Release Notes / Version 12.2506.0
Table Of ContentsThird-Party Update: Apache Tika 3.2.2 and Transitive Dependencies
Apache Tika has been updated to version 3.2.2. As part of this change, transitive dependencies of Apache Tika have been updated.
Updated dependencies:
Apache Commons CSV 1.14.1
Apache Commons IO 2.20.0
Apache Commons Lang3 3.18.0
Apache Mime4J 0.8.13
Apache PDFBox 3.0.5
Apache Tika 3.2.2
ASM 9.8
jsoup 1.21.1
If you use these libraries in project code, please check their respective release notes for changes and upgrade information.
(CMS-28431)
Third-Party Update: AWS SDK for Java
The AWS SDK for Java has been updated to version 2.28.24 (see Changelog) to prevent security issue CVE-2025-52999 of its transitive jackson-core dependency.
(CMS-28161)
Updated Project Dependencies
Updated several dependency and plugin versions:
Angus Mail → 2.0.4
AssertJ → 3.27.4
Byte Buddy → 1.17.7
Commons CLI → 1.10.0
Commons Codec → 1.19.0
Commons Compress → 1.28.0
CoreMedia Adapter for HCL Commerce → 3.0.14
CoreMedia Adapter for Salesforce Commerce Cloud B2C → 3.0.16
CoreMedia Client API and Mock Adapter for Commerce Hub → 3.0.16
Enterprise Security API → 2.7.0.0
Error Prone → 2.41.0
Google API Common for Java → 2.53.0
Google API Extensions for Java → 2.70.0
Google Auth Library for Java → 1.38.0
Google HTTP Client Library for Java → 1.47.1
GraphQL Java → 24.2
GraphQL Java DataLoader → 5.0.2
gRPC-Java → 1.75.0
Hibernate ORM → 6.6.27.Final
Hibernate Validator → 8.0.3.Final
Jackson → 2.19.2
Jib Maven Plugin → 3.4.6
jsoup → 1.21.2
JUnit Jupiter → 5.13.4
Micrometer → 1.15.2
Mockito → 5.19.0
Netty → 4.1.124.Final
Protocol Buffers for Java → 4.32.0
Reactor Project BOM → 2024.0.8
Spring Boot → 3.5.5
Spring Data BOM → 2025.0.3
Spring for GraphQL → 1.4.1
Spring Framework → 6.2.10
Spring Security → 6.5.3
Tomcat → 10.1.44
(CMS-28109)
