Wildfly

wildfly/wildfly last check 55 releases today
Notes
no notes yet
Release notes
v41.0.0 · today
view on github

Release Notes - WildFly - 41.0.0.Final

For the most up-to-date list of all issues resolved, including those resolved as fixed in WildFly 41 after the release date, see the release notes in JIRA.

For all changes since WildFly 40.0.0.Final, see the full changelog.

Changes in the underlying WildFly Core 33 release are listed in the WildFly Core JIRA.

Feature Request

WFLY-19496 [Community] Promote OIDC scope attribute from Preview to community stability level

WFLY-20037 [Community] Promote ability to specify that the OIDC Authentication Request should include request and request_uri parameters to community stability level

WFLY-20810 WildFly Maven Plugin, bootable JAR packaging for the cloud

WFLY-21473 [Default] Promote "TLS support to JGroups TCP transport"

WFLY-21989 [DEFAULT] Promote OIDC Logout to default stability

Enhancement

WFLY-20952 JTS QuickStart does not contains the integration tests

Bug

WFLY-16586 The microprofile-reactive-streams-operators layer doesn't provision org.wildfly.reactive.dep.jts

WFLY-20077 max-redelivery-delay initialization

WFLY-20800 Remove unneeded extra Persistence container calls to AbstractEntityManager.getEntityManager()

WFLY-21042 InfinispanTransformersTestCase fails on Semeru

WFLY-21115 Update microprofile-reactive-messaging-kafka README - Code vs Documentation Mismatch

WFLY-21323 http-custom-mechanism is accepting the req with invalid password

WFLY-21803 InfinispanModulesTestSuite not executing

WFLY-21811 The EE 10 feature pack work makes the testsuite/README.md out of date

WFLY-21906 SuspendResumeRemoteEJB2TestCase is flaky

WFLY-21909 Incomplete generation of project sources at legacy/ee-feature-pack/ee-dist and legacy/ee-feature-pack/dist

WFLY-21912 Rework todo-backend README due to Glow, and due to the need of similar content for both wfly and eap

WFLY-21920 Remote queries fail with "IllegalArgumentException: No marshaller registered for Protobuf type" when using container-managed RemoteCacheContainer with deployment-specific types

WFLY-21927 Usability: installation-manager.sh is easily confused with jboss-eap-installation-manager.sh

WFLY-21928 JGroups - adding protocol to fork channel causes server crash on reload

WFLY-21931 Build modules do not override the wildfly.channels when it is externally set

WFLY-21939 Glow metadata tests should resolve feature-packs in offline mode

WFLY-21946 maven warning missing wildfly maven plugin version

WFLY-21948 The example configurations used to test the elytron-oidc-client subsystem don't contain all possible attributes.

WFLY-21952 ProvisioningConsistencyTests are ignored by default

WFLY-21961 Building server test suite fails with no.expansion.build

WFLY-21962 Thousands of unexpected invocation state log messages - WFLYEJB0487: Unexpected invocation state 0

WFLY-21975 FD_SOCK2 port_range should be set to 0 for deterministic port binding

WFLY-21979 jgroups-tcp-fd socket binding port 57600 is in the OS ephemeral port range

WFLY-21990 Cache stores should not be segmented by default

WFLY-21991 Fix race condition in LocalIdleThresholdSessionPassivationTestCase

WFLY-21996 Coarse/FineHotRodSessionExpirationTestCase is flaky (loop never loops) and tighten test assertions

WFLY-21997 MicroProfile Fault Tolerance TCK is flaky in our CI due to strict timeout multiplier

WFLY-21998 Deployments using web cache-containers configured with LEGACY marshaller throws NotSerializableException at runtime

WFLY-22001 Deprecate statistics-enabled attribute on JGroups channel resource

WFLY-22012 ClientClusterNodeSelectorTestCase fails intermittently with EJBCLIENT000076 unknown node

WFLY-22014 Multiple quickstarts trigger WFLYSRV0019 warning by declaring unnecessary dependency on unsupported module com.h2database.h2

WFLY-22017 Ensure adhoc TLS sockets are registered with the socket-binding manager

WFLY-22021 Eclipselink 5 incompatible with WF40

WFLY-22035 TxControl.disable() during suspension prevents EJB @PreDestroy lifecycle transactions

WFLY-22038 Coarse/FineHotRodSessionExpirationTestCase fail intermittently

WFLY-22039 WildFly jakarta.persistence.api module should have dependencies on modules org.jboss.weld.core, org.jboss.weld.spi, org.jboss.weld.api

WFLY-22040 Duplicate io.smallrye.common.expression module source

WFLY-22052 Fix Glow scan-legacy-sar-layers expected discovery after WFLY-14858

WFLY-22053 ElytronRemoteOutboundConnectionTestCase fails intermittently because it uses ports in the ephemeral range

WFLY-22068 Legacy extension parsing requires admin-only when on embedded server

Component Upgrade

WFLY-21865 Update to Narayana LRA 1.2.0.Final

WFLY-21878 Component upgrade to Hibernate ORM 7.4.0.Final, Hibernate Search 8.4.0.Final and all related dependency updates

WFLY-21902 Upgrade org.jboss.genericjms:generic-jms-ra-jar to 3.1.0

WFLY-21903 Upgrade net.shibboleth.utilities:java-support to 8.4.2

WFLY-21905 Upgrade Antlr to 4.13.2 in standard WildFly

WFLY-21921 Bump org.jboss.arquillian:arquillian-bom from 1.10.1.Final to 1.10.2.Final

WFLY-21932 Upgrade com.github.luben:zstd-jni to 1.5.7-9

WFLY-21933 Upgrade Maven to 3.9.16

WFLY-21935 Upgrade Apache CXF components to 4.1.6 (resolves CVE-2026-44417)

WFLY-21936 Upgrade JBossWS components to support Apache CXF 4.1.6

WFLY-21943 Upgrade Galleon to 7.0.8.Final and Galleon plugins to 8.1.6.Final

WFLY-21947 Upgrade WildFly Core to 33.0.0.Beta1

WFLY-21953 Bump version.org.apache.kafka from 4.2.0 to 4.2.1

WFLY-21960 Upgrade Jackson to 2.21.4 (resolves CVE-2026-54512 and CVE-2026-54513)

WFLY-21963 Upgrade Netty to 4.1.135 (resolves numerous CVEs)

WFLY-21966 Upgrade SmallRye Config to 3.17.2

WFLY-21967 Upgrade to SmallRye Reactive Messaging 4.35.0

WFLY-21968 Bump version.io.smallrye.smallrye-stork from 2.7.9 to 2.7.10

WFLY-21970 Bump version.io.vertx.vertx from 4.5.27 to 4.5.28

WFLY-21971 Upgrade WildFly EE 10 to ANTLR 4.13.2 and Hibernate ORM 6.6.53.Final

WFLY-21972 Bump com.github.luben:zstd-jni from 1.5.7-9 to 1.5.7-10

WFLY-21974 Upgrade WildFly Core to 33.0.0.Beta2

WFLY-21981 Upgrade smallrye-open-api to 4.3.3

WFLY-21982 Bump version.io.micrometer from 1.16.5 to 1.16.6

WFLY-21983 Bump version.io.smallrye.smallrye-mutiny-vertx from 3.19.1 to 3.19.2

WFLY-21984 Bump jakarta.json.bind:jakarta.json.bind-api from 3.0.1 to 3.0.2

WFLY-21985 Upgrade commons-io to 2.22.0

WFLY-21986 Upgrade wildfly-clustering to 10.0.8.Final

WFLY-21987 Upgrade Infinispan to 16.0.13

WFLY-21992 Component upgrade to Hibernate ORM 7.4.1.Final

WFLY-21999 Upgrade Apche CXF components from 4.1.6 to 4.1.8-jbossorg-1 (CVE-2026-50645, CVE-2026-50632, CVE-2026-49875)

WFLY-22000 Upgrade com.sun.xml.messaging.saaj:saaj-impl from 3.0.5 to 3.0.6

WFLY-22006 Bump com.github.luben:zstd-jni from 1.5.7-10 to 1.5.7-11

WFLY-22007 Upgrade to Apache Artemis 2.54.0

WFLY-22008 [41.0.0.Beta1] Upgrade HAL to 3.7.20.Final

WFLY-22010 Upgrade JBeret to 3.2.0.Beta2

WFLY-22013 Upgrade JBeret to 3.2.0.Final

WFLY-22016 Upgrade WildFly Core to 33.0.0.Beta3

WFLY-22018 Upgrade IronJacamar to 3.0.21.Final

WFLY-22019 Bump version.org.wildfly.bom-builder-plugin from 2.0.10.Final to 2.0.11.Final

WFLY-22023 Upgrade wildfly-clustering to 10.0.9.Final

WFLY-22025 Upgrade smallrye-open-api to 4.3.4

WFLY-22029 Upgrade WildFly Core to 33.0.0.Beta4

WFLY-22030 Upgrade Hibernate Validator to 8.0.4.Final

WFLY-22031 Upgrade WildFly to Hibernate ORM 7.4.3.Final

WFLY-22032 Upgrade Hibernate Validator to 9.1.1.Final

WFLY-22033 Upgrade JGroups to 5.5.6.Final

WFLY-22042 Upgrade Undertow EE to 1.0.1.Final (WildFly EE 10) and 2.0.1.Final

WFLY-22045 Bump version.io.smallrye.smallrye-stork from 2.7.10 to 2.7.11

WFLY-22051 Upgrade smallrye-mutiny-vertx-bindings to 3.23.0

WFLY-22054 Upgrade WildFly Core to 33.0.0.Beta5

WFLY-22055 Upgrade org.jboss.resteasy:resteasy-tracing-api from 2.0.1.Final to 2.0.2.Final

WFLY-22060 Upgrade WildFly EE 10 Jakarta Concurrency API from 3.0.3 to 3.0.4

WFLY-22061 Upgrade Jackson to 2.21.5 (CVE-2026-54515, CVE-2026-59889, GHSA-mhm7-754m-9p8w)

WFLY-22062 Upgrade Vert.x to 4.5.29

WFLY-22063 Upgrade Netty to 4.1.136 (resolves numerous CVEs)

WFLY-22066 Upgrade smallrye-open-api to 4.3.5

WFLY-22067 Upgrade WildFly Core to 33.0.0.Final

WFLY-22069 Upgrade WildFly to Hibernate ORM 7.4.5.Final

WFLY-22070 Upgrade WildFly EE 10 to Hibernate ORM 6.6.54

WFLY-22071 Upgrade Vert.x to 4.5.30

Task

WFLY-10656 Create a test based on messaging-clustering-singleton quickstart

WFLY-14858 Increased coverage of war deployments with a jboss-service.xml

WFLY-21029 Remove profile specific for JDK 23

WFLY-21583 Add modules for galleon-api, galleon-common-api and galleon-maven-universe

WFLY-21754 Move jackson-bom import to end of dependencyManagement in common-ee and common-expansion BOMs

WFLY-21794 Make MailServerAdd to use RestartParentResourceAddHandler auto model attribute population

WFLY-21799 Remove MP REST Client 3.0 logic from testsuite/integration/microprofile-tck/rest-client/pom.xml

WFLY-21823 Add a maven property to specify the JBoss Modules layer used for expansion modules

WFLY-21834 Remove the full WildFly override of the undertow-core version from WildFly Core

WFLY-21917 Remove JUnit 4 dependency from testsuite parent POM

WFLY-21918 Remove hardcoded arquillian-junit-core version in integration parent POM

WFLY-21919 Remove the Elytron Web Version Override from WildFly

WFLY-21924 Quickstart microprofile-rest-client: undertow-servlet has a new groupId

WFLY-21926 Extract properties from root pom.xml to specific bom

WFLY-21934 Bump the Management Model for elytron-oidc-client subsystem.

WFLY-21937 Add next community schema to elytron-oidc-client subsystem

WFLY-21940 Prepare the elytron-oidc-client transforter testsing to test to EAP 8.1

WFLY-21942 Remove separate ExpressionTestCase from elytron-oidc-client

WFLY-21944 Remove boms/legacy-test and rename testsuite/integration/legacy

WFLY-21957 Remove use of deprecated org.wildfly.subsystem.resource.capability.CapabilityReferenceRecorder

WFLY-21958 Disable dependabot for internally released components

WFLY-21969 Add test to ensure Hibernate build time enhancement works

WFLY-21977 Remove WFCORE-7605 workarounds

WFLY-22015 Stop publishing fat server tars to maven

WFLY-22020 Standardize installation directory variable naming JBOSS_HOME/ WFLY_HOME/ WILDFLY_HOME/ YOUR_JBOSS_HOME/ JBOSSHOME/ EAP_HOME / etc in documentation

WFLY-22024 Deprecate AJP listener in Undertow subsystem

WFLY-22072 Suppress CVE-2026-41115

WFLY-22073 Suppress CVE-2026-54428

GitHub Release Notes

In addition to the JIRA-focused notes above, we also provide GitHub generated release notes, which provide links to relevant pull requests. These only reflect work since the WildFly 41.0.0.Beta1 release; the JIRA-based content above covers both 41.0.0 Beta and Final.

What's Changed

New Contributors

Full Changelog: https://github.com/wildfly/wildfly/compare/41.0.0.Beta1...41.0.0.Final