Sunflower (R1 2025) Critical Service Patch #4 - Modules release deadline: Dec 11 | GA date: Dec 22

Sunflower (R1 2025) Critical Service Patch #4 - Modules release deadline: Dec 11 | GA date: Dec 22

mod release deadline Dec 11

Released at Dec 22 Dashboard

Approval Log

Tickets list

Modules list

Release tag

https://github.com/folio-org/platform-lsp/releases/tag/R1-2025-csp-4

Infrastructure

PostgreSQL

Bump the PostgreSQL minor version to fix security issues, for details see https://www.postgresql.org/support/security/ and/or https://docs.aws.amazon.com/AmazonRDS/latest/PostgreSQLReleaseNotes/postgresql-versions.html .

If using 16 upgrade to >= 16.11. FOLIO officially supports 16 only; however, there are no known incompatibilities with 17 and 18.

If using 17 upgrade to >= 17.7.

If using 18 upgrade to >= 18.1.

MinIO

If using MinIO upgrade to latest version to fix security vulnerabilities.

Upgrade to >= RELEASE.2025-10-15T17-29-55Z.

One container download option is https://hub.docker.com/r/cleanstart/minio.

Elasticsearch

If using Elasticseach upgrade to the latest patch version to fix security vulnerabilities, for details see https://www.elastic.co/blog/category/releases

Upgrade to >= 9.2.3, >= 9.1.9, or >= 8.19.9.

OpenSearch

If using OpenSearch upgrade to the latest patch version to fix security vulnerabilities, for details see https://docs.opensearch.org/latest/version-history/

Upgrade to >= 2.19.4, or >=3.3.2.

folio-kong

If using folio-kong upgrade folio-kong to latest version to fix security vulnerabilities: https://github.com/folio-org/folio-kong/releases

Upgrade to >= 3.9.1.

folio-keycloak

If using folio-keycloak upgrade folio-keycloak to latest version to fix security vulnerabilities: https://github.com/folio-org/folio-keycloak/releases

Upgrade to >= 26.4.3.

Okapi

If using Okapi upgrade Okapi to the latest patch version to fix security vulnerabilities, for details see https://github.com/folio-org/okapi/releases .

Upgrade to >= 7.0.1 (Trillium version, but also works with Sunflower), or >= 6.2.5 (Sunflower version).

Configuration

mod-roles-keycloak

Environment Variable

Default

Description

Links

Change

Environment Variable

Default

Description

Links

Change

KC_RETRY_MAX_ATTEMPTS

3

Control how many times a Keycloak request should be retried upon failure before giving up

https://folio-org.atlassian.net/browse/MODROLESKC-340

New Env. Var.

KC_RETRY_BACKOFF_DELAY_MS

10000

Specify how long the application should wait before retrying a failed operation related to Keycloak integration

https://folio-org.atlassian.net/browse/MODROLESKC-340

New Env. Var.