Release Notes -- Apache Jackrabbit Oak -- Version 1.22.21

Introduction
------------

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

Jackrabbit Oak 1.22.21 is a patch release that contains fixes and
improvements over Oak 1.22. Jackrabbit Oak 1.22.x releases are
considered stable and targeted for production use.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.


Changes in Oak 1.22.21
----------------------

Technical task

    [OAK-6769] - Convert oak-search-mt to OSGi R7 annotations
    [OAK-10708] - DocumentNodeStore: error-log failures to update the journal
    [OAK-10709] - Deprecate oak-search-mt
    [OAK-10786] - oak-lucene: use copy of lucene-core 4.7.2 source code
    [OAK-10787] - oak-lucene: backport fix for lucene-core vulnerability

Bug

    [OAK-10544] - oak-jcr: remapping a namespace prefix leaves namespace resolver in broken state
    [OAK-10611] - o.a.j.o.namepath.JcrPathParser does not handle invalid characters correctly
    [OAK-10621] - o.a.j.o.namepath.JcrPathParser does not accept indexed expanded names
    [OAK-10624] - o.a.j.o.namepath.JcrPathParser does not accept some valid local names containing '{' or '}'
    [OAK-10719] - oak-lucene uses Lucene version that can throw a StackOverflowException
    [OAK-10767] - oak-it-osgi unnecessarily deploys commons-collections to the test environment
    [OAK-10775] - LeaseUpdateSocketTimeoutIT still wants a mongo:4.2 image
    [OAK-10876] - Oak 1.22 does not compile with JDK 11 anymore
    [OAK-10985] - Index definution with a property rule having valueExcludedPrefixes not getting considered for like condition on that property

Improvement

    [OAK-10783] - VersionableEditor: misleading WARN message when creating version history
    [OAK-10810] - Remove redundant call to StringCache.get in Path.fromString()

Task

    [OAK-8993] - oak-auth-external and oak-auth-ldap are not covered by oak-it-osgi
    [OAK-10596] - Improve the test coverage of o.a.j.o.namepath.JcrPathParser
    [OAK-10616] - Make error messages from o.a.j.o.namepath.JcrNameParser/JcrPathParser consistent and less misleading
    [OAK-10684] - update maven-shade-plugin version to 3.5.2
    [OAK-10690] - Update docs and test config for recommended MongoDB version (5.0)
    [OAK-10694] - Remove oak-search-mt
    [OAK-10700] - update testcontainer dependency to 1.19.7
    [OAK-10730] - Log MongoException previously swallowed
    [OAK-10754] - webapp: update Tomcat dependency to 9.0.87
    [OAK-10785] - update maven-shade-plugin version to 3.5.3
    [OAK-10793] - Update Logback version to 1.2.13
    [OAK-10797] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.16
    [OAK-10815] - Update jacoco plugin to 0.8.12
    [OAK-10816] - Update spotbugs plugin to 4.8.5.0
    [OAK-10820] - webapp: update Tomcat dependency to 9.0.89
    [OAK-10923] - oak-benchmarks/oak-it-osgi: update commons-compress dependency to 1.26.2
    [OAK-10929] - Update commons-codec dependency to 1.17.0
    [OAK-10932] - lucene: update commons-exec test dependency to 1.4.0
    [OAK-10944] - oak-auth-ldap: update commons-pool2 dependency to 2.12.0
    [OAK-10949] - blob-cloud, segment-aws: update aws SDK to 1.12.761 (dependencies reference vulnerable amazon ion-java version)
    [OAK-10959] - webapp: update Tomcat dependency to 9.0.90
    [OAK-10960] - blob-cloud, segment: update netty version to 4.1.111
    [OAK-11003] - Update commons-codec dependency to 1.17.1


In addition to the above-mentioned changes, this release contains
all changes included up to the previous Apache Jackrabbit Oak 1.22.x release.

For more detailed information about all the changes in this and other
Oak releases, please see the Oak issue tracker at

  https://issues.apache.org/jira/browse/OAK

Release Contents
----------------

This release consists of a single source archive packaged as a zip file.
The archive can be unpacked with the jar tool from your JDK installation.
See the README.md file for instructions on how to build this release.

The source archive is accompanied by a SHA512 checksums and a PGP
signature that you can use to verify the authenticity of your
download. The public key used for the PGP signature can be found at
https://www.apache.org/dist/jackrabbit/KEYS.

About Apache Jackrabbit Oak
---------------------------

Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.

The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.

For more information, visit http://jackrabbit.apache.org/oak

About The Apache Software Foundation
------------------------------------

Established in 1999, The Apache Software Foundation provides organizational,
legal, and financial support for more than 140 freely-available,
collaboratively-developed Open Source projects. The pragmatic Apache License
enables individual and commercial users to easily deploy Apache software;
the Foundation's intellectual property framework limits the legal exposure
of its 3,800+ contributors.

For more information, visit http://www.apache.org/