v12.8.2 🎁

What’s Changed

🚀 New features and improvements

• Layer settings: hidden and extra keywords (#1836) @matthijsln
• HTM-2184: Add text filter to filter models (#1843) @steinkobben
• HTM-2139: Add keywords to map response (#1838) @matthijsln
• HTM-2136: Save keywords for layers (#1833) @matthijsln
• HTM-1987: Add a utility + controller to determine statistics like min/max/count/... values of an attribute (#1839) @mprins
• HTM-1852 | HTM-1964: Upgrade to GeoTools 35.0 and re-instate GeoJSON extract (#1806) @mprins

🔨 Security fixes en updates

• HTM-2134: update Jackson to latest LTS versions and stay there (#1835) @mprins

🐛 Bug Fixes

• Hide logging all GeoTools factory implementations (#1837) @matthijsln

🚦 Tests and Infrastructure

• Make test output less verbose (#1828) @mprins
• Improve OWASP workflow by explicitly saving the CVE database cache (#1832) @mprins
• Bump prom/prometheus from v3.13.0 to v3.13.1 in /build/ci (#1840) @dependabot[bot]
• Bump prom/prometheus from v3.12.0 to v3.13.0 in /build/ci (#1827) @dependabot[bot]
• Bump hibernate.version from 7.4.4.Final to 7.4.5.Final (#1841) @dependabot[bot]
• Bump hibernate.version from 7.4.3.Final to 7.4.4.Final (#1830) @dependabot[bot]

🔨 Dependency updates

• Update PostgreSQL version to 42.7.13 (#1834) @mprins
• HTM-2187: Update Tomcat version to 11.0.24 (#1845) @mprins
• HTM-2137: Add Tomcat version override to update to 11.0.23 (#1831) @mprins
• HTM-2134: update Jackson to latest LTS versions and stay there (#1835) @mprins
• HTM-1852 | HTM-1964: Upgrade to GeoTools 35.0 and re-instate GeoJSON extract (#1806) @mprins
• Bump org.junit:junit-bom from 6.1.1 to 6.1.2 (#1842) @dependabot[bot]
• Bump hibernate.version from 7.4.4.Final to 7.4.5.Final (#1841) @dependabot[bot]
• Bump hibernate.version from 7.4.3.Final to 7.4.4.Final (#1830) @dependabot[bot]
• Bump greenmail.version from 2.1.9 to 2.1.11 (#1844) @dependabot[bot]

v12.8.1 🎁

🚀 New features and improvements

• HTM-2106: Use the layers abstractText when no description is provided (#1810) @mprins

🚨 Removed / ⚠️ Deprecated

• HTM-2133: Remove unused P6 Spy configuration (#1824) @mprins
• HTM-2108: Remove Sentry support and dependencies from the backend (#1818) @mprins

🚦 Tests and Infrastructure

• Update tile path in GeoServiceProxyController test (#1819) @mprins
• Cleanup and refactor test preparation code (#1813) @mprins
• Bump pmd.version from 7.25.0 to 7.26.0 (#1815) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.7.0 to 3.8.0 (#1817) @dependabot[bot]
• Bump actions/cache from 5 to 6 (#1811) @dependabot[bot]

🔨 Dependency updates

• Update PostgreSQL version to 42.7.12 (#1822) @mprins
• Update Flyway version to 12.10.0 (#1821) @mprins
• Bump hibernate.version from 7.4.2.Final to 7.4.3.Final (#1814) @dependabot[bot]
• Bump org.junit:junit-bom from 6.1.0 to 6.1.1 (#1816) @dependabot[bot]

v12.8.0 🎁

What’s Changed

🚀 New features and improvements

• HTM-2084: Add (filtered) layer bounds API and implementation (#1796) @mprins
• HTM-2054: Add "refresh-capabilities" group that allows a user to refresh any geo service (#1768) @matthijsln
• HTM-2051: Add OIDC registration default authorities (#1769) @matthijsln
• HTM-2042: Add roles claim filter regex to OIDC registrations (#1771) @matthijsln
• HTM-1960: Custom extract functionality for layer attributes (#1672) @mprins
• Apply theme show/hide to login form (#1809) @matthijsln
• Add theme favicon support (#1795) @matthijsln

⛓️‍💥 Breaking changes

• HTM-1996: Allow only authenticated requests to the management/actuator endpoints, create and use actuator account (#1757) @mprins
• HTM-1960: Custom extract functionality for layer attributes (#1672) @mprins

🔨 Security fixes en updates

• HTM-2069: Upgrade Spring Boot from 4.0.6 to 4.0.7 (#1791) @dependabot[bot]
• HTM-1996: Allow only authenticated requests to the management/actuator endpoints, create and use actuator account (#1757) @mprins

🐛 Bug Fixes

• HTM-2097: Increase Hikari connection pool max size from default 10 to 30 (#1802) @matthijsln
• HTM-2067: Remove broken swagger-ui interface and associated buid steps (#1775) @mprins
• HTM-2066: Geometry is missing from response for getAllFeatures if skipGeometryOutput is false (#1770) @steinkobben
• HTM-2060: Unexpected directory in extract location: tm-extracts log message (#1767) @mprins
• HTM-2059: Use 35-RC version for excel datastore and remove the autosizing option (#1772) @mprins
• HTM-2057: Add sqlite-jdbc version override 3.53.1.0 to POM (#1756) @mprins
• HTM-2052: Use upsert for new session attributes to avoid conflicts with concurrent session updates (#1745) @matthijsln
• HTM-1995: prefix table in delete statement with schema when needed (#1736) @mprins
• HTM-1727: set the server.shutdown option to immediate (#1774) @mprins
• HTM-2053: Ignore ProviderNotFoundException for OAuth2 authentication failures (#1746) @matthijsln

🚨 Removed / ⚠️ Deprecated

• HTM-2077: Remove obsolete PreventLocalAllowNestedJarEntityResolver (#1792) @mprins
• HTM-2067: Remove broken swagger-ui interface and associated buid steps (#1775) @mprins
• HTM-1960: Custom extract functionality for layer attributes (#1672) @mprins

🚦 Tests and Infrastructure

30 changes

• [QC] update in-line comment (#1759) @mprins
• Use stCarolas/setup-maven@v5.1 (#1784) @mprins
• Use Maven version 3.9.16 (#1764) @mprins
• Update PMD ruleset to use JUnit Jupiter naming (#1765) @mprins
• Update Hibernate version to 7.3.7.Final (#1766) @mprins
• Stabilise TaskAdminControllerIntegrationTest (#1687) @mprins
• HTM-2069: Upgrade Spring Boot from 4.0.6 to 4.0.7 (#1791) @dependabot[bot]
• HTM-2068: Upgrade Hibernate from 7.4.0 to 7.4.1.Final (#1782) @dependabot[bot]
• Clarify UUIDv7 test intent, naming, and parsing comment (#1758) @copilot-swe-agent[bot]
• Bump prom/prometheus from v3.11.3 to v3.12.0 in /build/ci (#1752) @dependabot[bot]
• Bump pmd.version from 7.24.0 to 7.25.0 (#1761) @dependabot[bot]
• Bump org.owasp:dependency-check-maven from 12.2.1 to 12.2.2 (#1724) @dependabot[bot]
• Bump org.openapitools:openapi-generator-maven-plugin from 7.22.0 to 7.23.0 (#1781) @dependabot[bot]
• Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 (#1780) @dependabot[bot]
• Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 (#1803) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 (#1750) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0 (#1754) @dependabot[bot]
• Bump modernizer-maven-plugin.version from 3.3.0 to 3.4.0 (#1739) @dependabot[bot]
• Bump hibernate.version from 7.3.5.Final to 7.3.6.Final (#1751) @dependabot[bot]
• Bump hibernate.version from 7.3.4.Final to 7.3.5.Final (#1743) @dependabot[bot]
• Bump hibernate.version from 7.3.3.Final to 7.3.4.Final (#1733) @dependabot[bot]
• Bump dataaxiom/ghcr-cleanup-action from 1.2.1 to 1.2.2 (#1788) @dependabot[bot]
• Bump dataaxiom/ghcr-cleanup-action from 1.2.0 to 1.2.1 (#1748) @dependabot[bot]
• Bump dataaxiom/ghcr-cleanup-action from 1.0.16 to 1.2.0 (#1738) @dependabot[bot]
• Bump com.google.errorprone:error_prone_core from 2.49.0 to 2.50.0 (#1786) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.6.0 to 3.7.0 (#1801) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.4.0 to 3.6.0 (#1741) @dependabot[bot]
• Bump codecov/codecov-action from 6 to 7 (#1787) @dependabot[bot]
• Bump actions/dependency-review-action from 4 to 5 (#1732) @dependabot[bot]
• Bump actions/checkout from 6 to 7 (#1798) @dependabot[bot]

🔨 Dependency updates

32 changes

• Upgrade Flyway version from 12.6.1 to 12.8.0 (#1778) @mprins
• Update swagger-annotations version to 2.2.50 (#1734) @mprins
• Update oracle-database version to 23.26.2.0.0 (#1777) @mprins
• Update Hibernate version to 7.3.7.Final (#1766) @mprins
• Update Flyway version to 12.6.1 (#1735) @mprins
• HTM-2069: Upgrade Spring Boot from 4.0.6 to 4.0.7 (#1791) @dependabot[bot]
• HTM-2068: Upgrade Hibernate from 7.4.0 to 7.4.1.Final (#1782) @dependabot[bot]
• HTM-2058: Update Hibernate version to 7.4.0.Final (#1760) @mprins
• HTM-2034: Update GeoTools version to 35-RC (#1731) @mprins
• Dependency updates (#1727) @mprins
• Bump sentry.version from 8.44.0 to 8.44.1 (#1805) @dependabot[bot]
• Bump sentry.version from 8.43.2 to 8.44.0 (#1800) @dependabot[bot]
• Bump sentry.version from 8.43.1 to 8.43.2 (#1789) @dependabot[bot]
• Bump sentry.version from 8.43.0 to 8.43.1 (#1773) @dependabot[bot]
• Bump sentry.version from 8.42.0 to 8.43.0 (#1753) @dependabot[bot]
• Bump sentry.version from 8.41.0 to 8.42.0 (#1740) @dependabot[bot]
• Bump sentry.version from 8.40.0 to 8.41.0 (#1729) @dependabot[bot]
• Bump org.webjars:swagger-ui from 5.32.5 to 5.32.6 (#1755) @dependabot[bot]
• Bump org.junit:junit-bom from 6.0.3 to 6.1.0 (#1742) @dependabot[bot]
• Bump org.immutables:value from 2.12.1 to 2.12.2 (#1744) @dependabot[bot]
• Bump okhttp.version from 5.3.2 to 5.4.0 (#1779) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.51 to 2.2.52 (#1808) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.50 to 2.2.51 (#1794) @dependabot[bot]
• Bump hibernate.version from 7.4.1.Final to 7.4.2.Final (#1804) @dependabot[bot]
• Bump hibernate.version from 7.3.5.Final to 7.3.6.Final (#1751) @dependabot[bot]
• Bump hibernate.version from 7.3.4.Final to 7.3.5.Final (#1743) @dependabot[bot]
• Bump hibernate.version from 7.3.3.Final to 7.3.4.Final (#1733) @dependabot[bot]
• Bump hibernate.vers...

v12.7.0 🎁

What’s Changed

🚀 New features and improvements

• HTM-1989: Change expandOnStartup to enumeration (#1689) @steinkobben
• HTM-1979: Add description to uploads (#1722) @steinkobben
• HTM-1105: Add OIDCConfiguration.clientSecretExpiry column (#1718) @matthijsln

🐛 Bug Fixes

• Use jakarta instead of javax for jpa schema generation properties (#1717) @matthijsln
• HTM-1982: Use convert_from for UTF8 encoding in UPDATE_SESSION_ATTRIBUTE_QUERY (#1676) @steinkobben
• HTM-1978: Encode style name to allow spaces when getting proxied legend styles (#1678) @steinkobben
• Add null check for layerNodes in migration script V28 (#1696) @steinkobben

🚦 Tests and Infrastructure

23 changes

• [CI] fixup OWASP dependency check (#1715) @mprins
• [CI] Improve workflows (#1716) @mprins
• Re-enable Trivy scan and remove cache step (#1685) @mprins
• Increase max connections for postgres container, use smaller hikari pool (#1719) @mprins
• HTM-2005: Bump org.springframework.boot:spring-boot-starter-parent from 4.0.5 to 4.0.6 (#1708) @dependabot[bot]
• Fix TaskAdminControllerIntegrationTest (#1686) @mprins
• Disable Trivy workflow (#1670) @matthijsln
• Bump prom/prometheus from v3.11.2 to v3.11.3 in /build/ci (#1710) @dependabot[bot]
• Bump prom/prometheus from v3.11.1 to v3.11.2 in /build/ci (#1690) @dependabot[bot]
• Bump prom/prometheus from v3.11.0 to v3.11.1 in /build/ci (#1683) @dependabot[bot]
• Bump prom/prometheus from v3.10.0 to v3.11.0 in /build/ci (#1675) @dependabot[bot]
• Bump pmd.version from 7.23.0 to 7.24.0 (#1713) @dependabot[bot]
• Bump org.owasp:dependency-check-maven from 12.2.0 to 12.2.1 (#1695) @dependabot[bot]
• Bump org.openapitools:openapi-generator-maven-plugin from 7.21.0 to 7.22.0 (#1711) @dependabot[bot]
• Bump io.github.git-commit-id:git-commit-id-maven-plugin from 9.1.0 to 10.0.0 (#1681) @dependabot[bot]
• Bump hibernate.version from 7.3.1.Final to 7.3.2.Final (#1699) @dependabot[bot]
• Bump hibernate.version from 7.3.0.Final to 7.3.1.Final (#1692) @dependabot[bot]
• Bump dependabot/fetch-metadata from 2 to 3 (#1680) @dependabot[bot]
• Bump dawidd6/action-download-artifact from 20 to 21 (#1712) @dependabot[bot]
• Bump dawidd6/action-download-artifact from 19 to 20 (#1673) @dependabot[bot]
• Bump com.google.errorprone:error_prone_core from 2.48.0 to 2.49.0 (#1679) @dependabot[bot]
• Bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 (#1707) @dependabot[bot]
• Bump actions/github-script from 8 to 9 (#1691) @dependabot[bot]

🔨 Dependency updates

17 changes

• HTM-2005: Bump org.springframework.boot:spring-boot-starter-parent from 4.0.5 to 4.0.6 (#1708) @dependabot[bot]
• Bump sentry.version from 8.39.1 to 8.40.0 (#1704) @dependabot[bot]
• Bump sentry.version from 8.39.0 to 8.39.1 (#1700) @dependabot[bot]
• Bump sentry.version from 8.38.0 to 8.39.0 (#1697) @dependabot[bot]
• Bump sentry.version from 8.37.1 to 8.38.0 (#1684) @dependabot[bot]
• Bump org.webjars:swagger-ui from 5.32.4 to 5.32.5 (#1714) @dependabot[bot]
• Bump org.webjars:swagger-ui from 5.32.2 to 5.32.4 (#1698) @dependabot[bot]
• Bump org.webjars:swagger-ui from 5.32.1 to 5.32.2 (#1694) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.48 to 2.2.49 (#1720) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.47 to 2.2.48 (#1693) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.46 to 2.2.47 (#1682) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.45 to 2.2.46 (#1674) @dependabot[bot]
• Bump hibernate.version from 7.3.1.Final to 7.3.2.Final (#1699) @dependabot[bot]
• Bump hibernate.version from 7.3.0.Final to 7.3.1.Final (#1692) @dependabot[bot]
• Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#1709) @dependabot[bot]
• Bump ch.rasc:sse-eventbus from 3.1.0 to 3.2.0 (#1705) @dependabot[bot]
• Bump ch.rasc:sse-eventbus from 3.0.0 to 3.1.0 (#1701) @dependabot[bot]

v12.6.2 🎁

What’s Changed

🚀 New features and improvements

• HTM-1989: Change expandOnStartup to enumeration (#1689) @steinkobben

🐛 Bug Fixes

• HTM-1982: Use convert_from for UTF8 encoding in UPDATE_SESSION_ATTRIBUTE_QUERY (#1676) @steinkobben
• HTM-1978: Encode style name to allow spaces when getting proxied legend styles (#1678) @steinkobben
• Add null check for layerNodes in migration script V28 (#1696) @steinkobben

🚦 Tests and Infrastructure

14 changes

• Re-enable Trivy scan and remove cache step (#1685) @mprins
• Fix TaskAdminControllerIntegrationTest (#1686) @mprins
• Disable Trivy workflow (#1670) @matthijsln
• Bump prom/prometheus from v3.11.1 to v3.11.2 in /build/ci (#1690) @dependabot[bot]
• Bump prom/prometheus from v3.11.0 to v3.11.1 in /build/ci (#1683) @dependabot[bot]
• Bump prom/prometheus from v3.10.0 to v3.11.0 in /build/ci (#1675) @dependabot[bot]
• Bump org.owasp:dependency-check-maven from 12.2.0 to 12.2.1 (#1695) @dependabot[bot]
• Bump io.github.git-commit-id:git-commit-id-maven-plugin from 9.1.0 to 10.0.0 (#1681) @dependabot[bot]
• Bump hibernate.version from 7.3.1.Final to 7.3.2.Final (#1699) @dependabot[bot]
• Bump hibernate.version from 7.3.0.Final to 7.3.1.Final (#1692) @dependabot[bot]
• Bump dependabot/fetch-metadata from 2 to 3 (#1680) @dependabot[bot]
• Bump dawidd6/action-download-artifact from 19 to 20 (#1673) @dependabot[bot]
• Bump com.google.errorprone:error_prone_core from 2.48.0 to 2.49.0 (#1679) @dependabot[bot]
• Bump actions/github-script from 8 to 9 (#1691) @dependabot[bot]

🔨 Dependency updates

11 changes

• Bump sentry.version from 8.39.0 to 8.39.1 (#1700) @dependabot[bot]
• Bump sentry.version from 8.38.0 to 8.39.0 (#1697) @dependabot[bot]
• Bump sentry.version from 8.37.1 to 8.38.0 (#1684) @dependabot[bot]
• Bump org.webjars:swagger-ui from 5.32.2 to 5.32.4 (#1698) @dependabot[bot]
• Bump org.webjars:swagger-ui from 5.32.1 to 5.32.2 (#1694) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.47 to 2.2.48 (#1693) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.46 to 2.2.47 (#1682) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.45 to 2.2.46 (#1674) @dependabot[bot]
• Bump hibernate.version from 7.3.1.Final to 7.3.2.Final (#1699) @dependabot[bot]
• Bump hibernate.version from 7.3.0.Final to 7.3.1.Final (#1692) @dependabot[bot]
• Bump ch.rasc:sse-eventbus from 3.0.0 to 3.1.0 (#1701) @dependabot[bot]

v12.6.1 🎁

What’s Changed

🐛 Bug Fixes

• HTM-1951 | HTM-1955: Post process generated sources to inject Jackson Nulls.SKIP annotations (#1663) @matthijsln

🚦 Tests and Infrastructure

• Track setup and stabilise Prometheus integration tests (#1666) @mprins
• HTM-1949: Bump hibernate.version from 7.2.7.Final to 7.3.0.Final (#1652) @dependabot[bot]
• Enable exclusion of prometheus-service-testcase test group (#1668) @mprins
• Dependency and plugin updates (#1665) @mprins
• Cleanup some OpenAPI generator messages (#1659) @mprins
• Bump org.springframework.boot:spring-boot-starter-parent from 4.0.4 to 4.0.5 (#1661) @dependabot[bot]
• Bump org.openapitools:openapi-generator-maven-plugin from 7.20.0 to 7.21.0 (#1657) @dependabot[bot]
• Bump codecov/codecov-action from 5 to 6 (#1664) @dependabot[bot]

🔨 Dependency updates

• HTM-1949: Bump hibernate.version from 7.2.7.Final to 7.3.0.Final (#1652) @dependabot[bot]
• Exclude gt-coverage from gt-wms dependency (#1667) @mprins
• Dependency and plugin updates (#1665) @mprins
• Bump sentry.version from 8.37.0 to 8.37.1 (#1660) @dependabot[bot]
• Bump org.springframework.boot:spring-boot-starter-parent from 4.0.4 to 4.0.5 (#1661) @dependabot[bot]
• Add exclusion for gt-coverage in gt-wmts dependency (#1669) @mprins

v12.6.0 🎁

What’s Changed

🚀 New features and improvements

• HTM-1948: Allow to provide pageSize when fetching features (#1647) @geertplaisier
• HTM-1920: Add 'expandOnStartup' to layer tree level node (#1638) @steinkobben

⛓️‍💥 Breaking changes

• ⛓️‍💥 HTM-1772 | HTM-1902: Upgrade to Spring Boot 4, Jackson 3 (#1634) @mprins

🔨 Security fixes en updates

• HTM-1927: Fix styled legend requests for proxied layer are not using proxied urls (#1645) @mprins
• HTM-1893: Properly detect and refuse multiple layers in WMS request (#1635) @mprins
• Bump org.springframework.boot:spring-boot-starter-parent from 4.0.3 to 4.0.4 (#1654) @dependabot[bot]
• Bump org.geotools:gt-bom from 34.2 to 34.3 (#1650) @dependabot[bot]

🐛 Bug Fixes

• Updates to avoid startup warnings (#1644) @matthijsln
• HTM-1927: Fix styled legend requests for proxied layer are not using proxied urls (#1645) @mprins
• HTM-1893: Properly detect and refuse multiple layers in WMS request (#1635) @mprins

📖 Documentation updates

• HTM-1711: Upgrade to Java 25 (#1642) @mprins

🚦 Tests and Infrastructure

• HTM-1711: Upgrade to Java 25 (#1642) @mprins
• Cleanup obsolete comments in testcase (#1646) @mprins
• Bump release-drafter/release-drafter from 6 to 7 (#1649) @dependabot[bot]
• Bump org.springframework.boot:spring-boot-starter-parent from 4.0.3 to 4.0.4 (#1654) @dependabot[bot]
• Bump modernizer-maven-plugin.version from 3.2.0 to 3.3.0 (#1651) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.44 to 2.2.45 (#1641) @dependabot[bot]
• Bump dawidd6/action-download-artifact from 17 to 19 (#1648) @dependabot[bot]
• Bump dawidd6/action-download-artifact from 16 to 17 (#1639) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.3.0 to 3.4.0 (#1656) @dependabot[bot]
• Bump aquasecurity/trivy-action from 0.34.2 to 0.35.0 (#1640) @dependabot[bot]

🔨 Dependency updates

• ⛓️‍💥 HTM-1772 | HTM-1902: Upgrade to Spring Boot 4, Jackson 3 (#1634) @mprins
• HTM-1711: Upgrade to Java 25 (#1642) @mprins
• Bump sentry.version from 8.35.0 to 8.36.0 (#1653) @dependabot[bot]
• Bump sentry.version from 8.34.1 to 8.35.0 (#1643) @dependabot[bot]
• Bump org.webjars:swagger-ui from 5.32.0 to 5.32.1 (#1655) @dependabot[bot]
• Bump org.springframework.boot:spring-boot-starter-parent from 4.0.3 to 4.0.4 (#1654) @dependabot[bot]
• Bump org.geotools:gt-bom from 34.2 to 34.3 (#1650) @dependabot[bot]

v12.5.1 🎁

🚀 New features and improvements

• HTM-1909: Update from OAS 3.0.3 to OAS 3.0.4 (#1626) @mprins
• HTM-1889: remove style selection options/configuration from service layer (#1604) @mprins
• HTM-1884: Add overridable style configuration to the persistence layer and update viewer layer style (#1599) @mprins
• ⛓️‍💥 HTM-1875: update viewer API model to provide styles to viewer (#1593) @mprins
• HTM-1877: add selected styles to layer settings (#1587) @mprins
• ⛓️‍💥 HTM-1654: Use JSON marshalling for session serialisation ⛓️‍💥 (#1536) @mprins

⛓️‍💥 Breaking changes

• ⛓️‍💥 HTM-1875: update viewer API model to provide styles to viewer (#1593) @mprins
• ⛓️‍💥 HTM-1870: Switch to using Paketo buildpacks (#1583) @mprins
• ⛓️‍💥 HTM-1654: Use JSON marshalling for session serialisation ⛓️‍💥 (#1536) @mprins

🔨 Security fixes en updates

• HTM-1893: WMS proxy does not validate LAYERS parameter against application layer name (#1632) @mprins

🐛 Bug Fixes

• HTM-1893: WMS proxy does not validate LAYERS parameter against application layer name (#1632) @mprins
• HTM-1900: Fix OOM errors when indexing and opening db connection (#1611) @matthijsln
• HTM-1880: increase the class count value with 120% to prevent Metaspace OOM crashes (#1585) @mprins
• HTM-1882: Rename Provincies feature type (again) (#1594) @mprins
• HTM-1867: update PDOK bestuurlijke gebieden urls (#1581) @mprins

🚦 Tests and Infrastructure

30 changes

• HTM-1911: rename deprecated Solr config option (#1631) @mprins
• Bump docker/login-action from 3 to 4 (#1628) @dependabot[bot]
• Bump lcollins/pmd-github-action from 3.1.0 to 3.2.0 (#1629) @dependabot[bot]
• Move FeaturesResponseTest to proper package (#1627) @mprins
• Bump aquasecurity/trivy-action from 0.34.1 to 0.34.2 (#1623) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.2.1 to 3.3.0 (#1625) @dependabot[bot]
• Bump com.google.errorprone:error_prone_core from 2.47.0 to 2.48.0 (#1622) @dependabot[bot]
• Bump hibernate.version from 6.6.43.Final to 6.6.44.Final (#1620) @dependabot[bot]
• Bump net.sourceforge.pmd:pmd-core from 7.21.0 to 7.22.0 in the maven group across 1 directory (#1617) @dependabot[bot]
• Bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 (#1612) @dependabot[bot]
• Bump dawidd6/action-download-artifact from 15 to 16 (#1613) @dependabot[bot]
• Bump actions/upload-artifact from 6 to 7 (#1614) @dependabot[bot]
• Bump prom/prometheus from v3.9.1 to v3.10.0 in /build/ci (#1615) @dependabot[bot]
• Bump hibernate.version from 6.6.42.Final to 6.6.43.Final (#1609) @dependabot[bot]
• Update Surefire and Failsafe to 3.5.5 (#1608) @mprins
• Bump org.springframework.boot:spring-boot-starter-parent from 3.5.10 to 3.5.11 (#1607) @dependabot[bot]
• Bump dawidd6/action-download-artifact from 14 to 15 (#1605) @dependabot[bot]
• Bump org.openapitools:openapi-generator-maven-plugin from 7.19.0 to 7.20.0 (#1601) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.42 to 2.2.43 (#1602) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-dependency-plugin from 3.9.0 to 3.10.0 (#1597) @dependabot[bot]
• Bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 (#1595) @dependabot[bot]
• Bump com.google.errorprone:error_prone_core from 2.46.0 to 2.47.0 (#1589) @dependabot[bot]
• Bump pmd.version from 7.20.0 to 7.21.0 (#1591) @dependabot[bot]
• CI: cleanup OWASP suppressions (#1586) @mprins
• Bump hibernate.version from 6.6.41.Final to 6.6.42.Final (#1590) @dependabot[bot]
• HTM-1882: Rename Provincies feature type (again) (#1594) @mprins
• Bump dawidd6/action-download-artifact from 12 to 14 (#1588) @dependabot[bot]
• ⛓️‍💥 HTM-1870: Switch to using Paketo buildpacks (#1583) @mprins
• HTM-1866: Bump com.diffplug.spotless:spotless-maven-plugin from 3.2.0 to 3.2.1 (#1582) @dependabot[bot]
• HTM-1867: update PDOK bestuurlijke gebieden urls (#1581) @mprins

🔨 Dependency updates

19 changes

• Bump sentry.version from 8.34.0 to 8.34.1 (#1633) @dependabot[bot]
• Bump sentry.version from 8.33.0 to 8.34.0 (#1630) @dependabot[bot]
• HTM-1797: Update SolrJ from 9.10.1 to 10.0.0 (#1522) @mprins
• Bump io.swagger.core.v3:swagger-annotations from 2.2.43 to 2.2.44 (#1624) @dependabot[bot]
• Bump org.webjars:swagger-ui from 5.31.2 to 5.32.0 (#1621) @dependabot[bot]
• Bump hibernate.version from 6.6.43.Final to 6.6.44.Final (#1620) @dependabot[bot]
• HTM-1904: Add Jackson 2 BOM override (version 2.19.4 ⇉ 2.21.1) (#1619) @mprins
• HTM-1903: Remove unused GeoJSON module (#1618) @mprins
• Bump org.webjars:swagger-ui from 5.31.0 to 5.31.2 (#1610) @dependabot[bot]
• Bump hibernate.version from 6.6.42.Final to 6.6.43.Final (#1609) @dependabot[bot]
• Bump sentry.version from 8.32.0 to 8.33.0 (#1606) @dependabot[bot]
• Bump org.springframework.boot:spring-boot-starter-parent from 3.5.10 to 3.5.11 (#1607) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.42 to 2.2.43 (#1602) @dependabot[bot]
• Dependency updates (#1603) @mprins
• Bump org.junit:junit-bom from 6.0.2 to 6.0.3 (#1600) @dependabot[bot]
• Bump sentry.version from 8.31.0 to 8.32.0 (#1596) @dependabot[bot]
• Bump org.eclipse.jetty.ee10:jetty-ee10-bom from 12.0.31 to 12.0.32 (#1592) @dependabot[bot]
• Bump pmd.version from 7.20.0 to 7.21.0 (#1591) @dependabot[bot]
• Bump hibernate.version from 6.6.41.Final to 6.6.42.Final (#1590) @dependabot[bot]

v12.5.0 🎁

Uncategorised changes

🚀 New features and improvements

• HTM-1889: remove style selection options/configuration from service layer (#1604) @mprins
• HTM-1884: Add overridable style configuration to the persistence layer and update viewer layer style (#1599) @mprins
• ⛓️‍💥 HTM-1875: update viewer API model to provide styles to viewer (#1593) @mprins
• HTM-1877: add selected styles to layer settings (#1587) @mprins
• ⛓️‍💥 HTM-1654: Use JSON marshalling for session serialisation ⛓️‍💥 (#1536) @mprins

⛓️‍💥 Breaking changes

• ⛓️‍💥 HTM-1875: update viewer API model to provide styles to viewer (#1593) @mprins
• ⛓️‍💥 HTM-1870: Switch to using Paketo buildpacks (#1583) @mprins
• ⛓️‍💥 HTM-1654: Use JSON marshalling for session serialisation ⛓️‍💥 (#1536) @mprins

🐛 Bug Fixes

• HTM-1880: increase the class count value with 120% to prevent Metaspace OOM crashes (#1585) @mprins
• HTM-1882: Rename Provincies feature type (again) (#1594) @mprins
• HTM-1867: update PDOK bestuurlijke gebieden urls (#1581) @mprins

🚦 Tests and Infrastructure

16 changes

• Update Surefire and Failsafe to 3.5.5 (#1608) @mprins
• Bump org.springframework.boot:spring-boot-starter-parent from 3.5.10 to 3.5.11 (#1607) @dependabot[bot]
• Bump dawidd6/action-download-artifact from 14 to 15 (#1605) @dependabot[bot]
• Bump org.openapitools:openapi-generator-maven-plugin from 7.19.0 to 7.20.0 (#1601) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.42 to 2.2.43 (#1602) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-dependency-plugin from 3.9.0 to 3.10.0 (#1597) @dependabot[bot]
• Bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 (#1595) @dependabot[bot]
• Bump com.google.errorprone:error_prone_core from 2.46.0 to 2.47.0 (#1589) @dependabot[bot]
• Bump pmd.version from 7.20.0 to 7.21.0 (#1591) @dependabot[bot]
• CI: cleanup OWASP suppressions (#1586) @mprins
• Bump hibernate.version from 6.6.41.Final to 6.6.42.Final (#1590) @dependabot[bot]
• HTM-1882: Rename Provincies feature type (again) (#1594) @mprins
• Bump dawidd6/action-download-artifact from 12 to 14 (#1588) @dependabot[bot]
• ⛓️‍💥 HTM-1870: Switch to using Paketo buildpacks (#1583) @mprins
• HTM-1866: Bump com.diffplug.spotless:spotless-maven-plugin from 3.2.0 to 3.2.1 (#1582) @dependabot[bot]
• HTM-1867: update PDOK bestuurlijke gebieden urls (#1581) @mprins

🔨 Dependency updates

• Bump sentry.version from 8.32.0 to 8.33.0 (#1606) @dependabot[bot]
• Bump org.springframework.boot:spring-boot-starter-parent from 3.5.10 to 3.5.11 (#1607) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.42 to 2.2.43 (#1602) @dependabot[bot]
• Dependency updates (#1603) @mprins
• Bump org.junit:junit-bom from 6.0.2 to 6.0.3 (#1600) @dependabot[bot]
• Bump sentry.version from 8.31.0 to 8.32.0 (#1596) @dependabot[bot]
• Bump org.eclipse.jetty.ee10:jetty-ee10-bom from 12.0.31 to 12.0.32 (#1592) @dependabot[bot]
• Bump pmd.version from 7.20.0 to 7.21.0 (#1591) @dependabot[bot]
• Bump hibernate.version from 6.6.41.Final to 6.6.42.Final (#1590) @dependabot[bot]

v12.4.2 🎁

🔨 Security fixes en updates

• Bump org.springframework.boot:spring-boot-starter-parent from 3.5.9 to 3.5.10 (#1577) @dependabot[bot]
• Validate tiles 3D proxy path to prevent path traversal (#1562) @matthijsln

🐛 Bug Fixes

• HTM-1854: Update 3D Tiles URL to explicit tile in integration test (#1568) @steinkobben
• HTM-1798: Large POST requests were proxied as GET, failing with URI Too Large or Bad Request from the origin server (#1561) @matthijsln
• HTM-1820: Fix blocking when sending a password-reset email (#1534) @matthijsln

🚦 Tests and Infrastructure

31 changes

• Improve UserController test coverage (#1579) @mprins
• Update GH action workflows (#1578) @mprins
• Bump org.springframework.boot:spring-boot-starter-parent from 3.5.9 to 3.5.10 (#1577) @dependabot[bot]
• Bump io.swagger.core.v3:swagger-annotations from 2.2.41 to 2.2.42 (#1570) @dependabot[bot]
• Bump com.diffplug.spotless:spotless-maven-plugin from 3.1.0 to 3.2.0 (#1576) @dependabot[bot]
• Bump org.geotools:gt-bom from 34.1 to 34.2 (#1574) @dependabot[bot]
• Bump org.openapitools:openapi-generator-maven-plugin from 7.18.0 to 7.19.0 (#1569) @dependabot[bot]
• Bump org.codehaus.mojo:versions-maven-plugin from 2.20.1 to 2.21.0 (#1571) @dependabot[bot]
• Bump hibernate.version from 6.6.40.Final to 6.6.41.Final (#1572) @dependabot[bot]
• HTM-1853: rename PDOK WFS bestuurlijkegebieden:Provinciegebied to brk-bestuurlijke-gebieden:Provinciegebied (#1567) @mprins
• Bump maven-scm-publish-plugin from 3.2.1 to 3.3.0 (#1564) @mprins
• HTM-1818: Add some timezone variations to the filter tests (#1563) @mprins
• Bump com.google.errorprone:error_prone_core from 2.45.0 to 2.46.0 (#1557) @dependabot[bot]
• Bump prom/prometheus from v3.8.1 to v3.9.1 in /build/ci (#1560) @dependabot[bot]
• Add @transactional to async password reset method and fix integration tests (#1555) @copilot-swe-agent[bot]
• Use Maven 3.9.12 for CI (#1556) @mprins
• Replace deprecated deny-licenses option with allow-licenses (#1497) @mprins
• Bump pmd.version from 7.19.0 to 7.20.0 (#1554) @dependabot[bot]
• Bump yogeshlonkar/trivy-cache-action from 0.1.16 to 0.1.17 (#1553) @dependabot[bot]
• Bump org.openapitools:openapi-generator-maven-plugin from 7.17.0 to 7.18.0 (#1549) @dependabot[bot]
• Bump dawidd6/action-download-artifact from 11 to 12 (#1548) @dependabot[bot]
• Bump hibernate.version from 6.6.39.Final to 6.6.40.Final (#1550) @dependabot[bot]
• Bump org.springframework.boot:spring-boot-starter-parent from 3.5.8 to 3.5.9 (#1545) @dependabot[bot]
• Bump actions/upload-artifact from 5 to 6 (#1541) @dependabot[bot]
• Bump prom/prometheus from v3.8.0 to v3.8.1 in /build/ci (#1546) @dependabot[bot]
• Bump actions/cache from 4 to 5 (#1537) @dependabot[bot]
• Cleanup PMD config (#1535) @mprins
• HTM-1816: refactor test method names to be consistent across the API (#1533) @mprins
• Bump prom/prometheus from v3.7.3 to v3.8.0 in /build/ci (#1532) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-release-plugin from 3.2.0 to 3.3.0 (#1531) @dependabot[bot]
• Bump hibernate.version from 6.6.37.Final to 6.6.38.Final (#1530) @dependabot[bot]

🔨 Dependency updates

20 changes

• Bump org.springframework.boot:spring-boot-starter-parent from 3.5.9 to 3.5.10 (#1577) @dependabot[bot]
• HTM-1778: Update quartz.version from 2.5.0 to 2.5.2 (#1493) @mprins
• Bump io.swagger.core.v3:swagger-annotations from 2.2.41 to 2.2.42 (#1570) @dependabot[bot]
• HTM-1860: Bump org.apache.solr:solr-solrj from 9.10.0 to 9.10.1 (#1575) @dependabot[bot]
• Bump sentry.version from 8.30.0 to 8.31.0 (#1573) @dependabot[bot]
• Bump org.geotools:gt-bom from 34.1 to 34.2 (#1574) @dependabot[bot]
• Bump hibernate.version from 6.6.40.Final to 6.6.41.Final (#1572) @dependabot[bot]
• Bump sentry.version from 8.29.0 to 8.30.0 (#1565) @dependabot[bot]
• Update PostgreSQL version from 42.7.8 to 42.7.9 (#1566) @mprins
• Bump org.immutables:value from 2.12.0 to 2.12.1 (#1558) @dependabot[bot]
• Bump org.junit:junit-bom from 6.0.1 to 6.0.2 (#1559) @dependabot[bot]
• Use Maven 3.9.12 for CI (#1556) @mprins
• Bump org.webjars:swagger-ui from 5.30.3 to 5.31.0 (#1551) @dependabot[bot]
• Bump hibernate.version from 6.6.39.Final to 6.6.40.Final (#1550) @dependabot[bot]
• Bump org.springframework.boot:spring-boot-starter-parent from 3.5.8 to 3.5.9 (#1545) @dependabot[bot]
• Bump hibernate.version from 6.6.38.Final to 6.6.39.Final (#1547) @dependabot[bot]
• Bump org.immutables:value from 2.11.7 to 2.12.0 (#1540) @dependabot[bot]
• Bump org.eclipse.jetty.ee10:jetty-ee10-bom from 12.0.30 to 12.0.31 (#1539) @dependabot[bot]
• Bump sentry.version from 8.27.1 to 8.28.0 (#1529) @dependabot[bot]
• Bump hibernate.version from 6.6.37.Final to 6.6.38.Final (#1530) @dependabot[bot]