Release Notes
v5.27.10 on the GitHub
New Features
Restrict deployment to main branch only in OpenL Studio's design repository.
Add a setting called "Deployment Branch" in the deployment repository configuration. The setting offers two options:
Improvements
OpenL Studio:
- Permission inheritance is removed.
- Optimizing memory usage for the trace functionality.
- Functionality to specify a commit message when deploying rules from OpenL Studio.
Fixed Bugs
OpenL Studio:
- User is not able to deploy the project, if the project was previously deployed from the deleted branch.
Core:
- No validation for constructors when using literals as input parameters.
Rule Services:
- Out-of-Memory error for requests exceeding 128 KB when LoggingFeature is enabled.
Fixes Vulnerabilities:
- CVE-2024-47535 - Netty
- CVE-2024-57699 - Json-smart
- CVE-2025-23184 - CXF
Updated Libraries
Runtime Dependencies:
- Spring Security 5.8.16
- Nimbus JOSE+JWT 10.0.2
- Json-smart 2.5.2
- Cloning 1.12.1
- Kafka 3.9.0
- OpenTelemetry 2.13.1
- Jackson 2.18.2
- CXF 3.6.5
- gRPC 1.70.0
- Swagger Core 2.2.28
- Swagger Parser 2.1.25
- Log4j 2.24.3
- Slf4j 2.0.17
- AWS S3 2.30.28
- Azure BLOB 12.29.0
- Netty 4.1.119.Final
- HikariCP 6.2.1
- Commons Codec 1.18.0
- Commons IO 2.18.0
- GSON 2.12.1
- Bouncy Castle 1.80
- Groovy 4.0.25
- POI 5.4.0
- Guava 33.4.0-jre
- XMLSec 2.3.5
Test Dependencies:
- JUnit 5.12.0
- Awaitility 4.3.0
- Mockito 5.15.2
- Datasource Proxy 1.10.1
- Byte buddy 1.17.1
- Testcontainers 1.20.5
- Minio 8.5.17
- ojdbc11 23.7.0.25.01
- PostgreSQL JDBC 42.7.5
- MariaDB Java Client 2.7.12
Maven:
- maven-archetype-plugin 3.3.1
- license-maven-plugin 2.5.0
- maven-surefire-plugin 3.5.2
- maven-invoker-plugin 3.9.0
- maven-project-info-reports-plugin 3.8.0
- maven-site-plugin 3.21.0
- dependency-check-maven 11.1.1
- rewrite-maven-plugin 5.46.3
- maven-javadoc-plugin 3.11.2
- aspectj-maven-plugin 1.15.0
Removed:
- stax-ex
