| | Upgrade instructions Upgrade tasks | | Enhancements and bugs fixed in this version, known issues with this version |
|---|
2026/09/30 LATEST STABLE | i2incommon/grouper:4.26.0 sha256:96d65866f6
94dbaf6685ac2210fa
767acd5a6a675e74a4
55bbc43d9da476b133 | Upgrade instructions: None Upgrade tasks: None | OS: Rocky 9.8
Shib: 3.6.0
Apache: 2.4.62
Tomcat: 9.0.122
Java Corretto: 17.0.20.12.1
Grouper API: 4.26.0 | 16 Jiras Security: only wheel or root can enter expression language in config forms, fix XSS in folder parent paths and more folder, group and role names, authorization counting disabled memberships, folder lookup by uuid leaking information (follow up), attestation settings visible without permission
Security: upgrade Tomcat 9.0.122
Tomcat maxHttpHeaderSize raised to 32k so large SSO cookies do not cause a 400
New GitHub provisioner: organization teams and memberships |
2026/08/31 STABLE | i2incommon/grouper:4.25.0 sha256:13ae924012
6a35f11de0990de4da
acead09c887cdef379
323b64554fa52aad4a | Upgrade instructions: None Upgrade tasks: None | OS: Rocky 9.8
Shib: 3.5.2
Apache: 2.4.62
Tomcat: 9.0.121
Java Corretto: 17.0.20.10.1
Grouper API: 4.25.0 | 46 Jiras Security: upgrade Bouncy Castle 1.85.2 (32 CVEs), Tomcat 9.0.121, jackson 2.22.1, PostgreSQL JDBC, jsoup, c3p0
Config ids containing "pass" or "secret" no longer store every property as encrypted
Editing provisioning on a group or folder now requires admin of that object
New CCure external system and provisioner
New Jamf Pro admin-account provisioner
Provisioner runs no longer abort on a transient Connection reset |
2026/07/17 STABLE | i2incommon/grouper:4.24.0 sha256:0582cea010
8bd1b154a8e13df391
1435edc9b822a10f6b
786302c174cf0dc202 | Upgrade instructions: 1 from 4.23.0 Upgrade tasks: None | OS: Rocky 9.8
Shib: 3.5.2
Apache: 2.4.62
Tomcat: 9.0.118
Java Corretto: 17.0.19.10.1
Grouper API: 4.24.0 | 38 Jiras SCIM provisioner diagnostics validate config against the target
SCIM recovers from 409 "uniqueness" instead of failing
New Dropbox Business provisioner
Provision faculty to Interfolio
Loader control over insert/delete order and group removal
Provisioner failsafe works independently of the loader |
2026/05/24 EXPIRED | i2incommon/grouper:4.23.0 sha256:719d36e4ab
e53cf256f1864ced26
818a335262bd3997a5
5091db9071055bcd9b | Upgrade instructions: 2 from 4.22.3 Upgrade tasks: None | OS: Rocky 9.7
Shib: 3.5.2
Apache: 2.4.62
Tomcat: 9.0.118
Java Corretto: 17.0.19.10.1
Grouper API: 4.23.0 | 38 Jiras Upgrade Tomcat to 9.0.118 for security
Upgrade 3rd party jars for security
Do not select "update alternate path" by default
Add Azure (Entra) certificate-based authentication for app registrations
Raise default hibernate.jdbc.batch_size from 200 to 1000 |
2026/03/21 EXPIRED | i2incommon/grouper:4.22.3 sha256:503751d85b
7f045fe99468d64a43
30f5697ea3ba0b4ab1
e66cc6509a48401a62 | Upgrade instructions: 1 from 4.22.1 Upgrade tasks: None | OS: Rocky 9.7
Shib: 3.5.2
Apache: 2.4.62
Tomcat: 9.0.115
Java Corretto: 17.0.18.9.1
Grouper API: 4.22.3 | 20 Jiras Okta provisioning improvements
Memory management and thread improvements
Add datadog provisioner
TeamDynamix provisioning improvements
Loader jobs can use disabled external systems
Centralized batch sizes for various things in provisioning
Google commands class needs to get tokens more often
Add scim name "nested" strategy
Jexl3 can't access public methods of class instance variables |
2026/03/04 EXPIRED | i2incommon/grouper:4.22.1 sha256:aadbf3bdcf
800fea95d8f3b3218a
9161f87b13258478c1
7ceba01135d9a0af4d | Upgrade instructions: None Upgrade tasks: None | OS: Rocky 9.7
Shib: 3.5.2
Apache: 2.4.62
Tomcat: 9.0.115
Java Corretto: 17.0.18.9.1
Grouper API: 4.22.1 | 27 Jiras Memory issues with command logging in HTTP/SQL/LDAP
Provisioning performance improvement removing unused old sync rows
Provisioning with "replace" can flap back and forth add/remove
Scim search by email should have a few strategies
Provisioning performance improvement: recalc group memberships less
TeamDynamix provisioner fixes
Provisioning dn renames do not work in v4 (only)
Entra provisioner throttling fix |