Third-Party Update: GraphQL-Java to 19.2

The library com.graphql-java:graphql-java was updated from 18.1 to 19.2. It contains several bugfixes and some security relevant improvements.

Follow Section, “Third-Party Update: GraphQL-Java to 19.2” for upgrade information.

(CMS-22091)

Configured a Cache Control max-age Default for Headless Server GET Requests

Configured a default of 5 minutes for the Headless Server's Cache-Control max-age value to prevent that REST responses including properties of a content which is erroneously configured to be valid for a long time will be cached for a long time.

(CMS-21585)

Control Surrounding Root Tag of Richtext by Query Parameter

Richtext property fields, which deliver string based content, now support the new optional Boolean parameter suppressRootTag. The parameter defaults to the value of the server config parameter caas.stax.suppressRootTag. If true, the surrounding root tag of a richtext will be parsed out. This is the new default!

Example query with the new parameter suppressRootTag

query getTransformedRichtext($aid: String!) {
  content {
    article(id: $aid) {
      id
      detailText {
        text(suppressRootTag: false)
      }
    }
  }
}

Follow Section, “Control Surrounding Root Tag of Richtext by Query Parameter” for upgrade information.

(CMS-21962)

Change getName Method in PluginSchemaAdapterFactory to NonNull

The method was changed to be NonNull, since semantically it should be NonNull and it does not make sense to allow null as an identifier for adapters. This change is only considered breaking, if the interface is implemented and the implemented method returns null for the name. If this is not the case, it is not considered breaking.

(CMS-21901)

Headless Server now Offers Full Configurable CORS Support

The former basic CORS support which implemented an "allow all origins" policy in CaasConfig was replaced by a fully configurable implementation. See the deployment manual about how to configure CORS on headless (properties caas.cors.*).

Follow Section, “Headless Server now Offers Full Configurable CORS Support” for upgrade information.

(CMS-21831)