Hibernate Validator 9.1.2.Final released

We are pleased to announce the release of Hibernate Validator 9.1: 9.1.2.Final.

You can find the full list of 9.1.2.Final changes here.

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.

For additional details, see:

• the release page
• the Migration Guide
• the Getting started
• the Reference Guide
• the API docs

Visit the website for details on getting in touch with us.

• update Node.js toolchain version to 24.18.0 (#17742) #17742 (Diego Molina)

• 0a3d94a: [build] Automated Browser Version Update (#17744) (Selenium CI Bot) #17744
• 740b692: [java] Tighten JSON number lexer to match RFC 8259 (#17739) (Simon Mavi Stewart) #17739
• 90cbf90: [java] Enforce commas between JSON elements; accept trailing commas (#17738) (Simon Mavi Stewart) #17738

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.398...7.21.0-rc.399

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.397...7.21.0-rc.398

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.396...7.21.0-rc.397

• 0779019: [build] Automated Browser Version Update (#17730) (Selenium CI Bot) #17730
• 3e8e318: [java] Fix JSON parser EOF sentinel collision with U+FFFF (#17737) (Simon Mavi Stewart) #17737
• d037099: [java] Reject unescaped control characters in JSON strings (#17740) (Simon Mavi Stewart) #17740
• 79f3706: [rust] Support multiple names for Firefox binary in Linux (#17695) (Boni García) #17732