Apache Sling 13 released

The Sling 13 release contains numerous improvements, such as official Java 21 support, and various performance improvements and updates.

Read on to see more details about the individual improvements. To find out more about running Sling, see our getting started page.

Official support for Java 21

The Sling Starter and included modules are validated to work on Java 11, 17 and 21.

Note that for Java 17+ the org.apache.sling.commons.threads will not clean up leftover ThreadLocal instances unless the --add-opens java.base/java.lang=ALL-UNNAMED is passed to the JVM. This fix is already applied to the official Sling Starter Docker image and we anticipate further fixes in this area.

Drop support for Java 8

Some of the Sling modules and their dependencies started to switch to Java 11 as minimum version, so Java 8 is no longer supported for the Sling Starter.

Update to Oak 1.72.0

Apache Jackrabbit Oak 1.72.0 brings numerous performance improvements and new features that are now available in the Sling Starter.

Switch to jakarta.json

A lot of modules have been migrated from org.json to jakarta.json, some modules are still using org.json. Thus the Sling Starter includes both Apache Johnzon 1.x and 2.x for supporting both. It is expected that all modules will be migrated to jakarta.json soon and Johnzon 1.x will be removed from the Sling Starter.

Sling Models

Sling Models comes with a couple of small improvements:

• SLING-8706 Injections for java.util.Optional<> should be automatic optional
• SLING-11917 Sling Models: Support parameter name evaluation in constructor injection
• SLING-12359 Support constructor injection for Java Record classes

Sling XSS

The Sling XSS module implementation switched from OWASP AntiSamy to the OWASP Java HTML Sanitizer library (SLING-7231).

Multi-arch container image

The official Apache Sling Starter images pushed to DockerHub support the linux/arm64 architecture, in addition to the existing linux/amd64 one. This allows deploying the Sling Starter on a wider varierty of platforms.

Version updates

All bundles have been updated to the latest versions.

New bundles added to Sling Starter:

• com.fasterxml.jackson.dataformat:jackson-dataformat-xml
• com.fasterxml.woodstox:woodstox-core
• org.apache.commons:commons-text
• org.apache.felix:org.apache.felix.http.inventoryprinter
• org.apache.felix:org.apache.felix.http.webconsoleplugin
• org.owasp.encoder:encoder

The following bundles are removed from the Sling Starter:

• com.google.guava:guava
• org.apache.jackrabbit:jackrabbit-jcr-rmi

A couple of bundles changed their artifact ID and are thus replaced with the latest version using the latest artifact ID (e.g. switch to Groovy 4).

OSGi Core R8 compliance

Sling Starter ships with Apache Felix 7 which implements OSGi Core R8 fully. In addition it comes with Felix SCR 2.2 which implements Declarative Services 1.5 (part of OSGi Compendium R8).

Aggregated list of changes

Generated by launchpad-comparator: Lists all bundle changes since the last Starter release, including links to issues found in the commit messages of the affected Sling bundles.

Added:

• com.fasterxml.jackson.dataformat:jackson-dataformat-xml 2.18.2
• com.fasterxml.woodstox:woodstox-core 7.1.0
• org.apache.commons:commons-text 1.13.0
• org.apache.felix:org.apache.felix.http.inventoryprinter 1.0.2
• org.apache.felix:org.apache.felix.http.webconsoleplugin 1.2.0
• org.apache.groovy:groovy 4.0.10
• org.apache.groovy:groovy-ant 4.0.10
• org.apache.groovy:groovy-astbuilder 4.0.10
• org.apache.groovy:groovy-cli-picocli 4.0.10
• org.apache.groovy:groovy-console 4.0.10
• org.apache.groovy:groovy-datetime 4.0.10
• org.apache.groovy:groovy-docgenerator 4.0.10
• org.apache.groovy:groovy-groovydoc 4.0.10
• org.apache.groovy:groovy-groovysh 4.0.10
• org.apache.groovy:groovy-jmx 4.0.10
• org.apache.groovy:groovy-json 4.0.10
• org.apache.groovy:groovy-jsr223 4.0.10
• org.apache.groovy:groovy-nio 4.0.10
• org.apache.groovy:groovy-servlet 4.0.10
• org.apache.groovy:groovy-sql 4.0.10
• org.apache.groovy:groovy-swing 4.0.10
• org.apache.groovy:groovy-templates 4.0.10
• org.apache.groovy:groovy-test 4.0.10
• org.apache.groovy:groovy-test-junit5 4.0.10
• org.apache.groovy:groovy-testng 4.0.10
• org.apache.groovy:groovy-xml 4.0.10
• org.apache.jackrabbit:oak-shaded-guava 1.72.0
• org.codehaus.woodstox:stax2-api 4.2.2
• org.osgi:org.osgi.service.component 1.5.1
• org.osgi:org.osgi.util.converter 1.0.9
• org.owasp.encoder:encoder 1.3.1

Removed:

• com.google.guava:guava 15.0
• org.apache.felix:org.apache.felix.converter 1.0.18
• org.apache.jackrabbit:jackrabbit-jcr-rmi 2.20.4
• org.codehaus.groovy:groovy 3.0.9
• org.codehaus.groovy:groovy-ant 3.0.9
• org.codehaus.groovy:groovy-astbuilder 3.0.9
• org.codehaus.groovy:groovy-cli-picocli 3.0.9
• org.codehaus.groovy:groovy-console 3.0.9
• org.codehaus.groovy:groovy-datetime 3.0.9
• org.codehaus.groovy:groovy-docgenerator 3.0.9
• org.codehaus.groovy:groovy-groovydoc 3.0.9
• org.codehaus.groovy:groovy-groovysh 3.0.9
• org.codehaus.groovy:groovy-jmx 3.0.9
• org.codehaus.groovy:groovy-json 3.0.9
• org.codehaus.groovy:groovy-jsr223 3.0.9
• org.codehaus.groovy:groovy-macro 3.0.9
• org.codehaus.groovy:groovy-nio 3.0.9
• org.codehaus.groovy:groovy-servlet 3.0.9
• org.codehaus.groovy:groovy-sql 3.0.9
• org.codehaus.groovy:groovy-swing 3.0.9
• org.codehaus.groovy:groovy-templates 3.0.9
• org.codehaus.groovy:groovy-test 3.0.9
• org.codehaus.groovy:groovy-test-junit5 3.0.9
• org.codehaus.groovy:groovy-testng 3.0.9
• org.codehaus.groovy:groovy-xml 3.0.9

Changed:

• com.composum.nodes:composum-nodes-commons 4.0.1 -> 4.3.4
• com.composum.nodes:composum-nodes-console 4.0.1 -> 4.3.4
• com.composum.nodes:composum-nodes-jslibs 4.0.1 -> 4.3.4
• com.composum.nodes:composum-nodes-pckgmgr 4.0.1 -> 4.3.4
• com.composum.nodes:composum-nodes-usermgr 4.0.1 -> 4.3.4
• com.fasterxml.jackson.core:jackson-annotations 2.13.1 -> 2.18.2
• com.fasterxml.jackson.core:jackson-core 2.13.1 -> 2.18.2
• com.fasterxml.jackson.core:jackson-databind 2.13.1 -> 2.18.2
• commons-codec:commons-codec 1.15 -> 1.17.2
• commons-fileupload:commons-fileupload 1.4 -> 1.5
• commons-io:commons-io 2.11.0 -> 2.18.0
• org.apache.aries.spifly:org.apache.aries.spifly.dynamic.bundle 1.3.4 -> 1.3.7
• org.apache.commons:commons-lang3 3.12.0 -> 3.17.0
• org.apache.felix:org.apache.felix.cm.json 1.0.6 -> 2.0.6
• org.apache.felix:org.apache.felix.configadmin 1.9.22 -> 1.9.26
• org.apache.felix:org.apache.felix.configadmin.plugin.interpolation 1.2.2 -> 1.2.8
• org.apache.felix:org.apache.felix.eventadmin 1.6.2 -> 1.6.4
• org.apache.felix:org.apache.felix.healthcheck.core 2.0.12 -> 2.2.0
• org.apache.felix:org.apache.felix.healthcheck.generalchecks 2.0.14 -> 3.0.8
• org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin 2.0.2 -> 2.2.0
• org.apache.felix:org.apache.felix.http.jetty 4.1.14 -> 5.1.26
• org.apache.felix:org.apache.felix.http.servlet-api 1.1.4 -> 3.0.0
• org.apache.felix:org.apache.felix.http.sslfilter 1.2.6 -> 2.0.2
• org.apache.felix:org.apache.felix.inventory 1.1.0 -> 2.0.0
• org.apache.felix:org.apache.felix.log 1.2.6 -> 1.3.0
• org.apache.felix:org.apache.felix.scr 2.2.0 -> 2.2.12
• org.apache.felix:org.apache.felix.webconsole 4.7.2 -> 5.0.8
• org.apache.felix:org.apache.felix.webconsole.plugins.ds 2.1.0 -> 2.3.0
• org.apache.felix:org.apache.felix.webconsole.plugins.event 1.1.8 -> 1.2.0
• org.apache.felix:org.apache.felix.webconsole.plugins.memoryusage 1.0.10 -> 1.1.0
• org.apache.felix:org.apache.felix.webconsole.plugins.obr 1.0.4 -> 1.1.0
• org.apache.felix:org.apache.felix.webconsole.plugins.packageadmin 1.0.4 -> 1.1.0
• org.apache.httpcomponents:httpclient-osgi 4.5.13 -> 4.5.14
• org.apache.httpcomponents:httpcore-osgi 4.4.15 -> 4.4.16
• org.apache.jackrabbit:jackrabbit-data 2.20.4 -> 2.22.0
• org.apache.jackrabbit:jackrabbit-jcr-commons 2.20.4 -> 2.22.0
• org.apache.jackrabbit:jackrabbit-spi 2.20.4 -> 2.22.0
• org.apache.jackrabbit:jackrabbit-spi-commons 2.20.4 -> 2.22.0
• org.apache.jackrabbit:jackrabbit-webdav 2.20.4 -> 2.22.0
• org.apache.jackrabbit:oak-api 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-authorization-principalbased 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-blob 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-blob-plugins 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-commons 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-core 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-core-spi 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-jackrabbit-api 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-jcr 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-lucene 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-query-spi 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-security-spi 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-segment-tar 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-store-composite 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-store-document 1.42.0 -> 1.72.0
• org.apache.jackrabbit:oak-store-spi 1.42.0 -> 1.72.0
• org.apache.jackrabbit.vault:org.apache.jackrabbit.vault 3.6.0 -> 3.8.2
• org.apache.pdfbox:fontbox 2.0.25 -> 2.0.32
• org.apache.pdfbox:jempbox 1.8.16 -> 1.8.17
• org.apache.pdfbox:pdfbox 2.0.25 -> 2.0.32
• org.apache.servicemix.bundles:org.apache.servicemix.bundles.ognl 3.3.2_1 -> 3.3.4_1
• org.apache.servicemix.bundles:org.apache.servicemix.bundles.rhino 1.7.14_1 -> 1.7.15_1
• org.apache.servicemix.bundles:org.apache.servicemix.bundles.thymeleaf 3.0.14.RELEASE_1 -> 3.0.15.RELEASE_1
• org.apache.sling:org.apache.sling.api 2.24.0 -> 2.27.6
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11123 Multiple puts with same key are not handled correctly (Improvement)
  • SLING-11206 Add support for buidling RequestProgressTracker (Improvement)
  • SLING-11214 Add method to remove a selector to SlingUriBuilder (Improvement)
  • SLING-11347 SlingUriBuilder.createFrom(request) should preserve any mapped resource path (Bug)
  • SLING-11390 Update to Sling Bundle Parent 48 (Improvement)
  • SLING-11392 Escape characters in request progress tracker (Improvement)
  • SLING-11448 Provide a mode option for resource providers (Improvement)
  • SLING-11514 Provide dispatcher option to ignore header changes on include (New Feature)
  • SLING-11531 add RequestParameter factory to Builders (Improvement)
  • SLING-11546 ValueMap.get("calendar", String.class) conversion loses timezone information (Bug)
  • SLING-11549 Update to Sling Bundle Parent 49 (Improvement)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-11728 Remove bi-directional dependencies between Engine and Servlets Resolver (Improvement)
  • SLING-11845 ResourceResolver.getSearchPaths() javadoc does not match implementation (Improvement)
  • SLING-11878 Clarify Javadoc on which methods allow a ModifiableValueMap to be changed (Improvement)
  • SLING-11965 Make API build with Java 17 (Task)
  • SLING-11974 Regression caused by SLING-11825 - change in request getUserPrincipal (Bug)
  • SLING-12062 add LazyBindings.putOnly (Task)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12215 javadoc of ResourceUtil.normalize does not match implementation (Improvement)
  • SLING-12219 ResourceUtil.normalize does not handle segments with multiple dots correctly (Bug)
  • SLING-12249 Clarify "ADDED" resource changes for ancestor nodes of path (Improvement)
  • SLING-12370 Undo SLING-12062 (Task)
• org.apache.sling:org.apache.sling.auth.core 1.5.6 -> 1.7.0
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11446 Move the DefaultLoginsHealthCheck to the auth core bundle (Sub-task)
  • SLING-11577 Remove excessive logging if anonymous is not allowed (Improvement)
  • SLING-11583 Allow custom decoration of the login event properties (New Feature)
  • SLING-11598 Don't reactivate authenticator on configuration change (Improvement)
  • SLING-11600 Update to Sling Bundle Parent 49 (Improvement)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-11867 Empty mapping from ResourceMapper breaks authentication requirement updates (Bug)
  • SLING-12059 Make dependency to metrics optional (Improvement)
• org.apache.sling:org.apache.sling.commons.fsclassloader 1.0.14 -> 1.0.16
  • SLING-5980 Duplicate Script Cache Clearing Functionality (Bug)
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11697 Update parent bundle (49) to sling-commons-fsclassloader (Task)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12459 Redirect sonarcloud notifications to commits@apache.sling.org (Task)
  • SLING-12546 Commons FileSystem ClassLoader: Update to parent 62 (Task)
• org.apache.sling:org.apache.sling.commons.johnzon 1.2.14 -> 2.0.0
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-11973 Update to Johnzon 1.2.21 (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12182 Provide wrapper for Apache Johnzon 2.0 (New Feature)
• org.apache.sling:org.apache.sling.commons.log 5.4.0 -> 5.5.0
  • SLING-11393 Escape characters in log entries (Improvement)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12234 Commons Log builds fail on Windows (Bug)
  • SLING-12235 Upgrade logback version to 1.2.13 (Task)
  • SLING-12240 Upgrade to parent pom 52 and Java 11 (Improvement)
• org.apache.sling:org.apache.sling.commons.log.webconsole 1.0.0 -> 1.0.2
  • SLING-5932 Move Web Console Plugin to separate bundle (Improvement)
  • SLING-6142 Add grep like support in Log Tailer (New Feature)
  • SLING-6144 Update logback dependency to 1.1.7 (Improvement)
  • SLING-6529 Remove usage of org.json from Log WebConsole Module (Task)
  • SLING-6530 ITWebConsoleRemote fails intermittently (Test)
  • SLING-7162 Update SCM information in all POM files to reference Git (Sub-task)
  • SLING-7167 Adjust READMEs (Sub-task)
  • SLING-7213 Add a default .gitignore file to every module (Sub-task)
  • SLING-7214 Add the LICENSE file to every module (Sub-task)
  • SLING-7215 [nice-to-have] Add a CONTRIBUTING file to every module (Task)
  • SLING-7216 [nice-to-have] Add a CODE_OF_CONDUCT file to every module (Task)
  • SLING-7245 Validate pull requests using Jenkins (Improvement)
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11004 Update to pax-exam 4.13.3 (Task)
  • SLING-11005 Remove logback dependency from log webconsole (Task)
  • SLING-11007 commons.log.webconsole: upgrade to parent pom 46 (Sub-task)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12459 Redirect sonarcloud notifications to commits@apache.sling.org (Task)
  • SLING-12547 Commons Log WebConsole: Update to parent 62 (Task)
  • SLING-12548 Commons Log WebConsole: Update to HtmlUnit 4.7.0 (Task)
• org.apache.sling:org.apache.sling.commons.logservice 1.1.0 -> 1.1.2
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11303 Update commons logservice to parent 47 (Sub-task)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12459 Redirect sonarcloud notifications to commits@apache.sling.org (Task)
  • SLING-12551 Commons Log Service: Update to parent 62 (Task)
• org.apache.sling:org.apache.sling.commons.metrics 1.2.10 -> 1.2.14
  • SLING-11456 Add ability to export MBean values as metrics (Improvement)
  • SLING-11502 Commons-Metrics: allow unregistering of Metrics (Task)
  • SLING-11509 Metrics JmxExporter: add support for boolean (Task)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12411 Make JmxExporterFactory more resilient (Improvement)
• org.apache.sling:org.apache.sling.commons.mime 2.2.2 -> 2.3.0
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11652 Update Core Mime Types (Improvement)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-12079 Update Commons Mime to Bundle Parent 52 (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12183 Avoid exception on startup if Apache Tika is not available (Improvement)
  • SLING-12184 Require at least Apache Tika 1.20 (Improvement)
• org.apache.sling:org.apache.sling.commons.scheduler 2.7.12 -> 2.7.14
  • SLING-8354 Migrate all existing Health Checks in Sling to Felix HC API (New Feature)
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11662 Endless loop in QuartzSchedulerThread.run() with maxPoolSize == queueSize (Bug)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12459 Redirect sonarcloud notifications to commits@apache.sling.org (Task)
  • SLING-12541 Commons Scheduler: Switch to Parent 52 and bnd-maven-plugin (Task)
• org.apache.sling:org.apache.sling.commons.threads 3.2.22 -> 3.3.0
  • SLING-10836 Update commons.threads to parent pom 45 (Sub-task)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11145 Update to Sling Bundle Parent 47 (Task)
  • SLING-11146 Add initial JPMS support (New Feature)
  • SLING-11147 Configure Maven Failsafe Plugin to run build successfully on Java 17 (JPMS) (Task)
  • SLING-11161 Support testing with different JDKs (Task)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-11993 Threadpool: number of tasks in the work queue should be available via metrics/JMX (Task)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12212 Don't emit stacktrace when ThreadPoolExecutorCleaningThreadLocals cannot be initialized (Improvement)
• org.apache.sling:org.apache.sling.discovery.api 1.0.4 -> 1.0.6
  • SLING-2892 Add simple paranoia check to detect duplicate sling.id in a cluster (Improvement)
  • SLING-3164 Clarify ClusterView.getId (was: Clarify and deprecate ClusterView.getId) (Bug)
  • SLING-4505 POM files under /bundles/extensions/discovery are have incorrect relative paths to it's parents (Improvement)
  • SLING-4668 Clarify allowed characters used in ClusterView.getId() (Bug)
  • SLING-4669 Clarify that a cluster means instances hooked to the same persistence/repository (Bug)
  • SLING-4684 Stress that handleTopologyEvent() should be lock-free and terminate quickly (Improvement)
  • SLING-4698 Set parent.relativePath to empty for all modules (Bug)
  • SLING-5683 Minor javadoc clarifications in discovery.api (Improvement)
  • SLING-7162 Update SCM information in all POM files to reference Git (Sub-task)
  • SLING-7167 Adjust READMEs (Sub-task)
  • SLING-7213 Add a default .gitignore file to every module (Sub-task)
  • SLING-7214 Add the LICENSE file to every module (Sub-task)
  • SLING-7215 [nice-to-have] Add a CONTRIBUTING file to every module (Task)
  • SLING-7216 [nice-to-have] Add a CODE_OF_CONDUCT file to every module (Task)
  • SLING-7245 Validate pull requests using Jenkins (Improvement)
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11355 Update parent bundle (48) to sling-discovery modules (Sub-task)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12459 Redirect sonarcloud notifications to commits@apache.sling.org (Task)
  • SLING-12558 Discovery API: Update to parent 62 (Task)
• org.apache.sling:org.apache.sling.discovery.base 2.0.10 -> 2.0.14
  • SLING-10489 Ignore partially started, newly joining instances to avoid disturbing discovery (for a while) (Improvement)
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-10700 Improve TopologyRequestValidator code (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11355 Update parent bundle (48) to sling-discovery modules (Sub-task)
  • SLING-11450 Partially started instance suppression can lead to unwanted leader loss (Bug)
  • SLING-11470 Revert discovery.base impl separation, bump major package version instead (Task)
• org.apache.sling:org.apache.sling.discovery.commons 1.0.24 -> 1.0.28
  • SLING-7969 Memory leak in DiscoveryLiteDescriptor (Bug)
  • SLING-10489 Ignore partially started, newly joining instances to avoid disturbing discovery (for a while) (Improvement)
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11355 Update parent bundle (48) to sling-discovery modules (Sub-task)
• org.apache.sling:org.apache.sling.discovery.oak 1.2.34 -> 1.2.46
  • SLING-10489 Ignore partially started, newly joining instances to avoid disturbing discovery (for a while) (Improvement)
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-10854 Introduce cleanup job of old slingId data in discovery (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11355 Update parent bundle (48) to sling-discovery modules (Sub-task)
  • SLING-11450 Partially started instance suppression can lead to unwanted leader loss (Bug)
  • SLING-11496 Fresh instance must remain suppressed until syncToken stored (Task)
  • SLING-11619 Restore safeguard mechanism for discovery config's int and long properties (Task)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-11805 Don't stop slingId cleanup upon PROPERTIES_CHANGED (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12459 Redirect sonarcloud notifications to commits@apache.sling.org (Task)
  • SLING-12559 Discovery Oak: Update to parent 52 (Task)
• org.apache.sling:org.apache.sling.discovery.support 1.0.6 -> 1.0.8
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11355 Update parent bundle (48) to sling-discovery modules (Sub-task)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12459 Redirect sonarcloud notifications to commits@apache.sling.org (Task)
  • SLING-12560 Discovery Support: Update to parent 52 (Task)
• org.apache.sling:org.apache.sling.engine 2.8.0 -> 2.16.0
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11206 Add support for buidling RequestProgressTracker (Improvement)
  • SLING-11438 Resource path consisting of %7D with multiple dots leads to path traversal (Bug)
  • SLING-11514 Provide dispatcher option to ignore header changes on include (New Feature)
  • SLING-11515 Provide interface to get the recent requests (New Feature)
  • SLING-11518 Requests are not recorded until web console plugin is invoked (Bug)
  • SLING-11521 Clean up Engine code (Improvement)
  • SLING-11566 Add methods to check whether recording is enabled (Improvement)
  • SLING-11569 Response created with Builders.newResponseBuilder() does not work with RequestDispatcher.include (Bug)
  • SLING-11574 Update to sling-bundle-parent 49 (Improvement)
  • SLING-11576 Remove obsolete diagnosis logging (Improvement)
  • SLING-11578 Make authenticator and servlets resovler required for main servlet (Improvement)
  • SLING-11618 Webconsole: FilterStatus prints timings with wrong unit (Improvement)
  • SLING-11656 Prevent AbstractMethodError in SlingHttpServletRequestImpl (Improvement)
  • SLING-11669 Don't call mime type service if extension is null (Improvement)
  • SLING-11702 Prevent wrong handling of error handlers (Improvement)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-11722 The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API (Bug)
  • SLING-11728 Remove bi-directional dependencies between Engine and Servlets Resolver (Improvement)
  • SLING-11740 DefaultErrorHandler should not catch Error (Improvement)
  • SLING-11766 Revert parts of SLING-11702 and invoke error handlers on include again (Improvement)
  • SLING-11781 Update to commons fileupload 1.5 (Improvement)
  • SLING-11824 Deadlock during repository restart (Bug)
  • SLING-11825 SlingHttpServletRequestImpl.getUserPrincipal() does not return null for anonymous requests (Bug)
  • SLING-11829 Response should be resetted before invoking error filters (Bug)
  • SLING-11851 Prevent recursive invocations of error handler (Improvement)
  • SLING-11872 Some request attributes not set when running with Felix Jetty 4.2.x (Bug)
  • SLING-11876 Avoid creating response wrapper for every include (Improvement)
  • SLING-11888 remove snapshot dependency (Task)
  • SLING-11898 Make patterns for access and request log configurable (Improvement)
  • SLING-11903 Sling Engine build fails on Java 17 due to JMock error:module java.base does not "opens java.lang" to unnamed module @2613a93a (Improvement)
  • SLING-11970 Avoid restarting of services on configuration change (Improvement)
  • SLING-11974 Regression caused by SLING-11825 - change in request getUserPrincipal (Bug)
  • SLING-12003 The RequestDispatcher should flush the buffer on forward only if the buffer hasn't already been closed (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12124 Inconsistent handling of empty selectors (Bug)
  • SLING-12133 Include time spend in authentication in request log (Improvement)
  • SLING-12152 IOException is not properly handled by error handling (Bug)
  • SLING-12297 Logging in case no servlet can be resolved (Task)
  • SLING-12301 Improve error handling during registration of ServletContext (Task)
  • SLING-12316 Servlet Name might be set incorrectly after an exception (Task)
  • SLING-12317 Make Sling Engine build with Java 21 (Task)
  • SLING-12318 Apply spotless formatting to Sling Engine (Task)
  • SLING-12321 Update parent pom to latest (Task)
  • SLING-12326 SocketExceptions are no longer handled as error (Task)
  • SLING-12330 Fix formatting (Task)
  • SLING-12454 Allow configuring the warning severity of scripts that don't obey the RequestDispatcher include API (Improvement)
  • SLING-12459 Redirect sonarcloud notifications to commits@apache.sling.org (Task)
  • SLING-12468 Remove dependency to http.service (Improvement)
  • SLING-12478 Add potential origins of violations to the RequestDispatcher include API (Improvement)
• org.apache.sling:org.apache.sling.event 4.3.0 -> 4.3.14
  • SLING-8413 JobManagerImpl.findJobs does not escape some values when running queries (Bug)
  • SLING-9905 Provide option to include sling instance id nodes in cleanup (Improvement)
  • SLING-11192 Calculating metrics takes too long (Improvement)
  • SLING-11346 CleanUpTest is flaky (Bug)
  • SLING-11379 Do not create duplicate scheduled jobs (Improvement)
  • SLING-11385 Update to Sling Bundle Parent 48 (Task)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-11793 Limit log messages via JobExecutionContext.log() (Improvement)
  • SLING-11797 Log Jobs Added with No Assigned Topology Capability at Info (Bug)
  • SLING-11831 Allow setting job properties for custom job state (Improvement)
  • SLING-11858 Fix Scope of org.jetbrains:annotations in Events / Events API (Bug)
  • SLING-11859 Avoid Duplicating API Version in Events BND (Improvement)
  • SLING-11875 make sling event reproducible (Bug)
  • SLING-11900 Provide alternative terminology for inequitable terms (Improvement)
  • SLING-11923 Sling Events does not Build on Java 17 (Bug)
  • SLING-12078 Suspected race condition between TOPOLOGY_INIT and JobManager.addJob (Bug)
• org.apache.sling:org.apache.sling.event.dea 1.1.4 -> 1.1.6
  • SLING-7245 Validate pull requests using Jenkins (Improvement)
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11025 Sling Eventing should use a dedicated threadpool for scheduled events (Improvement)
  • SLING-11035 update DEA to latest parent pom (Sub-task)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11139 DEA should expose the number of events it dealt with (Improvement)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12459 Redirect sonarcloud notifications to commits@apache.sling.org (Task)
  • SLING-12554 Distributed Event Admin: Update to parent 52 (Task)
• org.apache.sling:org.apache.sling.extensions.webconsolebranding 1.0.2 -> 1.0.4
  • SLING-1233 Add branding for the Apache Felix Web Console (New Feature)
  • SLING-1620 Logo too large (Improvement)
  • SLING-1621 Set title of the web console for Sling (Improvement)
  • SLING-2150 Update plugins to use the latest available versions (Task)
  • SLING-2187 create custom NOTICE.vm file and remove NOTICE from appended-resources in all projects (Improvement)
  • SLING-2480 Add config for maven-sling-plugin to m2e configuration (Improvement)
  • SLING-2696 Comply with project branding guidelines (Task)
  • SLING-4698 Set parent.relativePath to empty for all modules (Bug)
  • SLING-7162 Update SCM information in all POM files to reference Git (Sub-task)
  • SLING-7167 Adjust READMEs (Sub-task)
  • SLING-7213 Add a default .gitignore file to every module (Sub-task)
  • SLING-7214 Add the LICENSE file to every module (Sub-task)
  • SLING-7215 [nice-to-have] Add a CONTRIBUTING file to every module (Task)
  • SLING-7216 [nice-to-have] Add a CODE_OF_CONDUCT file to every module (Task)
  • SLING-7245 Validate pull requests using Jenkins (Improvement)
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11302 Update webconsole branding bundle to parent 47 (Sub-task)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12459 Redirect sonarcloud notifications to commits@apache.sling.org (Task)
  • SLING-12549 Web Console Branding: Update to parent 62 (Task)
• org.apache.sling:org.apache.sling.extensions.webconsolesecurityprovider 1.2.4 -> 1.2.8
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11503 WebconsoleSecurityProvider: Force authentication against JCR (Task)
  • SLING-11620 Synchronization issue in Webconsole Security Provider (Bug)
• org.apache.sling:org.apache.sling.hc.support 1.0.6 -> 1.0.10
  • SLING-9859 Avoid import of package of o.a.felix.hc.generalchecks.util (Improvement)
  • SLING-10676 Add a SECURITY.MD file to all our Git repositories (Improvement)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11141 Make compatible with org.apache.felix.healthcheck.generalchecks version 3.x (Bug)
  • SLING-11423 Update to Sling Bundle Parent 48 (Improvement)
  • SLING-11444 Deprecate the org.apache.sling.hc.support bundle (Improvement)
  • SLING-11445 Mark the ScriptedHealthCheck as deprecated (Sub-task)
  • SLING-11596 Mark the DefaultLoginsHealthCheck as deprecated (Sub-task)
  • SLING-11687 Update to Sling Bundle Parent 49 (Bug)
• org.apache.sling:org.apache.sling.i18n 2.5.18 -> 2.6.6
  • SLING-10912 ConcurrentJcrResourceBundleLoadingTest fails with newBundleReplacesOldBundleAfterReload (Bug)
  • SLING-10913 Update to Sling Bundle Parent 46 (Task)
  • SLING-11051 JavaDoc Badge Link Broken (Bug)
  • SLING-11709 Set up Jira autolinks to all Sling Github projects (Improvement)
  • SLING-11744 Allow configuration of include and exclude paths for bundles (Improvement)
  • SLING-12094 Use GitHub for the Maven scm.url value (Improvement)
  • SLING-12310 Fix test compatibility with java 17 (Improvement)
  • SLING-12315 A race condition leads to failing resource-bundle registration during deactivation (Bug)
  • SLING-12416 Update to Parent 60 (Improvement)
  • SLING-12455 Supporting locale having script tag