Release 1.26.0

What's Changed

• chore: [DevOps] Add E2E tests to DoD of PR template by @Jonas-Isr in #1032
• feat: [DevOps] Update orchestration specification by @sap-ai-sdk-bot[bot] in #1030
• fix: suppress false cve alarms by @vladimir-a-sap in #1033
• chore: [DevOps] Add v2 workflow compatibility by @CharlesDuboisSAP in #1036
• chore: [DevOps] bump the production-minor-patch group with 2 updates by @dependabot[bot] in #1037
• chore: [DevOps] bump the test group with 4 updates by @dependabot[bot] in #1042
• chore: [DevOps] bump the plugins group across 1 directory with 3 updates by @dependabot[bot] in #1040
• chore: [DevOps] Stagger different e2e test runs by one hour by @CharlesDuboisSAP in #1044
• fix: [DevOps] Fix e2e-test set up by @Jonas-Isr in #1048
• feat: [Orchestration] Add fallback configs to Spring AI integration by @Jonas-Isr in #1047
• fix: [DevOps] Fix e2e-tests by @Jonas-Isr in #1049
• chore: [DevOps] bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0 in the test group by @dependabot[bot] in #1053
• chore: [DevOps] bump org.apache.maven.plugins:maven-install-plugin from 3.1.4 to 3.2.0 in the plugins group by @dependabot[bot] in #1052
• chore: [DevOps] bump the production-minor-patch group with 4 updates by @dependabot[bot] in #1051
• fix: [DevOps] Fix CVE-2026-71889 and CVE-2026-18040 by @CharlesDuboisSAP in #1057
• fix: [DevOps] Fix CVE-2026-71889 and CVE-2026-18040 properly by @CharlesDuboisSAP in #1061
• fix: fix e2e tests by @vladimir-a-sap in #1064
• chore: [DevOps] fix CVE-2026-71889 bouncycastle by @CharlesDuboisSAP in #1066
• chore: [DevOps] ignore CVE-2026-59318, AI SDK 2.0.0-ALPHA will contain the update to Spring AI 2 by @CharlesDuboisSAP in #1068
• chore: [DevOps] Fix CVE-2026-89407 and CVE-2026-89425 by @CharlesDuboisSAP in #1070
• chore: harmonize javadocs by @SoleilHoffmann in #1075
• chore: [DevOps] bump org.apache.httpcomponents.core5:httpcore5 from 5.4.3 to 5.4.4 in the test group by @dependabot[bot] in #1079
• chore: [DevOps] bump the production-minor-patch group with 2 updates by @dependabot[bot] in #1078
• chore: [DevOps] bump actions/setup-java from 6.0.0 to 6.0.1 in the github-actions group by @dependabot[bot] in #1089
• fix: fix flaky test by @vladimir-a-sap in #1086
• chore: [DevOps] bump the test group with 2 updates by @dependabot[bot] in #1092
• chore: [DevOps] bump the production-minor-patch group across 1 directory with 5 updates by @dependabot[bot] in #1098
• chore: use most recent cloud-sdk version by @vladimir-a-sap in #1104
• chore: [DevOps] bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.2 to 0.26.3 in the plugins group by @dependabot[bot] in #1106
• chore: [DevOps] bump com.openai:openai-java-core from 4.73.0 to 4.76.0 in the production-minor-patch group across 1 directory by @dependabot[bot] in #1105
• feat: Add new AI models by @CharlesDuboisSAP in #1111
• fix: Remove internal AI models by @CharlesDuboisSAP in #1114
• fix: SDK generation workflow missing spec updates by @n-o-u-r-h-a-n in #1115
• fix: Vulnerabilities DB persistent cache by @SoleilHoffmann in #1118
• chore: [DevOps] bump com.diffplug.spotless:spotless-maven-plugin from 3.10.3 to 3.10.4 in the test group by @dependabot[bot] in #1126
• chore: [DevOps] bump the production-minor-patch group with 5 updates by @dependabot[bot] in #1125
• feat: [Orchestration] Add QWEN_3_8_MAX to model list by @Jonas-Isr in #1133
• fix: cve issue by @vladimir-a-sap in #1136
• fix: e2e tests timeouts main by @vladimir-a-sap in #1135
• fix: cve issues by @vladimir-a-sap in #1147
• fix: [Orchestration] tool usage accounting by @SoleilHoffmann and @challa in #1123
• chore: [DevOps] bump the plugins group with 3 updates by @dependabot[bot] in #1150
• chore: [DevOps] bump the production-minor-patch group across 1 directory with 3 updates by @dependabot[bot] in #1149

New Contributors

• @challa made their first contribution in #1123

Full Changelog: rel/1.25.0...rel/1.26.0