Release History

CVE-2026-102648 DSMLv2 gateway: incomplete internal-address check allows SSRF when anyURI dereferencing is enabled, thanks @tonghuaroot, @maximthomas ❤️

GHSA-jr68-5c58-j463 DSMLv2 gateway changes XML data binding of other applications in the same JVM, thanks @leanworld7-netizen, @maximthomas ❤️

GHSA-c5gp-3768-jc59 OAuth2 file token authorization lets an unauthenticated client select files outside the token directory, thanks @manus-pi, @Kr1shna4garwal, @maximthomas ❤️

GHSA-7778-jm7p-68g5 LDAP listener lets unauthenticated clients hold connections until the server stops accepting new ones, thanks @Kr1shna4garwal, @maximthomas ❤️

GHSA-6f6q-q9gw-4jr4 Sort and VLV controls let authenticated users learn password hashes and other attributes hidden by access control, thanks @daveaitel-openai, @maximthomas ❤️

[#747] fix flaky MS SQL MERGE upsert PRIMARY KEY violation with WITH (HOLDLOCK) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/750

[#748] stabilize flaky GrizzlyLDAPConnectionFactoryTestCase.testResourceManagement by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/749

[#746] remove stale opendj-server-legacy jar during upgrade by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/751

Bump ch.qos.logback to 1.5.38 by @prthakre in https://github.com/OpenIdentityPlatform/OpenDJ/pull/752

Bump org.bouncycastle by @prthakre in https://github.com/OpenIdentityPlatform/OpenDJ/pull/754

[#755] wait for the LDAP listener after in-process server (re)start by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/756

Fix java/insecure-randomness CodeQL alerts by using SecureRandom by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/758

Fix all cpp/ CodeQL code-scanning alerts in Windows build-tools by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/757

Fix java/implicit-cast-in-compound-assignment CodeQL alerts by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/759

Fix java/regex-injection CodeQL alert in TargAttrFilters by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/760

Fix remaining cpp/ CodeQL code-scanning alerts in Windows build-tools by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/762

[#766] Fix flaky GrizzlyLDAPListenerTestCase load-balancer tests by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/767

[#770] Fix flaky PostConnectedDisconnectTest by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/771

Fix java/zipslip CodeQL alerts by validating archive entry paths by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/761

Fix java/local-temp-file-or-directory-information-disclosure CodeQL alerts by using NIO temp file APIs by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/763

Fix java/redos CodeQL alert in LDIFChangeRecordReader by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/764

Fix java/tainted-arithmetic CodeQL alerts by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/765

[#768] Fix winlauncher.exe stop reporting success without stopping the server by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/772

[#769] Report stop progress to the SCM and never leave the service STOP_PENDING by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/773

CVE-2026-54291 PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms by @dependabot[bot] in https://github.com/OpenIdentityPlatform/OpenDJ/pull/774

Fix java/maven/non-https-url CodeQL alert by dropping the unused Oracle HTTP repository by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/775

Fix java/comparison-with-wider-type CodeQL alert in SNMPMonitor.pow by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/777

Fix java/rsa-without-oaep CodeQL alert by dropping the RSA PKCS#1 v1.5 fallback by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/776

Fix java/overly-large-range CodeQL alerts by correcting the A-z letter ranges by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/779

Harden GitHub Actions workflows: least-privilege permissions and SHA-pinned actions by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/778

Fix java/sleep-with-lock-held CodeQL alert in ControlPanelInfo.stopPooling() by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/780

Fix wrong-equals-signature and inconsistent-equals-and-hashcode CodeQL alerts in AttributeDescription by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/783

Remove the never-populated globalArgumentMap from SubCommandArgumentParser by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/786

Remove containers whose contents are never read (java/unused-container CodeQL alerts) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/784

Fix java/equals-on-unrelated-types CodeQL alerts by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/781

Fix type-mismatch, index-out-of-bounds and boxed-equality CodeQL alerts by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/782

Fix concurrency and equals-contract CodeQL alerts by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/785

Notify connection event listeners when an internal connection is closed by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/787

Fix java/unsynchronized-getter CodeQL alerts in DebugLogPublisher by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/788

Fix CodeQL warning-severity alerts: weak salt PRNG, unsafe DCL, thread-unsafe date formats by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/789

Fix CodeQL warning-severity alerts: missed wakeups, resource leaks, escaping threads by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/790

Add explicit default clauses to switches flagged by java/missing-case-in-switch by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/791

Fix CodeQL warning-severity alerts: dead checks, boxed locals and three null dereferences by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/793

[#792] Fail fast when the replication server cannot bind its listen port by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/795

[#794] Wait for the listen port to be open before returning from connection handler start by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/796

[#797] Retry the deletion of the embedded server temporary directory on close() by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/798

Fix CodeQL warning-severity alerts: process stream ownership and two leaks by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/799

[#800] Allocate the replication test listen ports per invocation by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/803

[#801] Drop the rerunFailingTestsCount setting that never applied to TestNG by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/804

[#808] fix MS SQL MERGE upsert conversion deadlock with WITH (HOLDLOCK, UPDLOCK) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/810

[#807] Do not drop persistent search notifications through search-phase dedup by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/812

[#809] Fix DSML gateway NPE on abandonRequest and on missing Content-Type by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/811

[#802] Fail fast when the replication server cannot read its changelog by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/805

Fix CodeQL note-severity alerts: array logging and uncaught NumberFormatException by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/817

[#815] Wait for the topology to settle before asserting RS side DS counts by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/822

[#828] Fix infinite loop picking the errors-encountered LDIF file name by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/839

[#821] Unregister the handler when a handshake aborts after registration by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/838

Fix CodeQL note-severity alerts: missing @Override annotations by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/837

Fix CodeQL note-severity alerts: dead parameters of private methods by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/834

Fix CodeQL note-severity alerts: deprecated JDK calls and inefficient expressions by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/823

Fix CodeQL note-severity alerts: calls to the deprecated Entry compatibility methods by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/826

[#816] Unmap only the locked domainMap in FileChangelogDB.removeDomain() by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/827

Fix CodeQL note-severity alerts: uncaught NumberFormatException in the tools, the GUI and SNMP by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/829

Remove the stale migration deprecations of ObjectClass and AttributeDescription by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/832

[#819] Release the log when a changelog DB constructor cannot read its limits by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/833

Fix CodeQL note-severity alerts: confusing overloads with subtype parameters by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/840

Fix CodeQL note-severity alerts: ignored error status of file and stream calls by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/814

Fix CodeQL note-severity alerts: uncaught NumberFormatException in the examples by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/831

[#825] Cap the batchRequest count per SOAP body and the request body size in the DSML gateway by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/835

Fix CodeQL note-severity alerts: stale @param tags by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/842

Fix CodeQL note-severity alerts: nested classes which never use the enclosing instance by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/846

Fix CodeQL note-severity alerts: Thread.run() calls and getters leaking internal state by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/847

[#824] Answer each batchRequest of a SOAP body with its own batchResponse by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/836

Fix CodeQL note-severity alerts: shadowed locals, and the array cases of the debug formatter by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/848

Fix CodeQL note-severity alerts: confusable class and method names, and an unused verifier by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/849

Fix CodeQL note-severity alerts: the leftovers of the already-fixed rules by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/850

[#813] Refuse to create a replica DB once the changelog shutdown has started by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/820

[#841] Fix flaky InitOnLineTest: notify the requester when a remotely requested export cannot start by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/845

[#818] Drop the empty domain map a replica DB creation leaves behind when it bails out by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/830

[#843] Cap the number of operations accepted per batchRequest in the DSML gateway by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/844

[#851] Add upgrade task for RFC 5805 transaction extended operation handlers by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/852

Disable duplicate JSON access logger in the default configuration by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/668

Generate entryUUID from a per-thread SecureRandom by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/683

Avoid global write lock on every delete in GroupManager by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/682

Skip replication processing when no replication domain is configured by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/681

Avoid full attribute walk for types without subordinate types by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/679

Use LongAdder for LDAPStatistics counters by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/678

Make AciList reads lock-free with true copy-on-write by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/674

Reduce per-bind allocations on the bind hot path by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/672

Replace per-operation backend read lock with a scalable shared-access gate by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/680

Remove per-bind global lock contention in AuthenticatedUsers by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/660

Remove global digestLock serialization in digest password storage schemes by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/667

Avoid global monitor on every bind in getDefaultPasswordPolicy by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/669

Remove per-attribute read lock from CompressedSchema decode path by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/670

CVE-2025-59250 false positive: bump mssql-jdbc to 13.4.0.jre11 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/856

Add Trivy vulnerability scanning for Docker images by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/854

[#857] Iterate a snapshot of the connection set in AuthenticatedUsers.doPostResponse(modify) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/858

[#861] Fail fast when the CI Test replication step hangs by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/862

[#860] Serve JDBC cursor repositioning from the fetched buffer and grow batches adaptively by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/863

[#861] Fail fast when a total update request gets no answer by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/864

Serve Cassandra cursor repositioning with CQL slice queries instead of a no-op iterator restart by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/865

[#868] Release the import/export context before notifying the initialize task by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/869

[#870] Stop replaying a rolled back read in the PersistIt backend by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/871

[#885] Ask the catalog for the table of a tree by name by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/886

Stamp JDBC backend tables with their tree name and refresh optimizer statistics after import by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/866

Seek the primary key in the SQL Server upsert and retry a transaction conflict by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/867

Report the OpenDJ container healthy only once its bootstrap has succeeded by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/898

Wait for the renamed entry before reading the naming conflict monitor by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/895

Let one package-info stand per package, and aggregate Javadoc before the merge by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/899

[#872] Bound the connect of the JDBC pool and report a connect it cannot make by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/876

[#874] Grant the offline tools a read-only JDBC transaction instead of refusing it by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/880

[#879] Skip the validation of a pooled JDBC connection returned a moment ago by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/883

[#890] Persist a compressed schema token before handing it out, and report the ones with no definition by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/894

[#873] Give each backend its own compressed schema trees by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/881

[#905] Warn when a replication handshake fails and document CA-signed certificates by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/906

[#877] Bound a statement of the JDBC backend by the class of the work it belongs to by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/882

Modernize Debian and RPM packaging (systemd, dedicated user, CI tests) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/663

[#878] Bound the JDBC connection pool and expire its connections one by one by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/884

[#897] Skip a compressed schema definition stored under a key no encode hands out by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/920

Modernize the Windows MSI: WiX v5, x64, upgrade from 5.1.x by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/701

[#900] Time the ReplicaOfflineMsg grace period per replica, and spend it where the message can still be forwarded by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/919

[#889] Keep a change the replay could not apply out of the ServerState by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/892

[#910] Test that a ModifyDN conflict is still solved while server-error-result-code is one of the conflict codes by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/938

[#888] Name the trees of a JDBC backend from a catalog in the database by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/893

[#909] Cover the change a stopped replay thread hands back to the replication server by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/941

[#939] Pin isServerFailure() directly, so the conflict result codes are guarded by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/960

[#918] Record a ReplicaOfflineMsg as sent only when it really was published by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/946

[#921] Bound the transaction replay of PDBStorage.write() by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/937

[#907] Change the base DNs of a pluggable backend outside the write the storage replays by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/914

[#885] Give a connection of the JDBC pool a read bound of its own, and take it off for a statement that carries none by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/934

[#924] Clear the disabled flag before a domain enables its session by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/971

[#903] Grant the first replay of a conflict, and bound the rest by its class by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/904

[#917] Wait for every peer replication server to forward the ReplicaOfflineMsg by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/947

[#891] Give the trees of an import connections of their own by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/940

[#901] Make the replay retry budget of a replication domain configurable by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/944

[#908] Wait for the changes being applied before a domain going down saves its ServerState by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/945

[#916] Keep an update that lands during a ServerState save out of the saved flag by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/948

Budget the Windows leg’s runtime in wait-msi-artifact, not the queue it sits in by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/989

[#955] Answer a ModifyDN whose entry is gone before the new superior is looked up by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/965

[#885] Bound the wait of a JDBC DDL for a lock another session holds by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/936

[#911] Report the replication connections which used to be dropped in silence by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/935

[#943] Refuse a domain configuration before it is written, not after it is live by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/959

[#966] Tell the import and restore task listeners the task is over on every path by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/969

[#951] Keep the persisted position when a domain drops its in-memory ServerState by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/970

[#967] Keep the bookkeeping of a domain whose base entry is missing out of its configuration entry by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/972

[#928] Compare the permissive-modify DN with the entry DN the operation reports by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/973

[#927] Report a ds-sync-conflict marker AddMsg could not encode by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/975

[#949] Report a ReplicaOfflineMsg the broker refused as not sent by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/976

[#922] Give a change back when the replay which owns it is unwound by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/958

[#963] Read the changelog again for a following replica the domain is ahead of by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/964

[#926] Restart the session of a replication domain in one place, under the lock and the generation by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/974

[#956] Tell a failed entryUUID search apart from an entry which is not there by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/968

[#952] Keep a failed state write from killing the checkpointer and hanging the shutdown by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/977

[#1031] Keep the replication test’s admin and replication ports out of the ephemeral range by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1033

[#1046] Read the latest release with the workflow token, and fail the step when it comes back empty by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1047

[#913] Declare the crypto manager’s SSL properties as requiring a server restart by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/979

[#950] Announce a ReplicaOfflineMsg before it is published, not after it may have been forwarded by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/978

[#953] Refuse a server-error-result-code which does not report a failure by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/980

[#912] Provision the ads-truststore from an existing key store at setup time by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/984

[#925] Keep asking for a session restart until it has run by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/981

[#983] Interrupt the listen thread after the ReplicaOfflineMsgs are forwarded by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/987

[#995] Classify the failure of a task on the message that reports it by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/996

[#942] Warn once per interval that a change is being retried, not once per delivery by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/982

[#986] Give back the changes a replay thread the pool stopped had parked by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/988

[#991] Decide and report an index configuration change outside the write which is replayed by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/997

[#993] Register an entry container’s configuration listeners only once it has opened by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/999

[#1036] Assert that a parked change is handed out, not which thread hands it out by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1037

[#962] Flag an admin action when a bounded storage write gives up on a configuration change by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/994

[#990] Drop what a previous index left behind instead of adopting it when an index is added by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/998

[#885] Bound the create of the tree catalog, and say when an engine has no bound to give by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1003

[#961] Walk every link of a failure where the verdict decides something by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1004

[#963] Dump the state of the replication servers when a test fails by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1015

[#1012] Pin the commit of the post-import statistics refresh, and say why it is there by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1016

[#992] Apply the confidentiality of a backend index to the running backend by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1000

[#902] Name the table to the index guard of the JDBC backend the way the database stores it by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1001

[#896] Pin the replay of RootContainer.open, and the give-back of an open which is not replayed by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1002

[#933] Read a catalog table another session created while this one was creating it by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1005

[#932] Hand the bounds of a catalog connect in, so its cases stop setting them for the whole jvm by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1006

[#930] Build the names a JDBC backend gives its own trees once, from the id it was created with by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1007

[#931] Bound and escape the values a clear’s report reads out of the database by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1008

[#1011] Wait out the connection limit an account is given of its own by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1018

[#1023] Delete every objectClass value a modification asks for by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1024

[#1025] Stop a restore which cannot lock its backend instead of completing it by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1027

[#1026] Close the import config on every path an import task can end on by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1028

[#1029] Send a directory server only the updates it gives send-window credit for by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1034

[#1040] Leave the session to a total update when a configuration change asks for a restart by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1042

[#1038] Pin the session lock and generation of #974, and the restart a configuration change does run by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1043

[#1039] Report a total update whose session stops before the DoneMsg as a failed import by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1044

[#929] Establish a catalog connection the way the pool establishes its own by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1009

[#915] Bound the wait of a write transaction for a row lock another session holds by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1010

[#1014] Report a ReplicaOfflineMsg as forwarded only to a peer which can decode it by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1019

[#1021] Reset the objectClass attribute of an entry when its object classes change by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1022

[#1017] Recognise a replication server by the address it names, not by the one its session came from by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1020

[#1059] Give no key up on import or rebuild under an index-entry-limit of 0 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1060

[#1064] Replay a JE transaction ended by a lock conflict instead of giving it up at once by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1065

[#1067] Ask the memory quota whether an explicit db-cache-size fits instead of taking it by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1070

[#1071] Wrap the sources of the large values PDBStorageTest writes, so that four copies of a 63 MB value are not live at once by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1072

Add dependabot config and pin GitHub Actions to a commit SHA by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1073

[#1030] Keep the setup log out of the way of start-ds, and say when it is gone by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1032

[#1041] Claim the import context for the length of a session restart, and refuse the total update which lands across it by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1045

[#1048] Hold the session restart a released change asks for while a total update runs by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1049

Bump the github-actions group with 9 updates by @dependabot[bot] in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1083

Send what a replication session’s publisher left queued when it is closed by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1035

[#1051] Replicate a change made under the Relax Rules control like any other by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1053

Keep PKCS5S2 usable on a FIPS-restricted JCE, and name the key wrapping property when the runtime has no RSA-OAEP by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1058

[#1061] Ask for the session restart under an owner as well, and leave it to the state checkpointer by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1062

[#1076] Walk every link of a connect failure where the verdict decides the retry by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1077

[#1078] Stop the MakeLDIF generator when a template import ends before its reader by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1082

[#1063] Give back what the open reserved rather than what the configuration says by then, and ask for a restart when the cache size changes by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1066

[#1050] Document the replication repair control, and test that a repaired modify stays on its replica by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1052

[#1055] Report a ReplicaOfflineMsg forwarded once it is written to the peer, not once it is queued by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1057

[#1088] Let the Docker image start under an arbitrary uid in group 0 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1091

[#1068] Apply what a running backend takes of a configuration change, and ask for a restart for what it does not by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1069

[#1084] Keep the root password out of the log and off the command line when a Docker container joins replication by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1094

[#1096] Copy a value into Persistit once rather than twice, and write the large values of PDBStorageTest through a small buffer pool by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1097

[#1080] Give back the send-window permit of an update the writer drops, and count only what it sends by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1106

[#1085] Stop the server cleanly on SIGTERM in a container that bootstrapped its instance by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1098

[#1093] Hand the root password to the Docker bootstrap tools in a file by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1099

Refresh the Windows launchers only when their code changes, not their toolchain stamp by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1103

[#1081] Wrap with a 2048-bit key in the key wrapping check, and report a provider refusing with an Error by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1104

[#1075] Test the JDBC guards against a neighbouring MySQL database and Oracle schema by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1108

[#1074] Keep what says the connection is gone through the redaction of a connect failure by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1107

[#1095] Load a file based key store or trust store again when the file changes by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1101

[#1092] Probe the Docker container’s health without binding as the root user by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1102

[#1109] Keep a connection handler listening when a change to it is rejected by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1110

[#1111] Refuse an HTTPS configuration without a key the handler can present, and leave a running HTTP handler as it is when one is applied by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1114

[#1087] Copy the secret volume on every start of the Docker image by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1100

[#1112] Listen on the configured listen-address in the HTTP connection handler and the JMX RMI connector by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1113

Update org.openidentityplatform.commons to 3.2.0 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/853

[#1117] Correct the default class of the governing-structure-rule virtual attribute, and check every default class exists by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1122

[#1116] Default the java-class of a new LDAP connection handler to LDAPConnectionHandler2 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1124

[#1118] Register the shipped Referential Integrity plugin for the pre-operation types check-references needs, and refuse check-references without them by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1123

[#1133] Describe upgrade --force as performing the confirmed tasks, and say it does not accept the license by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1137

[#1119] Serve each LDAP connection handler with a transport of its own, built from its configuration by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1125

[#1120] Apply a change to plugin-type on an enabled plugin without disabling and enabling it again by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1127

[#1131] Escape the option placeholders of the generated reference, so AsciiDoc no longer reads them as missing attributes by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1142

[#1134] Give a VLV row of backendstat show-index-status its Confidential cell, so that its record count lands under Record Count by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1139

[#1136] Remove the unused DocBook xinclude supplements from the server tool messages by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1141

[#1135] Head the last near-limit column of backendstat show-index-status 80%, the threshold it counts from by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1138

[#1129] Point the guides' Javadoc links at the published apidocs, and resolve {opendj-version} in the uninstall and monitoring pages by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1140

[#1128] Replace the DocBook xinclude and olink leftovers of the generated reference with AsciiDoc by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1132

[#1144] Widen the ephemeral port range before the benchmark runs by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1145

[#1143] Do not report a Notice of Disconnection that cannot reach an already-closed client as an unhandled error by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1146

[#1150] Read the benchmark JTL with a CSV parser, so that an error whose message holds a comma reaches the step log by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1151

[#1149] Replay a rolled back PDB transaction until its conflict clears, bounded only by an optional db-txn-retry-time-limit by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1152

[#1147] Fail the doc build when a page leaves an AsciiDoc attribute unresolved by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1148

Bump the github-actions group with 3 updates by @dependabot[bot] in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1170

[#1154] Find the OpenIDM certificate by comparing names, not their string forms by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1162

[#1156] Keep colons inside the -J/--control value, and report an unreadable control value file instead of failing with a NullPointerException by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1163

[#1157] Quote BASE_DN when the Docker bootstrap creates the userRoot backend by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1164

[#1155] Make the rest2ldap bind templates and HTTP Basic credentials work as documented by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1165

[#1158] Split a check-references-filter-criteria value at its first colon, so the filter can contain one by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1167

[#1161] Keep bc-fips from seeding its DRBG from RDSEED in the test JVMs by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1168

[#1160] Report what start-ds printed when the server fails to start, and dump the quicksetup test instance’s logs on a failed build by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1169

[#1173] Check the references of every managed attribute type of an add and every modification of a modify, not only the first by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1175

[#1086] Join replication in the background on every start of the Docker image by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1115

[#1159] Keep administrator-typed DNs intact in dsconfig batch lines, tools.properties and the SDK LDAPUrl by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1166

[#1172] Refuse a second check-references-filter-criteria value for an attribute type, and enforce all the filters of a configuration that already has one by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1174

Bump FreeMarker to 2.3.35 and fix the loadObjectClassesToMaps javadoc by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1176

[#1153] Parse the whole DN string, and build or split DN strings through DN instead of string operations by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1171

[#1180] Report the fail-over failure of the Grizzly proxy listener tests instead of timing out by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1181

Describe running, upgrading and removing the Docker image in the Installation Guide by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1179

Update Java version from 26 to 27 in build.yml by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1186

Fix Maven Central release: pin Maven 3.9.16, bump central-publishing to 0.11.0 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1187

[#1178] Give the background join of the Docker image a server role, keep a failed bootstrap or upgrade unhealthy, and test the upgrade from a released image by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1184

Update commons.version to 3.2.1 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1177

Apply Ubuntu security updates when building the Docker image by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1191

[#1188] Serialize and replace atomically the writes of the ads-truststore, and report a certificate it cannot take or drop by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1189

Wait for the background join to end before looking for the root password it leaves by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1193

[#1198] Take the own state of a replication server again after each answer of its peers when it gathers the monitoring data by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1205

Bump the github-actions group with 5 updates by @dependabot[bot] in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1212

[#1216] Keep the decoding error of the client filter when no LDAP connection is attached by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1217

[#1213] Try another free port when the offline connect of the proxy tests connects the client to itself by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1214

[#1090] Check replication convergence under load next to the Docker tests, and run the Docker tests of both images after their builds by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1192

[#1195] Publish every change done while a recovery runs, and end the recovery only once they are out by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1204

[#1207] Route total updates to a replica that has the server ID of a replication server, report such a replica, and draw the IDs of new replication servers and domains from one set by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1211

[#1206] Take a late handler of a replication server back to its queue only once its consumer has every change the queue lacks by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1219

[#1215] Check a replication server the topology already has against the configured ones again, from the URL it is known with or the one it now comes with by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1218

[#1056] Add the RSASVE/KDF-SHA256/AESKWP key wrapping transformation for runtimes without RSA-OAEP by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1194

[#1202] [#1209] [#1222] Give the replication server a bounded time to give credit and to read once the broker is being stopped, and write nothing after a message given up by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1210

Use commons 3.2.2 to pick up BouncyCastle 1.86 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1190

Refuse the local changes in HistoricalCsnOrderingTest only once the missing change publisher of the recovery before has left by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1226

[#1227] Keep the record a changelog cursor read in advance when the head log file it is positioned in is rotated by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/1228

Add an OpenDJ vs OpenLDAP LDAP benchmark GitHub Action by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/654

CVE-2026-62366 OpenDJ Unauthenticated stack exhaustion when decoding an LDAP search filter (DoS) thanks @Pig-Tail ❤️

CVE-2026-62373 OpenDJ JMX MBean-argument deserialization without a serial filter thanks @Pig-Tail @tonghuaroot @wodzen ❤️

CVE-2026-62375 OpenDJ Unbounded VLV offset array allocation leading to memory-exhaustion DoS thanks @Pig-Tail ❤️

GHSA-68r5-9hpg-7qw9 OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway thanks @manus-use ❤️

GHSA-p279-2cqp-84jg SASL PLAIN authzid bypassing the proxy ACI scope check thanks @hypnguyen1209 ❤️

CI: full Java matrix on ubuntu only; macOS/Windows build with Java 11 and 26 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/704

Modernizes the OpenDJ Docker images and broadens their multi-architecture build matrix. by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/655

Benchmark the built Docker image against the released one by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/656

Stabilize Oracle JDBC backend test on CI by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/662

Log JMX RMI connector startup failure at error level by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/699

Docs: add missing tools references by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/657

CI: dump OpenDJ container logs when Docker image smoke tests fail by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/713

Refactor file deletion logic to combine null check and length check. by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/653

Add CI smoke tests for the addrate/authrate/modrate/searchrate tools by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/658

Fix duplicate SNMP connection handler entries in packaged config.ldif by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/659

Fix duplicate opendj-server-legacy classes in distribution lib/ by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/661

Add CI install-test for the Windows MSI + document MSI install/upgrade/uninstall by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/664

[#665] Fix StackOverflowError while parsing long ACI with repetitive targets by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/666 thanks @myandrews ❤️

[#693] Fix Windows scripts for install paths with spaces and parentheses by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/671

Fix two broken AciTests cases and enable the suite in the default build by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/675

[#673] Fix ArrayIndexOutOfBoundsException on truncated percent-encoding in LDAP URLs by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/676 thanks @myandrews ❤️

Declare the deb/rpm runtime dependencies (java, which, chkconfig) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/677

[#697] Fix global idle-time-limit having no effect on client connections by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/684

Fix embedded server rebuildIndex failing with Connect Error by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/685

Fix and enable broken tests from the slow group by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/686

[#696] Fix embedded server setup failing with "Time service not started" by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/687

Revive the quicksetup test suite by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/694

Fix and enable the replication StressTest by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/698

Remove the unfixable testStateMachineFull and fix the dead replay pool by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/700

Fix ACI grouped bind rule wrongly rejected when a value contains parentheses by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/716

Enable the remaining slow-group tests in the default build by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/702

Include *TestSuite classes in the failsafe run by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/703

Enable the SNMP tests in the default build by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/705

Fix and enable the AlternateRootDN ACI test by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/706

[#709] Enable disabled and invisible tests across the sibling modules by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/707

[#712] Fix StringIndexOutOfBoundsException on blank bind rule in ACI by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/715 thanks @myandrews ❤️

CVE-2026-9828 QOS.CH Sarl logback logback-core has a deserialization of untrusted data vulnerability by @dependabot[bot] in https://github.com/OpenIdentityPlatform/OpenDJ/pull/717

ci: add "Benchmark PDB vs JE" step to build-docker by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/718

Add concurrency groups to GitHub Actions workflows by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/721

[#695] Fix race in TraditionalWorkQueue.isIdle() by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/688

[#690] Fix finalizeWorkQueue never cancelling queued operations by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/691

[#692] Restore partial import semantics for include/exclude branches by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/689

Restrict Unix integration-test steps to Linux only by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/723

ci: add CodeQL code scanning workflow by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/722

[#719] Fix NullPointerException decoding an ACI bind rule with a missing and/or operand by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/720 @myandrews ❤️

CVE-2026-10532 Logback vulnerable to Object Injection through HardenedObjectInputStream modules by @dependabot[bot] in https://github.com/OpenIdentityPlatform/OpenDJ/pull/724

[#728] Reject TCP self-connects in replication connect paths by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/729

Fix flaky BindOperationTestCase subtree auth-info tests by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/727

[#730] Fix import/export context leak on failed initializeRemote validation by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/731

Fix intermittent GenerationIdTest.testMultiRS by re-advertising genId on change by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/725

[#710] Fix replication catch-up re-sending updates with the original assured flag by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/714

[#726] Reject malformed bracketed IPv6 hosts in HostPort by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/732 thanks @myandrews ❤️

Enable Javadoc doclint (all,-missing) and fail on warnings by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/734

[#735] Do not roll back a concurrently adopted generation ID on aborted handshake by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/736

[#737] Fix cn=changelog search failing when aliases are dereferenced by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/740

[#738] Fix dereferencing an alias that points into another backend by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/741

Harden opendj-docker apt step: force IPv4 + retries by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/743

[#739] Fix alias dereferencing dropping entries and accumulating DNs by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/742

[#744] Fix flaky ChangelogBackendTestCase: keep generated CSN batches monotonic by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/745

Bump org.openidentityplatform.commons to 3.1.2 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/733

[#708] Fix OutOfMemory during replication initialize with JDBC backend by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/711 thanks @ldap4life ❤️

CVE-2026-46495 OpenDJ Unauthenticated RCE via Java Deserialization in JMX RMI thanks @wodzen ❤️

CVE-2026-42198 pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS by @dependabot[bot] in https://github.com/OpenIdentityPlatform/OpenDJ/pull/641

[#648] slow DN.valueOf / AVA normalization for nested DN-syntax values by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/649 thanks @anvo1115 ❤️

chore: bump Bouncy Castle FIPS deps to latest 2.1.x patch releases by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/637

Fix grizzly log level is always FINE by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/639

Fix shell script issues in opendj-docker/run.sh by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/640

Fix Windows CI: use ilammy/msvc-dev-cmd to set up MSVC env by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/643

Add native access JVM flag for Bouncy Castle FIPS on newer Java releases by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/645

Docker base DN entry creation opt-in and improves bootstrap LDIF loading resilience by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/644

Fix BasicRequestsTest.testReadSelectPartial for nesting-preserving field projection by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/650

Update org.openidentityplatform.commons to 3.1.1 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/652

Fix JMX RMI connector startup failure introduced by CVE-2026-46495 hardening by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/651

[#72] Fix infinite loop in doStopApplication() on Windows service stop by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/610

[#259] fix: retry loop for Windows Service start race condition (issue #259) by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/609

[#566] Fix AttributeValuePasswordValidator: inverted substring logic and missing reversed-password substring check by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/599

[#579] Fix ReferentialIntegrityPlugin silently bypassing check-references on modify operations by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/600

[#601] Fix server crash when File-Based Debug Logger is enabled by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/602

Update build.yml add JDK 26 support by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/598

Docs: set neutral version for the docs by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/603

ci: add Windows service start/stop test to CI workflow by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/606

CI: Build and upload Windows native executables (winlauncher, opendj_service, launcher_administrator) by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/611

fix: use 127.0.0.1 instead of localIP in LockdownModeTaskTestCase by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/605

Filter branches to build workflow triggers (on push) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/614

Fix intermittent testMultiRS failure by doubling waitForStableGenerationId timeout by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/618

Fix race condition in ChangelogBackendTestCase flaky test by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/617

Fix flaky testMultiRS: replace fixed sleep with deterministic domain-ready wait by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/615

increase replication connection timeout to fix Socket Timeout error on Mac in integration test by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/613

chore: bump GitHub Actions to latest major versions by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/620

Fix snapshot version format by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/624

Fix intermittent GenerationIdTest.testMultiRS race condition on RS-to-RS topology by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/622

[OpenIdentityPlatform/OpenAM#980] OpenDJ slim maven artifact by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/625

Upgrade local Docker registry from registry:2 to registry:3 in CI by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/628

status CLI: allow --hostname, --port, and --trustAll arguments by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/631

Fix status CLI to accept --hostname, --port, and --trustAll arguments, and add them to all status command invocations in build.yml by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/630

Remove ENV ROOT_PASSWORD from Dockerfiles, fix HEALTHCHECK default, add CDDL headers by @Copilot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/633

Update commons.version to 3.1.0 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/619

CVE-2025-24970 SslHandler doesn’t correctly validate packets which can lead to native crash when using native SSLEngine by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/588

CVE-2025-12194 While the situation with the JVM garbage collector overrun for Java 17 and Java 21 greatly improved with the changes in 2.1.1, we’ve still had some reports that can only be related to the use of the disposal daemon by @prthakre in https://github.com/OpenIdentityPlatform/OpenDJ/pull/593

[#590] Fallback to $HOME/tmp dir as a temp if instance root is mounted as noexec by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/591

Bump logback to 1.5.32 by @prthakre in https://github.com/OpenIdentityPlatform/OpenDJ/pull/595

Migrate to caffeine 3 by @prthakre in https://github.com/OpenIdentityPlatform/OpenDJ/pull/594

Update commons.version from 3.0.2 to 3.0.4 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/597

Docs: fix short version in the upgrade guide by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/592

CVE-2026-1225 Logback allows an attacker to instantiate classes already present on the class path by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/583

Fix three and more nodes replication process stuck error by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/584 thanks @FireBurn

Update org.openidentityplatform.commons to 3.0.2 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/581

Docs: update supported Java version by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/580

[#575] FIX unable to install: UnsatisfiedLinkError: /tmp/bc-fips by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/576 thanks @muralicbe1983

[#577] Windows upgrading with Upgrade.bat: an error with "" unexpected by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/578 thanks @marcdegasperi

[#573] Added the SAMPLE_DATA Docker environment variable to generate sample data during setup. by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/574

Update target JDK to 11 and move to JakartaEE 9 by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/532

Add support LTS JDK 25 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/555

Update base docker image Java version to 25 LTS by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/564

CVE-2025-12194 Bouncy Castle Vulnerable to Uncontrolled Resource Consumption by @dependabot[bot] in https://github.com/OpenIdentityPlatform/OpenDJ/pull/569

CVE-2025-59250 JDBC Driver for SQL Server has improper input validation issue by @dependabot[bot] in https://github.com/OpenIdentityPlatform/OpenDJ/pull/570

CVE-2025-11226 logback-core is vulnerable to Arbitrary Code Execution through file processing by @dependabot[bot] in https://github.com/OpenIdentityPlatform/OpenDJ/pull/568

Switch from sun.security.x509 to Bouncy Castle API by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/560

Update OpenDMK external library to fix SNMP monitoring by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/572

Build & deploy: add branch sustaining/4.10.x by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/556

Make GrizzlyLDAPListener close in a synchronous fasion to prevent test race conditions by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/557

[#141] Test large replication pending changes by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/561

FIX bindFreePort Bind Unable to bind to a free port by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/559

Fix unavailable monitoring attributes over JMX by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/558

Bump org.openidentityplatform.commons to 3.0.1 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/571

Improve ReplicationDomainTest stability by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/565

CVE-2025-9092 CVE-2025-9340 CVE-2025-9341 Uncontrolled Resource Consumption vulnerability by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/546

[#545] Add GroupManager writeLock performance by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/551

[#540] Fix OnDiskMergeImporter::PhaseOneWriteableTransaction: update over put (referral attr) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/541

[#544] Add requires-admin-action component-restart for max-request-size by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/552

Update Java minimum version number in the setup UI by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/542

Update README.md: add backers and sponsors by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/543

ISSUE_TEMPLATE: add "Vote to raise the priority" by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/547

Bump commons.version 2.4.1 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/553

[#529] FIX jdbc connection deadlock by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/533

[#530] Fixed error when creating a backend for BASE_DN with OU in Docker by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/531

Docker: Fix issues with quoting params by @prthakre in https://github.com/OpenIdentityPlatform/OpenDJ/pull/537

[#462] RFC5805 Lightweight Directory Access Protocol (LDAP) Transactions by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/469

CVE-2025-49146 pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/522

Bump io.reactivex.rxjava to 3.x by @prthakre in https://github.com/OpenIdentityPlatform/OpenDJ/pull/504

Bump various dependencies by @prthakre in https://github.com/OpenIdentityPlatform/OpenDJ/pull/508

Bump commons to 2.2.5 by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/518

Take Glassfish Grizzly version from commons by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/520

Bump bc.fips to 2.1.x by @prthakre in https://github.com/OpenIdentityPlatform/OpenDJ/pull/505

Bump commons.version 2.3.0 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/521

Deploy: migrating from Legacy OSSRH to Central Portal by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/523

Fix OSGI bundle excluded package error for rxjava3 by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/524

Exclude BouncyCastle from OSGI Import-Package by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/526

Fix makeldif templates: add objectClass to baseDN by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/527

Bump org.openidentityplatform.commons 2.4.0 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/528

Configure backend type for Docker by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/489

Docs: update OpenDJ release version to 4.9.3 by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/488

Add OpenDJ Docker tests to the build process by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/490

Fix docker env variables + add VERSION autodetect by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/493

Set isRunning later (EmbeddedServer check) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/494

Bump org.openidentityplatform.commons to 2.2.4 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/495

[#498] FIX warning output from export-ldif: "grep: warning: stray \ before -" by @pzygielo in https://github.com/OpenIdentityPlatform/OpenDJ/pull/499

move Java args to java.properties, upgrade docker alpine by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/502

[#497] Set the same indexes for a new backend as for the initial backend by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/501

Add support Java SE 24 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/500

Bump test containers & cassandra driver by @prthakre in https://github.com/OpenIdentityPlatform/OpenDJ/pull/506

[#496] FIX MySQL truncate PK default to 64 len by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/509

[#496] FIX JDBC storage update concurrency by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/512

FIX Replication IT tests unstable result by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/514

@pzygielo made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/499

@prthakre made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/506

CVE-2025-27497 Fix Denial of Service (Dos) using alias loop (thanks @hannes96)

[#477] Change permission config.ldif.startok to owner by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/479 (thanks @kranskydog)

[#208] FIX The definition for the attribute type declared that it should use the syntax which is not defined in the schema by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/483

Documentation update by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/480

Docs: Generate and publish javadoc by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/482

[#465] Fix custom library loading when put to the lib directory by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/467

[#463] Disable warning message on downstream closed by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/468

[#471] Fix table name truncate: make jdbc table 63 charter by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/473

[#466] JDBC: added tests for Oracle, MySQL, MSSQL by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/472

[#466] FIX compatibility jdbc backend: Postgres, Oracle, MySQL, MSSQL by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/474

[#471] PluggableBackendImplTestCase: add duplicate mail test by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/475

IT ReplicationDomainTest upper waitEndExport timeout by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/476

Update year in generated documentation templates by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/464

Update documentation issues and update links by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/470

[#460] Clear unused path info after backupConfig (memory pleasure) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/461

jdbc: make connection short-lived by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/459

Replace import-ldif with ldapmodify in Postgres IT test by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/457

Store LDAPv3 database in SQL JDBC database by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/454

CVE-2024-12798 CVE-2024-12801 logback-core Expression Language Injection, Server-Side Request Forgery vulnerability by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/455

FIX NoSuchMethodError: java.nio.MappedByteBuffer.duplicate by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/453

FIX Unable to locate package winehq-stable by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/452

[#438] FIX import-ldif --offline "import has been aborted because the entry does not have a parent entry" by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/444

00-core.ldif: X.501, cl. 14.2.2: 2.5.15.16 subentryNameForm OC subentry MUST cn by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/448 thanks @JesseCoretta

FIX makeldif -c suffix=dc=example: Unable to parse a constant argument expecting name=value by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/443

Bump commons.version 2.2.3 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/450

Fix MAC OS build failure by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/445

Actions: get ubuntu source from $(lsb_release -c -s) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/446

depoloy.yml: Fix documents deploy by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/449

[#393] FIX DIT SUP delimiter by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/395

[#392] FIX RootDSE Entry allow user objectClass by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/396

Addresses #397, #398, #399, #404 by @JesseCoretta in https://github.com/OpenIdentityPlatform/OpenDJ/pull/405

Docs in asciidoc & deploy antora docs after build by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/408

[#402] Change default SSL HandshakeTimeout -1 -> 10s (see #146) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/411

[#401] Change "Object class violation (65)" -> "Naming violation (64)" LDAP result code for DIT Structure Rule violation by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/410

[#394] FIX dsconfig --help-<subcommand> by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/406

[#400] Reduce character escaping in example, add note by @JesseCoretta in https://github.com/OpenIdentityPlatform/OpenDJ/pull/413

Added missing documentation attachments by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/414

Generate man pages in the AsciiDoc format by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/418

Reduce character escaping in example, add note by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/419

minor docs glitches fix by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/420

Add JDK 23 build support by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/421

Bump org.openidentityplatform.commons 2.2.2 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/417

Docker: Use tail instead of sleep to allow the container to be stopped with SIGTERM by @PyRowMan in https://github.com/OpenIdentityPlatform/OpenDJ/pull/427

[#423] Eliminate asciidoctor warning messages when generating documentation by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/429

[#426] ADD maven.compiler.release=8 for cross compile compatibility by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/430

Remove legacy files by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/433

[#90, #432] FIX delete entries in overlapping backends by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/434

[#425] Add option -Dorg.openidentityplatform.opendj.ERR_ENTRY_SCHEMA_VIOLATES_PARENT_DSR for force control "Entry is invalid according to the server schema because there is no DIT structure rule that applies to that entry, but there is a DIT structure rule for the parent entry". Default: warning level by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/435

[#425] Workaround: Entry is invalid according to the server schema because there is no DIT structure rule that applies to that entry, but there is a DIT structure rule for the parent entry by @JesseCoretta in https://github.com/OpenIdentityPlatform/OpenDJ/pull/422

[#431] Update importldiff --offline and --clearBacked flags descriptions by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/437

@JesseCoretta made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/405

@PyRowMan made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/427

Switch docker to last LTS JRE 21 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/378

Add JDK 22 support by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/377

[#376] JMX fix docs with "Allow insecure authentication" by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/380

[#376] FIX SNMP monitoring config by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/381

[#383] FIX docs: import-ldif and export-ldif binaries should be shown using the --offline option by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/385

[#384] FIX Control Panel: empty help URL values by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/386

https://github.com/OpenIdentityPlatform/OpenDJ/discussions/387 FIX do not check DIT structure parent/child on same ObjectClass by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/390 (thanks for the research @JesseCoretta)

Bump org.openidentityplatform.commons 2.2.0 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/391

[#204] ADD LDAP Relax Rules Control by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/362

[#287] ADD alias dereferencing for search requests by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/369

[#187] FIX RFC3671: collective attribute values should be merged. Virtuals with other virtuals and real values. by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/365

[#84] FIX incorrect entry-Based ACIs is defined with only "deny" permission without "allow" by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/372

[#250] Add Overlapping Backend TestSuite by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/373

[#294] Dont send client notification on IOException by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/374

[#368] CASSANDRA ADD property -Dkeyspace=ldap_opendj by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/370

Bump commons.version 2.1.6 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/375

Publish docs to https://doc.openidentityplatform.org by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/366

Fix documentation version by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/371

compress webhelp, xhtml and html docs after build by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/348

add missing docs by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/350

Update README.md by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/352

[#354] FIX "OpenDJ fails to upgrade from version 3->4: An error occurred while attempting to perform index rebuild: Unable to decode the provided object class set because it used an undefined token" by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/356

[#167] FIX control-panel ResetUserPasswordTask unpredictable result (wait async result) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/357

Add rest operations modifyPassword, resetPassword to docs from https://github.com/OpenIdentityPlatform/OpenDJ/discussions/355 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/358

[#148,#261,#282] FIX control-panel schema errors in remote mode by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/359

Embedded OpenDJ module initial commit by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/340

Bump ch.qos.logback:logback-core from 1.2.11 to 1.2.13 in /opendj-embedded by @dependabot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/341

Bump ch.qos.logback:logback-classic from 1.2.9 to 1.2.13 in /opendj-embedded by @dependabot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/342

update opendj-parent version by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/343

Bump org.bouncycastle:bc-fips from 1.0.2.3 to 1.0.2.5 in /opendj-core by @dependabot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/344

Bump org.bouncycastle:bctls-fips from 1.0.13 to 1.0.19 in /opendj-core by @dependabot in https://github.com/OpenIdentityPlatform/OpenDJ/pull/345

Bump org.openidentityplatform.commons 2.1.4 by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/346

move commons version to property & fix doc-maven-plugin version by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/347

@dependabot made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/341

ADD build test with memory pressure by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/323

Update Docker jre 17->19 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/324

org.openidentityplatform.commons 2.1.3-SNAPSHOT by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/326

FIX OpenIDM compatibility by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/330

[#329] make posixGroup AUXILIARY by default by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/332

[#331] Allow downgrade version without upgrade task by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/333

Bump org.openidentityplatform.commons 2.1.3 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/334

Add Build test on MacOS M1 arm64 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/335

Restore macos-latest build strategy by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/336

FIX CLIENT_SIDE_NO_RESULTS_RETURNED in hasNext() by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/315

update org.openidentityplatform.commons to 2.1.2-SNAPSHOT by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/316

FIX performance java.util.TimeZone.getTimeZone(TimeZone.java:516) is synchronized by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/318

[#317] sendUnsolicitedNotification can fail on client disconnect with OnErrorNotImplementedException by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/320

org.openidentityplatform.commons 2.1.2 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/321

Allow store LDAP catalog data in CASSANDRA noSQL cluster --backendType cas (ldapv3 to cassandra) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/302

ADD IT test for wars https://github.com/OpenIdentityPlatform/OpenDJ/issues/110 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/306

Add TestContainers to test Apache Cassandra backend by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/307

Bump org.openidentityplatform.commons 2.0.19-SNAPSHOT by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/308

Update README.md: allow store LDAPv3 database in Cassandra/Scylla cluster by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/309

Bump org.openidentityplatform.commons 2.1.1 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/311

Add JDK 21 support by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/310

CASSANDRA storage: cursor performance by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/312

FIX newHeapBufferPool calculation (import OOM error) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/313

Generate SHA256WithRSA certificate as default by @FireBurn in https://github.com/OpenIdentityPlatform/OpenDJ/pull/297

convert JMX metrics to appropriate type #293 by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/300

Fix attribute value. bean should return native object #293 by @yurem in https://github.com/OpenIdentityPlatform/OpenDJ/pull/301

Remove TLSv1 as default protocol FIX https://github.com/OpenIdentityPlatform/OpenDJ/issues/298 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/303

nexus-staging-maven-plugin 1.6.13 + disable auto release by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/305

@FireBurn made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/297

FIX unused trailing bytes in ASN.1 SEQUENCE by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/296

FIX build with Installation failure for grub-efi-amd64-signed on ubuntu-latest by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/276

FIX add-source for generate-sources by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/275

Restore IT test for server-legacy and fix many errors by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/279

change posixGroup type to structural. and add cn by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/283

FIX argument listBackups is incompatible with use of this tool to interact https://github.com/OpenIdentityPlatform/OpenDJ/issues/271 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/284

PBKDF2-HMAC-SHA256 and PBKDF-HMAC-SHA512 password storage not configured by default by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/285

FIX Setup Issue - Error Creating Base Entry by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/286

Extend admin port connection limits by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/289

Restore TLSv1.3 support by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/290

Bump org.openidentityplatform.commons 2.0.18 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/291

BUILD java: [ '8','11','17','19'] + fix install wine32:i386 without conflicts by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/265

FIX build allow fail for remove deb.sury.org by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/266

Docker add jdk17 platforms: linux/amd64, linux/arm64/8, linux/arm/v7, by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/267

Create target directory before copying custom schema by @gesellix in https://github.com/OpenIdentityPlatform/OpenDJ/pull/256

Copy ldif configs to the correct template directory by @gesellix in https://github.com/OpenIdentityPlatform/OpenDJ/pull/260

UPDATE build process by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/262

FIX DSML servlet can’t find JAX-B runtime https://github.com/OpenIdentityPlatform/OpenDJ/issues/255 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/264

update commons version to 2.0.16-SNAPSHOT by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/238

'find' command is missing in the 4.5.0 docker image #242 by @samene in https://github.com/OpenIdentityPlatform/OpenDJ/pull/243

FIX wine32 install (from ppa:ondrej/php so that we will be able to install wine32:i386 without conflicts) by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/245

Don’t clone buffer in ldap codec by @yurem in https://github.com/OpenIdentityPlatform/OpenDJ/pull/248

Add BCFKS FIPS key store type support by @yurem in https://github.com/OpenIdentityPlatform/OpenDJ/pull/247

fix FipsStaticUtils code formatting by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/249

@samene made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/243

Switch base docker image to Java 17 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/237

Add alpine platforms linux/s390x, linux/386, linux/arm/v7, linux/arm/v6, linux/ppc64le by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/225

Implement PBKDF2-HMAC-SHA256 and PBKDF-HMAC-SHA512 password encoding schemes by @lscorcia in https://github.com/OpenIdentityPlatform/OpenDJ/pull/228

Docker refactoring by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/229

FIX tamil (ta.6) matching rule schema has typo in definition https://github.com/OpenIdentityPlatform/OpenDJ/issues/203 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/230

FIX Failed to delete entries under multiple backends https://github.com/OpenIdentityPlatform/OpenDJ/issues/90 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/231

Add support jdk '16','17','18' by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/232

support AD attributes userAccountControl, msDS-UserAccountDisabled and pwdLastSet by @Dieken in https://github.com/OpenIdentityPlatform/OpenDJ/pull/233

Test + Run on jdk15+ by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/234

FIX OpenDJ is not logging errors to logfile #128 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/235

FIX Windows install to path with spaces https://github.com/OpenIdentityPlatform/OpenDJ/issues/199 by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/236

@lscorcia made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/228

add docker test by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/221

Release multi-platform Docker images by @gesellix in https://github.com/OpenIdentityPlatform/OpenDJ/pull/222

Support to load plain ldif files during container setup by @gesellix in https://github.com/OpenIdentityPlatform/OpenDJ/pull/223

@gesellix made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/222

FIX OpenDJ setup failure https://github.com/OpenIdentityPlatform/OpenDJ/issues/219 by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/220

Add FIPS support by @yurem in https://github.com/OpenIdentityPlatform/OpenDJ/pull/176

GithubAction build by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/179

Github action deploy by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/180

actions: separate deploy by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/182

Update opendj_service.exe by @adipose in https://github.com/OpenIdentityPlatform/OpenDJ/pull/184

Switch org.openidentityplatform.commons 2.0.13-SNAPSHOT by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/188

Fix rebuild-index in FIPS mode by @yurem in https://github.com/OpenIdentityPlatform/OpenDJ/pull/189

ADD JSONEntryWriter JSONEntryReader by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/196

FIX DN escape 'Equal sign': https://ldapwiki.com/wiki/DN%20Escape%20Values by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/201

FIX JSONEntryWriter escape DN values by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/202

move fips functions to separate class by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/206

do not use fips when bc-fips classes not found by @maximthomas in https://github.com/OpenIdentityPlatform/OpenDJ/pull/207

Update pom.xml nexus-staging-maven-plugin 1.6.11 by @artb1sh in https://github.com/OpenIdentityPlatform/OpenDJ/pull/213

Refactor Dockerfile debian and alpine by @casell in https://github.com/OpenIdentityPlatform/OpenDJ/pull/216

Migrate release from Travis to GitHub by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/217

FIX Deployment of external dependency failed. Failed to deploy artifacts: Could not transfer artifact openidentityplatform.org:wixtoolset:zip by @vharseko in https://github.com/OpenIdentityPlatform/OpenDJ/pull/218

@yurem made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/176

@adipose made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/184

@artb1sh made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/213

@casell made their first contribution in https://github.com/OpenIdentityPlatform/OpenDJ/pull/216