v1.2.0

1.2.0 (2026-10-06)

✨ Features

• Add vendor-neutral OIDC authentication support for acceptance tests (4096fab)
• Add vendor-neutral OIDC authentication support for acceptance tests (1a089f5)
• Adding gcz group provisioning (6236e76)
• Adding gcz group provisioning (be090bc)
• Aws - implementing group cache (a0d2acf)
• Aws - implementing group cache (74a5218)
• azure: Authenticate Cosmos Gremlin with managed identity (2b78c13)
• azure: Authenticate Cosmos Gremlin with managed identity (c20f4ae)
• azure: Switch Redis authentication from password to MSI (b49d0ba)
• azure: Switch Redis authentication from password to MSI (da91db9)
• Initial code (576209a)

🐛 Bug Fixes

• Adding data root users to list of impacted users to flush cache (86a5eb4)
• Adding data root users to list of impacted users to flush cache (d0931f3)
• Aws sonarqube source fix (4fe572a)
• Aws sonarqube source fix (b8340e4)
• AWS tomcat cve (bcdce34)
• AWS tomcat cve (d0f0656)
• azure: Lowercase user id from supplied access token (fb94391)
• azure: Run JUnit 4 tests and align mocks with current core (9c67d1a)
• azure: Upgrade core-lib-azure to 3.0.1 (20f1912)
• azure: Upgrade core-lib-azure to 3.0.1 (a2974de)
• cache: Ensure member cache invalidation on membership changes (71e673d)
• cache: Ensure member cache invalidation on membership changes (6c35cfb)
• Configure JSON formatter for Core Plus logs (54a6586)
• Configure JSON formatter for Core Plus logs (175d0a5)
• cve: Remediate HIGH/CRITICAL deps + pom cleanup (f03bfc1)
• cve: Remediate HIGH/CRITICAL deps + pom cleanup (76128b0)
• cve: Upgrade Tomcat, Jackson, PostgreSQL and Netty for Critical/High findings (e046701)
• cve: Upgrade Tomcat, Jackson, PostgreSQL and Netty for Critical/High findings (b393e75)
• entitlements-jdbc: LoadDirectChildren returns mutable list (no more UOE) (6d6080c)
• entitlements-jdbc: LoadDirectChildren returns mutable list (no more UOE) (571e15f)
• entitlements-v2-core-plus: Throw UnsupportedOperationException for unsupported JDBC Deque-overload SPI methods (c9fdbe1)
• entitlements-v2-core-plus: Throw UnsupportedOperationException for unsupported JDBC Deque-overload SPI methods (e8d0913)
• Spring boot netty handler version bump (a451595)
• Spring boot netty handler version bump (6440f11)
• Spring-core tomcat netty version bump (c44620d)
• Spring-core tomcat netty version bump (83ff705)
• Sync upstream changes from v9.99.0-ibm.1 (2ad65f1)
• Sync upstream changes from v9.99.0-ibm.1 (4f7b307)
• test: Delete leaked data group in Azure CreateGroupsAzureTest cleanup (196e79a)
• Tomcat-core crypto CVE (adddaab)
• Tomcat-core crypto CVE (62eb243)
• Tomcat-core CVE (88c86e8)
• Tomcat-core CVE (c467f84)

📚 Documentation

• Add CONTRIBUTING guide with ownership map (1f7b548)
• Add CONTRIBUTING.md and replace the Azure DevOps infrastructure link (94aad82)
• azure: Add release, validate, and license badges to README (991e4b0)
• azure: Clarify second test identity in acceptance section (05feb61)
• azure: Document istio and workload identity env vars (e9c329f)
• azure: Mark provider README as Microsoft-maintained and point deployment at SPI Stack (c85eadf)
• azure: Note acceptance test image published to GHCR (56e7289)
• azure: Note fork ownership and update deployment links (3fba1c5)
• azure: Rewrite provider README for SPI Stack (fc54d13)
• Clarify Redis host override and integration test support (8c7d2d7)
• Clarify when deploy lane proves a change on real infra (87f2cae)
• Correct required maven version to 3.6.3 (6f01e00)
• Keep the configuration table inside the README width (8912b00)
• Make the root README fork-owned and move the Azure documentation there (4401056)
• Merge variable and value columns in env table (0306d0d)
• Move Azure provider README to repository root (209caab)
• Use relative issue links in SUPPORT.md ([7f8ecf5](7f8ecf5...