Bloomreach Experience Manager V12.6.18 Release Notes
September 21, 2021
The new maintenance release of 12.6.18 is available for general use for our customers and partners. This release includes improvements in community and enterprise artifacts.
Note that no 12.6.17 version was released. We moved directly to 12.6.18 for internal release process reasons. Changes below are compared with the previously released 12.6.16 version.
We encourage all projects to update to the most recent regular releases. Using a tagged artifact that is not yet part of a release should only be done if there is a specific reason and only after testing in your specific project setup.
Update considerations
The following 3rd party dependencies have changed since the previous maintenance release. If your project directly uses any of these libraries, please validate compatability. For more information on changes in these libraries please see information from the invidual vendors.
| Module | 12.6.16 | 12.6.18 |
|---|---|---|
| org.apache.commons/commons-compress | 1.19 | 1.21 |
| org.apache.pdfbox/pdfbox | 2.0.23 | 2.0.24 |
| org.apache.pdfbox/fontbox | 2.0.23 | 2.0.24 |
| org.apache.pdfbox/pdfbox-tools | 2.0.23 | 2.0.24 |
| org.apache.tika/tika-parsers | 1.26 | 1.27 |
| com.fasterxml.woodstox/woodstox-core | 6.2.4 | 6.2.6 |
| org.apache.james/apache-mime4j-core | 0.8.3 | 0.8.4 |
| org.apache.pdfbox/xmpbox | 2.0.23 | 2.0.24 |
| org.bouncycastle/bcmail-jdk15on | 1.68 | 1.69 |
| org.bouncycastle/bcpkix-jdk15on | 1.68 | 1.69 |
| org.bouncycastle/bcprov-jdk15on | 1.68 | 1.69 |
| org.glassfish.jaxb/jaxb-runtime | 3.0.0 | 2.3.4 |
| org.glassfish.jaxb/txw2 | 3.0.0 | 2.3.4 |
| com.sun.istack/istack-commons-runtime | 4.0.0 | 3.0.12 |
| org.apache.cxf/cxf-core | 3.3.10 | 3.3.11 |
| org.apache.cxf/cxf-rt-rs-client | 3.3.10 | 3.3.11 |
| org.apache.cxf/cxf-rt-transports-http | 3.3.10 | 3.3.11 |
| org.apache.cxf/cxf-rt-frontend-jaxrs | 3.3.10 | 3.3.11 |
| org.apache.cxf/cxf-rt-security | 3.3.10 | 3.3.11 |
| org.apache.cxf/cxf-rt-transports-http-jetty | 3.3.10 | 3.3.11 |
| org.apache.cxf/cxf-testutils | 3.3.10 | 3.3.11 |
| org.springframework/spring-context | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.springframework/spring-aop | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.springframework/spring-beans | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.springframework/spring-core | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.springframework/spring-expression | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.springframework/spring-context-support | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.springframework/spring-web | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.springframework/spring-webmvc | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.springframework/spring-oxm | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.springframework.security/spring-security-core | 4.2.18.RELEASE | 4.2.20.RELEASE |
| org.springframework.security/spring-security-web | 4.2.18.RELEASE | 4.2.20.RELEASE |
| org.springframework.security/spring-security-config | 4.2.18.RELEASE | 4.2.20.RELEASE |
| org.springframework/spring-tx | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.springframework/spring-jdbc | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.springframework/spring-orm | 4.3.29.RELEASE | 4.3.30.RELEASE |
| org.apache.cxf/cxf-rt-rs-extension-providers | 3.3.10 | 3.3.11 |
| org.apache.cxf/cxf-rt-rs-security-cors | 3.3.10 | 3.3.11 |
| org.apache.commons/commons-csv | 1.4 | 1.8 |
| commons-fileupload/commons-fileupload | 1.3.3 | 1.4 |
| net.minidev/json-smart | 2.2.1 | 2.4.7 |
| net.minidev/accessors-smart | 1.1 | 2.4.7 |
| org.elasticsearch.client/elasticsearch-rest-client | 7.12.1 | 7.14.0 |
| com.couchbase.client/java-client | 2.7.15 | 2.7.20 |
| com.couchbase.client/core-io | 1.7.15 | 1.7.20 |
Removed org.apache.commons/commons-lang3 3.7
Removed org.apache.commons/commons-collections4 4.1
Removed org.glassfish.jaxb/jaxb-core 3.0.0
Removed jakarta.xml.bind/jakarta.xml.bind-api 3.0.0
Removed commons-pool/commons-pool 1.5.7
Removed commons-codec/commons-codec 1.10
Removed commons-configuration/commons-configuration 1.7
Removed commons-digester/commons-digester 1.8.1
Added org.apache.tika/tika-core 1.27
Added jakarta.annotation/jakarta.annotation-api 1.3.5
Added org.bouncycastle/bcutil-jdk15on 1.69
Added org.ow2.asm/asm 9.1
Overview of JIRA issues closed in Bloomreach Experience 12.6.18
Task
- [ CMS-14780 ] - [26 modules] Cleanup Apache commons dependencies and only use the versions defined in the project pom
- [ CMS-14759 ] - [5 modules] Bump commons-compress to 1.21
- [ CMS-14757 ] - [targeting] Update json-smart dependency to the latest release
- [ CMS-14756 ] - [10 modules] Update third party dependencies
Totals for issues in this release
- Tasks 4