Sunflower (R1 2025) Critical Service Patch #4 - Modules release deadline: Dec 11 | GA date: Dec 22
- 1 Approval Log
- 2 Tickets list
- 3 Modules list
- 4 Release tag
- 5 Infrastructure
- 5.1 PostgreSQL
- 5.2 MinIO
- 5.3 Elasticsearch
- 5.4 OpenSearch
- 5.5 folio-kong
- 5.6 folio-keycloak
- 5.7 Okapi
- 6 Configuration
mod release deadline Dec 11
Released at Dec 22 Dashboard
Approval Log
Tickets list
Modules list
Release tag
https://github.com/folio-org/platform-lsp/releases/tag/R1-2025-csp-4
Infrastructure
PostgreSQL
Bump the PostgreSQL minor version to fix security issues, for details see https://www.postgresql.org/support/security/ and/or https://docs.aws.amazon.com/AmazonRDS/latest/PostgreSQLReleaseNotes/postgresql-versions.html .
If using 16 upgrade to >= 16.11. FOLIO officially supports 16 only; however, there are no known incompatibilities with 17 and 18.
If using 17 upgrade to >= 17.7.
If using 18 upgrade to >= 18.1.
MinIO
If using MinIO upgrade to latest version to fix security vulnerabilities.
Upgrade to >= RELEASE.2025-10-15T17-29-55Z.
One container download option is https://hub.docker.com/r/cleanstart/minio.
Elasticsearch
If using Elasticseach upgrade to the latest patch version to fix security vulnerabilities, for details see https://www.elastic.co/blog/category/releases
Upgrade to >= 9.2.3, >= 9.1.9, or >= 8.19.9.
OpenSearch
If using OpenSearch upgrade to the latest patch version to fix security vulnerabilities, for details see https://docs.opensearch.org/latest/version-history/
Upgrade to >= 2.19.4, or >=3.3.2.
folio-kong
If using folio-kong upgrade folio-kong to latest version to fix security vulnerabilities: https://github.com/folio-org/folio-kong/releases
Upgrade to >= 3.9.1.
folio-keycloak
If using folio-keycloak upgrade folio-keycloak to latest version to fix security vulnerabilities: https://github.com/folio-org/folio-keycloak/releases
Upgrade to >= 26.4.3.
Okapi
If using Okapi upgrade Okapi to the latest patch version to fix security vulnerabilities, for details see https://github.com/folio-org/okapi/releases .
Upgrade to >= 7.0.1 (Trillium version, but also works with Sunflower), or >= 6.2.5 (Sunflower version).
Configuration
mod-roles-keycloak
Environment Variable | Default | Description | Links | Change |
|---|---|---|---|---|
KC_RETRY_MAX_ATTEMPTS | 3 | Control how many times a Keycloak request should be retried upon failure before giving up | New Env. Var. | |
KC_RETRY_BACKOFF_DELAY_MS | 10000 | Specify how long the application should wait before retrying a failed operation related to Keycloak integration | New Env. Var. |