From 7201408fff35dad97c32a72e92313d56ac49363a Mon Sep 17 00:00:00 2001 From: Thomas Darimont Date: Fri, 30 Oct 2026 14:41:18 +0100 Subject: [PATCH 1/2] Release 0.7.0 Signed-off-by: Thomas Darimont --- CHANGELOG.md | 14 +++++++++++++- README.md | 8 ++++---- easyssf-core/pom.xml | 2 +- easyssf-receiver-jdbc/pom.xml | 2 +- easyssf-receiver-spring-boot-autoconfigure/pom.xml | 2 +- .../pom.xml | 2 +- .../example-oidc-client/pom.xml | 2 +- .../example-resource-server/pom.xml | 2 +- .../example-scim-provisioning/pom.xml | 2 +- easyssf-receiver-spring-boot-examples/pom.xml | 2 +- easyssf-receiver-spring-boot-starter/README.md | 2 +- easyssf-receiver-spring-boot-starter/pom.xml | 2 +- easyssf-receiver/pom.xml | 2 +- easyssf-test-conformance/pom.xml | 2 +- easyssf-test/pom.xml | 2 +- pom.xml | 4 ++-- 16 files changed, 32 insertions(+), 20 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 940c157..c55552e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,17 @@ The notable changes of every release. The section of a version is the text of it ## [Unreleased] +## [0.7.0] - 2026-10-30 + +A release of hardening. A host name like `127.attacker.example` no longer passes for +loopback, the poll endpoint is held to the same URI policy as the metadata endpoints +before the access token goes to it, and responses from the transmitter are bounded, +4 MiB by default. Every stream configuration the transmitter returns has its issuer +checked, not only a created one. Stopping and starting a poller or a registrar again +no longer leaves a thread or a stream behind, and the pending-acks gauge no longer +turns `NaN`. The Quarkus extension mirrors the new `SsfPoller.setUriPolicy` and the +maximum response size when it adopts this release. + ### Security - A host name that merely starts with `127.`, such as `127.attacker.example`, counted as a loopback @@ -256,7 +267,8 @@ Java library and as a Spring Boot 4.1 starter. - The framework-free modules are Java modules; every artifact is signed, carries a CycloneDX SBOM and a self-contained POM. -[Unreleased]: https://github.com/easyssf/easyssf/compare/v0.6.0...HEAD +[Unreleased]: https://github.com/easyssf/easyssf/compare/v0.7.0...HEAD +[0.7.0]: https://github.com/easyssf/easyssf/compare/v0.6.0...v0.7.0 [0.6.0]: https://github.com/easyssf/easyssf/compare/v0.5.0...v0.6.0 [0.5.0]: https://github.com/easyssf/easyssf/compare/v0.4.0...v0.5.0 [0.4.0]: https://github.com/easyssf/easyssf/compare/v0.3.0...v0.4.0 diff --git a/README.md b/README.md index eb37c3d..cb8637d 100644 --- a/README.md +++ b/README.md @@ -74,7 +74,7 @@ which a build has to enable with `true org.easyssf easyssf-receiver-spring-boot-starter - 0.6.0 + 0.7.0 ``` @@ -121,7 +121,7 @@ configuration reference. org.easyssf easyssf-receiver - 0.6.0 + 0.7.0 ``` @@ -295,7 +295,7 @@ Spring Boot modules are automatic modules. org.easyssf easyssf-receiver - 0.6.0 + 0.7.0 ``` @@ -382,7 +382,7 @@ stream management and poll endpoints. The tests of easyssf itself use it. org.easyssf easyssf-test - 0.6.0 + 0.7.0 test ``` diff --git a/easyssf-core/pom.xml b/easyssf-core/pom.xml index 2540bd6..b30cbcd 100644 --- a/easyssf-core/pom.xml +++ b/easyssf-core/pom.xml @@ -5,7 +5,7 @@ org.easyssf easyssf-parent - 0.7.0-SNAPSHOT + 0.7.0 easyssf-core easyssf-core diff --git a/easyssf-receiver-jdbc/pom.xml b/easyssf-receiver-jdbc/pom.xml index 370532c..0e4885d 100644 --- a/easyssf-receiver-jdbc/pom.xml +++ b/easyssf-receiver-jdbc/pom.xml @@ -6,7 +6,7 @@ org.easyssf easyssf-parent - 0.7.0-SNAPSHOT + 0.7.0 easyssf-receiver-jdbc diff --git a/easyssf-receiver-spring-boot-autoconfigure/pom.xml b/easyssf-receiver-spring-boot-autoconfigure/pom.xml index e063b97..e44faf4 100644 --- a/easyssf-receiver-spring-boot-autoconfigure/pom.xml +++ b/easyssf-receiver-spring-boot-autoconfigure/pom.xml @@ -5,7 +5,7 @@ org.easyssf easyssf-parent - 0.7.0-SNAPSHOT + 0.7.0 easyssf-receiver-spring-boot-autoconfigure easyssf-receiver-spring-boot-autoconfigure diff --git a/easyssf-receiver-spring-boot-conformance-tests/pom.xml b/easyssf-receiver-spring-boot-conformance-tests/pom.xml index 8df3149..284a979 100644 --- a/easyssf-receiver-spring-boot-conformance-tests/pom.xml +++ b/easyssf-receiver-spring-boot-conformance-tests/pom.xml @@ -5,7 +5,7 @@ org.easyssf easyssf-parent - 0.7.0-SNAPSHOT + 0.7.0 easyssf-receiver-spring-boot-conformance-tests easyssf-receiver-spring-boot-conformance-tests diff --git a/easyssf-receiver-spring-boot-examples/example-oidc-client/pom.xml b/easyssf-receiver-spring-boot-examples/example-oidc-client/pom.xml index d4dddae..fe6f8d6 100644 --- a/easyssf-receiver-spring-boot-examples/example-oidc-client/pom.xml +++ b/easyssf-receiver-spring-boot-examples/example-oidc-client/pom.xml @@ -5,7 +5,7 @@ org.easyssf easyssf-receiver-spring-boot-examples - 0.7.0-SNAPSHOT + 0.7.0 example-oidc-client example-oidc-client diff --git a/easyssf-receiver-spring-boot-examples/example-resource-server/pom.xml b/easyssf-receiver-spring-boot-examples/example-resource-server/pom.xml index ffb1d2a..1e15fac 100644 --- a/easyssf-receiver-spring-boot-examples/example-resource-server/pom.xml +++ b/easyssf-receiver-spring-boot-examples/example-resource-server/pom.xml @@ -5,7 +5,7 @@ org.easyssf easyssf-receiver-spring-boot-examples - 0.7.0-SNAPSHOT + 0.7.0 example-resource-server example-resource-server diff --git a/easyssf-receiver-spring-boot-examples/example-scim-provisioning/pom.xml b/easyssf-receiver-spring-boot-examples/example-scim-provisioning/pom.xml index 24acd99..278d5c5 100644 --- a/easyssf-receiver-spring-boot-examples/example-scim-provisioning/pom.xml +++ b/easyssf-receiver-spring-boot-examples/example-scim-provisioning/pom.xml @@ -5,7 +5,7 @@ org.easyssf easyssf-receiver-spring-boot-examples - 0.7.0-SNAPSHOT + 0.7.0 example-scim-provisioning example-scim-provisioning diff --git a/easyssf-receiver-spring-boot-examples/pom.xml b/easyssf-receiver-spring-boot-examples/pom.xml index 975b7ee..293a7f7 100644 --- a/easyssf-receiver-spring-boot-examples/pom.xml +++ b/easyssf-receiver-spring-boot-examples/pom.xml @@ -5,7 +5,7 @@ org.easyssf easyssf-parent - 0.7.0-SNAPSHOT + 0.7.0 easyssf-receiver-spring-boot-examples easyssf-receiver-spring-boot-examples diff --git a/easyssf-receiver-spring-boot-starter/README.md b/easyssf-receiver-spring-boot-starter/README.md index 25a20d4..5073181 100644 --- a/easyssf-receiver-spring-boot-starter/README.md +++ b/easyssf-receiver-spring-boot-starter/README.md @@ -10,7 +10,7 @@ Events, the test support. org.easyssf easyssf-receiver-spring-boot-starter - 0.6.0 + 0.7.0 ``` diff --git a/easyssf-receiver-spring-boot-starter/pom.xml b/easyssf-receiver-spring-boot-starter/pom.xml index c178ff6..1571aa6 100644 --- a/easyssf-receiver-spring-boot-starter/pom.xml +++ b/easyssf-receiver-spring-boot-starter/pom.xml @@ -5,7 +5,7 @@ org.easyssf easyssf-parent - 0.7.0-SNAPSHOT + 0.7.0 easyssf-receiver-spring-boot-starter easyssf-receiver-spring-boot-starter diff --git a/easyssf-receiver/pom.xml b/easyssf-receiver/pom.xml index eeff985..1d3cb1f 100644 --- a/easyssf-receiver/pom.xml +++ b/easyssf-receiver/pom.xml @@ -5,7 +5,7 @@ org.easyssf easyssf-parent - 0.7.0-SNAPSHOT + 0.7.0 easyssf-receiver easyssf-receiver diff --git a/easyssf-test-conformance/pom.xml b/easyssf-test-conformance/pom.xml index 62b2523..18d8b24 100644 --- a/easyssf-test-conformance/pom.xml +++ b/easyssf-test-conformance/pom.xml @@ -6,7 +6,7 @@ org.easyssf easyssf-parent - 0.7.0-SNAPSHOT + 0.7.0 easyssf-test-conformance diff --git a/easyssf-test/pom.xml b/easyssf-test/pom.xml index 44da0ae..d5e4575 100644 --- a/easyssf-test/pom.xml +++ b/easyssf-test/pom.xml @@ -6,7 +6,7 @@ org.easyssf easyssf-parent - 0.7.0-SNAPSHOT + 0.7.0 easyssf-test diff --git a/pom.xml b/pom.xml index 99afd67..e647c7d 100644 --- a/pom.xml +++ b/pom.xml @@ -6,7 +6,7 @@ org.easyssf easyssf-parent - 0.7.0-SNAPSHOT + 0.7.0 pom easyssf Building blocks for the OpenID Shared Signals Framework (SSF) @@ -67,7 +67,7 @@ the newest JDK: -Dbytebuddy.experimental=true --> false - 2026-10-12T06:44:10Z + 2026-10-30T13:39:23Z false - 2026-10-30T13:39:23Z + 2026-10-30T13:41:19Z