Releases: frankframework/frankframework
v9.1.1-20250618.022330 (nightly)
The Frank!Framework nightly (snapshot) build provides a daily compilation of the latest code changes and developments, allowing users to access cutting-edge features and updates before they are officially released.
Copy version
9.1.1-20250618.022330
Download instructions
Get the Webapp
Add it to the pom.xml:
<dependencies>
<dependency>
<groupId>org.frankframework</groupId>
<artifactId>frankframework-webapp</artifactId>
<version>9.1.1-20250618.022330</version>
</dependency>
</dependencies>
<repositories>
<repository>
<id>frankframework</id>
<name>Frank!Framework</name>
<url>https://nexus.frankframework.org/content/repositories/public</url>
</repository>
</repositories>Get the Docker image
Pull the Docker image:
docker pull frankframework/frankframework:9.1.1-20250618.022330v9.0.2-20250618.031131 (nightly)
The Frank!Framework nightly (snapshot) build provides a daily compilation of the latest code changes and developments, allowing users to access cutting-edge features and updates before they are officially released.
Copy version
9.0.2-20250618.031131
Download instructions
Get the Webapp
Add it to the pom.xml:
<dependencies>
<dependency>
<groupId>org.frankframework</groupId>
<artifactId>frankframework-webapp</artifactId>
<version>9.0.2-20250618.031131</version>
</dependency>
</dependencies>
<repositories>
<repository>
<id>frankframework</id>
<name>Frank!Framework</name>
<url>https://nexus.frankframework.org/content/repositories/public</url>
</repository>
</repositories>Get the Docker image
Pull the Docker image:
docker pull frankframework/frankframework:9.0.2-20250618.031131v9.2.0-20250614.042336 (nightly)
The Frank!Framework nightly (snapshot) build provides a daily compilation of the latest code changes and developments, allowing users to access cutting-edge features and updates before they are officially released.
Copy version
9.2.0-20250614.042336
Download instructions
Get the Webapp
Add it to the pom.xml:
<dependencies>
<dependency>
<groupId>org.frankframework</groupId>
<artifactId>frankframework-webapp</artifactId>
<version>9.2.0-20250614.042336</version>
</dependency>
</dependencies>
<repositories>
<repository>
<id>frankframework</id>
<name>Frank!Framework</name>
<url>https://nexus.frankframework.org/content/repositories/public</url>
</repository>
</repositories>Get the Docker image
Pull the Docker image:
docker pull frankframework/frankframework:9.2.0-20250614.042336v7.9.7-20250612.065044 (nightly)
The Frank!Framework nightly (snapshot) build provides a daily compilation of the latest code changes and developments, allowing users to access cutting-edge features and updates before they are officially released.
Copy version
7.9.7-20250612.065044
Download instructions
Get the Webapp
Add it to the pom.xml:
<dependencies>
<dependency>
<groupId>org.frankframework</groupId>
<artifactId>frankframework-webapp</artifactId>
<version>7.9.7-20250612.065044</version>
</dependency>
</dependencies>
<repositories>
<repository>
<id>frankframework</id>
<name>Frank!Framework</name>
<url>https://nexus.frankframework.org/content/repositories/public</url>
</repository>
</repositories>Get the Docker image
Pull the Docker image:
docker pull frankframework/frankframework:7.9.7-20250612.065044v8.3.3-20250605.001628 (nightly)
The Frank!Framework nightly (snapshot) build provides a daily compilation of the latest code changes and developments, allowing users to access cutting-edge features and updates before they are officially released.
Copy version
8.3.3-20250605.001628
Download instructions
Get the Webapp
Add it to the pom.xml:
<dependencies>
<dependency>
<groupId>org.frankframework</groupId>
<artifactId>frankframework-webapp</artifactId>
<version>8.3.3-20250605.001628</version>
</dependency>
</dependencies>
<repositories>
<repository>
<id>frankframework</id>
<name>Frank!Framework</name>
<url>https://nexus.frankframework.org/content/repositories/public</url>
</repository>
</repositories>Get the Docker image
Pull the Docker image:
docker pull frankframework/frankframework:8.3.3-20250605.001628v9.1.0
Full Changelog: v9.0.0...v9.1.0, see Milestone 9.1.0 for more info.
Highlights
Bumped dependencies 184 times
Add JDK24 Build Support
Improved documentation
Tip
The Frank!Framework no longer requires JMS as a required dependency.
Note
ApiListeners may now throw security warnings, allows whitelisting of HTTP parameters.
Performance
- Memory footprint has been reduced when doing XML and JSON conversions
- Fix memory leak when iterating over large files using iterating pipes and returned sessionkeys
- Fix session pollution when using parallel iterating pipes and a SenderWrapper
- Fix parallel XSLT processing (with and without pipeline transactions)
- Improve disk to memory IO operations
- Improved JDBC query builder
Bugs
- Fix 'time' in parameter pattern
- Fix configuration webcontent lookups
- Fix manual retry capability by using the proper ID fields such as StorageID, MessageID and CorrelationID
- Fix broken parameter pattern substitution
- Fix a NPE when trying to list files and folders using the AmazonS3sender
- Fix for XML2JSON mapping with wildcard-types that have nested elements
- Don't use Phaser in IteratingPipe to allow handling of more than 65.535 elements
Features
- Setup a new module and plugin structure
- Enable monitoring capability (by default)
- No longer display default-value configuration-warnings
- Improve log traceability
- Don't rename threads anymore
- Extended Resource Locators (resources.yml) to use the new module structure
- Health endpoints now require authorization except on localhost
- Ignore namespaces when comparing XML in CompareStringPipe
- Allow setting MQTT topic via a parameter
- Share MQTT connection between different Frank Components
- Add skip-locked functionality for H2 databases
- Add ability to move message 'stuck in processing' to Error state
- Allow returning extra fields from JDBCTableListener
- Add option to omit XML declaration from the output of Json2XmlValidator
- Allow Narayana to deal with 'stuck' Heuristic Hazard transactions
CredentialProviders & Authenticators
- Add DelineaCredentialFactory
- Add Azure AD Authenticator
Ladybug & Larva
- Display MessageContext in Ladybug
- Display more information in Ladybug Reports
- Add Ladybug 'convert to larva' button, only works on local development
- Larva can now use nearly all framework listeners and senders, including JMS and the new FrankListener and FrankSender
- Use Message instead of Strings, allows binary comparisons
Frank!Framework Console
- Make code editor resizable
- Make log page scroll back to previous position when clicking back
- Allow configurations to be stopped from Console
- Add button to open a log file in a new window
- Add root tag around configuration elements to make it xml compliant
- Store form field values when switching between pages
- Improve adapter statistics overview
- Fix JEE authentication in console and ladybug
- Fix duplicate server warning response
- Fix errorstore issues when configuration doesnt have errors
- Allow users to update websocket intervals
Non backwards compatible changes
Important
Removed deprecated pipes from 7.8 or older. This means that the following pipes are now removed: FileLineIteratorPipe, FilenameSwitch, PostboxRetrieverPipe, PutParametersInSession, Stream2StringPipe, XmlBuilderPipe, XmlFileElementIteratorPipe.
Warning
MqttSender and MqttListener now require a resource to be registered in resources.yml. This allows multiple senders/listeners to use the same connection at the same time.
Warning
Remove JMX capability.
v9.0.1
Patch Changelog: v9.0.0...v9.0.1 - Full Changelog: v8.3.0...v9.0.1, see Milestone 9.0.1 for more info.
Performance
- Fix session pollution when using parallel iterating pipes and a SenderWrapper
- Fix parallel XSLT processing (with and without pipeline transactions)
- Improve disk to memory IO operations
Bugs
- Fix 'time' in parameter pattern
- Fix configuration webcontent lookups
- Fix manual retry capability by using the proper ID fields such as StorageID, MessageID and CorrelationID
- Fix broken parameter pattern substitution
- Fix a NPE when trying to list files and folders using the AmazonS3sender
- Fix for XML2JSON mapping with wildcard-types that have nested elements
Features
- Enable monitoring capability (by default)
- No longer display default-value configuration-warnings
- Don't rename threads anymore
- Add ability to move message 'stuck in processing' to Error state
- Add option to omit XML declaration from the output of Json2XmlValidator
- Allow Narayana to deal with 'stuck' Heuristic Hazard transactions
Frank!Framework Console
- Make code editor resizable
- Make log page scroll back to previous position when clicking back
- Fix JEE authentication in console and ladybug
- Fix duplicate server warning response
- Fix errorstore issues when configuration doesnt have errors
- Allow users to update websocket interval
Non backwards compatible changes
- The SenderPipe no longer accepts a
Listener, when using asynchronous messaging (sender/listener combination) please use theAsyncSenderWithListenerPipeinstead. No other attributes need to be modified! - The default
ldap-role-mapping.propertiesfile andldap.auth.<role name>properties have been removed as it was not always possible to overwrite this file. An example can be found atsecurity/src/test/resources/oauth-role-mapping.properties. Users are encouraged to map roles to 'scopes' in their preferred oauth environment, the example file only verifies logging in. - Receiver configuration property
maxDeliverieshas been deprecated. Instead, configuremaxRetries. For backwards compatibility, if you have configuredmaxDeliveriesthis will setmaxRetriesto the same value. See the Frank!Doc for these properties in the Receiver for more information. - Fix the exponential delay after errors in message processing. This feature has not worked for an unknown time. There might be potential problems with transactions having an unexpected timeout due to this increased delay, which could result in an unrecoverable error situation. For this reason the delay is maximum half of the configured transaction timeout duration. However, this might not always be sufficient for each process and the transaction timeout can not always be determined so please watch out for transaction timeout errors that might happen after a number of retries and see the next bullet point for remediation.
- To avoid the above unexpected transaction timeouts, the maximum delay after errors has been made configurable. This can be configured for the whole configuration with the property
receiver.defaultMaxBackoffDelay, or per receiver with the attributemaxBackoffDelay. The value is in seconds. The default is 100 seconds.
v8.0.6-20250305.000628 (nightly)
The Frank!Framework nightly (snapshot) build provides a daily compilation of the latest code changes and developments, allowing users to access cutting-edge features and updates before they are officially released.
Copy version
8.0.6-20250305.000628
Download instructions
Get the Webapp
Add it to the pom.xml:
<dependencies>
<dependency>
<groupId>org.frankframework</groupId>
<artifactId>frankframework-webapp</artifactId>
<version>8.0.6-20250305.000628</version>
</dependency>
</dependencies>
<repositories>
<repository>
<id>frankframework</id>
<name>Frank!Framework</name>
<url>https://nexus.frankframework.org/content/repositories/public</url>
</repository>
</repositories>Get the Docker image
Pull the Docker image:
docker pull frankframework/frankframework:8.0.6-20250305.000628v7.9.6 (Feb 20, 2025)
Patch Changelog: v7.9.5...v7.9.6 - Full Changelog: v7.8-RC1...v7.9.6, see Milestone 7.9.6 for more info.
Notice
- When using
log.HideRegexyou may need to unescape XML characters. (seelog4j4ibis.properties.) - Parameter handling for types Node and DomDoc is namespace aware, starting from version 7.6. To remove namespaces, use set attribute removeNamespaces="true"
- FixedQuerySender allows duplicate parameter names ONLY if useNamedParams is explicitly set to false.
- CleanupOldFilesPipe has been deprecated to be removed in version 8.0
- When using CMIS, parameter userName has been renamed to username.
Highlights
Bugfixes
Security Updates
What's Changed
- Use CorrelationID in test pipeline when present (#7761)
- Add validations to JdbcTableListener for fields used in the query (#7903)
- Update dependencies for CVE's (#8355)
- Fix JSON Deepsearch with deeply nested parameter substitutions in empty documents (#8363)
- Fix race condition on TransformerPool#getConfigMap (#8363)
- Don't add string messages to session closeable list (#8363)
- Update aws sdk in pom.xml (#8362)
- Add ConvertLadybug 2 Larva button (#8415)
Non backwards compatible changes
-
IbisLocalSender no longer throws exceptions if exit.state="ERROR" situations, but provides forwardName 'exception'. The sessionKey 'originalResult' is no longer used.
-
For sending replies from the JmsListener to a fixed destination the attribute 'replyDestinationName' should be used instead of a nested JmsSender, to avoid clutter in the debugger reports
-
Session variable 'id' has been renamed 'mid', session variables 'messageId' and 'tcid' have been removed.
-
Session variable 'exitcode' has been renamed to 'exitCode'.
-
Duplicate detection might fail for messages received after an upgrade if the earlier version of the message was received before the upgrade.
This is in cases where a received (JMS) correlationId is used to send a response. -
The ZipWriterPipe and ZipWriterSender have undergone major changes. In order to help the upgrading processes they both have a backwardsCompatibility attribute to revert to the old behavior. Please migrate away from this as soon as possible.
- The ZipWriterPipe with action=WRITE does no longer has its input as its response, but rather a null message. If necessary, the previous behavior can be obtained by setting preserveInput=true.
- The ZipWriterSender with no content parameter does no longer has its input as its response, but rather a null message.
- The ZipWriterPipe CLOSE action will now return the ZIP archive! It is no longer required to create a file first (with action OPEN) nor is it required to specify a filename on the OPEN action.
-
Parameter with an attribute value set to an empty string will have the empty string as result. Previously the input message would be used. This behaviour can be reobtained by settin: defaultValueMethod="input".
-
Larva context has changed from '/larva' to '/iaf/larva'.
-
Larva default timeout has been decreased to 10s, and to 2s for local tests
-
The CMIS, Aspose and AWS modules have been added to our webapp artifact. The servlet endpoints are disabled by default.
- In order to enable the CMIS endpoints either of the following properties must be set:
servlet.AtomPub10.enabled=true,
servlet.AtomPub11.enabled=true,
servlet.WebServices10.enabled=true,
servlet.WebServices11.enabled=trueor
servlet.BrowserBinding.enabled=true
- In order to enable the CMIS endpoints either of the following properties must be set:
-
Some API endpoints have been deprecated. Users are encouraged to change over to the new API, however in order to restore the deprecated functionality the property 'iaf-api.allowDeprecated' can be set to true.
-
ApiListener eTag generation has been disabled by default, set api.etag.enabled=true to enable default etag generation.
v9.0.0
Full Changelog: v8.3.0...v9.0.0, see Milestone 9.0.0 for more info.
Warning
There is a known bug in the old ladybug testtool, where cannot open reports. This problem does not exist in the new GUI.
Note
We are now publishing our artifacts under our new org.frankframework groupid on Maven Central.
Tip
Packages names have been changed, though you should not need to change your configurations, it's advised to do it ASAP.
Highlights
Bugfixes
Many Performance enhancements
Code Quality improvements
Cleanup lots of Technical Debt
All the Security Updates
Minimal JDK 17 + JDK21 runtime support
Improved documentation
What's Changed
- The Frank!Console can be run standalone and automagically find 'worker' nodes. The ideal setup is K8s in combination with Hazelcast. More information can be found in our Helm chart.
- Minor startup performance improvement by caching results of XSD compare (#7662)
- Implement RegExPipe (#7650)
- Implement ForPipe (#7609)
- Improve XSD error handling when merging XSDs with duplicate yet different NS prefixes (#7695)
- Split async-listener from default SenderPipe (#7705)
- Deprecate throwException and success forward for ExceptionPipe (#7712)
- Fix file-equals check in FileSystem Listeners (#7715)
- Use a ThreadLocal for the micrometer http interceptor (#7717)
- Change generated XML for monitors to the new style (#7784)
- Remove example role-mapping files and fix application security defaults (#7786)
- Fix issue where the name attribute is not being substituted (#7811)
- Parameter is used incorrectly in XslErrorMessageFormatter (#7833)
- Make the FixedResultPipe backwards compatible (#7853)
- Change incorrect SapSystem beanClass (#7867)
- Deprecate maxDeliveries, unify receiveCount and deliveryCount (#7832)
- Deprecate SchedulerSender (#7887)
- Add startup arguments for Hazelcast optimisations (#7897)
- Add validations to JdbcTableListener for fields used in the query (#7894)
- Add job group filtering and selection (#7932)
- Add log with stacktrace when processMessageDirect has an error (#7921)
- Improve cleanup and Message leak tracing (#7931)
- Use JWT authentication in combination with Hazelcast (#7934)
- Fix file viewing rule and string resolving with multiple defaults (#7946)
- Add IfPipe (#7947)
- Fix retrying messages from DirectoryListener (#7944)
- Select new cluster member when previous selected has disappeared (#7948)
- Allow Larva "queue" names to have more than 2 parts (#7973)
- MessageStore Sender/Listener should not use CSV to store session keys (#7984)
- Use IfPipe as super class of XmlIf (#7979)
- Add ability to set baseURL when using oauth authenticator (#7977)
- Errors in events should not propagate back to the source (#8007)
- Rename Monitor Destination element (#8029)
- Save pipeline caller (listener) and previous pipe in message context (#8027)
- Allow loggers to be configured via the environment (#8049)
- Move conditional loading of 'testtool.enabled' (#8056)
- Make a fat-jar for our k8s module (#8071)
- Fix Monitoring Trigger: add defaults and configuration validation (#7976 + #8017 + #8067)
- Uniform authentication method for HttpSender (#7941)
- Use x-forward headers to determine actual headers in spring security (#8090)
- Add SAML2 authentication support for HttpSender (#8014)
- JSON2XML Validation parameter substitution deeper search (#8110)
- Add ApiListener MultiPart response (#8088)
- Fix token refresh mechanism which doesn't work correctly (#8126)
- Only display unsafe warning when default value differs (#8122)
- Implement new MS Graph SDK for the Exchange FileSystem (#8103)
- Implement in MQTT memory storage, make persistenceDirectory optional and improve documentation (#8130)
- Implement a custom name for the root element (#8142)
Frank!Console
- Fix excessive logging in showLogDirectory (#7719)
- Fix monitor trigger url & missing 'Security Items' page title (#7741)
- Consolidate Ladybug and Console authentication properties (#7754)
- Allow cors settings to be configured globally (#7863)
- Fix sidenav Overview menu closing on Connections page (#7901)
- Fix js exception when no listener in receiver (#7831)
- Fix monitor edit not using put on submit (#7915)
- Handle lack of server info in console on slow / no backend (#7913)
- Get server timezone from FF Core & handle in console frontend (#7922)
- Add 'Add monitor' button to monitors view (#7935)
- Ability to hide IAF_Util, change 'All' tab name or remove 'All' tab (#7975)
- Fix filter condition for hiding configurations in tabs (#8006)
- Fix download-active-config double slash (#8031)
- Move placeholder text on edit-trigger page to a 'hint' (#8032)
- Show the timezone in the header and modal (#8033)
- Fix scroll-to-top button visibility and behavior (#8053)
- Hide navigation elements and check if user has access to routes (#8040)
- Change console messagestorage messageId encoding to base64 (#8064)
- Add missing configuration name attribute in
InlineStoreItem(#8085) - Fix the browser history location getting stuck at tabs (#8089)
- Disable or hide page elements and buttons if the user is not allowed to access these (#8114)
- Remove logout link from top navbar (#8137)
- Add deduping of repeated toasts (#8147)
- Add dynamic drop down to select an adapter in "Test a Pipeline" faster (#8149)
- Fix quick submit in forms (#8150)
Ladybug
- For the Ladybug debug tab use DatabaseLogStorage (#7810)
- Fix showing non-read stream in ladybug (#8134)
Non backwards compatible changes
- The SenderPipe no longer accepts a
Listener, when using asynchronous messaging (sender/listener combination) please use theAsyncSenderWithListenerPipeinstead. No other attributes need to be modified! - The default
ldap-role-mapping.propertiesfile andldap.auth.<role name>properties have been removed as it was not always possible to overwrite this file. An example can be found atsecurity/src/test/resources/oauth-role-mapping.properties. Users are encouraged to map roles to 'scopes' in their preferred oauth environment, the example file only verifies logging in. - Receiver configuration property
maxDeliverieshas been deprecated. Instead, configuremaxRetries. For backwards compatibility, if you have configuredmaxDeliveriesthis will setmaxRetriesto the same value. See the Frank!Doc for these properties in the Receiver for more information. - Fix the exponential delay after errors in message processing. This feature has not worked for an unknown time. There might be potential problems with transactions having an unexpected timeout due to this increased delay, which could result in an unrecoverable error situation. For this reason the delay is maximum half of the configured transaction timeout duration. However, this might not always be sufficient for each process and the transaction timeout can not always be determined so please watch out for transaction timeout errors that might happen after a number of retries and see the next bullet point for remediation.
- To avoid the above unexpected transaction timeouts, the maximum delay after errors has been made configurable. This can be configured for the whole configuration with the property
receiver.defaultMaxBackoffDelay, or per receiver with the attributemaxBackoffDelay. The value is in seconds. The default is 100 seconds.