[ANNOUNCE] Apache Jackrabbit Oak 1.22.21 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.22.21. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.22.21

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.22.21 is a patch release that contains fixes and
improvements over Oak 1.22. Jackrabbit Oak 1.22.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.


Changes in Oak 1.22.21
--

Technical task

[OAK-6769] - Convert oak-search-mt to OSGi R7 annotations
[OAK-10708] - DocumentNodeStore: error-log failures to update the 
journal

[OAK-10709] - Deprecate oak-search-mt
[OAK-10786] - oak-lucene: use copy of lucene-core 4.7.2 source code
[OAK-10787] - oak-lucene: backport fix for lucene-core vulnerability

Bug

[OAK-10544] - oak-jcr: remapping a namespace prefix leaves 
namespace resolver in broken state
[OAK-10611] - o.a.j.o.namepath.JcrPathParser does not handle 
invalid characters correctly
[OAK-10621] - o.a.j.o.namepath.JcrPathParser does not accept 
indexed expanded names
[OAK-10624] - o.a.j.o.namepath.JcrPathParser does not accept some 
valid local names containing '{' or '}'
[OAK-10719] - oak-lucene uses Lucene version that can throw a 
StackOverflowException
[OAK-10767] - oak-it-osgi unnecessarily deploys commons-collections 
to the test environment

[OAK-10775] - LeaseUpdateSocketTimeoutIT still wants a mongo:4.2 image
[OAK-10876] - Oak 1.22 does not compile with JDK 11 anymore
[OAK-10985] - Index definution with a property rule having 
valueExcludedPrefixes not getting considered for like condition on that 
property


Improvement

[OAK-10783] - VersionableEditor: misleading WARN message when 
creating version history
[OAK-10810] - Remove redundant call to StringCache.get in 
Path.fromString()


Task

[OAK-8993] - oak-auth-external and oak-auth-ldap are not covered by 
oak-it-osgi
[OAK-10596] - Improve the test coverage of 
o.a.j.o.namepath.JcrPathParser
[OAK-10616] - Make error messages from 
o.a.j.o.namepath.JcrNameParser/JcrPathParser consistent and less misleading

[OAK-10684] - update maven-shade-plugin version to 3.5.2
[OAK-10690] - Update docs and test config for recommended MongoDB 
version (5.0)

[OAK-10694] - Remove oak-search-mt
[OAK-10700] - update testcontainer dependency to 1.19.7
[OAK-10730] - Log MongoException previously swallowed
[OAK-10754] - webapp: update Tomcat dependency to 9.0.87
[OAK-10785] - update maven-shade-plugin version to 3.5.3
[OAK-10793] - Update Logback version to 1.2.13
[OAK-10797] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.16
[OAK-10815] - Update jacoco plugin to 0.8.12
[OAK-10816] - Update spotbugs plugin to 4.8.5.0
[OAK-10820] - webapp: update Tomcat dependency to 9.0.89
[OAK-10923] - oak-benchmarks/oak-it-osgi: update commons-compress 
dependency to 1.26.2

[OAK-10929] - Update commons-codec dependency to 1.17.0
[OAK-10932] - lucene: update commons-exec test dependency to 1.4.0
[OAK-10944] - oak-auth-ldap: update commons-pool2 dependency to 2.12.0
[OAK-10949] - blob-cloud, segment-aws: update aws SDK to 1.12.761 
(dependencies reference vulnerable amazon ion-java version)

[OAK-10959] - webapp: update Tomcat dependency to 9.0.90
[OAK-10960] - blob-cloud, segment: update netty version to 4.1.111
[OAK-11003] - Update commons-codec dependency to 1.17.1


In addition to the above-mentioned changes, this release contains
all changes included up to the previous Apache Jackrabbit Oak 1.22.x 
release.


For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by a SHA512 checksums and a PGP
signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a

[ANNOUNCE] Apache Jackrabbit 1.68.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.68.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.68.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.68.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

While Oak 1.68.0 compiles and tests successfully on Java 17, Javadocs
generation fails on Java 17 (but works as expected on Java 11).

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.68.0
-

Technical task

[OAK-6762] - Convert oak-blob to OSGi R7 annotations
[OAK-6773] - Convert oak-store-composite to OSGi R7 annotations
[OAK-10941] - oak-run: avoid use of Guava's ClassToInstanceMap
[OAK-10945] - Remove usage of Guava Function interface
[OAK-10955] - remove unused import of 
java.io.UnsupportedEncodingException

[OAK-10961] - Remove usage of Guava Predicate interface
[OAK-11004] - Remove usage of Guava Supplier interface
[OAK-11010] - Remove usage of Guava newHashMap
[OAK-11012] - Remove usage of Guava Objects.equal()
[OAK-11013] - Remove usage of Guava Optional

Bug

[OAK-10985] - Index defintion with a property rule having 
valueExcludedPrefixes not getting considered for like condition on that 
property

[OAK-10994] - Update Mockito dependency to 5.12.0
[OAK-10998] - OrderableNodesTest#orderableAddManyChildrenWithSave() 
does not call save()
[OAK-11002] - 
VersionGCWithSplitTest.gcWithConcurrentSplit[MongoFixture: MongoDB] - 
teardown fails with NPE


Story

[OAK-10978] - Skip Azure compaction when there's not enough garbage 
in the repository


New Feature

[OAK-10991] - document-store: allow to skip tests for MongoDB

Improvement

[OAK-10803] - Compress in-memory property values
[OAK-10904] - Use daemon thread for token refresh executor
[OAK-10905] - Create a configurable job to create checkpoints at a 
defined interval of time

[OAK-10913] - SQL-2 grammar: remove documentation for "distinct"
[OAK-10951] - Make cache size in PersistedLinkedList class configurable
[OAK-10965] - indexing job: Sporadic failure at the end of the dump 
phase
[OAK-10966] - Indexing job: create optimized version of 
PersistedLinkedList

[OAK-10968] - Avoid creating auxiliary string in PathUtils.isAncestor
[OAK-10971] - Add a method PathUtils.isDirectAncestor
[OAK-10972] - JsonDeserializer: do not rely on 
NumberFormatExceptions in the common case when parsing doubles
[OAK-10976] - Avoid unnecessary call to PathUtils.getName in 
IndexDefinition

[OAK-10977] - Cleanup IndexDefinition class
[OAK-10984] - Improve invocations of logging API to follow best 
practices for parameter passing in search/indexing modules
[OAK-10988] - Minor performance improvements to 
NodeStateEntryReader/Writer

[OAK-10989] - Performance improvements to JSON parsing
[OAK-10990] - In calls to Precondition.checkState() always use 
string templates instead of concatenation to avoid creating a string 
when the condition passes
[OAK-10995] - indexing-job: when accessing the backing array of a 
ByteBuffer, use buffer.arrayOffset() in index calculations of array
[OAK-10996] - indexing-job: cache interned strings in a local 
hashmap to avoid calling String.intern too frequently

[OAK-10999] - indexing-job: report nodes that take the longest to index
[OAK-11006] - indexing-job: better logging of text extraction 
statistics

[OAK-11007] - Reformat FulltextBinaryTextExtractor
[OAK-11008] - AzureBlobStore: do not create a new 
CloudBlobContainer instance for every request to the backend


Task

[OAK-10705] - oak-standalone: update dependencies
[OAK-10748] - Improve statistics to collect which type of garbage 
is present/deleted

[OAK-10821] - webapp: bump htmlunit to 4.4.0
[OAK-10848] - commons: remove use of slf4j.event.Level in 
SystemPropertySupplier API and implementation
[OAK-10921] - Fix race condition while resetting fullGC variables 
from oak-run

[OAK-10938] - oak-doc: update branch history in roadmap
[OAK-10940] - oak-jcr: improve error message when mongo test 
fixture fails

[OAK-10944] - oak-auth-ldap: update commons-pool2 dependency to 2.12.0
[OAK-10949] - blob-cloud, segment-aws: update aws SDK to 1.12.761 
(dependencies reference vulnerable amazon ion-java version)

[OAK-10954] - Update spotbugs plugin to 4.8.6.2
[OA

[ANNOUNCE] Apache Jackrabbit 2.23.0-beta released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.23.0-beta. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.23.0-beta

Introduction


This is Apache Jackrabbit(TM) 2.23.0-beta, a fully compliant 
implementation of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.23.0-beta is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.23.0-beta
--

Task

[JCR-5073] - core: avoid varargs related compiler warnings in tests
[JCR-5075] - set baseline comparisonVersion to latest stable (2.22.0)
[JCR-5076] - Use correctly test scope for dependencies of type: 
test-jar
[JCR-5077] - Update oak-jackrabbit-api.version.implemented in trunk 
to Oak 1.66.0

[JCR-5078] - update Apache parent pom to version 33
[JCR-5079] - Update tomcat dependency to 9.0.91
[JCR-5080] - Update easymock dependency to 5.3.0
[JCR-5081] - update aws java sdk version to 1.12.761
[JCR-5082] - update Jetty to 9.4.55.v20240627
[JCR-5083] - Update maven-jar-plugin to 3.4.2
[JCR-5084] - Update pmd-plugin dependency to 3.24.0
[JCR-5086] - Update spotbugs-maven-plugin to 4.8.6.2


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.66.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.66.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.66.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.66.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

While Oak 1.66.0 compiles and tests successfully on Java 17, Javadocs
generation fails on Java 17 (but works as expected on Java 11).

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.66.0
-

Technical task

[OAK-6756] - Convert oak-auth-external to OSGi R7 annotations
[OAK-6761] - Convert oak-blob-plugins to OSGi R7 annotations
[OAK-10691] - remove use of Guava Charsets class
[OAK-10852] - oak-store-document: disable unreliable tests in 
BranchCommitGCTest

[OAK-10873] - store-spi: remove use of Guava CharMatcher in test case

Bug

[OAK-8848] - Impossible to replace a mix:versionable by a different 
mix:versionable

[OAK-9825] - Flaky unit tests: DocumentNodeStoreSweepIT
[OAK-10451] - UserPrincipalProvider may cause many conflicts when 
under load
[OAK-10621] - o.a.j.o.namepath.JcrPathParser does not accept 
indexed expanded names
[OAK-10624] - o.a.j.o.namepath.JcrPathParser does not accept some 
valid local names containing '{' or '}'

[OAK-10826] - Misleading warning about missing checkpoint
[OAK-10833] - Consistency check reports success for repository with 
SNFE in checkpoints
[OAK-10838] - oak-lucene: maven install fails in oak-lucene due to 
baseline check
[OAK-10853] - 
VersionGarbageCollectorIT.testDeletedPropsAndUnmergedBCWithCollision failure
[OAK-10856] - oak-run: TextPopulatorTest uses transitive dependency 
com.beust.jcommander.internal.Maps
[OAK-10903] - Indexing job: when parallel download is enabled, the 
dump may miss documents updated during the download
[OAK-10928] - 
ElasticIndexPlannerCommonTest.indexedButZeroWeightProps is flaky


Story

[OAK-10807] - Add oak-run diff to Azure repositories

Improvement

[OAK-9455] - Improve oak-run check to allow fast remote consistency 
checks

[OAK-10675] - Azure Service principal support in oak-blob-cloud-azure
[OAK-10780] - Access Token refresh in oak-segment-azure
[OAK-10781] - Access Token refresh in oak-blob-cloud-azure
[OAK-10789] - Indexing job: log paths used for inclusing/exclusion 
for Mongo regex filters in job summary

[OAK-10811] - oak-search-elastic: reduce contention in IndexTracker
[OAK-10823] - Support Oak-mongo.js remove functions with mongosh shell
[OAK-10825] - Add logs for indexing job failure
[OAK-10841] - Elastic should log the root cause when a query fails
[OAK-10851] - Log START/END/FAIL messages of indexing job phases 
inside the same package

[OAK-10854] - oak.findOne doesn't find long path documents
[OAK-10866] - Avoid intermediate object creation in JsopBuilder
[OAK-10867] - Service Principal Support in oak-run-commons
[OAK-10868] - Use a constant value to represent empty empty 
StringValue instances
[OAK-10872] - Optimize PathUtils.concat(String, String) to use 
string concatenation instead of StringBuilder

[OAK-10874] - Force Update a failing indexing lane using a jmx method
[OAK-10879] - indexing-job: in the index report, list phase timings 
in chronological order and not alphabetic order
[OAK-10889] - indexing job: do not remove field with size 
estimation from NodeDocuments downloaded from Mongo

[OAK-10894] - DocumentNodeStore: expose readNode as package private
[OAK-10897] - Delete unused class: DocumentStoreSplitter
[OAK-10901] - Indexing job: bypass the DocumentNodeState cache when 
resolving paths downloaded from Mongo
[OAK-10920] - indexing job: simplify termination management of 
Mongo download thread


Task

[OAK-10690] - Update docs and test config for recommended MongoDB 
version (5.0)

[OAK-10742] - Introduce include/exclude lists for detailedGC
[OAK-10829] - examples: update build-helper-maven-plugin to 3.6.0
[OAK-10830] - Upgrade jackson-databind dependency to 2.17.1
[OAK-10837] - Add documentation for UT/IT fixtures
[OAK-10843] - Flaky fullgc tests
[OAK-10847] - query-spi: bump log level to ERROR for use of 
deprecated slf4j.event.Level method
[OAK-10857] - Improve oak-run to support unreferenced checkpoints 
removal for Azure repositories
[OAK-10860] - oak-lucene: updat

[ANNOUNCE] Apache Jackrabbit 2.22.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.22.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.22.0

Introduction


This is Apache Jackrabbit(TM) 2.22.0, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.22.0 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.22.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 11. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.22.0


(as compared to 2.20.16)

Bug

[JCR-4808] - 'pedantic' profile should run integration tests
[JCR-4907] - Javadocs have incorrect copyright date

Improvement

[JCR-4578] - IndexMerger should log more debug informations about 
the internal IndexBuckets
[JCR-4785] - ChildNodeEntriesImpl requires access to removed 
AbstractLinkedList feature


Task

[JCR-4352] - Update lucene-core dependency to 3.6.2
[JCR-4516] - switch bundle comparisonVersion for 2.20.0
[JCR-4580] - switch bundle comparisonVersion for 2.20.1
[JCR-4602] - jackrabbit-core: remove unused commons-collections 
dependency

[JCR-4634] - Jackrabbit should build and test with Java 16
[JCR-4650] - set baseline comparisonVersion to latest stable (2.20.2)
[JCR-4695] - set baseline comparisonVersion to latest stable (2.20.3)
[JCR-4737] - set baseline comparisonVersion to latest stable (2.20.4)
[JCR-4771] - set baseline comparisonVersion to latest stable (2.20.5)
[JCR-4809] - set baseline comparisonVersion to latest stable (2.20.6)
[JCR-4867] - set baseline comparisonVersion to latest stable (2.20.7)
[JCR-4891] - set baseline comparisonVersion to latest stable (2.20.8)
[JCR-4902] - Update mockito dependency to 5.11.0
[JCR-4912] - set baseline comparisonVersion to latest stable (2.20.9)
[JCR-4914] - Update oak-jackrabbit-api.version.implemented in trunk 
to Oak 1.60.0

[JCR-4931] - set baseline comparisonVersion to latest stable (2.20.10)
[JCR-4938] - update remaining copies of XMLChar.java with latest 
version from Xerces

[JCR-4955] - set baseline comparisonVersion to latest stable (2.20.11)
[JCR-4969] - set baseline comparisonVersion to latest stable (2.20.12)
[JCR-4972] - Remove RMI support
[JCR-4977] - use 'beta' identifier for releases in unstable branch
[JCR-4989] - set baseline comparisonVersion to latest stable (2.20.13)
[JCR-5000] - update Apache parent pom to version 31
[JCR-5012] - set baseline comparisonVersion to latest stable (2.20.14)
[JCR-5018] - Bump up minimal Java version to 11
[JCR-5020] - jackrabbit-webapp: deprecate RMI support "for removal"
[JCR-5021] - jackrabbit-jcr-rmi: deprecate RMI support "for removal"
[JCR-5022] - Update derby dependency to 10.15.2.0
[JCR-5026] - standalone: remove remote repository support (RMI and 
JNDI)

[JCR-5027] - jackrabbit-webapp: remove RMI support
[JCR-5028] - jackrabbit-jcr-rmi: remove
[JCR-5034] - set baseline comparisonVersion to latest stable (2.20.15)
[JCR-5039] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.19

[JCR-5042] - jackrabbit-jcr-servlet: remove RMI support
[JCR-5044] - Update tomcat dependency to 9.0.87
[JCR-5045] - Update commons-io dependency to 2.16.0
[JCR-5046] - Update oak-jackrabbit-api.version.implemented in trunk 
to Oak 1.62.0

[JCR-5047] - Update to jacoco version 0.8.12
[JCR-5052] - Update commons-io dependency to 2.16.1
[JCR-5053] - Update commons-cli dependency to 1.7.0
[JCR-5054] - vfs-ext: update hadoop-hdfs-client dependency to 3.4.0
[JCR-5055] - update Apache parent pom to version 32
[JCR-5056] - Update maven-jar-plugin to 3.4.1
[JCR-5057] - Update pmd-plugin dependency to 3.22.0
[JCR-5058] - Update spotbugs-maven-plugin to 4.8.5.0
[JCR-5059] - set baseline comparisonVersion to latest stable (2.20.16)
[JCR-5060] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.20

[JCR-5063] - Update build-helper-maven-plugin to version 3.6.0
[JCR-5064] - Update mockito dependency to 5.12.0
[JCR-5068] - update aws java sdk version to 1.12.730
[JCR-5069] - Update commons-cli dependency to 1.8.0
[JCR-5070] - Update tomcat dependency to 9.0.89
[JCR-5071] - Update oak-jackrabbit-api.version.implemented in trunk 
to Oak 1.64.0



For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabb

[ANNOUNCE] Apache Jackrabbit 2.21.27-beta released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.27-beta. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.27-beta

Introduction


This is Apache Jackrabbit(TM) 2.21.27-beta, a fully compliant 
implementation of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.27-beta is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.27-beta
--

Task

[JCR-4972] - Remove RMI support
[JCR-5028] - jackrabbit-jcr-rmi: remove
[JCR-5042] - jackrabbit-jcr-servlet: remove RMI support
[JCR-5044] - Update tomcat dependency to 9.0.87
[JCR-5045] - Update commons-io dependency to 2.16.0
[JCR-5046] - Update oak-jackrabbit-api.version.implemented in trunk 
to Oak 1.62.0

[JCR-5047] - Update to jacoco version 0.8.12
[JCR-5052] - Update commons-io dependency to 2.16.1
[JCR-5053] - Update commons-cli dependency to 1.7.0
[JCR-5054] - vfs-ext: update hadoop-hdfs-client dependency to 3.4.0
[JCR-5055] - update Apache parent pom to version 32
[JCR-5056] - Update maven-jar-plugin to 3.4.1
[JCR-5057] - Update pmd-plugin dependency to 3.22.0
[JCR-5058] - Update spotbugs-maven-plugin to 4.8.5.0
[JCR-5059] - set baseline comparisonVersion to latest stable (2.20.16)
[JCR-5060] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.20

[JCR-5063] - Update build-helper-maven-plugin to version 3.6.0
[JCR-5064] - Update mockito dependency to 5.12.0
[JCR-5068] - update aws java sdk version to 1.12.730
[JCR-5069] - Update commons-cli dependency to 1.8.0
[JCR-5070] - Update tomcat dependency to 9.0.89
[JCR-5071] - Update oak-jackrabbit-api.version.implemented in trunk 
to Oak 1.64.0



For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.64.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.64.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.64.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.64.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

While Oak 1.64.0 compiles and tests successfully on Java 17, Javadocs
generation fails on Java 17 (but works as expected on Java 11).

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.64.0
-

Technical task

[OAK-6768] - Convert oak-remote to OSGi R7 annotations
[OAK-6774] - Convert oak-upgrade to OSGi R7 annotations
[OAK-10786] - oak-lucene: use copy of lucene-core 4.7.2 source code
[OAK-10787] - oak-lucene: backport fix for lucene-core vulnerability

Bug

[OAK-10647] - DocumentNodeStore: journal update needs success check
[OAK-10719] - oak-lucene uses Lucene version that can throw a 
StackOverflowException
[OAK-10756] - OrderableNodesTest.childOrderCleanupFeatureToggleTest 
fails with -Dnsfixtures=DOCUMENT_NS
[OAK-10767] - oak-it-osgi unnecessarily deploys commons-collections 
to the test environment

[OAK-10775] - LeaseUpdateSocketTimeoutIT still wants a mongo:4.2 image
[OAK-10782] - oak-search-elastic: query getSize() can lock writes 
when is called before an update
[OAK-10788] - Indexing job downloader: shutdown gracefully all 
threads in case of failure
[OAK-10800] - DictionaryCompoundWordTokenFilter not supported in 
Elastic

[OAK-10814] - Tar file recovery still fails with SNFE in some cases.

Improvement

[OAK-10760] - oak-core should check namespace registry consistency 
on startup
[OAK-10762] - oak-search-elastic: similarity queries produce not 
relevant results when uses similarTags
[OAK-10771] - Add disk cache size stats and issue warning if 
evicted segment has zero length
[OAK-10778] - Indexing job: support parallel download from MongoDB 
with two connections in Pipelined strategy
[OAK-10783] - VersionableEditor: misleading WARN message when 
creating version history
[OAK-10784] - o.a.j.o.plugins.migration.version.VersionableEditor 
should create the version storage node, if needed
[OAK-10795] - Indexing job: eliminate unnecessary intermediate 
object creation in transform stage
[OAK-10796] - Avoid creation of intermediate StringBuilder in 
JsopBuilder

[OAK-10804] - Indexing job: optimize check for hidden nodes
[OAK-10808] - PipelinedMongoConnectionFailureIT should not fail if 
Mongo is not available
[OAK-10810] - Remove redundant call to StringCache.get in 
Path.fromString()
[OAK-10813] - Improve performance of Oak-mongo.js function to 
remove/list nodes


Task

[OAK-10579] - Bump elasticsearch version to 8.11.3
[OAK-10596] - Improve the test coverage of 
o.a.j.o.namepath.JcrPathParser

[OAK-10694] - Remove oak-search-mt
[OAK-10730] - Log MongoException previously swallowed
[OAK-10752] - update Tomcat JDBC dependency to 9.0.87
[OAK-10754] - webapp: update Tomcat dependency to 9.0.87
[OAK-10755] - commons: deprecate use of slf4j.event.Level in 
SystemPropertySupplier API (and make it 'internal')
[OAK-10757] - DocumentRdbFixture does not support the Feature 
Toggle FT_NOCOCLEANUP_OAK-10660
[OAK-10766] - Make lease timeout configurable for specific async 
lanes in indexing
[OAK-10768] - query-spi: deprecate use of slf4j.event.Level in 
QueryIndex.IndexPlan

[OAK-10769] - Bump elasticsearch version to 8.13.2 / lucene 9.10.0
[OAK-10770] - Azure identity runtime dependency resolution in 
oak-segment-azure
[OAK-10773] - LuceneIndexLookupUtil opens up index node when it's 
actually not needed

[OAK-10774] - Remove oak-search-mt module from Jenkinsfile
[OAK-10776] - Incremental FFS should filter out changes under paths 
excluded by pipelinedMongoCustomExcludedPaths
[OAK-10777] - oak-lucene: add test coverage for stack overflow 
based on very long and complex regexp using JCR lucene native query

[OAK-10785] - update maven-shade-plugin version to 3.5.3
[OAK-10793] - Update Logback version to 1.2.13
[OAK-10797] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.16
[OAK-10799] - Update (shaded) Guava to 33.2.0
[OAK-10815] - Update jacoco plugin to 0.8.12
[OAK-10816] - Update spotbugs plugin to 4.8.5.0
[OAK-10819] - examples: update jetty-maven-plugin to 11.0.21
[OAK-10820

[ANNOUNCE] Apache Jackrabbit 2.20.16 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.16. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.16

Introduction


This is Apache Jackrabbit(TM) 2.20.16, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.16 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.16
-

Bug

[JCR-5041] - Javadoc build is broken due to JCR 2.0 API docs being 
unavailable


Task

[JCR-5029] - update aws java sdk version to 1.12.659
[JCR-5032] - jackrabbit-jcr-servlet: deprecate RMI support
[JCR-5035] - Update tomcat dependency to 9.0.86
[JCR-5037] - update aws java sdk version to 1.12.678
[JCR-5038] - Update spotbugs-maven-plugin to 4.8.3.1
[JCR-5040] - Update javacc-maven-plugin to version 3.1.0

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.62.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.62.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.62.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.62.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

While Oak 1.62.0 compiles and tests successfully on Java 17, Javadocs
generation fails on Java 17 (but works as expected on Java 11).

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.62.0
-

Technical task

[OAK-6765] - Convert oak-jcr to OSGi R7 annotations
[OAK-6769] - Convert oak-search-mt to OSGi R7 annotations
[OAK-10623] - oak-core: log a warning when it needs to remap/add a 
namespace
[OAK-10673] - DocumentStore: add test for checking of removal on 
non-existing map entries
[OAK-10708] - DocumentNodeStore: error-log failures to update the 
journal

[OAK-10709] - Deprecate oak-search-mt

Bug

[OAK-10500] - javadoc:aggregate build fails again
[OAK-10544] - oak-jcr: remapping a namespace prefix leaves 
namespace resolver in broken state
[OAK-10551] - o.a.j.o.jcr.osgi.RepositoryManager declares OSGi 
properties that are not used at all
[OAK-10576] - oak-search-elastic: dynamicBoost should match only on 
full text queries on all fields (* or .)
[OAK-10590] - Indexing job downloads and creates FFS with full node 
store if includedPaths is specified as a string instead of array of strings
[OAK-10595] - Cached data before a collision rollback can be read 
as committed
[OAK-10611] - o.a.j.o.namepath.JcrPathParser does not handle 
invalid characters correctly
[OAK-10617] - oak-search-elastic: potential deadlock with 
includePathRestrictions=false and multiple filtered results
[OAK-10636] - Tar recovery unsuccessful in oak-segment-tar during 
initialisation of FileStore

[OAK-10638] - Build fails on Java 17 due to JAR size limit
[OAK-10650] - MongoDocumentStore.findDocuments can fail with BSON 
exception
[OAK-10652] - Repository writes in SegmentStoreMigrator blocked 
when migrating to Azure segment store
[OAK-10653] - BasicDocumentStoreTest: handle DocumentStoreException 
on ds.create

[OAK-10717] - oak-pojosr should be updated to o.a.felix.connect-0.2.0
[OAK-10735] - Binary data in logs related to the haystack property

Story

[OAK-10573] - Make distinction for azure timeout settings between 
write and read operations

[OAK-10604] - Azure Service Principal Support in oak-segment-azure
[OAK-10615] - Azure Service Principal Support in oak-run 
segment-copy, compact, console


Improvement

[OAK-10424] - Allow Fast Query Size and Insecure Facets to be 
selectively enabled with query options for permitted principals

[OAK-10438] - Remove MULTTHREADED_TRAVERSE_WITH_SORT download strategy
[OAK-10571] - Names of metrics exported by indexing logic are 
inconsistent

[OAK-10577] - Advanced repository statistics
[OAK-10580] - Indexing job: improve regex path filtering, support 
multiple includedPaths
[OAK-10589] - Improve regex path filtering to also handle cases 
where excludedPaths are defined
[OAK-10592] - [Indexing job] Add a regex filter to exclude matching 
entries from being downloaded from Mongo

[OAK-10607] - Rename Maven property "java.version"
[OAK-10608] - [Indexing job] Improve regex expression used to 
download from Mongo to make better used of Mongo indexes

[OAK-10620] - Print summary at the end of the indexing job
[OAK-10635] - BundledTypeRegistry's use of shaded Guava problematic 
when used outside Oak
[OAK-10637] - Indexing job/regex path filtering - when / is the 
only included path, do not add an explicit filter

[OAK-10640] - docs: fix external link on lucene multi words synonyms
[OAK-10643] - MongoDocumentStore: improve diagnostics for too large 
docs

[OAK-10649] - MemoryDS: add toggle to limit document size
[OAK-10655] - Improve warning emitted for Unexpected changes 
performed on a non-default mount
[OAK-10656] - MongoDocumentStore: keep metrics about document size 
related exceptions
[OAK-10660] - DocumentNodeStore: avoid repeated commits of 
:childOrder in branch commits
[OAK-10661] - oak-search-elastic: remove workaround for 
elastic/elasticsearch-java/issues/404

[OAK-10670] - Azure service principal support in oak-upgrade
[OAK-10671] - [Indexing job] - Improve Mongo regex q

[ANNOUNCE] Apache Jackrabbit 2.21.26-beta released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.26-beta. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.26

Introduction


This is Apache Jackrabbit(TM) 2.21.26, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.26 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.26
-

Bug

[JCR-5041] - Javadoc build is broken due to JCR 2.0 API docs being 
unavailable


Task

[JCR-4902] - Update mockito dependency to 5.11.0
[JCR-4977] - use 'beta' identifier for releases in unstable branch
[JCR-5026] - standalone: remove remote repository support (RMI and 
JNDI)

[JCR-5027] - jackrabbit-webapp: remove RMI support
[JCR-5032] - jackrabbit-jcr-servlet: deprecate RMI support
[JCR-5034] - set baseline comparisonVersion to latest stable (2.20.15)
[JCR-5035] - Update tomcat dependency to 9.0.86
[JCR-5037] - update aws java sdk version to 1.12.678
[JCR-5038] - Update spotbugs-maven-plugin to 4.8.3.1
[JCR-5039] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.19

[JCR-5040] - Update javacc-maven-plugin to version 3.1.0

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.22.19 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.22.19. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.22.19

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.22.19 is a patch release that contains fixes and
improvements over Oak 1.22. Jackrabbit Oak 1.22.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.


Changes in Oak 1.22.19
--

Technical task

[OAK-10524] - SameNameSiblingTest: add (failing) test for getName() 
semantics


Bug

[OAK-9459] - ConstraintViolationException in 
VersionManagerImplRestore when target node has a property definition 
unknown by the frozen node
[OAK-10462] - o.a.j.o.plugins.version.VersionEditor#propertyAdded() 
may mistakenly assume an ongoing restore operation

[OAK-10680] - tests failures with com.arakelian/docker-junit-rule

Task

[OAK-10426] - oak-segment-azure: enable baseline check
[OAK-10439] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.12
[OAK-10446] - Upgrade jackson-databind dependency to 2.15.2
[OAK-10537] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.13
[OAK-10566] - Bump up minimal warning level for deprecated uses of 
java.security.Group to ERROR

[OAK-10591] - Bump netty dependency from 4.1.96.Final to 4.1.104.Final


In addition to the above-mentioned changes, this release contains
all changes included up to the previous Apache Jackrabbit Oak 1.22.x 
release.


For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by a SHA512 checksums and a PGP
signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit 2.20.15 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.15. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.15

Introduction


This is Apache Jackrabbit(TM) 2.20.15, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.15 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.15
-

Bug

[JCR-5024] - webapp: un-deprecate BootstrapConfig.getJndiConfig and 
RepositoryAccessServlet.getRepositoryByJNDI


Task

[JCR-4991] - Update to maven bundle plugin to 5.1.9
[JCR-5013] - Update commons-io dependency to 2.15.1
[JCR-5014] - Update tomcat dependency to 9.0.85
[JCR-5015] - update aws java sdk version to 1.12.635
[JCR-5016] - standalone-components: remove unused jcr-rmi dependency
[JCR-5017] - Update spotbugs-maven-plugin to 4.8.2.0
[JCR-5019] - Update build-helper-maven-plugin to version 3.5.0
[JCR-5025] - standalone: deprecate remote repository support (RMI 
and JNDI)



For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

ANNOUNCE] Apache Jackrabbit 2.21.25 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.25. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.25

Introduction


This is Apache Jackrabbit(TM) 2.21.25, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.25 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.25
-

Bug

[JCR-5024] - webapp: un-deprecate BootstrapConfig.getJndiConfig and 
RepositoryAccessServlet.getRepositoryByJNDI


Task

[JCR-5025] - standalone: deprecate remote repository support (RMI 
and JNDI)

[JCR-5029] - update aws java sdk version to 1.12.659


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.25 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.25. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.25

Introduction


This is Apache Jackrabbit(TM) 2.21.25, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.25 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.25
-

Bug

[JCR-5024] - webapp: un-deprecate BootstrapConfig.getJndiConfig and 
RepositoryAccessServlet.getRepositoryByJNDI


Task

[JCR-5025] - standalone: deprecate remote repository support (RMI 
and JNDI)

[JCR-5029] - update aws java sdk version to 1.12.659


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.23 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.23. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.23

Introduction


This is Apache Jackrabbit(TM) 2.21.23, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.23 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.23
-

Improvement

[JCR-5011] - Restore SCM information in parent POM

Task

[JCR-4914] - Update oak-jackrabbit-api.version.implemented in trunk 
to Oak 1.60.0

[JCR-5012] - set baseline comparisonVersion to latest stable (2.20.14)
[JCR-5013] - Update commons-io dependency to 2.15.1
[JCR-5014] - Update tomcat dependency to 9.0.85
[JCR-5015] - update aws java sdk version to 1.12.635
[JCR-5016] - standalone-components: remove unused jcr-rmi dependency
[JCR-5017] - Update spotbugs-maven-plugin to 4.8.2.0
[JCR-5018] - Bump up minimal Java version to 11
[JCR-5019] - Update build-helper-maven-plugin to version 3.5.0
[JCR-5020] - jackrabbit-webapp: deprecate RMI support "for removal"
[JCR-5021] - jackrabbit-jcr-rmi: deprecate RMI support "for removal"
[JCR-5022] - Update derby dependency to 10.15.2.0


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.20.14 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.14. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.14

Introduction


This is Apache Jackrabbit(TM) 2.20.14, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.14 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.14
-

Bug

[JCR-4570] - WebdavRequestImpl does not check ETags if there is no 
resource or no exclusive write lock
[JCR-4571] - WebdavRequestImpl stores If-Header values using either 
absolute URIs or absolute paths, but both may be used for lookup


Improvement

[JCR-4979] - Migrate from Subversion to Git
[JCR-4980] - make webapp build reproducible
[JCR-5011] - Restore SCM information in parent POM

Test

[JCR-4967] - test coverage for modification of non-versioned node 
with jcr:isCheckedOut==false property
[JCR-4990] - add test for observing effect of remapping a namespace 
prefix to a different namespace name


Task

[JCR-4956] - Replace deprecated Surefire fork options
[JCR-4959] - update Apache parent pom to version 30
[JCR-4981] - jackrabbit-webapp: deprecate RMI support
[JCR-4982] - jackrabbit-spi-commons: update Javadoc for 
IllegalNameException
[JCR-4983] - jackrabbit-spi-commons: improve diagnostics for 
invalid names

[JCR-4986] - update Jetty to 9.4.53.v20231009
[JCR-4987] - Update to jacoco version 0.8.11
[JCR-4992] - Update animal-sniffer plugin dependency to 1.23
[JCR-4993] - Update war-plugin dependency to 3.4.0
[JCR-4994] - Update build-helper-maven-plugin to version 3.4.0
[JCR-4995] - Update pmd-plugin dependency to 3.21.2
[JCR-4996] - update checkstyle-plugin dependency to 3.3.1
[JCR-4997] - Update spotbugs-maven-plugin to 4.8.1.0
[JCR-4998] - Update commons-io dependency to 2.15.0
[JCR-4999] - Update commons-cli dependency to 1.6.0
[JCR-5001] - Update tomcat dependency to 9.0.83
[JCR-5002] - update aws java sdk version to 1.12.591
[JCR-5003] - Update h2db dependency to 2.2.224
[JCR-5004] - jcr-commons: get rid of cglib test dependency 
(unmaintained)
[JCR-5005] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.18



For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.22 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.22. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.22

Introduction


This is Apache Jackrabbit(TM) 2.21.22, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.22 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.22
-

Improvement

[JCR-4979] - Migrate from Subversion to Git

Test

[JCR-4967] - test coverage for modification of non-versioned node 
with jcr:isCheckedOut==false property


Task

[JCR-4987] - Update to jacoco version 0.8.11
[JCR-5004] - jcr-commons: get rid of cglib test dependency 
(unmaintained)



For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.21 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.21. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.21

Introduction


This is Apache Jackrabbit(TM) 2.21.21, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.21 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

NOTE: this release disables RMI access in the standalone and webapp 
projects.

See https://issues.apache.org/jira/browse/JCR-4960 for more information.


Changes in Jackrabbit 2.21.21
-

Bug

[JCR-4570] - WebdavRequestImpl does not check ETags if there is no 
resource or no exclusive write lock
[JCR-4571] - WebdavRequestImpl stores If-Header values using either 
absolute URIs or absolute paths, but both may be used for lookup


Improvement

[JCR-4980] - make webapp build reproducible

Test

[JCR-4990] - add test for observing effect of remapping a namespace 
prefix to a different namespace name


Task

[JCR-4956] - Replace deprecated Surefire fork options
[JCR-4981] - jackrabbit-webapp: deprecate RMI support
[JCR-4982] - jackrabbit-spi-commons: update Javadoc for 
IllegalNameException
[JCR-4983] - jackrabbit-spi-commons: improve diagnostics for 
invalid names

[JCR-4986] - update Jetty to 9.4.53.v20231009
[JCR-4989] - set baseline comparisonVersion to latest stable (2.20.13)
[JCR-4991] - Update to maven bundle plugin to 5.1.9
[JCR-4992] - Update animal-sniffer plugin dependency to 1.23
[JCR-4993] - Update war-plugin dependency to 3.4.0
[JCR-4994] - Update build-helper-maven-plugin to version 3.4.0
[JCR-4995] - Update pmd-plugin dependency to 3.21.2
[JCR-4996] - update checkstyle-plugin dependency to 3.3.1
[JCR-4997] - Update spotbugs-maven-plugin to 4.8.1.0
[JCR-4998] - Update commons-io dependency to 2.15.0
[JCR-4999] - Update commons-cli dependency to 1.6.0
[JCR-5000] - update Apache parent pom to version 31
[JCR-5001] - Update tomcat dependency to 9.0.83
[JCR-5002] - update aws java sdk version to 1.12.591
[JCR-5003] - Update h2db dependency to 2.2.224
[JCR-5005] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.18



For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.60.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.60.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.60.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.60.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

While Oak 1.60.0 compiles and tests successfully on Java 17, Javadocs
generation fails on Java 17 (but works as expected on Java 11).

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.60.0
-

Sub-task

[OAK-10488] - Benchmark results
[OAK-10522] - 
o.a.j.o.index.ReindexIT#reindexIgnoreMissingTikaDepThrow() fails with 
Java 21


Technical task

[OAK-6757] - Convert oak-auth-ldap to OSGi R7 annotations
[OAK-6760] - Convert oak-blob-cloud to OSGi R7 annotations
[OAK-10478] - Update Mockito dependency to 5.x
[OAK-10502] - oak-segment-azure/oak-blob-cloud-azure: update 
embedded Guava to 31.0
[OAK-10507] - oak-segment-azure/oak-blob-cloud-azure: update 
embedded Guava to 31.1
[OAK-10508] - oak-segment-azure/oak-blob-cloud-azure: update 
embedded Guava to 32.0.0
[OAK-10510] - oak-segment-azure/oak-blob-cloud-azure: update 
embedded Guava to 32.0.1
[OAK-10512] - oak-segment-azure/oak-blob-cloud-azure: update 
embedded Guava to 32.1.0
[OAK-10513] - oak-segment-azure/oak-blob-cloud-azure: update 
embedded Guava to 32.1.1
[OAK-10515] - oak-segment-azure/oak-blob-cloud-azure: update 
embedded Guava to 32.1.2
[OAK-10516] - oak-segment-azure/oak-blob-cloud-azure: update 
embedded Guava to 32.1.3

[OAK-10521] - Update Easymock dependency to 5.2
[OAK-10524] - SameNameSiblingTest: add (failing) test for getName() 
semantics
[OAK-10545] - oak-jcr: add test for observing effect of remapping a 
namespace prefix to a different namespace name


Bug

[OAK-9459] - ConstraintViolationException in 
VersionManagerImplRestore when target node has a property definition 
unknown by the frozen node
[OAK-9705] - Explain Query tool doesn't show the correct ES query 
when suggest queries are made
[OAK-10006] - AzurePersistence can still write segments after 
having lost lease to another instance
[OAK-10460] - PIPELINED strategy fails with OOME during final merge 
phase for very large repositories
[OAK-10462] - o.a.j.o.plugins.version.VersionEditor#propertyAdded() 
may mistakenly assume an ongoing restore operation

[OAK-10471] - Implement ConflictHandler for UserPrincipalProvider Cache
[OAK-10486] - Resolution of inherited groups may terminate 
pre-maturely for external users

[OAK-10495] - Ignore DocumentStoreIndexerIT#parallelReindex* tests
[OAK-10517] - Consistently clean membership when switch between 
default and dynamic sync
[OAK-10525] - DefaultSyncContext.createValues : return value should 
be annotated with @NotNull
[OAK-10526] - split doc can contain still referenced revisions 
without _sdMaxRevTime indicating so
[OAK-10542] - resolution of _deleted value ignores split docs in 
certain cases
[OAK-10547] - Indexing job fails at the end of reindexing if it 
took more than 24h to run
[OAK-10565] - document-store: VersionGarbageCollectorIT does not 
stop background threads


Story

[OAK-10311] - Optimize SegmentBlob#equals for segment blobs that 
originate from the same blob store


Improvement

[OAK-9796] - oak-segment-remote and oak-segment-aws Redis tests 
fail with ARM processor (Apple M1)

[OAK-9949] - Enable offline tail compaction
[OAK-10420] - Tool to compare Lucene index content
[OAK-10437] - Deprecate all download strategies except PIPELINED
[OAK-10487] - oak-search-elastic should perform a count request for 
fastQuerySize
[OAK-10490] - Suggest queries return duplicate entries if prefetch 
is enabled
[OAK-10491] - Indexing: pass a MongoDatabase instance instead of 
MongoConnection to indexing logic

[OAK-10504] - Add indexing job total duration log message
[OAK-10505] - Make PIPELINED the default download strategy in the 
indexing job

[OAK-10511] - Get blobId without additional network roundtrip
[OAK-10518] - IndexInfo should have a isActive() method
[OAK-10519] - Export metrics from indexing job
[OAK-10527] - Improve readability of the explain query output
[OAK-10538] - Pipeline strategy: eliminate unnecessary intermediate 
copy of entries in transform stage
[OAK-10541] - Pipelined strategy: improve mem

[ANNOUNCE] Apache Jackrabbit Oak 1.22.18 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.22.18. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.22.18

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.22.18 is a patch release that contains fixes and
improvements over Oak 1.22. Jackrabbit Oak 1.22.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.


Changes in Oak 1.22.18
--

Bug

[OAK-8885] - Test failure: NPE in MongoFixture.createDocumentStore()
[OAK-8889] - NPE in the oak-run console az:*
[OAK-10465] - Embed netty-transport-native-unix-common dependency 
in oak-segment-tar


Improvement

[OAK-8901] - oak-run command checkpoints should support 
RDBDocumentStore


Task

[OAK-8892] - Add javadoc to package-info files
[OAK-10431] - Bump up minimal warning level for deprecated uses of 
java.security.Group to WARN



In addition to the above-mentioned changes, this release contains
all changes included up to the previous Apache Jackrabbit Oak 1.22.x 
release.


For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by a SHA512 checksums and a PGP
signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit 2.20.13 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.13. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.13

Introduction


This is Apache Jackrabbit(TM) 2.20.13, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.13 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.13
-

Bug

[JCR-4940] - jackrabbit-jcr2spi is incompatible with Java 21

Task

[JCR-4951] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.16

[JCR-4970] - it-osgi: fix package name
[JCR-4971] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.17

[JCR-4973] - jackrabbit-jcr-rmi: deprecate RMI support
[JCR-4974] - Update easymock dependency to 5.2.0
[JCR-4975] - update aws java sdk version to 1.12.560
[JCR-4976] - Update tomcat dependency to 9.0.80


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit FileVault 3.7.2 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit FileVault 3.7.2. The release is available for download at:

http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:

Release Notes - Jackrabbit FileVault - Version 3.7.2
This version requires Java 8
The OSGi bundles depend on Jackrabbit 2.20.8+ (JCR Commons, SPI, SPI 
Commons), Oak JR API 1.22.4+, Commons IO 2.7+, Commons Collections 4.1+ 
and SLF4J 1.7+


Bug

* [JCRVLT-718] - DocumentViewXmlValidator.validateEnd(...) called with 
wrong nodePath

* [JCRVLT-721] - Importing content packages with minimum permissions fails
* [JCRVLT-722] - SyncLog: 
java.time.temporal.UnsupportedTemporalTypeException: Unsupported field: 
DayOfMonth
* [JCRVLT-725] - Exporting twice via vlt leads to 
java.nio.file.FileAlreadyExistsException

* [JCRVLT-727] - vlt-sync: Prune unused synced directories

Improvement

* [JCRVLT-469] - Validator for overlapping filter rules

Task

* [JCRVLT-724] - DocViewSaxFormatter: improve diagnostics when 
generating DocViewNode2 from JCR node



Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by a SHA512 checksums and a PGP
signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit FileVault
---

The FileVault introduces a JCR repository to filesystem mapping. The mapping
is exposed by an API and used by the "FileVault Content Packages" which 
allow to

create portable packages of repository content.

The Vault Command Line Interface aka "vlt" provides a subversion like
utility to work and develop with repository content.

For more information, visit https://jackrabbit.apache.org/filevault

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit Oak 1.58.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.58.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.58.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.58.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

While Oak 1.58.0 compiles and tests successfully on Java 17, Javadocs
generation fails on Java 17 (but works as expected on Java 11).

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.58.0
-

Technical task

[OAK-6759] - Convert oak-blob-cloud-azure to OSGi R6 annotations

Bug

[OAK-10293] - AzureTarRevisionsTest fails occasionally
[OAK-10334] - Node.addMixin() may overwrite existing mixins
[OAK-10343] - 
AzureTarFilesTest.testCollectBlobReferencesWithGenerationFilter unreliable
[OAK-10359] - Unreliable test: 
TarFileTest.binaryReferencesIndexShouldBeTrimmedDownOnSweep
[OAK-10360] - unreliable test 
AzureTarFileTest.testWriteAndReadBinaryReferences
[OAK-10377] - Checked-out state of non-versionable nodes is not 
handled correctly

[OAK-10384] - Fix stripping of large indexed ordered properties
[OAK-10413] - DocumentStoreIndexerIT hanging
[OAK-10448] - org.apache.jackrabbit.api.security.user.Query must be 
a Consumer type
[OAK-10453] - Pipelined strategy: enforce size limit on memory 
taken by objects in the queue between download and transform thread
[OAK-10465] - Embed netty-transport-native-unix-common dependency 
in oak-segment-tar


Improvement

[OAK-9922] - segment-tar: parallel compaction
[OAK-10358] - Indexing job: push filtering of paths to MongoDB
[OAK-10399] - Automatically pick a merged index over multiple levels
[OAK-10423] - Improve logging of metrics in indexing job
[OAK-10427] - Clear cache on NodeDocumentCache close
[OAK-10429] - Implementation for IncrementalFFS
[OAK-10450] - Bump testcontainers dependency to v1.19.0
[OAK-10452] - Indexing job/regex filtering: getting ancestors nodes 
of filtered path incorrectly does a full col scan on Mongo

[OAK-10456] - oak-search-elastic: log index name when bulk update fails
[OAK-10458] - Indexing job: Make LZ4 the default compression 
algorithm in OAK
[OAK-10463] - Retrieve flatFileStore for indexing from 
baseFlatFileStore
[OAK-10475] - Expose the mongo connection in 
MongoDocumentNodeStoreBuilderBase


Task

[OAK-7182] - Make it possible to update Guava
[OAK-9491] - Address vulnerabilities found by dependency checker plugin
[OAK-10371] - oak-segment-azure/oak-blob-cloud-azure require 
provided Guava, embed it instead
[OAK-10374] - test coverage for modification of non-versioned node 
with jcr:isCheckedOut==false property

[OAK-10426] - oak-segment-azure: enable baseline check
[OAK-10430] - oak-*-azure: add to OSGi tests
[OAK-10433] - Throttle excessive warning log messages when 
reindexing environments with non-fatal issues in index definition
[OAK-10434] - oak-segment-azure/oak-blob-cloud-azure: update SDK 
dependencies

[OAK-10439] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.12
[OAK-10441] - oak-search-elastic embeds vulnerable SnakeYAML
[OAK-10442] - Lucene Index - node type inheritance is not properly 
working for aggregation
[OAK-10443] - refactor AbstractDataStoreService so that it doesn't 
need the statisticsProvider OSGi reference

[OAK-10445] - Cleanup logging (AbstractSharedCachingDataStore)
[OAK-10446] - Upgrade jackson-databind dependency to 2.15.2
[OAK-10447] - update Tomcat JDBC dependency to 9.0.80
[OAK-10449] - oak-solr-osgi embeds vulnerable Zookeeper
[OAK-10461] - oak-search-elastic does not build under Java 17


In addition to the above-mentioned changes, this release contains all
changes up to the previous release.

For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by SHA512 checksums and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https

[ANNOUNCE] Apache Jackrabbit 2.21.20 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.20. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.20

Introduction


This is Apache Jackrabbit(TM) 2.21.20, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.20 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

NOTE: this release disables RMI access in the standalone and webapp 
projects.

See https://issues.apache.org/jira/browse/JCR-4960 for more information.


Changes in Jackrabbit 2.21.20
-

Bug

[JCR-4940] - jackrabbit-jcr2spi is incompatible with Java 21

Task

[JCR-4951] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.16

[JCR-4969] - set baseline comparisonVersion to latest stable (2.20.12)
[JCR-4970] - it-osgi: fix package name
[JCR-4971] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.17

[JCR-4973] - Deprecate RMI support
[JCR-4974] - Update easymock dependency to 5.2.0
[JCR-4975] - update aws java sdk version to 1.12.560
[JCR-4976] - Update tomcat dependency to 9.0.80


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.22.17 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.22.17. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.22.17

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.22.17 is a patch release that contains fixes and
improvements over Oak 1.22. Jackrabbit Oak 1.22.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.


Changes in Oak 1.22.17
--

Technical task

[OAK-10415] - AbstractTwoNodeTest: make teardown more robust
[OAK-10416] - AbstractTwoNodeTest: ensure RDB fixture uses empty DB

Bug

[OAK-8711] - Queries with facets should not use traversal
[OAK-8863] - Oak-doc should cover BinaryUploadOptions usage
[OAK-10405] - document-store: potential NPE in AbstractTwoNodeTest 
teardown


Improvement

[OAK-9567] - Avoid NullPointerException in 
ReadWriteVersionManager.removeVersion
[OAK-9966] - Internal code calls Node.isCheckedOut and 
VersionManager.isCheckedOut

[OAK-9970] - Internal code calls LockManager.isLocked(String)
[OAK-10003] - Upgrade tika to 1.28.5
[OAK-10225] - Utility to rate limit writes in case async indexing 
is delayed


Task

[OAK-8659] - Deprecate support for lucene custom scorer
[OAK-9669] - Update commons-io dependency to 2.11.0
[OAK-10154] - Guava deprecations: set minimal logging level to 'error'
[OAK-10201] - oak-blob-plugins: exported packages need to be marked 
@internal

[OAK-10304] - log registration of invalid namespace names
[OAK-10316] - Importer exception always should mention path
[OAK-10349] - Update Tomcat dependency to 9.0.78
[OAK-10366] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.11
[OAK-10389] - remove commons-lang dependency
[OAK-10390] - Update commons-io dependency to 2.13.0
[OAK-10394] - Update commons-lang3 dependency to 3.13.0
[OAK-10395] - Update commons-codec dependency to 1.16.0
[OAK-10400] - auth-ldap/benchmarks: use default dependency for 
commons-lang3
[OAK-10401] - search-mt/solr-osgi: use default versions of 
commons-math3
[OAK-10402] - benchmarks: remove commons-math dependency (use math3 
instead)

[OAK-10403] - update Tomcat JDBC dependency to 8.5.92
[OAK-10404] - improve TarFilesTest.testCollectBlobReferences 
diagnostics

[OAK-10407] - run/lucene: update gson dependencies to 2.10.1
[OAK-10421] - Bump up minimal warning level for deprecated uses of 
java.security.Group to INFO



In addition to the above-mentioned changes, this release contains
all changes included up to the previous Apache Jackrabbit Oak 1.22.x 
release.


For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by a SHA512 checksums and a PGP
signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit 2.20.12 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.12. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.12

Introduction


This is Apache Jackrabbit(TM) 2.20.12, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.12 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.12
-

Bug

[JCR-4606] - standalone: logback log files created in wrong place
[JCR-4957] - jackrabbit-standalone: 2.21.18 breaks binary compatibility

Task

[JCR-4308] - update Jetty to 9.4.*
[JCR-4944] - upgrade to Tomcat 9.x
[JCR-4960] - Disable RMI by default
[JCR-4962] - Update h2db dependency to 2.2.220
[JCR-4963] - vfs-ext: update hadoop-hdfs-client dependency to 3.3.6
[JCR-4964] - update kotlin-stdlib dependency to 1.9.0
[JCR-4965] - webapp: remove Guava test dependency
[JCR-4966] - update aws java sdk version to 1.12.523


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.56.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.56.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.56.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.56.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

While Oak 1.54.0 compiles and tests successfully on Java 17, Javadocs
generation fails on Java 17 (but works as expected on Java 11).

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.56.0
-

Sub-task

[OAK-10362] - Create benchmark test
[OAK-10363] - Benchmark results
[OAK-10364] - Consolidate inheritance related automembership tests

Technical task

[OAK-7542] - oak-blob-*'s use of Guava File.fileTreeTraverser
[OAK-7549] - commons: avoid use of Guava beta APIs in FileIOUtils
[OAK-8684] - oak-core-spi: remove uses of Guava from exported API
[OAK-8717] - Remove deprecated Guava-based APIs
[OAK-10274] - oak-core-spi: remove Guava from public API
[OAK-10322] - oak-core: remove Guava from public API
[OAK-10323] - remove all remaining references of native Guava
[OAK-10368] - convert groovy sources to shaded guava
[OAK-10412] - AbstractTwoNodeTest: check preconditions in setup
[OAK-10415] - AbstractTwoNodeTest: make teardown more robust
[OAK-10416] - AbstractTwoNodeTest: ensure RDB fixture uses empty DB

Bug

[OAK-10181] - Flaky test: DataStoreBlobStoreStatsTest
[OAK-10353] - Elastic custom analyzer should ignore unsupported 
properties (eg: hidden, arrays)
[OAK-10372] - oak-search-elastic: similarity queries produce no 
relevant results
[OAK-10379] - DynamicGroupsTest#testCrossIDPMembership() fails 
occasionally
[OAK-10405] - document-store: potential NPE in AbstractTwoNodeTest 
teardown


Improvement

[OAK-9837] - Reference individual OSGi dependencies in version 
shipped with R7

[OAK-10003] - Upgrade tika to 1.28.5
[OAK-10318] - Improve AutoMembershipPrincipals#isInheritedMember
[OAK-10333] - Improved logging for queries that that traverse more 
than 10'000 nodes

[OAK-10357] - Path option for documentstore-check
[OAK-10365] - introduce mapping version in oak-search-elastic
[OAK-10367] - update org.apache.sling.testing.osgi-mock dependency

Task

[OAK-10272] - Reverse #OAK-10022
[OAK-10347] - Small util class for exporting a tree as flat file
[OAK-10366] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.11
[OAK-10369] - oak-segment-azure/oak-blob-cloud-azure leak Guava 
dependency

[OAK-10381] - DocumentStoreIndexerIT failures
[OAK-10385] - segment-azure: add javax.activation-api to test class 
path

[OAK-10386] - Bump netty dependency from 4.1.52.Final to 4.1.96.Final
[OAK-10389] - remove commons-lang dependency
[OAK-10390] - Update commons-io dependency to 2.13.0
[OAK-10391] - improve 
TarFilesTest.testCollectBlobReferencesWithGenerationFilter diagnostics

[OAK-10392] - Update (shaded) Guava to 32.1.2
[OAK-10394] - Update commons-lang3 dependency to 3.13.0
[OAK-10395] - Update commons-codec dependency to 1.16.0
[OAK-10396] - segment-aws: remove unused commons-lang3 dependency
[OAK-10397] - oak-benchmarks/oak-it-osgi: update commons-compress 
dependency to 1.23.0
[OAK-10400] - auth-ldap/benchmarks: use default dependency for 
commons-lang3
[OAK-10401] - search-mt/solr-osgi: use default versions of 
commons-math3
[OAK-10402] - benchmarks: remove commons-math dependency (use math3 
instead)

[OAK-10403] - update Tomcat JDBC dependency to 8.5.92
[OAK-10404] - improve TarFilesTest.testCollectBlobReferences 
diagnostics

[OAK-10407] - run/lucene: update gson dependencies to 2.10.1
[OAK-10414] - RDB*Store: update Derby dependency to 10.15.2.0


In addition to the above-mentioned changes, this release contains all
changes up to the previous release.

For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by SHA512 checksums and a
PGP signature that you can use to verify the authenticity of your
d

[ANNOUNCE] Apache Jackrabbit 2.21.19 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.19. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.19

Introduction


This is Apache Jackrabbit(TM) 2.21.19, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.19 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

NOTE: this release disables RMI access in the standalone and webapp 
projects.

See https://issues.apache.org/jira/browse/JCR-4960 for more information.


Changes in Jackrabbit 2.21.19
-

Bug

[JCR-4957] - jackrabbit-standalone: 2.21.18 breaks binary compatibility

Task

[JCR-4955] - set baseline comparisonVersion to latest stable (2.20.11)
[JCR-4959] - update Apache parent pom to version 30
[JCR-4960] - Disable RMI by default
[JCR-4962] - Update h2db dependency to 2.2.220
[JCR-4963] - vfs-ext: update hadoop-hdfs-client dependency to 3.3.6
[JCR-4964] - update kotlin-stdlib dependency to 1.9.0
[JCR-4965] - webapp: remove Guava test dependency
[JCR-4966] - update aws java sdk version to 1.12.523


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

CVE-2023-37895: Apache Jackrabbit RMI access can lead to RCE

[Julian Reschke]

Severity: critical

Affected versions:

- Apache Jackrabbit Webapp (jackrabbit-webapp) 2.21.0 before 2.21.18
- Apache Jackrabbit Webapp (jackrabbit-webapp) 1.0.0 before 2.20.11
- Apache Jackrabbit Standalone (jackrabbit-standalone and 
jackrabbit-standalone-components) 2.21.0 before 2.21.18
- Apache Jackrabbit Standalone (jackrabbit-standalone and 
jackrabbit-standalone-components) 1.0.0 before 2.20.11

Description:

Java object deserialization issue in Jackrabbit webapp/standalone on all 
platforms allows attacker to remotely execute code via RMIVersions up to 
(including) 2.20.10 (stable branch) and 2.21.17 (unstable branch) use the 
component "commons-beanutils", which contains a class that can be used for 
remote code execution over RMI.

Users are advised to immediately update to versions 2.20.11 or 2.21.18. Note 
that earlier stable branches (1.0.x .. 2.18.x) have been EOLd already and do 
not receive updates anymore.

In general, RMI support can expose vulnerabilities by the mere presence of an 
exploitable class on the classpath. Even if Jackrabbit itself does not contain 
any code known to be exploitable anymore, adding other components to your 
server can expose the same type of problem. We therefore recommend to disable 
RMI access altogether (see further below), and will discuss deprecating RMI 
support in future Jackrabbit releases.

How to check whether RMI support is enabledRMI support can be over an 
RMI-specific TCP port, and over an HTTP binding. Both are by default enabled in 
Jackrabbit webapp/standalone.

The native RMI protocol by default uses port 1099. To check whether it is 
enabled, tools like "netstat" can be used to check.

RMI-over-HTTP in Jackrabbit by default uses the path "/rmi". So when running 
standalone on port 8080, check whether an HTTP GET request on 
localhost:8080/rmi returns 404 (not enabled) or 200 (enabled). Note that the 
HTTP path may be different when the webapp is deployed in a container as 
non-root context, in which case the prefix is under the user's control.

Turning off RMIFind web.xml (either in JAR/WAR file or in unpacked web 
application folder), and remove the declaration and the mapping definition for 
the RemoteBindingServlet:

        
            RMI
            
org.apache.jackrabbit.servlet.remote.RemoteBindingServlet
        

        
            RMI
            /rmi
        

Find the bootstrap.properties file (in $REPOSITORY_HOME), and set

         rmi.enabled=false

    and also remove

         rmi.host
         rmi.port
         rmi.url-pattern

 If there is no file named bootstrap.properties in $REPOSITORY_HOME, it is 
located somewhere in the classpath. In this case, place a copy in 
$REPOSITORY_HOME and modify it as explained.

Credit:

Siebene@ (reporter)
Michael Dürig (other)
Manfred Baedke (other)

References:

https://lists.apache.org/list.html?us...@jackrabbit.apache.org
https://jackrabbit.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-37895

Timeline:

2023-06-30: Reported
2023-07-20: Release vote for unstable branch with fix
2023-07-20: Release vote for stable branch with fix
2023-07-24: unstable branch (2.21.18) released
2023-07-24: stable branch (2.20.11) released

[ANNOUNCE] Apache Jackrabbit Oak 1.54.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.54.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.54.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.54.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

While Oak 1.54.0 compiles and tests successfully on Java 17, Javadocs
generation fails on Java 17 (but works as expected on Java 11).

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.54.0
-

Technical task

[OAK-10197] - switch oak-blob-plugins to shaded guava
[OAK-10204] - switch oak-blob to shaded guava
[OAK-10236] - Update oak-segment-remote modules with shaded guava
[OAK-10237] - Update oak-blob* modules with shaded guava
[OAK-10238] - switch oak-search to shaded guava
[OAK-10239] - Update oak-lucene with shaded guava
[OAK-10240] - switch oak-solr to shaded guava
[OAK-10242] - switch oak-search-elastic to shaded guava
[OAK-10244] - oak-solr-osgi: remove Guava import decl
[OAK-10245] - Document OAK-10173
[OAK-10246] - Minor cleanup of unused imports, indention and whitespace
[OAK-10247] - oak-commons: remove Guava from public API
[OAK-10270] - Document limitation
[OAK-10276] - switch oak-upgrade to shaded guava
[OAK-10278] - switch oak-run-elastic to shaded guava
[OAK-10282] - switch oak-it to shaded guava
[OAK-10283] - switch oak-examples to shaded guava
[OAK-10284] - switch oak-benchmarks to shaded guava
[OAK-10287] - switch oak-benchmarks-lucene to shaded guava
[OAK-10290] - switch oak-benchmarks-elastic to shaded guava
[OAK-10292] - switch oak-benchmarks-solr to shaded guava
[OAK-10307] - oak-shaded-guava leaks original guava as transitive 
dependency

[OAK-10330] - oak-it-osgi: temporarily introduce Guava dependency again

Bug

[OAK-9660] - NullPointerException When Moving Transient node
[OAK-10226] - Elasticsearch custom analyzers fail when the files 
contain comments

[OAK-10241] - NPE while trying to get the BinaryDownload URI
[OAK-10243] - Flaky test in oak-blob-cloud-azure and oak-run
[OAK-10257] - NodeCounterMetricTest does not release resources
[OAK-10259] - oak-core tests running out of memory
[OAK-10263] - Inconsistent state in TarWriter when close() fails to 
write to Azure
[OAK-10268] - oak-search-elastic: propertyIndex=false fields cannot 
be used for sorting

[OAK-10280] - Occasional failure to start docker container
[OAK-10305] - oak-core should changes scope of annotation 
dependencies to provided

[OAK-10306] - Incorrect dependency scope for commons-math3
[OAK-10308] - Tests using MongoUtils may skip even if Docker is 
available
[OAK-10324] - oak-search-elastic: IN queries on boolean fields 
should not fail when one of the value cannot be parsed
[OAK-10338] - PipelinedMergeSortTaskTest is failing on Windows due 
to line end issues

[OAK-10340] - Child order not updated on source after move

New Feature

[OAK-10093] - Oak Blob Store support for SSE-C for AWS

Story

[OAK-10173] - Allow configured principals to impersonate any user

Improvement

[OAK-10211] - Rectify documentation for hybrid indexes
[OAK-10213] - Add new api in DocumentStore to handle bulk 
findAndUpdate operations

[OAK-10250] - Configurable suspend timeout
[OAK-10252] - Distinguish in oak-jackrabbit-api between provider 
and consumer type interfaces
[OAK-10253] - Option to only collect references when calling 
checkConsistency

[OAK-10256] - Principal documentation does not mention GroupPrincipal
[OAK-10261] - Query with OR clause with COALESCE function 
incorrectly interpreted

[OAK-10262] - Document ASCIIFolder and OakAnalyzer
[OAK-10267] - oak-search-elastic: index should be more lenient when 
a field cannot be converted to the mapped type
[OAK-10273] - Index-definition json created during oak-run reindex 
should not serialise index data
[OAK-10285] - MembershipProvider change log level to ERROR for 
cyclic membership
[OAK-10286] - AutoMembershipPrincipals.isInheritedMember add check 
for cyclic membership
[OAK-10294] - Indexing job: add new Pipelined Strategy for dumping 
Mongo contents in preparation for reindexing
[OAK-10303] - oak-search-elastic: remove 
propertyIndex/nodeScopeIndex from dynamicBoost tests

[OAK-10310] - Bump testcontainers dependency to 

[ANNOUNCE] Apache Jackrabbit 2.20.11 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.11. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.11

Introduction


This is Apache Jackrabbit(TM) 2.20.11, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.11 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.11
-

Sub-task

[JCR-4948] - core: beanutils leaks dependency to 
commons-collections in oak-core tests


Bug

[JCR-4949] - get rid of beanutils dependency

Task

[JCR-4925] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.15

[JCR-4932] - Update commons-io dependency to 2.12.0
[JCR-4933] - Update tomcat dependency to 8.5.88
[JCR-4936] - Update tomcat dependency to 8.5.89
[JCR-4937] - jcr-tests: get rid of duplicate XMLChar class
[JCR-4939] - Update commons-io dependency to 2.13.0
[JCR-4941] - Update tomcat dependency to 8.5.90
[JCR-4942] - spi-commons: bump minor version number of 
o.a.j.spi.commons.conversion



For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.18 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.18. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.18

Introduction


This is Apache Jackrabbit(TM) 2.21.18, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.18 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

NOTE: 2.21.17 was released from an incorrect SVN tag and actually 
contains version

2.21.16. This release contains what was supposed to go into 2.21.17.

Changes in Jackrabbit 2.21.18
-

Sub-task

[JCR-4948] - core: beanutils leaks dependency to 
commons-collections in oak-core tests


Bug

[JCR-4606] - standalone: logback log files created in wrong place
[JCR-4949] - get rid of beanutils dependency

Task

[JCR-4308] - update Jetty to 9.4.*
[JCR-4352] - Update lucene-core dependency to 3.6.2
[JCR-4925] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.15

[JCR-4932] - Update commons-io dependency to 2.12.0
[JCR-4933] - Update tomcat dependency to 8.5.88
[JCR-4936] - Update tomcat dependency to 8.5.89
[JCR-4937] - jcr-tests: get rid of duplicate XMLChar class
[JCR-4938] - update remaining copies of XMLChar.java with latest 
version from Xerces

[JCR-4939] - Update commons-io dependency to 2.13.0
[JCR-4941] - Update tomcat dependency to 8.5.90
[JCR-4942] - spi-commons: bump minor version number of 
o.a.j.spi.commons.conversion

[JCR-4944] - upgrade to Tomcat 9.x


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.22.16 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.22.16. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.22.16

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.22.16 is a patch release that contains fixes and
improvements over Oak 1.22. Jackrabbit Oak 1.22.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.


Changes in Oak 1.22.16
--

Technical task

[OAK-10175] - Reduce currently supported Guava range to 15 - 19

Bug

[OAK-9660] - NullPointerException When Moving Transient node

New Feature

[OAK-10093] - Oak Blob Store support for SSE-C for AWS
[OAK-10184] - oak-commons: Support multiple Compression methods

Task

[OAK-10086] - oak-core: bump up logging for deprecated Guava based 
APIs to ERROR

[OAK-10106] - Guava deprecations: set minimal logging level to 'warn'
[OAK-10156] - update Tomcat JDBC dependency to 8.5.87
[OAK-10157] - examples: update Tomcat dependency to 8.5.87
[OAK-10159] - Upgrade jackson-databind dependency to 2.13.5
[OAK-10160] - Update commons-codec dependency to 1.15
[OAK-10207] - oak-jcr: remove unused test dependency zip4j
[OAK-10220] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.10
[OAK-10275] - oak-upgrade: remove workaround for Java 1.6


In addition to the above-mentioned changes, this release contains
all changes included up to the previous Apache Jackrabbit Oak 1.22.x 
release.


For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by a SHA512 checksums and a PGP
signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit 2.16.x deprecated

[Julian Reschke]

Dear Jackrabbit developers and users,

the Apache Jackrabbit Team has decided to drop support and deprecate the 
2.16 branch of Apache Jackrabbit. Branch, tags and releases will still 
be available for future references, but will not show up on the download 
page anymore. Users are encouraged to upgrade to the latest stable versions.


See  for more information.

Best regards, Julian

[ANNOUNCE] Apache Jackrabbit 1.52.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.52.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.52.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.52.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

While Oak 1.52.0 compiles and tests successfully on Java 17, Javadocs
generation fails on Java 17 (but works as expected on Java 11).

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.52.0
-

Technical task

[OAK-7541] - SegmentCompactionIT's use of 
com.google.common.util.concurrent.Futures.dereference

[OAK-9989] - introduce oak-shaded-guava project
[OAK-10164] - oak-commons: prepare for switch to shaded guava
[OAK-10169] - improve output of test-assertions
[OAK-10170] - simplify usage of authorizableiterator
[OAK-10175] - Reduce currently supported Guava range to 15 - 19
[OAK-10176] - oak-shaded-guava: switch to latest Guava version
[OAK-10177] - adjust OSGi ITs and size limits for shaded guava 
inclusion

[OAK-10179] - switch oak-commons to shaded guava
[OAK-10180] - switch oak-core-spi to shaded guava
[OAK-10185] - oak-blob-cloud-azure - relax Guava import range
[OAK-10186] - switch oak-store-spi to shaded guava
[OAK-10192] - switch oak-query-spi to shaded guava
[OAK-10194] - switch oak-security-spi to shaded guava
[OAK-10195] - switch oak-store-composite to shaded guava
[OAK-10196] - switch oak-store-document to shaded guava
[OAK-10198] - switch oak-core to shaded guava
[OAK-10205] - switch oak-http to shaded guava
[OAK-10208] - switch oak-run-commons to shaded guava
[OAK-10215] - switch oak-run to shaded guava
[OAK-10216] - switch oak-jcr to shaded guava
[OAK-10218] - oak-it-osgi: avoid Guava dependency
[OAK-10219] - switch oak-pojosr to shaded guava
[OAK-10221] - switch oak-auth-external to shaded guava
[OAK-10227] - switch oak-auth-ldap to shaded guava
[OAK-10229] - switch oak-authorization-cug to shaded guava
[OAK-10230] - switch oak-authorization-principalbased to shaded guava
[OAK-10231] - switch oak-exercise to shaded guava
[OAK-10234] - Update oak-segment-tar with shaded guava

Bug

[OAK-10146] - oak-search-elastic: similarity search does not work 
for some nodes

[OAK-10151] - oak-auth-external tests fail with Guava 20
[OAK-10162] - Fix Version copier with preserveOnTarget to ignore 
diverged history
[OAK-10182] - datastore-copy cmd: checksum option does not write 
the file entirely
[OAK-10190] - Reusing Azure segment container hangs when primary 
location is not available
[OAK-10191] - Reusing Azure blob container hangs when primary 
location is not available


New Feature

[OAK-10130] - Add API to retrieve effective policies for a set of 
principals for a given path


Improvement

[OAK-10050] - Enable access to the secondary Azure blobstore 
service endpoint in Oak segment node store
[OAK-10135] - 
JackrabbitAccessControlManager.getEffectivePolicies(Set principals) 
should include ReadPolicy
[OAK-10141] - oak-search-elastic: relevance on queries involving 
dynamic boost sometimes differ from lucene

[OAK-10149] - Rebase may be expensive with many siblings
[OAK-10167] - Elastic bulk processor should fail when intermediate 
bulks fail

[OAK-10168] - Bump and align testcontainers dependency to v1.17.6
[OAK-10171] - datastore-copy cmd: add checksum validation
[OAK-10183] - large Bulk size for BulkProcessor sometimes lead to 
SocketTimeoutException
[OAK-10200] - 
CompositeAccessControlManager.getEffectivePolicies(String) should filter 
duplicate policies

[OAK-10210] - Prefetch breaks Fast Result Size
[OAK-10212] - Binary references file in the newly created archive 
might be missing

[OAK-10214] - Expose node counter value as a metric in Oak
[OAK-10223] - Introduce constant for the 'do-create-token' marker value
[OAK-10225] - Utility to rate limit writes in case async indexing 
is delayed


Task

[OAK-10106] - Guava deprecations: set minimal logging level to 'warn'
[OAK-10150] - Add a test for index purge command where the latest 
OOB index is disabled and the queries are served by a lower versioned index

[OAK-10156] - update Tomcat JDBC dependency to 8.5.87
[OAK-10157] - examples: update Tomcat dependency to 8.5.87
[OAK-10159] - Upgrade j

[ANNOUNCE] Apache Jackrabbit Oak 1.8.x deprecated

[Julian Reschke]

Dear Jackrabbit developers and users,

the Apache Jackrabbit Team has decided to drop support and deprecate the 
1.8 branch of Apache Jackrabbit Oak.  Branch, tags and releases will 
still be available for future references, but will not show up on the 
download page anymore. Users are encouraged to upgrade to the latest 
stable versions (currently 1.50.0, or 1.22.* for Java 8).


See  for more information.

Best regards, Julian

[ANNOUNCE] Apache Jackrabbit 2.20.10 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.10. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.10

Introduction


This is Apache Jackrabbit(TM) 2.20.10, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.10 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.10
-

Sub-task

[JCR-4857] - jackrabbit-it-osgi: remove reference to 
commons-collections


Bug

[JCR-4917] - spi-commons: NameParser is too picky (allow non-ASCII 
whitespace)


Task

[JCR-4908] - Update commons file-upload dependency to 1.5
[JCR-4909] - specify maven-rar-plugin dependency
[JCR-4910] - Update tomcat dependency to 8.5.86
[JCR-4913] - spi-commons: improve error messages for 
org.apache.jackrabbit.spi.commons.conversion.NameParser.parse

[JCR-4918] - vfs-ext: update hadoop-hdfs-client dependency to 3.3.5
[JCR-4919] - Update tomcat dependency to 8.5.87
[JCR-4920] - Remove maven-assembly-plugin dependency (use the one 
provided by Apache parent pom)
[JCR-4921] - remove surefire/failsafe dependencies (use the ones 
provided by Apache parent pom)
[JCR-4922] - Remove javadoc-plugin dependency (use the one provided 
by Apache parent pom)
[JCR-4923] - Remove release-plugin dependency (use the one provided 
by Apache parent pom)



For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.22.15 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.22.15. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.22.15

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.22.15 is a patch release that contains fixes and
improvements over Oak 1.22. Jackrabbit Oak 1.22.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.


Changes in Oak 1.22.15
--

Technical task

[OAK-10084] - oak-commons: bump up logging for deprecated Guava 
based APIs to ERROR
[OAK-10085] - oak-core-spi: bump up logging for deprecated Guava 
based APIs to ERROR


Bug

[OAK-9037] - bundle:manifest fails on Java 15
[OAK-9471] - Query for split documents by Revision GC times out
[OAK-9512] - PrefixPattern.matches(String) always returns false
[OAK-9513] - PrefixPattern ignores empty namespace prefix
[OAK-9560] - Javadoc build fails if using Java11
[OAK-9700] - RevisionGC may fail with NPE
[OAK-10051] - oak-run and oak-upgrade JARs incomplete 
(META-INF/MANIFEST.MF is missing the Main-Class entry)
[OAK-10078] - antrun for reactor pom fails due to removal of tasks 
function

[OAK-10090] - update antrun version for reactor pom
[OAK-10117] - oak-run console does not start up - 
CommandNameCompleter construction fails


Improvement

[OAK-9177] - Workaround for bug #426 in versions-maven-plugin
[OAK-9613] - Define API to retrieve parent or null for a given Item
[OAK-9618] - Use s.apache.org redirects for JCR specs/javadocs
[OAK-9800] - Update Maven Plugins and Apache Parent POM to version 29
[OAK-9819] - Improve Node.hasProperty/getProperty and 
Node.hasNode/getNode combinations
[OAK-10087] - TypeEditor: constraint exception for invalid child 
node should contain that node's effective type


Task

[OAK-8883] - Update jar plugin to 3.2.0
[OAK-9482] - upgrade httpclient to v 4.5.13
[OAK-9831] - Update spotbugs plugin to 4.7.1.0
[OAK-9832] - Update jacoco plugin to 0.8.8
[OAK-10002] - oak-core: bump up logging for deprecated Guava based 
APIs to INFO

[OAK-10032] - get rid of ant-run plugin dependency
[OAK-10040] - Update animal-sniffer dependency to 1.22
[OAK-10041] - Upgrade maven-bundle-plugin to 5.1.8
[OAK-10042] - Update checkstyle-plugin dependency to version 3.1.2
[OAK-10043] - Upgrade maven-versions-plugin to 2.14.1
[OAK-10045] - Upgrade gmavenplus-plugin to 1.13.1
[OAK-10046] - oak-it-osgi: remove unneeded workaround 
maven-resources-plugin
[OAK-10047] - oak-core: bump up logging for deprecated Guava based 
APIs to WARN

[OAK-10062] - consolidate and update groovy versions to 2.4.21
[OAK-10065] - avoid-use of groovy-all artefact
[OAK-10066] - update groovy dependency to 2.5.20
[OAK-10076] - Bump netty dependency from 4.1.68.Final to 4.1.86.Final
[OAK-10094] - Bump up warning level for deprecated uses of 
java.security.Group to ERROR

[OAK-10105] - Guava deprecations: set minimal logging level to 'info'
[OAK-10110] - add test coverage for FileIOUtils.TransformingComparator
[OAK-10122] - it-osgi: update commons-fileupload to 1.5
[OAK-10123] - solr-core: update commons-fileupload to 1.5
[OAK-10124] - upgrade httpclient/mime to 4.5.14
[OAK-10125] - upgrade httpcore to 4.4.16
[OAK-10138] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.9



In addition to the above-mentioned changes, this release contains
all changes included up to the previous Apache Jackrabbit Oak 1.22.x 
release.


For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by a SHA512 checksums and a PGP
signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jac

[ANNOUNCE] Apache Jackrabbit 2.21.16 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.16. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.16

Introduction


This is Apache Jackrabbit(TM) 2.21.16, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.16 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.16
-

Bug

[JCR-4907] - Javadocs have incorrect copyright date
[JCR-4917] - spi-commons: NameParser is too picky (allow non-ASCII 
whitespace)


Task

[JCR-4908] - Update commons file-upload dependency to 1.5
[JCR-4909] - specify maven-rar-plugin dependency
[JCR-4910] - Update tomcat dependency to 8.5.86
[JCR-4912] - set baseline comparisonVersion to latest stable (2.20.9)
[JCR-4913] - spi-commons: improve error messages for 
org.apache.jackrabbit.spi.commons.conversion.NameParser.parse

[JCR-4918] - vfs-ext: update hadoop-hdfs-client dependency to 3.3.5
[JCR-4919] - Update tomcat dependency to 8.5.87
[JCR-4922] - Remove javadoc-plugin dependency (use the one provided 
by Apache parent pom)
[JCR-4923] - Remove release-plugin dependency (use the one provided 
by Apache parent pom)



For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.50.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.50.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.50.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.50.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

While Oak 1.50.0 compiles and tests successfully on Java 17, Javadocs
generation fails on Java 17 (but works as expected on Java 11).

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.50.0
-

Technical task

[OAK-10007] - update Guava related deprecations with 'since' and 
'forRemoval' properties
[OAK-10084] - oak-commons: bump up logging for deprecated Guava 
based APIs to ERROR
[OAK-10085] - oak-core-spi: bump up logging for deprecated Guava 
based APIs to ERROR
[OAK-10109] - deprecate FileIOUtils.TransformingComparator with 
Guava Function parameter


Bug

[OAK-9827] - Flaky test: SplitPersistenceBlobTest
[OAK-9938] - oak-run GenerateVersionInconsistencyReport exception
[OAK-10081] - oak-run tests left over "blobs" (next to "src")
[OAK-10082] - Group.getMembers() needs to resolve inherited members 
of dynamic groups

[OAK-10090] - update antrun version for reactor pom
[OAK-10092] - doc-railroad project fails on Java 11; 
plexus-component-metadata needs update

[OAK-10095] - NullPointerException in FieldFactory.dateToLong
[OAK-10112] - avoid use of Guava Iterators.emptyIterator
[OAK-10117] - oak-run console does not start up - 
CommandNameCompleter construction fails

[OAK-10120] - SessionImpl.hasCapability is prone to NPE
[OAK-10136] - DynamicBoostLite scores matches on tags equally with 
matches on other fields

[OAK-10137] - Static variable referenced from a non-static context

New Feature

[OAK-10001] - Bump up minimal Java version to 11

Improvement

[OAK-10049] - Enable access to the secondary Azure blobstore 
service endpoint in Oak blobstore
[OAK-10087] - TypeEditor: constraint exception for invalid child 
node should contain that node's effective type

[OAK-10099] - DynamicSyncContext: skip warning for everyone group
[OAK-10102] - Disable lazy index download by default
[OAK-10114] - Node diff with many changes uses excessive memory
[OAK-10119] - Fix AzureJournalFileTest failures on slow Jenkins
[OAK-10121] - Extend SessionImpl.hasCapability to cover access 
control write operations
[OAK-10131] - ExternalGroupPrincipalProvider should return 
ItemBasedPrincipals if dynamic group option is enabled
[OAK-10132] - Duplication in XPathConditionVisitor and 
ImpersonationImpl

[OAK-10145] - Rate limit the log messages for IndexUpdate

Task

[OAK-10086] - oak-core: bump up logging for deprecated Guava based 
APIs to ERROR
[OAK-10098] - Oak Run - PurgeOldIndexVersion - Add support to auto 
purge ES indexes and delete remote ES indexes as well
[OAK-10101] - Improve exception message when retrieving String 
properties
[OAK-10103] - oak-store-document: remove deprecated 
SystemPropertySupplier

[OAK-10104] - Extend version consistency check
[OAK-10105] - Guava deprecations: set minimal logging level to 'info'
[OAK-10110] - add test coverage for FileIOUtils.TransformingComparator
[OAK-10111] - oak-search-elastic: add support for custom analyzers
[OAK-10113] - Lower error to warn in findUncachedWithRetry, to 
clarify the severity
[OAK-10118] - Inconsistency in 'order by' handling of missing field 
between Lucene / Elastic

[OAK-10122] - it-osgi: update commons-fileupload to 1.5
[OAK-10123] - solr-core: update commons-fileupload to 1.5
[OAK-10124] - upgrade httpclient/mime to 4.5.14
[OAK-10125] - upgrade httpcore to 4.4.16
[OAK-10126] - Extend consistency check to cover jcr:predecessors 
and jcr:successors

[OAK-10128] - Disable coverage check for oak-jcr integration tests
[OAK-10129] - Disable Sonar checks on PRs from forks - take 2
[OAK-10133] - Fix AzureJournalFileTest failing on slow Jenkins
[OAK-10134] - Update Oak GitHub actions
[OAK-10138] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.9
[OAK-10144] - allow Javadoc errors on oak-run(-*)

Documentation

[OAK-10069] - Best practices on how to setup access control 
external identities
[OAK-10107] - update javdoc of class 
org.apache.jackrabbit.oak.plugins.nodetype.write.ReadWriteNodeTypeManager



In addition to the abov

[ANNOUNCE] Apache Jackrabbit 2.20.9 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.9. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.9

Introduction


This is Apache Jackrabbit(TM) 2.20.9, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.9 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.9


Task

[JCR-4868] - Update mockito dependency to 4.9.0
[JCR-4877] - Update httpclient/mime dependencies to 4.5.14
[JCR-4878] - Javadoc fixes
[JCR-4879] - update checkstyle-plugin dependency to 3.2.0
[JCR-4880] - Update javadoc-plugin dependency to 3.4.1
[JCR-4881] - Update maven-jar-plugin to 3.3.0
[JCR-4882] - Update animal-sniffer plugin dependency to 1.22
[JCR-4883] - Update pmd-plugin dependency to 3.19.0
[JCR-4884] - Update spotbugs-maven-plugin to 4.7.3.0
[JCR-4885] - update Apache parent pom to version 28
[JCR-4886] - Update Jackrabbit trunk to Oak 1.46.0
[JCR-4888] - update Apache parent pom to version 29
[JCR-4889] - Update javacc-maven-plugin to version 3.0.1
[JCR-4893] - Update mockito dependency to 4.11.0
[JCR-4894] - webapp: update htmlunit dependency to 2.69.0
[JCR-4895] - update aws java sdk version to 1.12.383
[JCR-4896] - Update easymock dependency to 5.1.0
[JCR-4897] - update kotlin-stdlib dependency to 1.8.0
[JCR-4898] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.14

[JCR-4899] - Update tomcat dependency to 8.5.85
[JCR-4900] - Update oak-jackrabbit-api.version.implemented in trunk 
and 2.20 to Oak 1.48.0

[JCR-4901] - webapp: update htmlunit dependency to 2.70.0
[JCR-4903] - update checkstyle-plugin dependency to 3.2.1
[JCR-4905] - Update pmd-plugin dependency to 3.20.0


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.15 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.15. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.15

Introduction


This is Apache Jackrabbit(TM) 2.21.15, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.15 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.15
-

Task

[JCR-4878] - Javadoc fixes
[JCR-4879] - update checkstyle-plugin dependency to 3.2.0
[JCR-4880] - Update javadoc-plugin dependency to 3.4.1
[JCR-4881] - Update maven-jar-plugin to 3.3.0
[JCR-4882] - Update animal-sniffer plugin dependency to 1.22
[JCR-4883] - Update pmd-plugin dependency to 3.19.0
[JCR-4884] - Update spotbugs-maven-plugin to 4.7.3.0
[JCR-4885] - update Apache parent pom to version 28
[JCR-4886] - Update Jackrabbit trunk to Oak 1.46.0
[JCR-4888] - update Apache parent pom to version 29
[JCR-4889] - Update javacc-maven-plugin to version 3.0.1
[JCR-4891] - set baseline comparisonVersion to latest stable (2.20.8)
[JCR-4893] - Update mockito dependency to 4.11.0
[JCR-4894] - webapp: update htmlunit dependency to 2.69.0
[JCR-4895] - update aws java sdk version to 1.12.383
[JCR-4896] - Update easymock dependency to 5.1.0
[JCR-4897] - update kotlin-stdlib dependency to 1.8.0
[JCR-4898] - Update oak-jackrabbit-api.version.used in trunk and 
2.20 to Oak 1.22.14

[JCR-4899] - Update tomcat dependency to 8.5.85
[JCR-4900] - Update oak-jackrabbit-api.version.implemented in trunk 
and 2.20 to Oak 1.48.0

[JCR-4901] - webapp: update htmlunit dependency to 2.70.0
[JCR-4903] - update checkstyle-plugin dependency to 3.2.1
[JCR-4905] - Update pmd-plugin dependency to 3.20.0


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.48.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.48.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.48.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.48.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

While Oak 1.48.0 compiles and tests successfully on Java 17, Javadocs
generation fails on Java 17 (but works as expected on Java 8).

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.48.0
-

Technical task

[OAK-10038] - CompositeStoreIT: add workaround for potential NPE in 
test

[OAK-10039] - CompositeTestSupport: improve diagnostics

Bug

[OAK-10022] - ReadOnlyFileStore#collectBlobReferences throws 
NullPointerException if azure blob with binary references is missing in 
the tar directory

[OAK-10033] - Conditions on dates use the wrong range
[OAK-10048] - DocumentStoreIndexerBase#buildFlatFileStore outputs 
the wrong path when FlatFileSplitter used
[OAK-10051] - oak-run and oak-upgrade JARs incomplete 
(META-INF/MANIFEST.MF is missing the Main-Class entry)

[OAK-10063] - AsyncIndexUpdate - Logger not printing complete message
[OAK-10067] - ExternalGroupPrincipalProvider does not resolve 
inherited groups that cross IDP boundaries
[OAK-10078] - antrun for reactor pom fails due to removal of tasks 
function
[OAK-10079] - oak-run-commons tests left over: empty "split" folder 
(next to "src")


New Feature

[OAK-10056] - Provide support for Jakarta Region for AWS S3

Improvement

[OAK-9800] - Update Maven Plugins and Apache Parent POM to version 29
[OAK-10031] - Remove unmerged branches and collisions in batches
[OAK-10034] - Periodically clean up unmerged branch commits and 
collision markers

[OAK-10054] - Improved trace level logging of JCR method calls
[OAK-10055] - Auto refreshing IndexTracker every hour causes online 
reindexing to fail
[OAK-10061] - WARN when for an external group a local group with 
the same name is already present

[OAK-10071] - Consistently filter duplicate authorizables in iterators
[OAK-10074] - AutoMembershipProvider consistency with 
ExternalPrincipalProvider


Task

[OAK-10040] - Update animal-sniffer dependency to 1.22
[OAK-10041] - Upgrade maven-bundle-plugin to 5.1.8
[OAK-10042] - Update checkstyle-plugin dependency to version 3.1.2
[OAK-10043] - Upgrade maven-versions-plugin to 2.14.1
[OAK-10044] - Javadoc fixes for JDK 11 compat
[OAK-10045] - Upgrade gmavenplus-plugin to 1.13.1
[OAK-10046] - oak-it-osgi: remove unneeded workaround 
maven-resources-plugin
[OAK-10047] - oak-core: bump up logging for deprecated Guava based 
APIs to WARN

[OAK-10057] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.8
[OAK-10059] - webapp: avoid use of Jackrabbit's transitive 
commons-collections dependency

[OAK-10062] - consolidate and update groovy versions to 2.4.21
[OAK-10065] - avoid-use of groovy-all artefact
[OAK-10066] - update groovy dependency to 2.5.20
[OAK-10073] - Additional tests combining dynamic groups and 
automembership

[OAK-10076] - Bump netty dependency from 4.1.68.Final to 4.1.86.Final


In addition to the above-mentioned changes, this release contains all
changes up to the previous release.

For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by SHA512 checksums and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Founda

[ANNOUNCE] Apache Jackrabbit 2.21.14 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.14. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.14

Introduction


This is Apache Jackrabbit(TM) 2.21.14, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.14 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.14
-

Sub-task

[JCR-4857] - jackrabbit-it-osgi: remove reference to 
commons-collections

[JCR-4859] - jcr2spi: add test coverage for LinkedEntries
[JCR-4862] - jackrabbit-jcr2spi: Upgrade LinkedEntries to 
commons-collections4

[JCR-4863] - parent: remove commons-collections reference

Task

[JCR-4608] - Upgrade to commons-collections4
[JCR-4858] - webapp: update htmlunit dependency to 2.65.1
[JCR-4860] - relax jackrabbit-api version requirements where not needed
[JCR-4861] - enable unit tests in jcr2spi
[JCR-4865] - webapp: update htmlunit dependency to 2.66.0
[JCR-4866] - Update mockito dependency to 4.8.1
[JCR-4867] - set baseline comparisonVersion to latest stable (2.20.7)
[JCR-4868] - Update mockito dependency to 4.9.0
[JCR-4870] - webapp: update htmlunit dependency to 2.67.0
[JCR-4871] - Update tomcat dependency to 8.5.84
[JCR-4872] - update aws java sdk version to 1.12.349
[JCR-4873] - Update httpcore dependency to 4.4.16
[JCR-4874] - Update easymock dependency to 5.0.1


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit FileVault 3.6.8 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit FileVault 3.6.8. The release is available for download at:

 https://jackrabbit.apache.org/jcr/downloads.html#vlt

See the full release notes below for details about this release:

Release Notes -- Apache Jackrabbit FileVault -- Version 3.6.8

Introduction

The FileVault introduces a JCR repository to filesystem mapping. The mapping
is exposed by an API and used by the "FileVault Content Packages" which 
allow to

create portable packages of repository content.

The Vault Command Line Interface aka "vlt" provides a subversion like
utility to work and develop with repository content.

Changes in Jackrabbit FileVault 3.6.8
--

Release Notes - Jackrabbit FileVault - Version 3.6.8
This version requires Java 8
The bundles are backwards compatible with Oak 1.8 and Jackrabbit 2.16

Bug
* [JCRVLT-674] - dependency-check issues while building master branch

Improvement
* [JCRVLT-672] - Provide a Version comparison function complying to 
Maven version ordering specification
* [JCRVLT-673] - AggregateImpl: do not collect & sort nodes that 
will be skipped anyway


Task
* [JCRVLT-670] - remove (non-test) dependency to commons-collections4


Changes in Jackrabbit FileVault 3.6.6
--

Release Notes - Jackrabbit FileVault - Version 3.6.6
This version requires Java 8
The bundles are backwards compatible with Oak 1.8 and Jackrabbit 2.16

Bug
* [JCRVLT-658] - Importer fails for invalid namespace names (ones 
not containing a colon)

* [JCRVLT-662] - JcrPackageRegistry.remove() leaks temp file
* [JCRVLT-664] - Potential NPE in 
JcrNodeTypeMetaDataImpl.fulfillsNodeDefinition


Improvement
* [JCRVLT-661] - Document serialization of authorizables and access 
control lists in JR2/Oak
* [JCRVLT-666] - improve performance of 
DefaultWorkspaceFilter.dumpCoverage (Session variant)

* [JCRVLT-667] - Tree: fix java warnings re generics

Task
* [JCRVLT-652] - Enforce update of the release notes file prior release


Changes in Jackrabbit FileVault 3.6.4
--

Release Notes - Jackrabbit FileVault - Version 3.6.4
This version requires Java 8
The bundles are backwards compatible with Oak 1.8 and Jackrabbit 2.16

Bug
* [JCRVLT-584] - Forcing UUID on packages may break previously 
installable packages

* [JCRVLT-598] - need IdConflictPolicy compatible with 3.5.0 behavior
* [JCRVLT-620] - False positive in validator jackrabbit-filter: 
Found orphaned filter entries for include patterns only covering 
directories (nt:folder)
* [JCRVLT-637] - Validation fails for non-docview xml files 
serialized as extended file aggregates
* [JCRVLT-646] - Potential 
javax.jcr.nodetype.ConstraintViolationException while deserializing 
extended file aggregates
* [JCRVLT-650] - OSGi config for default id conflict policy not 
correctly applied


Improvement
* [JCRVLT-612] - Enable Matomo Web Analytics
* [JCRVLT-623] - Validate that DocView values for a specific type 
are correct serializations (i.e. are a string which can be converted 
back to the given type)
* [JCRVLT-624] - Provide methods for writing docview XML from 
DocViewNode2 and DocViewProperty2
* [JCRVLT-628] - Wrong type information emitted for undefined 
DocViewProperty type
* [JCRVLT-634] - Make sure that vault-cli contains all necessary 
dependencies
* [JCRVLT-638] - Importing empty multivalue property does no longer 
work
* [JCRVLT-639] - jackrabbit-docviewparser: Don't fail for 
undeclared prefixes in file name by default

* [JCRVLT-640] - RCP bundle: Get rid of some Sling dependencies
* [JCRVLT-643] - Provide XSD for filter.xml
* [JCRVLT-644] - Import of package with not well-formed DocViews 
behaves differently since 3.6.0 for isStrict = false
* [JCRVLT-648] - Don't treat javax.jcr.InvalidItemStateException as 
transient during package import
* [JCRVLT-649] - Improve logging of errors in the ActivityLog and 
ProgressTracker


Task
* [JCRVLT-597] - Update commons-io dependency to 2.11.0

Changes in Jackrabbit FileVault 3.6.0
--

Release Notes - Jackrabbit FileVault - Version 3.6.0
This version requires Java 8
The bundles are backwards compatible with Oak 1.8 and Jackrabbit 2.16

Bug
* [JCRVLT-457] - scm element in pom.xml removed during release:prepare
* [JCRVLT-588] - potential issue with symlinks in path for install 
cache

* [JCRVLT-589] - PackageInstallIT leaves test files in tmp folder
* [JCRVLT-605] - Don't set/overwrite excluded protected properties 
during import

* [JCRVLT-606] - Potential NPE in PackageManager.rewrap()

Improvement
* [JCRVLT-357] - Split up DocViewSaxImporter: Separate parsing from 
importing
* [JCRVLT-559] - jackrabbit-nodetypes validator: Support CNDs 
contained in package

* [

[ANNOUNCE] Apache Jackrabbit 2.20.8 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.8. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.8

Introduction


This is Apache Jackrabbit(TM) 2.20.8, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.8 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.8


Sub-task

[JCR-4844] - webapp: remove usage of commons-collections
[JCR-4845] - jackrabbit-standalone: Upgrade to commons-collections4
[JCR-4846] - jackrabbit-spi-commons: Upgrade to commons-collections4
[JCR-4847] - jackrabbit-core: Upgrade to commons-collections4
[JCR-4850] - consolidate commons-beanutils versions
[JCR-4852] - jackrabbit-jcr2spi: Upgrade to commons-collections4 
(except for ChildNodeEntriesImpl)
[JCR-4854] - factor out ChildNodeEnriesImpl.LinkedList for better 
encapsulation

[JCR-4859] - jcr2spi: add test coverage for LinkedEntries
[JCR-4862] - jackrabbit-jcr2spi: Upgrade LinkedEntries to 
commons-collections4

[JCR-4863] - parent: remove commons-collections reference

Task

[JCR-4608] - Upgrade to commons-collections4
[JCR-4858] - webapp: update htmlunit dependency to 2.65.1
[JCR-4860] - relax jackrabbit-api version requirements where not needed
[JCR-4861] - enable unit tests in jcr2spi
[JCR-4865] - webapp: update htmlunit dependency to 2.66.0
[JCR-4866] - Update mockito dependency to 4.8.1
[JCR-4870] - webapp: update htmlunit dependency to 2.67.0
[JCR-4871] - Update tomcat dependency to 8.5.84
[JCR-4872] - update aws java sdk version to 1.12.349
[JCR-4873] - Update httpcore dependency to 4.4.16
[JCR-4874] - Update easymock dependency to 5.0.1


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.14 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.14. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.14

Introduction


This is Apache Jackrabbit(TM) 2.21.14, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.14 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.14
-

Sub-task

[JCR-4857] - jackrabbit-it-osgi: remove reference to 
commons-collections

[JCR-4859] - jcr2spi: add test coverage for LinkedEntries
[JCR-4862] - jackrabbit-jcr2spi: Upgrade LinkedEntries to 
commons-collections4

[JCR-4863] - parent: remove commons-collections reference

Task

[JCR-4608] - Upgrade to commons-collections4
[JCR-4858] - webapp: update htmlunit dependency to 2.65.1
[JCR-4860] - relax jackrabbit-api version requirements where not needed
[JCR-4861] - enable unit tests in jcr2spi
[JCR-4865] - webapp: update htmlunit dependency to 2.66.0
[JCR-4866] - Update mockito dependency to 4.8.1
[JCR-4867] - set baseline comparisonVersion to latest stable (2.20.7)
[JCR-4868] - Update mockito dependency to 4.9.0
[JCR-4870] - webapp: update htmlunit dependency to 2.67.0
[JCR-4871] - Update tomcat dependency to 8.5.84
[JCR-4872] - update aws java sdk version to 1.12.349
[JCR-4873] - Update httpcore dependency to 4.4.16
[JCR-4874] - Update easymock dependency to 5.0.1


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.20.7 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.7. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.7

Introduction


This is Apache Jackrabbit(TM) 2.20.7, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.7 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.7


Bug

[JCR-4799] - jackrabbit.client.useSystemProperties undone by SSL 
config: client certificates no longer work
[JCR-4814] - FileDataStore: File.renameTo sometimes fails to move 
temporary file to data record location


Improvement

[JCR-4833] - avoid bundle warning about private references 
[org.apache.commons.cli]
[JCR-4849] - spi: document Name.toString() restrictions with 
respect to invalid namespace names


Test

[JCR-4831] - add test coverage for behavior when new Oak query 
features are used
[JCR-4837] - add test for 'Removal of version of a node should 
remove associated labels'


Task

[JCR-4741] - add test coverage for mandatory non-residual child nodes
[JCR-4804] - Update Tika dependency to 2.4.1
[JCR-4805] - Update h2db dependency to 2.1.214
[JCR-4806] - Update tomcat dependency to 8.5.81
[JCR-4812] - Update Jackrabbit trunk to Oak 1.44.0
[JCR-4815] - Update mockito dependency to 4.6.1
[JCR-4816] - webapp: update htmlunit dependency to 2.63.0
[JCR-4817] - Update aws java sdk version to 1.12.272
[JCR-4818] - Update to jacoco version 0.8.8
[JCR-4819] - Update spotbugs-maven-plugin to 4.7.1.1
[JCR-4820] - Update maven-assembly-plugin to 3.4.2
[JCR-4821] - Update javadoc-plugin dependency to 3.4.0
[JCR-4822] - Update pmd-plugin dependency to 3.17.0
[JCR-4823] - Update war-plugin dependency to 3.3.2
[JCR-4824] - Update antrun plugin dependency to 3.1.0
[JCR-4825] - Update to maven bundle plugin to 5.1.8
[JCR-4826] - Update maven-jar-plugin to 3.2.2
[JCR-4827] - Update animal-sniffer dependency to 1.21
[JCR-4828] - Update build-helper-maven-plugin to version 3.3.0
[JCR-4829] - Update com.google.guava to 31.1
[JCR-4834] - Update tomcat dependency to 8.5.82
[JCR-4835] - Update mockito dependency to 4.7.0
[JCR-4838] - Update aws java sdk version to 1.12.305
[JCR-4839] - Update problematic transitive dependencies in 
jackrabbit-vfs-ext

[JCR-4840] - Update mockito dependency to 4.8.0
[JCR-4841] - webapp: update htmlunit dependency to 2.64.0
[JCR-4842] - it-osgi: update felix.framework to 7.0.5
[JCR-4843] - remove json-simple dependency from webapp
[JCR-4851] - Update aws java sdk version to 1.12.312
[JCR-4853] - add test coverage for creating nodes using expanded names
[JCR-4856] - Update tomcat dependency to 8.5.83

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit 2.21.13 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.13. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.13

Introduction


This is Apache Jackrabbit(TM) 2.21.13, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.13 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.13
-

Sub-task

[JCR-4844] - webapp: remove usage of commons-collections
[JCR-4845] - jackrabbit-standalone: Upgrade to commons-collections4
[JCR-4846] - jackrabbit-spi-commons: Upgrade to commons-collections4
[JCR-4847] - jackrabbit-core: Upgrade to commons-collections4
[JCR-4850] - consolidate commons-beanutils versions
[JCR-4852] - jackrabbit-jcr2spi: Upgrade to commons-collections4 
(except for ChildNodeEntriesImpl)
[JCR-4854] - factor out ChildNodeEnriesImpl.LinkedList for better 
encapsulation


Improvement

[JCR-4833] - avoid bundle warning about private references 
[org.apache.commons.cli]
[JCR-4849] - spi: document Name.toString() restrictions with 
respect to invalid namespace names


Test

[JCR-4831] - add test coverage for behavior when new Oak query 
features are used
[JCR-4837] - add test for 'Removal of version of a node should 
remove associated labels'


Task

[JCR-4834] - Update tomcat dependency to 8.5.82
[JCR-4835] - Update mockito dependency to 4.7.0
[JCR-4838] - Update aws java sdk version to 1.12.305
[JCR-4839] - Update problematic transitive dependencies in 
jackrabbit-vfs-ext

[JCR-4840] - Update mockito dependency to 4.8.0
[JCR-4841] - webapp: update htmlunit dependency to 2.64.0
[JCR-4842] - it-osgi: update felix.framework to 7.0.5
[JCR-4843] - remove json-simple dependency from webapp
[JCR-4851] - Update aws java sdk version to 1.12.312
[JCR-4853] - add test coverage for creating nodes using expanded names
[JCR-4856] - Update tomcat dependency to 8.5.83


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.16.10 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.16.10. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.16.10

Introduction


This is Apache Jackrabbit(TM) 2.16.10, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.16.10 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.16.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.

Changes in Jackrabbit 2.16.10
-

Task

[JCR-4734] - Update tomcat dependency to 8.5.72
[JCR-4735] - webapp: update htmlunit dependency to 2.54.0
[JCR-4736] - Update commons-cli dependency to 1.5
[JCR-4738] - add tests for setPrimaryType() with expanded name
[JCR-4739] - avoid use of deprecated API in NodeTypeTest
[JCR-4740] - add test coverage for mandatory residual child nodes
[JCR-4745] - Update tomcat dependency to 8.5.73
[JCR-4746] - Update mockito dependency to 4.1.0
[JCR-4747] - webapp: update htmlunit dependency to 2.55.0
[JCR-4749] - IdURICache: improve diagnostics when workspaceUri does 
not match

[JCR-4751] - Update httpcore dependency to 4.4.15
[JCR-4752] - Update h2db dependency to 2.0.202
[JCR-4756] - Update h2db dependency to 2.0.206
[JCR-4761] - Update mockito dependency to 4.3.1
[JCR-4762] - Update slf4j dependency to 1.7.35
[JCR-4765] - Update h2db dependency to 2.1.210
[JCR-4774] - fix jackrabbit-it-osgi logging config
[JCR-4775] - fix dangling javadoc links for Apache HTTP libs
[JCR-4776] - use slf4j-reload4j instead of slf4-log4j12
[JCR-4777] - Update Logback version to 1.2.11
[JCR-4778] - Update slf4j dependency to 1.7.36
[JCR-4779] - Update mockito dependency to 4.4.0
[JCR-4780] - webapp: update htmlunit dependency to 2.60.0
[JCR-4781] - Update tomcat dependency to 8.5.78
[JCR-4782] - Update h2db dependency to 2.1.212
[JCR-4783] - it-osgi: update felix.framework to 7.0.3
[JCR-4789] - webapp: update htmlunit dependency to 2.61.0
[JCR-4790] - Update mockito dependency to 4.5.1
[JCR-4791] - Update aws java sdk version to 1.12.223
[JCR-4792] - Update tomcat dependency to 8.5.79
[JCR-4793] - Update mockito dependency to 4.6.0
[JCR-4794] - it-osgi: update felix.framework to 7.0.4
[JCR-4810] - Update Tika dependency in branch 2.16 to 1.28.4


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.16.10 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.16.10. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.16.10

Introduction


This is Apache Jackrabbit(TM) 2.16.10, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.16.10 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.16.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.

Changes in Jackrabbit 2.16.10
-

Task

[JCR-4734] - Update tomcat dependency to 8.5.72
[JCR-4735] - webapp: update htmlunit dependency to 2.54.0
[JCR-4736] - Update commons-cli dependency to 1.5
[JCR-4738] - add tests for setPrimaryType() with expanded name
[JCR-4739] - avoid use of deprecated API in NodeTypeTest
[JCR-4740] - add test coverage for mandatory residual child nodes
[JCR-4745] - Update tomcat dependency to 8.5.73
[JCR-4746] - Update mockito dependency to 4.1.0
[JCR-4747] - webapp: update htmlunit dependency to 2.55.0
[JCR-4749] - IdURICache: improve diagnostics when workspaceUri does 
not match

[JCR-4751] - Update httpcore dependency to 4.4.15
[JCR-4752] - Update h2db dependency to 2.0.202
[JCR-4756] - Update h2db dependency to 2.0.206
[JCR-4761] - Update mockito dependency to 4.3.1
[JCR-4762] - Update slf4j dependency to 1.7.35
[JCR-4765] - Update h2db dependency to 2.1.210
[JCR-4774] - fix jackrabbit-it-osgi logging config
[JCR-4775] - fix dangling javadoc links for Apache HTTP libs
[JCR-4776] - use slf4j-reload4j instead of slf4-log4j12
[JCR-4777] - Update Logback version to 1.2.11
[JCR-4778] - Update slf4j dependency to 1.7.36
[JCR-4779] - Update mockito dependency to 4.4.0
[JCR-4780] - webapp: update htmlunit dependency to 2.60.0
[JCR-4781] - Update tomcat dependency to 8.5.78
[JCR-4782] - Update h2db dependency to 2.1.212
[JCR-4783] - it-osgi: update felix.framework to 7.0.3
[JCR-4789] - webapp: update htmlunit dependency to 2.61.0
[JCR-4790] - Update mockito dependency to 4.5.1
[JCR-4791] - Update aws java sdk version to 1.12.223
[JCR-4792] - Update tomcat dependency to 8.5.79
[JCR-4793] - Update mockito dependency to 4.6.0
[JCR-4794] - it-osgi: update felix.framework to 7.0.4
[JCR-4810] - Update Tika dependency in branch 2.16 to 1.28.4


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.12 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.12. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:

Release Notes -- Apache Jackrabbit -- Version 2.21.12

Introduction


This is Apache Jackrabbit(TM) 2.21.12, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.12 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.12
-

Bug

[JCR-4799] - jackrabbit.client.useSystemProperties undone by SSL 
config: client certificates no longer work

[JCR-4808] - 'pedantic' profile should run integration tests
[JCR-4814] - FileDataStore: File.renameTo sometimes fails to move 
temporary file to data record location


Task

[JCR-4741] - add test coverage for mandatory non-residual child nodes
[JCR-4804] - Update Tika dependency to 2.4.1
[JCR-4805] - Update h2db dependency to 2.1.214
[JCR-4806] - Update tomcat dependency to 8.5.81
[JCR-4809] - set baseline comparisonVersion to latest stable (2.20.6)
[JCR-4812] - Update Jackrabbit trunk to Oak 1.44.0
[JCR-4815] - Update mockito dependency to 4.6.1
[JCR-4816] - webapp: update htmlunit dependency to 2.63.0
[JCR-4817] - Update aws java sdk version to 1.12.272
[JCR-4818] - Update to jacoco version 0.8.8
[JCR-4819] - Update spotbugs-maven-plugin to 4.7.1.1
[JCR-4820] - Update maven-assembly-plugin to 3.4.2
[JCR-4821] - Update javadoc-plugin dependency to 3.4.0
[JCR-4822] - Update pmd-plugin dependency to 3.17.0
[JCR-4823] - Update war-plugin dependency to 3.3.2
[JCR-4824] - Update antrun plugin dependency to 3.1.0
[JCR-4825] - Update to maven bundle plugin to 5.1.8
[JCR-4826] - Update maven-jar-plugin to 3.2.2
[JCR-4827] - Update animal-sniffer dependency to 1.21
[JCR-4828] - Update build-helper-maven-plugin to version 3.3.0
[JCR-4829] - Update com.google.guava to 31.1


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.20.6 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.6. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.6

Introduction


This is Apache Jackrabbit(TM) 2.20.6, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.6 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.6


Bug

[JCR-4766] - JcrRemotingServlet should use 'application/json' media 
type for JSON response


Task

[JCR-4764] - Update Tika dependency to 2.3.0
[JCR-4765] - Update h2db dependency to 2.1.210
[JCR-4774] - fix jackrabbit-it-osgi logging config
[JCR-4775] - fix dangling javadoc links for Apache HTTP libs
[JCR-4776] - use slf4j-reload4j instead of slf4-log4j12
[JCR-4777] - Update Logback version to 1.2.11
[JCR-4778] - Update slf4j dependency to 1.7.36
[JCR-4779] - Update mockito dependency to 4.4.0
[JCR-4780] - webapp: update htmlunit dependency to 2.60.0
[JCR-4781] - Update tomcat dependency to 8.5.78
[JCR-4782] - Update h2db dependency to 2.1.212
[JCR-4783] - it-osgi: update felix.framework to 7.0.3
[JCR-4787] - Update Tika dependency to 2.4.0
[JCR-4789] - webapp: update htmlunit dependency to 2.61.0
[JCR-4790] - Update mockito dependency to 4.5.1
[JCR-4791] - Update aws java sdk version to 1.12.223
[JCR-4792] - Update tomcat dependency to 8.5.79
[JCR-4793] - Update mockito dependency to 4.6.0
[JCR-4794] - it-osgi: update felix.framework to 7.0.4

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.11 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.11. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.11

Introduction


This is Apache Jackrabbit(TM) 2.21.11, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.11 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.11
-

Bug

[JCR-4766] - JcrRemotingServlet should use 'application/json' media 
type for JSON response


Task

[JCR-4764] - Update Tika dependency to 2.3.0
[JCR-4765] - Update h2db dependency to 2.1.210
[JCR-4771] - set baseline comparisonVersion to latest stable (2.20.5)
[JCR-4774] - fix jackrabbit-it-osgi logging config
[JCR-4775] - fix dangling javadoc links for Apache HTTP libs
[JCR-4776] - use slf4j-reload4j instead of slf4-log4j12
[JCR-4777] - Update Logback version to 1.2.11
[JCR-4778] - Update slf4j dependency to 1.7.36
[JCR-4779] - Update mockito dependency to 4.4.0
[JCR-4780] - webapp: update htmlunit dependency to 2.60.0
[JCR-4781] - Update tomcat dependency to 8.5.78
[JCR-4782] - Update h2db dependency to 2.1.212
[JCR-4783] - it-osgi: update felix.framework to 7.0.3
[JCR-4787] - Update Tika dependency to 2.4.0
[JCR-4789] - webapp: update htmlunit dependency to 2.61.0
[JCR-4790] - Update mockito dependency to 4.5.1
[JCR-4791] - Update aws java sdk version to 1.12.223
[JCR-4792] - Update tomcat dependency to 8.5.79
[JCR-4793] - Update mockito dependency to 4.6.0
[JCR-4794] - it-osgi: update felix.framework to 7.0.4


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.6.x deprecated

[Julian Reschke]

Dear Jackrabbit developers and users,

the Apache Jackrabbit Team has decided to drop support and deprecate the 
1.6 branch of Apache Jackrabbit Oak. Branch, tags and releases will 
still be available for future references, but will not show up on the 
download page anymore. Users are encouraged to upgrade to the latest 
stable versions (1.22).


See  for more information.

Best regards, Julian

[ANNOUNCE] Apache Jackrabbit 2.20.5 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.5. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.5

Introduction


This is Apache Jackrabbit(TM) 2.20.5, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.5 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.5


Improvement

[JCR-4758] - Implement 
JackrabbitAccessControlEntry.getPrivilegeCollection in jackrabbit


Task

[JCR-4712] - Update Tika dependency to 2.0.0
[JCR-4722] - Update Tika dependency to 2.1.0
[JCR-4734] - Update tomcat dependency to 8.5.72
[JCR-4735] - webapp: update htmlunit dependency to 2.54.0
[JCR-4736] - Update commons-cli dependency to 1.5
[JCR-4738] - add tests for setPrimaryType() with expanded name
[JCR-4739] - avoid use of deprecated API in NodeTypeTest
[JCR-4740] - add test coverage for mandatory residual child nodes
[JCR-4744] - Update Logback version to 1.2.7
[JCR-4745] - Update tomcat dependency to 8.5.73
[JCR-4746] - Update mockito dependency to 4.1.0
[JCR-4747] - webapp: update htmlunit dependency to 2.55.0
[JCR-4749] - IdURICache: improve diagnostics when workspaceUri does 
not match

[JCR-4750] - Update Logback version to 1.2.8
[JCR-4751] - Update httpcore dependency to 4.4.15
[JCR-4752] - Update h2db dependency to 2.0.202
[JCR-4754] - Update Logback version to 1.2.10
[JCR-4755] - Update Tika dependency to 2.2.1
[JCR-4756] - Update h2db dependency to 2.0.206
[JCR-4757] - Update Jackrabbit trunk to Oak 1.42.0
[JCR-4761] - Update mockito dependency to 4.3.1
[JCR-4762] - Update slf4j dependency to 1.7.35

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.10 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.10. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.10

Introduction


This is Apache Jackrabbit(TM) 2.21.10, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.10 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.10
-

Improvement

[JCR-4758] - Implement 
JackrabbitAccessControlEntry.getPrivilegeCollection in jackrabbit


Task

[JCR-4749] - IdURICache: improve diagnostics when workspaceUri does 
not match

[JCR-4750] - Update Logback version to 1.2.8
[JCR-4751] - Update httpcore dependency to 4.4.15
[JCR-4752] - Update h2db dependency to 2.0.202
[JCR-4754] - Update Logback version to 1.2.10
[JCR-4755] - Update Tika dependency to 2.2.1
[JCR-4756] - Update h2db dependency to 2.0.206
[JCR-4757] - Update Jackrabbit trunk to Oak 1.42.0
[JCR-4761] - Update mockito dependency to 4.3.1
[JCR-4762] - Update slf4j dependency to 1.7.35


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.16.9 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.16.9. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.16.9

Introduction


This is Apache Jackrabbit(TM) 2.16.9, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.16.9 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.16.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.

Changes in Jackrabbit 2.16.9


Bug

[JCR-4680] - ConstraintViolationException in 
VersionManagerImplRestore when target node has a property definition 
unknown by the frozen node


Improvement

[JCR-3928] - Enable pathStyleAccess in AWS Client

Task

[JCR-4690] - Update mockito dependency to 3.9.0
[JCR-4691] - Update easymock dependency to 4.3
[JCR-4692] - Update to jacoco version 0.8.7
[JCR-4697] - Update commons-io dependency to 2.10.0
[JCR-4698] - webapp: update htmlunit dependency to 2.50.0
[JCR-4699] - Update mockito dependency to 3.11.1
[JCR-4700] - Update tomcat dependency to 8.5.68
[JCR-4701] - Update mockito dependency to 3.11.2
[JCR-4702] - webapp: update htmlunit dependency to 2.51.0
[JCR-4704] - Update Tika dependency to 1.27
[JCR-4713] - avoid use of deprecated tika IOExceptionWithCause
[JCR-4714] - TomcatIT uses Guava Files.readLines inherited from 
tika-parsers 1.x

[JCR-4715] - Update slf4j dependency to 1.7.32
[JCR-4716] - Update tomcat dependency to 8.5.70
[JCR-4717] - Update commons-io dependency to 2.11.0
[JCR-4718] - Upgrade Commons VFS to 2.9.0
[JCR-4719] - it-osgi: update felix.framework to 7.0.1
[JCR-4720] - webapp: update htmlunit dependency to 2.52.0
[JCR-4721] - Update Logback version to 1.2.5
[JCR-4723] - Update aws java sdk version to 1.12.55
[JCR-4728] - Update tomcat dependency to 8.5.71
[JCR-4729] - Update mockito dependency to 3.12.4
[JCR-4730] - webapp: update htmlunit dependency to 2.53.0
[JCR-4744] - Update Logback version to 1.2.7
[JCR-4750] - Update Logback version to 1.2.8
[JCR-4754] - Update Logback version to 1.2.10

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit FileVault 3.5.8 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit FileVault 3.5.8. The release is available for download at:

 https://jackrabbit.apache.org/jcr/downloads.html#vlt

See the full release notes below for details about this release:

Release Notes -- Apache Jackrabbit FileVault -- Version 3.5.8

Introduction

The FileVault introduces a JCR repository to filesystem mapping. The mapping
is exposed by an API and used by the "FileVault Content Packages" which 
allow to

create portable packages of repository content.

The Vault Command Line Interface aka "vlt" provides a subversion like
utility to work and develop with repository content.


Changes in Jackrabbit FileVault 3.5.8
--

Release Notes - Jackrabbit FileVault - Version 3.5.8
This version requires Java 8
The bundles are backwards compatible with Oak 1.8 and Jackrabbit 2.16

Bug
* [JCRVLT-574] - vlt does not properly handle connection options
* [JCRVLT-575] - do not fail if home path for package registry 
contains a symlink
* [JCRVLT-576] - Missing dependencies issues whilst including 
Vault-validation bundle along with vault-core and jcr2spi bundle
* [JCRVLT-578] - disabling jackrabbit-docviewparser throws 
NoSuchElementException


Improvement
* [JCRVLT-572] - Filevault-validation fails on sling:OsgiConfig node
* [JCRVLT-573] - Use Logback for logging with CLI


Release Contents

This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by SHA512 checksums and a PGP
signature that you can use to verify the authenticity of your download.
The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS

About Apache Jackrabbit
---
Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation

Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 100 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 2,500+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--
Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.9 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.9. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.9

Introduction


This is Apache Jackrabbit(TM) 2.21.9, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.9 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.9


Task

[JCR-4734] - Update tomcat dependency to 8.5.72
[JCR-4735] - webapp: update htmlunit dependency to 2.54.0
[JCR-4736] - Update commons-cli dependency to 1.5
[JCR-4737] - set baseline comparisonVersion to latest stable (2.20.4)
[JCR-4738] - add tests for setPrimaryType() with expanded name
[JCR-4739] - avoid use of deprecated API in NodeTypeTest
[JCR-4740] - add test coverage for mandatory residual child nodes
[JCR-4744] - Update Logback version to 1.2.7
[JCR-4745] - Update tomcat dependency to 8.5.73
[JCR-4746] - Update mockito dependency to 4.1.0
[JCR-4747] - webapp: update htmlunit dependency to 2.55.0


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

ANNOUNCE] Apache Jackrabbit Oak 1.6.22 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.6.22. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.6.22

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.6.22 is a patch release that contains fixes and
improvements over Oak 1.6. Jackrabbit Oak 1.6.x releases are
considered stable and targeted for production use.

Note that an "end of life" date has already been planned for this 
branch. See

 for details.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.


Changes in Oak 1.6.22
-

Bug

[OAK-5887] - Stricter validation on primary type change
[OAK-9519] - TlsGuardingConnection doesn't do a TLS handshake on 
reused connections

[OAK-9562] - Missing _bin when node is recreated after revision GC

Task

[OAK-8769] - oak-auth-ldap pom needs maintenance
[OAK-8974] - VersionGarbageCollectorIT should use fixtures from 
AbstractDocumentStoreTest

[OAK-9569] - Update Oak 1.6 to Jackrabbit 2.14.10

In addition to the above-mentioned changes, this release contains
all changes included up to the Apache Jackrabbit Oak 1.6.x release.

For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by SHA512 checksums and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit 2.20.4 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.4. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.4

Introduction


This is Apache Jackrabbit(TM) 2.20.4, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.4 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.

NOTE: JCR-4577 makes org.apache.derby a *test* dependency - users of 
jackrabbit-core who actually use Derby (as opposed to another database 
of even different persistence manager) will need to add it to their 
project separately!



Changes in Jackrabbit 2.20.4


Bug

[JCR-4671] - Derby is missing from the JCA artifact
[JCR-4680] - ConstraintViolationException in 
VersionManagerImplRestore when target node has a property definition 
unknown by the frozen node


Improvement

[JCR-3928] - Enable pathStyleAccess in AWS Client
[JCR-4577] - Define org.apache.derby as Test-Dependency

Task

[JCR-4690] - Update mockito dependency to 3.9.0
[JCR-4691] - Update easymock dependency to 4.3
[JCR-4692] - Update to jacoco version 0.8.7
[JCR-4697] - Update commons-io dependency to 2.10.0
[JCR-4698] - webapp: update htmlunit dependency to 2.50.0
[JCR-4699] - Update mockito dependency to 3.11.1
[JCR-4700] - Update tomcat dependency to 8.5.68
[JCR-4701] - Update mockito dependency to 3.11.2
[JCR-4702] - webapp: update htmlunit dependency to 2.51.0
[JCR-4704] - Update Tika dependency to 1.27
[JCR-4713] - avoid use of deprecated tika IOExceptionWithCause
[JCR-4714] - TomcatIT uses Guava Files.readLines inherited from 
tika-parsers 1.x

[JCR-4715] - Update slf4j dependency to 1.7.32
[JCR-4716] - Update tomcat dependency to 8.5.70
[JCR-4717] - Update commons-io dependency to 2.11.0
[JCR-4718] - Upgrade Commons VFS to 2.9.0
[JCR-4719] - it-osgi: update felix.framework to 7.0.1
[JCR-4720] - webapp: update htmlunit dependency to 2.52.0
[JCR-4721] - Update Logback version to 1.2.5
[JCR-4723] - Update aws java sdk version to 1.12.55
[JCR-4724] - Update commons-digester to version 2.1
[JCR-4728] - Update tomcat dependency to 8.5.71
[JCR-4729] - Update mockito dependency to 3.12.4
[JCR-4730] - webapp: update htmlunit dependency to 2.53.0

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

Apache Jackrabbit 2.21.8 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.8. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.8

Introduction


This is Apache Jackrabbit(TM) 2.21.8, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.8 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.8


Task

[JCR-4704] - Update Tika dependency to 1.27
[JCR-4712] - Update Tika dependency to 2.0.0
[JCR-4713] - avoid use of deprecated tika IOExceptionWithCause
[JCR-4714] - TomcatIT uses Guava Files.readLines inherited from 
tika-parsers 1.x

[JCR-4715] - Update slf4j dependency to 1.7.32
[JCR-4716] - Update tomcat dependency to 8.5.70
[JCR-4717] - Update commons-io dependency to 2.11.0
[JCR-4718] - Upgrade Commons VFS to 2.9.0
[JCR-4719] - it-osgi: update felix.framework to 7.0.1
[JCR-4720] - webapp: update htmlunit dependency to 2.52.0
[JCR-4721] - Update Logback version to 1.2.5
[JCR-4722] - Update Tika dependency to 2.1.0
[JCR-4723] - Update aws java sdk version to 1.12.55
[JCR-4724] - Update commons-digester to version 2.1
[JCR-4728] - Update tomcat dependency to 8.5.71
[JCR-4729] - Update mockito dependency to 3.12.4
[JCR-4730] - webapp: update htmlunit dependency to 2.53.0


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.4 retired

[Julian Reschke]

Dear users of Apache Jackrabbit,

the Apache Jackrabbit Team has decided to drop support and deprecate the 
1.4 branch of Apache Jackrabbit Oak. Branch, tags and releases will 
still be available for future references, but will not show up on the 
download page anymore.


Users of 1.4 are encouraged to switch to a platform compatible with Java 
8 (or newer) - the latest stable release is 1.40.0; the latest 
maintenance branch (essentially feature-frozen) is 1.22, with the 
current release being 1.22.8.


See , 
 and 
 for further information.


Best regards, Julian

[ANNOUNCE] Apache Jackrabbit 2.14.10 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.14.10. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.14.10

Introduction


This is Apache Jackrabbit(TM) 2.14.10, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.14.10 is a patch release that contains fixes and
improvements over Jackrabbit 2.14. Jackrabbit 2.14.x releases are
considered stable and targeted for production use.

Note that an "end of life" date has already been planned for this 
branch. See

 for details.

Changes in Jackrabbit 2.14.10
-

Bug

[JCR-4663] - webdav: check Content-Range on PUT

Improvement

[JCR-4683] - add test coverage for restore that removes a mixin

Task

[JCR-4652] - Update tomcat dependency to 8.5.60
[JCR-4653] - Update httpclient/mime dependencies to 4.5.13
[JCR-4658] - Update httpcore dependency to 4.4.14
[JCR-4659] - Update tomcat dependency to 8.5.61
[JCR-4660] - update pmd-plugin dependency to 3.14.0
[JCR-4668] - Update tomcat dependency to 8.5.63
[JCR-4669] - update checkstyle-plugin dependency to 3.1.2
[JCR-4672] - update junit dependency to 4.13.2
[JCR-4678] - Update tomcat dependency to 8.5.64
[JCR-4687] - Update tomcat dependency to 8.5.65


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.16.8 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.16.8. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:

Release Notes -- Apache Jackrabbit -- Version 2.16.8

Introduction


This is Apache Jackrabbit(TM) 2.16.8, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.16.8 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.16.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.

Changes in Jackrabbit 2.16.8


Bug

[JCR-4663] - webdav: check Content-Range on PUT

Improvement

[JCR-4683] - add test coverage for restore that removes a mixin

Task

[JCR-4491] - Upgrade Commons VFS to 2.6
[JCR-4652] - Update tomcat dependency to 8.5.60
[JCR-4653] - Update httpclient/mime dependencies to 4.5.13
[JCR-4654] - webapp: update htmlunit dependency to 2.45.0
[JCR-4655] - Update mockito dependency to 3.6.28
[JCR-4656] - Upgrade Commons VFS to 2.7.0
[JCR-4657] - Update Tika dependency to 1.25
[JCR-4658] - Update httpcore dependency to 4.4.14
[JCR-4659] - Update tomcat dependency to 8.5.61
[JCR-4660] - update pmd-plugin dependency to 3.14.0
[JCR-4661] - webapp: update htmlunit dependency to 2.46.0
[JCR-4662] - it-osgi: update felix.framework to 7.0.0
[JCR-4666] - Update mockito dependency to 3.7.7
[JCR-4668] - Update tomcat dependency to 8.5.63
[JCR-4669] - update checkstyle-plugin dependency to 3.1.2
[JCR-4672] - update junit dependency to 4.13.2
[JCR-4673] - webapp: update htmlunit dependency to 2.47.1
[JCR-4675] - Update mockito dependency to 3.8.0
[JCR-4678] - Update tomcat dependency to 8.5.64
[JCR-4682] - Upgrade Commons VFS to 2.8.0
[JCR-4684] - Update Tika dependency to 1.26
[JCR-4685] - webapp: update htmlunit dependency to 2.48.0
[JCR-4687] - Update tomcat dependency to 8.5.65


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.7 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.7. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.7

Introduction


This is Apache Jackrabbit(TM) 2.21.7, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.7 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.7


Bug

[JCR-4671] - Derby is missing from the JCA artifact

Improvement

[JCR-3928] - Enable pathStyleAccess in AWS Client

Task

[JCR-4690] - Update mockito dependency to 3.9.0
[JCR-4691] - Update easymock dependency to 4.3
[JCR-4692] - Update to jacoco version 0.8.7
[JCR-4693] - Update Jackrabbit trunk to Oak 1.40.0
[JCR-4695] - set baseline comparisonVersion to latest stable (2.20.3)
[JCR-4697] - Update commons-io dependency to 2.10.0
[JCR-4699] - Update mockito dependency to 3.11.1
[JCR-4700] - Update tomcat dependency to 8.5.68
[JCR-4701] - Update mockito dependency to 3.11.2
[JCR-4702] - webapp: update htmlunit dependency to 2.51.0


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.20.3 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.3. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.3

Introduction


This is Apache Jackrabbit(TM) 2.20.3, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.3 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.3


Bug

[JCR-4663] - webdav: check Content-Range on PUT

Improvement

[JCR-4683] - add test coverage for restore that removes a mixin

Task

[JCR-4491] - Upgrade Commons VFS to 2.6
[JCR-4651] - Update Jackrabbit trunk to Oak 1.36.0
[JCR-4652] - Update tomcat dependency to 8.5.60
[JCR-4653] - Update httpclient/mime dependencies to 4.5.13
[JCR-4654] - webapp: update htmlunit dependency to 2.45.0
[JCR-4655] - Update mockito dependency to 3.6.28
[JCR-4656] - Upgrade Commons VFS to 2.7.0
[JCR-4657] - Update Tika dependency to 1.25
[JCR-4658] - Update httpcore dependency to 4.4.14
[JCR-4659] - Update tomcat dependency to 8.5.61
[JCR-4660] - update pmd-plugin dependency to 3.14.0
[JCR-4661] - webapp: update htmlunit dependency to 2.46.0
[JCR-4662] - it-osgi: update felix.framework to 7.0.0
[JCR-4665] - Update Jackrabbit trunk to Oak 1.38.0
[JCR-4666] - Update mockito dependency to 3.7.7
[JCR-4668] - Update tomcat dependency to 8.5.63
[JCR-4669] - update checkstyle-plugin dependency to 3.1.2
[JCR-4672] - update junit dependency to 4.13.2
[JCR-4673] - webapp: update htmlunit dependency to 2.47.1
[JCR-4675] - Update mockito dependency to 3.8.0
[JCR-4678] - Update tomcat dependency to 8.5.64
[JCR-4682] - Upgrade Commons VFS to 2.8.0
[JCR-4684] - Update Tika dependency to 1.26
[JCR-4685] - webapp: update htmlunit dependency to 2.48.0
[JCR-4687] - Update tomcat dependency to 8.5.65
[JCR-4693] - Update Jackrabbit trunk to Oak 1.40.0

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.12 retired

[Julian Reschke]

Dear users of Apache Jackrabbit,

the Apache Jackrabbit Team has decided to drop support and deprecate the 
2.12 branch of Apache Jackrabbit. Branch, tags and releases will still 
be available for future references, but will not show up on the download 
page anymore. Users are encouraged to upgrade to the latest stable 
versions (2.20 for Java 8, 2.14 for Java 7).


See , 
 and 
 for further information.


Best regards, Julian

[ANNOUNCE] Apache Jackrabbit 2.21.6 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.6. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.6

Introduction


This is Apache Jackrabbit(TM) 2.21.6, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.6 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.6


Bug

[JCR-4680] - ConstraintViolationException in 
VersionManagerImplRestore when target node has a property definition 
unknown by the frozen node


Improvement

[JCR-4683] - add test coverage for restore that removes a mixin

Task

[JCR-4634] - Jackrabbit should build and test with Java 16
[JCR-4665] - Update Jackrabbit trunk to Oak 1.38.0
[JCR-4666] - Update mockito dependency to 3.7.7
[JCR-4668] - Update tomcat dependency to 8.5.63
[JCR-4669] - update checkstyle-plugin dependency to 3.1.2
[JCR-4672] - update junit dependency to 4.13.2
[JCR-4673] - webapp: update htmlunit dependency to 2.47.1
[JCR-4675] - Update mockito dependency to 3.8.0
[JCR-4678] - Update tomcat dependency to 8.5.64
[JCR-4682] - Upgrade Commons VFS to 2.8.0
[JCR-4684] - Update Tika dependency to 1.26
[JCR-4685] - webapp: update htmlunit dependency to 2.48.0
[JCR-4687] - Update tomcat dependency to 8.5.65

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.14.9 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.14.9. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.14.9

Introduction


This is Apache Jackrabbit(TM) 2.14.9, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.14.9 is a patch release that contains fixes and
improvements over Jackrabbit 2.14. Jackrabbit 2.14.x releases are
considered stable and targeted for production use.

Changes in Jackrabbit 2.14.9


Bug

[JCR-3942] - Content-Length header field may be set twice
[JCR-4408] - jackrabbit-webapp: test dependency for httpcore breaks 
war file

[JCR-4482] - jcr2spi: WorkspaceContentHandler leaks temp files
[JCR-4483] - jcr2spi: potential NPE in ImportHandler.endDocument
[JCR-4484] - jcr-tests: SerializationTest needs to cleanup after 
parse failures in import tests
[JCR-4485] - InternalValueFactory.create(File) does not close input 
stream

[JCR-4537] - MalformedURLException: Nested JAR URLs are not supported
[JCR-4549] - backup with RepositoryCopier.copy() fails on second 
method call
[JCR-4551] - Use the normalized MediaType to check if the given 
MediaType should be indexed
[JCR-4579] - jackrabbit-data: allow to disable statement pooling 
through system property

[JCR-4603] - spi-commons: Iterators - incorrect method signature
[JCR-4626] - CI build fail because 
org.glassfish:javax.el:jar:3.0.1-b06-SNAPSHOT can't be retrieved


Improvement

[JCR-4470] - update javadoc-plugin dependency to 3.1.1
[JCR-4475] - Improve o.a.j.jcr2dav.RepositoryStubImpl to test with 
custom servlet path mapping

[JCR-4497] - pass computed args to surefire/failsafe invocations
[JCR-4499] - Update jacoco dependency to 0.8.5 and align config 
with Oak

[JCR-4500] - jcr-commons: enable coverage checks
[JCR-4501] - jcr-commons: add test coverage for ISO8601 util
[JCR-4541] - reduce classpath lookups for SaxParserFactory
[JCR-4609] - Improve logging in case of exception in 
JcrUtils.getRepository()

[JCR-4617] - Emit apache-rat-plugin errors on console
[JCR-4618] - Relax PredefinedNodeTypeTest to not require 
nt:frozenNode to be referenceable


Task

[JCR-4476] - Update httpcore dependency to 4.4.12
[JCR-4478] - Update httpclient/mime dependencies to 4.5.10
[JCR-4489] - Update jacoco dependency to 0.8.4
[JCR-4496] - align ISO8601 class in tests with jcr-commons version
[JCR-4505] - Update maven-assembly-plugin to 3.2.0
[JCR-4506] - Update maven-jar-plugin to 3.2.0
[JCR-4507] - Update spotbugs-maven-plugin to 3.1.12.2
[JCR-4508] - Upgrade maven-scr-plugin to 1.26.2
[JCR-4511] - Update slf4j dependency to 1.7.29
[JCR-4512] - Update maven-scr-plugin to 1.26.4
[JCR-4519] - Update httpcore dependency to 4.4.13
[JCR-4522] - Update httpclient/mime dependencies to 4.5.11
[JCR-4529] - Update tomcat dependency to 8.5.50
[JCR-4530] - jackrabbit-core: avoid use of deprecated 
commons-collections Buffers

[JCR-4531] - Update tomcat dependency to 8.5.51/7.0.100
[JCR-4544] - Update slf4j dependency to 1.7.30
[JCR-4545] - Update httpclient/mime dependencies to 4.5.12
[JCR-4546] - Update aws java sdk version to 1.11.700 (consistent 
with Oak)

[JCR-4547] - Update tomcat dependency to 8.5.53/7.0.103
[JCR-4548] - update javadoc-plugin dependency to 3.2.0
[JCR-4556] - Update tomcat dependency to 8.5.54
[JCR-4557] - update junit dependency to 4.13
[JCR-4558] - update Apache parent pom to version 23
[JCR-4559] - Update commons file-upload dependency to 1.4
[JCR-4560] - Update h2db dependency to 1.4.200
[JCR-4562] - Remove workaround for FELIX-2492
[JCR-4568] - Update to jacoco version 0.8.6 (compatible with Java 15)
[JCR-4573] - Update Jetty dependency to 9.2.30.v20200428
[JCR-4575] - Update tomcat dependency to 8.5.55/7.0.104
[JCR-4592] - Update maven-assembly-plugin to 3.3.0
[JCR-4593] - update war-plugin dependency to 3.3.0
[JCR-4594] - update pmd-plugin dependency to 3.13.0
[JCR-4595] - update checkstyle-plugin dependency to 3.1.1
[JCR-4596] - update build-helper-maven-plugin to version 3.2.0
[JCR-4600] - Update tomcat dependency to 8.5.56
[JCR-4605] - standalone: fix deprecation warning wrt GnuParser
[JCR-4612] - Update tomcat dependency to 8.5.57/7.0.105
[JCR-4616] - parent: remove PMC information from POM
[JCR-4621] - add 'javadoc' profile for Jenkins matrix builds
[JCR-4622] - add 'rat' profile for Jenkins matrix builds
[JCR-4629] - Update spotbugs-maven-plugin to 4.0.4
[JCR-4631] - update war-plugin dependency to

[ANNOUNCE] Apache Jackrabbit Oak 1.2 retired

[Julian Reschke]

Dear users of Apache Jackrabbit,

the Apache Jackrabbit Team has decided to drop support and deprecate the 
1.2 branch of Apache Jackrabbit Oak. Branch, tags and releases will 
still be available for future references, but will not show up on the 
download page anymore.


Users who can move to Java 8 should switch to the latest stable release 
(currently 1.38.0). Users who can move to Java 7 can switch to Oak 
1.6.20, with the caveat that this branch will require Java 8 with the 
next release (1.6.21). In general, users are encouraged to switch to a 
platform compatible with Java 8 (or newer). See the downloads page for 
more details.


See , 
 and 
 for further information.


Best regards, Julian

[ANNOUNCE] Apache Jackrabbit 2.16.7 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.16.7. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.16.7

Introduction


This is Apache Jackrabbit(TM) 2.16.7, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.16.7 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.16.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.

Changes in Jackrabbit 2.16.7


Bug

[JCR-3942] - Content-Length header field may be set twice
[JCR-4537] - MalformedURLException: Nested JAR URLs are not supported
[JCR-4549] - backup with RepositoryCopier.copy() fails on second 
method call
[JCR-4551] - Use the normalized MediaType to check if the given 
MediaType should be indexed
[JCR-4579] - jackrabbit-data: allow to disable statement pooling 
through system property

[JCR-4603] - spi-commons: Iterators - incorrect method signature
[JCR-4626] - CI build fail because 
org.glassfish:javax.el:jar:3.0.1-b06-SNAPSHOT can't be retrieved


Improvement

[JCR-4541] - reduce classpath lookups for SaxParserFactory
[JCR-4609] - Improve logging in case of exception in 
JcrUtils.getRepository()

[JCR-4617] - Emit apache-rat-plugin errors on console
[JCR-4618] - Relax PredefinedNodeTypeTest to not require 
nt:frozenNode to be referenceable


Task

[JCR-4519] - Update httpcore dependency to 4.4.13
[JCR-4522] - Update httpclient/mime dependencies to 4.5.11
[JCR-4543] - Update Tika dependency to 1.24
[JCR-4544] - Update slf4j dependency to 1.7.30
[JCR-4545] - Update httpclient/mime dependencies to 4.5.12
[JCR-4546] - Update aws java sdk version to 1.11.700 (consistent 
with Oak)

[JCR-4547] - Update tomcat dependency to 8.5.53/7.0.103
[JCR-4548] - update javadoc-plugin dependency to 3.2.0
[JCR-4554] - Update Tika dependency to 1.24.1
[JCR-4555] - Update mockito dependency to 3.3.3
[JCR-4556] - Update tomcat dependency to 8.5.54
[JCR-4557] - update junit dependency to 4.13
[JCR-4558] - update Apache parent pom to version 23
[JCR-4559] - Update commons file-upload dependency to 1.4
[JCR-4560] - Update h2db dependency to 1.4.200
[JCR-4561] - webapp: update htmlunit dependency to 2.40.0
[JCR-4562] - Remove workaround for FELIX-2492
[JCR-4563] - test OSGi bundles
[JCR-4564] - jackrabbit-jcr-server: remove obsolete workaround for 
scr-plugin

[JCR-4568] - Update to jacoco version 0.8.6 (compatible with Java 15)
[JCR-4569] - Update to maven bundle plugin compatible with Java 15
[JCR-4573] - Update Jetty dependency to 9.2.30.v20200428
[JCR-4575] - Update tomcat dependency to 8.5.55/7.0.104
[JCR-4592] - Update maven-assembly-plugin to 3.3.0
[JCR-4593] - update war-plugin dependency to 3.3.0
[JCR-4594] - update pmd-plugin dependency to 3.13.0
[JCR-4595] - update checkstyle-plugin dependency to 3.1.1
[JCR-4596] - update build-helper-maven-plugin to version 3.2.0
[JCR-4597] - Update commons-io dependency to 2.7
[JCR-4598] - Update easymock dependency to 4.2
[JCR-4599] - webapp: update htmlunit dependency to 2.41.0
[JCR-4600] - Update tomcat dependency to 8.5.56
[JCR-4601] - jackrabbit-jcr-commons: update cglib dependency to 3.3.0
[JCR-4605] - standalone: fix deprecation warning wrt GnuParser
[JCR-4612] - Update tomcat dependency to 8.5.57/7.0.105
[JCR-4616] - parent: remove PMC information from POM
[JCR-4621] - add 'javadoc' profile for Jenkins matrix builds
[JCR-4622] - add 'rat' profile for Jenkins matrix builds
[JCR-4623] - webapp: update htmlunit dependency to 2.42.0
[JCR-4624] - Update mockito dependency to 3.4.4
[JCR-4629] - Update spotbugs-maven-plugin to 4.0.4
[JCR-4630] - Update animal-sniffer dependency to 1.19
[JCR-4631] - update war-plugin dependency to 3.3.1
[JCR-4632] - Update mockito dependency to 3.5.2
[JCR-4633] - webapp: update htmlunit dependency to 2.43.0
[JCR-4636] - Update mockito dependency to 3.5.7
[JCR-4638] - Update mockito dependency to 3.5.10
[JCR-4639] - Update antrun plugin dependency to 3.0.0
[JCR-4641] - Update commons-io dependency to 2.8.0
[JCR-4642] - update geronimo-j2ee-connector_1.5_spec dependency to 
2.0.0

[JCR-4643] - Update pax-exam version to 4.13.1
[JCR-4644] - Update tomcat dependency to 8.5.58/7.0.106
[JCR-4645] - Update mockito dependency t

[ANNOUNCE] Apache Jackrabbit 2.21.5 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.5. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.5

Introduction


This is Apache Jackrabbit(TM) 2.21.5, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.5 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.5


Bug

[JCR-4663] - webdav: check Content-Range on PUT

Task

[JCR-4650] - set baseline comparisonVersion to latest stable (2.20.2)
[JCR-4651] - Update Jackrabbit trunk to Oak 1.36.0
[JCR-4652] - Update tomcat dependency to 8.5.60
[JCR-4653] - Update httpclient/mime dependencies to 4.5.13
[JCR-4654] - webapp: update htmlunit dependency to 2.45.0
[JCR-4655] - Update mockito dependency to 3.6.28
[JCR-4656] - Upgrade Commons VFS to 2.7.0
[JCR-4657] - Update Tika dependency to 1.25
[JCR-4658] - Update httpcore dependency to 4.4.14
[JCR-4659] - Update tomcat dependency to 8.5.61
[JCR-4660] - update pmd-plugin dependency to 3.14.0
[JCR-4661] - webapp: update htmlunit dependency to 2.46.0
[JCR-4662] - it-osgi: update felix.framework to 7.0.0


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.18 retired

[Julian Reschke]

Dear users of Apache Jackrabbit,

the Apache Jackrabbit Team has decided to drop support and deprecate the 
2.18 branch of Apache Jackrabbit. Branch, tags and releases will still 
be available for future references, but will not show up on the download 
page anymore. Users are encouraged to upgrade to the latest stable 
versions (2.20). (*)


See , 
 and 
 for further information.


Best regards, Julian

(*) Note that 2.20 doesn't have jackrabbit-api anymore, it has been 
replaced by oak-jackrabbit-api; the current version applicable to 
Jackrabbit 2.20.2 is 1.34.0.

[ANNOUNCE] Apache Jackrabbit 2.20.2 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.2. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.2

Introduction


This is Apache Jackrabbit(TM) 2.20.2, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.2 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.2


Bug

[JCR-4537] - MalformedURLException: Nested JAR URLs are not supported
[JCR-4579] - jackrabbit-data: allow to disable statement pooling 
through system property

[JCR-4590] - jcr-server: DirListingExportHandler sets empty Etag
[JCR-4603] - spi-commons: Iterators - incorrect method signature
[JCR-4626] - CI build fail because 
org.glassfish:javax.el:jar:3.0.1-b06-SNAPSHOT can't be retrieved


Improvement

[JCR-4536] - spi2dav: allow disabling cert and host name checks for 
TLS connections
[JCR-4583] - remove XML serialization workaround for ancient Java 
versions

[JCR-4589] - upgrade to servlet-api 3.10
[JCR-4591] - basic trailer field support
[JCR-4609] - Improve logging in case of exception in 
JcrUtils.getRepository()

[JCR-4617] - Emit apache-rat-plugin errors on console
[JCR-4618] - Relax PredefinedNodeTypeTest to not require 
nt:frozenNode to be referenceable


Task

[JCR-4567] - Jackrabbit should build and test with Java 15
[JCR-4568] - Update to jacoco version 0.8.6 (compatible with Java 15)
[JCR-4569] - Update to maven bundle plugin compatible with Java 15
[JCR-4572] - Update Jackrabbit trunk to oak 1.30.0
[JCR-4573] - Update Jetty dependency to 9.2.30.v20200428
[JCR-4574] - add tests for https (with self-signed cert)
[JCR-4592] - Update maven-assembly-plugin to 3.3.0
[JCR-4593] - update war-plugin dependency to 3.3.0
[JCR-4594] - update pmd-plugin dependency to 3.13.0
[JCR-4595] - update checkstyle-plugin dependency to 3.1.1
[JCR-4596] - update build-helper-maven-plugin to version 3.2.0
[JCR-4597] - Update commons-io dependency to 2.7
[JCR-4598] - Update easymock dependency to 4.2
[JCR-4599] - webapp: update htmlunit dependency to 2.41.0
[JCR-4600] - Update tomcat dependency to 8.5.56
[JCR-4601] - jackrabbit-jcr-commons: update cglib dependency to 3.3.0
[JCR-4604] - deprecate Iterators.Predicate
[JCR-4605] - standalone: fix deprecation warning wrt GnuParser
[JCR-4612] - Update tomcat dependency to 8.5.57/7.0.105
[JCR-4613] - Update oak-jackrabbit-api to 1.32.0
[JCR-4615] - jcr-server: add minimal test coverage for remoting 
WebDAV servlet

[JCR-4616] - parent: remove PMC information from POM
[JCR-4621] - add 'javadoc' profile for Jenkins matrix builds
[JCR-4622] - add 'rat' profile for Jenkins matrix builds
[JCR-4623] - webapp: update htmlunit dependency to 2.42.0
[JCR-4624] - Update mockito dependency to 3.4.4
[JCR-4629] - Update spotbugs-maven-plugin to 4.0.4
[JCR-4630] - Update animal-sniffer dependency to 1.19
[JCR-4631] - update war-plugin dependency to 3.3.1
[JCR-4632] - Update mockito dependency to 3.5.2
[JCR-4633] - webapp: update htmlunit dependency to 2.43.0
[JCR-4636] - Update mockito dependency to 3.5.7
[JCR-4638] - Update mockito dependency to 3.5.10
[JCR-4639] - Update antrun plugin dependency to 3.0.0
[JCR-4640] - Update Jackrabbit trunk to Oak 1.34.0
[JCR-4641] - Update commons-io dependency to 2.8.0
[JCR-4642] - update geronimo-j2ee-connector_1.5_spec dependency to 
2.0.0

[JCR-4643] - Update pax-exam version to 4.13.1
[JCR-4644] - Update tomcat dependency to 8.5.58/7.0.106
[JCR-4645] - Update mockito dependency to 3.5.11
[JCR-4646] - Update tomcat dependency to 8.5.59
[JCR-4647] - update junit dependency to 4.13.1

Sub-task

[JCR-4166] - support GZIP content coding in requests
[JCR-4167] - signal support for GZIP content coding as per RFC 7694
[JCR-4169] - make WebdavServerTests run automatically
[JCR-4581] - use GZIP encoding in XML responses when client signals 
support

[JCR-4582] - support 'deflate' encoding in requests
[JCR-4585] - jackrabbit-webdav: return Etag with 304 response
[JCR-4586] - jackrabbit-webdav: must ignore if-modified-since with 
broken date
[JCR-4587] - jackrabbit-webdav: include if-unmodified-since in 
precondition check
[JCR-458

[ANNOUNCE] Apache Jackrabbit 2.21.4 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.4. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.4

Introduction


This is Apache Jackrabbit(TM) 2.21.4, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.4 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.4


Bug

[JCR-4626] - CI build fail because 
org.glassfish:javax.el:jar:3.0.1-b06-SNAPSHOT can't be retrieved


Task

[JCR-4567] - Jackrabbit should build and test with Java 15
[JCR-4568] - Update to jacoco version 0.8.6 (compatible with Java 15)
[JCR-4621] - add 'javadoc' profile for Jenkins matrix builds
[JCR-4622] - add 'rat' profile for Jenkins matrix builds
[JCR-4623] - webapp: update htmlunit dependency to 2.42.0
[JCR-4624] - Update mockito dependency to 3.4.4
[JCR-4629] - Update spotbugs-maven-plugin to 4.0.4
[JCR-4630] - Update animal-sniffer dependency to 1.19
[JCR-4631] - update war-plugin dependency to 3.3.1
[JCR-4632] - Update mockito dependency to 3.5.2
[JCR-4633] - webapp: update htmlunit dependency to 2.43.0
[JCR-4636] - Update mockito dependency to 3.5.7
[JCR-4638] - Update mockito dependency to 3.5.10
[JCR-4639] - Update antrun plugin dependency to 3.0.0
[JCR-4640] - Update Jackrabbit trunk to Oak 1.34.0
[JCR-4641] - Update commons-io dependency to 2.8.0
[JCR-4642] - update geronimo-j2ee-connector_1.5_spec dependency to 
2.0.0

[JCR-4643] - Update pax-exam version to 4.13.1
[JCR-4644] - Update tomcat dependency to 8.5.58/7.0.106
[JCR-4645] - Update mockito dependency to 3.5.11
[JCR-4646] - Update tomcat dependency to 8.5.59
[JCR-4647] - update junit dependency to 4.13.1


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.12.11 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.12.11. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.12.11

Introduction


This is Apache Jackrabbit(TM) 2.12.11, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.12.11 is a patch release that contains fixes and
improvements over Jackrabbit 2.12. Jackrabbit 2.12.x releases are
considered stable and targeted for production use.

Note that an "end of life" date has already been planned for this 
branch. See

 for details.

Changes in Jackrabbit 2.12.11
-

Bug

[JCR-4420] - Release Notes: term "SHA1" no longer allowed

Task

[JCR-4531] - Update tomcat dependency to 8.5.51/7.0.100
[JCR-4547] - Update tomcat dependency to 8.5.53/7.0.103
[JCR-4575] - Update tomcat dependency to 8.5.55/7.0.104
[JCR-4612] - Update tomcat dependency to 8.5.57/7.0.105
[JCR-4621] - add 'javadoc' profile for Jenkins matrix builds
[JCR-4622] - add 'rat' profile for Jenkins matrix builds


Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.18.6 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.18.6. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.18.6

Introduction


This is Apache Jackrabbit(TM) 2.18.6, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.18.6 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.18.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  https://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.

Note that an "end of life" date has already been planned for this 
branch. See

 for details.


Changes in Jackrabbit 2.18.6


Bug

[JCR-3942] - Content-Length header field may be set twice
[JCR-4549] - backup with RepositoryCopier.copy() fails on second 
method call
[JCR-4551] - Use the normalized MediaType to check if the given 
MediaType should be indexed
[JCR-4626] - CI build fail because 
org.glassfish:javax.el:jar:3.0.1-b06-SNAPSHOT can't be retrieved


Improvement

[JCR-4541] - reduce classpath lookups for SaxParserFactory

Task

[JCR-4519] - Update httpcore dependency to 4.4.13
[JCR-4522] - Update httpclient/mime dependencies to 4.5.11
[JCR-4530] - jackrabbit-core: avoid use of deprecated 
commons-collections Buffers

[JCR-4543] - Update Tika dependency to 1.24
[JCR-4544] - Update slf4j dependency to 1.7.30
[JCR-4545] - Update httpclient/mime dependencies to 4.5.12
[JCR-4546] - Update aws java sdk version to 1.11.700 (consistent 
with Oak)

[JCR-4547] - Update tomcat dependency to 8.5.53/7.0.103
[JCR-4548] - update javadoc-plugin dependency to 3.2.0
[JCR-4554] - Update Tika dependency to 1.24.1
[JCR-4555] - Update mockito dependency to 3.3.3
[JCR-4556] - Update tomcat dependency to 8.5.54
[JCR-4557] - update junit dependency to 4.13
[JCR-4558] - update Apache parent pom to version 23
[JCR-4559] - Update commons file-upload dependency to 1.4
[JCR-4560] - Update h2db dependency to 1.4.200
[JCR-4561] - webapp: update htmlunit dependency to 2.40.0
[JCR-4562] - Remove workaround for FELIX-2492
[JCR-4563] - test OSGi bundles
[JCR-4564] - jackrabbit-jcr-server: remove obsolete workaround for 
scr-plugin

[JCR-4575] - Update tomcat dependency to 8.5.55/7.0.104
[JCR-4600] - Update tomcat dependency to 8.5.56
[JCR-4612] - Update tomcat dependency to 8.5.57/7.0.105
[JCR-4621] - add 'javadoc' profile for Jenkins matrix builds
[JCR-4622] - add 'rat' profile for Jenkins matrix builds

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.3 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.3. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.3

Introduction


This is Apache Jackrabbit(TM) 2.21.3, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.3 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.3


Improvement

[JCR-4536] - spi2dav: allow disabling cert and host name checks for 
TLS connections
[JCR-4609] - Improve logging in case of exception in 
JcrUtils.getRepository()

[JCR-4617] - Emit apache-rat-plugin errors on console
[JCR-4618] - Relax PredefinedNodeTypeTest to not require 
nt:frozenNode to be referenceable


Task

[JCR-4569] - Update to maven bundle plugin compatible with Java 15
[JCR-4574] - add tests for https (with self-signed cert)
[JCR-4612] - Update tomcat dependency to 8.5.57/7.0.105
[JCR-4613] - Update oak-jackrabbit-api to 1.32.0
[JCR-4615] - jcr-server: add minimal test coverage for remoting 
WebDAV servlet

[JCR-4616] - parent: remove PMC information from POM


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.2 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.2. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.2

Introduction


This is Apache Jackrabbit(TM) 2.21.2, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.2 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.2


Bug

[JCR-4537] - MalformedURLException: Nested JAR URLs are not supported
[JCR-4579] - In rare situations we see "Closed Statement; nested 
exception is java.sql.SQLException: Closed Statement"

[JCR-4590] - jcr-server: DirListingExportHandler sets empty Etag
[JCR-4603] - spi-commons: Iterators - incorrect method signature

Improvement

[JCR-4577] - Define org.apache.derby as Test-Dependency
[JCR-4578] - IndexMerger should log more debug informations about 
the internal IndexBuckets
[JCR-4583] - remove XML serialization workaround for ancient Java 
versions

[JCR-4589] - upgrade to servlet-api 3.10
[JCR-4591] - basic trailer field support

Task

[JCR-4572] - Update Jackrabbit trunk to oak 1.30.0
[JCR-4573] - Update Jetty dependency to 9.2.30.v20200428
[JCR-4575] - Update tomcat dependency to 8.5.55/7.0.104
[JCR-4580] - switch bundle comparisonVersion for 2.20.1
[JCR-4592] - Update maven-assembly-plugin to 3.3.0
[JCR-4593] - update war-plugin dependency to 3.3.0
[JCR-4594] - update pmd-plugin dependency to 3.13.0
[JCR-4595] - update checkstyle-plugin dependency to 3.1.1
[JCR-4596] - update build-helper-maven-plugin to version 3.2.0
[JCR-4597] - Update commons-io dependency to 2.7
[JCR-4598] - Update easymock dependency to 4.2
[JCR-4599] - webapp: update htmlunit dependency to 2.41.0
[JCR-4600] - Update tomcat dependency to 8.5.56
[JCR-4601] - jackrabbit-jcr-commons: update cglib dependency to 3.3.0
[JCR-4602] - jackrabbit-core: remove unused commons-collections 
dependency

[JCR-4604] - deprecate Iterators.Predicate
[JCR-4605] - standalone: fix deprecation warning wrt GnuParser

Sub-task

[JCR-4166] - support GZIP content coding in requests
[JCR-4167] - signal support for GZIP content coding as per RFC 7694
[JCR-4169] - make WebdavServerTests run automatically
[JCR-4581] - use GZIP encoding in XML responses when client signals 
support

[JCR-4582] - support 'deflate' encoding in requests
[JCR-4585] - jackrabbit-webdav: return Etag with 304 response
[JCR-4586] - jackrabbit-webdav: must ignore if-modified-since with 
broken date
[JCR-4587] - jackrabbit-webdav: include if-unmodified-since in 
precondition check
[JCR-4588] - jackrabbit-webdav/server: add parsers for http dates 
and use them in conditional eval



For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.20.1 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.1. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.1

Introduction


This is Apache Jackrabbit(TM) 2.20.1, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.1 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.20.1


Bug

[JCR-3942] - Content-Length header field may be set twice
[JCR-4549] - backup with RepositoryCopier.copy() fails on second 
method call
[JCR-4551] - Use the normalized MediaType to check if the given 
MediaType should be indexed


Improvement

[JCR-4541] - reduce classpath lookups for SaxParserFactory

Task

[JCR-4519] - Update httpcore dependency to 4.4.13
[JCR-4520] - Update Jackrabbit trunk and 2.20 to Oak 1.22.0
[JCR-4522] - Update httpclient/mime dependencies to 4.5.11
[JCR-4525] - Update Jackrabbit trunk and 2.20 to Oak 1.24.0
[JCR-4529] - Update tomcat dependency to 8.5.50
[JCR-4530] - jackrabbit-core: avoid use of deprecated 
commons-collections Buffers

[JCR-4531] - Update tomcat dependency to 8.5.51/7.0.100
[JCR-4539] - Update Jackrabbit trunk and 2.20 to Oak 1.26.0
[JCR-4543] - Update Tika dependency to 1.24
[JCR-4544] - Update slf4j dependency to 1.7.30
[JCR-4545] - Update httpclient/mime dependencies to 4.5.12
[JCR-4546] - Update aws java sdk version to 1.11.700 (consistent 
with Oak)

[JCR-4547] - Update tomcat dependency to 8.5.53/7.0.103
[JCR-4548] - update javadoc-plugin dependency to 3.2.0
[JCR-4554] - Update Tika dependency to 1.24.1
[JCR-4555] - Update mockito dependency to 3.3.3
[JCR-4556] - Update tomcat dependency to 8.5.54
[JCR-4557] - update junit dependency to 4.13
[JCR-4558] - update Apache parent pom to version 23
[JCR-4559] - Update commons file-upload dependency to 1.4
[JCR-4560] - Update h2db dependency to 1.4.200
[JCR-4561] - webapp: update htmlunit dependency to 2.40.0
[JCR-4562] - Remove workaround for FELIX-2492
[JCR-4563] - test OSGi bundles
[JCR-4564] - jackrabbit-jcr-server: remove obsolete workaround for 
scr-plugin

[JCR-4575] - Update tomcat dependency to 8.5.55/7.0.104


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.21.1 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.1. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.1

Introduction


This is Apache Jackrabbit(TM) 2.21.1, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.1 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.1


Bug

[JCR-3942] - Content-Length header field may be set twice
[JCR-4549] - backup with RepositoryCopier.copy() fails on second 
method call
[JCR-4551] - Use the normalized MediaType to check if the given 
MediaType should be indexed


Improvement

[JCR-4541] - reduce classpath lookups for SaxParserFactory

Task

[JCR-4531] - Update tomcat dependency to 8.5.51/7.0.100
[JCR-4539] - Update Jackrabbit trunk and 2.20 to Oak 1.26.0
[JCR-4543] - Update Tika dependency to 1.24
[JCR-4544] - Update slf4j dependency to 1.7.30
[JCR-4545] - Update httpclient/mime dependencies to 4.5.12
[JCR-4546] - Update aws java sdk version to 1.11.700 (consistent 
with Oak)

[JCR-4547] - Update tomcat dependency to 8.5.53/7.0.103
[JCR-4548] - update javadoc-plugin dependency to 3.2.0
[JCR-4554] - Update Tika dependency to 1.24.1
[JCR-4555] - Update mockito dependency to 3.3.3
[JCR-4556] - Update tomcat dependency to 8.5.54
[JCR-4557] - update junit dependency to 4.13
[JCR-4558] - update Apache parent pom to version 23
[JCR-4559] - Update commons file-upload dependency to 1.4
[JCR-4560] - Update h2db dependency to 1.4.200
[JCR-4561] - webapp: update htmlunit dependency to 2.40.0
[JCR-4562] - Remove workaround for FELIX-2492
[JCR-4563] - test OSGi bundles
[JCR-4564] - jackrabbit-jcr-server: remove obsolete workaround for 
scr-plugin



For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit 2.16.6 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.16.6. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.16.6

Introduction


This is Apache Jackrabbit(TM) 2.16.6, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.16.6 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.16.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.

Changes in Jackrabbit 2.16.6


Bug

[JCR-4482] - jcr2spi: WorkspaceContentHandler leaks temp files
[JCR-4483] - jcr2spi: potential NPE in ImportHandler.endDocument
[JCR-4484] - jcr-tests: SerializationTest needs to cleanup after 
parse failures in import tests
[JCR-4485] - InternalValueFactory.create(File) does not close input 
stream


Improvement

[JCR-4470] - update javadoc-plugin dependency to 3.1.1
[JCR-4475] - Improve o.a.j.jcr2dav.RepositoryStubImpl to test with 
custom servlet path mapping

[JCR-4497] - pass computed args to surefire/failsafe invocations
[JCR-4499] - Update jacoco dependency to 0.8.5 and align config 
with Oak

[JCR-4500] - jcr-commons: enable coverage checks
[JCR-4501] - jcr-commons: add test coverage for ISO8601 util

Task

[JCR-4476] - Update httpcore dependency to 4.4.12
[JCR-4478] - Update httpclient/mime dependencies to 4.5.10
[JCR-4489] - Update jacoco dependency to 0.8.4
[JCR-4496] - align ISO8601 class in tests with jcr-commons version
[JCR-4504] - Update maven-bundle-plugin to 4.2.1
[JCR-4505] - Update maven-assembly-plugin to 3.2.0
[JCR-4506] - Update maven-jar-plugin to 3.2.0
[JCR-4507] - Update spotbugs-maven-plugin to 3.1.12.2
[JCR-4508] - Upgrade maven-scr-plugin to 1.26.2
[JCR-4510] - Update Tika dependency to 1.23
[JCR-4511] - Update slf4j dependency to 1.7.29
[JCR-4512] - Update maven-scr-plugin to 1.26.4
[JCR-4529] - Update tomcat dependency to 8.5.50
[JCR-4531] - Update tomcat dependency to 8.5.51/7.0.100


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.10 retired

[Julian Reschke]

Dear users of Apache Jackrabbit,

the Apache Jackrabbit Team has decided to drop support and deprecate the 
1.10 branch of Apache Jackrabbit Oak. Branch, tags and releases will 
still be available for future references, but will not show up on the 
download page anymore. Users are encouraged to upgrade to the latest 
release of the newest maintenance branch (1.22.2).


See , 
 and 
 for further information.


Best regards, Julian

[ANNOUNCE] Apache Jackrabbit Oak 1.0 retired

[Julian Reschke]

Dear users of Apache Jackrabbit,

the Apache Jackrabbit Team has decided to drop support and deprecate the 
1.0 branch of Apache Jackrabbit Oak. Branch, tags and releases will 
still be available for future references, but will not show up on the 
download page anymore. Users are encouraged to upgrade to the latest 
stable versions (1.26.0 for Java 8, 1.6.20 for Java 7, 1.2.31 for Java 6 
(*)).


See , 
 and 
 for further information.


Best regards, Julian

(*) But note that 1.2 is planned to be retired in May as well.

[ANNOUNCE] Apache Jackrabbit Oak 1.26.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.26.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.26.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.26.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.26.0
-

Bug

[OAK-7358] - Remove all usage of java.security.acl.Group for Java 14
[OAK-8855] - Permission evaluation of nodes broken after :nestedCug 
removed from parent node

[OAK-8885] - Test failure: NPE in MongoFixture.createDocumentStore()
[OAK-8889] - NPE in the oak-run console az:*
[OAK-8894] - Build error on travis-ci
[OAK-8902] - Add support in oak-run to list down blob ids for 
lucene indexes
[OAK-8922] - oak-run-commons: OakFixture broken for BlobStores that 
do not implement BlobAccessProvider
[OAK-8928] - Retry reading the graph and binary references in 
Segment Store migrator
[OAK-8936] - ValueImpl does not properly set domain override flag 
of BlobDownloadOptions

[OAK-8944] - Missing journal entry on recovery
[OAK-8945] - Cannot apply node restrictions without checking-out 
the node
[OAK-8946] - Cannot apply node restrictions without checking-out 
the node
[OAK-8948] - ObservationManager.addEventListener() throws NPE with 
invalid paths in filter
[OAK-8949] - PrincipalRestrictionProvider.writeRestrictions does 
not filter rep:nodePath restriction


Epic

[OAK-8561] - Oak should compile & test on Java 14

New Feature

[OAK-8494] - Support AWS Key Managed Service (SSE-KMS)

Improvement

[OAK-8787] - Remove older index versions from repository
[OAK-8869] - Access azure segments metadata in a case-insensitive way
[OAK-8874] - deprecate use of Guava Predicate class in oak-core API
[OAK-8878] - Expose downloaded (and uploaded) blob bytes as 
metrics, not only as time series
[OAK-8901] - oak-run command checkpoints should support 
RDBDocumentStore
[OAK-8903] - Support for removing repository markers for transient 
repositories

[OAK-8914] - Throttle Revision GC
[OAK-8930] - More resilient blob listing for the Azure Segment Store
[OAK-8934] - Indexing: filter entries with a regular expression
[OAK-8950] - DataStore: FileCache should use one cache segment

Task

[OAK-7671] - [oak-run] Deprecate the datastorecheck command in 
favor of datastore
[OAK-8875] - Update aws-java-sdk-osgi version to 1.11.700 in 
Oak-blob-cloud

[OAK-8883] - Update jar plugin to 3.2.0
[OAK-8892] - Add javadoc to package-info files
[OAK-8899] - Benchmarks: AddMembersTest with 'membershipSizeThreshold'
[OAK-8905] - AsyncIndexUpdate: improve logging when checkpoint 
cleanup gets skipped

[OAK-8910] - Improve OAK Lucene Index Documentation
[OAK-8919] - examples: update Tomcat dependency to 7.0.100
[OAK-8953] - Update httpclient/mime dependencies to 4.5.12
[OAK-8954] - update jackson dependency to 2.10.3
[OAK-8955] - Update slf4j dependency to 1.7.30
[OAK-8959] - Update Tika dependency to 1.24
[OAK-8960] - oak-benchmarks/oak-it-osgi: update commons-compress 
dependency to 1.20


Documentation

[OAK-8881] - Add section 'security reports' to the oak docu
[OAK-8884] - Broken link to DynamicSyncContext in defaultusersync.md

Technical task

[OAK-8788] - Add index creation and index completion time to indexes
[OAK-8861] - oak-core-spi: bump up logging for deprecated Guava 
based APIs to WARN
[OAK-8862] - oak-commons: bump up logging for deprecated Guava 
based APIs to WARN

[OAK-8882] - RDBBlobStore: dump table structure on startup
[OAK-8906] - RDBDocumentStore on SQL Server (additional diags) log 
DB creation time

[OAK-8907] - RDBDocumentStore: change diagnostics from String to Map
[OAK-8909] - RDBBlobStore: when creating META table for SQL Server, 
assign readable name for PK
[OAK-8913] - RDB*Store: extract "additionalDiagnostics" code into 
separate class for re-use from RDBBlobStore
[OAK-8915] - RDBDocumentStore: use setNString() for columns known 
to be of type N*CHAR
[OAK-8916] - RDBBlobStore: log additional DB diagnostics (align 
with RDBDocumentStore)
[OAK-8918] - RDBBlobStore: warn when legacy (SQLServer) default 
collation is active

[OAK-8920] - update Tomcat JDBC dependency to 8.5.51
[OAK-8925] - RDBDocumentStore: for SQL S

[ANNOUNCE] Apache Jackrabbit 2.8 retired

[Julian Reschke]

Dear users of Apache Jackrabbit,

the Apache Jackrabbit Team has decided to drop support and deprecate the 
2.8 branch of Apache Jackrabbit. Branch, tags and releases will still be 
available for future references, but will not show up on the download 
page anymore. Users are encouraged to upgrade to the latest stable 
versions (2.20 for Java 8, 2.14 for Java 7, 2.12 (*) for Java 6).


See , 
 and 
 for further information.


Best regards, Julian

(*) But note that 2.12 is planned to be retired later this year as well.

[ANNOUNCE] Apache Jackrabbit Oak 1.8.21 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.8.21. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.8.21

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.8.21 is a patch release that contains fixes and
improvements over Oak 1.8. Jackrabbit Oak 1.8.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.8.21
-

Technical task

[OAK-8915] - RDBDocumentStore: use setNString() for columns known 
to be of type N*CHAR
[OAK-8932] - RDBDocumentStore: allow RDBVersionGC support fallback 
to simpler algorithm


Bug

[OAK-8855] - Permission evaluation of nodes broken after :nestedCug 
removed from parent node

[OAK-8894] - Build error on travis-ci

Task

[OAK-8774] - oak-benchmarks: update commons-compress dependency to 1.19
[OAK-8919] - examples: update Tomcat dependency to 7.0.100
[OAK-8938] - Oak run recovery fails when running on mongo 
replicaSet with auth enabled





In addition to the above-mentioned changes, this release contains
all changes included up to the Apache Jackrabbit Oak 1.8.x release.

For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by SHA512 checksums and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit 2.18.5 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.18.5. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.18.5

Introduction


This is Apache Jackrabbit(TM) 2.18.5, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.18.5 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.18.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.


Changes in Jackrabbit 2.18.5


Improvement

[JCR-4497] - pass computed args to surefire/failsafe invocations
[JCR-4499] - Update jacoco dependency to 0.8.5 and align config 
with Oak

[JCR-4500] - jcr-commons: enable coverage checks
[JCR-4501] - jcr-commons: add test coverage for ISO8601 util
[JCR-4502] - ISO8601: add convenience methods that do not require 
passing a Calendar, also support short format without ms information


Task

[JCR-4496] - align ISO8601 class in tests with jcr-commons version
[JCR-4504] - Update maven-bundle-plugin to 4.2.1
[JCR-4505] - Update maven-assembly-plugin to 3.2.0
[JCR-4506] - Update maven-jar-plugin to 3.2.0
[JCR-4507] - Update spotbugs-maven-plugin to 3.1.12.2
[JCR-4508] - Upgrade maven-scr-plugin to 1.26.2
[JCR-4510] - Update Tika dependency to 1.23
[JCR-4511] - Update slf4j dependency to 1.7.29
[JCR-4512] - Update maven-scr-plugin to 1.26.4
[JCR-4529] - Update tomcat dependency to 8.5.50
[JCR-4531] - Update tomcat dependency to 8.5.51/7.0.100

For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.4.26 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.4.26. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.4.26

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.4.26 is a patch release that contains fixes and
improvements over Oak 1.4. Jackrabbit Oak 1.4.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Note that an "end of life" date has already been planned for this 
branch. See

 for details.


Changes in Oak 1.4.26
-

Bug

[OAK-8870] - UserAuthentication.authenticate should remove pw attribute

Test

[OAK-8535] - oak-it-osgi fails with encrypted credentials in 
settings.xml


Task

[OAK-8813] - oak-it-osgi: cover oak-solr-osgi bundle


In addition to the above-mentioned changes, this release contains
all changes included up to the Apache Jackrabbit Oak 1.4.x release.

For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by SHA512 checksums and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit 2.21.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.21.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.21.0

Introduction


This is Apache Jackrabbit(TM) 2.21.0, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.21.0 is an unstable release cut directly from
Jackrabbit trunk, with a focus on new features and other
improvements. For production use we recommend the latest stable 2.20.x
release.

Changes in Jackrabbit 2.21.0


Task

[JCR-4491] - Upgrade Commons VFS to 2.6
[JCR-4516] - switch bundle comparisonVersion for 2.20.0
[JCR-4519] - Update httpcore dependency to 4.4.13
[JCR-4520] - Update Jackrabbit trunk and 2.20 to Oak 1.22.0
[JCR-4522] - Update httpclient/mime dependencies to 4.5.11
[JCR-4525] - Update Jackrabbit trunk and 2.20 to Oak 1.24.0
[JCR-4529] - Update tomcat dependency to 8.5.50
[JCR-4530] - jackrabbit-core: avoid use of deprecated 
commons-collections Buffers


For more detailed information about all the changes in this and other
Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.txt file for instructions on how to build this release.

The source archive is accompanied by an SHA512 checksum and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit
---

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more.

For more information, visit http://jackrabbit.apache.org/

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

Trademarks
--

Apache Jackrabbit, Jackrabbit, Apache, the Apache feather logo, and the 
Apache

Jackrabbit project logo are trademarks of The Apache Software Foundation.

[ANNOUNCE] Apache Jackrabbit Oak 1.22.1 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.22.1. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.22.1

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.22.1 is a patch release that contains fixes and
improvements over Oak 1.22. Jackrabbit Oak 1.22.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.22.1
-

Bug

[OAK-8780] - Remove the synchronized block on the FSBackend
[OAK-8845] - Function-based indexing don't support ordering
[OAK-8855] - Permission evaluation of nodes broken after :nestedCug 
removed from parent node

[OAK-8870] - UserAuthentication.authenticate should remove pw attribute
[OAK-8894] - Build error on travis-ci

Improvement

[OAK-6632] - [upgrade] oak-upgrade should support azure blobstorage

Task

[OAK-8856] - Update httpcore dependency to 4.4.13
[OAK-8867] - Update httpclient/mime dependencies to 4.5.11
[OAK-] - Disable lazy Lucene index file loading in 1.22 branch 
(flip default)



In addition to the above-mentioned changes, this release contains
all changes included up to the previous Apache Jackrabbit Oak 1.22.x 
release.


For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by a SHA512 checksums and a PGP
signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit Oak 1.6.20 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.6.20. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.6.20

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.6.20 is a patch release that contains fixes and
improvements over Oak 1.6. Jackrabbit Oak 1.6.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.6.20
-

Bug

[OAK-8870] - UserAuthentication.authenticate should remove pw attribute

Task

[OAK-8813] - oak-it-osgi: cover oak-solr-osgi bundle



In addition to the above-mentioned changes, this release contains
all changes included up to the Apache Jackrabbit Oak 1.6.x release.

For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by SHA512 checksums and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

ANNOUNCE] Apache Jackrabbit Oak 1.8.20 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.8.20. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.8.20

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.8.20 is a patch release that contains fixes and
improvements over Oak 1.8. Jackrabbit Oak 1.8.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.8.20
-

Bug

[OAK-8807] - Update FileCache to use non-cache segment blocking method
[OAK-8870] - UserAuthentication.authenticate should remove pw attribute

Task

[OAK-8813] - oak-it-osgi: cover oak-solr-osgi bundle



In addition to the above-mentioned changes, this release contains
all changes included up to the Apache Jackrabbit Oak 1.8.x release.

For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by SHA512 checksums and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit Oak 1.10.8 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.10.8. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.10.8

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.10.8 is a patch release that contains fixes and
improvements over Oak 1.10. Jackrabbit Oak 1.10.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.10.8
-

Bug

[OAK-8780] - Remove the synchronized block on the FSBackend
[OAK-8781] - Add debug logs before and after cache purge to get the 
uploadCache size info

[OAK-8870] - UserAuthentication.authenticate should remove pw attribute



In addition to the above-mentioned changes, this release contains
all changes included up to the previous Apache Jackrabbit Oak 1.10.x 
release.


For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by a SHA512 checksums and a PGP
signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit Oak 1.24.0 released

[Julian Reschke]

From: ${username}@apache.org
To: announce@apache.org, annou...@jackrabbit.apache.org, 
us...@jackrabbit.apache.org, d...@jackrabbit.apache.org, 
oak-...@jackrabbit.apache.org

Subject: [ANNOUNCE] Apache Jackrabbit Oak 1.24.0 released

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.24.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.24.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.24.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.24.0
-

Bug

[OAK-8780] - Remove the synchronized block on the FSBackend
[OAK-8845] - Function-based indexing don't support ordering
[OAK-8863] - Oak-doc should cover BinaryUploadOptions usage
[OAK-8870] - UserAuthentication.authenticate should remove pw attribute

Improvement

[OAK-6632] - [upgrade] oak-upgrade should support azure blobstorage

Task

[OAK-8856] - Update httpcore dependency to 4.4.13
[OAK-8867] - Update httpclient/mime dependencies to 4.5.11


In addition to the above-mentioned changes, this release contains all
changes up to the previous release.

For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by SHA512 checksums and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit Oak 1.8.19 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.8.19. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.8.19

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.8.19 is a patch release that contains fixes and
improvements over Oak 1.8. Jackrabbit Oak 1.8.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.8.19
-

Bug

[OAK-8780] - Remove the synchronized block on the FSBackend
[OAK-8781] - Add debug logs before and after cache purge to get the 
uploadCache size info


Improvement

[OAK-8648] - Log reason why NodeDocumentSweeper.sweep is called

Task

[OAK-8649] - Update to jacoco 0.8.5 (version compatible with Java 14)
[OAK-8652] - Update jacoco dependency to 0.8.4


In addition to the above-mentioned changes, this release contains
all changes included up to the Apache Jackrabbit Oak 1.8.x release.

For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents


This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by SHA512 checksums and a
PGP signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation


Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/

[ANNOUNCE] Apache Jackrabbit Oak 1.22.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit Oak 1.22.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit Oak -- Version 1.22.0

Introduction


Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Apache Jackrabbit Oak 1.22.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

Changes in Oak 1.22.0
-

Bug

[OAK-6098] - Build timeout
[OAK-8104] - [Direct Binary Access] DataRecordDownloadOptions 
should properly support filename* for Content-Disposition
[OAK-8695] - [Direct Binary Access] upload algorithm documentation 
should make it clear that not all URIs have to be used
[OAK-8696] - [Direct Binary Access] upload algorithm documentation 
should also be on the website
[OAK-8710] - AbstractLoginModule#logout() must not remove 'foreign' 
principals/credentials
[OAK-8760] - ClusterViewDocument uses static instance of 
SimpleDateFormat
[OAK-8781] - Add debug logs before and after cache purge to get the 
uploadCache size info
[OAK-8786] - Remove temporary file on upload immediately after a 
sync upload

[OAK-8799] - oak-http: broken Export-Package statement
[OAK-8800] - TokenLoginModule does not add principals from subject 
to AuthInfo
[OAK-8801] - LoginModuleImpl will not populate auth info if subject 
is readonly
[OAK-8802] - ExternalLoginModule.commit will fail if no principals 
can be resolved for externalUser
[OAK-8803] - AbstractLoginModule and subclasses: successful commit 
must not clear state information required for successful logout

[OAK-8807] - Update FileCache to use non-cache segment blocking method
[OAK-8818] - oak-run test failures when running with -Dazure.config 
defined

[OAK-8825] - S3 tests fail due to non-existent bucket

Improvement

[OAK-5787] - BlobStore should be AutoCloseable
[OAK-8280] - [Direct Binary Access] Allow client to veto use of CDN URI
[OAK-8778] - NodeImpl: remove unnecessary null check
[OAK-8804] - AuthInfoImpl: add constructor with iterable-principals 
instead of set
[OAK-8828] - Configure the maximum number of journal entries to be 
copied with segment-copy
[OAK-8854] - Improved log message when failed to index an node due 
to IOException


Task

[OAK-8743] - org.apache.jackrabbit.oak.stats.Clock should extend 
from java.time.Clock

[OAK-8782] - enable coverage checks for oak-core-spi
[OAK-8789] - bump up logging for deprecated security APIs to WARN
[OAK-8796] - Update maven-assembly-plugin to 3.2.0
[OAK-8798] - Upgrade maven-bundle-plugin to 4.2.1
[OAK-8805] - update org.apache.felix.scr.bnd dependency to 1.9.4
[OAK-8808] - Update maven-bundle-plugin to 4.1.0
[OAK-8810] - oak-lucene: adjust Import-Package declaration for 
upgrade of maven-bundle-plugin to 4.2.1

[OAK-8813] - oak-it-osgi: cover oak-solr-osgi bundle
[OAK-8816] - oak-solr-osgi: adjust Import-Package declaration for 
upgrade of maven-bundle-plugin to 4.2.1

[OAK-8819] - Update jetbrains nullability annotions to 18.0.0
[OAK-8820] - Update slf4j dependency to 1.7.29
[OAK-8821] - Update Tika dependency to 1.23
[OAK-8823] - Update org.apache.felix.scr.bnd to 1.9.6
[OAK-8824] - update jackson dependency to 2.10.1
[OAK-8829] - oak-solr-osgi: decouple jackson dependency from 
project dependency
[OAK-8830] - oak-store-document: update org.quartz-scheduler 
dependency to 2.3.2

[OAK-8835] - Update Oak trunk to Jackrabbit 2.20.0
[OAK-8839] - update release schedule
[OAK-8844] - update jackson dependency to 2.10.2
[OAK-8846] - oak-store-document: remove commons-lang test dependency
[OAK-8847] - update to commons-lang3 3.9 and define version globally
[OAK-8850] - oak-jcr tests: switch to commons-lang3
[OAK-8851] - oak-upgrade: switch to commons-lang3
[OAK-8852] - oak-it: remove unused commons-lang dependency
[OAK-8853] - oak-segment-tar tests: switch to commons-lang3

Documentation

[OAK-8826] - Update incorrect logback segment-copy configuration 
file name


Technical task

[OAK-8607] - Undo workarounds for improper Content-Disposition support
[OAK-8791] - oak-core-spi: bump up logging for deprecated Guava 
based APIs to INFO
[OAK-8792] - oak-core-spi: CacheLIRS deprecation: add 
'org.apache.jackrabbit.oak.plugins.segment' to allowed caller list
[OAK-8795] - oak-commons: bump up logging for deprecated Guava 
bas

[ANNOUNCE] Apache Jackrabbit 2.20.0 released

[Julian Reschke]

The Apache Jackrabbit community is pleased to announce the release of
Apache Jackrabbit 2.20.0. The release is available for download at:

 http://jackrabbit.apache.org/downloads.html

See the full release notes below for details about this release:



Release Notes -- Apache Jackrabbit -- Version 2.20.0

Introduction


This is Apache Jackrabbit(TM) 2.20.0, a fully compliant implementation 
of the

Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as
specified in the Java Specification Request 283 (JSR 283).

Apache Jackrabbit 2.20.0 is an incremental feature release based on
and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit
2.20.x releases are considered stable and targeted for production use.

The minimum Java version for this release is Java 8. See

  http://jackrabbit.apache.org/jcr/downloads.html

for maintenance versions that support earlier Java versions.

Be aware of the artifact changes below:

1) jackrabbit-api has been removed; use Jackrabbit Oak's oak-jackrabbit-api
   instead (JCR-4449)
2) jackrabbit-bundle has been removed (JCR-4440)
3) jackrabbit-standalone-components has been added (JCR-4401)


Changes in Jackrabbit 2.20.0


Bug

[JCR-4408] - jackrabbit-webapp: test dependency for httpcore breaks 
war file

[JCR-4420] - Release Notes: term "SHA1" no longer allowed
[JCR-4425] - NodeSetPrimaryTypeTest.testSetPrimaryType() must not 
use nt:activity

[JCR-4455] - condition index-rule handling more broken after JCR-4339
[JCR-4458] - When JcrRemotingServlet deployed on non-root context, 
AclResource Webdav request fails

[JCR-4459] - Basic Authentication for HTTPS URIs does not work
[JCR-4482] - jcr2spi: WorkspaceContentHandler leaks temp files
[JCR-4483] - jcr2spi: potential NPE in ImportHandler.endDocument
[JCR-4484] - jcr-tests: SerializationTest needs to cleanup after 
parse failures in import tests
[JCR-4485] - InternalValueFactory.create(File) does not close input 
stream


New Feature

[JCR-4429] - Add extension of JackrabbitAccessControlList bound to 
a principal


Improvement

[JCR-4278] - Remove all usage of java.security.acl.Group for Java 11
[JCR-4401] - Split jackrabbit-standalone to 
jackrabbit-standalone-components and the rest

[JCR-4448] - Update committer list in jackrabbit-parent/pom.xml
[JCR-4467] - Remove all usage of java.security.acl.Group for Java 14
[JCR-4469] - link jackrabbit-api api docs from Oak
[JCR-4470] - update javadoc-plugin dependency to 3.1.1
[JCR-4475] - Improve o.a.j.jcr2dav.RepositoryStubImpl to test with 
custom servlet path mapping

[JCR-4497] - pass computed args to surefire/failsafe invocations
[JCR-4499] - Update jacoco dependency to 0.8.5 and align config 
with Oak

[JCR-4500] - jcr-commons: enable coverage checks
[JCR-4501] - jcr-commons: add test coverage for ISO8601 util
[JCR-4502] - ISO8601: add convenience methods that do not require 
passing a Calendar, also support short format without ms information


Task

[JCR-4394] - switch bundle comparisonVersion for 2.18
[JCR-4400] - Update tika dependency to 1.20
[JCR-4403] - update spotbugs dependency to 3.1.10
[JCR-4404] - update maven-assembly-plugin dependency to 3.1.1
[JCR-4405] - update maven-jar-plugin dependency to 3.1.1
[JCR-4406] - update maven-bundle-plugin dependency to 4.1.0
[JCR-4407] - Update httpcore dependency to 4.4.11
[JCR-4409] - jackrabbit-webapp: embed JCR 2.0 API
[JCR-4410] - jackrabbit-webapp: cleanup left over Oak references
[JCR-4411] - Update httpclient/mime dependencies to 4.5.7
[JCR-4415] - Update Jetty dependency to 9.2.26.v20180806
[JCR-4416] - Update slf4j dependency to 1.7.26
[JCR-4422] - Update httpclient/mime dependencies to 4.5.8
[JCR-4427] - set baseline comparisonVersion to latest stable (2.18.1)
[JCR-4428] - update Apache parent pom to version 21
[JCR-4437] - Update Tika dependency to 1.21
[JCR-4438] - jcr-webdav: AbstractLocatorFactory - fix Javadoc and 
add trace logging

[JCR-4439] - disable baseline check for jackrabbit-bundle
[JCR-4440] - remove jackrabbit-bundle
[JCR-4441] - Update surefire/failsafe dependencies to 2.22.2
[JCR-4442] - Update animal-sniffer dependency to 1.18
[JCR-4443] - set baseline comparisonVersion to latest stable (2.18.2)
[JCR-4447] - jackrabbit-jcr-commons: update cglib dependency
[JCR-4449] - remove jackrabbit-api and use oak-jackrabbit-api instead
[JCR-4450] - update checkstyle-plugin dependency to 3.1.0
[JCR-4451] - update jar-plugin dependency to 3.1.2
[JCR-4452] - update war-plugin dependency to 3.2.3
[JCR-4453] - update pmd-plugin dependency to 3.12.0
[JCR-4454] - update surefire-report-plugin dependency to 2.22.2
[JCR-4457] - Update httpclient/mime dependencies to 4.5.9
[JCR-4460] - allow to run remoted conformance tests with a custom