LoginSign Up
← Back to all sparks
A

Apereo CAS

INFRA · APIS
Velocity2.5

Enterprise single sign-on and identity federation server

apereo.github.io/cas ↗

Apereo CAS 8.1.0 reaches a third release candidate with 8.0.0 still not final.

identityssoopen-sourcerelease-candidatessecurity-patching
◆Current state
CAS runs long release-candidate trains. 8.0.0 reached RC6 in June without a final in this feed, and the 8.1.0 line has since moved through RC1 in August, RC2 in September and RC3 in October. A 7.3.7.1 patch in June fixed a published OIDC vulnerability on the maintenance branch. The release entries list only documentation links and contributor credits, so their contents are not visible here.
◆Where it's heading
Candidates arrive about monthly, and 8.1 has overtaken 8.0 as the active line. Without notes in the entries, the feed tracks timing rather than content.
◆Prediction
An 8.1.0-RC4 or an 8.1.0 final is the next likely entry, on the same roughly monthly rhythm.

◆Recent moves

  1. 21d ago

    CAS 8.1.0 release candidate 3

    A third release candidate for CAS 8.1.0 whose notes list only links and contributors. A step toward the 8.1.0 final.

    View source ↗
  2. 1mo ago

    CAS 8.1.0 release candidate 2

    The second 8.1.0 candidate, a month after RC1, with only links and three contributor credits in its notes. It keeps the monthly candidate rhythm.

    View source ↗
  3. 2mo ago

    v8.1.0-RC1

    The first release candidate of the 8.1.0 line, arriving while 8.0.0 is still in its own RC train. Opening a forward branch is the notable part; the entry itself is the project's standard template of documentation links and contributor thanks, with no feature detail.

    View source ↗
  4. 4mo ago

    v8.0.0-RC6

    The sixth 8.0 release candidate, published with the same boilerplate as the others and no description of its changes. Its only readable content is the contributor list, which stays small and consistent across the series.

    View source ↗
  5. 4mo ago

    Patch release for a published OIDC vulnerability

    The only entry in this window carrying real substance: a v7 patch whose notes point directly at an OIDC vulnerability advisory. For a single sign-on server, a flaw in the OIDC path is the category of issue that forces an unscheduled upgrade.

    View source ↗
  6. 5mo ago

    v8.0.0-RC5

    The fifth 8.0 candidate, following the same template with no described changes. The roughly monthly gap to the next candidate is the only signal it carries.

    View source ↗