v7.0.5

• OKAPI-1247 OkapiClient should log errors
• OKAPI-1246 vert.x 5.1.1, junit 6.1.0, Netty 4.2.15.Final fixing vulns https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
• OKAPI-1248 Use GitHub Actions Workflows for Maven replacing Jenkinsfile
• OKAPI-1249 Trillium vulns: Vertx 5.1.3, micrometer 1.16.6 - CVE-2026-40984

Okapi 7.0.5 ships with hazelcast 5.6.0 that no longer supports the CP subsystem (hazelcast 5.5.0 release note, Vert.x hazelcast issue #194). Delete the <cp-subsystem> entry from the hazelcast configuration, otherwise Okapi fails at startup with java.lang.IllegalStateException: CP subsystem is a licensed feature. Please ensure you have an Enterprise license that enables CP.

v6.2.8

• OKAPI-1248 Use GitHub Actions Workflows for Maven replacing Jenkinsfile
• OKAPI-1250 Vertx 4.5.28 fixing Netty vulns https://github.com/netty/netty/releases/tag/netty-4.1.135.Final

v7.0.4

• OKAPI-1243 equals should support subclasses of ModuleId, SemVer, …
• OKAPI-1245 Vertx 5.0.12 fixing Netty vulns CVE-2026-42583, CVE-2026-42587, …

v6.2.7

• OKAPI-1244 Vertx 4.5.27, log4j 2.26.0 fixing vulns: CVE-2026-33871, CVE-2026-42583, CVE-2026-42587, CVE-2026-34481

v7.0.3

• OKAPI-1241 Jackson 2.18.6 fixing DoS when parsing long number - GHSA-72hv-8253-57qq
• #1439 MD post check=false param loosen MDs immutable check
• OKAPI-1242 Bump dependencies for Trillium (Vert.x 5.0.10, …)

v7.0.2

• OKAPI-1230 Add optional "required" property to EnvEntry.json of module descriptor
• OKAPI-1231 Migrate from AbstractVerticle to VerticleBase
• OKAPI-1232 Vert.x 5.0.6 fixing CVE-2025-67735 Netty CRLF injection
• OKAPI-1234 Support Docker 29 and later
• OKAPI-1236 upgrade to test-containers 2.0.3
• OKAPI-1238 log4j 4.5.23 fixing SocketAppender TLS hostname verification CVE-2025-68161
• OKAPI-1239 Vertx 5.0.7 (CVE-2026-1002), assertj 3.27.7, micrometer 1.16.2

v6.2.6

• OKAPI-1233 Vert.x 4.5.23 fixing CVE-2025-67735 Netty CRLF

v6.1.5

• OKAPI-1235 Vert.x 4.5.23 fixing CVE-2025-67735 Netty CRLF

v7.0.1

• OKAPI-1224 Upgrade Vert.x from 5.0.3 to 5.0.4 fixing CVE-2025-58056
• OKAPI-1229 Bump Vert.x from 5.0.4 to 5.0.5 fixing CVE-2025-59432, CVE-2025-11965, CVE-2025-11966
• OKAPI-1220 timer_wait_sync, timer_wait_extra options
• #1420 Remove unused scram client 2.1
• #1421 Update deps; allow JDK 25 compilation
• OKAPI-1228 Add META-INF VertxServiceProvider fixing FolioLoggingContext and FolioLocal

v6.2.5

• OKAPI-1225 Upgrade Vert.x from 4.5.18 to 4.5.21 fixing CVE-2025-58056, CVE-2025-58057 (Sunflower)