8.0.0-M8

Eclipse GlassFish 8 is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 11 M4 specification under development.

Jakarta EE 11 M4 is the fourth milestone release of Jakarta EE 11. Jakarta EE 11 M4 is functionally complete; all updated APIs for Jakarta EE 11 have been included and all compatible implementations thereof passed their respective TCKs. The next Jakarta EE 11 milestone (likely RC1) will focus only on small fixes and small service releases.

GlassFish 8 M8 incorporates all final APIs from the Jakarta EE 11 release plan, except for the Jakarta Data API. Jakarta Data is supported via an external build-time plug-in at the moment. Work is underway to support Jakarta Data natively in GlassFish.

8.0.0-M8 also incorporates all changes from the 7.0.x branch.

The following is the full list of Jakarta EE 11 M4 APIs included. All of the updated APIs are final.

API	Implementation	TCK
jakarta.el-api.version 6.0.0	Expressly 6.0.0-M2	jakarta-expression-language-tck-glassfish
jakarta.annotation-api.version 3.0.0
jakarta.cdi-api.version 4.1.0	Weld 6.0.0.Beta4	jakarta-cdi-tck-glassfish
jakarta.interceptor-api.version 2.2.0	Weld 6.0.0.Beta4	jakarta-cdi-tck-glassfish
jakarta.rest-api.version 4.0.0	Jersey 4.0.0-M1	jakarta-rest-tck-glassfish
jakarta.servlet-api.version 6.1.0	(internal in GlassFish 8.0.0-M7)	jakarta-servlet-tck-glassfish
jakarta.pages-api.version 4.0.0	WaSP 4.0.0-M2	jakarta-pages-tck-glassfish
jakarta.websocket-api.version 2.2.0	Tyrus 2.2.0	jakarta-websocket-tck-glassfish
jakarta.authorization-api.version 3.0.0	Exousia 3.0.0-M3	jakarta-authorization-tck-glassfish
jakarta.authentication-api.version 3.1.0	Epicyro 3.1.0	jakarta-authentication-tck-glassfish
jakarta.persistence-api.version 3.2.0	EclipseLink 5.0.0-B03	TCK for EE server not yet available*
jakarta.validation-api.version 3.1.0	Hibernate Validator 8.0.1.Final	jakarta-validation-tck-glassfish
jakarta.security-api.version 4.0.0	Soteria 4.0.0	jakarta-security-tck-glassfish
jakarta.concurrent-api.version 3.1.0	Concurro 3.1.0-M4	jakarta-concurrency-tck-glassfish
jakarta.faces-api.version 4.1.1	Mojarra 4.1.2	jakarta-faces-tck-glassfish

* EclipseLink outside GF passes

JDK 17 is available for the special JDK 17 build, but this build is only intended for TCK purposes.
For the regular version of GlassFish 8, JDK 21 is required as a minimum and the final version of GlassFish 8 is targeted to certify on JDK 21 for Jakarta EE 11.

In this release GlassFish itself compiles, builds and passes the internal tests executed during a build. The PR verification tests all pass as well.

Being an early access milestone build, this build should obviously only be used for testing.

What's Changed

• Validate the structure in all submodules (especially version ids) by @dmatej in #25073
• Integrate yasson 3.0.4 by @senivam in #25074
• Update Jakarta Validation TCK to 3.1.1 by @arjantijms in #25077
• Fixed dependencies for Servlet TCK by @dmatej in #25082
• Add profiles to Faces TCK to run subsets by @arjantijms in #25081
• Fixes remote JNDI lookup by @avpinchuk in #25076
• Fix styling of the command logger button in Admin Console in Chrome by @OndroMih in #25080
• Enabled checkstyle rules for imports by @dmatej in #25083
• Fixes #25085 - Use HTTPS in Oracle links of the documentation by @Thihup in #25087
• Experimental support of JDK23 and 22 for GlassFish 7 by @dmatej in #25092
• Removed abandoned docker image build by @dmatej in #25093
• Upgraded command-security-maven-plugin to 1.0.18 by @dmatej in #25094
• Document GlassFish API in the Application Development guide by @OndroMih in #25090
• Using release instead of source+target, removing ldapbp module by @dmatej in #25096
• Syncing with master by @dmatej in #25095
• Removed security tests depending on SecurityManager by @dmatej in #25098
• Add missing license header by @OndroMih in #25101
• Apply proc:none/proc:only for test compile too. by @arjantijms in #25102
• Replace none/only testcompile with full in a profile for JDK 23 by @arjantijms in #25103
• Integrate PFL 5.0.0 by @arjantijms in #25105
• Faster autodeploy at startup - do not wait before first autodeployment scan by @OndroMih in #25079
• Integrate Mojarra 4.1.2 and WaSP-M2 by @arjantijms in #25108
• Improvements and fixes in the SQL trace listener functionality by @OndroMih in #25088
• Remove security manager usage from several additional packages by @arjantijms in #25111
• Integrate Tags (JSTL) API 3.0.2 by @arjantijms in #25112
• Fix for a ClassCastException when a filter over a WebSocket endpoint wraps the request by @OndroMih in #25107
• FindBugs is dead - removed from the project. by @dmatej in #25116
• Spotted bugs in tests by @dmatej in #25115
• GJULE - fixed dependency on system default charset by @dmatej in #25114
• Refactored SharedSecureRandom by @dmatej in #25113
• NetUtils revisited by @dmatej in #25117
• Deleted GFBase64* implementations from pre-JDK8 times by @dmatej in #25118
• Fixes CVE-2024-9329: Setting local Name and Port for /managment/* URI by @luiseufrasio in #25106
• Fixes service creation on Solaris operating system by @avpinchuk in #25120
• The common-util: Fixed dependencies on default charset by @dmatej in #25119
• Fixed EJB business interface annotation processing by @avpinchuk in #25122
• Add guidance for security issues and vulnerability to the issue template by @hs536 in #25125
• Hide "Trying to get this manpage" messages for asadmin --help by @OndroMih in #25135
• Remove unknown plugin parameter by @pzygielo in #25137
• Fixes the get and set asadmin commands by @avpinchuk in #25138
• Refactoring around the glassfish module by @dmatej in #25134
• The XFS file system doesn't return size of the directory content by @dmatej in #25142
• Fixed masking passwords in a map used for logging in admingui + added warning to documentation by @dmatej in #25144
• Abandoned MD5 to SHA-256 used for caching command models by @dmatej in #25148
• Fixed insecure XML processing - all XSDs and DTD have to be local by @dmatej in #25147
• SpotBugs based cleanup in nucleus-admin and surroundings by @dmatej in #25149
• Fix small issue in workflow, mention checkstyle add links to the pull request workflow and the jenkins url. by @escay in #25136
• Add the 7.0.17 release to the website by @OndroMih in #25152
• Runnable Glassfish Embedded by @OndroMih in #25146
• Fix exception if GF Embedded config file is set without schema by @OndroMih in #25151
• issues/25156 show port number/range in failure message by @scottmarlow in #25158
• Fallback to basic file attributes if sun.nio.fs cannot be used by @OndroMih in #25160
• Part 1,2,3,4 for issue #24900 Document and rename some ResourceHandle fields. by @escay in #25155
• Dynamically update classloader after adding a library with the add-library command by @OndroMih in #25153
• Update various versions in pom.xml by @arjantijms in #25168
• Update docs version in pom.xml to 7.0.18 by @OndroMih in #25170
• GJULE - Easier default configuration by @dmatej in #25173
• Smaller cleanups by @dmatej in #25172
• Reduced number of builds to keep from 10 to 2 as requested by Jenkins ops by @dmatej in #25174
• Added parameter for "terse" to Asadmin used in tests by @dmatej in #25171
• Enhance start-db command - initdb and suspend by @arjantijms in #25161
• Xbootclasspath removed from templates by @dmatej in #25175
• Fixed default-web.xml by @dmatej in #25179
• CLI Environment - more useful log file by @dmatej in #25180
• GlassFish Launchers - code cleanup by @dmatej in #25181
• Updated logging-annotation-processor with JPMS. by @dmatej in #25182
• Force generating XJC code with specific language by @Thihup in #25185
• IntelliJ plugin fix: bring back the previous constructor to avoid a breaking change by @OndroMih in #25189
• Update versions of dependencies and increase timeouts in OSGi tests by @arjantijms in #25192
• Increase more versions in pom.xml by @arjantijms in #25196

New Contributors

• @Thihup made their first contribution in #25087

Full Changelog: 8.0.0-M7...8.0.0-M8