OpenVoxProject/openvoxdb 9.0.0

on GitHub

🎉 This is the first release in the OpenVox 9 series! Major thanks to the amazing Vox Pupuli community for making this release happen. This release would not exist without everyone who submitted pull requests, filed bugs, tested pre-releases, and joined the discussions about what should change. 🎉

Major changes:

• Adds support for Java 25 and requires either Java 21 or 25
• Platforms removed vs. 8.x:
  • Debian 12
  • Ubuntu 25.04
  • Amazon Linux 2
  • Fedora 42

Breaking changes

• Java 21 or 25 is required. Same package dependencies, launcher, and FIPS restriction as openvox-server. (#294, #291, #554)
• systemd unit changes The systemd unit runs the JVM directly through /opt/puppetlabs/server/apps/puppetdb/bin/java, reports readiness to systemd (Type=notify, or Type=notify-reload on systemd 253 or newer), and puppetdb start and puppetdb stop are removed; use systemctl. JAVA_BIN in /etc/sysconfig/puppetdb or /etc/default/puppetdb is only needed to override the launcher, and an old JAVA_BIN="/usr/bin/java" line is ignored. JAVA_ARGS still applies. (#518, #554)
• The openvoxdb and openvoxdb-termini packages require openvox-agent 9.0.0 or newer (9.0.0-beta1 or newer in package terms). (#416)

Other changes

• Two new puppetdb.conf settings let the termini drop facts before they are sent to OpenVoxDB, including single keys inside structured facts: fact_names_blocklist takes exact dot separated fact paths, and fact_names_blocklist_regex takes Ruby regular expressions matched against complete fact paths. Invalid expressions are rejected when puppetdb.conf is loaded. (#502)
• puppetdb ssl-setup no longer calls puppet agent --configprint, which the OpenVox 9 agent removed. (#400)
• The published source tarball contains the complete uberjar again; the openvoxdb 8.16.0 and 9.0.0-rc1 tarballs were missing files. (#526, #522)
• The openvoxdb-terminus gem allows openvox 9. (#453)

CVEs fixed since 8.16.0:

Note about FIPS packages

Currently, the FIPS packages ship an outdated version of the Bouncy Castle 1.x versions of the jars. The latest Bouncy Castle FIPS 1.x release has a small issue that could cause problems in a very constrained, non-default configuration, so we are not updating to it. Instead, openvoxdb 9.1 will move to the Bouncy Castle FIPS 2.x line, which is the one fully certified for FIPS on Java 21.

What's Changed

Breaking Changes 🛠

• Upgrade to jetty12 by @austb in #208
• Drop Java 17 support by @bastelfreak in #294
• CI: Stop building packages for Debian 11 & 12 by @bastelfreak in #297
• Depend on openvox-agent >=9.0.0~beta1 by @Sharpie in #416
• Rebrand PuppetDB -> OpenVoxDB in docs and comments by @silug in #452
• Update EZbake version to 4.1.0 by @Sharpie in #518

New Features 🎉

• Add Java 25 support by @bastelfreak in #291
• Add configuration options to filter facts out in OpenVoxDB termini by @djuarezg in #502
• add rake task vox:version:bump:full for Github-release-action by @marcusdots in #558

Bug Fixes 🐛

• Download and isolate SLES RPM macros in /opt/suse-rpm-macros by @corporate-gadfly in #300
• Fix Jolokia 2.x configuration by @Sharpie in #334
• Replace use of --configprint in ssl-setup by @Sharpie in #400
• Fix report_environment join deps for certname extract by @corporate-gadfly in #501
• Update vox:build task to re-name FIPS tarballs by @Sharpie in #526

Dependency Updates ⬆️

• Update dependency net.logstash.logback:logstash-logback-encoder to v9 by @renovate[bot] in #138
• Update dependency ring:ring-core to v1.15.4 by @renovate[bot] in #276
• Update dependency org.openvoxproject:trapperkeeper-webserver to v12.0.1 by @renovate[bot] in #275
• Update dependency org.clojure:clojure to v1.12.5 by @renovate[bot] in #280
• Update slf4j-version to v2.0.18 by @renovate[bot] in #281
• Update dependency org.openvoxproject:trapperkeeper-webserver to v12.0.2 by @renovate[bot] in #285
• Update dependency com.github.seancorfield:next.jdbc to v1.3.1108 by @renovate[bot] in #287
• Update dependency clj-kondo:clj-kondo to v2026.05.25 by @renovate[bot] in #288
• Update dependency org.openvoxproject:trapperkeeper to v5.0.1 by @renovate[bot] in #270
• ezbake: Update 2.7.7->2.7.8 by @bastelfreak in #290
• Update jackson-version to v2.21.4 by @renovate[bot] in #289
• Update dependency com.fasterxml.jackson.core:jackson-annotations to v2.22 by @renovate[bot] in #292
• Update dependency com.github.seancorfield:honeysql to v2.7.1388 by @renovate[bot] in #311
• Update dependency org.openvoxproject:trapperkeeper-webserver to v12.0.3 by @renovate[bot] in #295
• Update dependency com.github.seancorfield:honeysql to v2.7.1390 by @renovate[bot] in #320
• Update dependency com.github.seancorfield:next.jdbc to v1.3.1118 by @renovate[bot] in #321
• Update dependency com.zaxxer:HikariCP to v7.1.0 by @renovate[bot] in #318
• Update dependency ring:ring-core to v1.15.5 by @renovate[bot] in #329
• Update dependency org.openvoxproject:http-client to v2.3.1 by @renovate[bot] in #335
• Update dependency org.openvoxproject:stockpile to v1.0.2 by @renovate[bot] in #336
• Update dependency org.openvoxproject:structured-logging to v1.0.2 by @renovate[bot] in #338
• Update dependency org.postgresql:postgresql to v42.7.12 (main) by @renovate[bot] in #363
• Update dependency com.github.seancorfield:honeysql to v2.7.1399 (main) by @renovate[bot] in #354
• Update jackson updates to v2.21.5 (main) by @renovate[bot] in #382
• Update dependency org.openvoxproject:trapperkeeper to v5.0.3 (main) by @renovate[bot] in #375
• Update dependency org.postgresql:postgresql to v42.7.13 (main) by @renovate[bot] in #380
• Update logback-version to v1.5.38 (main) by @renovate[bot] in #387
• Update EZbake version to 2.8.0 by @Sharpie in #401
• Update dependency org.openvoxproject:trapperkeeper to v5.0.4 (main) by @renovate[bot] in #390
• Update dependency org.openvoxproject:trapperkeeper-webserver to v12.0.4 (main) by @renovate[bot] in #391
• Update dependency org.openvoxproject:ssl-utils to v3.7.0 (main) by @renovate[bot] in #418
• Update dependency org.bouncycastle:bcpkix-jdk18on to v1.85 (main) by @renovate[bot] in #395
• Update dependency org.openvoxproject:http-client to v2.4.0 (main) by @renovate[bot] in #420
• Update dependency org.openvoxproject:trapperkeeper-webserver to v12.1.0 (main) by @renovate[bot] in #422
• Update dependency org.openvoxproject:trapperkeeper-authorization to v2.4.0 (main) by @renovate[bot] in #421
• Update dependency com.taoensso:nippy to v3.7.0 (main) by @renovate[bot] in #429
• Update dependency clj-kondo:clj-kondo to v2026.07.24 (main) by @renovate[bot] in #433
• Update dependency com.github.seancorfield:honeysql to v2.7.1425 (main) by @renovate[bot] in #438
• Update dependency com.taoensso:nippy to v3.8.0 (main) by @renovate[bot] in #439
• Update logback-version to v1.6.0 (main) by @renovate[bot] in #434
• Update dependency com.taoensso:nippy to v3.8.1 (main) by @renovate[bot] in #444
• Update logback-version to v1.6.1 (main) by @renovate[bot] in #445
• Update dependency commons-codec:commons-codec to v1.22.1 (main) by @renovate[bot] in #448
• Update dependency com.github.seancorfield:honeysql to v2.7.1437 (main) by @renovate[bot] in #455
• Update dependency clj-kondo:clj-kondo to v2026.08.04 (main) by @renovate[bot] in #456
• Update dependency org.openvoxproject:trapperkeeper-webserver to v12.1.1 (main) by @renovate[bot] in #472
• Update dependency org.openvoxproject:i18n to v1.0.5 (main) by @renovate[bot] in #464
• Update dependency org.openvoxproject:http-client to v2.4.1 (main) by @renovate[bot] in #463
• Update dependency org.openvoxproject:kitchensink to v3.5.8 (main) by @renovate[bot] in #465
• Update dependency org.openvoxproject:ssl-utils to v3.7.1 (main) by @renovate[bot] in #467
• Update dependency org.openvoxproject:trapperkeeper-authorization to v2.4.1 (main) by @renovate[bot] in #469
• Update logback-version to v1.6.2 (main) by @renovate[bot] in #474
• Update dependency prismatic:schema to v1.4.2 (main) by @renovate[bot] in #473
• Update dependency org.openvoxproject:trapperkeeper-metrics to v2.3.1 (main) by @renovate[bot] in #471
• Update dependency org.openvoxproject:ring-middleware to v2.2.1 (main) by @renovate[bot] in #466
• Update dependency org.openvoxproject:trapperkeeper to v5.0.5 (main) by @renovate[bot] in #468
• Update dependency org.openvoxproject:comidi to v1.1.4 (main) by @renovate[bot] in #462
• Update dependency org.openvoxproject:trapperkeeper-status to v1.5.1 (main) by @renovate[bot] in #488
• Update dependency org.openvoxproject:trapperkeeper-filesystem-watcher to v1.6.1 (main) by @renovate[bot] in #470
• Update dependency org.openvoxproject:trapperkeeper-metrics to v2.3.2 (main) by @renovate[bot] in #491
• Update dependency org.openvoxproject:structured-logging to v1.0.3 (main) by @renovate[bot] in #493
• Update dependency org.openvoxproject:stockpile to v1.0.3 (main) by @renovate[bot] in #492
• Update jackson updates to v2.21.6 (main) by @renovate[bot] in #496
• Update logback-version to v1.6.3 (main) by @renovate[bot] in #497
• Update dependency org.clojure:clojure to v1.12.6 (main) by @renovate[bot] in #508
• Update dependency org.openvoxproject:trapperkeeper to v5.0.6 (main) by @renovate[bot] in #510
• Update slf4j-version to v2.0.19 (main) by @renovate[bot] in #512
• Update dependency org.yaml:snakeyaml to v2.7 (main) by @renovate[bot] in #506
• Update dependency com.taoensso:nippy to v3.9.0 (main) by @renovate[bot] in #516
• Update dependency clj-commons:clj-yaml to v1.0.30 (main) by @renovate[bot] in #520
• Update dependency com.github.seancorfield:honeysql to v2.7.1479 (main) by @renovate[bot] in #531
• Update dependency org.openvoxproject:trapperkeeper-metrics to v2.3.3 (main) by @renovate[bot] in #529
• Update dependency org.bouncycastle:bcpkix-jdk18on to v1.86 (main) by @renovate[bot] in #523
• Update jackson updates to v2.21.7 (main) by @renovate[bot] in #536
• Update slf4j-version to v2.0.20 (main) by @renovate[bot] in #539
• Update dependency org.openvoxproject:i18n to v1.0.6 (main) by @renovate[bot] in #538
• Update logback-version to v1.6.4 (main) by @renovate[bot] in #547
• Update dependency org.apache.commons:commons-lang3 to v3.21.0 (main) by @renovate[bot] in #555

Other Changes

• Target openvox9 platform for main branch by @nmburgan in #267
• Update acceptance descriptions and defaults for OpenVox 9 by @nmburgan in #268
• Migrate config to use trapperkeeper-webserver by @nmburgan in #271
• Use Ruby 4 for builder image and cache it by @nmburgan in #279
• Docker: Switch to Java 21 by @bastelfreak in #296
• feat: simplify container build by using ADD, list packages more readable by @rwaffen in #298
• Replace java-21-openjdk-devel->java-21-openjdk-headless by @corporate-gadfly in #301
• Remove stale documentation/CONTRIBUTING.md, refresh stale README links by @miharp in #304
• fix engine tests by @corporate-gadfly in #331
• fix FIPS tests by using correct path to java.security.fips by @corporate-gadfly in #342
• Fix FIPS-safe random string generation in dataset generator by @corporate-gadfly in #343
• Addutional FIPS DRBG (deterministic random bit generator) limit changes by @jpartlow in #344
• Downgrade logstash-logback-encoder 9.0->8.1 by @Sharpie in #360
• Manage logback dependency by @Sharpie in #377
• add special cases to main workflow by @corporate-gadfly in #378
• Bump beaker version to 7.6 by @Sharpie in #404
• acceptance: Run tests against Postgres 17 by @Sharpie in #406
• add badge for daily build status by @corporate-gadfly in #408
• Update integration tests to expect Ruby 3.4 output by @Sharpie in #409
• Build JARs with Java version based on branch by @Sharpie in #410
• prep for clj-kondo bump to 2026.07.24 by @corporate-gadfly in #437
• Clarify descriptions of FIPS build workflow inputs by @Sharpie in #431
• fix: match pre-release tarballs by base version on upload by @slauger in #459
• leiningen: version bump 2.11.2->2.12.0 by @corporate-gadfly in #490
• CI: Update to Ruby 4.0 by @bastelfreak in #326
• development assistance by @marcusdots in #534
• fix: folder structure by @marcusdots in #535
• Use ezbake 4.2.0, declare supported Java versions, remove cruft by @nmburgan in #554
• Change groupName from 'jackson updates' to 'logback updates' by @corporate-gadfly in #542
• Smoke testing for PRs or local tests by @nmburgan in #563

New Contributors

• @miharp made their first contribution in #304
• @silug made their first contribution in #452
• @djuarezg made their first contribution in #502

Full Changelog: 8.13.0...9.0.0