You are viewing the documentation for Blueriq 16. Documentation for other versions is available in our documentation directory.

1. Documentation

Documentation on the new features and improvements of this release is linked in the respective topics.

2. Upgrade Instructions

There are no specific upgrade instructions for this release.

As a best practice

  • backup your repository
  • backup your database before running scripts
  • backup your spring.config.additional-location directory ([Blueriq installation directory]\Runtime)
  • backup any config files you have altered under [Blueriq installation directory]\Services

before you start the upgrade.

3. Artifacts

The Blueriq artifacts are available under name: 16.6.1.1809

This release includes these versions of Blueriq components with a separate life cycle:

Component

Version

Customer Data Service 4.3.5
DCM Lists Service 3.0.12
Material Theme 1.2.2
Development tools frontend 1.5.6
DCM Maintenance App 3.0.12
Audit Consumer 0.3.4
DCM Dashboard Service 0.3.0
Gateway Service 0.2.4
Document Renderer 1.1.2

4. Libraries

In this release, the set of third party libraries that is used by Blueriq was updated. When your installation of Blueriq includes custom components (artifacts that do not ship with Blueriq, such as proprietary plugins), those components should be tested for compatibility with these changes.

ArtifactId

GroupId

License

Version in 16.6

Version in 16.6.1

byte-buddy

net.bytebuddy

Apache License 2.0

1.14.9

1.14.10

jakarta.xml.soap-api

jakarta.xml.soap

Eclipse Public License - v 1.0

3.0.0

3.0.1

jakarta.xml.ws-api

jakarta.xml.ws

Eclipse Public License - v 1.0

4.0.0

4.0.1

jaxb-core

org.glassfish.jaxb

Eclipse Public License - v 1.0

4.0.3

4.0.4

jaxb-runtime

org.glassfish.jaxb

Eclipse Public License - v 1.0

4.0.3

4.0.4

lettuce-core

io.lettuce

Apache License 2.0

6.2.6.RELEASE

6.2.7.RELEASE

logback-classic

ch.qos.logback

Eclipse Public License - v 1.0

1.4.11

1.4.14

logback-core

ch.qos.logback

Eclipse Public License - v 1.0

1.4.11

1.4.14

micrometer-commons

io.micrometer

Apache License 2.0

1.11.5

1.11.6

micrometer-core

io.micrometer

Apache License 2.0

1.11.5

1.11.6

micrometer-observation

io.micrometer

Apache License 2.0

1.11.5

1.11.6

micrometer-tracing

io.micrometer

Apache License 2.0

1.1.6

1.1.7

micrometer-tracing-bridge-brave

io.micrometer

Apache License 2.0

1.1.6

1.1.7

saaj-impl

com.sun.xml.messaging.saaj

Eclipse Public License - v 1.0

3.0.1

3.0.3

spring-aop

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-aspects

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-beans

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-boot

org.springframework.boot

Apache License 2.0

3.1.5

3.1.6

spring-boot-actuator

org.springframework.boot

Apache License 2.0

3.1.5

3.1.6

spring-boot-actuator-autoconfigure

org.springframework.boot

Apache License 2.0

3.1.5

3.1.6

spring-boot-autoconfigure

org.springframework.boot

Apache License 2.0

3.1.5

3.1.6

spring-boot-configuration-processor

org.springframework.boot

Apache License 2.0

3.1.5

3.1.6

spring-boot-starter

org.springframework.boot

Apache License 2.0

3.1.5

3.1.6

spring-boot-starter-actuator

org.springframework.boot

Apache License 2.0

3.1.5

3.1.6

spring-boot-starter-logging

org.springframework.boot

Apache License 2.0

3.1.5

3.1.6

spring-boot-starter-validation

org.springframework.boot

Apache License 2.0

3.1.5

3.1.6

spring-context

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-context-support

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-core

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-data-commons

org.springframework.data

Apache License 2.0

3.1.5

3.1.6

spring-data-jpa

org.springframework.data

Apache License 2.0

3.1.5

3.1.6

spring-data-keyvalue

org.springframework.data

Apache License 2.0

3.1.5

3.1.6

spring-data-mongodb

org.springframework.data

Apache License 2.0

4.1.5

4.1.6

spring-data-redis

org.springframework.data

Apache License 2.0

3.1.5

3.1.6

spring-expression

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-hateoas

org.springframework.hateoas

Apache License 2.0

2.1.2

2.1.3

spring-jcl

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-jdbc

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-messaging

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-orm

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-oxm

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-security-config

org.springframework.security

Apache License 2.0

6.1.4

6.1.5

spring-security-core

org.springframework.security

Apache License 2.0

6.1.4

6.1.5

spring-security-crypto

org.springframework.security

Apache License 2.0

6.1.4

6.1.5

spring-security-ldap

org.springframework.security

Apache License 2.0

6.1.4

6.1.5

spring-security-oauth2-client

org.springframework.security

Apache License 2.0

6.1.4

6.1.5

spring-security-oauth2-core

org.springframework.security

Apache License 2.0

6.1.4

6.1.5

spring-security-oauth2-jose

org.springframework.security

Apache License 2.0

6.1.4

6.1.5

spring-security-oauth2-resource-server

org.springframework.security

Apache License 2.0

6.1.4

6.1.5

spring-security-web

org.springframework.security

Apache License 2.0

6.1.4

6.1.5

spring-tx

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-web

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-webflux

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-webmvc

org.springframework

Apache License 2.0

6.0.13

6.0.14

spring-ws-core

org.springframework.ws

Apache License 2.0

4.0.6

4.0.8

spring-ws-security

org.springframework.ws

Apache License 2.0

4.0.6

4.0.8

spring-xml

org.springframework.ws

Apache License 2.0

4.0.6

4.0.8

txw2

org.glassfish.jaxb

Eclipse Public License - v 1.0

4.0.3

4.0.4

5. Retirement announcement

There are no specific retirement announcements.

For a full list of deprecated features, go to Deprecated features.

6. Bug fixes

Identifier

Component

Issue

Solution

BQ-21733

 

CVE-2023-6378 has been detected on the logback-core dependency.

Updated logback-core to the latest version.

BQ-21672

Audit Consumer, Customer Data Service, DCM Dashboard, DCM Lists Service, Gateway, Maintenance App

CVE-2023-34055 was detected in Spring boot Actuator version 3.1.5 and lower

Fixed by upgrading to the latest version of Spring boot

BQ-21671

 

CVE-2023-34055 has been reported on Spring Boot. Also, CVE-2023-34053 has been reported on Spring Boot 3.x, which is used by R16.

For R15 & R16, Spring Boot has been upgraded to the latest version. For lower versions, there is no fix available since the underlying Spring Boot version is no longer supported. Upgrade to a newer Blueriq version. In the meantime, have a look at the temporary workaround described in [

https://spring.io/security/cve-2023-34055

].

CSD-5022

Encore

Validation warnings for an ERD may be shown as error in the ERD editor.

The ERD editor now shows warnings as warnings instead of errors.

BQ-21553

 

When you use the reindexing functionality on the case engine while the actuator profile is active, indexing fails.

Reindexing requires loading the application metamodel, which conflicted with the actuators. By loading the metamodel differently, this conflict no longer exists so reindexing works normally with the actuators turned on.

CSD-4909

Encore

Global elements with the same name across multiple projects would not be reported as error in some cases, depending on the project structure.

Duplicate globals are now reported on the list of project references of a project.

7. Known issues

For an overview of known issue please refer to: Known issues