Updated Liquibase And Disabled Liquibase Analytics

Updated org.liquibase:liquibase-core to 4.31.0 and disabled new opt-out sending of usage statistics introduced with 4.30.0.

To disable Liquibase analytics we now set LIQUIBASE_ANALYTICS_ENABLED: false in the blueprint example deployment for the studio-server in the file default.yml. You should consider applying this configuration to your deployment.

Note that we do not use Liquibase anymore in versions 2506.0 and later.

See:

(CMS-27366)

Third-Party Update: Apache Solr 9.8.0

Apache Solr has been updated to version 9.8.0. The new version fixes security vulnerability CVE-2025-24814.

A new coremedia/solr-base Docker image with tag 2.5-cm-9.8.0 has been released, which also provides a fix for leader/follower replication with enabled basic authentication. It adds the environment variable SOLR_LEADER_BASIC_AUTH for configuring basic authentication credentials. Starting with previous release Solr 9.7.0, credentials that are included in the SOLR_LEADER_URL environment variable are not used anymore.

See https://solr.apache.org/docs/9_8_0/changes/Changes.html and https://solr.apache.org/guide/solr/latest/upgrade-notes/major-changes-in-solr-9.html#solr-9-8 for a list of changes in Solr.

(CMS-27253)

Deprecation of Public API

The core package hox.corem.publisher and its containing classes PublicationResult and ResultItem have been deprecated. An in-place replacement is not available. Use Unified API instead.

(CMS-27246)