9.0.0-M3

Eclipse GlassFish 9 is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 12 specification under development.

GlassFish 9 M3 incorporates a subset of the available Jakarta EE 12 milestone specifications. The M2 version of the Security API and the M5 version of Jakarta Faces have been added and implemented, while the Servlet M2 API has been added and some features of it have been implemented, but not everything yet. The CDI proposed 5.0 final API had been added as well and implemented (via Weld CR1). The Concurrency milestone M3 has been added as well, but not implemented yet.

JDK 21 is required as a minimum now. JDK 25 is supported, and the final version of GlassFish 9 is targeted to certify on JDK 25 for Jakarta EE 12.

In this release GlassFish itself compiles, builds and passes the internal tests executed during a build, as well as the latest Jakarta Security 5 snapshot TCK.

In GlassFish 9 M2 we introduced a new implementation of JWT via Jakarta Security and Soteria and initial support for RolesAllowed for REST endpoints. In GlassFish M3 this support has been extended to include template paths and the implementation has radically changed; in M2 Soteria was responsible for endpoint discovery, while in M3 we now query the actual REST implementation (Jersey in our case). See the current TCK coverage of this: https://github.com/jakartaee/security/tree/master/tck/app-rest-rolesallowed-overlap and https://github.com/jakartaee/security/tree/master/tck/app-rest-rolesallowed This is very much still work in progress and for M4 we hope to move some of the prototyped interfaces to the specification APIs.

Being an early access milestone build, this build should obviously only be used for testing. Non of the updated APIs are final and all APIs are subject to change.

What's Changed in 9.0

• Version back to 9.0.0-SNAPSHOT and move tests by @arjantijms in #25955
• Update several versions in pom.xml by @arjantijms in #25982
• New (snapshot) versions of Soteria with native JWT and JWT-MP by @arjantijms in #25993
• Integrate Faces/Mojarra 5 snapshot with com.sun to org.glassfish by @arjantijms in #25995
• Integrate Security API 5, Soteria 5, Exousia 4 snapshots by @arjantijms in #26006
• Increase various versions in pom by @arjantijms in #26008
• Integrate milestones for the security components by @arjantijms in #26009
• OmniFaces MP JWT 4.0.0-M2 by @arjantijms in #26010

Merged in from 8.0

• Remove unused BaseGlassFishClassScanner.isDataRepositoryInterface by @pzygielo in #25925
• Remove unused Util.getNameAndSuffix by @pzygielo in #25924
• Fixed pom schemaLocation by @dmatej in #25929
• Add news piece to the website about 8.0.0 release by @OndroMih in #25928
• Moved JNA Library to dedicated module by @avpinchuk in #25927
• Switched to parent 2.0.0 by @dmatej in #25843
• Deployment performance and resource usage optimizations by @OndroMih in #25935
• Fix documentation about GF 8 by @OndroMih in #25931
• Add Arquillian Containers section to documentation page by @OndroMih in #25937
• Fix MP JWT integration by @OndroMih in #25938
• Bump com.fasterxml.jackson.core:jackson-core from 2.21.0 to 2.21.1 in /nucleus/parent by @dependabot[bot] in #25940
• Fixed missing new line in the output. by @dmatej in #25944
• Fix for 'WELD-001409: Ambiguous dependencies for type EntityManager' when persistence.xml contains more than one persistence-unit by @bvfalcon in #25936
• Add info about Embedded GlassFish maven plugin to website (and disable tests on docs changes) by @OndroMih in #25942
• Refactoring of utilities to make them usable outside of GlassFish by @dmatej in #25951
• Merge branch 'master' into 9.0 by @arjantijms in #25953
• New gmbal and Metro by @dmatej in #25926
• Updated Helidon to 4.4.0 by @dmatej in #25956
• Bump eclipselink from 5.0.0-B13 to 5.0.0 by @pzygielo in #25957
• Updated dependencies before release by @dmatej in #25959
• Released 8.0.1, fixed few mistakes, updated parent project to 2.0.2 by @dmatej in #25960
• Fixed URL to the Eclipse project to create a release by @dmatej in #25963
• Fixed ConfigProfileResolver service selection by @dmatej in #25964
• Support @ejb(beanName=...) for app clients by @arjantijms in #25962
• Merge 8.0 till commit 'a57e317647e413fe0ea9aa1f7380a977f4714bc8' into 9.0 by @arjantijms in #25966
• Merge commit 'b80039e13afabebf2ef91c9b068c065f7a6dc6f1' into 9.0 by @arjantijms in #25967
• Merge branch 'master' into 9.0 by @arjantijms in #25968
• Update docs and web to clarify that Embedded GlassFish is for production by @OndroMih in #25969
• Reduced complexity in DOL around ordered sets by @dmatej in #25965
• Remove the repackaged Jackson XML Bind annotations by @OndroMih in #25970
• Upgrade maven security plugin to 1.0.21 to support Java 26 by @OndroMih in #25974
• Fixes authentication with PAM login module by @avpinchuk in #25971
• Improved behavior related to InetAddress, hostname resolution, added tests by @dmatej in #25972
• ClusterITest - there are two more ports props by @dmatej in #25976
• Upgrade jsftemplating to 4.2.0 by @OndroMih in #25977
• Updated readme by @dmatej in #25975
• Updated docs after release of 8.0.1 by @dmatej in #25979
• Fix MP Config packaging by @OndroMih in #25981

Full Changelog: 9.0.0-M1...9.0.0-M2