Release Notes

v5.27.6 on the GitHub

Improvements

Rule Services:

  • JsonUtils is set to use the 'yyyy-MM-dd'T'HH:mm:ss.SSS' date format by default.
  • An ability to invoke the OpenL rules by providing arguments in a JSON string format similar to those used in REST services is introduced.

Fixed Bugs

OpenL Studio:

  • Error 500 is returned by the REST API in WebStudio during an asynchronous request if the authentication method is OAuth.
  • Selected branches, except for 'master' or 'main', disappear from the branch dropdown list after re-logging in or restarting Webstudio.
  • The selected Production repository on the 'Auto Deploy' screen is reset when a Deploy Configuration is selected.
  • Webstudio writes data into the public schema when the user's database is PostgreSQL.

Fixes Vulnerabilities:

  • CVE-2023-52428 - Nimbus Jose JWT
  • CVE-2024-28752 - CXF
  • CVE-2024-22257 - Spring Security
  • CVE-2024-22259 - Spring Web

Updated Libraries

  • Spring Framework 5.3.34
  • Spring Security 5.8.11
  • Jose4j 0.9.6
  • Nimbus Jose JWT 9.37.3
  • Json Smart 2.5.1
  • ASM 9.7
  • OpenTelemetry 2.3.0
  • Zookeeper 3.9.2
  • Thrift 0.20.0
  • Netty 4.1.108.Final
  • Reactor Netty HTTP 1.1.18
  • Jackson 2.17.0
  • CXF 3.6.3
  • Swagger Core 2.2.21
  • Swagger Parser 2.1.21
  • Log4j 2.23.1
  • SLF4J 2.0.13
  • Maven Plugin plugin 3.12.0
  • Plexus Utils 4.0.1
  • AWS S3 2.25.31
  • Azure BLOB Storage 12.25.3
  • Awaitility 4.2.1
  • Commons Compres 1.26.1
  • Commons IO 2.16.1
  • BouncyCastle 1.78
  • Groovy 4.0.21
  • AspectJ 1.9.22
  • Guava 33.1.0-jre
  • gRPC 1.63.0
  • Picocli 4.7.5
  • Progressbar 0.10.1

Migration Notes

The behavior of OpenL Studio when it is set up to use the Postgres database as user db is changed. Previously it created all tables in public schema, right now in user's schema. To keep the previous behavior, before migration, it needs to execute the SQL command like:

ALTER ROLE my_studio_user_in_postgresql SET search_path TO public;

Known issue

OpenL Studio is not working with MS SQL Server. It shows errors in the log when a user trying to log in. [ERROR] 19:06:58.013 [qtp2141179775-14] org.openl.rules.webstudio.filter.SecurityFilter - Failed to lock mutex .... nested exception is com.microsoft.sqlserver.jdbc.SQLServerException: Operand type clash: datetime2 is incompatible with timestamp. To solve this issue it needs to change CREATED_DATE column type in the OPENL_LOCK table: ALTER TABLE OPENL_LOCK ALTER COLUMN CREATED_DATE DATETIME NOT NULL;

© Copyright OpenL Tablets, 2004-2024