v7.0.3

• OKAPI-1241 Jackson 2.18.6 fixing DoS when parsing long number - GHSA-72hv-8253-57qq
• #1439 MD post check=false param loosen MDs immutable check
• OKAPI-1242 Bump dependencies for Trillium (Vert.x 5.0.10, …)

v7.0.2

• OKAPI-1230 Add optional "required" property to EnvEntry.json of module descriptor
• OKAPI-1231 Migrate from AbstractVerticle to VerticleBase
• OKAPI-1232 Vert.x 5.0.6 fixing CVE-2025-67735 Netty CRLF injection
• OKAPI-1234 Support Docker 29 and later
• OKAPI-1236 upgrade to test-containers 2.0.3
• OKAPI-1238 log4j 4.5.23 fixing SocketAppender TLS hostname verification CVE-2025-68161
• OKAPI-1239 Vertx 5.0.7 (CVE-2026-1002), assertj 3.27.7, micrometer 1.16.2

v6.2.6

• OKAPI-1233 Vert.x 4.5.23 fixing CVE-2025-67735 Netty CRLF

v6.1.5

• OKAPI-1235 Vert.x 4.5.23 fixing CVE-2025-67735 Netty CRLF

v7.0.1

• OKAPI-1224 Upgrade Vert.x from 5.0.3 to 5.0.4 fixing CVE-2025-58056
• OKAPI-1229 Bump Vert.x from 5.0.4 to 5.0.5 fixing CVE-2025-59432, CVE-2025-11965, CVE-2025-11966
• OKAPI-1220 timer_wait_sync, timer_wait_extra options
• #1420 Remove unused scram client 2.1
• #1421 Update deps; allow JDK 25 compilation
• OKAPI-1228 Add META-INF VertxServiceProvider fixing FolioLoggingContext and FolioLocal

v6.2.5

• OKAPI-1225 Upgrade Vert.x from 4.5.18 to 4.5.21 fixing CVE-2025-58056, CVE-2025-58057 (Sunflower)

v6.1.4

• OKAPI-1222 Vert.x 4.5.18 fixing Netty CVE-2025-55163 MadeYouReset
• OKAPI-1226 Vert.x 4.5.21 fixing Netty CVE-2025-58056, CVE-2025-58057

v7.0.0

Trillium

• OKAPI-1211 freshtoken.client NPE if server response has empty body
• OKAPI-1213 Add FolioLoggingContext.put(ContextLocal<String>, String)
• OKAPI-1217 Configurable HTTP pool sizes for proxy and system calls
• OKAPI-1219 Upgrade to Vert.x 5 (OKAPI-1215 originally)
• OKAPI-1221 Vert.x 5.0.3 fixing Netty CVE-2025-55163 MadeYouReset
• OKAPI-1223 Declare multiple interface as optional dependency for Eureka

Breaking API changes:

• ChattyResponsePredicate removed. Use ChattyHttpResponseExpectation instead.
• GenericCompositeFuture removed. Methods exists in Vert.x' Future since Vert.x 5.

Flower release compatibility:

v7.0 is the Trillium version. This Okapi version can be used with Trillium, Sunflower, Ramsons, Quesnelia and Poppy.

Modules may use the okapi-common library that is suitable for both Eureka/Keycloak based and Okapi based installations.

v6.2.4

• OKAPI-1211 freshtoken.client NPE if server response has empty body
• OKAPI-1222 Vert.x 4.5.18 fixing Netty CVE-2025-55163 MadeYouReset

Sunflower version. This Okapi version can be used with Sunflower, Ramsons, Quesnelia and Poppy.

Modules may use the okapi-common library that is suitable for both Eureka/Keycloak based and Okapi based installations.

v6.3.0

Cancelled release, do not reuse this tag!

See #1404