| | | Upgrade instructions
and notes | | | Enhancements and bugs fixed in this version, known issues with this version |
|---|
2026/01/30 | i2incommon/grouper:5.22.5 sha256:5206c430dbd0c4d5d
397361ddd69c52eb6c25c93
4371ce5209fb6679478de074 | STABLE update to v6 now | 1 from 5.22.4 | | OS: Rocky 9.7
Tomcat: 9.0.111
Java Corretto: 17.0.18.9.1
Grouper API: 5.22.5 | 1 Jira GRP-6566: GSH template security vulnerability |
2025/11/04 | i2incommon/grouper:5.22.4 sha256:29edd0ddfa6e86337
a9ade41af05737238ceb189b
a0651680e59c14fb355a207 | EXPIRED GRP-6434
GRP-6566 | None | | OS: Rocky 9.6
Tomcat: 9.0.111
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.3 | 1 Jira
GRP-6437: Grouper image has issues with /home/tomcat and cacerts and /opt/tomcat etc not being owned or writable by root group |
2025/11/02 | i2incommon/grouper:5.22.3 sha256:7fd3263cfcaed6918
36ba7cd9e1bc59f9f0c96e03
6581a88cd254dcd4378a37c | EXPIRED GRP-6434
GRP-6437
GRP-6566 | None | | OS: Rocky 9.6
Tomcat: 9.0.111
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.3 | 8 Jiras
Group summary screen tries to display all groups if there is a sql cache dependency
There can be whitespace at top of group panel |
2025/10/31 | i2incommon/grouper:5.22.1 sha256:50b4c510e2ace3233
0757d3cad58d74c1e8b45f66
8109564fd459def559515a2 | NOT STABLE GRP-6566 | None | | OS: Rocky 9.6
Tomcat: 9.0.111
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.1 | 6 Jiras
GRP-6423: security issue with tomcat, upgrade to v9.0.111
Scim should allow 200 on group create
ABAC member should not include deleted or unresolvable subjects |
2025/10/28 | i2incommon/grouper:5.22.0 sha256:928f124b5bbc49e3b
af8713caaae241f8d5849679
f56b22c8a86f636a5676dc5 | NOT STABLE GRP-6423
GRP-6566 | 3 from 5.21.3 | | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.17.10.1
Grouper API: 5.22.0 | 26 Jiras
GRP-6401: error in oracle with group more information screen
Improve performance of main Grouper screen, stem list, group screen
Upgrade commons-fileupload (security issue) and commons-io
Make a customizable banner in the Grouper UI
Option to have group default screen be members instead of summary
Allow customization of the Group screen in the UI
Web service to sync a data provider against a list of given subjects
Subject source UI doesn't show disabled sources
When someone loses wheel group some caching is wrong for a few minutes
Data provider job should end in WARNING if there are duplicate keys in the source data
Provisioning metadata on folder only is not available in groups
Add userName attribute for adobe users
Add ability to download and upload files for box
Scim should be able to search users by email |
2025/10/13 | i2incommon/grouper:5.21.3 sha256:9b41e8f660e9e1603
3d9c67889021e299a09a21c
29d0e078a7bdd12248e2be3a | NOT STABLE GRP-6401
GRP-6423
GRP-6566 | None | | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.21.3 | 4 Jiras
GRP-6381: container moved file to reset permissions
GRP-6380: oracle query problem with more information on group summary |
2025/10/07 | i2incommon/grouper:5.21.2 sha256:6246c4eb4cc41f0fc3
445928cc89e64667f9aab8c
cc1056825153ec45eae5894 | NOT STABLE GRP-6381
GRP-6380
GRP-6423
GRP-6566
| None | | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.21.2 | 5 Jiras
Group summary screen bug fixes and enhancements |
2025/10/06 | i2incommon/grouper:5.21.1 sha256:0e15d2915da514760
24f9e6b3e27ec189364b69ca
6380736c5b6862089dacc66 | NOT STABLE GRP-6375
GRP-6423
GRP-6566 | None | | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.21.1 | 21 Jiras
Group summary screen bug fixes and enhancements
GRP-6354: ui group summary screen has an exception for mysql/oracle |
2025/10/03 | i2incommon/grouper:5.21.0 sha256:4b1ab2c04aa744e31
400915dc4c76b2f81945509
57856aae1e360bd78ab9ccd8 | NOT STABLE GRP-6354
GRP-6423
GRP-6566 | 3 from 5.20.5 | | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.21.0 | 21 Jiras
Rewrite container installer as a script
- Remove grouper installer
Group summary screen
Fix external auth build (grouper-ext-auth, pac4j)
Analyze logic of abac not correct in some circumstances
Data provider fixes
Abac incremental batch issue
Batch adobe provisioning calls to improve performance
- Add userName attribute for adobe users
Adding SOAP to v5 not working since commons-httpclient was removed
Make snowflake database access faster
Add ability to download and upload files for box |
2025/08/24 | i2incommon/grouper:5.20.5 sha256:adf062a361bcdfe7b
745e2e2d3c3b0e3119e3dd9
1390afc523f6e27e45bbe411 | EXPIRED GRP-6423
GRP-6566 | 1 from 5.20.2 | | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.20.5 | 2 Jiras Add hook to validate admin on loader changes
GRP-6310: Failsafe is hitting for sql syncs especially incremental
|
2025/08/17 | i2incommon/grouper:5.20.2 sha256:15fad09ed8b0142b5
0106f62c2b59780fec552fb3
6c45eef10e512de19277a56 | NOT STABLE GRP-6310
GRP-6423
GRP-6566 | 1 from 5.20.0 | | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.20.2 | 20 Jiras
Batch issue with incremental data provider
Upgrade task to run sql cache full sync
Data provider performance issue with continuous lower case columns
Thread deadlock issue with config cache
Do not allow abac assignment = , only allow comparison ==
Fix xml export/import
GRP-6293: some form submits do not work like search and trace membership
Add minimum number of rows to sql sync on full sync
Commons-lang3 upgrade needed for vfs2 (sftp)
Allow more data fields in a data query (current max was 30) |
2025/08/09 | i2incommon/grouper:5.20.0 sha256:fc18ad71d52640ed46
cc46dcc0dadb8ac94be6b7a
44d0c36b21603ba891a3355 | NOT STABLE GRP-6293
GRP-6423
GRP-6566 | 1 from 5.19.2 | | OS: Rocky 9.6
Tomcat: 9.0.108
Java Corretto: 17.0.16.8.1
Grouper API: 5.20.0 | 13 Jiras
Upgrade tomcat9 to 9.0.108 (security update)
Option to run sql cache full sync in minimal mode without daemon
Move DDL for sql cache membership sync dependencies from script files to old upgrade task
OIDC improvements
Disabled subject source still resolving
Log target commands always not working for SQL |
2025/08/02 | i2incommon/grouper:5.19.2 sha256:daab050dde2741
9729b00ee13f3a291e6e7c602
9df044b441edd221c61f20673 | EXPIRED GRP-6423
GRP-6566 | None | | OS: Rocky 9.6
Tomcat: 9.0.105
Java Corretto: 17.0.16.8.1
Grouper API: 5.19.2 | 4 Jiras
Allow multiple subject sources in data provider for abac
GRP-6262: error in external systems and subject provisioning jsp not compile |
2025/07/31 | i2incommon/grouper:5.19.1 sha256:ee42765185eb320de
180ea6acb86487b1bf6c73be
33d515798d877254d1729e2 | NOT STABLE GRP-6262
GRP-6423
GRP-6566 | 2 from 5.18.3 | | OS: Rocky 9.6
Tomcat: 9.0.105
Java Corretto: 17.0.16.8.1
Grouper API: 5.19.1 | 31 Jiras
Data field subject source
UI hyperlinked things should work when opening in new tabs
Rule improvements
AI enhancements
v5 should not start if the membership cache is not mostly populated
Support security analyst role in duo admin role provisioning
SQL sync from query has error in getting max timestamp
OWASP_CSRFTOKEN header has underscore, not passed along by nginx
SQL sync from query has error in getting max timestamp |
2025/06/14 | i2incommon/grouper:5.18.3 sha256:af78170e92f9138e5e
6e766c7e6fe3273123bf72bf
045c3eb31b097c44a4a45d | EXPIRED GRP-6423
GRP-6566 | None | | OS: Rocky 9.6
Tomcat: 9.0.105
Java Corretto: 17.0.15.6.1
Grouper API: 5.18.3 | 17 Jiras
Azure without selecting all entities or groups at once will fail
Sql dependency views fail on oracle
Allow loader jobs to be exported and imported
Midpoint provisioner with custom attribute throws error when deleting the custom attribute
GRP-6200, GRP-6199 security issues, rocky upgrade to 9.6
Use threads with JEXL Incremental Sync
SQL provisioner membershipObjects should support row update
Allow GSH export to work with -forceLegacyGsh flag on import (to speed it up)
Rules should be invalid and not cause errors when group or stem does not exist
Errors in incremental update for LDAP entityAttributes not retried
Rule that adds new groups to another group should have an option to specify a regex pattern |
2025/05/27 | i2incommon/grouper:5.18.1 sha256:f401fcdbe4e7affc907
ddd4449b267c4de4381d575
6d2b3479c6b58e010ad6c4 | EXPIRED GRP-6200
GRP-6199
GRP-6186
GRP-6566
| None | | OS: Rocky 9.5
Tomcat: 9.0.105
Java Corretto: 17.0.15.6.1
Grouper API: 5.18.1 | 6 Jiras
Tomcat security issues: CVE-2025-31651, CVE-2025-31650
Random numbers after file name in GSH templates consuming files
When SQL provisioning membership objects with a last updated field, job wants to select timestamp from group and entity fields
Change default of OTHER_JOB_grouperLoaderJexlScriptFullSync to run daily
Remove commons-httpclient 3.1
GROUPER_PLAYWRIGHT_INSTALL_OS_LIBS does not work |
2025/05/21 | i2incommon/grouper:5.18.0 sha256:145e651b56af28779
69311ba5df4db093cafaf45e
b31ee4bc8c3505f9d37688d | EXPIRED Tomcat security advisory GRP-6200
GRP-6199
GRP-6186
GRP-6566 | 3 from v5.17.2 | | OS: Rocky 9.5
Tomcat: 9.0.102
Java Corretto: 17.0.15.6.1
Grouper API: 5.18.0 | 41 Jiras
Incremental abac
GrouperHttpClient trust all doesn't work with pooled connections
Allow GSH template to have an option to have a filename in the container instead of textarea
GPT training file for GSH templates
If the stemName sent to getGroups WS does not exist, throw error
Add an option in the web service external system to treat 429 as error
Add an option in a web service external system to delay ms after each call
Add isNotified attribute for groups that would be used while inserting memberships into TeamDynamix
Cannot delete group in gsh template and redirect to another group
Auto-create and translate entra id visibility on groups
Update provisioning DAO to use cache tables
Upgrade jsch to support openssh private keys
GSH template provisioner
For Azure/Entra provisioner, support directory extension attributes
Transactions for data provider loading
Support subheaders in template v2 dropdowns
Attributes in group view/edit shows integer as floating point |
2025/04/5 | i2incommon/grouper:5.17.2 sha256:6dc1b8636cf5f03c4
3a310954d7f4884ee8b0ab2
eb693ecced35ca0f44393888 | EXPIRED Tomcat security advisory GRP-6200, GRP-6199
GRP-6566 | None | | OS: Rocky 9.5
Tomcat: 9.0.102
Java Corretto: 17.0.14.7.1
Grouper API: 5.17.2 | 24 Jiras
Group renames in entity attribute provisioning
Many membership cache fixes / improvments
Provisioning roles errored with index out of range reading data
Allow a query in the from portion of a sql sync job (and allow UUID types)
Scim should enable users even if not deleting users (with active flag)
Can have multiple UI OIDC registrations / protections
Add <, <=, >, >= operators to jexl scripts |
2025/03/17 | i2incommon/grouper:5.17.1 sha256:6386b225335682c3
6297efb4fc8f05636e28ad58
1bb55371119594e7842b838b | EXPIRED |