Approval Log

key	summary	priority	CSP Request Details	CSP Approved

Loading...

Refresh

Tickets list

key	summary	type	assignee	priority	resolution	reporter	Development Team

Loading...

Refresh

Breaking changes

N/A

Required manual migration

Run this SQL, otherwise mod-agreements' migration might fail:

DO $$
  DECLARE
    record RECORD;
  BEGIN
    FOR record IN
      SELECT schemaname, tablename FROM pg_tables WHERE schemaname LIKE '%_mod_agreements' AND tablename = 'tenant_changelog_lock'
    LOOP
      EXECUTE format('DELETE FROM %I.%I', record.schemaname, record.tablename);
    END LOOP;
    DROP SCHEMA IF EXISTS mod_agreements__system CASCADE;
  END;
$$ LANGUAGE plpgsql;

yarn.lock

Before building the Stripes front-end delete the yarn.lock file to get security fixes for all packages. One example is lodash (https://folio-org.atlassian.net/browse/SECURITY-530 = https://folio-org.atlassian.net/browse/EUREKA-883 ).

Modules list

Release tag

https://github.com/folio-org/platform-complete/releases/tag/R2-2024-csp-9

Infrastructure

PostgreSQL

Bump the PostgreSQL minor version to fix security issues, for details see https://www.postgresql.org/support/security/ and/or https://docs.aws.amazon.com/AmazonRDS/latest/PostgreSQLReleaseNotes/postgresql-versions.html .

If using 16 upgrade to >= 16.14. FOLIO officially supports 16 only; however, there are no known incompatibilities with 17 and 18.

If using 17 upgrade to >= 17.10.

If using 18 upgrade to >= 18.4.

MinIO

If using MinIO upgrade to latest version to fix security vulnerabilities.

Upgrade to >= RELEASE.2025-10-15T17-29-55Z.

One container download option is https://hub.docker.com/r/cleanstart/minio .

Elasticsearch

If using Elasticseach upgrade to the latest patch version to fix security vulnerabilities, for details see https://www.elastic.co/blog/category/releases

Upgrade to >= 9.4.2, or >= 9.3.5, or >= 8.19.16.

OpenSearch

If using OpenSearch upgrade to the latest patch version to fix security vulnerabilities, for details see https://docs.opensearch.org/latest/version-history/

Upgrade to >= 2.19.5, or >=3.7.0.

Okapi

Upgrade Okapi to the latest patch version to fix security vulnerabilities, for details see https://github.com/folio-org/okapi/releases.

Upgrade to

>= 7.0.4 (Trillium version, but also works with Ramsons),
>= 6.2.7 (Sunflower version, but also works with Ramsons).

The Ramsons branch is no longer maintained (latest Ramsons version is 6.1.5 released 2026-01-05).

Ramsons (R2 2024) Critical Service Patch #9 (OKAPI) | GA date: Jun 11