GeoServer 2.28.6 release is now available with downloads (bin, war, windows), along with docs and extensions.

This is a maintenance release of GeoServer providing existing installations with minor updates and bug fixes. GeoServer 2.28.6 includes GeoTools 34.6 and GeoWebCache 1.28.6. GeoServer Cloud 2.28.6 is also available alongside today’s release.

Thanks to Peter Smythe (AfriGIS) for making this release, Andrea Aime (GeoSolutions) for testing, and Gabriel Roldan (Camptocamp) for the GeoServer Cloud release.

Security Considerations

This release addresses security vulnerabilities and is an important upgrade for production systems. Details about the fixes will be provided at the start of November.

See project security policy for more information on how security vulnerabilities are managed.

Release notes

New Feature:

  • GEOS-12180 Add support for multi-layer tile caching (coalescing) in GWC

Improvement:

  • GEOS-12099 GWC backup deadlock caused by DefaultTileLayerCatalog FileSystem
  • GEOS-12127 Fix flaky tests causing non-deterministic CI failures
  • GEOS-12139 GSIP 241 - GeoWebCache Security-Aware Tile Caching
  • GEOS-12154 Improve URL validation in SLD processing
  • GEOS-12183 CSS can trigger a bean loading circularity during startup
  • GEOS-12187 GeoJSON vector tiles are empty when the layer is meta-tiled
  • GEOS-12195 Refactoring of service resolution in Dispatcher
  • GEOS-12198 Support single-tenant Microsoft Entra ID authentication
  • GEOS-12199 Apply the catalog’s entity resolver consistently to stored query parsing
  • GEOS-12203 OIDC: let the identity provider assert the built-in “admin” account
  • GEOS-12205 Support GDAL 3.12+ new Raster Attribute Table data types
  • GEOS-12209 Allow admins to request all layers from CSW endpoints
  • GEOS-12211 WPS: clean up GDAL configuration parsing
  • GEOS-12218 The print extension ships with a snapshot jar
  • GEOS-12234 Report invalid connection settings when saving JDBC user/group, role and authentication services
  • GEOS-12235 Centralize remote IP resolution into a servlet filter
  • GEOS-12237 The style editor layer preview breaks with invalid chars in style names
  • GEOS-12238 CSW: Clearer exception in DirectDownload invalid requests
  • GEOS-12239 Read JDBC user and role property values as text.
  • GEOS-12240 Clearer stored query error messages when query id is too long

Bug:

  • GEOS-12065 WMS Layer REST PUT always returns 500 due to Collections.emptySet() in getRemoteStyleInfos()
  • GEOS-12100 Use SyncTaskExecutor to prevent deadlock in backup/restore tasklets
  • GEOS-12159 ReprojectingFeatureCollection throws ClassCastException reprojecting per-feature geometry between two Geographic 3D CRSs
  • GEOS-12193 “Encode coordinates measures” gives different geometries per GML version
  • GEOS-12206 WMTS Multidim operations (DescribeDomains/GetHistogram/…) do not honor datasecurity
  • GEOS-12213 Changing the workspace of a WMS/WMTS cascaded store does not update its layers
  • GEOS-12216 Datadir loader fails on cross-workspace resource references

Task:

  • GEOS-12136 IOTestUtils.createRandomDirectory() replacing mkdir call to more recent java.nio.files API
  • GEOS-12160 Add URL checks to wps-download-plugin

For the complete list see 2.28.6 release notes.

Community Updates

Community module development:

  • GEOS-12182 Support Azure SAS token authentication for COG stores
  • GEOS-12219 Remove the gwc-sqlite community module
  • GEOS-12221 WPS Longitudinal Profile: compute distances on the ground
  • GEOS-12222 JWT-Header: Improvements and documentation clarifications

Community modules are shared as source code to encourage collaboration. If a topic being explored is of interest to you, please contact the module developer to offer assistance.

About GeoServer 2.28 Series

Additional information on GeoServer 2.28 series:

Release notes: ( 2.28.6 | 2.28.5 | 2.28.4 | 2.28.3 | 2.28.2 | 2.28.1 | 2.28.0 )