This is a dependency maintenance release for GraphQL Java 24.x to resolve security-scanner findings for CVE-2026-102554 in the bundled Guava dependency.

GraphQL Java's own request processing is not affected by this CVE. The vulnerability concerns native Java object deserialization, which GraphQL Java does not use to parse, validate, or execute GraphQL documents.

The release upgrades bundled Guava from 32.1.2-jre to 33.8.0-jre to remove the affected dependency version from the GraphQL Java JAR and address these scanner findings.

• #4553 Upgrade Guava to 33.8.0-jre for CVE-2026-102554.

Full Changelog: v24.4...v24.5

This is a dependency maintenance release for GraphQL Java 25.x to resolve security-scanner findings for CVE-2026-102554 in the bundled Guava dependency.

GraphQL Java's own request processing is not affected by this CVE. The vulnerability concerns native Java object deserialization, which GraphQL Java does not use to parse, validate, or execute GraphQL documents.

The release upgrades bundled Guava from 32.1.2-jre to 33.8.0-jre to remove the affected dependency version from the GraphQL Java JAR and address these scanner findings.

• #4554 Upgrade Guava to 33.8.0-jre for CVE-2026-102554.

Full Changelog: v25.1...v25.2

This is a dependency maintenance release for GraphQL Java 26.x to resolve security-scanner findings for CVE-2026-102554 in the bundled Guava dependency.

GraphQL Java's own request processing is not affected by this CVE. The vulnerability concerns native Java object deserialization, which GraphQL Java does not use to parse, validate, or execute GraphQL documents.

The release upgrades bundled Guava from 32.1.2-jre to 33.8.0-jre to remove the affected dependency version from the GraphQL Java JAR and address these scanner findings.

Also updates the shaded-annotation cleanup for the newer Guava, removing references to an annotation type that is not included in the published JAR.

• #4555 Upgrade Guava to 33.8.0-jre for CVE-2026-102554.

Full Changelog: v26.1...v26.2

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.814...7.21.0-rc.816

• [rb] download the Server jar with Selenium Manager instead of the GitHub API by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/18245
• [java] Escape quotes and backslashes in name locators sent to the driver by @Mochxd in https://github.com/SeleniumHQ/selenium/pull/18151
• [dotnet] [test] Unify assembly names for testing by @nvborisenko in https://github.com/SeleniumHQ/selenium/pull/18261
• [rb] Allocate websocket command ids atomically by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18262
• [py] Add WebDriver cookie type annotations by @adamtheturtle in https://github.com/SeleniumHQ/selenium/pull/17537
• [py] Deprecate driver.webextension by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18265
• [py] Return a protocol-neutral driver.script by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18264
• [build] run the Redis-backed Grid suites from the Java smoke matrix instead of a separate workflow by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/18267
• fix(#18263): keep Selenium Manager stderr empty in --output json by @macoladik in https://github.com/SeleniumHQ/selenium/pull/18268
• [js] hold BiDi numbers to their declared ranges by @saiyam-jain-dev in https://github.com/SeleniumHQ/selenium/pull/18272
• [build] Add weekly CI check for Plausible pageview usage by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/17900
• [java] hold generated BiDi numbers to their declared ranges by @yashp676 in https://github.com/SeleniumHQ/selenium/pull/18266
• [build] use the EngFlow cache for the Java GHA smoke test job by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/18276
• [py] Support relative locators from WebElement and ShadowRoot by @gjreddy in https://github.com/SeleniumHQ/selenium/pull/18241
• [js][py][rb][java][dotnet] add the accessibility snapshot atom and the binding methods by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18232
• [grid] Spread new sessions across Nodes again by @diemol in https://github.com/SeleniumHQ/selenium/pull/18281
• [js] Add @selenium/mcp, an MCP server for coding agents (v0) by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18280
• [js] MCP v1: drag, file upload, resize, network requests, evaluate by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18284
• [rust] Fix Firefox and Electron download URLs on Windows arm64 by @dennisameling in https://github.com/SeleniumHQ/selenium/pull/18285
• [java] Escape frame ids that are not valid CSS identifiers by @Mochxd in https://github.com/SeleniumHQ/selenium/pull/18274
• [py][rb][js] Fix tests failing in the nightly CI run by @diemol in https://github.com/SeleniumHQ/selenium/pull/18289
• [js] Move selenium-mcp to the SeleniumHQ/mcp repo by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18290
• [java] Log remote-client diagnostics at a fixed FINE level by @MohabMohie in https://github.com/SeleniumHQ/selenium/pull/18254
• [rb] Allow to set environment variables when staring a browser by @y-yagi in https://github.com/SeleniumHQ/selenium/pull/17395
• [py][rb] Fix tests failing after the browser version update by @diemol in https://github.com/SeleniumHQ/selenium/pull/18294
• [js] Publish @selenium/manager in releases by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18296
• [rust] Update Rust dependencies by @bonigarcia in https://github.com/SeleniumHQ/selenium/pull/18297
• [py] narrow pytest.raises(Exception) in bidi tests by @saiyam-jain-dev in https://github.com/SeleniumHQ/selenium/pull/18286
• [java] stop reading and writing Response.status internally by @yashp676 in https://github.com/SeleniumHQ/selenium/pull/18171
• [rust] Restrict Selenium Manager stats to vetted values before sending to Plausible by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/17892
• [java] Speed up JSON serialisation and parsing by @shs96c in https://github.com/SeleniumHQ/selenium/pull/17750
• [py] Fix Select escaping of trailing double quotes by @Mohsintl in https://github.com/SeleniumHQ/selenium/pull/18292
• [java] remove Response.status by @yashp676 in https://github.com/SeleniumHQ/selenium/pull/18172
• [js] Snapshot accessibility in Classic sessions too by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18308
• [py] Snapshot accessibility in Classic sessions too by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18307

• @macoladik made their first contribution in https://github.com/SeleniumHQ/selenium/pull/18268
• @Mohsintl made their first contribution in https://github.com/SeleniumHQ/selenium/pull/18292

Full Changelog: https://github.com/SeleniumHQ/selenium/compare/selenium-4.52.0...nightly

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.813...7.21.0-rc.814

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.812...7.21.0-rc.813

Release note 1.5.0:

1. 机器人API添加设置用户设置功能。
2. 添加流式消息取消消息。
3. 添加一些预定义消息。
4. 机器人API添加获取一条消息的功能。
5. Server API添加搜索用户和搜索群组的接口。

附件的版本有3种格式，分别是Java通用版本、Deb格式安装包和Rpm格式安装包包，可以根据平台或者自己的习惯下载其中一种软件包。另外在Github也可以下载。也可以下载我们网站上的最新版本，通用Java包，deb格式安装包和rpm格式安装包。 *** 0.42 版本增加了群成员数限制，默认为2000。如果您想修改默认值，可以在升级版本之后，修改t_setting表，把默认的大小改为您期望的。另外修改t_group表，把已经存在的群组max_member_count改成您期望的，然后重启。*** *** 0.46和0.47版本升级到0.48及以后版本时，可能会提示flyway migrate 38错误，请执行 修复脚本 进行修复。0.46和0.47版本之外的版本不会出现此问题。*** *** 0.50版本添加了是否允许客户端发送群操作通知的配置。如果您在客户端自定义群通知，需要在服务器端配置允许，没有使用自定义群操作通知的不受影响。*** *** 从0.54之前版本升级到0.54及以后版本时，会提示flyway migrate错误。因为0.54版本删除了sql脚本中默认敏感词的内容，flyway checksum失败。请执行update flyway_schema_history set checksum = 0 where script = 'V17__add_default_sensitive_word.sql';来修复。*** *** 从0.59之前的版本升级到之后的版本执行数据库升级时间比较长，请耐心等待提示运行成功，避免中途中断。 *** *** 0.62/0.63 版本有严重的问题，请使用0.64及以后版本，或者0.61版。 *** *** 从0.68 版本起添加了pc在线是否默认手机接收推送的开关，默认为开，与以前版本作用相反，请注意兼容（可以关掉与之前保持一致或者升级客户端） *** *** 从0.78 版本起把MySQL数据库中关键字都改为大小写敏感，另外生成id的方法也做了改变，只生成小写的id，避免出现id重复的问题，建议所有客户都升级 *** *** 从0.79 版本起把log4j升级到log4j2，因为log4j已经不再维护而且还有已知的漏洞，建议所有客户都升级，升级时注意更新log4j2的配置文件 *** *** 0.97版本更改了启动脚本wildfirechat.sh，如果是升级服务，请注意更新启动脚本。*** *** 1.3.8版本添加了server api发送消息的限制，限制消息体最大内容不能超过64KB，如果升级请注意业务系统发送消息大小。***

Release v4.11.5

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.811...7.21.0-rc.812