Date | | Status | Upgrade instructions
and notes | Versions | |
|---|
2025/11/04 | i2incommon/grouper:5.22.4 sha256:29edd0ddfa6e86337
a9ade41af05737238ceb189b
a0651680e59c14fb355a207 | LATEST STABLE GRP-6434 | None | OS: Rocky 9.6
Tomcat: 9.0.111
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.3 | 1 Jira
GRP-6437: Grouper image has issues with /home/tomcat and cacerts and /opt/tomcat etc not being owned or writable by root group |
2025/11/02 | i2incommon/grouper:5.22.3 sha256:7fd3263cfcaed6918
36ba7cd9e1bc59f9f0c96e03
6581a88cd254dcd4378a37c | STABLE GRP-6434
GRP-6437 | None | OS: Rocky 9.6
Tomcat: 9.0.111
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.3 | 8 Jiras
Group summary screen tries to display all groups if there is a sql cache dependency
There can be whitespace at top of group panel |
2025/10/31 | i2incommon/grouper:5.22.1 sha256:50b4c510e2ace3233
0757d3cad58d74c1e8b45f66
8109564fd459def559515a2 | NOT STABLE | None | OS: Rocky 9.6
Tomcat: 9.0.111
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.1 | 6 Jiras
GRP-6423: security issue with tomcat, upgrade to v9.0.111
Scim should allow 200 on group create
ABAC member should not include deleted or unresolvable subjects
|
2025/10/28 | i2incommon/grouper:5.22.0 sha256:928f124b5bbc49e3b
af8713caaae241f8d5849679
f56b22c8a86f636a5676dc5 | NOT STABLE GRP-6423 | 3 from 5.21.3 | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.0 | 26 Jiras
GRP-6401: error in oracle with group more information screen
Improve performance of main Grouper screen, stem list, group screen
Upgrade commons-fileupload (security issue) and commons-io
Make a customizable banner in the Grouper UI
Option to have group default screen be members instead of summary
Allow customization of the Group screen in the UI
Web service to sync a data provider against a list of given subjects
Subject source UI doesn't show disabled sources
When someone loses wheel group some caching is wrong for a few minutes
Data provider job should end in WARNING if there are duplicate keys in the source data
Provisioning metadata on folder only is not available in groups
Add userName attribute for adobe users
Add ability to download and upload files for box
Scim should be able to search users by email |
2025/10/13 | i2incommon/grouper:5.21.3 sha256:9b41e8f660e9e1603
3d9c67889021e299a09a21c
29d0e078a7bdd12248e2be3a | NOT STABLE GRP-6401
GRP-6423 | None | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.21.3 | 4 Jiras
GRP-6381: container moved file to reset permissions
GRP-6380: oracle query problem with more information on group summary |
2025/10/07 | i2incommon/grouper:5.21.2 sha256:6246c4eb4cc41f0fc3
445928cc89e64667f9aab8c
cc1056825153ec45eae5894 | NOT STABLE GRP-6381
GRP-6380
GRP-6423
| None | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.21.2 | 5 Jiras
Group summary screen bug fixes and enhancements |
2025/10/06 | i2incommon/grouper:5.21.1 sha256:0e15d2915da514760
24f9e6b3e27ec189364b69ca
6380736c5b6862089dacc66 | NOT STABLE GRP-6375
GRP-6423 | None | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.21.1 | 21 Jiras
Group summary screen bug fixes and enhancements
GRP-6354: ui group summary screen has an exception for mysql/oracle |
2025/10/03 | i2incommon/grouper:5.21.0 sha256:4b1ab2c04aa744e31
400915dc4c76b2f81945509
57856aae1e360bd78ab9ccd8 | NOT STABLE GRP-6354
GRP-6423 | 3 from 5.20.5 | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.21.0 | 21 Jiras
Rewrite container installer as a script
- Remove grouper installer
Group summary screen
Fix external auth build (grouper-ext-auth, pac4j)
Analyze logic of abac not correct in some circumstances
Data provider fixes
Abac incremental batch issue
Batch adobe provisioning calls to improve performance
- Add userName attribute for adobe users
Adding SOAP to v5 not working since commons-httpclient was removed
Make snowflake database access faster
Add ability to download and upload files for box |
2025/08/24 | i2incommon/grouper:5.20.5 sha256:adf062a361bcdfe7b
745e2e2d3c3b0e3119e3dd9
1390afc523f6e27e45bbe411 | STABLE GRP-6423
| 1 from 5.20.2 | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.20.5 | 2 Jiras Add hook to validate admin on loader changes
GRP-6310: Failsafe is hitting for sql syncs especially incremental
|
2025/08/17 | i2incommon/grouper:5.20.2 sha256:15fad09ed8b0142b5
0106f62c2b59780fec552fb3
6c45eef10e512de19277a56 | NOT STABLE GRP-6310
GRP-6423
| 1 from 5.20.0 | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.20.2 | 20 Jiras
Batch issue with incremental data provider
Upgrade task to run sql cache full sync
Data provider performance issue with continuous lower case columns
Thread deadlock issue with config cache
Do not allow abac assignment = , only allow comparison ==
Fix xml export/import
GRP-6293: some form submits do not work like search and trace membership
Add minimum number of rows to sql sync on full sync
Commons-lang3 upgrade needed for vfs2 (sftp)
Allow more data fields in a data query (current max was 30) |
2025/08/09 | i2incommon/grouper:5.20.0 sha256:fc18ad71d52640ed46
cc46dcc0dadb8ac94be6b7a
44d0c36b21603ba891a3355 | NOT STABLE GRP-6293
GRP-6423 | 1 from 5.19.2 | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.20.0 | 13 Jiras
Upgrade tomcat9 to 9.0.108 (security update)
Option to run sql cache full sync in minimal mode without daemon
Move DDL for sql cache membership sync dependencies from script files to old upgrade task
OIDC improvements
Disabled subject source still resolving
Log target commands always not working for SQL |
2025/08/02 | i2incommon/grouper:5.19.2 sha256:daab050dde2741
9729b00ee13f3a291e6e7c602
9df044b441edd221c61f20673 | STABLE GRP-6423 | None | OS: Rocky 9.6
Tomcat: 9.0.105
Java Corretto: 17.0.16.8.1
Grouper API: 5.19.2 | 4 Jiras
Allow multiple subject sources in data provider for abac
GRP-6262: error in external systems and subject provisioning jsp not compile |
2025/07/31 | i2incommon/grouper:5.19.1 sha256:ee42765185eb320de
180ea6acb86487b1bf6c73be
33d515798d877254d1729e2 | NOT STABLE GRP-6262
GRP-6423 | 2 from 5.18.3 | OS: Rocky 9.6
Tomcat: 9.0.105
Java Corretto: 17.0.16.8.1
Grouper API: 5.19.1 | 31 Jiras
Data field subject source
UI hyperlinked things should work when opening in new tabs
Rule improvements
AI enhancements
v5 should not start if the membership cache is not mostly populated
Support security analyst role in duo admin role provisioning
SQL sync from query has error in getting max timestamp
OWASP_CSRFTOKEN header has underscore, not passed along by nginx
SQL sync from query has error in getting max timestamp |
2025/06/14 | i2incommon/grouper:5.18.3 sha256:af78170e92f9138e5e
6e766c7e6fe3273123bf72bf
045c3eb31b097c44a4a45d | STABLE GRP-6423 | None | OS: Rocky 9.6
Tomcat: 9.0.105
Java Corretto: 17.0.15.6.1
Grouper API: 5.18.3 | 17 Jiras
Azure without selecting all entities or groups at once will fail
Sql dependency views fail on oracle
Allow loader jobs to be exported and imported
Midpoint provisioner with custom attribute throws error when deleting the custom attribute
GRP-6200, GRP-6199 security issues, rocky upgrade to 9.6
Use threads with JEXL Incremental Sync
SQL provisioner membershipObjects should support row update
Allow GSH export to work with -forceLegacyGsh flag on import (to speed it up)
Rules should be invalid and not cause errors when group or stem does not exist
Errors in incremental update for LDAP entityAttributes not retried
Rule that adds new groups to another group should have an option to specify a regex pattern |
2025/05/27 | i2incommon/grouper:5.18.1 sha256:f401fcdbe4e7affc907
ddd4449b267c4de4381d575
6d2b3479c6b58e010ad6c4 | EXPIRED GRP-6200
GRP-6199
GRP-6186
| None | OS: Rocky 9.5
Tomcat: 9.0.105
Java Corretto: 17.0.15.6.1
Grouper API: 5.18.1 | 6 Jiras
Tomcat security issues: CVE-2025-31651, CVE-2025-31650
Random numbers after file name in GSH templates consuming files
When SQL provisioning membership objects with a last updated field, job wants to select timestamp from group and entity fields
Change default of OTHER_JOB_grouperLoaderJexlScriptFullSync to run daily
Remove commons-httpclient 3.1
GROUPER_PLAYWRIGHT_INSTALL_OS_LIBS does not work |
2025/05/21 | i2incommon/grouper:5.18.0 sha256:145e651b56af28779
69311ba5df4db093cafaf45e
b31ee4bc8c3505f9d37688d | EXPIRED Tomcat security advisory GRP-6200
GRP-6199
GRP-6186
| 3 from v5.17.2 | OS: Rocky 9.5
Tomcat: 9.0.102
Java Corretto: 17.0.15.6.1
Grouper API: 5.18.0 | 41 Jiras
Incremental abac
GrouperHttpClient trust all doesn't work with pooled connections
Allow GSH template to have an option to have a filename in the container instead of textarea
GPT training file for GSH templates
If the stemName sent to getGroups WS does not exist, throw error
Add an option in the web service external system to treat 429 as error
Add an option in a web service external system to delay ms after each call
Add isNotified attribute for groups that would be used while inserting memberships into TeamDynamix
Cannot delete group in gsh template and redirect to another group
Auto-create and translate entra id visibility on groups
Update provisioning DAO to use cache tables
Upgrade jsch to support openssh private keys
GSH template provisioner
For Azure/Entra provisioner, support directory extension attributes
Transactions for data provider loading
Support subheaders in template v2 dropdowns
Attributes in group view/edit shows integer as floating point |
2025/04/5 | i2incommon/grouper:5.17.2 sha256:6dc1b8636cf5f03c4
3a310954d7f4884ee8b0ab2
eb693ecced35ca0f44393888 | EXPIRED Tomcat security advisory GRP-6200, GRP-6199 | None | OS: Rocky 9.5
Tomcat: 9.0.102
Java Corretto: 17.0.14.7.1
Grouper API: 5.17.2 | 24 Jiras
Group renames in entity attribute provisioning
Many membership cache fixes / improvments
Provisioning roles errored with index out of range reading data
Allow a query in the from portion of a sql sync job (and allow UUID types)
Scim should enable users even if not deleting users (with active flag)
Can have multiple UI OIDC registrations / protections
Add <, <=, >, >= operators to jexl scripts |
2025/03/17 | i2incommon/grouper:5.17.1 sha256:6386b225335682c3
6297efb4fc8f05636e28ad58
1bb55371119594e7842b838b | EXPIRED Tomcat security advisory GRP-6200, GRP-6199 | None | OS: Rocky 9.5
Tomcat: 9.0.102
Java Corretto: 17.0.14.7.1
Grouper API: 5.17.1 | 8 Jiras
Upgrade tomcat to 9.0.102 which addresses some security vulnerabilities
Upgrade shib sp base image for saml security fixes
SCIM Patch, value null, set op to remove instead of replace
Cannot change factors for existing composites
Data field and row history refactor
Non admins should be able to edit loaders for abac |
2025/03/02 | i2incommon/grouper:5.17.0 sha256:35282c452c39397b
8a5191c8dd79cd76ff4705f7
6ec5eee3eff566b88d327ed9 | EXPIRED GRP-6060 Tomcat security advisory GRP-6200, GRP-6199 | 2 from v5.16.0 | OS: Rocky 9.5
Tomcat: 9.0.98
Java Corretto: 17.0.14.7.1
Grouper API: 5.17.0 | 24 Jiras
Oauth WS improvements
Filter groups from okta for group type OKTA_GROUP
Batch up abac subject lookups and member object inserts
ABAC data provider bugs fixed
Show data field/row assignments on subject screen |
2025/02/03 | i2incommon/grouper:5.16.0 sha256:d2b8ba20af2b92f9b
98e6689d22090bf6ce4f576
bca7c48f256791660430f29c | EXPIRED GRP-6060 Tomcat security advisory | 1 from v5.15.4 | OS: Rocky 9.5
Tomcat: 9.0.98
Java Corretto: 17.0.14.7.1
Grouper API: 5.16.0 | 16 Jiras
Scim provisioning membership strategies
DDL for data field history
Batch scim insert memberships and retry each if batch fails
Provisioner with canRetrieveAllData query returns duplicate entities from other provisioners
Oracle and MySQL install failures |
2025/01/23 | i2incommon/grouper:5.15.4 sha256:1eb34c45ded6e502
21f47a3b976f1c491b66e40c
5511d3c07f45183ea84375f5 | EXPIRED GRP-6060 Tomcat security advisory | None | OS: Rocky 9.5
Tomcat: 9.0.98
Java Corretto: 17.0.14.7.1
Grouper API: 5.15.4 | 10 Jiras
Recent member of abac
Fixes in rules UI
Optimize data sync - Use batch inserts/queries/deletes (abac performance improvement)
Scim provisioner cannot select all memberships
Recursion error with getAttributeDelegate
Provisioning error handling types should show code on label
NPE in provisioner from GrouperProvisioningCompare.shouldSkipMembershipAttributeInsertDueToUnresolvableSubject |
2025/01/08 | i2incommon/grouper:5.15.3 sha256:b7912d964690c9feb
2d4073fd3b8a78a611ab885
2f52631c33e82f114b52b2bd | EXPIRED GRP-5956 GRP-5619 GRP-6060 | None | OS: Rocky 9.5
Tomcat: 9.0.98
Java Corretto: 17.0.13.11.1
Grouper API: 5.15.3 | 7 Jiras
Box retrieve by id sometimes throws error
If release has gaps in upgrade steps, should not warn
Do not set grouper loader log subjobs to error
Performance issues with incremental provisioning
Okta provisioner should be able to search and filter by arbitrary okta user attributes |
2025/01/07 | i2incommon/grouper:5.15.2 sha256:56c547e46e6d439e4
d43fa784b41ae045a4a95266
5a23f3ddbdc9f7419364650 | NOT STABLE
| None | OS: Rocky 9.5
Tomcat: 9.0.98
Java Corretto: 17.0.13.11.1
Grouper API: 5.15.2 | 4 Jiras
Incremental provisioners have poor performance
Adobe provisioner cannot create user |
2025/01/06 | i2incommon/grouper:5.15.1 sha256:2a69ecd137cf44e6c
fba1c89efb1c8f40a6501fea5
88cfb2152d61db5d74c932 | NOT STABLE | None | OS: Rocky 9.5
Tomcat: 9.0.98
Java Corretto: 17.0.13.11.1
Grouper API: 5.15.1 | 5 Jiras
Add ability to not fail startup if upgrade tasks fail
Grouper sql scripts intended to run against other database only run against the grouper database
Error about http client: Caused by: java.lang.NoClassDefFoundError: org/apache/commons/httpclient/HttpMethod |
2025/01/04 | i2incommon/grouper:5.15.0 sha256:a115476d7fa71b383
b3acbacae4a65fcadf48981f
8ac206ba608f8a64046ed75 | NOT STABLE GRP-5909 | 4 from v5.14.0 | OS: Rocky 9.5
Tomcat: 9.0.98
Java Corretto: 17.0.13.11.1
Grouper API: 5.15.0 | 46 Jiras
Upgrade tomcat, ldaptive, many 3rd party libraries with security vulnerabilities
Okta provisioner
Scim memberships retrieved by user or group
Subject not found errors with data provider sync
Sql cache history incremental
Google provisioner - add option for whoCanModerateMembers
Allow Azure provisioner to manage the SubscribeMembersToCalendarEventsDisabled attribute
Allow abac row subscripts to use = instead of ==
Grouper WS should find groups by attribute framework value |
2024/11/26 | i2incommon/grouper:5.14.0 sha256:ccc09f28da0876257
fa882386125627dc7dee552
37289cbb620e351ae51f48f6 | EXPIRED Tomcat security advisory | 2 from v5.13.5 | OS: Rocky 9.5
Tomcat: 9.0.87
Java Corretto: 17.0.13.11.1
Grouper API: 5.14.0 | 45 Jiras
Improve upgrade tasks in grouper
Adobe provisioning improvements
Membership cache improvements
Long query loaders do not work with diagnostics
Allow config for default page size of daemon screen
GrouperHttpClient should handle UTF bodies
Adjust content type and accept for scim provisioner
Add option for qualified and unqualified name in scim
ABAC only should return non-groups
Only query policy groups in provisioning if needed and directly, performance improvement
Cannot delete jexl loaded population script setting
|
2024/10/17 | i2incommon/grouper:5.13.5 sha256:c6887830e246008d
69228c31c33ac9f265c945c
4734db272fabf55897b5fea34 | EXPIRED GRP-5799 Tomcat security advisory | None | OS: Rocky 9.4
Tomcat: 9.0.87
Java Corretto: 17.0.13.11.1
Grouper API: 5.13.5 | 16 Jiras
Scim is not updating name properties correctly
Provisioning metadata of type "set" does not translate correctly
Azure provisioning error when dealing with owners
Add a way to see what the provisioner will do exactly in readonly mode
Add setting and global default to not run logic in full or incremental daemon
Global provisioning readonly setting to default all provisioners to readonly
Provisioning object log improvements |
2024/10/17 | i2incommon/grouper:5.13.3 sha256:08bfb3b3f40085f72
b9c4b2a34b6c6582a291158
35e2b6f263178121d3b0396d | EXPIRED Tomcat security advisory | None | OS: Rocky 9.4
Tomcat: 9.0.87
Java Corretto: 17.0.13.11.1
Grouper API: 5.13.3 | 3 Jiras
Refactor entity attributes provisioning
Entity attribute provisioner with new provisionable group does not create member and membership sync objects in incremental run for existing memberships |
2024/10/15 | i2incommon/grouper:5.13.2 sha256:a10dc0f5e3c134ef9
64f44239ed83b7cb5cf6f980
0334ac796a4298b2e8811fb | NOT STABLE GRP-5753 | None | OS: Rocky 9.4
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 5.13.2 | 1 Jira
Entity attribute provisioner full run will delete and add memberships flapping back and forth |
2024/10/14 | i2incommon/grouper:5.13.1 sha256:54ec2225415822470
df8d04505f7f7350e38433d6
4744b3a9d346edbdc58dbea | NOT STABLE GRP-5751 | None | OS: Rocky 9.4
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 5.13.1 | 6 Jiras
Run SqlCacheFullSyncDaemon for an extra hour to process groups without recent changes
Remove old sqlCacheGroup attributes (sqlCacheableGroupMarkerDef and sqlCacheableGroupDef)
Entity attributes deleteValueIfManagedByGrouper does not delete if attribute not assigned to anything in grouper (empty group)
Date picker format is mm/dd/yyyy which is rejected
Notification job fails when subject source is set |
2024/10/07 | i2incommon/grouper:5.13.0 sha256:f777bde5d89a8c15b
d360585dd896328f8da2bdb
c780b9d6b7247c5d4e2f7dac | EXPIRED GRP-5726 | 2 from v5.12.2 | OS: Rocky 9.4
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 5.13.0 | 25 Jiras
GRP-5719: full provisioner will insert recent memberships which shouldnt be there
Populate sql cache group and membership tables for all groups, stems, and attributeDefs
Remove unecessary provisioning errors
OIDC improvements
Add duo as option for custom UI
Allow custom ui to redirect to a url, without clicking a button
MidPoint provisioner incremental fails on entity attribute validation |
2024/09/13 | i2incommon/grouper:5.12.2 sha256:84ddfad1861f4f8c76
5a446e0cd239a536db2f8d
d0bcc7c313f8e37970166f14 | EXPIRED GRP-5719 | 3 from v5.12.0 | OS: Rocky 9.4
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 5.12.3 | 25 Jiras
Playwright enhancements
Fix Swagger in WS
NPE trying to view "Unresolvable subjects" in the UI.
Add ABAC like and regex |
2024/08/26 | i2incommon/grouper:5.12.0 sha256:d324736054fb448b
ef9499e5550c38264038aad
a90cd81be7d721b1faf26f2db | EXPIRED GRP-5693 GRP-5656 GRP-5719 | 2 from v5.11.3 | OS: Rocky 9.4
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 5.12.0
| 35 Jiras
Upgrade Grouper from OS Rocky version 8 to Rocky version 9
Recent memberships not working (for new installs?)
Daemon screen improvements
LDAP to SQL sync improvements
Manage azure owners from provisioner
Load azure users from provisioner to table
In loaders, allow sql query to be > 4000 char
Prevent composite circular references
Custom UI improvements
Add referral support in ldaptive |
2024/08/06 | i2incommon/grouper:5.11.3 sha256:767008bce8fbd6778
cc64abb1d2f337a0bd7ae05d
de8dab9fc9a31d38b992ded | EXPIRED Rocky 8 unsupported | None from v5.11.2 | Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 5.11.3 | 31 Jiras
Date Picker for start/end dates for memberships (when editing memberships)
Sql/midpoint provisioner fixes including: has problems finding data will use the wrong datatype
Custom UI fixes
Provisioning - deleteGroupsIfUnmarkedProvisionable=false doesn't handle deleted groups in Grouper
Scim should put paging on lookup queries
Pac4j SAML xxxResource properties not working for "file:..." urls
"Add or remove members" page: Change "Replace existing members" and "Remove members" from checkbox to radio selection. |
2024/07/16 | i2incommon/grouper:5.11.2 sha256:de1d10568a20cb799
b3c8aa603a227cbe7e25600
119ae3a6bd0b023ac768ae62
| EXPIRED Rocky 8 unsupported | 1 from v5.11.0 | Tomcat: 9.0.87
Java Corretto: 17.0.11.9.1
Grouper API: 5.11.1 | 20 Jiras
Allow scim to read memberships from target
Grouper provisionable fixes
Google provisioner option to map privileges to manager/owner roles
Add "Provision now" buttons to groups, entities, and memberships
Add externalId to groups in scim provisioning |
2024/06/27 | i2incommon/grouper:5.11.0 sha256:1c55fb3f50f974393
873e835ef1390d91c5ddcdf6
7195e2691e9c1c5d2601e42 | EXPIRED Rocky 8 unsupported | 3 from v5.10.1 | Tomcat: 9.0.87
Java Corretto: 17.0.11.9.1
Grouper API: 5.11.0 | 32 Jiras
Add id token to grouper ui oidc authn
Scim loader to load entities back to grouper for reporting or provisioning
Allow custom scim attributes in provisioning
Github manage multiple organizations at once
Various scim fixes: command logging, enabled attribute, schemas, etc
Add rules for invalid permission definition or minimum group members
Use the container version and not the maven version in various places in grouper |
2024/06/25 | i2incommon/grouper:5.10.2 sha256:5af82298cc998337
cdd0eec8a522fc2b58ff895a
c91b9212cd1274ace67fed5d | EXPIRED Rocky 8 unsupported | 1 from v5.10.1 | Tomcat: 9.0.87
Java Corretto: 17.0.11.9.1
Grouper API: 5.10.1 | 1 Jira
Web Services LDAP authentication security vulnerability |
2024/05/29 | i2incommon/grouper:5.10.1 sha256:fdedb75dc3dd8a577
db1b9d6ae367e99ccf18db3
d541ac2b5b01b27af3aef1ee | EXPIRED Rocky 8 unsupported | None | Tomcat: 9.0.87
Java Corretto: 17.0.11.9.1
Grouper API: 5.10.1 | 2 Jiras Error on unique last modifier index on midpoint provisioner
Midpoint error on provisioning performance enhancement |
2024/05/28 | i2incommon/grouper:5.10.0 sha256:020c9eee0e1696b57
7c2bbd425817ff34ac08f003
648d5e6a02a3db6d681733f | NOT STABLE midpoint provisioning errors GRP-5471 GRP-5472 Rocky 8 unsupported | 1 from v5.9.0 | Tomcat: 9.0.87
Java Corretto: 17.0.11.9.1
Grouper API: 5.10.0 | 37 Jiras
Improve memory usage for provisioning
Visualization with member criteria
Improve security of 'Grouper Rules' in the UI
Improvements in using EL in provisioning config
GrouperHttpClient doesn't release resources when doing an HTTP DELETE
Add abac row array value any in list
Allow null values in abac expressions
Add inherited privilege finders
Upgrade tomcat to 9.0.87 since 8.5 is EOL AttestationGroupSave.assignMarkAsAttested() does not work
Cannot edit metadata in provisioning
Add expiration time to ldap pool config in external system
Create swagger docs for ws
Gsh template logged in and act as user should audit correctly
Provisioning entities not filtering objectClass when Select All Entities is false (and occasionally when it's true)
Provisioner retrieve AD objectSid and objectGuid as string instead of binary |
| 2024/03/19 | i2incommon/grouper:5.9.0 sha256:3b58de6e37117cd3
6c3feac3f8b2b4457ffb0480
28a0f7c3df66cae74331a078 | EXPIRED Rocky 8 unsupported | 1 from v5.8.5 | Tomcat: 8.5.99
Java Corretto: 17.0.10.8.1
Grouper API: 5.9.0 | 10 Jiras Tomcat security advisory CVE-2024-23672
Grouper session gets lost if not assigned to a variable
Add option in container to GROUPER_LOG_TO_STDERR and all logs to go stderr (running tomcat single process)
Fix daemon jobs ui last run status for CHANGE_LOG_changeLogTempToChangeLog and CHANGE_LOG_consumer_compositeMemberships
Default self signed tomcat cert in v5 should be /opt/container_files/certs/client/localhost.pem |
| 2024/03/10 | i2incommon/grouper:5.8.5 sha256:38fa9ded3eddabc75
8d05b0ecbc4f677980f0766
d5f1da90e8dd2c1ff6b87763 | EXPIRED Tomcat security advisory Rocky 8 unsupported
| 2 from v5.8.2 | Tomcat: 8.5.90
Java Corretto: 17.0.10.8.1
Grouper API: 5.8.5 | 11 Jiras Memberships created in target without Grouper will not get deleted
No open grouper session right after creating one
GrouperLoader.runOnceByJobName should run long running jobs once only if running without daemon
Warning message for disabled dates too soon to work
ABAC fixes |
| 2024/03/02 | i2incommon/grouper:5.8.2 sha256:49c47ef7ef7698b24
ef6eec5dbbcfda7e91ea2d35
d8a94e5a927e944c992bb65 | EXPIRED GRP-5350
GRP-5347 Tomcat security advisory | 3 from v5.8.1 | Tomcat: 8.5.90
Java Corretto: 17.0.10.8.1
Grouper API: 5.8.2 | 8 Jiras Clean logs on 4.11.0 is not working
Cannot delete groups (or maybe other things) as a wheel group member
Creating log pipes twice can fail
Validate rules periodically manually
Stop chmoding cacerts when not able to (openshift)
Daemon logs show sub jobs by default for some jobs
Add stop daemon calls to composite memberships change log consumer |
| 2024/02/28 | i2incommon/grouper:5.8.1 sha256:2e2e02abea72177ff0
95af0c061b3c6a36ac35c47
d8a9ae4b8814a9ad4a4cc46 | UNSTABLE GRP-5337
GRP-5335 Tomcat security advisory | 3 from v5.7.1 | Tomcat: 8.5.90
Java Corretto: 17.0.10.8.1
Grouper API: 5.8.1 | 30 Jiras Stopping daemon jobs
Fix memory issue with provisioner
Composite changes - move membership inserts and deletes to daemon
SCIM fixes (can manage "active" status instead of delete, adjust scim emails, allow group updates)
Can provision group roles and user roles in real time and incremental |
| 2024/01/09 | i2incommon/grouper:5.7.1 sha256:314a6bcdf0dc66048
3b016db285b1fb5e00875a97
564b947c00e9d76a90d1956 | EXPIRED Tomcat security advisory | None from 5.7.0 | Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 5.7.1 | 21 Jiras TeamDynamix provisioner fixes
GSH template dynamic forms enhancements
Add progress bar on visualization (with no timeouts)
Json recursion error on memory bean
Subjob error in scheduler check daemon cant find log map |
| 2024/01/01 | i2incommon/grouper:5.7.0 sha256:396eb7b3c5f463dc
a437329c07c1317adf6ecffdc
2dc51cedce3b0583bbc0184 | EXPIRED GRP-5249
GRP-5240 Tomcat security advisory | 3 from v5.6.0 | Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 5.7.0 | 53 Jiras Data field dictionary
Add rewrite valve for tomcat so / redirects to /grouper (or whatever the UI context is)
Add tomcat remote IP valve env vars for running v5 behind a load balancer
Add https ssl tls for tomcat when running without apache
Daemon jobs will log ad error out if JVM dies (and other daemon enhancements)
Fixed JSON marshaling issues
GSH template dynamic inputs
GSH template WS enhancements
GSH templates report error line number
Daemon status threshold automatically adjusts based on schedule
Duo throttling logic should always throttle if http response code is 429...
Http client network keep alive connection cleanup
Box provisioner enhancements |
| 2023/11/26 | i2incommon/grouper:5.6.0 sha256:a3fdda2be8325b80a
508a7c2f4997221e89b7723
a66ff774d7d52ef04410394f | EXPIRED Tomcat security advisory | 7 from v5.4.0 | Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 5.6.0 | 35 Jiras Update ldaptive to version 2
Add trust anchors to java cacerts
Add option to run tomcat as another user
Add basic auth to scim provisioning framework
Add active flag as attribute for scim users
Attributes in group view/edit only handles all value types
Group updaters should be able to only attest/clear attestation on groups
UI: webpage titles for back button and browser tab
Ldap loader LDAP_GROUPS_FROM_ATTRIBUTES should allow specifying parent stem
Upgrade various libraries for security and performance |
| 2023/11/04 | i2incommon/grouper:5.5.0 sha256:f91ab1c84544184e6
236412d2a565f24db66995a
9d392e54db53b4cfb58f87ca | EXPIRED Tomcat security advisory | 1 from v5.4.0 | Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 5.5.0 | 27 Jiras Authentication bypass security issue
Provisioner External entity attributes not working for incrementals
Instrumentation cleanup
SFTP improvements
Provisioning improvements
Simplified UI for GSH templates
Default run group or folder does not show for gsh templates
Sql/ldap syncs to mysql do not work
Exceptions in provisioning should replace null characters before storing to the database
In provisioning, if changing entities, if a group is deleted (or recalc'ed), entities could be deprovisioned during incremental
In provisioning, if not retrieving all groups at once in full sync, group attribute updates not happening (e.g. description)
|
| 2023/10/05 | i2incommon/grouper:5.4.0 sha256:b1ca8f3a1d4265a30
59e7ee2323667af93c5f6f55
90578a6a510753c2a45846e | EXPIRED Rocky 8 unsupported | 1 from v5.3.4 Also these | Tomcat: 8.5.90
Java Corretto: 17.0.8.8.1
Grouper API: 5.4.0 | 81 Jiras Note: only sysadmins can edit jexl scripts on ABAC groups |
| 2023/08/28 | i2incommon/grouper:5.3.4 sha256: | EXPIRED Rocky 8 unsupported
| None from 5.3.3 | Tomcat: 8.5.90
Java Corretto: 17.0.8.8.1
Grouper API: 5.3.3 | 20 Jiras |
| 2023/08/21 | i2incommon/grouper:5.3.3 sha256:d4d5e1d952e37ebc0
89b2dd5017ea8bb682ef7996
8413b49cfbc0f1c856800d3 | EXPIRED Rocky 8 unsupported
| None from 5.2.0 | Tomcat: 8.5.90
Java Corretto: 17.0.8.7.1
Grouper API: 5.3.3 |
|
| 2023/06/21 | i2incommon/grouper:5.2.0 sha256:6c6ea5d0e51bff31f8
a9882b5edebc7fd2186ea64e
e5f4362f5c7262ccd20546 | EXPIRED Rocky 8 unsupported
| 2 from v5.1.0 | Tomcat: 8.5.90
Java Corretto: 17.0.7
Grouper API: 5.2.0 | 20 Jiras All fixes in 4.4.0
Add internal id to pit tables - groups/members/fields
Dont validate abac scripts to UI works, will add back later
Fix breadcrumbs for entity data fields
Fix issue with abac queries where the dictionary internal ids are not right |
| 2023/06/21 | i2incommon/grouper:5.1.0 sha256:2e429e4b8f57fab63b
38905d87aaddf7c717f6beb71
8d57dbb6c4110a0c54e06 | EXPIRED
| 1 from v5.0.3 | Tomcat: 8.5.87
Java Corretto: 17.0.7 | SQL cache for groups and memberships
ABAC attribute queries
ABAC group and attribute queries translate securely into SQL |
| 2023/03/28 | i2incommon/grouper:5.0.3 sha256: 68b751e3a24394324
3c010c43944b433e9eafe133
ca54cdcaef0d7df205ed5ad | EXPIRED
| 5 from v4.1.1 | Tomcat: 8.5.87
Java Corretto: 17.0.6 | Remove Apache
Remove Shib SP
Remove SOAP WS
Remove supervisor
Remove log pipes
ABAC POC |