This is an automated email from the ASF dual-hosted git repository.
ffang pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
The following commit(s) were added to refs/heads/3.6.x-fixes by this push:
new 8277d3930e6 update CXF 3.6.12 release notes
8277d3930e6 is described below
commit 8277d3930e65fe13bfbbb1fd19f5adf35b694c8a
Author: Freeman Fang <[email protected]>
AuthorDate: Thu Jul 30 12:23:21 2026 -0400
update CXF 3.6.12 release notes
---
distribution/src/main/release/release_notes.txt | 31 +++++--------------------
1 file changed, 6 insertions(+), 25 deletions(-)
diff --git a/distribution/src/main/release/release_notes.txt
b/distribution/src/main/release/release_notes.txt
index 559b45220cc..d31630af56f 100644
--- a/distribution/src/main/release/release_notes.txt
+++ b/distribution/src/main/release/release_notes.txt
@@ -1,4 +1,4 @@
-Apache CXF 3.6.11 Release Notes
+Apache CXF 3.6.12 Release Notes
1. Overview
@@ -24,7 +24,7 @@ http://cxf.apache.org/docs/36-migration-guide.html
for further information and requirements for upgrading from earlier
versions of CXF.
-3.6.11 fixes over 8 issues/tasks reported by users.
+3.6.12 fixes over 4 issues/tasks reported by users.
2. Installation Prerequisites
@@ -68,27 +68,8 @@ for caveats when upgrading.
** Bug
- * [CXF-8748] - nonProxyHosts is case sensitive
- * [CXF-9205] - The
org.apache.cxf.binding.soap.interceptor.ReadHeadersInterceptor invalidates the
signed SOAP Header elemements
- * [CXF-9206] - Duplicated value of 'cxf.server.requests' metric for JAX RS
Server
- * [CXF-9210] - JAX-RS Client Fails When CacheControlFeature is used but
Server Doesn't return Cache-Control Header
-
-
-
-
-** Improvement
- * [CXF-9174] - Allow overriding buildPredicate in JPACriteriaQueryVisitor
for custom predicates
- * [CXF-9197] - Replace new URL(...) in client.vm in wsldto to avoid
deprecation issues in Java 20+
- * [CXF-9207] - Improve multipart Content-Disposition formatting (optional
space after form-data;) for better interoperability with strict WAFs
- * [CXF-9211] - [JAX-RS proxy clients] Use template URL instead of actual
path values for JAX-RS micrometer metrics
-
-
-
-
-
-** Improvement
- * [CXF-9157] - remove jetty server from rs-sse-undertow
-
-** Test
- * [CXF-9006] - TrustedAuthorityValidatorCRLTest#testIsCertChainValid fails
when using Red Hat OpenJDK on PPC64LE
+ * [CXF-9221] - JCache providers use inverted isExpired() logic causing
expired tokens/codes to never be evicted
+ * [CXF-9223] - completeAudienceMatch=false defaults to prefix matching for
audience validation, widening resource access
+ * [CXF-9225] - OIDC RP does not enforce nonce validation for
Implicit/Hybrid flows
+ * [CXF-9227] - CXF 4.1.7 regression: more SecurityManager permission
requirements
