v2.5.10

What's Changed

• Exclude TLS key password from chaincode server log by @bestbeforetoday in #547
• Update Gradle to 9.5.1 by @bestbeforetoday in #549

Full Changelog: v2.5.9...v2.5.10

v2.5.9

What's Changed

• Use Maven 3.9.15 in hyperledger/fabric-javaenv Docker image by @bestbeforetoday in #543
• Use Gradle 9.5.0 in hyperledger/fabric-javaenv Docker image by @bestbeforetoday in #545
• Update Bouncy Castle to 1.84 to address CVE-2026-5588 and CVE-2026-5598 by @bestbeforetoday in #545

New Contributors

• @SAY-5 made their first contribution in #541

Full Changelog: v2.5.8...v2.5.9

v2.5.8

What's Changed

• Use Java 25 and Gradle 9 in hyperledger/fabric-javaenv Docker image by @bestbeforetoday in #471
• Update Gradle to 9.3.0 and Maven to 3.9.12 by @bestbeforetoday in #505

Migration considerations

The hyperledger/fabric-javaenv Docker image version 2.5.8 (and later) now uses a Java 25 runtime. Java smart contracts deployed to containers based on that image (which is the case with the Fabric v2.5 and v3.0 default chaincode builder) must now use Gradle wrappers at version 9.1.0 or later, since that version of Gradle added support for execution using Java 25.

fabric-chaincode-shim and the hyperledger/fabric-javaenv Docker image continue to be compatible with chaincode compiled for Java 11 (or later).

New Contributors

• @jwagantall made their first contribution in #469

Full Changelog: v2.5.7...v2.5.8

v2.5.7

What's Changed

• Update grpc-netty-shaded to 1.75.0 to address CVE-2025-55163.
• Update Gradle to 8.14.3 and Maven to 3.9.11 in Docker image by @bestbeforetoday in #454

New Contributors

• @Thomas-Leung made their first contribution in #382

Full Changelog: v2.5.6...v2.5.7

v2.5.6

What's Changed

• Update dependencies by @bestbeforetoday in #379

Migration considerations

The version of the Fabric protocol buffer Java bindings used in this release require version 4 of the Java protocol buffers package. If your smart contract has a dependency on org.hyperledger.fabric:fabric-protos, it must be at version 0.3.7 or higher. If your smart contract has a dependency on Google protocol buffer libraries, such as com.google.protobuf:protobuf-java, they must be at version 4. Where your only dependency on these libraries is as a transitive dependency of the Fabric chaincode libraries, no action should be required.

New Contributors

• @MuthuSundaravadivel made their first contribution in #375

Full Changelog: v2.5.5...v2.5.6

v2.5.5

What's Changed

• Use Java 21 runtime in hyperledger/fabric-javaenv Docker image by @bestbeforetoday in #364

Migration considerations

The hyperledger/fabric-javaenv Docker image version 2.5.5 (and later) now uses a Java 21 runtime. Java smart contracts deployed to containers based on that image (which is the case with the Fabric v2.5 and v3.0 default chaincode builder) must now use Gradle wrappers at version 8.5 or later, since that version of Gradle added support for execution using Java 21.

The fabric-chaincode-shim library is now compiled with Java 11 as the bytecode target. While Java 11 has been documented as the minimum supported Java level since v2.1, Java 8 continued to be used as the compile target until v2.5.4, meaning that chaincode compiled for Java 8 continued to work. Chaincode must now be compiled for Java 11 (or later) for compatibility with fabric-chaincode-shim.

Full Changelog: v2.5.4...v2.5.5

v2.5.4

What's Changed

• Update dependencies to address CVE-2024-7254 by @bestbeforetoday in #353

Full Changelog: v2.5.3...v2.5.4

v2.5.3

What's Changed

• Restore Java 8 compatibility by @bestbeforetoday in #349

Full Changelog: v2.5.2...v2.5.3

v2.5.2

What's Changed

• Upgrade Gradle version by @bestbeforetoday in #330
• Address Joda-Time CVE-2024-23080. by @benjsmi in #336
• Update dependencies to address CVE-2024-30171 by @benjsmi in #339
• Update Docker base image version by @bestbeforetoday in #343

Full Changelog: v2.5.1...v2.5.2

v2.5.1

What's Changed

• Update dependencies to address CVE-2020-15522, CVE-2023-32732, CVE-2022-3171, CVE-2022-3509, CVE-2022-3510, CVE-2022-45688 by @bestbeforetoday in #310
• Update dependencies to address CVE-2022-25647, CVE-2023-2976, CVE-2020-8908 by @bestbeforetoday in #314
• Upgrade logback to latest v1.3.x. org.json to latest build. by @benjsmi in #315
• Move to org.json:json 20231013. by @benjsmi in #316
• Move to Gradle v7.6.3 for all wrappers. by @benjsmi in #317
• Update dependencies to address CVE-2023-3635 by @bestbeforetoday in #319
• Address CVE-2023-6481 by moving to logback v1.3.14. by @benjsmi in #322
• Update Docker image Java, Gradle and Maven versions by @bestbeforetoday in #323

New Contributors

• @benjsmi made their first contribution in #315

Full Changelog: v2.5.0...v2.5.1