7.0.0

Eclipse GlassFish is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 10 specification, which is a major new feature release. Jakarta EE 10 requires JDK 11 as a minimum, but also works on JDK 17.

GlassFish 7.0.0 is a final release, containing final Jakarta EE 10 APIs and final Jakarta EE 10 implementation components. It compiles and runs on JDK 11 to JDK 19. MicroProfile support requires JDK 17 or higher.

Release overview

The main new feature is Jakarta EE 10 support, and everything that comes with that. Additionally GlassFish now provides support for the MicroProfile Config and MicroProfile JWT APIs, and the latest Jakarta MVC 2.0 release.

Internally, this release features a massive overhaul and cleanup of the DOL module (Deployment Object Library) fixing years of technical debt and updating various components, as well as a large cleanup of the way JNDI names are handled internally. Furthermore this release contains many fixes for the logging functionality of GlassFish, specifically when logging under high load and at a detailed log level. The way GlassFish servers start and stop has been revisited to work better on modern operating systems and restricted environments.

Many non-Jakarta EE components have been updated, and specifically the OSGi version has been bumped from 7 to 8. Finally, an amount of bugs have been fixed.

What's Changed

• Integrate Activation+Mail API 2.1.0-RC2 + Angus-Activation+Mail 1.0.0-M1 by @lukasj in #23695
• Changed version number to 7.0.0-SNAPSHOT by @dmatej in #23727
• Cleanup in Jersey EJB Component Provider by @dmatej in #23731
• Remove parent nucleus-parent for docs pom.xml to fix the build by @OndroMih in #23733
• Fix Jenkins docs build which attempted to delete files under a link in git repo by @OndroMih in #23735
• Fix Jenkins docs build (a follow up to #23735) by @OndroMih in #23738
• Remove unused fields by @pzygielo in #23740
• Allow tuning of the interval for monitoring concurrent tasks by @11rx4f in #23744
• Issue 23739 Fixed documentation syntax, using only Asciidoctor, JBake removed by @dmatej in #23741
• Issue #23739 Updated website links by @dmatej in #23746
• Add property to choose frequency of logging once or repeatedly by @11rx4f in #23748
• Initial update of dependencies to Jakarta EE 10 versions. by @arjantijms in #23729
• Bump OpenMQ version by @pzygielo in #23755
• Integrated jakarta.faces-api 4.0.0-M2 by @arjantijms in #23765
• Webservices 4.0.0 m2 by @arjantijms in #23766
• Fix #23772 The create-file-user subcommand with passwordfile option isn't usable in embedded glassfish. by @kosakak in #23773
• Integrate Tags 3.0.0-RC1/M1. by @arjantijms in #23783
• Integrate Expressly by @arjantijms in #23808
• Integrate Weld 5.0.0-Beta1 by @arjantijms in #23809
• Update JSON components by @arjantijms in #23810
• Intergate WebSocket API 2.1.0 by @arjantijms in #23811
• Update JAXB to M3/4.0.0 by @arjantijms in #23813
• Update various maven plug-ins by @arjantijms in #23814
• Integrate Woodstox 6.2.8 by @arjantijms in #23815
• Add EE 10 schemas by @OndroMih in #23816
• Organise nucleus pom by @arjantijms in #23817
• Integrate ExpressLy 5.0.0-M1 by @arjantijms in #23818
• Consistent appserver pom by @arjantijms in #23819
• Integrate Jakarta Connectors 2.1.0-RC1 by @arjantijms in #23820
• Jakarta API updates by @arjantijms in #23821
• Fixed nightly and weekly builds which use gfbuild.sh by @dmatej in #23824
• Integrate Faces 4.0.0-M3 by @arjantijms in #23823
• Update Jakarta dependencies by @arjantijms in #23825
• Jakarta update3 by @arjantijms in #23826
• Add parent for snapshots by @arjantijms in #23827
• Fixed nightly and weekly builds which use gfbuild.sh by @pzygielo in #23832
• Bump OpenMQ version by @pzygielo in #23833
• Bump jakarta.resource-api by @pzygielo in #23834
• Bump OpenMQ version by @pzygielo in #23836
• Let snapshots use settings.xml for Jenkinsfile by @arjantijms in #23838
• Remove empty volumeMounts by @hs536 in #23837
• Integrate Authentication 3.0.0-RC2 by @arjantijms in #23839
• Bump OpenMQ version by @pzygielo in #23840
• Implementation of new Jakarta Authentication methods by @arjantijms in #23841
• Enhanced runtests.sh and reenabled another block of tests by @dmatej in #23842
• Integrate Jakarta Security 3.0.0-RC1 by @arjantijms in #23844
• Integrate Jersey 3.1.0-M3 by @arjantijms in #23845
• Restore JSON support for REST by @arjantijms in #23846
• Update Jakarta Tags API & IMPL to 3.0.0 by @volosied in #23847
• Integrate Soteria 3.0.0-M2 by @arjantijms in #23848
• Integrate Jakarta Authentication 3.0.0 by @arjantijms in #23849
• Integrate Jakarta Authorization 2.1.0 by @arjantijms in #23850
• Integrate HK2 3.0.3 by @arjantijms in #23851
• Integrate Faces 4.0.0 and Mojarra 4.0.0-M6 by @arjantijms in #23852
• Integrate EclipseLink 4.0.0-M2 by @arjantijms in #23853
• update Servlet and JSP Spec Number Internally. by @gurunrao in #23854
• Update download.md by @arjantijms in #23857
• Integrate Jakarta Security 3.0.0-RC3/Soteria M4 by @arjantijms in #23858
• Integrate Tyrus 2.1.0-M2 by @arjantijms in #23859
• Integrate Eclipse Link 4.0.0-M3 by @arjantijms in #23860
• Integrate Jackson 2.13.2 by @arjantijms in #23861
• Integrate jaxb-impl 4.0.0-M4 by @arjantijms in #23863
• Integrate Jakarta Security 3.0.0-RC4 and impl Soteria/Weld by @arjantijms in #23864
• Fixes 16587 - support custom principal in Jakarta Authentication by @arjantijms in #23865
• Using grizzly 4.0.0-M1 instead of a snapshot by @dmatej in #23867
• Bump jackson-databind from 2.13.2 to 2.13.2.1 in /nucleus/parent by @dependabot in #23869
• Integrate Tyrus 2.1.0-M3 by @arjantijms in #23866
• Updates for Felix components by @arjantijms in #23870
• Integrate Jakarta Security 3.0.0 by @arjantijms in #23868
• Updated links to snapshot repositories jersey and shoal by @dmatej in #23871
• Integrate Shoal 3.0.0-M1 by @arjantijms in #23874
• Fixed compatibility with latest metro-wsit snapshot by @dmatej in #23875
• Integrate Jersey 3.1.0-M4 by @arjantijms in #23876
• Patch for jersey-hk2.jar to fix OSGi error by @arjantijms in #23877
• Jna511 by @arjantijms in #23879
• Latest updates by @dmatej in #23880
• Update various version in pom.xml by @arjantijms in #23881
• Update to Jakarta Transactions 2.0.1 by @tomjenkinson in #23882
• Using released hibernate-validator 8.0.0.Alpha3 by @dmatej in #23883
• Integrate Metro 4.0.0-M4 by @arjantijms in #23885
• Change the dependency on jackson-module-jaxb-annotations to jackson-module-jakarta-xmlbind-annotations by @hs536 in #23887
• Integrate Jersey 3.0.4 by @hs536 in #23886
• #23507 Nucleus tests transformed to Admin tests by @dmatej in #23889
• Fixed compatibility of OpenDJ with JDK17 by @dmatej in #23890
• Add external pages TCK and start update to EE 10 by @arjantijms in #23888
• Update glassfish.org README and Downloads Page for 6.2.4 and 6.2.5 Releases by @gerdogdu in #23891
• Integrate WaSP 3.1.0-M2 by @arjantijms in #23894
• Integrate ASM 9.3 by @arjantijms in #23895
• Fix remaining Servlet 6 TCK failures by @arjantijms in #23896
• Enable the CDI Lite LiteExtensionTranslator by @starksm64 in #23897
• Implement getRequestId() and related by @arjantijms in #23898
• Fixed maven compiler annotation processing by @dmatej in #23899
• #23745: jakarta.enterprise.cdi-api not reachable through javaee.jar by @lukasj in #23903
• #23455: javaee.jar should be renamed to jakartaee.jar by @lukasj in #23904
• Integrate Expressly 5.0.0-M2 + TCK tests for it. by @arjantijms in #23905
• Eclipse WaSP : Refactor org.apache.jasper to org.glassfish.wasp by @jGauravGupta in #23910
• Felix jdk17 fix - able to start with the Security Manager enabled by @dmatej in #23911
• Issue 23914 - jsp:plugin noop, which removes ieClassId by @arjantijms in #23916
• rename files/modules/artifacts to use jakartaee instead of javaee by @lukasj in #23913
• Update to Mojarra 4.0.0-M7 by @scottmarlow in #23926
• Integrate Weld 5.0.0.SP1 by @arjantijms in #23925
• Update various versions by @arjantijms in #23928
• switch from obsolete jsonp-jaxrs to parsson media by @lukasj in #23929
• Upgrade jbatch to v2.1.0 by @scottkurz in #23930
• Integrate WaSP 3.1.0-M4 by @arjantijms in #23932
• Fix #23933 by adding a proxy for the Policy when Security Managed used by @arjantijms in #23934
• Integrate WaSP 3.1.0-M5 and update pages TCK runner by @arjantijms in #23935
• Maven Bundle Plugin updated to 5.1.6 by @dmatej in #23936
• Upgrade jbatch to v2.1.1 by @scottkurz in #23937
• Fix #23940 Users can override classes of the jakarta package. by @kosakak in #23941
• update concurrent API jars to 3.0.0 by @gurunrao in #23942
• Add pom and code for running CDI TCK by @arjantijms in #23938
• Issue #23892 Fixed rules for overriding resources by deployed applications by @dmatej in #23943
• Fix Weld processing a beans.xml, e.g. enabling interceptors by @arjantijms in #23944
• CDI API + Weldconnector service file and refactoring by @arjantijms in #23946
• Fix of default context root with a generated suffix. by @OndroMih in #23948
• Log authentication exceptions in debug mode by @arjantijms in #23947
• Support only extension in war by @arjantijms in #23949
• Update several dependencies to updated versions by @arjantijms in #23951
• Fix build compatible extensions not running after portable ones. by @arjantijms in #23952
• Fix appclient parsing error due to trailing spaces in windows by @hs536 in #23954
• Fix minor mistake in jspc by @hs536 in #23958
• Support scanning applibs by @arjantijms in #23957
• Reverting Jersey back to M5 as the update broke 4 TCK tests by @dmatej in #23964
• Integrate Mojarra 4.0.0 by @arjantijms in #23966
• Test bean attributes for session bean by @arjantijms in #23965
• Using released Felix instead of temporary prerelease by OmniFish by @dmatej in #23955
• Integrate WaSP 3.1.0-M6 by @arjantijms in #23967
• Refactor injection manager related code. by @arjantijms in #23969
• Add EE 10 schemas from https://jakarta.ee/xml/ns/jakartaee/#10 by @hs536 in #23968
• Try to eager load Servlets at startup. by @arjantijms in #23970
• Fixes EnterpriseBeanLifecycleTest - using GF (de)serialization by @dmatej in #23971
• Eagerly create MDBs on startup by @arjantijms in #23972
• Set required system property for the CDI TCK, passing 1 more test by @arjantijms in #23974
• Remove useless check by @pzygielo in #23975
• Fix for EjbInjectionTest by @dmatej in #23976
• Update to latest CDI TCK version by @starksm64 in #23977
• Cleanups by @dmatej in #23973
• Updated Weld to 5.0.0.SP2 by @dmatej in #23978
• Exclude the test-audit dependencies from tck test classes by @starksm64 in #23980
• Add runner for concurrency TCK by @arjantijms in #23982
• Fixed another few CDI TCK tests by @dmatej in #23981
• Concurrency tck - update lib by @arjantijms in #23983
• Fixed timeout tests in Servlet TCK by @dmatej in #23987
• MicroProfile Config 3.0 Support by @MattGill98 in #23807
• Update JakartaEE 10 Schemas by @pzygielo in #23991
• Fix provider tests in CDI TCK by @tnagao7 in #23992
• Updated and reactivated Krazo for MVC 2.0 support by @chkal in #23988
• Helidon cdi tck patch by @MattGill98 in #23990
• Integrate Grizzly 4.0.0 by @arjantijms in #23994
• Bump OpenMQ version by @pzygielo in #23995
• Update to common annotations to 2.1.1 for deprecated @ManagedBean by @starksm64 in #23996
• Helidon Config - CDI TCK Fix 2 by @MattGill98 in #24000
• Implement Jakarta Concurrency glue code. by @arjantijms in #23999
• Dep updates by @arjantijms in #24001
• Add concurrency API JAR to the default JSP servlet config. by @OndroMih in #24009
• Integrate WaSP 3.1.0-M7 by @arjantijms in #24005
• Integrate OmniConcurrent RC3 by @arjantijms in #24010
• Jdk17 Profile for MicroProfile dependency by @arjantijms in #24002
• Make bind exception more clear by @arjantijms in #24013
• Added excludes for challenged Concurrency TCK tests and corrected header by @arjantijms in #24015
• Update concurrency runner and domain.xml to execute sigtest on server by @arjantijms in #24016
• Fixed default httpOnly value - should be true by @hs536 in #24021
• Add a CDI signature test profile by @starksm64 in #24019
• Add TCK runner for Jakarta Validation by @arjantijms in #24023
• Exclude jboss audit dependencies. There are problematic for CIs. by @arjantijms in #24022
• Integrate concurrent rc4 by @arjantijms in #24025
• Product name updates by @dmatej in #24024
• appclient container needs 2.1.1 Jakarta Annotation ManagedBean - alt by @arjantijms in #24026
• Correct classifier for CDI TCK signature test by @arjantijms in #24028
• Comment out MVC temporarily to have CDI TCK passing again by @arjantijms in #24029
• Integrate command security 1.0.15 by @arjantijms in #24031
• Exclude challenged concurrency TCK test by @arjantijms in #24032
• appclient container needs 2.1.1 Jakarta Annotation ManagedBean by @scottmarlow in #24020
• Use excluded groups property for CDI TCK by @arjantijms in #24034
• Rules for resource and class loading resolution aligned by @dmatej in #24035
• Updated jakarta.el-api, removed hack to clear cache by @dmatej in #24036
• Update various components by @arjantijms in #24038
• Add execution of the CDI Lang Model TCK by @arjantijms in #24040
• Move all links to final versions, update a wrong SHA and name. by @arjantijms in #24042
• Integrate Exousia 2.1.0 by @arjantijms in #24043
• Logging fixes by @dmatej in #24045
• GJULE - new GlassFish logging backend by @dmatej in #24046
• Logging fixes by @dmatej in #24051
• Re-integrate fixed MVC and Krazo artifacts by @erdlet in #24052
• Update Concurrency TCK runner for 3.0.2 by @arjantijms in #24053
• Fixes #24054 - Move ApplicationValidator messages to DOLUtils class by @OndroMih in #24055
• Logging fixes by @dmatej in #24057
• Update various versions by @arjantijms in #24058
• Refresh jakartaee_10.xsd by @pzygielo in #24062
• Refresh xsds by @pzygielo in #24063
• Fix typos by @pzygielo in #24066
• Asciidoctor plugin now supports JDK17 too by @dmatej in #24067
• Logging final cleanup by @dmatej in #24069
• Update of the documentation related to latest changes in logging by @dmatej in #24072
• Integrate Expressly 5.0.0 by @arjantijms in #24073
• Fixed typo in read-uncommited by @dmatej in #24075
• Fixed references in documentation by @dmatej in #24074
• More robust solution for Helidon by @dmatej in #24076
• Integrate Hibernate Validator 8.0.0.CR3 by @arjantijms in #24078
• Fix for #24085 Manifest doesn't always exist by @dmatej in #24087
• Adding fix to solve problem to access Restricted Directory when using context root as / by @luiseufrasio in #24077
• Small amount of cleanup for glue instance listeners by @arjantijms in #24091
• More tolerant test - there may be more server.log files by @dmatej in #24093
• Fixed comparison in JDK version requirement validation by @dmatej in #24089
• Integrate helidon-config 3.0.1 and Nimbus 9.24.2 by @arjantijms in #24094
• Remove unused local variables by @pzygielo in #24096
• Bump jsoup from 1.11.2 to 1.15.3 in /appserver/tests/appserv-tests/devtests/security/jaccApi/prog-auth/common by @dependabot in #24098
• Add glassfish-jul-extension dependency to glassfish-embedded-all by @pzygielo in #24099
• Integrate EclipseLink 4.0.0-RC1 by @arjantijms in #24100
• Reduce dependency scope by @pzygielo in #24097
• Created TCK Runner for old Ant-based tests in jakartaeetck.zip by @dmatej in #24103
• Fix for #24104 - fixed infinite loop by @dmatej in #24105
• Update various component versions in pom by @arjantijms in #24107
• Update MVC/Krazo to final by @arjantijms in #24109
• Fixes to be able to run the TCK on custom Jenkins instance by @dmatej in #24108
• Update pom for REST TCK to latest EE 10 version by @arjantijms in #24110
• Update Nimbus to 9.25, javassist to 3.29.2, webconsole to 4.8.4 by @arjantijms in #24111
• Fixes and updates based on playing with external Jenkins builds with TCK by @dmatej in #24112
• DOL module vs. technical debt: generics by @dmatej in #24082
• Fixes for the TCK by @dmatej in #24113
• Fixed remaining tz tests by @dmatej in #24114
• Upgraded jettison by @dmatej in #24116
• Update JSTL Impl to 3.0.1, Nimbus to 9.25.4 and Con. to 3.0.2 by @arjantijms in #24119
• Fix #24115 Reason phrase is not printed in the validation error message by @kaido207 in #24118
• Update NOTICE.md by @hs536 in #24123
• Cleaning of connectors code by @arjantijms in #24124
• Update various versions by @arjantijms in #24127
• Omniconcurrent refactoring to remove the circular dependency by @dmatej in #24117
• Tests to reproduce #24059 by @OndroMih in #24102
• Concurrency dol cleanups by @dmatej in #24129
• Small amount of cleaning for connector related code by @arjantijms in #24134
• Bump jackson-databind from 2.13.4 to 2.13.4.1 in /nucleus/parent by @dependabot in #24135
• Integrate Helidon Config 3.0.2 by @arjantijms in #24137
• Remove removed infra repository by @pzygielo in #24139
• Try to build w/o separate container by @pzygielo in #24144
• Use spec-version plugin to check distributions by @pzygielo in #24142
• Set generated keystore type to JKS by @arjantijms in #24148
• Fix AdminGUI for GF7 by @avpinchuk in #24151
• Fix null pointer in ComponentDefinition by @OndroMih in #24150
• Improve exception logging during startup by @arjantijms in #24149
• Fix for #23922 - EAR with multiple WAR logs many false ClassNotFound warnings by @OndroMih in #24152
• Fix programmatically declared roles not taken into account for authz. by @arjantijms in #24153
• Add support for MicroProfile JWT by @arjantijms in #24155
• Integrate Jersey 3.1.0 by @arjantijms in #24156
• Update Nimbus, Jackson and Krazo by @arjantijms in #24157
• Generate missing config when asadmin set is called by @OndroMih in #24160
• #24159 - Load scripts eagerly in Admin Console. by @OndroMih in #24161
• Fix admin console logger settings page by @OndroMih in #24165
• Fix ldap realm by @arjantijms in #24166
• Add back JDBC templates to the GF distribution by @OndroMih in #24168
• Merge Admingui7 into master by @arjantijms in #24174
• JNDI Names + Concurrency + DOL cleanups by @dmatej in #24146
• Add REST JDBC management tests by @avpinchuk in #24175
• Fixed Ant home resolution and PATH by @dmatej in #24176
• Bump parent from 1.0.7 to 1.0.8 by @pzygielo in #24186
• M1 to final versions (no change other than version) by @arjantijms in #24177
• Integrate Shoal 3.0.1 by @arjantijms in #24190
• Add javadoc jar for jackson repackaged by @arjantijms in #24191
• Integrate Tyrus 2.1.2 by @arjantijms in #24193
• Bump woodstox-core from 6.2.8 to 6.4.0 in /appserver by @dependabot in #24143
• Update various versions by @arjantijms in #24194
• Generate missing config when asadmin set is called (2nd attempt) by @OndroMih in #24185
• Use ELManager to fetch ExpressionFactory from instead of JSP by @arjantijms in #24195
• Fix ServletContext.getResource() to resolve to a file path instead of a jndi url by @OndroMih in #24197
• Attempt to stabilize log rotation integration test by @avpinchuk in #24198
• Revisited stop/start of GlassFish servers by @dmatej in #24200
• Fixed exception when enabling a Monitoring Service by @OndroMih in #24199
• Authorization Constraints Ignored When Using Path Traversal Penetration Using Default Virtual Module by @Pandrex247 in #24201
• Removal of unused code by @dmatej in #24204

New Contributors

• @kosakak made their first contribution in #23773
• @volosied made their first contribution in #23847
• @dependabot made their first contribution in #23869
• @scottmarlow made their first contribution in #23926
• @erdlet made their first contribution in #24052
• @luiseufrasio made their first contribution in #24077
• @avpinchuk made their first contribution in #24151
• @Pandrex247 made their first contribution in #24201

Full Changelog: 6.2.5...7.0.0