fix(deps): update geoserver.version to v2.27.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.geoserver.extension:gs-wps-core	2.26.1 -> 2.27.1
org.geoserver:gs-main	2.26.1 -> 2.27.1

---

Release Notes

geoserver/geoserver (org.geoserver.extension:gs-wps-core)

v2.27.1: GeoServer 2.27.1

Compare Source

Release notes

Stable release.

Security considerations

This release addresses a security vulnerability details of which will be published Monday 2 June 2025.

Bug

GEOS-11274 Cannot get a JSON legend with an external reference to a non published directory

GEOS-11751 Symbolizer URL in GetLegendGraphic JSON Request is Broken

GEOS-11795 Incorrect clipping of point geometries in vector tiles

GEOS-11808 Attribute names containing characters the XML Encoder can't handle are accepted for input, causing errors

GEOS-11816 Features templating OGC API fetch by ID fails

GEOS-11817 GUI spinner remains after drag and drop

GEOS-11818 PageUniqueProcess regression after [GEOT-7628]

Improvement

GEOS-11793 WPS Read Value from Coverage Position

GEOS-11804 Disallow usage of var in GeoServer source code

New Feature

GEOS-11797 Add support for Jiffle expressions in coverage view setup

GEOS-11800 Implement GeoServer WPS SpatioTemporalZonalStatistics process

Task

GEOS-11825 Random WPS build failure on Github

GEOS-11826 Random build failures in gs-metadata when running on Github

GEOS-11827 Random build failures in LocalResolvetest when running on github actions

GEOS-11828 Random test failures in WFS 2.0 CITE tests, on Github actions

Full Changelog: geoserver/geoserver@2.27.0...2.27.1

v2.27.0: GeoServer 2.27.0

Compare Source

Release notes

Bug

GEOS-4533 WPS demo builder 3 level chaining bug

GEOS-7967 wps demo builder subprocess (2 level) issue

GEOS-10844 Exclude xml-apis from build

GEOS-11494 WFS GetFeature request with a propertyname parameter fails when layer attributes are customized (removed or reordered)

GEOS-11524 csw: default queryables mapping not generated

GEOS-11540 OGC API queryables features call not working in JSON

GEOS-11579 DGGS modules prevent GeoServer startup if JEP is not installed

GEOS-11582 The pgraster community module depends on imagemosaic-jdbc, no longer part of the codebase

GEOS-11607 KML WMS GetMap is performing a heavy database load query

GEOS-11620 Smart Data Loader plugin for GeoServer 2.26 produces a Mapping file data source definition and tries to establish a connection pool, but fails

GEOS-11622 WMS 1.3 should return "InvalidCRS" exception code when fed an invalid CRS

GEOS-11633 WCS CITE compliance: tests assume their should get the "right" exception XML even when not providing a suitable service or version

GEOS-11636 Store panels won't always show feedback in target panels

GEOS-11649 welcome page per-layer is not respecting global service enablement

GEOS-11658 Time editor dumps stack trace in UI if the start or end time values are intervals

GEOS-11663 Centralize version negotiation management in the OWS Dispatcher

GEOS-11664 Update REST security paths

GEOS-11665 Interpolation extension is not properly declared in WCS 2.0 GetCapabilities

GEOS-11667 Make WMTS work in strict cite compliance mode

GEOS-11668 WMTS home page capabilities link uses 1.1.1 as the version, and the wrong version negotiation approach

GEOS-11684 GDAL no longer included in Docker image

GEOS-11690 Bug in Externalize printing configuration folder

GEOS-11691 Smart data loader accepts bigint and bigserial but not int8 postgresql type alias

GEOS-11694 OpenID connect: allow caching authentication when an expiration is declared in the access token

GEOS-11696 AdminRequestCallback not loaded due to spring bean name conflict

GEOS-11700 GeoFence fails in recognizing some caller IP address

GEOS-11707 Ogr2OgrWfsTest test failures with GDAL 3.10.1

GEOS-11711 Clickhouse DGGS stores fails to aggregate on dates

GEOS-11713 Concurrent LDAP builds fail on Jenkins

GEOS-11719 MapML custom projections blocked by content security policy

GEOS-11720 AttributeTypeInfoImpl doesn't quote names properly

GEOS-11722 Coverage view reader partially ignores multithreaded loading

GEOS-11724 Layer WFS Service not respecting workspace and layer disablement

GEOS-11738 Prevent error when oidc provider sends empty "&state="

GEOS-11739 Excessive memory usage for WMS KML output format

GEOS-11747 GeoServer does not throw JAI runtime exceptions

GEOS-11755 AbstractCatalogFacade leaves dangling references to temporary Catalog

GEOS-11756 GeoServerDataDirectory's default workspace location is wrong

GEOS-11760 Fix a potential OOM in the KML transformation

GEOS-11762 Feature Templates by feature type can not be listed via GeoServer Rest API

GEOS-11769 Race conditions in LayerGroupHelper when the default catalog is not fully initialized

GEOS-11774 Logout with OAuth plugin will give error if logged in locally

GEOS-11790 Data Directory Loader Consistency Issues

GEOS-11792 Default Service Capabilities shown on initial start with no workspaces

GEOS-11796 Deadlocks During GeoServer Startup When Loading Style Group Layer Groups

Improvement

GEOS-11468 Coverage REST API URL Checks

GEOS-11561 Client-Delegating MapML Proxy

GEOS-11562 Default Gzip filter setting in web.xml does not compress application/javascript

GEOS-11564 WPS calls to internal WFS will handle requests with version=2.0.0

GEOS-11572 Docker main published not publishing 2.27.x

GEOS-11577 Rename MapML to , rename viewer bundle to mapml.js

GEOS-11578 WMTS Multidim extension, allow usage of a sidecar in a separate store

GEOS-11580 Improve embedded GWC meta-tiling performance

GEOS-11585 Patch Spectrum to work with Wicket's CSP

GEOS-11586 Patch CodeMirror to work with Wicket's CSP

GEOS-11588 GWC disk quota, check JDBC connection pool validation query

GEOS-11603 KML download mode does not show layer titles

GEOS-11604 Switch to YAML official mime type in OGC API

GEOS-11612 Add system property support for Proxy base URL -> use headers activation

GEOS-11613 Increase control-flow logging admin visibility in logs

GEOS-11623 Refactor GSModalWindow to use ModalDialog instead of deprecated ModalWindow

GEOS-11624 Split Geopackage extension into separate modules to reduce dependencies

GEOS-11625 Add "Challenge Anonymous Sessions" Option to AuthKey Filter

GEOS-11645 Control FreeMarker template access

GEOS-11651 Support env parametrization on OIDC filter

GEOS-11652 Externalize printing configuration folder

GEOS-11654 Fix multiline strings that are missing a space between the lines

GEOS-11666 Update MapML viewer to latest release 0.16.0

GEOS-11669 Patch jscolor to work with Wicket's CSP

GEOS-11677 Hide version info on GWC home page

GEOS-11702 GeoFence: major libs update

GEOS-11704 GeoFence: filter rule list by IP address

GEOS-11705 GeoFence: make rules valid within a date range

GEOS-11758 datadir-catalog-loader: Improve reliability and code quality

GEOS-11766 Speed up CRS and store factory lookups during catalog loading

GEOS-11768 Reduce thread contention in Catalog operations

GEOS-11783 Longitudinal profile process should allow for input chaining

GEOS-11784 The longitudinal profile process should limit the number of points it can extract

GEOS-11785 The longitudinal profile process should respect cancellation

GEOS-11786 Longitudinal profile process: general performance improvements

New Feature

GEOS-11605 MapML Support custom TCRS projections from existing GridSets

GEOS-11627 OGCAPI FeatureService Extension (GSIP-230)

GEOS-11741 Enhancing Smart Data Loader with Override Rules

Task

GEOS-11284 Promote community module "datadir catalog loader" to core

GEOS-11433 Upgrade maven-pmd-plugin to 3.23.0 and PMD 7.2.x

GEOS-11574 Bump org.eclipse.jetty:jetty-server from 9.4.52.v20230823 to 9.4.55.v20240627 in /src

GEOS-11590 Upgrade log4j to 2.24.1 and slf4j to 2.0.16

GEOS-11608 Update Bouncy Castle Crypto package from bcprov-jdk15on:1.69 to bcprov-jdk18on:1.79

GEOS-11609 Bump XStream from 1.4.20 to 1.4.21

GEOS-11610 Update Jetty from 9.4.55.v20240627 to 9.4.56.v20240826

GEOS-11631 Update MySQL driver to 9.1.0

GEOS-11641 Remove the abandoned community module webservice-test

GEOS-11642 Remove the gwc-distributed community module

GEOS-11650 Update dependencies for monitoring-kafka module

GEOS-11682 Add tests for WMS SLD XML request reader

GEOS-11685 Bump jetty.version from 9.4.56.v20240826 to 9.4.57.v20241219

GEOS-11729 Pass WCS 1.0 certification OGC CITE tests

GEOS-11730 Pass WCS 1.1 certification OGC CITE tests

GEOS-11731 Pass WFS 1.0 certification OGC CITE tests

GEOS-11732 Pass WFS 1.1 certification OGC CITE tests

GEOS-11733 Pass WFS 2.0 certification OGC CITE tests

GEOS-11734 Pass WMS 1.1 certification OGC CITE tests

GEOS-11735 Pass WMS 1.3 certification OGC CITE tests

GEOS-11736 Pass OGC API Features 1.0 certification OGC CITE tests

GEOS-11743 Upgrade Oracle JDBC driver (ojdbc) from 8 to 11

GEOS-11752 Pass GeoTIFF 1.1 certification OGC CITE tests

GEOS-11753 Pass GPKG 1.2 certification OGC CITE tests

GEOS-11754 Update to mapfish-print-v2 2.3.3

GEOS-11763 Update jai-ext to latest version (1.1.30)

GEOS-11770 Update to jai-ext 1.1.31

GEOS-11771 Update to Imageio-EXT 1.4.15

GEOS-11779 Pass WMTS 1.0 certification OGC CITE tests

GEOS-11780 Pass WCS 2.0 certification OGC CITE tests

GEOS-11781 Community cleanup fall 2024

GEOS-11791 Postpone controller logging after data validation

v2.26.3: GeoServer 2.26.3

Compare Source

Release notes

Maintenance release.

Security considerations

This release addresses a security vulnerability details of which will be published Monday 2 June 2025.

Bug

GEOS-10844 Exclude xml-apis from build

GEOS-11274 Cannot get a JSON legend with an external reference to a non published directory

GEOS-11620 Smart Data Loader plugin for GeoServer 2.26 produces a Mapping file data source definition and tries to establish a connection pool, but fails

GEOS-11664 Update REST security paths

GEOS-11684 GDAL no longer included in Docker image

GEOS-11689 IOUtilsTest should not ping an external web site

GEOS-11690 Bug in Externalize printing configuration folder

GEOS-11694 OpenID connect: allow caching authentication when an expiration is declared in the access token

GEOS-11696 AdminRequestCallback not loaded due to spring bean name conflict

GEOS-11700 GeoFence fails in recognizing some caller IP address

GEOS-11703 HEAD and OPTIONS requests on the REST API return a 403

GEOS-11707 Ogr2OgrWfsTest test failures with GDAL 3.10.1

GEOS-11710 Running Jiffle on coverage views causes the NODATA to be lost

GEOS-11711 Clickhouse DGGS stores fails to aggregate on dates

GEOS-11713 Concurrent LDAP builds fail on Jenkins

GEOS-11715 STAC sortby won't work with "properties." prefixed names

GEOS-11716 WFS POST requests fail if a layer is misconfigured

GEOS-11720 AttributeTypeInfoImpl doesn't quote names properly

GEOS-11722 Coverage view reader partially ignores multithreaded loading

GEOS-11725 Environment parameters resolving is not working on Smart data loader

GEOS-11738 Prevent error when oidc provider sends empty "&state="

GEOS-11739 Excessive memory usage for WMS KML output format

GEOS-11747 GeoServer does not throw JAI runtime exceptions

GEOS-11751 Symbolizer URL in GetLegendGraphic JSON Request is Broken

GEOS-11755 AbstractCatalogFacade leaves dangling references to temporary Catalog

GEOS-11756 GeoServerDataDirectory's default workspace location is wrong

GEOS-11760 Fix a potential OOM in the KML transformation

GEOS-11762 Feature Templates by feature type can not be listed via GeoServer Rest API

GEOS-11767 Regression: OL preview always uses JPEG format

GEOS-11769 Race conditions in LayerGroupHelper when the default catalog is not fully initialized

GEOS-11774 Logout with OAuth plugin will give error if logged in locally

GEOS-11776 CVE-2025-27505 Moderate

GEOS-11778 CVE-2025-30145 High

GEOS-11792 Default Service Capabilities shown on initial start with no workspaces

GEOS-11795 Incorrect clipping of point geometries in vector tiles

GEOS-11811 Features templating editor is unable to update and save the template body

GEOS-11818 PageUniqueProcess regression after [GEOT-7628]

Improvement

GEOS-11723 DGGS data store should be able to translate also intersection with multipolygon

GEOS-11757 Optimize ConfigurationPasswordEncryptionHelper to Cache Encrypted Fields by Store Type

GEOS-11761 Add support for the clip vendor parameter to WCS as well

GEOS-11766 Speed up CRS and store factory lookups during catalog loading

GEOS-11783 Longitudinal profile process should allow for input chaining

GEOS-11784 The longitudinal profile process should limit the number of points it can extract

GEOS-11785 The longitudinal profile process should respect cancellation

GEOS-11786 Longitudinal profile process: general performance improvements

GEOS-11793 WPS Read Value from Coverage Position

GEOS-11804 Disallow usage of var in GeoServer source code

New Feature

GEOS-11741 Enhancing Smart Data Loader with Override Rules

GEOS-11797 Add support for Jiffle expressions in coverage view setup

GEOS-11800 Implement GeoServer WPS SpatioTemporalZonalStatistics process

Task

GEOS-11682 Add tests for WMS SLD XML request reader

GEOS-11701 Update JAI-Ext to 1.1.28

GEOS-11743 Upgrade Oracle JDBC driver (ojdbc) from 8 to 11

GEOS-11763 Update jai-ext to latest version (1.1.30)

GEOS-11770 Update to jai-ext 1.1.31

GEOS-11771 Update to Imageio-EXT 1.4.15

GEOS-11791 Postpone controller logging after data validation

Full Changelog: geoserver/geoserver@2.26.2...2.26.3

v2.26.2: GeoServer 2.26.2

Compare Source

Release notes

Stable release of 2.26.x series.

Bug

GEOS-11494 WFS GetFeature request with a propertyname parameter fails when layer attributes are customized (removed or reordered)

GEOS-11606 geofence-server imports obsolete asm dep

GEOS-11611 When Extracting the WFS Service Name from the HTTP Request A Slash Before the Question Marks Causes Issues

GEOS-11630 REST API throws HTTP 500 When Security Metadata Has Null Attributes

GEOS-11636 Store panels won't always show feedback in target panels

GEOS-11637 DGGS min/max resolution settings stop working after restart

GEOS-11643 WCS input read limits can be fooled by geotiff reader

GEOS-11647 Restore "quiet on not found" configuration for REST in global settings

GEOS-11649 welcome page per-layer is not respecting global service enablement

GEOS-11672 GWC virtual services available with empty contents

GEOS-11680 Azure COG assembly lacks mandatory libraries, won't work

GEOS-11681 MapML raster GetFeatureInfo not working

GEOS-11686 Clickhouse DGGS stores cannot properly read dates

GEOS-11687 OGC API packages contain gs-web-core

GEOS-11691 Smart data loader accepts bigint and bigserial but not int8 postgresql type alias

Improvement

GEOS-11612 Add system property support for Proxy base URL -> use headers activation

GEOS-11615 Update to Imageio-EXT 1.4.14

GEOS-11635 Add support for opaque auth tokens in OpenID connect

GEOS-11683 MapML WMS Features Coordinate Precision Should be adjusted based on scale

New Feature

GEOS-11616 GSIP 229 - File system access isolation

GEOS-11644 Introducing the rest/security/acl/catalog/reload rest endpoint

Task

GEOS-11608 Update Bouncy Castle Crypto package from bcprov-jdk15on:1.69 to bcprov-jdk18on:1.79

GEOS-11631 Update MySQL driver to 9.1.0

GEOS-11650 Update dependencies for monitoring-kafka module

GEOS-11659 Apply Palantir Java format on GeoServer

GEOS-11671 Upgrade H3 dependency to 3.7.3

GEOS-11685 Bump jetty.version from 9.4.56.v20240826 to 9.4.57.v20241219

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.