v5 Release Notes

v5 Release Notes

See below on this page for v5 release notes (v4 build info).  Grouper v5 is the current enhancement version of Grouper where ABAC will be built.

v5 builds

These will be marked as stable once they are out for a while without issue and/or as people start using these in production.  This is a judgment call by the Grouper team.  If you are using a new release please inform us so we can provide better advice.

Date

Container tag (version)

Status

Upgrade instructions
and notes

Upgrade tasks

Versions

Enhancements and bugs fixed in this version, known issues with this version

Date

Container tag (version)

Status

Upgrade instructions
and notes

Upgrade tasks

Versions

Enhancements and bugs fixed in this version, known issues with this version

2026/01/30

i2incommon/grouper:5.22.5

sha256:5206c430dbd0c4d5d
397361ddd69c52eb6c25c93
4371ce5209fb6679478de074

STABLE

update to v6 now

1 from 5.22.4

 

OS: Rocky 9.7
Tomcat: 9.0.111
Java Corretto: 17.0.18.9.1
Grouper API: 5.22.5

1 Jira

GRP-6566: GSH template security vulnerability

2025/11/04

i2incommon/grouper:5.22.4

sha256:29edd0ddfa6e86337
a9ade41af05737238ceb189b
a0651680e59c14fb355a207

EXPIRED

GRP-6434
GRP-6566

None

 

OS: Rocky 9.6
Tomcat: 9.0.111
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.3

1 Jira
GRP-6437: Grouper image has issues with /home/tomcat and cacerts and /opt/tomcat etc not being owned or writable by root group

2025/11/02

i2incommon/grouper:5.22.3

sha256:7fd3263cfcaed6918
36ba7cd9e1bc59f9f0c96e03
6581a88cd254dcd4378a37c

EXPIRED

GRP-6434
GRP-6437
GRP-6566

None

 

OS: Rocky 9.6
Tomcat: 9.0.111
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.3

8 Jiras
Group summary screen tries to display all groups if there is a sql cache dependency
There can be whitespace at top of group panel

2025/10/31

i2incommon/grouper:5.22.1

sha256:50b4c510e2ace3233
0757d3cad58d74c1e8b45f66
8109564fd459def559515a2

NOT STABLE

GRP-6566

None

 

OS: Rocky 9.6
Tomcat: 9.0.111
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.1

6 Jiras
GRP-6423: security issue with tomcat, upgrade to v9.0.111
Scim should allow 200 on group create
ABAC member should not include deleted or unresolvable subjects

2025/10/28

i2incommon/grouper:5.22.0

sha256:928f124b5bbc49e3b
af8713caaae241f8d5849679
f56b22c8a86f636a5676dc5

NOT STABLE

GRP-6423
GRP-6566

3 from 5.21.3

 

OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.0

26 Jiras
GRP-6401: error in oracle with group more information screen
Improve performance of main Grouper screen, stem list, group screen
Upgrade commons-fileupload (security issue) and commons-io
Make a customizable banner in the Grouper UI
Option to have group default screen be members instead of summary
Allow customization of the Group screen in the UI
Web service to sync a data provider against a list of given subjects
Subject source UI doesn't show disabled sources
When someone loses wheel group some caching is wrong for a few minutes
Data provider job should end in WARNING if there are duplicate keys in the source data
Provisioning metadata on folder only is not available in groups
Add userName attribute for adobe users
Add ability to download and upload files for box
Scim should be able to search users by email

2025/10/13

i2incommon/grouper:5.21.3

sha256:9b41e8f660e9e1603
3d9c67889021e299a09a21c
29d0e078a7bdd12248e2be3a

NOT STABLE

GRP-6401
GRP-6423
GRP-6566

None

 

OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.21.3

4 Jiras
GRP-6381: container moved file to reset permissions
GRP-6380: oracle query problem with more information on group summary

2025/10/07

i2incommon/grouper:5.21.2

sha256:6246c4eb4cc41f0fc3
445928cc89e64667f9aab8c
cc1056825153ec45eae5894

NOT STABLE

GRP-6381
GRP-6380
GRP-6423
GRP-6566

None

 

OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.21.2

5 Jiras
Group summary screen bug fixes and enhancements

2025/10/06

i2incommon/grouper:5.21.1

sha256:0e15d2915da514760
24f9e6b3e27ec189364b69ca
6380736c5b6862089dacc66

NOT STABLE

GRP-6375
GRP-6423
GRP-6566

None

 

OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.21.1

21 Jiras
Group summary screen bug fixes and enhancements
GRP-6354: ui group summary screen has an exception for mysql/oracle