Skip to content

add release notes for api ml 2.18.3 #4749

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 9 commits into from
Oct 31, 2025
+129 −1
Merged

add release notes for api ml 2.18.3 #4749

Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
df71dcc
add release notes for api ml 2.18.3
janan07 Oct 14, 2025
2139cc7
add detail to bug fix
janan07 Oct 15, 2025
7638259
Merge branch 'master' into janan07/release-notes-2.18.3
janan07 Oct 15, 2025
e623cfd
apply Pavel's recommendation
janan07 Oct 15, 2025
430c8ed
additions, deletions, description fixes
janan07 Oct 15, 2025
d9160a6
add vulnerabilities
janan07 Oct 15, 2025
ae12217
add 2_18_3 to sidebars.js
janan07 Oct 22, 2025
fa2b384
Update v2_18_3.md
Martin-Zeithaml Oct 30, 2025
c54239a
Merge branch 'master' into janan07/release-notes-2.18.3
MarkAckert Oct 31, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
114 changes: 114 additions & 0 deletions docs/whats-new/release-notes/v2_18_3.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,114 @@
# Version 2.18.3 (October 2025)

Welcome to the Zowe Version 2.18.3 release!

See [New features and enhancements](#new-features-and-enhancements) for a full list of changes to the functionality. See [Bug fixes](#bug-fixes) for a list of issues addressed in this release.

**Download v2.18.3 build**: Want to try new features as soon as possible? You can download the v2.3.0 build from [Zowe.org](https://www.zowe.org/download.html).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
**Download v2.18.3 build**: Want to try new features as soon as possible? You can download the v2.3.0 build from [Zowe.org](https://www.zowe.org/download.html).
**Download v2.18.3 build**: Want to try new features as soon as possible? You can download the v2.18.3 build from [Zowe.org](https://www.zowe.org/download.html).

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also the URL could be https://www.zowe.org/download.html#download-v2


## New features and enhancements

Zowe Version 2.18.3 contains the enhancements that are described in the following topics.

:::info find out more
To watch a demo of new enhancements and updated features included in a Zowe minor release, look for the release demo recording in the [Zowe V2 System Demo playlist](https://www.youtube.com/playlist?list=PL8REpLGaY9QGjSTAqZaWxLG_g-jW1qGmo) on YouTube.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The latest demo was for 2.11.0. Even that I guess since the v2 is in maintain mode, there will be no video...


System demos are typically held the week after a minor release becomes available. Check the [Open Mainframe Project Calendar](https://zoom-lfx.platform.linuxfoundation.org/meetings/zowe) for the latest schedule.
:::

### Zowe installation and packaging

### Zowe Application Framework

### Zowe API Mediation Layer


* This Zowe version supports the PATCH method in CORS. A configuration property has been addedto the list of CORS allowed HTTP methods. ([#4255](https://github.com/zowe/api-layer/issues/4255))
Copy link
Collaborator

@Martin-Zeithaml Martin-Zeithaml Oct 15, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

addedto -> added to

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PATCH is method, not configuration protperty. Maybe: It (the patch method) has been added to the list of CORS allowed HTTP methods.


* This Zowe version supports Keycloak as an OIDC provider in integration tests. ([#4323](https://github.com/zowe/api-layer/issues/4323))

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* This Zowe version supports Keycloak as an OIDC provider in integration tests. ([#4323](https://github.com/zowe/api-layer/issues/4323))

We shouldn't mentioned this one. I made a mistake. There is no functional change, it is just fix for pipeline/testing. It doesn't worth to be here.

### Zowe CLI

#### Zowe CLI (Core)

#### Zowe CLI Imperative Framework

#### CICS Plug-in for Zowe CLI

#### DB2 Plug-in for Zowe CLI

#### MQ Plug-in for Zowe CLI

#### IMS Plug-in for Zowe CLI

### Zowe Explorer

#### Zowe Explorer (Core)

- See the [Zowe Explorer](https://github.com/zowe/zowe-explorer-vscode/blob/main/packages/zowe-explorer/CHANGELOG.md) changelog for updates included in this release.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I guess (in general) there should be anchor, like .../CHANGELOG.md#2183. But actually Zowe explorer doesn't have any.


#### Zowe Explorer API

- See the [Zowe Explorer API](https://github.com/zowe/zowe-explorer-vscode/blob/main/packages/zowe-explorer-api/CHANGELOG.md) changelog for updates included in this release.

#### Zowe Explorer FTP Extension

- See the [Zowe Explorer FTP Extension](https://github.com/zowe/zowe-explorer-vscode/blob/main/packages/zowe-explorer-ftp-extension/CHANGELOG.md) changelog for updates included in this release.

#### Zowe Explorer ESLint Plug-in

- See the [Zowe Explorer ESLint Plug-in](https://github.com/zowe/zowe-explorer-vscode/blob/main/packages/eslint-plugin-zowe-explorer/CHANGELOG.md) changelog for updates included in this release.

## Bug fixes

Zowe Version 2.18.3 contains the bug fixes that are described in the following topics.

### Zowe installation and packaging

### Zowe Application Framework

### Zowe API Mediation Layer

* Fixed default eureka intervals of the Caching Service. ([#4225](https://github.com/zowe/api-layer/issues/4225))
* Fixed the API ML services logs so that "URL/Path not transformed" entries omit API ML services. ([#4292](https://github.com/zowe/api-layer/issues/4292))
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is more detail message than in the original APIML's changelog. We should change the text in there as well

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok

* Fixed z/OSMF static definition for AT-TLS. ([#4330](https://github.com/zowe/api-layer/issues/4330)
* Resolved AT-TLS URL and keyring configuration issues causing incorrect Swagger URLs and gateway startup failures. ([#4337](https://github.com/zowe/api-layer/issues/4337))
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Original text: Fix URLs for onboarding when AT-TLS is enabled and gateway read a keyring with empty values

There are two issues:

  • a wrong Gateway URL in API Catalog when AT-TLS is enabled
  • a startup issue is ICSF keyring is used

This text looks to me that the issue are releated, but not.

suggestion: Fix a wrong Gateway URL in API Catalog when AT-TLS is enabled and a startup issue is ICSF keyring is used

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok. I changed this to:

"Fixed an incorrect Gateway URL in API Catalog when AT-TLS is enabled, and a startup issue when ICSF keyring is used."
Please verify if this is correct. Thanks

* Fixed correct protocol scheme in hybrid AT-TLS setup. ([#4338](https://github.com/zowe/api-layer/issues/4338))

### Zowe CLI

#### Zowe CLI (Core)

#### Zowe CLI Imperative Framework

#### CICS Plug-in for Zowe CLI

#### DB2 Plug-in for Zowe CLI

#### MQ Plug-in for Zowe CLI

#### IMS Plug-in for Zowe CLI

### Zowe Explorer

#### Zowe Explorer (Core)

- See the [Zowe Explorer](https://github.com/zowe/zowe-explorer-vscode/blob/main/packages/zowe-explorer/CHANGELOG.md) changelog for updates included in this release.

#### Zowe Explorer API

- See the [Zowe Explorer API](https://github.com/zowe/zowe-explorer-vscode/blob/main/packages/zowe-explorer-api/CHANGELOG.md) changelog for updates included in this release.

#### Zowe Explorer FTP Extension

- See the [Zowe Explorer FTP Extension](https://github.com/zowe/zowe-explorer-vscode/blob/main/packages/zowe-explorer-ftp-extension/CHANGELOG.md) changelog for updates included in this release.

#### Zowe Explorer ESLint Plug-in

- See the [Zowe Explorer ESLint Plug-in](https://github.com/zowe/zowe-explorer-vscode/blob/main/packages/eslint-plugin-zowe-explorer/CHANGELOG.md) changelog for updates included in this release.

### Vulnerabilities fixed

Zowe discloses fixed vulnerabilities in a timely manner giving you sufficient time to plan your upgrades. Zowe does not disclose the vulnerabilities fixed in the latest release as we respect the need for at least 45 days to decide when and how you upgrade Zowe. When a new release is published, Zowe publishes the vulnerabilities fixed in the previous release. For more information about the Zowe security policy, see the [Security page](https://www.zowe.org/security.html) on the Zowe website.

The following security issues were fixed by the Zowe security group in version 2.2.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
The following security issues were fixed by the Zowe security group in version 2.2.
The following security issues were fixed by the Zowe security group in version 2.18.3.

We should provider the list.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you please provide me with this list?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is the list of vulnerabilities in the upgraded dependencies:

CVE-2025-48989 (BDSA-2025-8608)
CVE-2025-8916 (BDSA-2025-8573)
CVE-2025-5115 (BDSA-2025-9581)
CVE-2024-6763 (BDSA-2024-7229)
CVE-2025-58057 (BDSA-2025-10732)
CVE-2025-58056 (BDSA-2025-10730)
CVE-2025-55163 (BDSA-2025-8614)

We usually don't provide any additional information, so I guess nothing more is not needed.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Addressed

Loading