Apache ActiveMQ 6.3.0

What's Changed

• NO-JIRA: update repo meta-data to drop 'classic' mentions by @gemmellr in #1545
• AMQ-9810 - Add additional validation for MQTT control packets by @cshannon in #1546
• AMQ-9810 - Add additional validation for MQTT wireformat by @cshannon in #1547
• AMQ-9813 - fix wrong QueueSize for non-persistent message with TTL by @lenoch7 in #1551
• AMQ-9813 - Minor updates by @cshannon in #1553
• Bump to 6.3.0-SNAPSHOT by @jbonofre in #1548
• AMQ-8525: TransactedStoreUsageSuspendResumeTest slow fix by @jeanouii in #1539
• [NO-JIRA] Jenkinsfile: Update with parallelTests flag by @mattrpav in #1559
• AMQ-9808: Dead lock when using CRON schedule with AMQ_SCHEDULED_REPEAT by @jeanouii in #1536
• AMQ-9809: org.apache.activemq.perf.InactiveDurableTopicTest hanging by @jeanouii in #1537
• [AMQ-9817] Fix long running KahaDBOffsetRecoveryListenerTest on CI by @jeanouii in #1555
• [AMQ-9818] JournalCorruptionEofIndexRecoveryTest failing with OOME by @jeanouii in #1561
• AMQ-8525: improve stomp module performances by @jeanouii in #1540
• AMQ-8525 Improve execution of unit tests module by @jeanouii in #1542
• [AMQ-9820]: closed connections leaking into the pool when reconnectOnException is used by @jeanouii in #1564
• AMQ-9819 - Rework Rest test fix by @cshannon in #1565
• AMQ-9823 - properly clear ack set from ackAndPreparedMap by @cshannon in #1566
• Bump org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3 by @dependabot[bot] in #1568
• AMQ-8525 Improve performance of amqp + kahadb store modules by @jeanouii in #1544
• AMQ-9824 - Cleanup code in KahaDB classes by @cshannon in #1567
• Use of GitHub Actions, and enable dependabot by @jbonofre in #1497
• Update the check context to use CI Quick by @jbonofre in #1606
• [AMQ-9815] Add additional attributes to ConnectorView by @mattrpav in #1556
• Bump org.apache.geronimo.specs:geronimo-atinject_1.0_spec from 1.0 to 1.2 by @dependabot[bot] in #1602
• Until Java 25 work is finished by @jeanouii in #1607
• Bump jolokia-version from 2.4.0 to 2.4.3 by @dependabot[bot] in #1611
• Facky tests revealed mainly with faster CI (aka Github Actions but also with Java 25) by @jeanouii in #1610
• Revert "Facky tests revealed mainly with faster CI (aka Github Actions but also with Java 25) (#1610)" by @mattrpav in #1617
• Bump camel-version from 4.14.2 to 4.14.4 by @jbonofre in #1615
• Bump org.apache.commons:commons-pool2 from 2.12.1 to 2.13.1 by @dependabot[bot] in #1605
• Bump spring-version from 6.2.12 to 6.2.15 by @dependabot[bot] in #1573
• ActiveMQ on Java until Java 24 (allow SecurityManager for tests) by @jeanouii in #1612
• Flaky tests GitHub actions by @jeanouii in #1621
• Bump org.apache.commons:commons-dbcp2 from 2.13.0 to 2.14.0 by @dependabot[bot] in #1586
• AMQ-9829 Track prefetched messages for duplicate suppression during failover by @jeanouii in #1616
• Update CI schedule to run hourly by @jeanouii in #1625
• Batch of flaky tests fixes by @jeanouii in #1622
• Configure broker to check for expired messages every second in tests by @jeanouii in #1626
• Bump org.ops4j.pax.url:pax-url-aether from 2.6.11 to 2.6.17 by @dependabot[bot] in #1589
• Bump org.easymock:easymock from 3.2 to 3.6 by @dependabot[bot] in #1581
• Bump org.apache.aries.blueprint:org.apache.aries.blueprint.core from 1.10.2 to 1.10.3 by @dependabot[bot] in #1580
• Refactor JMSConsumerTest and ZeroPrefetchConsumerTest by @jeanouii in #1628
• Bump org.apache.groovy:groovy-ant from 5.0.2 to 5.0.4 by @dependabot[bot] in #1623
• Bump org.apache.groovy:groovy from 5.0.2 to 5.0.4 by @dependabot[bot] in #1624
• Bump com.fasterxml.jackson.core:jackson-annotations from 2.20 to 2.21 by @dependabot[bot] in #1620
• Bump jackson-version from 2.20.1 to 2.21.0 by @dependabot[bot] in #1619
• Bump org.codehaus.mojo:javacc-maven-plugin from 3.1.1 to 3.2.0 by @dependabot[bot] in #1618
• Bump org.ow2.asm:asm from 9.9 to 9.9.1 by @dependabot[bot] in #1604
• Bump karaf-version from 4.3.7 to 4.4.9 by @dependabot[bot] in #1603
• Bump org.apache.cxf:cxf-xjc-plugin from 4.0.2 to 4.1.1 by @dependabot[bot] in #1600
• Bump org.apache.geronimo.specs:geronimo-annotation_1.3_spec from 1.0 to 1.3 by @dependabot[bot] in #1599
• Bump org.jmdns:jmdns from 3.6.2 to 3.6.3 by @dependabot[bot] in #1596
• [AMQ-9830] Replaces commons-io usage in activemq-jaas with Java nio by @mattrpav in #1629
• Bump jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api from 3.0.0 to 3.0.2 by @dependabot[bot] in #1597
• Bump jakarta.websocket:jakarta.websocket-api from 2.1.1 to 2.2.0 by @dependabot[bot] in #1593
• Bump org.apache.maven.plugins:maven-rar-plugin from 3.0.0 to 3.1.0 by @dependabot[bot] in #1592
• Bump org.codehaus.mojo:taglist-maven-plugin from 3.2.1 to 3.2.2 by @dependabot[bot] in #1591
• Bump org.owasp:dependency-check-maven from 12.1.8 to 12.2.0 by @dependabot[bot] in #1590
• Bump commons-io:commons-io from 2.20.0 to 2.21.0 by @dependabot[bot] in #1583
• Bump xbean-version from 4.28 to 4.29 by @dependabot[bot] in #1577
• Upgrade to Apache POM 37 by @jbonofre in #1570
• Bump org.apache.qpid:qpid-jms-client from 2.4.0 to 2.9.0 by @dependabot[bot] in #1598
• Bump pax-exam-version from 4.13.1 to 4.14.0 by @dependabot[bot] in #1584
• Bump commons-codec:commons-codec from 1.15 to 1.20.0 by @dependabot[bot] in #1576
• Bump org.eclipse.jdt:ecj from 3.17.0 to 3.44.0 by @dependabot[bot] in #1575
• Bump maven-core-version from 3.8.6 to 3.9.12 by @dependabot[bot] in #1601
• Bump org.sonarsource.scanner.maven:sonar-maven-plugin from 5.2.0.4988 to 5.5.0.6356 by @dependabot[bot] in #1585
• Enable publishing of test results in CI workflows by @jeanouii in #1637
• Add VM transport broker restart test by @pradeep85841 in #1631
• the Apache org only allows EnricoMi/publish-unit-test-result-action by @jeanouii in #1638
• AMQ-9851 Set preallocation scope to NONE in JournalFdRecoveryTest by @jeanouii in #1640
• AMQ-9852 Ensure advisory consumer receives producer advisory before creation to prevent race conditions by @jeanouii in #1641
• AMQ-9853 Ensure consumer is closed after all acknowledgments are processed by @jeanouii in #1643
• AMQ-9845 Fix race condition in AMQ4889Test by @jeanouii in #1630
• AMQ-9843 Handle InstanceNotFoundException during MBean unregistration… by @jeanouii in #1635
• AMQ-9854 Add wait for broker to process disconnect before publishing … by @jeanouii in #1646
• Bump org.apache.cxf:cxf-xjc-plugin from 4.1.1 to 4.1.2 by @dependabot[bot] in #1632
• Bump org.jvnet.jaxb:jaxb-plugins-runtime from 4.0.8 to 4.0.12 by @dependabot[bot] in #1578
• Bump commons-codec:commons-codec from 1.20.0 to 1.21.0 by @dependabot[bot] in #1642
• AMQ9844 Refactor ReloadableProperties and PropertiesLoginModuleRaceCo… by @jeanouii in #1636
• Bump xbean-version from 4.29 to 4.30 by @dependabot[bot] in https://github.com...

Apache ActiveMQ 6.2.8

What's Changed

• Bump to 6.2.8 by @jbonofre in #2160
• [6.2.x] Lower default maxFrameSize to 10 MB in xml config (#2166) by @cshannon in #2168
• [6.2.x] Add better frame size validation for AMQP (#2167) by @cshannon in #2171
• [6.2.x] Backport missing fixes for AMQ-9813 by @cshannon in #2174
• [6.2.x] Prevent cursor from using more than 100% temp store (#2165) by @cshannon in #2176
• [6.2.x] Fire message discarded advisory on format errors (#2177) by @cshannon in #2179
• chore: Update Spring to 6.2.19 by @coheigea in #2185
• build(deps): bump shiro-version from 2.2.0 to 2.2.1 (#2124) by @coheigea in #2182
• build(deps): bump com.fasterxml.jackson.core:jackson-annotations (#2070) by @coheigea in #2183
• [6.2.x] Fix Topic store/temp usage tracking (#2178) by @cshannon in #2192
• [6.2.x] Fix TextMessage body thread safety (#2188) by @cshannon in #2204
• [6.2.x] Minor updates to text message sync (#2209) by @cshannon in #2214
• [6.2.x] Ensure composite temp dests are handled in AuthorizationBroker (#2219) by @cshannon in #2220
• [6.2.x] Fix network bridge silent death when transport exception occurs during broker info handshake (#1865) by @cshannon in #2227
• [6.2.x] Update spring.schemas to include missing 'spring-beans.xsd' mapping by @jbonofre in #2211
• [6.2.x] fix(#1731): adapter deadlock (#1735) by @cshannon in #2234
• [#2230] [6.2.x] KahaDB optionally use a isolatedIterator with isolatedCursor by @mattrpav in #2237
• [6.2.x] [AMQ-9687] Add metrics about error and reconnect counts to network co… by @mattrpav in #2239
• [6.2.x] feat(#1828): Expose NetworkConnector URI and local URI in JMX MBean (activemq-6.2.x) by @jbonofre in #2208
• Update to Jackson 2.22.1 by @jbonofre in #2247

Full Changelog: activemq-6.2.7...activemq-6.2.8

Apache ActiveMQ 5.19.9

What's Changed

• Bump to 5.19.9 by @jbonofre in #2161
• [5.19.x] Lower default maxFrameSize to 10 MB in xml config (#2166) by @cshannon in #2169
• [5.19.x] Add better frame size validation for AMQP (#2167) by @cshannon in #2172
• [5.19.x] Prevent cursor from using more than 100% temp store (#2165) by @cshannon in #2175
• [5.19.x] Fire message discarded advisory on format errors (#2177) by @cshannon in #2180
• [5.19.x] Fix Topic store/temp usage tracking (#2178) by @cshannon in #2193
• [5.19.x] Fix TextMessage body thread safety (#2188) by @cshannon in #2205
• [5.19.x] Minor updates to text message sync (#2209) by @cshannon in #2215
• [5.19.x] Ensure composite temp dests are handled in AuthorizationBroker (#2219) by @cshannon in #2221
• [5.19.x] Fix network bridge silent death when transport exception occurs during broker info handshake (#1865) by @cshannon in #2228
• [5.19.x] fix(#1731): adapter deadlock (#1735) by @cshannon in #2235
• [#2230] [5.19.x] KahaDB optionally use a isolatedIterator with isolatedCursor by @mattrpav in #2236
• [5.19.x] [AMQ-9687] Add metrics about error and reconnect counts to network co… by @mattrpav in #2240
• Upgrade to Jackson 2.22.1 by @jbonofre in #2251

Full Changelog: activemq-5.19.8...activemq-5.19.9

Apache ActiveMQ 6.2.7

What's Changed

• Bump to 6.2.7-SNAPSHOT by @jbonofre in #2060
• [6.2.x] Update SECURITY.md and default configs for advisory topics by @cshannon in #2057
• [6.2.x] Update Stomp transports with improved validation (#2064) by @cshannon in #2065
• [6.2.x] Send advisory messages using Broker connection context (#2071) by @cshannon in #2075
• [6.2.x] Add https to BrokerView restricted list (#2073) by @cshannon in #2078
• [6.2.x] Add validation for WireFormatInfo (#2080) by @cshannon in #2081
• [6.2.x] Ensure at most one BrokerInfo command is received (#2083) by @cshannon in #2086
• [6.2.x] Restrict full web console URI to admins role (#2074) by @cshannon in #2090
• [6.2.x] Adding missing jsp escapes (#2089) by @cshannon in #2092
• [6.2.x] Limit WireFormatInfo platform details to a reasonable length (#2088) by @cshannon in #2094
• [6.2.x] Add validation for LDAP network connector URIs (#2077) by @cshannon in #2098
• [6.2.x] Add back missing closing tag (#2100) by @cshannon in #2105
• [6.2.x] Validate Stomp headers against max frame size (#2104) by @cshannon in #2110
• [6.2.x] Remove extra buffer copy in StompNIOSSLTransport (#2107) by @cshannon in #2111
• [6.2.x] Replace active temp dests map with set (#2113) by @cshannon in #2114
• [6.2.x] Refactor network connections to process after ConnectionInfo (#2112) by @cshannon in #2116
• [6.2.x] Provide a flexible filter style input stream that limits read amounts (#2118) by @cshannon in #2120
• [6.2.x] Add flag to optionally enable temp destination stealing (#2122) by @cshannon in #2125
• [6.2.x] Improve the broker's handling of message corruption (#2136) by @cshannon in #2143
• [6.2.x] Add support for maxInflateDataSize to limit uncompressed buffers (#2139) by @cshannon in #2147
• [6.2.x] Fix test by enabling allowTempDestinationStealing (#2146) by @cshannon in #2150
• [6.2.x] [#2137] Fix maxUncommittedCount usage across a network of brokers by @mattrpav in #2153
• Fix #2153 - remove test annotation from 6.2.x by @cshannon in #2157
• [6.2.x] Improve handling of partial reads and EOF in Frame size limited filter (#2154) by @cshannon in #2155
• [6.2.x] Preserve ${...} placeholders when removing/modifying networkConnectors in RuntimeConfigurationPlugin (#2123) by @jbonofre in #2134

Full Changelog: activemq-6.2.6...activemq-6.2.7

Apache ActiveMQ 5.19.8

What's Changed

• Bump to 5.19.7-SNAPSHOT by @jbonofre in #2059
• [5.19.x] Update SECURITY.md and default configs for advisory topics by @cshannon in #2058
• [5.19.x] Update Stomp transports with improved validation (#2064) by @cshannon in #2066
• [5.19.x] Send advisory messages using Broker connection context (#2071) by @cshannon in #2076
• [5.19.x] Add https to BrokerView restricted list (#2073) by @cshannon in #2079
• [5.19.x] Add validation for WireFormatInfo (#2080) by @cshannon in #2082
• [5.19.x] Ensure at most one BrokerInfo command is received (#2083) by @cshannon in #2087
• [5.19.x] Restrict full web console URI to admins role (#2074) by @cshannon in #2091
• [5.19.x] Adding missing jsp escapes (#2089) by @cshannon in #2093
• [5.19.x] Limit WireFormatInfo platform details to a reasonable length (#2088) by @cshannon in #2095
• [AMQ-9288] Fix TransportConnection logger to include exception message on Async Error (5.19.x backport) by @trex-amazon in #2062
• [5.19.x] Add validation for LDAP network connector URIs (#2077) by @cshannon in #2099
• [5.19.x] Add back missing closing tag (#2100) by @cshannon in #2106
• [5.19.x] Validate Stomp headers against max frame size (#2104) by @cshannon in #2108
• [5.19.x] Remove extra buffer copy in StompNIOSSLTransport (#2107) by @cshannon in #2109
• [5.19.x] Replace active temp dests map with set (#2113) by @cshannon in #2115
• [5.19.x] Refactor network connections to process after ConnectionInfo (#2112) by @cshannon in #2117
• [5.19.x] Provide a flexible filter style input stream that limits read amounts (#2118) by @cshannon in #2121
• [5.19.x] Add flag to optionally enable temp destination stealing (#2122) by @cshannon in #2126
• [5.19.x] Improve the broker's handling of message corruption (#2136) by @cshannon in #2145
• [5.19.x] Add support for maxInflateDataSize to limit uncompressed buffers (#2139) by @cshannon in #2148
• [5.19.x] Fix test by enabling allowTempDestinationStealing (#2146) by @cshannon in #2151
• [5.19.x] [#2020] Add expiryCheckEnabled option to MessageEvictionStrategy to s… by @mattrpav in #2149
• [5.19.x] Fix maxUncommittedCount usage across a network of brokers by @mattrpav in #2152
• [5.19.x] Improve handling of partial reads and EOF in Frame size limited filter (#2154) by @cshannon in #2156
• [5.19.x] Preserve ${...} placeholders when removing/modifying networkConnectors in RuntimeConfigurationPlugin (#2123) by @jbonofre in #2135

New Contributors

• @trex-amazon made their first contribution in #2062

Full Changelog: activemq-5.19.7...activemq-5.19.8

Apache ActiveMQ 6.2.6

What's Changed

• Bump to 6.2.6-SNAPSHOT by @jbonofre in #1961
• [6.2.x] Add more transport types to the denied list for JMX part 2 (#1972) by @cshannon in #1973
• Execute CI on activemq-5.19.x and activemq-6.2.x branches (6.2.x) by @jbonofre in #1958
• build(deps): bump log4j-version from 2.25.3 to 2.25.4 by @robertregina59 in #1993
• [6.2.x] Block the XBeanBrokerFactory by default inside VMTransportFactory (#2003) by @cshannon in #2010
• [6.2.x] Handle validation for Composite URIs without parens (#2004) by @cshannon in #2012
• [6.2.x] Disable the message servlet by default (#2000) by @cshannon in #2014
• [#2005] 6.2.x - Fix authorization check on removeDestination by @mattrpav in #2009
• [6.2.x] Remove "java.lang" package as a default allowed serializable package (#2026) by @cshannon in #2027
• Bump dependencies for CVE fixes on 6.2.x by @jbonofre in #2030
• Harden default broker and web console configuration (6.2.x backport) by @jbonofre in #2035
• build(deps): bump shiro-version from 2.1.0 to 2.2.0 (6.2.x backport) by @jbonofre in #2041
• [6.2.x] Harden web console and Jolokia access by default (#2025) by @jbonofre in #2037
• [6.2.x] Backport network flaky test improvements by @cshannon in #2045
• [6.2.x] Ensure connection info is processed before durable sync by @cshannon in #2048

New Contributors

• @robertregina59 made their first contribution in #1993

Full Changelog: activemq-6.2.5...activemq-6.2.6

Apache ActiveMQ 5.19.7

What's Changed

• Bump to 5.19.7-SNAPSHOT by @jbonofre in #1962
• [5.19.x] Add more transport types to the denied list for JMX part 2 (#1972) by @cshannon in #1974
• Execute CI on activemq-5.19.x and activemq-6.2.x branches (5.19.x) by @jbonofre in #1959
• [5.19.x] Block the XBeanBrokerFactory by default inside VMTransportFactory (#2003) by @cshannon in #2011
• [5.19.x] Handle validation for Composite URIs without parens (#2004) by @cshannon in #2013
• [5.19.x] Disable the message servlet by default (#2000) by @cshannon in #2015
• [#2005] 5.19.x - Fix authorization check on removeDestination by @mattrpav in #2008
• [5.19.x] Remove "java.lang" package as a default allowed serializable package (#2026) by @cshannon in #2028
• Bump netty, snappy, karaf to address known CVEs on activemq-5.19.x by @jbonofre in #2031
• Harden default broker and web console configuration (5.19.x backport) by @jbonofre in #2036
• [5.19.x] Harden web console and Jolokia access by default (#2025) by @jbonofre in #2038
• [5.19.x] Backport network flaky test improvements by @cshannon in #2046
• [5.19.x] Ensure connection info is processed before durable sync by @cshannon in #2049

Full Changelog: activemq-5.19.6...activemq-5.19.7

Apache ActiveMQ 6.2.5

What's Changed

• Bump to 6.2.5-SNAPSHOT version by @jbonofre in #1892
• [6.2.x] SSL handshake write timeout enforcement (#1883) by @cshannon in #1894
• [6.2.x] Minor bug fix for BrokerView#validateAllowedUri (#1900) by @cshannon in #1902
• [6.2.x] Restrict URL protocol types loaded by XBeanBrokerFactory (#1910) by @cshannon in #1915
• compilation-fix by @cshannon in #1919
• [6.2.x] Make brokerName immutable in RegionBroker (#1917) by @cshannon in #1923
• [6.2.x] Add Http discovery transport to denied list for JMX (#1918) by @cshannon in #1925
• [6.2.x] Update resource cleanup on queueBrowse servlet (#1912) by @cshannon in #1928
• [6.2.x] Update DestinationView uri resolution (#1914) by @cshannon in #1930
• fix(webconsole): the webconsole now redirect to the slave.jsp when required (slave broker with startAsync="true") [6.2.x] by @jbonofre in #1934
• [6.2.x] Queue browse improvements in webconsole (#1938) by @cshannon in #1942
• [6.2.x] Add more transport types to the denied list for JMX (#1949) by @cshannon in #1952
• [6.2.x] Add remote file filtering for XBeanBrokerFactory (#1950) by @cshannon in #1954

Full Changelog: activemq-6.2.4...activemq-6.2.5

Apache ActiveMQ 5.19.6

What's Changed

• Bump to 5.19.6-SNAPSHOT version by @jbonofre in #1893
• [5.19.x] SSL handshake write timeout enforcement (#1883) by @cshannon in #1896
• [5.19.x] Minor bug fix for BrokerView#validateAllowedUri (#1900) by @cshannon in #1903
• [5.19.x] Restrict URL protocol types loaded by XBeanBrokerFactory (#1910) by @cshannon in #1916
• [5.19.x] Make brokerName immutable in RegionBroker (#1917) by @cshannon in #1924
• [5.19.x] Add Http discovery transport to denied list for JMX (#1918) by @cshannon in #1926
• [5.19.x] Update resource cleanup on queueBrowse servlet (#1912) by @cshannon in #1927
• [5.19.x] Update DestinationView uri resolution (#1914) by @cshannon in #1929
• fix(webconsole): the webconsole now redirect to the slave.jsp when required [5.19.x] by @jbonofre in #1936
• [5.19.x] Queue browse improvements in webconsole (#1938) by @cshannon in #1943
• [5.19.x] Add more transport types to the denied list for JMX (#1949) by @cshannon in #1953
• [5.19.x] Add remote file filtering for XBeanBrokerFactory (#1950) by @cshannon in #1955

Full Changelog: activemq-5.19.5...activemq-5.19.6

Apache ActiveMQ 6.2.4

What's Changed

• [6.2.x] Bump version to 6.2.4-SNAPSHOT by @jbonofre in #1868
• [6.2.x] Ensure AMQP protocol marshals messages before passing to broker (#1859) by @cshannon in #1860
• [6.2.x] Backport MQTT fixes by @cshannon in #1884
• [6.2.x] Properly handle SSL handshake updates by @cshannon in #1886

Full Changelog: activemq-6.2.3...activemq-6.2.4