7.0.14

Eclipse GlassFish is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 10 specification, which is a major new feature release. Jakarta EE 10 requires JDK 11 as a minimum, but also works on JDK 17.

GlassFish 7.0.14 is a final release, containing final Jakarta EE 10 APIs. It compiles and runs on JDK 11 to JDK 21. MicroProfile support requires JDK 17 or higher.

Release overview

This release features among others an important NPE fix for the SSHLauncher and is highly recommended for our users who make use of this launcher. The thread safety of transactions was improved, and the JDBC connection pool sizing logic was also improved, fixing an annoying bug. To maintain future quality of GlassFish, many fixes to the internal TCKs tests were done. As a new feature, command completion is now enabled in the OSGi interactive console.

New features

• Improve OSGi interactive console by @avpinchuk in #24830
• Make @RestrictTo annotation repeatable by @avpinchuk in #24859

Fixes

• Fixes #23483 Add lock, add notifyWaitingThreads call for better max pool size logic. by @escay in #24879
• Fixes issue #24843 log a warning in the rare case the Resource handle by @escay in #24844
• Fixes command progress status by @avpinchuk in #24850
• SSL Configurator fix - CertificateRequest not being made in SSL mutual authentication by @lisa-lthorrold in #24847
• Fixed NPE in SSHLauncher by @dmatej in #24858
• Fixes issue #24849 make relevant methods synchronized in LocalTxConnectionEventListener by @escay in #24851
• The secureResponse can return just SEND_* states (based on javadoc) by @dmatej in #24855

Component updates

• Integrate nimbus-jose-jwt from 9.37.3 by @pzygielo in #24863
• Integrate JLine 3.25.1 by @avpinchuk in #24831
• Integrate JSch 0.2.17 by @avpinchuk in #24848
• Integrate OW2 ASM 9.7 by @avpinchuk in #24880
• Integrate Shrinkwrap Resolvers 3.3.0 by @avpinchuk in #24873

Project refactoring and maintenance

• Fixes issue #24845 - add new checkstyle rule: UnusedImports by @escay in #24846
• Fixes issue 24868 Clean code: fix unlikely argument and remove some unused variables. by @escay in #24870
• Integrate CDI TCK 4.0.13 by @avpinchuk in #24876
• Integrate Jakarta Concurrency TCK 3.0.3 by @avpinchuk in #24866
• Fixed dependencies of the REST TCK by @dmatej in #24853
• Fixed dependencies of concurrency TCK by @dmatej in #24841
• Fixed report.dir in the Authentication TCK execution by @dmatej in #24852
• Fixed report directories for standalone TCKs by @dmatej in #24857
• Updated Maven in Jenkinsfile by @dmatej in #24771
• Fixed JmacHttpsTest - certificate authentication by @dmatej in #24877
• Added staging repo to runtests.sh + archiving rotated server.log files on jenkins by @dmatej in #24883

New Contributors

• @lisa-lthorrold made their first contribution in #24847

Full Changelog: 7.0.13...7.0.14

8.0.0-M3

Eclipse GlassFish 8 is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 11 M2 specification under development.

Jakarta EE 11 M2 is the second milestone release of Jakarta EE 11. GlassFish 8 M3 incorporates a subset of this. The M2 versions of the Security APIs and Jakarta Faces have been added and implemented, while the Servlet M2 API has been added but not everything implemented yet. The REST M1 APIs have not yet been added.

New in M3 are the proposed final implementations of the Wave 1~4 specs; CDI (including Interceptors), Common Annotations and Expression Language and the addition of the Jakarta EE 11 milestone version of Jakarta Persistence and its implementation EclipseLink. Specific attention has been given to support all new features from the M2 versions of Jakarta Security/Jakarta Authorization, and Jakarta Faces.

8.0.0-M3 also incorporates all changes from the 7.0.x branch.

The following is the full list of Jakarta EE 11 proposed final and M2 APIs included:

API	Implementation
jakarta.el-api.version 6.0.0	Expressly 6.0.0-M1
jakarta.annotation-api.version 3.0.0
jakarta.cdi-api.version 4.1.0	Weld 6.0.0.Beta1
jakarta.interceptor-api.version 2.2.0	Weld 6.0.0.Beta1
jakarta.servlet-api.version 6.1.0-M2	(internal in GlassFish 8.0.0-M3)
jakarta.faces-api.version 4.1.0-M2	Mojarra 4.1.0-M2
jakarta.pages-api.version 4.0.0-M2	WaSP 4.0.0-M1
jakarta.concurrent-api.version 3.1.0-M2	Concurro 3.1.0-M3
jakarta.persistence-api.version 3.2.0-M2	EclipseLink 5.0.0-B01
jakarta.security-api.version 4.0.0-M2	Soteria 4.0.0-M2
jakarta.authorization-api.version 3.0.0-M2	Exousia 3.0.0-M2
jakarta.websocket-api.version 2.2.0-M2	2.2.0-M2
jakarta.authentication-api.version 3.1.0-M1	Epicyro 3.1.0-M1
jakarta.validation-api.version 3.1.0-M1	Hibernate Validator 8.0.1.Final

JDK 21 is required as a minimum now and the final version of GlassFish 8 is targeted to certify on JDK 21 for Jakarta EE 11.

In this release GlassFish itself compiles, builds and passes the internal tests executed during a build, but a small amount of those have been disabled for now. The Security and Authorization TCK passed completely (except for the signature, which needs updating), the Faces 4.1 M2 TCK passes fully as well. The PR verification tests all pass as well.

Being an early access milestone build, this build should obviously only be used for testing. Non of the updated APIs are truly final and are subject to change. The proposed final APIs are currently in staging and are undergoing a ballot for their final release.

What's Changed

• Fixes issue #24762 Use AMXLoggerInfo io System.out and add attribute info in toString method. by @escay in #24800
• Fixes issue #24746 replaces all http://www.oracle.com/technetwork links with their https://jakarta.ee/ counterpart where possible. by @escay in #24803
• Refactor GlassFish events processing by @avpinchuk in #24804
• Fixes log message info by @avpinchuk in #24807
• GlassFishORBHelper changed to singleton, lifecycle by @dmatej in #24806
• Fixes contribution year in the Guides by @avpinchuk in #24809
• Add event filtering test by @avpinchuk in #24810
• Increase stop-domain command timeout in tests by @avpinchuk in #24812
• Take into account JDK versions when patching jars by @arjantijms in #24813
• Store the DistinguishedPrincipalCredential in the Subject principals by @arjantijms in #24815
• Fixes #24816 Non-ASCII characters are not saved correctly in JVM options added using the JVM Options page by @kaido207 in #24817
• Fixes for resource leaks by @dmatej in #24616
• 8.0 by @arjantijms in #24818
• Sync of the master branch to 8.0.0 by @dmatej in #24819
• Integrate JUnit 5.10.2 by @avpinchuk in #24820
• Integrate Helidon MicroProfile Config 3.2.6 by @avpinchuk in #24821
• Remove duplicated properties by @pzygielo in #24822
• Improve the Admin Console loading options by @avpinchuk in #24814
• Integrate Jackson 2.16.1 by @arjantijms in #24824
• Integrate Commons Codec 1.16.1 by @arjantijms in #24823
• Jackson Databind does not longer need its own version. by @arjantijms in #24825
• Integrate Aries 1.3.7 by @arjantijms in #24826
• Integrate XMLSec 4.0.2 by @arjantijms in #24827
• Fixes applications-tests on Windows by @avpinchuk in #24828
• Add console loading option to the domain template by @avpinchuk in #24829
• Unregister event listeners from uninstalled bundles by @avpinchuk in #24811
• Integrate HK2 3.1.0 and JSF Template 4.0.4 by @arjantijms in #24834
• Improve OSGi interactive console by @avpinchuk in #24830
• Integrate JLine 3.25.1 by @avpinchuk in #24831
• Merge 7.0.13 release branch into master by @arjantijms in #24837
• Webpage update for 7.0.13 by @arjantijms in #24838
• Merge latest changes from master into 8.0 by @arjantijms in #24836
• Update documentation page for 7.0.13 by @avpinchuk in #24839
• Fixed dependencies of concurrency TCK by @dmatej in #24841
• Fixes issue #24843 log a warning in the rare case the Resource handle by @escay in #24844
• Fixes issue #24845 - add new checkstyle rule: UnusedImports by @escay in #24846
• SSL Configurator fix - CertificateRequest not being made in SSL mutual authentication by @lisa-lthorrold in #24847
• Integrate JSch 0.2.17 by @avpinchuk in #24848
• Fixed dependencies of the REST TCK by @dmatej in #24853
• Fixed report.dir in the Authentication TCK execution by @dmatej in #24852
• Fixes command progress status by @avpinchuk in #24850
• Merge latest 8.0 updates and changes from master by @arjantijms in #24856
• Latest 8.0 updates and commits from master by @arjantijms in #24862

New Contributors

• @lisa-lthorrold made their first contribution in #24847

Full Changelog: 8.0.0-M2...8.0.0-M3

7.0.13

Eclipse GlassFish is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 10 specification, which is a major new feature release. Jakarta EE 10 requires JDK 11 as a minimum, but also works on JDK 17.

GlassFish 7.0.13 is a final release, containing final Jakarta EE 10 APIs. It compiles and runs on JDK 11 to JDK 21. MicroProfile support requires JDK 17 or higher.

Release overview

In the release for this month we replaced many synchronized blocks by reentrant locks (to accommodate JDK 21 virtual threads). We also looked at SSO between clusters, and fixed a long standing bug there. A long running investigation into potential resource leaks finally came to a conclusion, and resulted in many fixes throughout the code base. The admin console also saw various improvements, specifically with respect to loading.

New features

• Improve the Admin Console loading options by @avpinchuk in #24814
• Add console loading option to the domain template by @avpinchuk in #24829

Fixes

• Fixes SSO failure by storing the DistinguishedPrincipalCredential in the Subject principals by @arjantijms in #24815
• Fixes for resource leaks by @dmatej in #24616
• Fixes issue #24782, cannot run eclipse:eclipse on module nucleus-dtds on Windows by @escay in #24783
• Fixes issue #24784, cannot build doc modules on Windows by @escay in #24785
• RecoveryManager thread safety by @dmatej in #24773
• Fixes #24788 No stacktrace is printed in server log when exception occurs in class specified by Lifecycle Module by @kaido207 in #24789
• Fixes data race during Admin Console initialization by @avpinchuk in #24793
• Fixes GlassFish event filtering by @avpinchuk in #24796
• Fixes issue #24762 Use AMXLoggerInfo io System.out and add attribute info in toString method. by @escay in #24800
• Fixes issue #24746 replaces all http://www.oracle.com/technetwork links with their https://jakarta.ee/ counterpart where possible. by @escay in #24803
• Fixes log message info by @avpinchuk in #24807
• Fixes contribution year in the Guides by @avpinchuk in #24809
• Fixes #24816 Non-ASCII characters are not saved correctly in JVM options added using the JVM Options page by @kaido207 in #24817

Component updates

• Integrate HK2 3.1.0 and JSF Template 4.0.4 by @arjantijms in #24834
• Integrate Helidon MicroProfile Config 3.2.6 by @avpinchuk in #24821
• Integrate JNA 5.14 by @arjantijms in #24778
• Integrate Jackson 2.16.1 by @arjantijms in #24824
• Integrate Commons Codec 1.16.1 by @arjantijms in #24823
• Integrate Aries 1.3.7 by @arjantijms in #24826
• Integrate XMLSec 4.0.2 by @arjantijms in #24827
• Integrate JUnit 5.10.2 by @avpinchuk in #24820

Project refactoring and maintenance

• Fixes schedule-exp EJB timer test by @avpinchuk in #24781
• Use standard proxy default method invocation handler by @avpinchuk in #24754
• Print processes before the build by @dmatej in #24770
• GlassFishORBHelper changed to singleton, lifecycle by @dmatej in #24806
• Add event filtering test by @avpinchuk in #24810
• Unregister event listeners from uninstalled bundles by @avpinchuk in #24811
• Increase stop-domain command timeout in tests by @avpinchuk in #24812
• Take into account JDK versions when patching jars by @arjantijms in #24813
• Jackson Databind does not longer need its own version. by @arjantijms in #24825
• Refactor GlassFish events processing by @avpinchuk in #24804
• Updated artifactId of gf docs in the website publisher by @dmatej in #24786
• Remove duplicated properties by @pzygielo in #24822
• Fixes applications-tests on Windows by @avpinchuk in #24828

New Contributors

• @escay made their first contribution in #24783

PR list: Milestone 7.0.13
Full Changelog: 7.0.12...7.0.13

8.0.0-M2

Eclipse GlassFish 8 is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 11 M1 specification under development.

Jakarta EE 11 M1 is the first milestone release of Jakarta EE 11. GlassFish 8 M2 incorporates a subset of this. The M1 versions of the Security APIs and Jakarta Faces have been added and implemented, while the Servlet M1 API has been added but not everything implemented yet. The Persistence and REST M1 APIs have not yet been added.

New in M2 is setting the JDK to 21, the addition of the M1 API of Jakarta Concurrency and an initial implementation thereof, fixing of the internal tests and fixing of the integration between Exousia (Jakarta Authorization) and GlassFish, so that setting the new Policy from a web application now actually works.

8.0.0-M2 also incorporates all changes from the 7.0.x branch.

The following is the full list of Jakarta EE 11 M1 APIs included:

API	Implementation Header
jakarta.el-api.version 6.0.0-M1	Expressly 6.0.0-M1
jakarta.servlet-api.version 6.1.0-M1	(internal in GlassFish 8.0.0-M2)
jakarta.security-api.version 4.0.0-M1	Soteria 4.0.0-M1
jakarta.authorization-api.version 3.0.0-M1	Exousia 3.0.0-M1.1
jakarta.authentication-api.version 3.1.0-M1	Epicyro 3.1.0-M1
jakarta.faces-api.version 4.1.0-M1	Mojarra 4.1.0-M1
jakarta.pages-api.version 4.0.0-M1	WaSP 4.0.0-M1
jakarta.cdi-api.version 4.1.0-M1	Weld 6.0.0.Alpha1
jakarta.interceptor-api.version 2.2.0-M1	Weld 6.0.0.Alpha1
jakarta.concurrent-api.version 3.1.0-M1	Concurro 3.1.0-M1
jakarta.websocket-api.version Tyrus 2.2.0-M1	Tyrus 2.1.5
jakarta.validation-api.version 3.1.0-M1	Hibernate Validator 8.0.1.Final
jakarta.annotation-api.version 3.0.0-M1

JDK 21 is required as a minimum now and the final version of GlassFish 8 is targeted to certify on JDK 21 for Jakarta EE 11.

In this release GlassFish itself compiles, builds and passes the internal tests executed during a build, but a small amount of those have been disabled for now. The Security TCK passed completely (except for the signature, which needs updating), while the Faces TCK has about 23 failures still. The PR verification tests all pass as well.

Being an early access milestone build, this build should obviously only be used for testing. Non of the updated APIs are final and are subject to change.

What's Changed

• Fix for the RecoveryManager's Resync Timeout by @hs536 in #24707
• Integrate Jackson 2.16.0 by @arjantijms in #24711
• Fix: The startserv script didn't report errors correctly by @OndroMih in #24709
• Integrate Grizzly 4.0.2 by @arjantijms in #24713
• Update MP to Jakarta EE 11 M1 compatible versions. by @arjantijms in #24719
• Removed CDI tests using @ManagedBean by @arjantijms in #24720
• Update glassfish7 root folder to glassfish8 by @arjantijms in #24721
• Integrate Javassist 3.30.2 by @arjantijms in #24723
• Merge master into 8.0 by @arjantijms in #24722
• Integrate JLine 3.25.0 by @avpinchuk in #24724
• Integrate ClassMate 1.7.0 by @avpinchuk in #24727
• Integrate commons-lang3 3.14.0 by @avpinchuk in #24725
• Integrate Commons IO 2.15.1 by @avpinchuk in #24726
• Integrate Helidon MicroProfile Config 3.2.5 by @avpinchuk in #24731
• Integrate early build of Jersey 4. by @arjantijms in #24732
• Integrate JSch 0.2.16 by @avpinchuk in #24729
• Reduce usage of Java SE Security Manager by @arjantijms in #24733
• Refactor deployment-time bytecode preprocessing by @avpinchuk in #24730
• Replace JMockit mock framework with EasyMock by @avpinchuk in #24738
• Give authentication modules masked request by @arjantijms in #24740
• Update JaCoCo to 0.8.11 in nucleus parent POM by @avpinchuk in #24742
• Fixes around logging by @dmatej in #24743
• Integrate EasyMock 5.2.0 by @avpinchuk in #24741
• Add debug option to start-cluster, to start all instances in debug mode by @arjantijms in #24744
• Fixes ConcurrentModificationException in context map propagator by @avpinchuk in #24745
• Integrate GlassFish Shoal 3.1.0 by @arjantijms in #24747
• Optimize servlet caching filter by @avpinchuk in #24748
• Merge remote-tracking branch 'origin/master' into 8.0 by @arjantijms in #24751
• Raise bytecode level by @avpinchuk in #24750
• Try the application classloader to restore the Principal for HA. by @arjantijms in #24753
• Integrate Tyrus 2.1.5 by @arjantijms in #24755
• Use standard proxy default method invocation handler by @avpinchuk in #24754
• Order WebSocket initializer before Faces one by @arjantijms in #24757
• Fixes REST ASM resource generator by @avpinchuk in #24758
• Guard the websocket upgrade to only happen once for a request. by @arjantijms in #24759
• Integrate Apache Santuario/XMLSec 4.0.1 by @arjantijms in #24760
• Integrate Woodstox 6.6.0 by @arjantijms in #24761
• More stable GlassFishLogHandlerTest by @dmatej in #24763
• Add Websocket TCK runner by @arjantijms in #24764
• Integrate HK2 3.0.6 by @arjantijms in #24766
• Patch Tyrus manifest to export org.glassfish.tyrus.client.exception by @arjantijms in #24765
• Print processes before the build by @dmatej in #24770
• Integrate JNA 5.14 by @arjantijms in #24778
• RecoveryManager thread safety by @dmatej in #24773
• Fixes schedule-exp EJB timer test by @avpinchuk in #24781
• Fixes issue #24782, cannot run eclipse:eclipse on module nucleus-dtds on Windows by @escay in #24783
• Fixes issue #24784, cannot build doc modules on Windows by @escay in #24785
• Updated artifactId of gf docs in the website publisher by @dmatej in #24786
• Fixes #24788 No stacktrace is printed in server log when exception occurs in class specified by Lifecycle Module by @kaido207 in #24789
• I forgot to change also groupId by @dmatej in #24791
• Add code conventions (taken from the EE4J ones that got lost) by @arjantijms in #24787
• Fixes data race during Admin Console initialization by @avpinchuk in #24793
• Update runner pom for Concurrency TCK for new 3.1.0 version by @arjantijms in #24797
• Fixes GlassFish event filtering by @avpinchuk in #24796

New Contributors

• @escay made their first contribution in #24783

Full Changelog: 8.0.0-M1...8.0.0-M2

7.0.12

Eclipse GlassFish is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 10 specification, which is a major new feature release. Jakarta EE 10 requires JDK 11 as a minimum, but also works on JDK 17.

GlassFish 7.0.12 is a final release, containing final Jakarta EE 10 APIs. It compiles and runs on JDK 11 to JDK 21. MicroProfile support requires JDK 17 or higher.

Release overview

This release we focused on finding and fixing the root cause of several "strange" WebSocket related bugs that we witnessed in the past. We also did a similar thing related to several issues with running apps on the default context root, especially where after authentication redirects happened to another URL. Furthermore we looked into problems with authentication and SSO in a cluster and did some initial fixes. Handling and processing of logging was looked at once again, something we have been improving a lot step by step through various iterations of releases. Finally but not least a nasty ConcurrentModificationException was fixed, and a memory leak (via HK2) was solved.

New features

• Optimize servlet caching filter by @avpinchuk in #24748
• Add TLS checkbox in AdminGUI by @kaido207 in #24703
• Add debug option to start-cluster, to start all instances in debug mode by @arjantijms in #24744

Fixes

• Fixed several possible issues with rolling log files by @dmatej in #24700
• Fixes several issues around logging by @dmatej in #24743
• Fixed authentication modules not getting masked request by @arjantijms in #24740
• Fixed HA SingleSingOn by also trying the application classloader to restore the Principal for HA. by @arjantijms in #24753
• Fixed WebSocket init bug by ordering WebSocket initializer before Faces one by @arjantijms in #24757
• Fixed WebSocket upgrade bug by adding Guard for websocket upgrade to only happen once for a request. by @arjantijms in #24759
• Fixes REST ASM resource generator by @avpinchuk in #24758
• Fixed ConcurrentModificationException in context map propagator by @avpinchuk in #24745
• Fixed cmtTimeoutInSeconds config, it can't take effect when set value 0 in admin UI. by @zistrong in #24702
• Fixed the RecoveryManager's Resync Timeout by @hs536 in #24707
• Fixed startserv script not reporting errors correctly by @OndroMih in #24709

Component updates

• Integrate Jersey 3.1.5 by @arjantijms in #24706
• Integrate Tyrus 2.1.5 by @arjantijms in #24755
• Patch Tyrus 2.1.5 manifest to export org.glassfish.tyrus.client.exception by @arjantijms in #24765
• Integrate Helidon MicroProfile Config 3.2.5 by @avpinchuk in #24731
• Integrate Grizzly 4.0.2 by @arjantijms in #24713
• Integrate GlassFish Shoal 3.1.0 by @arjantijms in #24747
• Integrate HK2 3.0.6 by @arjantijms in #24766
• Integrate JLine 3.25.0 by @avpinchuk in #24724
• Integrate ClassMate 1.7.0 by @avpinchuk in #24727
• Integrate Javassist 3.30.2 by @arjantijms in #24723
• Integrate commons-lang3 3.14.0 by @avpinchuk in #24725
• Integrate Commons IO 2.15.1 by @avpinchuk in #24726
• Integrate JSch 0.2.16 by @avpinchuk in #24729
• Integrate EasyMock 5.2.0 by @avpinchuk in #24741
• Integrate JaCoCo 0.8.11 by @avpinchuk in #24742
• Integrate Apache Santuario/XMLSec 4.0.1 by @arjantijms in #24760
• Integrate Woodstox 6.6.0 by @arjantijms in #24761
• Integrate Jackson 2.16.0 by @arjantijms in #24711

Project refactoring and maintenance

• Add Websocket TCK runner by @arjantijms in #24764
• Refactor deployment-time bytecode preprocessing by @avpinchuk in #24730
• Replace JMockit mock framework with EasyMock by @avpinchuk in #24738
• More stable GlassFishLogHandlerTest by @dmatej in #24763

New Contributors

• @zistrong made their first contribution in #24702

Full Changelog: 7.0.11...7.0.12

8.0.0-M1

Eclipse GlassFish 8 is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 11 M1 specification under development.

Jakarta EE 11 M1 is a first milestone release of Jakarta EE 11. GlassFish 8 M1 incorporates a subset of this. The M1 versions of the Security APIs and Jakarta Faces have been added and implemented, while the Servlet M1 API has been added but not everything implemented yet. The Concurrency and REST M1 APIs have not yet been added.

The following is the full list of Jakarta EE 11 M1 APIs included:

• jakarta.validation-api.version 3.1.0-M1
• jakarta.annotation-api.version 3.0.0-M1
• jakarta.el-api.version 6.0.0-M1
• jakarta.servlet-api.version 6.1.0-M1
• jakarta.annotation-api.version 3.0.0-M1
• jakarta.security-api.version 4.0.0-M1
• jakarta.authorization-api.version 3.0.0-M1
• jakarta.authentication-api.version 3.1.0-M1
• jakarta.faces-api.version 4.1.0-M1
• jakarta.interceptor-api.version 2.2.0-M1
• jakarta.pages-api.version 4.0.0-M1
• jakarta.cdi-api.version 4.1.0-M1

JDK 17 is required as a minimum now, which may be updated to JDK 21 in the next milestone. JDK 21 is supported, and the final version of GlassFish 8 is targeted to certify on JDK 21 for Jakarta EE 11.

In this release GlassFish itself compiles, builds and passes the internal tests executed during a build, but a small amount of those have been disabled for now. The Security TCK passed completely (except for the signature, which needs updating), while the Faces TCK has about 23 failures still. The PR verification tests have several failures as well still.

Being an early access milestone build, this build should obviously only be used for testing. Non of the updated APIs are final and are subject to change.

What's Changed

• Initial support for Authorization 3.0 and Authentication 3.1 by @arjantijms in #24689
• Starting to support Jakarta EE 11 M1 by @arjantijms in #24705

Full Changelog: 7.0.11...8.0.0-M1

7.0.11

Eclipse GlassFish is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 10 specification, which is a major new feature release. Jakarta EE 10 requires JDK 11 as a minimum, but also works on JDK 17.

GlassFish 7.0.11 is a final release, containing final Jakarta EE 10 APIs. It compiles and runs on JDK 11 to JDK 21. MicroProfile support requires JDK 17 or higher.

Release overview

This release sees an important fix where WebSockets would not work at all for applications on the default context root (e.g. https://example.com vs https://example.com/myapp). This month we have concentrated on the AdminGUI and fixed an assortment of small but annoying defects in it. Various major components were updated, such as Jersey (Jakarta REST), Tyrus (Jakarta WebSockets) and Mojarra (Jakarta Faces). To keep the project maintainable and well tested, several tests were added and improved as well.

Fixes

• Fixed WebSocket not working for default web module applications. by @arjantijms in #24691
• Fixed naming context propagation in ContextSetupProviderImpl by @avpinchuk in #24638
• Fix auto login AdminGUI by accidentally changed constant by @arjantijms in #24697
• Fixed cleaning of unhandled messages in AdminGUI by @kaido207 in #24665
• Fixed #24686 "Properties specific to this Class" is not displayed in Edit Realm Page in AdminGUI by @kaido207 in #24687
• Fixed several things and provided various improvements in AdminGUI by @kaido207 in #24692
• Fix #24693 Fail to deploy a app when the app's material files remain and if there is a lifecycle module by @kaido207 in #24694
• Fixed an error message with unnecessary pattern string by @kaido207 in #24679
• Fixed various aspects of logging by @dmatej in #24685

Component updates

• Integrate Jersey 3.1.4 by @arjantijms in #24695
• Integrate Tyrus 2.1.4 by @arjantijms in #24676
• Integrate Mojarra 4.0.5 by @arjantijms in #24682
• Integrate WaSP 3.2.2 by @arjantijms in #24684
• Integrate Helidon MicroProfile Config 3.2.3 by @avpinchuk in #24688
• Update various build-plugins to latest version by @arjantijms in #24680

Project refactoring and maintenance

• Updated glassfish.version.7x to 7.0.10 by @dmatej in #24666
• Add runner for Activation TCK by @arjantijms in #24668
• Make sure Activation TCK build fails when tests fails by @arjantijms in #24670
• Added Pages Debug (aka DSOL) TCK by @arjantijms in #24674
• Rename TCK "ant-based" to "platform" by @arjantijms in #24671
• Build of documentation revisited by @dmatej in #24673
• Fixed path to parent pom of docs by @dmatej in #24675
• The set-version-id profile updated to respect the current reactor by @dmatej in #24678
• Refactored building tools for Ant-based tests by @dmatej in #24626

Full Changelog: 7.0.10...7.0.11

7.0.10

Eclipse GlassFish is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 10 specification, which is a major new feature release. Jakarta EE 10 requires JDK 11 as a minimum, but also works on JDK 17.

GlassFish 7.0.10 is a final release, containing final Jakarta EE 10 APIs. It compiles and runs on JDK 11 to JDK 21. MicroProfile support requires JDK 17 or higher.

Release overview

In this release a 10 months long operation to get an internal dependency to the slf4j-api removed finally got to fruition. This involved the intense cooperation of multiple teams, and we're exceptionally happy to have finally been able to do this. We also did a lot of work to make our builds repeatable (big thanks to @hboutemy), and we did a ton of refactoring to the internal security packages of GlassFish, making them easier to understand and therefor easier to maintain. Any external code depending on these internal packages (such as potentially custom LoginModules/Realms) may have to update (we recommend of course not depending on internal packages and using public APIs). As every release, we integrated many component updates, and did a number of smaller fixes.

Fixes

• Fixed CVE-2023-41080 - Avoid protocol relative redirects by @arjantijms in #24655
• Fixed admin console - replace gf.redirect to gf.navigate where it needs to be replaced by @kaido207 in #24607
• Fix #24641 Cannot filter deployed applications by Engines in Admin Console by @kaido207 in #24642
• Fixed osgi-shell asadmin command by @avpinchuk in #24610
• Fixed list-persistence-types asadmin command by @avpinchuk in #24628
• Fixed dependency on OS settings of java by @dmatej in #24617
• Fixed resource cleanup in Embedded - Improve GlassFish process runtime type detection by @avpinchuk in #24611
• Fixed builds on Windows by @dmatej in #24606
• Fixed the startserv script for macOS by @OndroMih in #24639
• Fixed NPE - the unusedJarsCheck is sometimes null by @dmatej in #24627
• Fixed instance synchronization by @avpinchuk in #24631

Component updates

• Integrate Weld 5.1.2 by @arjantijms in #24634
• Integrate WaSP 3.2.1 by @arjantijms in #24624
• Integrate Jakarta JSON-P 2.1.3 and implementation Parsson 1.1.5 by @arjantijms in #24650
• Integrate Jakarta SOAP (XMLWSAPI) 4.0.1 and JAXB implementation 4.0.4 by @arjantijms in #24649
• Integrate Grizzly 4.0.1 by @pzygielo in #24614
• Integrate HK2 3.0.5 and ASM 9.6 by @arjantijms in #24620
• Integrate EclipseLink ASM 9.6.0 by @arjantijms in #24648
• Integrate Stax 2 API 4.2.2 by @arjantijms in #24633
• Integrate Commons IO 2.14.0 by @arjantijms in #24651
• Integrate Classmate 1.6.0 by @arjantijms in #24652
• Integrate Nimbus Jose JWT 9.37 by @arjantijms in #24654
• Integrate JLine 3.23 by @arjantijms in #24658
• Integrate Commons IO 2.15 by @arjantijms in #24659
• Integrate JSCH 0.2.12 by @arjantijms in #24660
• Update glassfishbuild-maven-plugin 4.0.0-M1 + fixes by @dmatej in #24605
• Update GlassFish Build Maven plugin 4.0.0 by @arjantijms in #24661
• Update test tools checkstyle and jacoco by @arjantijms in #24656
• Update pom.xml EE4J parent to 1.0.9 by @arjantijms in #24657

Project refactoring and maintenance

• New XmlSec4 without mandatory SLF4J by @dmatej in #24225
• Improve reproducible builds by @hboutemy in #24462
• Disable date in hk2 generated files by @hboutemy in #24372
• Move and rename security packages by @arjantijms in #24640
• Streamline security APIs by @arjantijms in #24637
• Refactor Realm and related code by @arjantijms in #24630
• Refactor and clean login modules by @arjantijms in #24635
• Disable lockAndRenameTest on Mac. The OS just doesn't guarantee this. by @arjantijms in #24623
• Deprecated XMLInputFactory.newInstance replaced by newFactory by @dmatej in #24625
• Docs pushed to the end of the build by @dmatej in #24629

Full Changelog**: 7.0.9...7.0.10

7.0.9

Eclipse GlassFish is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 10 specification, which is a major new feature release. Jakarta EE 10 requires JDK 11 as a minimum, but also works on JDK 17.

GlassFish 7.0.9 is a final release, containing final Jakarta EE 10 APIs. It compiles and runs on JDK 11 to JDK 21. MicroProfile support requires JDK 17 or higher.

Release overview

In this release the modularity of GlassFish is once again increased by moving the Jakarta Authentication implementation code to a new standalone project: Epicyro (a while ago a similar thing was done with Jakarta Authorization implementation code moving to Exousia). We also enabled the GlassFish embedded tests again, which were dormant for a long time; this emphasises the commitment of the team to keep GlassFish embedded in a good shape. Among the many updated components, Exousia was updated specifically to fix a bug with deployments on virtual servers, and the ORB was updated to fix a somewhat obscure bug where a remote EJB returned a JDK defined enum type.

Fixes

• Fixed generated EJB remote interfaces loading in Embedded GlassFish by @avpinchuk in #24566
• Classes in ScatteredArchive are processed only once. by @OndroMih in #24570
• Properly close deployment WebappClassLoader by @avpinchuk in #24598
• Fixed stop-local-instance command by @avpinchuk in #24591
• Fixed #24593 Error message is not displayed when Undeploy fails in Admin Console. by @kaido207 in #24594
• Fixed list-virtual-servers command description in Administration Guide by @avpinchuk in #24602
• Don't log a stacktrace if MANIFEST file not found in deployed JAR by @OndroMih in #24561

Component updates

• Integrate Jakarta XML Bind API 4.0.1 by @arjantijms in #24579
• Integrate Jakarta Concurrency API 3.0.3 by @arjantijms in #24580
• Integrate Mojarra 4.0.4 by @arjantijms in #24583
• Integrate Exousia 2.1.1 by @arjantijms in #24597
• Integrate Epicyro 3.0.0 by @arjantijms in #24529
• Integrate Windows Service Wrapper 2.12.0 by @avpinchuk in #24590
• Integrate ORB 4.2.5 by @pzygielo in #24603
• Integrate Nimbus 9.35 by @arjantijms in #24599
• Update maven-bundle-plugin to 5.1.9 by @arjantijms in #24600
• Update several maven plugins by @arjantijms in #24585

Project refactoring and maintenance

• Enable GF Embedded test suite - part 1 (adds missing Derby JDBC driver to GF Embedded All) by @OndroMih in #24576
• Enable GF Embedded test suite - part 3 (GF Embedded Maven plugin) by @OndroMih in #24581
• Enable GF Embedded test suite - part 2 (also fixes a NullPointerException in VirtualServer.java) by @OndroMih in #24577
• More stable ProgressStatusComplexITest by @dmatej in #24567
• Add application tests for classloading-time bytecode preprocessing by @avpinchuk in #24574
• Add application test for deployment on multiple virtual servers by @avpinchuk in #24601
• Replace deprecated isAccessible method in all places by @avpinchuk in #24569
• Configure the Concurrency TCK tests to produce log files in the "target" directory by @OndroMih in #24571
• Add a builder and runner for the full connectors TCK by @arjantijms in #24568
• Remove all Service Engine references by @avpinchuk in #24604

Full Changelog: 7.0.8...7.0.9

7.0.8

Eclipse GlassFish is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 10 specification, which is a major new feature release. Jakarta EE 10 requires JDK 11 as a minimum, but also works on JDK 17.

GlassFish 7.0.8 is a final release, containing final Jakarta EE 10 APIs. It compiles and runs on JDK 11 to JDK 21ea35. MicroProfile support requires JDK 17 or higher.

Release overview

This release fixes multi-jar compatibility in GlassFish and does further preparations for JDK 21. It includes various component updates among which those for CDI, Faces, and JSON. Test coverage is improved by adding the TCKs for REST Client and Connectors. Finally, various CDI extensions have been optimised to reduce excessive and unnecessary calls to them.

New features

• Optimize CDI extensions to reduce unnecessary PAT handler calls by @OndroMih in #24533

Fixes

• Fix webapp Multi-Release JAR processing by @avpinchuk in #24530
• Fix processing of the Multi-Release libraries in EAR application by @avpinchuk in #24554
• Build GlassFish Embedded artifacts as Multi-Release JARs by @avpinchuk in #24549
• Add missing JSON-P API to glassfish-embedded-*.jars by @avpinchuk in #24557
• Fixed Java 11 compatibility issue in RWLockDataStructureTest by @avpinchuk in #24538
• Fixed #24527 Admin Console behavior when admin user changes password to empty has changed compared to before by @kaido207 in #24528
• Fixed unit test compatibility with JDK21 by @dmatej in #24531
• Fixed ElementStarITest and TokenAuthenticationITest by @dmatej in #24535
• Fixed tasks submitted to executor executed during deployment @OndroMih in #24544
• Fixed Startserv script - support help argument, fix handling errors by @OndroMih in #24547

Component updates

• Integrate Weld 5.1.1.SP2 by @arjantijms in #24545
• Integrate Mojarra 4.0.3 by @arjantijms in #24556
• Integrate Parsson 1.1.4 by @hs536 in #24553
• Integrate commons-lang3 3.13.0 by @arjantijms in #24560
• Integrate jsch 0.2.11 by @arjantijms in #24562
• Integrate Felix webconsole 4.8.12 by @arjantijms in #24563
• Update Arquillian artifacts in MicroProfile TCK by @avpinchuk in #24550
• Update test dependencies (junit, jmh, checkstyle) by @arjantijms in #24559

Project refactoring and maintenance

• Autodetection of packages for OSGI bootstrap by @dmatej in #24478
• Add no-interface view Enterprise Bean application test by @avpinchuk in #24542
• Add MicroProfile Rest Client TCK by @avpinchuk in #24536
• Add runners for the standalone Connectors TCK by @arjantijms in #24555
• Add tests to verify that tasks submitted to executor during deployment are executed by @OndroMih in #24539
• Archive glassfish-embedded-*.jars by @pzygielo in #24552

Full Changelog: 7.0.7...7.0.8