Release Notes / Version 13.2512.0
Table Of ContentsJShell Enhancements
Aligned with the recent enhancements for CMCC v12.2506.0.0 of
configuration options (for example, via environment properties but
also better support for properties stored in
.cm.jshell.properties), the API of the
coremedia namespace has been enhanced by two new
connect methods:
connect(username, password):CapConnectionconnect(Map<String, String> params):CapConnection
The former makes the repository.url obsolete, which
will then be determined from the outer configuration (like from
environment variables or from
.cm.jshell.properties). The latter leverages the
map-like configuration, that already exists for
Cap.connect(...) to be also available in JShell. As
always, the benefit of using coremedia.connect(...)
over Cap.connect(...) is not only automatic close
of the connection when leaving JShell, but also heaving a
fully-fledged application context at hand, like accessing the
SitesService via coremedia.sites
(or short: cm.sites).
(CMS-29030)
Third-Party Update: Apache Tika 3.2.3
Apache Tika has been updated to version 3.2.3. As part of this change, transitive dependencies of Apache Tika have been updated.
Updated dependencies:
Apache Tika 3.2.2
jsoup 1.21.2
If you use these libraries in project code, please check their respective release notes for changes and upgrade information.
(CMS-28582)
Deprecated Content Feeder Configuration Properties
The Content Feeder configuration properties
feeder.content.issues.reindex-time-max-percentage
and feeder.content.issues.reindex-time-window have
been deprecated. They have been replaced by properties
feeder.content.background-feed.ISSUES.max-time-percentage
and
feeder.content.background-feeder-max-time-window,
which should be used instead.
(CMS-28465)
Third-Party Update: Apache Tika 3.2.2 and Transitive Dependencies
Apache Tika has been updated to version 3.2.2. As part of this change, transitive dependencies of Apache Tika have been updated.
Updated dependencies:
Apache Commons CSV 1.14.1
Apache Commons IO 2.20.0
Apache Commons Lang3 3.18.0
Apache Mime4J 0.8.13
Apache PDFBox 3.0.5
Apache Tika 3.2.2
ASM 9.8
jsoup 1.21.1
If you use these libraries in project code, please check their respective release notes for changes and upgrade information.
(CMS-28431)
Plugins can Contribute Document Type Aspects
There is a new Extension Point for Plugins. The
content-server Application Plugin of a Plugin
Bundle can now contain resources matching the classpath pattern
classpath*:framework/doctypes/*/.xml. All these
files will be picked up as document type definitions, which can
contain new document types as well as document type aspects (see
Content
Server Manual / 4.2.3 Attaching Properties to Existing Content
Types). The extended document type model becomes active on
first Content Server start after the Plugin has been added.
Important note: If a Plugin comes with custom document type definitions, once you have activated it and started the Content Server, its database is adjusted accordingly. You must not disable the Plugin afterwards, or Content Server might refuse to start, because the additional document type definitions are missing. In case you want to remove such a Plugin, consult the Content Server Manual about adjusting the database after document type changes.
(CMS-27872)
Updated Project Dependencies
Updated several dependency and plugin versions:
Angus Activation → 2.0.3
Angus Mail → 2.0.5
AspectJ → 1.9.25
AssertJ → 3.27.6
Awaitility → 4.3.0
Bouncy Castle Java → 1.83
Byte Buddy → 1.17.6
Caffeine → 3.2.0
ClassMate → 1.7.3
Commons CLI → 1.11.0
Commons Codec → 1.20.0
Commons Collections → 4.5.0
Commons Compress → 1.28.0
Commons Exec → 1.6.0
Commons IO → 2.21.0
Commons Lang → 3.20.0
Commons Pool → 2.13.1
Commons Text → 1.15.0
CoreMedia Adapter for HCL Commerce → 3.0.14
CoreMedia Adapter for Salesforce Commerce Cloud B2C → 3.0.16
CoreMedia Client API and Mock Adapter for Commerce Hub → 3.0.16
Enterprise Security API → 2.7.0.0
Error Prone → 2.45.0
FreeMarker → 2.3.34
Google API Common for Java → 2.50.2
Google API Extensions for Java → 2.67.2
Google Auth Library for Java → 1.37.0
Google Common Protos Client for Java → 2.63.2
Google HTTP Client Library for Java → 1.47.1
Google OAuth Client Library for Java → 1.39.0
GraphQL Java → 25.0
GraphQL Java DataLoader → 5.0.3
gRPC-Java → 1.78.0
Gson → 2.13.2
Guava → 33.5.0-jre
Hibernate ORM → 7.1.11.Final
Hibernate Validator → 9.1.0.Final
Jackson → 2.20.1
Jakarta Servlet API → 6.1.0
Jakarta Validation API → 3.1.1
Javassist → 3.30.2-GA
JBoss Logging → 3.6.1.Final
Jib Maven Plugin → 3.5.1
JLine → 3.30.6
JSON-Java → 20251224
JUnit Jupiter → 6.0.1
Logback → 1.5.22
Micrometer → 1.16.1
Mockito → 5.21.0
Netty → 4.2.9.Final
Plugin Framework for Java → 3.14.0
Protobuf Maven Plugin → 4.1.2
Protocol Buffers for Java → 4.33.2
Reactor Project BOM → 2025.0.1
Resilience4j → 2.3.0
SLF4J → 2.0.17
SnakeYAML → 2.5
Spring AI → 2.0.0-M1
Spring Boot → 4.0.0
Spring Data BOM → 2025.1.1
Spring for GraphQL → 2.0.1
Spring Framework → 7.0.1
Spring gRPC → 1.0.0
Spring Security → 7.0.0
Spring Webflow → 4.0.0
Tomcat → 11.0.15
Vavr → 0.11.0
(CMS-27700)
Session Check for Blob Download from Content Server Can Be Disabled
Blob Downloads from Content Servers are verified
for a valid login session on each call. With the new configuration
option cap.server.blob-download-session-validation,
this session validation can be disabled. The default for the option is
true, i.e., each download request is verified for a
valid login session. If set to false, the session
validation for downloads is disabled. This is useful on
Replication Live Servers to allow for
load-balanced blob download. It must only be set to
false if corresponding servers are appropriately
secured by firewalls, private networks, or the like. Otherwise, public
unsecured read access to blobs could be possible. Blob
Uploads are always secured by session
validation, regardless of the option’s setting.
(CMS-27698)
MongoDB update to version 8.0
MongoDB has been updated to version 8.0 for the Docker Deployment. Note that an upgrade is only possible from a 7.0.x version. An upgrade from an earlier version needs to be done successively. Please refer to the official MongoDB documentation on how to upgrade: https://www.mongodb.com/docs/manual/release-notes/8.0-upgrade-standalone/ The compatibility changes are described here: https://www.mongodb.com/docs/manual/release-notes/8.0-compatibility/
(CMS-25999)
Add Checkbox To Publication Workflow Window To Include Referenced Updated Content
Previously, only unpublished referenced content items were included in the publication. When the new checkbox is enabled, also referenced content items are included that have been updated since their last publication.
The depth for following such references is limited by Studio Setting
publication.maxUpdatedLinksDepthToCompleteChangeSet
or Spring property
studio.rest.changeset-max-updated-links-recursion-depth.
For more details see the section “Configuring Workflow Validation” / “Publication Settings” in the Studio User Manual.
(CMS-17555)


