Skip to content

Bump org.glassfish.main.extras:glassfish-embedded-all from 7.1.0 to 8.0.2#1453

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.glassfish.main.extras-glassfish-embedded-all-8.0.2
Open

Bump org.glassfish.main.extras:glassfish-embedded-all from 7.1.0 to 8.0.2#1453
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.glassfish.main.extras-glassfish-embedded-all-8.0.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 10, 2026

Bumps org.glassfish.main.extras:glassfish-embedded-all from 7.1.0 to 8.0.2.

Release notes

Sourced from org.glassfish.main.extras:glassfish-embedded-all's releases.

8.0.2

Eclipse GlassFish is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 11 specification, which is a major new feature release. Eclipse GlassFish 8 is production ready and requires JDK 21 or higher.

Security fixes

  • Fixes 2 yet undisclosed CVEs in Admin Console. Details will be added as soon as the CVEs are published.

New Features

Fixes

Component Upgrades

Maintenance

... (truncated)

Changelog

Sourced from org.glassfish.main.extras:glassfish-embedded-all's changelog.

Releasing a new GlassFish version

In this example we assume 8.0.1. If any step failed, you have to resolve the issue and start from the appropriate step again.

  1. Create a release branch RELEASE_8.0.1 and push it to the Eclipse GlassFish GitHub repository.
  2. Open glassfish-release
  3. Click Build with parameters in menu.
    • releaseVersion = 8.0.1
    • nextVersion = 8.0.2-SNAPSHOT
    • click [Build] button.
  4. Wait for it to finish successfully
  5. Verify that everything was done:
    1. Verify that the deployment is present in Maven Central Deployments
      • It is possible that you will not have permissions to visit the namespace. Ask project leads or check if expected artifacts made it to Maven Central, then this was obviously successful.
    2. Verify that a new 8.0.1 tag was created.
    3. Verify that the release branch changed the number to the nextVersion value.
  6. Create a Draft PR based on this branch.
  7. Find the Glassfish Full Profile Distribution on the page of the release build under glassfish-release and copy the URL of the zip file.
  8. Run the TCKs against the result artifact - alternatively you can deploy to Maven Central Snapshots using glassfish-deploy-snapshots and refer zip from the build or from Maven Central Snapshots (same file). As another alternative you can run the TCK on any other infrastructure.
  9. Create the release on GitHub: click "Draft a new release"
  10. Create the release on Eclipse: "Create a new release"
  11. If it is a version with important feature changes, ask for a release review. Remember that it will take more than week.
  12. Create the release on Glassfish.org. Do a PR for the main branch with:
    • an update for the website in docs/website/src/main/resources:
      • in download_gf8.md, create a section for the new version at the top, based on the previous version. Update the info based on the release notes on GitHub
      • in download.md, replace information in the "Eclipse GlassFish 8.x" section at the top with info for the new version in download_gf8.md
      • check README.md, if release information is still actual.
    • with an update for the docs:
      • Update the property glassfish.version.8x with the released version in docs/pom.xml
  13. Open Maven Central Deployments and click the Publish button. Maven Central then distributes artifacts so they will become reachable to anyone referring Maven Central Repository.
  14. Verify that it's present in Maven Central (usually takes few minutes now)
  15. Upload the new release to the Eclipse download folder. Go to glassfish-copy-to-downloads
    • Enter the version to copy; 8.0.1
    • click [Build] button
  16. If everything is OK, then merge the PR.
  17. Delete the branch after merge, only tag will remain.
  18. Create a new Eclipse GlassFish Docker Image - follow Eclipse GlassFish Docker Image Wiki
Commits
  • 5225f2e Prepare release 8.0.2
  • 79e1c0d Updated corba with fixed imports, 5.0.2
  • 9469784 Updated Mojarra - resolves the only failing TCK test
  • e311bc1 Excluded JAXB dependencies from updates
  • 211690d Updated dependencies
  • 2db777b Merge pull request #25804 from dmatej/corba
  • 17cba70 ORB Refactoring to simplify its initialization and avoid race conditions
  • 579aec0 Merge pull request #26003 from OndroMih/ondromih-2026-04-backport_send-test-e...
  • 9734f2e Merge pull request #26005 from OndroMih/ondromih-2026-04-fix-docs-links
  • 7f5e9a4 Fix broken links in the guides
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.glassfish.main.extras:glassfish-embedded-all](https://github.com/eclipse-ee4j/glassfish) from 7.1.0 to 8.0.2.
- [Release notes](https://github.com/eclipse-ee4j/glassfish/releases)
- [Changelog](https://github.com/eclipse-ee4j/glassfish/blob/main/RELEASE.md)
- [Commits](eclipse-ee4j/glassfish@7.1.0...8.0.2)

---
updated-dependencies:
- dependency-name: org.glassfish.main.extras:glassfish-embedded-all
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants