Crowd 6.0 Release Notes
4 July, 2024
The Crowd team is proud to bring you Crowd 6.0.
Highlights
- Removed support for JNDI datasource connection
- Removed support for OpenJDK 8 and 11
- Upgrade to Atlassian Data Center Platform 7
- Endpoint default security annotations
- Front-end dependencies SBOM file included in the distribution
- Updates to the Crowd API
More
Read the upgrade notes for important info about this release and see the full list of issues resolved.
Removed support for JNDI datasource connection
Due to security reasons, JNDI datasource as a method for connecting to a database was deprecated in the 5.3.0 release and removed completely in Crowd 6.0. Learn more about migrating from JNDI datasource
Removed support for OpenJDK 8 and 11
With the release of Crowd 6.0, we’re ending support for OpenJDK 8 and 11. This means that the oldest version we’ll support, test, and compile against is OpenJDK 17. Find out more about preparing your instance to JDK 17
Upgrade to Atlassian Data Center Platform 7
Crowd 6.0 includes an upgrade to Atlassian Data Center Platform 7. This upgrade puts us in a better position to respond to security changes with reduced disruption and breaking changes for your apps.
As part of this work, we’re:
upgrading numerous Atlassian and third-party components to benefit from the latest security patches and bug fixes
removing Gray APIs—unsupported third-party and cross-product libraries with dependencies
As a result, we’ll:
rearchitect Atlassian REST APIs (Jackson/Jersey updated, and JAX-RS upgraded to v2)
reduce public APIs in Atlassian apps, WRM, and web fragments
Learn more about the Atlassian Platform 7 upgrade
Endpoint default security annotations
We've introduced improved endpoint security where you can better control access to endpoints with new annotations. Important annotations to review are@AdminOnly, @AnonymousSiteAccess, @LicensedOnly, @SystemAdminOnly, @UnlicensedSiteAccess, and @UnrestrictedAccess. They’ve been revised to ensure only the intended users access your application endpoints—starting from Crowd 6.0, only licensed users can access resources without specified access criteria annotations. In Crowd, you would need to make changes to endpoints such as REST, Struts actions, Servlets, and Servlet filters. Prepare your Data Center app to comply with secure endpoint defaults
Front-end dependencies SBOM file included in the distribution
Crowd 6.0, in addition to the back-end dependencies, includes an SBOM file for front-end dependencies, providing details about the software components, dependencies, and licenses utilized in the build. This enhancement ensures that Crowd Data Center is compliant with the Secure Software Development Framework.
Updates to the Crowd API
In Crowd 6.0, we’re introducing several changes to the API classes and packages. Discover the full of changes in the upgrade notes
Complete list of changes and improvements
Here's a full list of issues resolved in this release:
Crowd 6.0.0 - 4 July, 2024
This release doesn't include any resolved issues from our public instance.