Skip to content

1.6.14

Choose a tag to compare

@Coduz Coduz released this 03 Aug 14:49
· 2725 commits to develop since this release
63af5e5

Build Info

Release Job: 1.6.14
GitHub project: Eclipse Kapua 1.6.14

Note

Enhancements

✨ [Datastore] Add configurable client pooling for Elasticsearch backend (port) (#4407)
⬆️ [GitHub Actions] Upgraded GitHub Actions to Node 24 compatible actions (#4385)
✨ [GitHub] Added Docker image build and publish on release released (#4408)
✨ [Project] Kapua Artifact release via GitHub Actions (#4383)

Bugfixes

🐛 [Authorization] Fixed possibility of creation of permissions restricted to groups and with forwardable set true (#4311)
🐛 [Authorization] Revoking a permission to a role now requires role:write in API 'DELETE {scope}/roles/{rileId}/permissions/{rolePermissionId}' (#4327)
🐛 [Authorization] Changed permission needed to find a job step (maintaining old permssion check for compatibility) - errata (#4335)
🐛 [CI] Added missing permission on GitHub Action workflows (#4291)
🐛 [CI] Fixed permission on License Check GitHub Action (#4333)
🐛 [Console GWT] Fixed querying for binary Metrics (#4257)
🐛 [Device Management] Fixed DeviceConfiguration AttributeDefinition translation of 'default' property (#4367)
🐛 [Docker] Add EXEC before java command for Message Broker and Events Broker (#4315)
🐛 [Job] API to find job target device by id fails with unauthorised when user has job:read permission (#4329)
🐛 [Open API] Fixed GET /dataMessages/ query parameters documentation for metric filtering (#4260)
🐛 [Open API] FIX: added missing connectionId parameter on openApi doc (#4280)
🐛 [Open API] FIX: added missing reservedUserId parameter on examples (#4281)
🐛 [Open API] FIX: fixed "installVerifierURI" parameter on openAPI doc. (#4282)
🐛 [OpenAPI] Fixed GET /dataMessages/ 'metricName', 'metricType', 'metricMin' and 'metricMax' documentation - errata (#4283)
🐛 [REST API] Fixed querying for binary Metrics (#4259)
🐛 [REST API] API GET /{scopeId}/jobs/{jobId}/steps/{stepId} fails with 403 unauthorised when user has job:read permission (#4328)
🐛 [REST API] POST /{scopeId}/devices/{deviceId}/keystore/items/csr fails with 403 unauthorised when user has device_management:write permission (#4330)
🐛 [User] FIX: added optlock parameter to UserProfile DTO (#4284)

Dependencies

⬆️ [Dependencies] Bumped version of Apache commons-fileupload to 1.6.0 - CVE-2025-48976 (#4270)
⬆️ [Dependencies] Bumped version of org.xerial.snappy:snappy-java.version to 1.1.10.8 - CVE-2023-34453 CVE-2023-34454 CVE-2023-34455 CVE-2023-43642 (#4271)
⬆️ [Dependencies] Bumped version of io.netty to 4.1.124 - CVE-2025-55163 (#4277)
⬆️ [Dependencies] Bumped version of Jetty to 9.4.58.v20250814 - CVE-2025-5115 (#4278)
⬆️ [Dependencies] Upgraded commons-beanutils version to 1.11.0 - CVE-2025-48734 (#4287)
⬆️ [Dependencies] Upgraded Jettison to 1.5.4 - CVE-2022-45685 (#4288)
⬆️ [Dependencies] Upgraded Common-text to 1.12.0 - CVE-2022-42889 (#4289)
⬆️ [Dependencies] Upgraded Apache commons-lang3 to 3.18 - CVE-2025-48924 (#4322)
⬆️ [Dependencies] Bump sshd-core dependency to 2.16.0 - CVE-2021-30129 CVE-2024-41909 (#4332)
⬆️ [Dependencies] Upgraded Logback to 1.3.15 (#4334)
⬆️ [Dependencies] Upgraded jdk15on to 1.70.0 (#4336)
⬆️ [Dependencies] jose4j to 0.9.6 - CVE-2024-29371 CVE-2023-31582 CVE-2023-51775 (#4338)
⬆️ [Dependencies] Upgrading commons-io to 2.19 to be compatible with fileupload 1.6.0 (#4360)
⬆️ [Dependencies] Upgraded netty to 4.1.130 final - CVE-2025-58056 CVE-2025-58057 CVE-2025-59419 (#4361)
⬆️ [Dependencies] Bumped version of io.netty dependencies to 4.1.135 - (#4397)
⬆️ [Dependencies] Bump maven-dependency-plugin dependency to 3.11.0 (#4404)
⬆️ [Dependencies] Bump maven-docker-plugin dependency to 0.48.1 (#4405)
⬆️ [Dependencies] Upgraded assertj to 3.27.7 - CVE-2026-24400 (#4414)
⬆️ [Dependencies] Upgraded io.netty dependencies to 4.1.136.Final (#4415)