4.8.0

This minor release addresses the following items:

• Updated dependencies.
• Can now deploy/undeploy credentials. See https://github.com/marklogic/ml-gradle/wiki/Resource-reference#security---credentials and https://docs.marklogic.com/REST/PUT/manage/v2/credentials/properties for more information.
• Better error message when databases have circular dependencies.
• Better invalid numeric property error handling.

4.7.0

This minor release features the following items:

• Added new properties for two-way SSL for each of the 4 connections that ml-app-deployer supports (Admin, Manage, App-Services, and a REST API app server). See the ml-gradle property reference for a list of these properties - can search on the word "KeyStore" and "TrustStore".
• Bumped Spring dependency from 5.3.29 to 5.3.31; Jackson dependency from 2.15.2 to 2.15.3; and OkHttp dependency from 4.11.0 to 4.12.0.

4.6.1

This patch release addresses two issues:

• Custom forest files are now each deployed in a separate request to MarkLogic. This can help avoid timeout issues when deploying hundreds of custom forests or more, as users can divide their custom forests into separate files.
• When using a "simple" SSL for a connection to the Manage or Admin app server, hostnames are no longer verified.

4.6.0

This minor release addresses the following items:

• #489 When scaffolding a new project, a schemas database is created by default now.
• #490 When scaffolding a new project, the new roles reference the rest-reader and rest-writer privileges instead of roles.
• #491 Added new TestConnectionsCommand to test each connection that can be made to MarkLogic and to an application's REST API app servers.
• #479 Fixed typo in toString() in RestConfig.
• Added new properties mlCascadeCollections and mlCascadePermissions so that settings in collections.properties and permissions.properties files will be cascaded to child directories when loading data, modules, and schemas.
• Includes improvements in ml-javaclient-util 4.6.0.

4.5.3

This patch release addresses a performance issue with clusters with large (typically hundreds) of forests, where one request was made per forest to get details about a forest. This release now uses the Configuration Management API to retrieve details of all forests in a single request.

A related problem involving replica forests is also fixed in this release. Similar to primary forests, replica forests are now created in a single request to the Configuration Management API, as opposed to one request per forest.

4.5.2

This patch release addresses a single item:

• Bumped Spring dependency from 5.3.24 to 5.3.27 to address CVE https://spring.io/security/cve-2023-20860 .

4.5.1

This bugfix release addresses a single issue:

• ml-gradle tasks that do not require authentication started failing in 4.5.0 when no authentication was configured. This failure was due to the change in ml-app-deployer 4.5.0 that removed the insecure admin/admin credentials as a default.

4.5.0

This minor release addresses the following items:

Security fixes

• ml-app-deployer no longer defaults to a username of "admin" and a password of "admin" when connecting to MarkLogic. Most users will not be impacted, particularly ml-gradle users that are already setting at least mlUsername and mlPassword. You will only be impacted if you are embedding ml-app-deployer, not configuring any authentication, and assuming that "admin/admin" should authenticate successfully.

Deprecations

• Connections to the MarkLogic Manage API and Admin API are now made with OkHttp instead of Apache HTTP. This was done to allow for the connection plumbing in the MarkLogic Java Client to be reused.
• As a result, a small number of methods that depend on Apache HTTP APIs in the com.marklogic.rest.util have been deprecated and will be removed in the next major release. These methods will all continue to work - e.g. you can continue to use RestTemplateUtil with the Apache HTTP-specific APIs - but they are no longer used by the rest of the ml-app-deployer library when making connections to MarkLogic.

New features

• Now supports SAML, Kerberos, and Certificate authentication for all connections to MarkLogic . New properties to support these connection types can be found in the ml-gradle Property Reference.
• Supports connections for the upcoming MarkLogic Cloud release.
• Depends on ml-javaclient-util 4.5.0 and Java Client 6.1.0

4.4.0

This minor release addresses the following items:

1. Depends on ml-javaclient-util 4.4.0 and MarkLogic Java Client 6.0.0
2. #459 Adds support for deploying secure credentials

4.3.7

Bugfix release that includes one item:

• Depends on ml-javaclient-util 4.3.7, which addresses security vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-42004