v6 Release Notes

v6 Release Notes

See below on this page for v6 release notes.  Grouper v6 is the current non-enhancement version of Grouper.

v6 builds

These will be marked as stable once they are out for a while without issue and/or as people start using these in production.  This is a judgment call by the Grouper team.  If you are using a new release please inform us so we can provide better advice.

Date

Status

Container tag (version)

Upgrade instructions

Upgrade tasks

Versions

Enhancements and bugs fixed in this version, known issues with this version

Date

Status

Container tag (version)

Upgrade instructions

Upgrade tasks

Versions

Enhancements and bugs fixed in this version, known issues with this version

2026/08/30

RELEASED

i2incommon/grouper:6.4.0

sha256:d8a7ae8706
7864bee4758ebd43e5
07d31d4720973cc7c2
8532595e3d57fcc639

Upgrade instructions:

None

Upgrade tasks:

None

OS: Rocky 9.8
Tomcat: 9.0.121
Java Corretto: 17.0.20.10.1
Grouper API: 6.4.0

78 Jiras

Security: upgrade Bouncy Castle 1.85.2 (32 CVEs), Tomcat 9.0.121, jackson 2.22.1, PostgreSQL JDBC, jsoup, c3p0, ldaptive
Config ids containing "pass" or "secret" no longer store every property as encrypted
New CCure external system and provisioner
New Jamf Pro admin-account provisioner
Daemon log performance graph over time
Accessibility: tooltips, modal close button, privilege screen contrast
LDAP full sync no longer fails with "paged results cookie is invalid"

2026/07/10

LATEST STABLE

i2incommon/grouper:6.3.0

sha256:c8699e8fd3
46ae65e0b200fdcddd
2e292733a5b5a27ce3
d7738b912adc068924

Upgrade instructions:

1 from 6.2.0

Upgrade tasks:

None

OS: Rocky 9.8
Tomcat: 9.0.118
Java Corretto: 17.0.19.10.1
Grouper API: 6.3.0

66 Jiras

SCIM provisioner diagnostics validate config against the target
SCIM recovers from 409 "uniqueness" instead of failing
New Dropbox Business provisioner
Provision faculty to Interfolio
Accessibility overhaul (WAVE fixes)
Loader control over insert/delete order and group removal
Provisioner failsafe works independently of the loader
ABAC global variables and not-in-list syntax
Visualization for scripted groups
Deep DDL check UI page
View subject screen was slow for non-admins — fixed N+1 privilege resolution
More columns on the entity data-field screens in Misc

2026/05/24

STABLE

i2incommon/grouper:6.2.0

sha256:33c5d96a1e
e614b15fa7416dd6c9
10e4ac7870a7db3058
09539210552d3d5f7a

Upgrade instructions:

2 from 6.1.1

Upgrade tasks:

None

OS: Rocky 9.7
Tomcat: 9.0.118
Java Corretto: 17.0.19.10.1
Grouper API: 6.2.0

91 Jiras

Upgrade Tomcat to 9.0.118 for security
Upgrade 3rd party jars for security
Visualization for scripted groups
Do not select "update alternate path" by default
Combobox should be able to be keyboard only
Tomcat access log pattern should be configurable
Enhance the 'Advanced Filter' for Group memberships with 'Subject Source'
Add Azure (Entra) certificate-based authentication for app registrations
Update folder tree icons in UI
Raise default hibernate.jdbc.batch_size from 200 to 1000

2026/03/21

EXPIRED

i2incommon/grouper:6.1.1

sha256:d147753a2a
17be8f7bb1ba24abee
47da60bef648fe77db
b9ed6592543a6cf091

Upgrade instructions:

1 from 6.1.0

Upgrade tasks:

None

OS: Rocky 9.7
Tomcat: 9.0.115
Java Corretto: 17.0.18.9.1
Grouper API: 6.1.1

35 Jiras

Security issue: Apache Tomcat upgrade to v9.115
Okta provisioning improvements
Make combo for adding members wider (cuts off long groups)
Memory management and thread improvements
Add datadog provisioner
Data field subject source improvements
TeamDynamix provisioning improvements
Loader jobs can use disabled external systems
Centralized batch sizes for various things in provisioning
Google commands class needs to get tokens more often
Add scim name "nested" strategy
Jexl3 can't access public methods of class instance variables
New groups created through incremental loader should set display name and other properties
Sftp needs a jar added

2026/03/04

EXPIRED

i2incommon/grouper:6.1.0

sha256:b4d46f44e2
44342fb172e113fb10
a53d213c13d5f6436a
b247b5b0f2512dd5fb

Upgrade instructions:

None

Upgrade tasks:

None

OS: Rocky 9.7
Tomcat: 9.0.111
Java Corretto: 17.0.18.9.1
Grouper API: 6.1.0

100 Jiras

Security issues: c3p0mchange-commons
Freshservice requester provisioner
GrouperLogger is not logging except to debug
Log number of API calls and how long it took to the provisioning debugMap
Scim improvements
Do not allow deletes of ABAC tables if used elsewhere
Memory issues with command logging in HTTP/SQL/LDAP
Provisioning performance improvement removing unused old sync rows
Provisioning with "replace" can flap back and forth add/remove
Scim search by email should have a few strategies
TeamDynamix provisioner fixes
Fix Oracle upgrade task error

2026/02/10

EXPIRED

i2incommon/grouper:6.0.1

sha256:107d8545e8
e92c567af5ca32bb3b
54758d51d9cd61810f
7ababb7cea84bf7eec

Upgrade instructions:

5 from 5.22.4

Upgrade tasks:

None

OS: Rocky 9.7
Tomcat: 9.0.111
Java Corretto: 17.0.18.9.1
Grouper API: 6.0.1

109 Jiras

User lifecycle events
Subject source comparison
Export configuration properties with filter
Remove unused configs and externalized text
Provisioner failsafe does not send notification when tripped
Incremental loader groupList option to create non-existent group instead of running full sync
User audit import fails with xstream error
Snowflake jdbc error with deletes
Subject source improvements
Remove old grouper-misc/grouperScim project
Jackson should not fail on unknown properties when parsing json
Consolidate utils classes and remove olds ones
Remove: dhtmlx calendarjquery cookie librarydhtmlx menus, uri.js, walter zorn tooltips, dojo treesdhtmlx, jquery simplemodal, json.js, dojo combobox (combobox works while scrolled in UI!), jquery datatables, bootstrap datepicker
Remove json-lib, org.json
Upgrade fontawesome to v6
Update AI agents
Database compare is not working correctly for columns, indexes, foreign keys
Move from grouperClient to grouper: messaging, GcDbAccess
Add hook and config to not delete groups if provisionable
Selectively log ws requests and responses bases on source IP CIDR
Fix swagger for get members (and other operations)
Primary key on grouper_prov_duo_user should be (user_id, config_id)
Http client command logging logs too much on large full syncs
Upgrade jars

For more information about upcoming plans, see the Grouper Product Roadmap .

 

See Also

Grouper Release Announcements