/
Sunflower (R1 2025) Critical Service Patch #6 - Modules release deadline: Feb 20 | GA date: Apr 9

Sunflower (R1 2025) Critical Service Patch #6 - Modules release deadline: Feb 20 | GA date: Apr 9

mod release deadline FEB 20

Released at apr 9 Dashboard

Approval Log

Tickets list

Tickets List Breakdown by Areas (expand each section to see list)

 

 

 

Modules list

Release tags

https://github.com/folio-org/platform-lsp/releases/tag/R1-2025-csp-6

https://github.com/folio-org/platform-complete/releases/tag/R1-2025-okapi-csp-6

Infrastructure

PostgreSQL

Bump the PostgreSQL minor version to fix security issues, for details see https://www.postgresql.org/support/security/ and/or https://docs.aws.amazon.com/AmazonRDS/latest/PostgreSQLReleaseNotes/postgresql-versions.html .

If using 16 upgrade to >= 16.12. FOLIO officially supports 16 only; however, there are no known incompatibilities with 17 and 18.

If using 17 upgrade to >= 17.8.

If using 18 upgrade to >= 18.2.

MinIO

If using MinIO upgrade to latest version to fix security vulnerabilities.

Upgrade to >= RELEASE.2025-10-15T17-29-55Z.

One container download option is https://hub.docker.com/r/cleanstart/minio .

Elasticsearch

If using Elasticseach upgrade to the latest patch version to fix security vulnerabilities, for details see https://www.elastic.co/blog/category/releases

Upgrade to >= 8.19.13.

OpenSearch

If using OpenSearch upgrade to the latest patch version to fix security vulnerabilities, for details see https://docs.opensearch.org/latest/version-history/

Upgrade to >= 2.19.5.

folio-kong

If using folio-kong upgrade folio-kong to latest version to fix security vulnerabilities: https://github.com/folio-org/folio-kong/releases

Upgrade to >= 3.9.2.

folio-keycloak

If using folio-keycloak upgrade folio-keycloak to latest version to fix security vulnerabilities: https://github.com/folio-org/folio-keycloak/releases

Upgrade to >= 26.5.1.

Okapi

If using Okapi upgrade Okapi to the latest patch version to fix security vulnerabilities, for details see https://github.com/folio-org/okapi/releases .

Upgrade to >= 7.0.2 (Trillium version, but also works with Sunflower), or >= 6.2.6 (Sunflower version).

Configuration

CSP

Functional Area

Change or Additions

Considerations

Action timing,
Action required

Comments

Contact person,
Related JIRAs

CSP

Functional Area

Change or Additions

Considerations

Action timing,
Action required

Comments

Contact person,
Related JIRAs

S CSP5

folio-module-sidecar

TOKEN_CACHE_REFRESH_PRIOR_EXPIRATION

New Environment Variable

 

Default value: 60

Specifies the amount of seconds for a cache entry invalidation prior to the token expiration.

 

https://folio-org.atlassian.net/browse/MODSIDECAR-171

S CSP5

folio-module-sidecar

TOKEN_CACHE_RETRIEVAL_TIMEOUT

New Environment Variable

 

Default value: 30

Timeout in seconds for token retrieval operations from Keycloak during cache loading.

https://folio-org.atlassian.net/browse/MODSIDECAR-171

S CSP5

mod-scheduler

Adjustments to the cache configuration were made in the module’s application.yml file which is baked into the docker image. These shouldn’t need to be adjusted or overridden. See https://folio-org.atlassian.net/browse/MODSCHED-50

 

 

image-20260114-215436.png

 

S CSP5

edge-patron (LoC only)

Update the edge-patron “KC_URL” environment variable to link it with the Locate Keycloak URL instead of the Folio cluster Keycloak URL. This change is necessary for the VIP patron flow in the secure tenant to successfully parse the JWT token for users stored in Locate Keycloak. For example, for the sebftls cluster, set the following value:
 {"name": "KC_URL","value": "https://keycloak-ltihls.int.locate.ebsco.com"}