Kubling Core 26.4

Changes

• Synchronize compact stream deserialization with known protocol classes and explicitly registered service interfaces.
• Validate classes before loading and prevent rejected classes from falling back to default resolution.
• Remove compiler warnings and modernize Java usage.
• Support two-part release versions.
• Add a shared IDE formatter profile.

Kubling Core 26.3

Changes

• Preserve structured provider diagnostics through serialization and JDBC warnings.
• Support partial results and multiple JDBC results.
• Fix transaction start, result set holdability, and copy on write map behavior.
• Remove client compiler warnings.

Kubling Core 26.2

Kubling Core 26.2 establishes the Kubling-native core, JDBC client, shared types, and compatibility surface.\n\nHighlights:\n\n- Migrates public Java packages, runtime identifiers, JDBC naming, service providers, and error codes from inherited Teiid names to Kubling.\n- Adds typed JDBC parameter metadata for typed NULL and non-null bindings, including custom logical types, arrays, and batches.\n- Adds explicit support for Geography values with unknown SRID while preserving the legacy 4326 default.\n- Extends protocol-facing APIs for typed parameters and multiple results.\n- Removes the legacy Kerberos client implementation.\n- Updates vulnerable dependencies and builds Java 21-compatible artifacts with GraalVM 25.\n- Automates Maven Central publication and JDBC driver verification/distribution.\n\nCompatibility notice:\n\nThis release contains intentional public package and JDBC URL changes. Downstream engines, connectors, and applications should adopt the matching Kubling packages and version together.\n\nThe Maven Central artifacts and signed JDBC driver assets are populated by the automated release workflow.

v26.1

Changes in this release

• jdbc-native: Adds Jackson dependencies to the JDBC native driver to fix runtime exceptions.
• core: Includes LobChunk in the safe classes list to prevent serialization issues.
• tests: Improves test readability and performs minor refactors.
• dependencies: Upgrades dependencies to address known vulnerabilities.

v25.3.2

Changes in this release

• hibernate-dialect: Introduces the recommended DialectResolver integration pattern required by latest Hibernate.
• test-container: Improved the Kubling TestContainer. Minor adjustments to improve stability and correctness.
• common-core: Removes unnecessary deprected Guava dependency from Core tests.

v25.3.1

Migration to OpenTelemetry and updated test containers

• Migrated all instrumentation from OpenTracing to OpenTelemetry, making it the single observability protocol supported by Kubling.
• Kubling test containers now point to the full edition instead of the old Community Edition (CE).

v25.2.1

• Promoted the JSON data type to support top-level comparisons using standard operators (e.g. '='),
  enabling direct filtering and join conditions on JSON values.

• Fixed the toString logic for Clob values to ensure proper string representation
  during SQL rendering and debugging.

v25.2

Security Hardening – Deserialization Protection
As of this release, deserialization security has been significantly improved by explicitly defining a set of safe, whitelisted classes allowed during object deserialization.

What's changed:
Introduced class whitelisting mechanism to validate objects during deserialization.

Prevents deserialization chains that could be exploited for remote code execution or injection attacks.

Reduces the attack surface in components that process serialized input.

Please use the JDBC driver included with this version, as previous versions may be unstable or incompatible when communicating with the current release.

v25.1.4

• Addressed user complaints regarding excessive messages being printed to stdout during large failing transactions. Stack trace logging has been removed to reduce noise and improve clarity in console output.

v25.1.3

• Fixed an issue where the configuration file failed to load in certain cases due to a missing commons-io dependency.