The Sling 13 release contains numerous improvements, such as official Java 21 support, and various performance improvements and updates.
Read on to see more details about the individual improvements. To find out more about running Sling, see our getting started page.
The Sling Starter and included modules are validated to work on Java 11, 17 and 21.
Note that for Java 17+ the org.apache.sling.commons.threads
will not clean up leftover ThreadLocal
instances unless the --add-opens java.base/java.lang=ALL-UNNAMED
is passed to the JVM. This fix is already applied to the official Sling Starter Docker image and we anticipate further fixes in this area.
Some of the Sling modules and their dependencies started to switch to Java 11 as minimum version, so Java 8 is no longer supported for the Sling Starter.
Apache Jackrabbit Oak 1.72.0 brings numerous performance improvements and new features that are now available in the Sling Starter.
A lot of modules have been migrated from org.json
to jakarta.json
, some modules are still using org.json
. Thus the Sling Starter includes both Apache Johnzon 1.x and 2.x for supporting both. It is expected that all modules will be migrated to jakarta.json
soon and Johnzon 1.x will be removed from the Sling Starter.
Sling Models comes with a couple of small improvements:
The Sling XSS module implementation switched from OWASP AntiSamy to the OWASP Java HTML Sanitizer library (SLING-7231).
The official Apache Sling Starter images pushed to DockerHub support the linux/arm64
architecture, in addition to the existing linux/amd64
one. This allows deploying the Sling Starter on a wider varierty of platforms.
All bundles have been updated to the latest versions.
New bundles added to Sling Starter:
com.fasterxml.jackson.dataformat:jackson-dataformat-xml
com.fasterxml.woodstox:woodstox-core
org.apache.commons:commons-text
org.apache.felix:org.apache.felix.http.inventoryprinter
org.apache.felix:org.apache.felix.http.webconsoleplugin
org.owasp.encoder:encoder
The following bundles are removed from the Sling Starter:
com.google.guava:guava
org.apache.jackrabbit:jackrabbit-jcr-rmi
A couple of bundles changed their artifact ID and are thus replaced with the latest version using the latest artifact ID (e.g. switch to Groovy 4).
Sling Starter ships with Apache Felix 7 which implements OSGi Core R8 fully. In addition it comes with Felix SCR 2.2 which implements Declarative Services 1.5 (part of OSGi Compendium R8).
Generated by launchpad-comparator: Lists all bundle changes since the last Starter release, including links to issues found in the commit messages of the affected Sling bundles.
Added:
com.fasterxml.jackson.dataformat
:jackson-dataformat-xml
2.18.2com.fasterxml.woodstox
:woodstox-core
7.1.0org.apache.commons
:commons-text
1.13.0org.apache.felix
:org.apache.felix.http.inventoryprinter
1.0.2org.apache.felix
:org.apache.felix.http.webconsoleplugin
1.2.0org.apache.groovy
:groovy
4.0.10org.apache.groovy
:groovy-ant
4.0.10org.apache.groovy
:groovy-astbuilder
4.0.10org.apache.groovy
:groovy-cli-picocli
4.0.10org.apache.groovy
:groovy-console
4.0.10org.apache.groovy
:groovy-datetime
4.0.10org.apache.groovy
:groovy-docgenerator
4.0.10org.apache.groovy
:groovy-groovydoc
4.0.10org.apache.groovy
:groovy-groovysh
4.0.10org.apache.groovy
:groovy-jmx
4.0.10org.apache.groovy
:groovy-json
4.0.10org.apache.groovy
:groovy-jsr223
4.0.10org.apache.groovy
:groovy-nio
4.0.10org.apache.groovy
:groovy-servlet
4.0.10org.apache.groovy
:groovy-sql
4.0.10org.apache.groovy
:groovy-swing
4.0.10org.apache.groovy
:groovy-templates
4.0.10org.apache.groovy
:groovy-test
4.0.10org.apache.groovy
:groovy-test-junit5
4.0.10org.apache.groovy
:groovy-testng
4.0.10org.apache.groovy
:groovy-xml
4.0.10org.apache.jackrabbit
:oak-shaded-guava
1.72.0org.codehaus.woodstox
:stax2-api
4.2.2org.osgi
:org.osgi.service.component
1.5.1org.osgi
:org.osgi.util.converter
1.0.9org.owasp.encoder
:encoder
1.3.1Removed:
com.google.guava
:guava
15.0org.apache.felix
:org.apache.felix.converter
1.0.18org.apache.jackrabbit
:jackrabbit-jcr-rmi
2.20.4org.codehaus.groovy
:groovy
3.0.9org.codehaus.groovy
:groovy-ant
3.0.9org.codehaus.groovy
:groovy-astbuilder
3.0.9org.codehaus.groovy
:groovy-cli-picocli
3.0.9org.codehaus.groovy
:groovy-console
3.0.9org.codehaus.groovy
:groovy-datetime
3.0.9org.codehaus.groovy
:groovy-docgenerator
3.0.9org.codehaus.groovy
:groovy-groovydoc
3.0.9org.codehaus.groovy
:groovy-groovysh
3.0.9org.codehaus.groovy
:groovy-jmx
3.0.9org.codehaus.groovy
:groovy-json
3.0.9org.codehaus.groovy
:groovy-jsr223
3.0.9org.codehaus.groovy
:groovy-macro
3.0.9org.codehaus.groovy
:groovy-nio
3.0.9org.codehaus.groovy
:groovy-servlet
3.0.9org.codehaus.groovy
:groovy-sql
3.0.9org.codehaus.groovy
:groovy-swing
3.0.9org.codehaus.groovy
:groovy-templates
3.0.9org.codehaus.groovy
:groovy-test
3.0.9org.codehaus.groovy
:groovy-test-junit5
3.0.9org.codehaus.groovy
:groovy-testng
3.0.9org.codehaus.groovy
:groovy-xml
3.0.9Changed:
com.composum.nodes
:composum-nodes-commons
4.0.1 -> 4.3.4com.composum.nodes
:composum-nodes-console
4.0.1 -> 4.3.4com.composum.nodes
:composum-nodes-jslibs
4.0.1 -> 4.3.4com.composum.nodes
:composum-nodes-pckgmgr
4.0.1 -> 4.3.4com.composum.nodes
:composum-nodes-usermgr
4.0.1 -> 4.3.4com.fasterxml.jackson.core
:jackson-annotations
2.13.1 -> 2.18.2com.fasterxml.jackson.core
:jackson-core
2.13.1 -> 2.18.2com.fasterxml.jackson.core
:jackson-databind
2.13.1 -> 2.18.2commons-codec
:commons-codec
1.15 -> 1.17.2commons-fileupload
:commons-fileupload
1.4 -> 1.5commons-io
:commons-io
2.11.0 -> 2.18.0org.apache.aries.spifly
:org.apache.aries.spifly.dynamic.bundle
1.3.4 -> 1.3.7org.apache.commons
:commons-lang3
3.12.0 -> 3.17.0org.apache.felix
:org.apache.felix.cm.json
1.0.6 -> 2.0.6org.apache.felix
:org.apache.felix.configadmin
1.9.22 -> 1.9.26org.apache.felix
:org.apache.felix.configadmin.plugin.interpolation
1.2.2 -> 1.2.8org.apache.felix
:org.apache.felix.eventadmin
1.6.2 -> 1.6.4org.apache.felix
:org.apache.felix.healthcheck.core
2.0.12 -> 2.2.0org.apache.felix
:org.apache.felix.healthcheck.generalchecks
2.0.14 -> 3.0.8org.apache.felix
:org.apache.felix.healthcheck.webconsoleplugin
2.0.2 -> 2.2.0org.apache.felix
:org.apache.felix.http.jetty
4.1.14 -> 5.1.26org.apache.felix
:org.apache.felix.http.servlet-api
1.1.4 -> 3.0.0org.apache.felix
:org.apache.felix.http.sslfilter
1.2.6 -> 2.0.2org.apache.felix
:org.apache.felix.inventory
1.1.0 -> 2.0.0org.apache.felix
:org.apache.felix.log
1.2.6 -> 1.3.0org.apache.felix
:org.apache.felix.scr
2.2.0 -> 2.2.12org.apache.felix
:org.apache.felix.webconsole
4.7.2 -> 5.0.8org.apache.felix
:org.apache.felix.webconsole.plugins.ds
2.1.0 -> 2.3.0org.apache.felix
:org.apache.felix.webconsole.plugins.event
1.1.8 -> 1.2.0org.apache.felix
:org.apache.felix.webconsole.plugins.memoryusage
1.0.10 -> 1.1.0org.apache.felix
:org.apache.felix.webconsole.plugins.obr
1.0.4 -> 1.1.0org.apache.felix
:org.apache.felix.webconsole.plugins.packageadmin
1.0.4 -> 1.1.0org.apache.httpcomponents
:httpclient-osgi
4.5.13 -> 4.5.14org.apache.httpcomponents
:httpcore-osgi
4.4.15 -> 4.4.16org.apache.jackrabbit
:jackrabbit-data
2.20.4 -> 2.22.0org.apache.jackrabbit
:jackrabbit-jcr-commons
2.20.4 -> 2.22.0org.apache.jackrabbit
:jackrabbit-spi
2.20.4 -> 2.22.0org.apache.jackrabbit
:jackrabbit-spi-commons
2.20.4 -> 2.22.0org.apache.jackrabbit
:jackrabbit-webdav
2.20.4 -> 2.22.0org.apache.jackrabbit
:oak-api
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-authorization-principalbased
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-blob
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-blob-plugins
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-commons
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-core
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-core-spi
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-jackrabbit-api
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-jcr
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-lucene
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-query-spi
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-security-spi
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-segment-tar
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-store-composite
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-store-document
1.42.0 -> 1.72.0org.apache.jackrabbit
:oak-store-spi
1.42.0 -> 1.72.0org.apache.jackrabbit.vault
:org.apache.jackrabbit.vault
3.6.0 -> 3.8.2org.apache.pdfbox
:fontbox
2.0.25 -> 2.0.32org.apache.pdfbox
:jempbox
1.8.16 -> 1.8.17org.apache.pdfbox
:pdfbox
2.0.25 -> 2.0.32org.apache.servicemix.bundles
:org.apache.servicemix.bundles.ognl
3.3.2_1 -> 3.3.4_1org.apache.servicemix.bundles
:org.apache.servicemix.bundles.rhino
1.7.14_1 -> 1.7.15_1org.apache.servicemix.bundles
:org.apache.servicemix.bundles.thymeleaf
3.0.14.RELEASE_1 -> 3.0.15.RELEASE_1org.apache.sling
:org.apache.sling.api
2.24.0 -> 2.27.6
org.apache.sling
:org.apache.sling.auth.core
1.5.6 -> 1.7.0
org.apache.sling
:org.apache.sling.commons.fsclassloader
1.0.14 -> 1.0.16
org.apache.sling
:org.apache.sling.commons.johnzon
1.2.14 -> 2.0.0
org.apache.sling
:org.apache.sling.commons.log
5.4.0 -> 5.5.0
org.apache.sling
:org.apache.sling.commons.log.webconsole
1.0.0 -> 1.0.2
org.apache.sling
:org.apache.sling.commons.logservice
1.1.0 -> 1.1.2
org.apache.sling
:org.apache.sling.commons.metrics
1.2.10 -> 1.2.14
org.apache.sling
:org.apache.sling.commons.mime
2.2.2 -> 2.3.0
org.apache.sling
:org.apache.sling.commons.scheduler
2.7.12 -> 2.7.14
org.apache.sling
:org.apache.sling.commons.threads
3.2.22 -> 3.3.0
org.apache.sling
:org.apache.sling.discovery.api
1.0.4 -> 1.0.6
org.apache.sling
:org.apache.sling.discovery.base
2.0.10 -> 2.0.14
org.apache.sling
:org.apache.sling.discovery.commons
1.0.24 -> 1.0.28
org.apache.sling
:org.apache.sling.discovery.oak
1.2.34 -> 1.2.46
org.apache.sling
:org.apache.sling.discovery.support
1.0.6 -> 1.0.8
org.apache.sling
:org.apache.sling.engine
2.8.0 -> 2.16.0
org.apache.sling
:org.apache.sling.event
4.3.0 -> 4.3.14
org.apache.sling
:org.apache.sling.event.dea
1.1.4 -> 1.1.6
org.apache.sling
:org.apache.sling.extensions.webconsolebranding
1.0.2 -> 1.0.4
org.apache.sling
:org.apache.sling.extensions.webconsolesecurityprovider
1.2.4 -> 1.2.8
org.apache.sling
:org.apache.sling.hc.support
1.0.6 -> 1.0.10
org.apache.sling
:org.apache.sling.i18n
2.5.18 -> 2.6.6
org.apache.sling
:org.apache.sling.installer.console
1.1.0 -> 1.1.2
org.apache.sling
:org.apache.sling.installer.core
3.12.0 -> 3.14.2
org.apache.sling
:org.apache.sling.installer.factory.configuration
1.4.2 -> 1.4.8
org.apache.sling
:org.apache.sling.installer.hc
2.0.2 -> 2.1.0
org.apache.sling
:org.apache.sling.jcr.api
2.4.0 -> 2.4.2
org.apache.sling
:org.apache.sling.jcr.base
3.1.10 -> 3.2.0
org.apache.sling
:org.apache.sling.jcr.contentloader
2.5.2 -> 2.6.0
org.apache.sling
:org.apache.sling.jcr.davex
1.3.10 -> 1.3.12
org.apache.sling
:org.apache.sling.jcr.jackrabbit.accessmanager
3.0.10 -> 4.0.2
org.apache.sling
:org.apache.sling.jcr.jackrabbit.usermanager
2.2.18 -> 2.2.30
org.apache.sling
:org.apache.sling.jcr.maintenance
1.0.2 -> 1.1.0
org.apache.sling
:org.apache.sling.jcr.oak.server
1.2.10 -> 1.4.2
org.apache.sling
:org.apache.sling.jcr.repoinit
1.1.36 -> 1.1.52
org.apache.sling
:org.apache.sling.jcr.resource
3.2.0 -> 3.3.2
org.apache.sling
:org.apache.sling.jcr.webdav
2.3.8 -> 2.3.10
org.apache.sling
:org.apache.sling.models.api
1.4.0 -> 1.5.4
org.apache.sling
:org.apache.sling.models.caconfig
1.0.0 -> 1.0.2
org.apache.sling
:org.apache.sling.models.impl
1.5.0 -> 1.7.8
org.apache.sling
:org.apache.sling.models.jacksonexporter
1.1.2 -> 1.1.4
org.apache.sling
:org.apache.sling.repoinit.parser
1.6.12 -> 1.9.0
org.apache.sling
:org.apache.sling.resourceresolver
1.8.4 -> 1.12.2
org.apache.sling
:org.apache.sling.scripting.api
2.2.0 -> 2.2.2
org.apache.sling
:org.apache.sling.scripting.core
2.4.2 -> 2.4.10
org.apache.sling
:org.apache.sling.scripting.jsp
2.5.4 -> 2.6.2
org.apache.sling
:org.apache.sling.scripting.jsp.taglib
2.4.0 -> 2.4.2
org.apache.sling
:org.apache.sling.scripting.sightly
1.4.16-1.4.0 -> 1.4.26-1.4.0
org.apache.sling
:org.apache.sling.scripting.sightly.js.provider
1.2.6 -> 1.2.10
org.apache.sling
:org.apache.sling.serviceuser.webconsole
1.0.2 -> 1.0.4
org.apache.sling
:org.apache.sling.serviceusermapper
1.5.4 -> 1.5.8
org.apache.sling
:org.apache.sling.servlets.get
2.1.44 -> 2.2.0
org.apache.sling
:org.apache.sling.servlets.post
2.5.0 -> 2.6.0
org.apache.sling
:org.apache.sling.servlets.resolver
2.9.2 -> 2.11.8
org.apache.sling
:org.apache.sling.starter.content
1.0.12 -> 1.0.16
org.apache.sling
:org.apache.sling.validation.api
1.0.0 -> 1.0.2
org.apache.sling
:org.apache.sling.xss
2.2.18 -> 2.4.2
org.apache.tika
:tika-core
1.28.1 -> 1.28.5org.apache.tika
:tika-parsers
1.28.1 -> 1.28.5org.attoparser
:attoparser
2.0.5.RELEASE -> 2.0.7.RELEASEorg.freemarker
:freemarker
2.3.31 -> 2.3.32org.javassist
:javassist
3.28.0-GA -> 3.30.2-GAorg.osgi
:org.osgi.util.promise
1.2.0 -> 1.3.0org.osgi
:org.osgi.util.pushstream
1.0.2 -> 1.1.0org.ow2.asm
:asm
9.2 -> 9.7.1org.ow2.asm
:asm-analysis
9.2 -> 9.7.1org.ow2.asm
:asm-commons
9.2 -> 9.7.1org.ow2.asm
:asm-tree
9.2 -> 9.7.1org.ow2.asm
:asm-util
9.2 -> 9.7.1