicroProfile 6.0

Improvements

• [FISH-7340] [Community Contribution - eirbjo] Remove Obsolete EJBContext Methods

• [FISH-7640] [Community Contribution - lprimak] Improve Hazelcast CP Subsystem Integration Behaviour

• [FISH-7716] Add Opens on java.base/java.io & on java.base/jdk.internal.misc

Security Fixes

• [FISH-7647] Port Fixes for CVE-2017-12617

• [FISH-7648] Fix CVE-2023-1370, json-smart Uncontrolled Recursion vulnerability

Bug Fixes

• [FISH-7044] Enabling HSTS breaks long responses

• [FISH-7597] MicroProfile health checks added by CDI extension are not used

Component Upgrades

• [FISH-6863] Upgrade H2DB to 2.2.220

• [FISH-6865] Upgrade istack commons to 4.2.0

• [FISH-6866] Upgrade Santuario to 3.0.2

• [FISH-6867] Upgrade Weld API to 5.0.SP3

• [FISH-7226] Upgrade OpenTelemetry to 1.29.0