thomasdarimont · Oct 30, 2026 · Oct 30, 2026 · Oct 30, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,17 @@ The notable changes of every release. The section of a version is the text of it
 
 ## [Unreleased]
 
+## [0.7.0] - 2026-10-30
+
+A release of hardening. A host name like `127.attacker.example` no longer passes for
+loopback, the poll endpoint is held to the same URI policy as the metadata endpoints
+before the access token goes to it, and responses from the transmitter are bounded,
+4 MiB by default. Every stream configuration the transmitter returns has its issuer
+checked, not only a created one. Stopping and starting a poller or a registrar again
+no longer leaves a thread or a stream behind, and the pending-acks gauge no longer
+turns `NaN`. The Quarkus extension mirrors the new `SsfPoller.setUriPolicy` and the
+maximum response size when it adopts this release.
+
 ### Security
 
 - A host name that merely starts with `127.`, such as `127.attacker.example`, counted as a loopback
@@ -256,7 +267,8 @@ Java library and as a Spring Boot 4.1 starter.
 - The framework-free modules are Java modules; every artifact is signed, carries a CycloneDX
   SBOM and a self-contained POM.
 
-[Unreleased]: https://github.com/easyssf/easyssf/compare/v0.6.0...HEAD
+[Unreleased]: https://github.com/easyssf/easyssf/compare/v0.7.0...HEAD
+[0.7.0]: https://github.com/easyssf/easyssf/compare/v0.6.0...v0.7.0
 [0.6.0]: https://github.com/easyssf/easyssf/compare/v0.5.0...v0.6.0
 [0.5.0]: https://github.com/easyssf/easyssf/compare/v0.4.0...v0.5.0
 [0.4.0]: https://github.com/easyssf/easyssf/compare/v0.3.0...v0.4.0

diff --git a/README.md b/README.md
@@ -74,7 +74,7 @@ which a build has to enable with `<snapshots><enabled>true</enabled></snapshots>
 <dependency>
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-receiver-spring-boot-starter</artifactId>
-    <version>0.6.0</version>
+    <version>0.7.0</version>
 </dependency>
 ```
 
@@ -121,7 +121,7 @@ configuration reference.
 <dependency>
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-receiver</artifactId>
-    <version>0.6.0</version>
+    <version>0.7.0</version>
 </dependency>
 ```
 
@@ -295,7 +295,7 @@ Spring Boot modules are automatic modules.
 <dependency>
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-receiver</artifactId>
-    <version>0.6.0</version>
+    <version>0.7.0</version>
 </dependency>
 ```
 
@@ -382,7 +382,7 @@ stream management and poll endpoints. The tests of easyssf itself use it.
 <dependency>
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-test</artifactId>
-    <version>0.6.0</version>
+    <version>0.7.0</version>
     <scope>test</scope>
 </dependency>
 ```

diff --git a/easyssf-core/pom.xml b/easyssf-core/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-core</artifactId>
     <name>easyssf-core</name>

diff --git a/easyssf-receiver-jdbc/pom.xml b/easyssf-receiver-jdbc/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
 
     <artifactId>easyssf-receiver-jdbc</artifactId>

diff --git a/easyssf-receiver-spring-boot-autoconfigure/pom.xml b/easyssf-receiver-spring-boot-autoconfigure/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-receiver-spring-boot-autoconfigure</artifactId>
     <name>easyssf-receiver-spring-boot-autoconfigure</name>

diff --git a/easyssf-receiver-spring-boot-conformance-tests/pom.xml b/easyssf-receiver-spring-boot-conformance-tests/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-receiver-spring-boot-conformance-tests</artifactId>
     <name>easyssf-receiver-spring-boot-conformance-tests</name>

diff --git a/easyssf-receiver-spring-boot-examples/example-oidc-client/pom.xml b/easyssf-receiver-spring-boot-examples/example-oidc-client/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-receiver-spring-boot-examples</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>example-oidc-client</artifactId>
     <name>example-oidc-client</name>

diff --git a/easyssf-receiver-spring-boot-examples/example-resource-server/pom.xml b/easyssf-receiver-spring-boot-examples/example-resource-server/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-receiver-spring-boot-examples</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>example-resource-server</artifactId>
     <name>example-resource-server</name>

diff --git a/easyssf-receiver-spring-boot-examples/example-scim-provisioning/pom.xml b/easyssf-receiver-spring-boot-examples/example-scim-provisioning/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-receiver-spring-boot-examples</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>example-scim-provisioning</artifactId>
     <name>example-scim-provisioning</name>

diff --git a/easyssf-receiver-spring-boot-examples/pom.xml b/easyssf-receiver-spring-boot-examples/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-receiver-spring-boot-examples</artifactId>
     <name>easyssf-receiver-spring-boot-examples</name>

diff --git a/easyssf-receiver-spring-boot-starter/README.md b/easyssf-receiver-spring-boot-starter/README.md
@@ -10,7 +10,7 @@ Events, the test support.
 <dependency>
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-receiver-spring-boot-starter</artifactId>
-    <version>0.6.0</version>
+    <version>0.7.0</version>
 </dependency>
 ```
 

diff --git a/easyssf-receiver-spring-boot-starter/pom.xml b/easyssf-receiver-spring-boot-starter/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-receiver-spring-boot-starter</artifactId>
     <name>easyssf-receiver-spring-boot-starter</name>

diff --git a/easyssf-receiver/pom.xml b/easyssf-receiver/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-receiver</artifactId>
     <name>easyssf-receiver</name>

diff --git a/easyssf-test-conformance/pom.xml b/easyssf-test-conformance/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
 
     <artifactId>easyssf-test-conformance</artifactId>

diff --git a/easyssf-test/pom.xml b/easyssf-test/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
 
     <artifactId>easyssf-test</artifactId>

diff --git a/pom.xml b/pom.xml
@@ -6,7 +6,7 @@
 
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-parent</artifactId>
-    <version>0.7.0-SNAPSHOT</version>
+    <version>0.8.0-SNAPSHOT</version>
     <packaging>pom</packaging>
     <name>easyssf</name>
     <description>Building blocks for the OpenID Shared Signals Framework (SSF)</description>
@@ -67,7 +67,7 @@
              the newest JDK: -Dbytebuddy.experimental=true -->
         <bytebuddy.experimental>false</bytebuddy.experimental>
         <!-- reproducible builds: the timestamp of the files in the jars, updated for every release -->
-        <project.build.outputTimestamp>2026-10-12T06:44:10Z</project.build.outputTimestamp>
+        <project.build.outputTimestamp>2026-10-30T13:41:19Z</project.build.outputTimestamp>
 
         <!-- All modules build against the versions of the Spring Boot BOM, imported below.
              The plain modules (easyssf-core, easyssf-receiver) do not depend on Spring: