For upgrade instructions, please refer to APIM Migration Guide
Important: If you plan to skip versions when you upgrade, ensure that you read the version-specific upgrade notes for each intermediate version. You may be required to perform manual actions as part of the upgrade.
Gateway
-
We have added a new property that enables you to configure the worker pool size of the HTTP handlers in Bridge mode. To do so, set the desired size using the
services.bridge.http.workerPoolSize
property (the default value is20
) and ensure that it is set on the Gateway Bridge Server side.
Console
-
Analytics - Filters for status codes do not work for the Platform Dashboard for the Line Chart (Response status) #8325
-
Analytics - Label issue in the dashboards #8327
-
Analytics - Top APIs and Top Applications links are not working #8328
-
Navigation - The right click menu links does not work properly. #8326
-
Organisation Settings - Wrong confirmation message displayed when activating/deactivating an identity provider #7774
-
NullPointerException when deleting a group #8323
-
Unable to use prefix for mongodb collections when running with Java 17 #7918
Gateway
-
JDBC - Quota and RateLimit Platform Policies do not work as expected. X-Quota-Reset header returns -1 #7975
-
File reporter headers format feature #8305
-
Websocket connection error when reaching a non secure endpoint #8228
-
Websocket subprotocol not forwarded to the endpoint #8324
-
Improve plan selection based on subscription #8165
General
Policy
-
[openid-connect-userinfo] Gateway never responds in case of invalid oauth token #6883
Portal
-
404 on trendings page #8341
Console
General
Management
-
Update a role API requires an
id
field when this is not necessary/required based on the doc #7661
Policies
APIM
APIM-EL
-
ExpesionLanguage query used to work but it no longer does in newer versions. #7754
Gateway
General
Management
-
Service discovery Healthcheck isn’t working #7533
Policy
-
Cache Policy cache not cleared/refreshed after Time to Live #7740
Reporter
-
File reporter log files are missing headers details #7741
Console
-
BestMatch Flow mode does not work for Platform flow #7625
Gateway
-
Service Discovery error when configured with more than one API #7821
General
-
Update Logback library #7837
Management
Repository
-
[JDBC] Api disappears for all users including org admin when group default role is changed to non primary_owner #7428
Gateway
-
Filter disabled flows and flows steps #7794
-
Hazelcast is referring to a queue but get a topic #7681
-
Headers are not forwarded to websocket upstream #7750
-
OOM when heartbeat event can’t be delivered #7806
-
OOM in case of Connect timeouts in health-check #7709
-
Max logging size must accept smaller size than MB #7761
-
ElasticSearch indexing data is getting out of bounds on Server Sent Event APIs (api-response-time) #7094
Repositories
-
Switch implementation to IO thread #7682
APIM
Console
General
Management
-
Auto fetch of documentation is not working #7589
-
Dynamic properties API out of sync #7269
-
When dynamic properties are triggered to update, the API status change to out of sync and the front ask for deploy. #5245
-
[RepositoryJDBC] Error when trying to create flow with policy on organization level #7399
Portal
-
How to disable metrics on the APIM Portal? #7231
Console
Gateway
General
-
Error when importing an API without logging on an env with
Logging audit events
activated #7612
Management
-
Allow to use System Proxy on Generic Oauth2 resource as already present for AM resource #7258
-
Can’t update a dynamic dictionary #6043
-
Cannot import APi with primary owner of type group and empty members list in group mode #6808
-
Dynamic Property does not get updated after it was created #7684
-
Error while deleting a user #7613
-
Fix EnvironmentNotFoundException for task #7635
-
Issue when deleting the properties of a dictionary #6996
-
Logging condition with timestamp returns status 500 #7367
-
Wrong log audit date for refresh dictionary events #6045
Portal
General
Management
General
-
Merge 3.10.13 #7444
APIM
-
Content not read from JKS and PKCS12 Certificates(Binary Content) in Group Endpoint Configuration #7405
Data-masking-policy
-
Data masking policy at platform level is not masking data #7022
Management
-
"Host" header not overwritten if redefined in Endpoint configuration #7007
Gateway
-
Best match doesn’t match any flow #7412
Management
-
Platform Flows deleted after a restart when connected to cockpit #7423
Policy
-
Prevent following policies to reach endpoint when input is invalid: JSON Validation, JSON Threat Protection, XML Threat Protection and Regex Threat Protection #7301
Console
-
Debug mode:
-
Shared API Key:
-
Toggle Shared API Key mode in settings #6990
-
Manage Shared API Key at application level (#6798, #6801, #6800, #6804, #6796, #6797, #7192, #6795)
-
Choose Shared API-Key mode at application level #6793
-
De-correlate API-Key and Subscription lifecycle #7266
-
Prevent Shared API-key Key revocation at API Level #6799
-
View subscriptions for a Shared-API Key #6794
-
Policy
-
Define headers based on the request or on the response payload #7358
Portal
Management
-
Migrate management API documentation from openAPI V2 (aka swagger) to v3 #6224
General
Console
Gateway
-
Gateway only keeps last set-Cookie header from backend response even with different cookie-names #7325
General
-
Dictionaries no longer work in expressions #7303
-
Javascript policy input box is only showing a few lines and not the whole code #7028
-
Json is only partially visible in editor under API Documentaiton #7116
-
Let the API Owner choose the Accept-Encoding #6967
-
Merge 3.10.12 in 3.15.x #7363
-
Support DocumentDB index name constraints #7134
Management
-
Application subscriptions API keys buttons are not visible #7273
Policy Groovy
-
Cannot iterate on Map with entry and trim on GStringImpl #7302
Policy JavaScript
-
Allows to break request/response on content phase #7173
APIM
-
Events not being displayed correctly #7300
Console
Gateway
-
Best Match flow mode doesn’t execute the best matching flow #6654
Gateway-api
-
Bad behavior on TransformationException if no policyChain #7130
General
-
Let the API Owner choose the Accept-Encoding #7181
Helm
-
Api template doesn’t support opening of service core port #6895
Management
-
Notify API Consumers contact too many people #7213
Metrics-reporter-policy
-
Metrics reporting not done at the good time (backport 7194 in 3.10.x) #7196
Policy
-
Policy-ssl-enforcementsupport x509 attributes #7276
Platform
-
IllegalArgumentException unsupported cipher suite when enforcing tls protocols #7038
Gateway
Management
Console
-
Alerts page documentation is not properly displayed #6680
Gateway
General
-
Merge 3.13.2 into master #6749
Console
-
View domain used by application #6384
Management
Portal
-
Possibilty to disable promoted card on page list #6472
Console
-
Creating simultaneous changes in dictionaries(one user, two tabs) overwrites the changes in one or the other. #6750
-
Expression language completion isn’t usable with code editor #6577
-
When you check/activate HTTP Proxy with System Proxy in Endpoint configuration, Save button goes grey. #6619
-
Wrong Units for Request/Response Content length in Analytics Dashboards #5706
Management
-
Stop/start of dynamic dictionaries do not get redeployed on gateways #6847
Portal
-
Documentation Page cannot handle lots of menu options #6618
Gateway
Portal
Connector
-
[kafka] Improve assignment and seeking #6686
Console
Gateway
-
Executable jar start with an error #6732
General
-
Merge 3.12.5 in 3.13.x #6704
Management
-
HealthCheck does not take into account Proxy settings #6698
Policy
-
[groovy] Groovy scripts fails to resolve method even if whitelisted #6681
Console
General
Management
Portal
Console
-
API:ALERT:read permission doesn’t activate API alert detail #5974
Gateway
-
Api HealthCheck of endpoints consume too much resources #6658
-
EndpointHealthcheckService not ready when Api sync starts #6657
-
Heartbeat may cause infinite loop and server crash under certain circumptances #6655
-
Make entrypoints concurrently available #6656
-
[perf] ensure ClassLoaders are well released after api undeploy #6678
Management
Console
Gateway
Console
-
Documentation page configuration imported from external source can not be edited #6149
-
Organization Settings get reinitialized after changing Authentication configuration. #6114
-
Portal Settings get reinitialized after changing Portal Authentication configuration #6154
-
Quality Metrics lost after upgrade #6290
-
Reset button in settings does not work #6497
Gateway
-
Can not start gateway if Hazelcast ratelimt enabled java.lang.ClassNotFoundExceptioncom.hazelcast.core.IMap #6117
-
Health-check stops working after gateway is stopped/started. #6306
-
Unable to start gateway when activating TLS and HTTP/2 #6232
-
[policy] fix license management of data-logging-masking and assign-metrics policies #6435
General
Management
Policy
-
[data-logging-masking] datas are no longer masked #6122
Portal
-
Filters on path on the logs in APIM Portal do not work. #6238
Repository
-
[sqlserver] Rest API database setup #6447
Console
-
500 error when importing definition of an API, null pointer exception #6052
-
Change button labels (dashboard types) on Settings > Analytics page #6363
-
Deleted plan is not removed from design studio #5942
-
Documentation page configuration imported from external source can not be edited #6461
-
Top failed APIs shows 100% Failed on 200 status in Application Analytics #5703
Gateway
General
Management
-
Application Dashboard inconsistent filtering on "Top Failed" widget #5771
-
Plans get lost when imported with different user with admin rights #6008
-
Reorder issue on PageServiceImpl.java #5931
-
SMTP TLS negotiation error #6101
-
SQL error when trying to search application to subscribe with #5812
-
User can list all applications without permissions #6307
-
[repository] missing mongodb index makes impossible to start management api #5995
Policy
Portal
Management
-
Search for users by Id from /management/organizations/{orgId}/environments/{envId}/search/users endpoint #5855
Gateway
General
Console
-
Logo disappeared after migration to 3.10 #6038
-
Metrics of instances are not displayed #6039
-
Pending Tasks are visible to any users in the Console #6036
-
Portal Settings get reinitialized after changes #6009
-
[3.10.0] "Authentication button color" set in Console OIDC Authentication Settings not propagated to Portal #6010
Gateway
-
Enabling prometheus Metrics gives java.lang.ClassNotFoundExceptionorg.LatencyUtils.PauseDetector #5996
General
Management
-
Enable to sync APIs due to NPE #5980
Platform
-
El expression request.method leads to an InvocationTargetException #6051
Definition
-
Virtual host with '/' is not saved #5859
Gateway
Management
-
"order" field of Plans get reseted when imported from 3.5.x to 3.8.x #5696
-
Allow to specify multiple roles to map with ldap idp #5619
-
Check plan policy configuration #5952
-
Flows property not accepted in request payload for Update Plan #5694
-
Plan Flows get lost on updating an API with an existing API definition (updateApiWithDefinition) #5820
-
[analytics] "Display percentage" is never checked #5495
-
[github idp] user without space in their username fail to authenticate #5507
Policy-ratelimit
-
Unable to use quota notification.properties #5834
Reporter-file
-
[reporter-tcp] manage user-agent in the elasticsearch output #5893
Gateway
General
Management
Gateway
-
OpenTracing support #1581
General
-
API Promotion #5530
-
Accepting/Rejecting an API promotion request #5528
-
Handle
groups
during API Promotion #5844 -
Handle
pages
during API Promotion #5841 -
Handle
plans
during API Promotion #5842 -
Logging events for API promotion #5531
-
Making requests for API promotion #5526
-
Managing in progress API promotion requests #5746
-
Support Redis for cache resource #5712
-
Viewing tasks for API promotion requests #5527
Management
Policy
-
[groovy] add XML support #5891
General
Helm
-
Cannot disable the Alert Engine connector #5662
Management
-
CORS Access-Control-Allow-Origin regex fails on pattern as ".*.mydomain.com" #5611
-
Cannot update Quality Rules #5626
-
Invalid logout url construction with external OIDC Provider #5593
-
Plan Flows get lost when re-importing API from a swagger/oas3 specification #5651
-
Policies on path are not updated when updating an API with swagger #4970
-
Unable to use default image on API #5303
Management-api
-
Unable to change admin password with the environment variables in Openshift #2680
Portal
-
Do not display "Create an Application" in Portal if user has insufficient privileges #5403
Gateway
General
Management
-
/applications?query=A accessible to unauthorized users #5518
-
A Membership for member USER and ref GROUP already exists. #5413
-
API logs and permissions #5412
-
Get an API by its context-path doesn’t seem to work on latest version #5298
-
Make /portal protected by authentication #5435
-
Plan id not preserved on API import #5489
-
[healthcheck] add a query parameter in the path without / #5433
Portal
-
Do not display "Create an Application" in Portal if user has insufficient privileges #5403
Reporter
-
[file] OOM when flush takes a long time #5515
General
Management
-
502 response received on health-check timeout #5342
-
A Membership for member USER and ref GROUP already exists. #5413
-
Health availability is KO when HC is disabled on a specific endpoint #5365
-
Health-check details Response colors to be consistent with colors in the Platform logs #5309
-
Improve the user account screen #5376
-
Nullpointer exception on OIDC provider login after migration from 1.30 #5410
-
Policies configuration form not well displayed #5351
-
Search criteria and table offset get lost when clicking 'back to Health-check' #5302
-
[portal] unable to logout with OIDC provider #5247
Managment
-
API Analytics response payload not displayed, fails with javascript error e.getTextArea is not a function #5364
Portal
General
-
Merge 3.5.9 #5326
Management
-
As a simple USER I can see the Analytics dashboard but I have a permission error #5251
-
In a multi env context search of APIs is not working well #5296
-
Portal authentication settings has disappeared #5278
-
Unable to save an api Cron expression must consist of 6 fields (found 0 in \"\") #5118
-
User pre-registration does not work with an OIDC provider #5159
Portal
-
Example and schema imported from swagger document not displayed in portal #5202
General
Management
-
Dates are not updated when create/update a category #5275
-
JWT Plan - resolver param using JWKS URL with EL get unresolved (Error 404) #5206
-
Minimum limit on IDP name is too short #5297
-
Unable to subscribe to public apis from an application #5223
-
[portal] Groups get lost while changing the Application image in Portal #5274
-
[portal] unable to logout with OIDC provider #5247
Repository
-
[jdbc] Make the repositories transactional #5284
Console
-
User can not access application analytics #4843
General
Management
Oauth2
-
Oauth2 Authentication of API Portal and API Management have not the same behavior #4058
Policy
-
[assign-content] Template Injection #5033
Portal
-
Do not display the "add application members" section if the current user has not the permission #4635
Management
Policy
-
[rest-to-soap] Can not use query parameters from SOAP envelope template #5209
Portal
Repository
Management
Reporter
Management
-
Advanced API logging configuration #4745
-
Associate a label to an API deployment #4742
-
Be able to enable / disable health-check during some periods #4043
-
Cockpit authentication support #4522
-
Console dashboard page #4747
-
Define HTTP verb for dynamic properties and dictionaries #4746
-
Display deployments markups on analytics charts #4743
-
Improve logging configuration for GDPR compliance #3919
-
Manage Cockpit installation registration #4766
-
Move organization & environment creation to command handler #4287
-
Policy studio history preview #4749
-
Propagate installation events to APIM #4945
-
Status page for endpoints based on HC #4750
-
[multi-env] Display current environment id in the console URL #4778
Policy
Reporter
-
[elasticsearch] Auto-enable geo-ip, user-agent when Elasticsearch >= 7.x #4744
Gateway
-
Problem with the execution order of the policies of a response flow #4973
General
-
Merge 3.4.3 #5001
Management
-
Cannot deploy APIs with configured HTTP headers at the endpoint level or health check #4963
-
Manage WSDL imports when creating or updating an API #4976
-
Policies on path are not updated when updating an API with swagger #4970
-
SecurityDefinition is missing when migrating API from v1 to v2 definition #4979
General
Management
-
A new invited user does not have environment role #4833
-
Dictionary start/stop API fails in case of empty Accept header #4740
-
Duplicate pages when importing an API #4944
-
Fix swagger documentation #4726
-
Improve attach media feature #4702
-
Manage rights on the plans displayed on the policy studio #4770
-
OpenAPI with external $ref is not well parsed #4967
-
Swagger type is not sync with API model #4788
-
[studio] scope is not automaticaly selected #4801
Portal
Gateway
General
Management
-
API import not working with a documentation fetcher from a future version (configuration not compatible) #4806
-
Add HTTP proxy configuration for the AMAuthenticationResource #4832
-
Cannot define a scope on Authentication creation but only on update #4684
-
Closing a subscription with an expiry date is still active #4799
-
Hits by country not well sorted #4668
-
Markdown generation issue with too big images #4810
Portal
Gateway
-
Avoid usage of URI.create to handle properly path and query parameters with special caracters #4837
General
Identity-providers
-
Can’t sign in on console with an IDP that is not enabled for portal #4797
Management
Policy
-
[CalloutHttp] variables should be optional #4818
Portal
Management
-
API importing block is too small and does not scroll #4723
-
Cannot create a plan with rate limiting restriction on an API created with the new design studio #4700
-
Cannot save good script values on Grooy policy with policy-studio #4712
-
Create or Update API with duplicated label fails with SQLIntegrityConstraintViolationException #4704
-
Ignore missing properties when updating settings. #4682
-
Not able to define mock body with policy studio #4665
-
Sometimes APIs are not well deployed in gateway #4707
-
Wrong format of securitydefinition when create a plan #4714
-
[policy-validate-request] unable to create a complex validation #4722
Portal
-
Media links are not well computed #4669
General
Management
-
API not found on global dashboard when deleted #4573
-
Cannot create an API and ask for review #4571
-
Config file user roles are ignored when user is assigned to a group before his first login #4586
-
Export logs in CSV should contain the user when it is displayed #4659
-
Importing theme with images fails #4179
-
Improve UI when search user to add #4599
-
Location header does not contain full path to resource #4624
-
Unable to delete the homepage background #4213
Portal
Gateway
General
Management
-
Cannot create an API from a Gravitee.io definition anymore #4570
-
Default admin can’t see/go to the dashboard and settings menu #4591
-
Default application is not correctly created for social / OAuth login #4634
-
Impossible to move documentation page to folder #4655
-
Portal and Schedulers sections appear two times in settings #4578
-
Redoc is not working with a private API on dist #4585
-
[quality-rules]unable to create a new quality-rule #4602
Plugin
-
Ensure plugin loading order #4486
Portal
-
Image links are broken on portal documentation #4620
Gateway
Management
-
Allows to manage authentication identity providers on the portal #3963
-
Global reviewer #4436
-
Label’s dictionary #4437
-
Move CORS from static to dynamic configuration #4432
-
Move SMTP from static to dynamic configuration #4433
-
Move notification templates in the UI #4297
-
Override settings via envvars #4452
-
Support tickets history #4435
-
[audit] Adapt audit system to Orgs & Envs #3976
Policy
-
[api-key] Allows to define custom api-key #4318
Reporter
Repository
-
[hazelcast] Rate-limit support #4527
General
Management
-
As standard user i see an administration link on portal UI #4399
-
Change background color for theme logo #4444
-
Error while searching through LDAP to transfer application #4441
-
Improve the force login feature #4412
-
Removing a user from a role, removes the user from all roles of the scope #4501
-
Resetting password from Portal UI should not invalidate password #4410
Portal
Repository
-
[http-bridge] Gateway does not resync (gateway-bridge-http) after network issue #4505
General
Management
Repository
Gateway
Policy
General
Management-api
-
ID is sent on create View and this cause error #3882
Portal
-
Access URL not well displayed when too long #3898
-
Application default icon is not well generated in subscriptions lists #3847
-
Console error when trying to rate an API #3902
-
Error message on application creation & api subscription #3875
-
On the dashboard, the version of API is not well displayed with a large API name #3832
-
Should not be able to subscribe to a JWT API without a client id #3874
-
Sometimes my subscriptions are not well displayed on hover #3804
-
Tags and views are not displayed anymore on cards when not configured in API’s aside #3897
-
The error message is not displayed until we click #3817
Management
Portal
-
Api rating issues #3824
-
Link in aside reloads all the application #3810
-
Swagger OAuth integration #3813
-
Take care of defined properties to display API’s aside #3812
-
Unpublished pages are displayed on API’s documentation #3837
-
Use the color defined on the identity providers display on the login #3811
-
When creating view the picture is broken #3841
-
When forceLogin is enabled, we cannot register anymore #3845
Gateway
-
Remove the legacy mode for url encoding #2634
Management
Multi-env
-
Add organization feature #3182
Portal
-
Add a link to admin in user menu #3109
-
Add message for Cookies #2956
-
Add the possibility to comment / rate an API #3061
-
Allow a user to change his avatar #2806
-
Allow a user to consult analytics of an application #2804
-
Allow a user to consult logs of an application #2805
-
Allow a user to consult subscriptions of an application #3114
-
Allow a user to consult/edit global settings of an application #2799
-
Allow a user to consult/edit members of an application #2803
-
Allow a user to create an application #2798
-
Allow a user to reset his password #2822
-
Allow a user to subscribe to notifications on an application #3115
-
Allow users to subscribe to newsletters #3420
-
Allows to consult a subscription #3108
-
Generate a custom default icon for user/apis/application #2853
-
Integrate Google Analytics #3344