- Updated to BouncyCastle 1.84 (fixing CVE-2026-5588, CVE-2025-14813 and CVE-2026-5598)
- Updated to ph-commons 12.2.x
- Updated to ph-db 8.2.x
- (SQL) Refactored the Flyway migration to use the shared
FlywayMigrationRunnerfrom ph-db - (SQL) The configuration property
target-databaseis now deprecated. The new canonical key isjdbc.database-type. The old key is still supported as a fallback. - (SQL) The configuration property
jdbc.schema-createis now deprecated. The new canonical key issmp.flyway.jdbc.schema-create. The old key is still supported as a fallback. - (SQL) New optional Flyway configuration properties:
smp.flyway.history-table,smp.flyway.debug-mode,smp.flyway.repair-mode - (SQL) Replaced the static
SMPJDBCConfigurationutility class with the instance-basedSMPJdbcConfigurationextendingJdbcConfigurationConfigfrom ph-db - (SQL) Replaced
SMPFlywayConfigurationwithSMPFlywayConfigurationBuilderextendingFlywayConfigurationBuilderConfigfrom ph-db - (SQL) Replaced
SMPDataSourceProviderwith the genericDataSourceProviderFromJdbcConfigurationfrom ph-db - Fixed UI problem, that sticky button bar was above date and time select. See #467 - thx @RohiNof
- Added hints in the UI for the new Peppol SML URLs (SML Insourcing 2026) on the SML Configuration and SMP Settings pages
- (MongoDB) Ensured ID uniqueness checks in security managers (Role, User, UserGroup, UserToken)
- (MongoDB) Improved MongoDB client provider to wait for MongoDB to be writable before proceeding
Full Changelog: phoss-smp-parent-pom-8.1.3...phoss-smp-parent-pom-8.1.4