8.13.0

What's Changed

New Features 🎉

• Add Ubuntu 26.04 to build matrix by @bastelfreak in #251
• ezbake: Update 2.7.3->2.7.4 by @bastelfreak in #252
• remove unused build dependencies by @bastelfreak in #254
• Depend on latest openvox-agent packages by @bastelfreak in #253
• openvoxserver-ca: Update 3.1.1->3.2.0 by @bastelfreak in #256

Bug Fixes 🐛

• Change chown during install to check java.security.fips file existence by @nmburgan in #199

Dependency Updates ⬆️

• Update dependency commons-codec:commons-codec to v1.21.0 by @renovate[bot] in #200
• Update dependency com.fasterxml.jackson.core:jackson-annotations to v2.21 by @renovate[bot] in #180
• Update openvoxserver-ca gem version 3.0.0->3.1.1 by @corporate-gadfly in #206
• chore(deps): update jackson-version to v2.21.1 by @renovate[bot] in #130
• chore(deps): update dependency org.openvoxproject:rbac-client to v1.2.6 by @renovate[bot] in #218
• chore(deps): update dependency org.yaml:snakeyaml to v2.6 by @renovate[bot] in #219
• chore(deps): update dependency ring:ring-core to v1.15.3 by @renovate[bot] in #205
• Update jackson-version to v2.21.2 by @renovate[bot] in #226
• Update dependency org.openvoxproject:trapperkeeper to v4.3.4 by @renovate[bot] in #238
• Update dependency org.openvoxproject:kitchensink to v3.5.6 by @renovate[bot] in #234
• Update dependency org.openvoxproject:trapperkeeper-webserver-jetty10 to v1.1.5 by @renovate[bot] in #239
• Update dependency org.openvoxproject:trapperkeeper-authorization to v2.1.7 by @renovate[bot] in #243
• Update dependency org.bouncycastle:bcpkix-jdk18on to v1.84 by @renovate[bot] in #246
• Update dependency org.openvoxproject:trapperkeeper-authorization to v2.1.8 by @renovate[bot] in #249
• Update dependency org.openvoxproject:rbac-client to v1.2.7 by @renovate[bot] in #248
• Update dependency org.openvoxproject:ring-middleware to v2.1.6 by @renovate[bot] in #237
• Update dependency cheshire:cheshire to v6 by @renovate[bot] in #160
• Chore(deps-dev): Update github_changelog_generator requirement from ~> 1.16.4 to ~> 1.18 by @dependabot[bot] in #225
• Update dependency commons-io:commons-io to v2.22.0 by @renovate[bot] in #255
• Update dependency org.openvoxproject:comidi to v1.1.3 by @renovate[bot] in #257
• Update dependency org.openvoxproject:i18n to v1.0.4 by @renovate[bot] in #258
• Update dependency org.openvoxproject:ssl-utils to v3.6.4 by @renovate[bot] in #260
• Update dependency org.openvoxproject:kitchensink to v3.5.7 by @renovate[bot] in #259
• Update dependency org.openvoxproject:rbac-client to v1.2.9 by @renovate[bot] in #265
• Update dependency org.openvoxproject:clj-shell-utils to v2.1.2 by @renovate[bot] in #261
• Update dependency org.openvoxproject:http-client to v2.2.7 by @renovate[bot] in #262
• Update dependency org.openvoxproject:ring-middleware to v2.1.7 by @renovate[bot] in #266
• Update dependency org.openvoxproject:trapperkeeper-authorization to v2.1.9 by @renovate[bot] in #267
• Update dependency org.openvoxproject:trapperkeeper to v4.3.5 by @renovate[bot] in #263
• Update dependency org.openvoxproject:jruby-utils to v5.3.8 by @renovate[bot] in #264
• Update dependency org.openvoxproject:trapperkeeper-webserver-jetty10 to v1.1.7 by @renovate[bot] in #270
• Update dependency org.openvoxproject:trapperkeeper-filesystem-watcher to v1.5.2 by @renovate[bot] in #268
• Update dependency org.openvoxproject:trapperkeeper-comidi-metrics to v1.0.5 by @renovate[bot] in #273
• Update dependency org.openvoxproject:trapperkeeper-scheduler to v1.3.2 by @renovate[bot] in #271
• Update dependency org.openvoxproject:trapperkeeper-metrics to v2.1.8 by @renovate[bot] in #269
• Update dependency org.openvoxproject:trapperkeeper-status to v1.3.4 by @renovate[bot] in #272
• Update dependency commons-codec:commons-codec to v1.22.0 by @renovate[bot] in #275
• Update dependency org.openvoxproject:trapperkeeper-webserver-jetty10 to v1.1.8 by @renovate[bot] in #277
• Update dependency org.openvoxproject:trapperkeeper-comidi-metrics to v1.0.7 by @renovate[bot] in #282
• Update dependency org.openvoxproject:ring-middleware to v2.1.8 by @renovate[bot] in #280
• Update dependency org.openvoxproject:trapperkeeper-metrics to v2.1.11 by @renovate[bot] in #276
• Update dependency org.openvoxproject:rbac-client to v1.2.10 by @renovate[bot] in #279
• Update dependency org.openvoxproject:trapperkeeper-status to v1.3.5 by @renovate[bot] in #283
• Update jackson-version to v2.21.3 by @renovate[bot] in #285
• Update dependency org.openvoxproject:trapperkeeper-authorization to v2.1.10 by @renovate[bot] in #281
• Update dependency org.openvoxproject:http-client to v2.2.8 by @renovate[bot] in #278

Other Changes

• Use new ezbake methods for managing BC FIPS jars by @nmburgan in #196
• Add Podman compatibility to vox:build task by @Sharpie in #228
• remove unused dujour-version-check by @corporate-gadfly in #231
• Remove dujour-version-check from dependencies by @corporate-gadfly in #232
• replace Joda-Time with with java.time API by @corporate-gadfly in #233
• version bump for dependencies by @corporate-gadfly in #242
• Remove FIPS BC jars from ezbake-fips dependencies by @nmburgan in #274
• fix: include tarballs in snapshot artifact upload by matching on version by @slauger in #286

New Contributors

• @bootc made their first contribution in #204
• @Sharpie made their first contribution in #228
• @slauger made their first contribution in #286
• @miharp made their first contribution in #290

Full Changelog: 8.12.1...8.13.0

8.12.1

This release fixes a performance regression in 8.12.0 due to the ring-core dependency.

What's Changed

Dependency Updates ⬆️

• Update dependency org.openvoxproject:jruby-utils to v5.3.6 by @renovate[bot] in #185
• Update dependency org.openvoxproject:ring-middleware to v2.1.4 by @renovate[bot] in #187
• Update dependency org.openvoxproject:rbac-client to v1.2.4 by @renovate[bot] in #186
• Update dependency org.openvoxproject:trapperkeeper-webserver-jetty10 to v1.1.4 by @renovate[bot] in #192
• Update dependency org.openvoxproject:trapperkeeper-authorization to v2.1.6 by @renovate[bot] in #188
• Update dependency org.openvoxproject:trapperkeeper-metrics to v2.1.7 by @renovate[bot] in #190
• Update dependency org.openvoxproject:trapperkeeper-comidi-metrics to v1.0.4 by @renovate[bot] in #189
• Update dependency org.openvoxproject:trapperkeeper-status to v1.3.2 by @renovate[bot] in #191

Other Changes

• CI: Drop beaker-abs & beaker-vmpooler, allow latest beaker-hostgenerator by @bastelfreak in #171
• CI: Update comment with ZIP link by @bastelfreak in #179
• Downgrade ring-core to version 1.14.2 by @nmburgan in #184

Full Changelog: 8.12.0...8.12.1

8.12.0

This version represents a significant change in how openvox-server is built. Most of this is under the hood, but should lower the bar to development and allow us to make changes more easily and rapidly.

In addition to the standard GitHub release notes, these are the important changes in this version.

• Platform support
  • Removed: EL 7
  • Added: Amazon Linux 2, Fedora 42, Fedora 43, Redhatfips 8, Redhatfips 9
  • Note that Amazon Linux 2 support will be removed when it goes EOL in June of 2026
  • Note that the platform name redhatfips is used since Puppet uses this nomenclature, but it should work on any FIPS-enabled Enterprise Linux-based platform.
• Java 11 support has been removed, and either Java 17 or Java 21 must be used.
• Removes Janino support. Logback removed support for it due to CVEs. This means that logbook evaluator filters are no longer supported. These were not commonly used so unless you specifically included tags in your logback config, you should not be affected.
• Also due to the removal of Janino, Trapperkeeper’s ‘post-config-script’ option for injecting Java code directly into Jetty for controlling low-level Jetty settings that are not exposed by Trapperkeeper is no longer supported. This is also a feature not commonly used, and was a potential security risk in itself.
• This version of openvox-server and all related components have now been migrated to the org.openvoxproject namespace and are available on Clojars, with fixed up testing and release workflows.
• The systemd service now sets PrivateTmp=true. This improves security by eliminating a common target for malicious activity.
• Lots and lots of dependency updates that you should not notice, but brings the code up to a more maintainable standard.
• The following third-party components were updated to address CVEs:
  • JRuby 9.4.8.0 -> 9.4.12.1: CVE-2025-46551
  • Jetty 10.0.20 -> 10.0.26: CVE-2025-5115, CVE-2024-8184
  • jackson-databind 2.14.0 -> 2.20.1: CVE-2025-52999
  • logback 1.3.14 -> 1.3.16: CVE-2024-12798, CVE-2024-12801, CVE-2025-11226
  • commons-beanutils 1.9.4 -> 1.11.0: CVE-2025-48734
  • Bouncy Castle non-FIPS 1.78.1 -> 1.83: CVE-2025-8916
• Additionally, this is the first FIPS release of OpenVox server, but compared to the baseline FIPS config from before the fork:
  • bcpkix-fips 1.0.7 -> 1.0.8: CVE-2025-8916
  • bc-fips 1.0.2.5 -> 1.0.2.6: CVE-2025-8885

What's Changed

New Features 🎉

• Add Ruby 4.0 support by @bastelfreak in #107
  • Note: This is for testing future Ruby 4 support. OpenVox 8 still relies on Ruby 3.2.
• lein-parent: Update 0.3.7->0.3.9 by @bastelfreak in #108
• Update dependencies by @nmburgan in #105
• Add Ubuntu 25.10 support by @bastelfreak in #138
  • Note: This is for test builds, and not part of the officially supported set of platforms for OpenVox at this time.

Bug Fixes 🐛

• remove stale dependencies and imports by @corporate-gadfly in #106

Dependency Updates ⬆️

• Update dependency lein-pprint:lein-pprint to v1.3.2 by @renovate[bot] in #77
• Update dependency lambdaisland:uri to v1.19.155 by @renovate[bot] in #76
• Update dependency jonase:eastwood to v1.4.3 by @renovate[bot] in #72
• Update dependency pjstadig:humane-test-output to v0.11.0 by @renovate[bot] in #78
• Chore(deps): Update public_suffix requirement from >= 4.0.7, < 7 to >= 4.0.7, < 8 by @dependabot[bot] in #95
• Update dependency org.ow2.asm:asm to v9.9.1 by @renovate[bot] in #123
• Update dependency org.apache.commons:commons-exec to v1.6.0 by @renovate[bot] in #121
• Update dependency clj-time:clj-time to v0.15.2 by @renovate[bot] in #117
• Update dependency io.dropwizard.metrics:metrics-core to v3.2.6 by @renovate[bot] in #116
• Update dependency commons-codec:commons-codec to v1.20.0 by @renovate[bot] in #118
• Update dependency commons-io:commons-io to v2.21.0 by @renovate[bot] in #119
• Update all the openvoxproject clojure libs by @renovate[bot] in #125
• chore(deps): update dependency org.openvoxproject:clj-shell-utils to v2.1.1 by @renovate[bot] in #140
• chore(deps): update dependency org.openvoxproject:trapperkeeper-scheduler to v1.3.1 by @renovate[bot] in #153
• chore(deps): update dependency org.openvoxproject:trapperkeeper-webserver-jetty10 to v1.1.2 by @renovate[bot] in #154
• chore(deps): update dependency org.openvoxproject:trapperkeeper-authorization to v2.1.4 by @renovate[bot] in #151
• chore(deps): update dependency org.openvoxproject:trapperkeeper-metrics to v2.1.3 by @renovate[bot] in #152
• chore(deps): update dependency org.openvoxproject:dujour-version-check to v1.1.1 by @renovate[bot] in #142
• chore(deps): update dependency org.openvoxproject:rbac-client to v1.2.2 by @renovate[bot] in #147
• chore(deps): update dependency ring-basic-authentication:ring-basic-authentication to v1.2.0 by @renovate[bot] in #126
• chore(deps): update dependency org.openvoxproject:kitchensink to v3.5.5 by @renovate[bot] in #146
• chore(deps): update dependency net.logstash.logback:logstash-logback-encoder to v7.4 by @renovate[bot] in #120
• chore(deps): update dependency org.yaml:snakeyaml to v2.5 by @renovate[bot] in #124
• chore(deps): update dependency ring:ring-mock to v0.6.2 - autoclosed by @renovate[bot] in #129
• chore(deps): update dependency ring:ring-codec to v1.3.0 by @renovate[bot] in #127
• chore(deps): update dependency ring:ring-core to v1.15.3 by @renovate[bot] in #128
• chore(deps): update dependency org.clojure:tools.namespace to v0.3.1 by @renovate[bot] in #122
• chore(deps): update dependency org.openvoxproject:trapperkeeper-comidi-metrics to v1.0.2 by @renovate[bot] in #161
• chore(deps): update dependency org.clojure:tools.reader to v1.6.0 by @renovate[bot] in #162
• chore(deps): update dependency org.openvoxproject:trapperkeeper-comidi-metrics to v1.0.3 by @renovate[bot] in #163
• chore(deps): update dependency org.openvoxproject:trapperkeeper-metrics to v2.1.6 by @renovate[bot] in #164

Other Changes

• (maint) Drop beaker parameters from beaker_acceptance.yml call by @jpartlow in #93
• Update gem lists by @nmburgan in #99
• Change namespace, update versions, update build task by @nmburgan in #101
• Remove testing Java 11 on el8 by @nmburgan in #104
• Remove clj-parent by @nmburgan in #114
• Add logback version check by @nmburgan in #139
• Move versions into managed deps and update openvox components by @nmburgan in #158
• Changes for FIPS by @nmburgan in #112
• Change how we define the version by @nmburgan in #166
• Update build task to handle building FIPS by @nmburgan in #165
• Add FIPS-only build by @nmburgan in #167
• More changes for FIPS builds by @nmburgan in #168
• split_external_cas test: don't use /tmp by @nmburgan in #169
• client_may_use_external_cert_chains test: don't use /tmp by @nmburgan in #170

New Contributors

• @renovate[bot] made their first contribution in #77
• @corporate-gadfly made their first contribution in #106

Full Changelog: 8.11.0...8.12.0

8.11.0

What's Changed

New Features 🎉

• Improve regen_certs script by @jcharaoui in #82

Bug Fixes 🐛

• Fix CRL test with uncommon timezone by @jcharaoui in #81

Other Changes

• Update net-imap by @binford2k in #86
• Allow override of ezbake version and fix ezbake ref passthrough by @nmburgan in #87
• Fix tag task by @nmburgan in #89

New Contributors

• @rwaffen made their first contribution in #67
• @jcharaoui made their first contribution in #82
• @binford2k made their first contribution in #86

Full Changelog: 8.10.0...8.11.0

8.10.0

What's Changed

New Features 🎉

• chore: update rexml to 3.4.1 by @SimonHoenscheid in #54
• Introduce EZBAKE_REPO to select the ezbake repository & optimize git clone by @ekohl in #59
• Run tests on JRE11, 17 & 21 (21 without FIPS) by @bastelfreak in #57
• Consider Java 21 "supported" by @smortex in #62
• depend on openvox-agent 8.21.1 or newer by @bastelfreak in #58

Other Changes

• sec: CVE 2024-49761 update rexml to 3.3.9 by @SimonHoenscheid in #42

New Contributors

• @SimonHoenscheid made their first contribution in #42

Full Changelog: 8.9.0...8.10.0

8.9.0

What's Changed

Bug Fixes 🐛

• Fix git submodules by @bastelfreak in #44

Other Changes

• packaging: Switch from Perforce to OpenVoxProject releases by @bastelfreak in #38
• (maint) Drop debian-10 from testing matrix by @jpartlow in #40
• Drop analytics/dropsonde integration in openvox-server by @ekohl in #9
• Replace puppetserver-ca gem with openvoxserver-ca by @bastelfreak in #34
• openvox-server: depend on openvox-agent 8.21.0 or newer by @bastelfreak in #53

New Contributors

• @bastelfreak made their first contribution in #18
• @dependabot[bot] made their first contribution in #27
• @smortex made their first contribution in #32
• @ekohl made their first contribution in #9

Full Changelog: 8.8.1...8.9.0