payara · astoica1 · Mar 23, 2026 · Apr 2, 2026 · Apr 3, 2026 · Apr 8, 2026
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -1,8 +1,18 @@
 version: 2
+
+registries:
+  payara-nexus-staging:
+    type: maven-repository
+    url: https://nexus.dev.payara.fish/repository/payara-staging
+    username: ${{ secrets.PAYARA_NEXUS_USERNAME }}
+    password: ${{ secrets.PAYARA_NEXUS_PASSWORD }}
+
 updates:
   # Configuration for Maven
   - package-ecosystem: "maven"
     directory: "/" # Location of package manifests
+    registries:
+      - payara-nexus-staging
     schedule:
       interval: "daily"
     open-pull-requests-limit: 5

diff --git a/Jenkinsfile b/Jenkinsfile
diff --git a/api/payara-api/pom.xml b/api/payara-api/pom.xml
@@ -45,7 +45,7 @@
     <parent>
         <groupId>fish.payara.api</groupId>
         <artifactId>api-parent</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
     <groupId>fish.payara.api</groupId>
     <artifactId>payara-api</artifactId>

diff --git a/api/payara-bom/pom.xml b/api/payara-bom/pom.xml
@@ -44,7 +44,7 @@
     <parent>
         <groupId>fish.payara.api</groupId>
         <artifactId>api-parent</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
 
     <artifactId>payara-bom</artifactId>

diff --git a/api/pom.xml b/api/pom.xml
@@ -43,7 +43,7 @@
     <parent>
         <groupId>fish.payara.server</groupId>
         <artifactId>payara-aggregator</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
 
     <groupId>fish.payara.api</groupId>

diff --git a/appserver/admin/admin-core/pom.xml b/appserver/admin/admin-core/pom.xml
@@ -46,7 +46,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admin</groupId>
         <artifactId>admin</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
     <modelVersion>4.0.0</modelVersion>
     <artifactId>admin-core</artifactId>

diff --git a/appserver/admin/admin-core/src/test/resources/UpgradeTest.xml b/appserver/admin/admin-core/src/test/resources/UpgradeTest.xml
@@ -40,7 +40,7 @@
 
 -->
 
-<!--  Portions Copyright [2017-2024] Payara Foundation and/or affiliates -->
+<!-- Portions Copyright 2017-2026 Payara Foundation and/or its affiliates -->
 
 <domain log-root="${com.sun.aas.instanceRoot}/logs" application-root="${com.sun.aas.instanceRoot}/applications" version="10.0">
   <system-applications>
@@ -168,9 +168,6 @@
         </auth-realm>
         <auth-realm name="certificate" classname="com.sun.enterprise.security.auth.realm.certificate.CertificateRealm"></auth-realm>
         <jacc-provider policy-provider="org.glassfish.exousia.modules.def.DefaultPolicy" name="default" policy-configuration-factory-provider="org.glassfish.exousia.modules.def.DefaultPolicyConfigurationFactory"></jacc-provider>
-        <audit-module name="default" classname="com.sun.enterprise.security.ee.Audit">
-          <property name="auditOn" value="false"></property>
-        </audit-module>
         <message-security-config auth-layer="SOAP">
           <provider-config provider-type="client" provider-id="XWS_ClientProvider" class-name="com.sun.xml.wss.provider.ClientSecurityAuthModule">
             <request-policy auth-source="content"></request-policy>

diff --git a/appserver/admin/backup-l10n/pom.xml b/appserver/admin/backup-l10n/pom.xml
@@ -45,7 +45,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admin</groupId>
         <artifactId>admin</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
     <modelVersion>4.0.0</modelVersion>
     <artifactId>backup-l10n</artifactId>

diff --git a/appserver/admin/backup/pom.xml b/appserver/admin/backup/pom.xml
@@ -45,7 +45,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admin</groupId>
         <artifactId>admin</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
     <modelVersion>4.0.0</modelVersion>
     <artifactId>backup</artifactId>

diff --git a/appserver/admin/cli-optional-l10n/pom.xml b/appserver/admin/cli-optional-l10n/pom.xml
@@ -47,7 +47,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admin</groupId>
         <artifactId>admin</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
     <artifactId>cli-optional-l10n</artifactId>
 

diff --git a/appserver/admin/cli-optional/pom.xml b/appserver/admin/cli-optional/pom.xml
@@ -47,7 +47,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admin</groupId>
         <artifactId>admin</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
     <artifactId>cli-optional</artifactId>
     <packaging>glassfish-jar</packaging>

diff --git a/appserver/admin/cli/pom.xml b/appserver/admin/cli/pom.xml
@@ -47,7 +47,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admin</groupId>
         <artifactId>admin</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
     <artifactId>appserver-cli</artifactId>
     <packaging>glassfish-jar</packaging>

diff --git a/appserver/admin/gf_template/pom.xml b/appserver/admin/gf_template/pom.xml
@@ -47,7 +47,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admin</groupId>
         <artifactId>admin</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
 
     <artifactId>appserver-domain</artifactId>

diff --git a/appserver/admin/gf_template/src/main/resources/config/domain.xml b/appserver/admin/gf_template/src/main/resources/config/domain.xml
@@ -41,7 +41,7 @@
     holder.
 
 -->
-<!-- Portions Copyright 2017-2025 Payara Foundation and/or its affiliates -->
+<!-- Portions Copyright 2017-2026 Payara Foundation and/or its affiliates -->
 
 <domain log-root="${com.sun.aas.instanceRoot}/logs" application-root="${com.sun.aas.instanceRoot}/applications" version="10.0">
     <hazelcast-runtime-configuration start-port="%%%HAZELCAST_START_PORT%%%" das-port="%%%HAZELCAST_DAS_PORT%%%" auto-increment-port="%%%HAZELCAST_AUTO_INCREMENT%%%"></hazelcast-runtime-configuration>
@@ -147,9 +147,6 @@
                     <property value="true" name="certificate-validation"/>
                 </auth-realm>
                 <jacc-provider policy-provider="org.glassfish.exousia.modules.def.DefaultPolicy" name="default" policy-configuration-factory-provider="org.glassfish.exousia.modules.def.DefaultPolicyConfigurationFactory"></jacc-provider>
-                <audit-module classname="com.sun.enterprise.security.ee.Audit" name="default">
-                    <property value="false" name="auditOn" />
-                </audit-module>
                 <message-security-config auth-layer="SOAP">
                     <provider-config provider-id="XWS_ClientProvider" class-name="com.sun.xml.wss.provider.ClientSecurityAuthModule" provider-type="client">
                         <request-policy auth-source="content" />
@@ -381,9 +378,6 @@
                     <property name="certificate-validation" value="true" />
                 </auth-realm>
                 <jacc-provider policy-provider="org.glassfish.exousia.modules.def.DefaultPolicy" name="default" policy-configuration-factory-provider="org.glassfish.exousia.modules.def.DefaultPolicyConfigurationFactory"></jacc-provider>
-                <audit-module classname="com.sun.enterprise.security.ee.Audit" name="default">
-                    <property value="false" name="auditOn" />
-                </audit-module>
                 <message-security-config auth-layer="SOAP">
                     <provider-config provider-type="client" provider-id="XWS_ClientProvider" class-name="com.sun.xml.wss.provider.ClientSecurityAuthModule">
                         <request-policy auth-source="content" />

diff --git a/...c/main/resources/config/glassfish-acc.xml → .../src/main/resources/config/payara-acc.xml b/...c/main/resources/config/glassfish-acc.xml → .../src/main/resources/config/payara-acc.xml
@@ -40,6 +40,7 @@
     holder.
 
 -->
+<!-- Portions Copyright 2026 Payara Foundation and/or its affiliates -->
 
 <!--
    Please remember to customize this file for your environment. The defaults for 
@@ -48,7 +49,7 @@
    - Property security.config in message-security-config
 -->
 
-<!DOCTYPE client-container PUBLIC "-//GlassFish.org//DTD GlassFish Application Server 3.1 Application Client Container//EN" "http://glassfish.org/dtds/glassfish-application-client-container_1_3.dtd">
+<!DOCTYPE client-container PUBLIC "-//Payara.fish//DTD Payara Application Server 7 Application Client Container//EN" "https://raw.githubusercontent.com/payara/Payara-Documentation/main-7/docs/modules/ROOT/pages/Appendix/Schemas/payara-application-client-container_1_4.dtd">
 
 <client-container>
   <target-server name="%%%SERVER_NAME%%%" address="localhost" port="%%%ORB_LISTENER1_PORT%%%"/>

diff --git a/appserver/admin/gf_template/src/main/resources/stringsubs.xml b/appserver/admin/gf_template/src/main/resources/stringsubs.xml
@@ -39,7 +39,7 @@
     only if the new code is made subject to such option by the copyright
     holder.
 
-    Portions Copyright [2019] [Payara Foundation and/or its affiliates]
+    Portions Copyright 2019-2026 Payara Foundation and/or its affiliates
 
 -->
 <stringsubs-definition name="em" version="1.0.0.0" xmlns="http://xmlns.oracle.com/cie/glassfish/stringsubs">
@@ -48,7 +48,7 @@
     </component>
     <group id="glassfish-core-sub" mode="forward">
         <file-entry name="$DOMAIN_DIR$/config/domain.xml"/>
-        <file-entry name="$DOMAIN_DIR$/config/glassfish-acc.xml"/>
+        <file-entry name="$DOMAIN_DIR$/config/payara-acc.xml"/>
         <file-entry name="$DOMAIN_DIR$/docroot/index.html"/>
         <change-pair-ref name="VERSION"/>
         <change-pair-ref name="INSTALL_ROOT"/>

diff --git a/appserver/admin/gf_template_web/pom.xml b/appserver/admin/gf_template_web/pom.xml
@@ -48,7 +48,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admin</groupId>
         <artifactId>admin</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
 
     <artifactId>appserver-domain-web</artifactId>

diff --git a/appserver/admin/gf_template_web/src/main/resources/config/domain.xml b/appserver/admin/gf_template_web/src/main/resources/config/domain.xml
@@ -41,7 +41,7 @@
     holder.
 
 -->
-<!-- Portions Copyright 2017-2025 Payara Foundation and/or its affiliates -->
+<!-- Portions Copyright 2017-2026 Payara Foundation and/or its affiliates -->
 
 <domain log-root="${com.sun.aas.instanceRoot}/logs" application-root="${com.sun.aas.instanceRoot}/applications" version="10.0">
   <hazelcast-runtime-configuration start-port="%%%HAZELCAST_START_PORT%%%" das-port="%%%HAZELCAST_DAS_PORT%%%" auto-increment-port="%%%HAZELCAST_AUTO_INCREMENT%%%"></hazelcast-runtime-configuration>
@@ -146,9 +146,6 @@
           <property value="true" name="certificate-validation"/>
         </auth-realm>
         <jacc-provider policy-provider="org.glassfish.exousia.modules.def.DefaultPolicy" name="default" policy-configuration-factory-provider="org.glassfish.exousia.modules.def.DefaultPolicyConfigurationFactory"></jacc-provider>
-        <audit-module classname="com.sun.enterprise.security.ee.Audit" name="default">
-          <property value="false" name="auditOn" />
-        </audit-module>
         <message-security-config auth-layer="SOAP">
           <provider-config provider-id="XWS_ClientProvider" class-name="com.sun.xml.wss.provider.ClientSecurityAuthModule" provider-type="client">
             <request-policy auth-source="content" />
@@ -376,9 +373,6 @@
           <property value="true" name="certificate-validation"/>
         </auth-realm>
         <jacc-provider policy-provider="org.glassfish.exousia.modules.def.DefaultPolicy" name="default" policy-configuration-factory-provider="org.glassfish.exousia.modules.def.DefaultPolicyConfigurationFactory"></jacc-provider>
-        <audit-module classname="com.sun.enterprise.security.ee.Audit" name="default">
-          <property value="false" name="auditOn" />
-        </audit-module>
         <message-security-config auth-layer="SOAP">
           <provider-config provider-type="client" provider-id="XWS_ClientProvider" class-name="com.sun.xml.wss.provider.ClientSecurityAuthModule">
             <request-policy auth-source="content" />

diff --git a/...c/main/resources/config/glassfish-acc.xml → .../src/main/resources/config/payara-acc.xml b/...c/main/resources/config/glassfish-acc.xml → .../src/main/resources/config/payara-acc.xml
@@ -38,6 +38,7 @@
    only if the new code is made subject to such option by the copyright
    holder.
 -->
+<!-- Portions Copyright 2026 Payara Foundation and/or its affiliates -->
 
 <!--
    Please remember to customize this file for your environment. The defaults for 
@@ -46,7 +47,7 @@
    - Property security.config in message-security-config
 -->
 
-<!DOCTYPE client-container PUBLIC "-//GlassFish.org//DTD GlassFish Application Server 3.1 Application Client Container//EN" "http://glassfish.org/dtds/glassfish-application-client-container_1_3.dtd">
+<!DOCTYPE client-container PUBLIC "-//Payara.fish//DTD Payara Application Server 7 Application Client Container//EN" "https://raw.githubusercontent.com/payara/Payara-Documentation/main-7/docs/modules/ROOT/pages/Appendix/Schemas/payara-application-client-container_1_4.dtd">
 
 <client-container>
   <target-server name="%%%SERVER_NAME%%%" address="localhost" port="%%%ORB_LISTENER1_PORT%%%"/>

diff --git a/appserver/admin/gf_template_web/src/main/resources/stringsubs.xml b/appserver/admin/gf_template_web/src/main/resources/stringsubs.xml
@@ -2,7 +2,7 @@
 <!--
    DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
 
-   Copyright (c) [2017-2019] Payara Foundation and/or its affiliates. All rights reserved.
+   Copyright (c) 2017-2026 Payara Foundation and/or its affiliates. All rights reserved.
 
    The contents of this file are subject to the terms of either the GNU
    General Public License Version 2 only ("GPL") or the Common Development
@@ -44,7 +44,7 @@
     </component>
     <group id="glassfish-core-sub" mode="forward">
     <file-entry name="$DOMAIN_DIR$/config/domain.xml"/>
-        <file-entry name="$DOMAIN_DIR$/config/glassfish-acc.xml"/>
+        <file-entry name="$DOMAIN_DIR$/config/payara-acc.xml"/>
         <file-entry name="$DOMAIN_DIR$/docroot/index.html"/>
         <change-pair-ref name="VERSION"/>
         <change-pair-ref name="INSTALL_ROOT"/>

diff --git a/appserver/admin/pom.xml b/appserver/admin/pom.xml
@@ -48,7 +48,7 @@
     <parent>
         <groupId>fish.payara.server</groupId>
         <artifactId>payara-parent</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
     <groupId>fish.payara.server.internal.admin</groupId>
     <artifactId>admin</artifactId>

diff --git a/appserver/admingui/cdieventbus-notifier-console-plugin-l10n/pom.xml b/appserver/admingui/cdieventbus-notifier-console-plugin-l10n/pom.xml
@@ -46,7 +46,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admingui</groupId>
         <artifactId>admingui</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
 
     <artifactId>cdieventbus-notifier-console-plugin-l10n</artifactId>

diff --git a/appserver/admingui/cdieventbus-notifier-console-plugin/pom.xml b/appserver/admingui/cdieventbus-notifier-console-plugin/pom.xml
@@ -43,7 +43,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admingui</groupId>
         <artifactId>admingui</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
     <artifactId>cdieventbus-notifier-console-plugin</artifactId>
     <packaging>glassfish-jar</packaging>

diff --git a/appserver/admingui/cluster-l10n/pom.xml b/appserver/admingui/cluster-l10n/pom.xml
@@ -46,7 +46,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admingui</groupId>
         <artifactId>admingui</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
     <artifactId>console-cluster-plugin-l10n</artifactId>
 

diff --git a/appserver/admingui/cluster/pom.xml b/appserver/admingui/cluster/pom.xml
@@ -46,7 +46,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admingui</groupId>
         <artifactId>admingui</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
     <artifactId>console-cluster-plugin</artifactId>
     <packaging>glassfish-jar</packaging>

diff --git a/appserver/admingui/common-l10n/pom.xml b/appserver/admingui/common-l10n/pom.xml
@@ -46,7 +46,7 @@
     <parent>
         <groupId>fish.payara.server.internal.admingui</groupId>
         <artifactId>admingui</artifactId>
-        <version>7.2026.5-SNAPSHOT</version>
+        <version>7.2026.6-SNAPSHOT</version>
     </parent>
 
     <artifactId>console-common-l10n</artifactId>

diff --git a/...mingui/common-l10n/src/main/resources/org/glassfish/common/admingui/Strings_de.properties b/...mingui/common-l10n/src/main/resources/org/glassfish/common/admingui/Strings_de.properties
@@ -46,7 +46,6 @@ tree.domain=Domain
 ## All the msg.JS.xxx strings are showed by JavaScript in a popup window.  Ensure that no  ' (apostrophe) is included in them
 msg.JS.confirmDeleteRealms=Die ausgew\u00E4hlten Realms werden gel\u00F6scht. Fortfahren?
 msg.JS.confirmDeleteJaccProviders=Die ausgew\u00E4hlten JACC-Provider werden gel\u00F6scht. Fortfahren?
-msg.JS.confirmDeleteAuditModules=Die ausgew\u00E4hlten Auditmodule werden gel\u00F6scht. Fortfahren?
 msg.JS.confirmDeleteMsgSecurities=Die ausgew\u00E4hlten Nachrichtensicherheitskonfigurationen werden gel\u00F6scht. Fortfahren?
 msg.JS.confirmDeleteMsgProviders=Die ausgew\u00E4hlten Provider werden gel\u00F6scht. Fortfahren?
 msg.JS.confirmDeleteUser=Die ausgew\u00E4hlten Benutzer werden gel\u00F6scht. Fortfahren?
@@ -74,8 +73,6 @@ security.Security=Sicherheit
 security.SecurityPageHelp=Sicherheitseigenschaften f\u00FCr den gesamten Server festlegen.
 security.SecurityManager=Security Manager
 security.SecurityManagerHelp=Aktivieren Sie den Security Manager f\u00FCr die Domain, indem Sie eine Option in den JVM-Einstellungen hinzuf\u00FCgen
-security.AuditLogging=Audit-Logging
-security.AuditLoggingHelp=Erm\u00F6glichen Sie dem Server das Laden und Ausf\u00FChren aller Auditmodule, die in der Einstellung "Auditmodule" angegeben sind
 security.DefaultRealm=Standard-Realm
 security.DefaultRealmHelp=Standard-Realm, die von allen Anwendungen zur Authentifizierung verwendet wird
 security.DefaultPrincipal=Standard-Principal
@@ -84,13 +81,10 @@ security.DefaultPrincipalPassword=Standard-Principal-Kennwort
 security.DefaultPrincipalPasswordHelp=Erforderlich, wenn "Standard-Principal" einen Wert enth\u00E4lt
 security.Jacc=JACC
 security.JaccHelp=Name des <tt>jacc-provider</tt>-Elements f\u00FCr die Konfiguration der JACC-Infrastruktur
-security.AuditModules=Auditmodule
-security.AuditModulesHelp=Liste der Auditprovidermodule, die vom Audit-Subsystem verwendet werden. Halten Sie f\u00FCr die Mehrfachauswahl die STRG-Taste gedr\u00FCckt
 security.RoleMapping=Zuordnung von Standard-Principal zu Rolle
 security.RoleMappingHelp=Wenden Sie beim Deployment die Zuordnung von Standard-Principal zu Rolle an, wenn keine anwendungsspezifische Zuordnung definiert ist. Dies wirkt sich nicht auf derzeit bereitgestellte Anwendungen aus
 security.MappedPrincipalClass=Zugeordnete Principal-Klasse
 security.MappedPrincipalClassHelp=Passen Sie die f\u00FCr die Zuordnung von Standard-Principal zu Rolle verwendete java.security.Principal-Implementierungsklasse an
-security.AuditModule.auditOn=Audit aktiviert
 security.secureAdmin=Sichere Administration
 security.secureAdmin.newPageTitleHelp=Die Aktivierung oder Deaktivierung der sicheren Administration wirkt sich auf die gesamte Domain aus, einschlie\u00DFlich DAS und aller Instanzen.
 security.secureAdmin.adminalias=Administrationsalias:
@@ -149,19 +143,7 @@ realm.encoding=Codierung:
 realm.encodingHelp=Codierung (zul\u00E4ssige Werte: Hex und Base64)
 realm.charset=Zeichensatz:
 realm.charsetHelp=Zeichensatz f\u00FCr den Digest-Algorithmus
-realm.internalError=Interner Fehler. Es wurde kein Realm-Name angegeben. 
-
-## Audit Modules
-auditModule.TableTitle=Module
-auditModule.PageTitle=Auditmodule
-auditModule.PageHelp=Verwenden Sie Auditmodule zur Entwicklung eines Audit-Trails f\u00FCr alle Authentifizierungs- und Autorisierungsentscheidungen.
-auditModule.Classname=Klassenname:
-auditModule.ClassnameHelp=Name der Auditmodulklasse
-auditModule.EditPageTitle=Auditmodul bearbeiten
-auditModule.EditPageTitleHelp=Entwickelt ein Audit-Trail f\u00FCr alle Authentifizierungs- und Autorisierungsentscheidungen.
-auditModule.NewPageTitle=Neues Auditmodul
-auditModule.NewPageTitleHelp=Verwenden Sie Auditmodule zur Entwicklung eines Audit-Trails f\u00FCr alle Authentifizierungs- und Autorisierungsentscheidungen.
-
+realm.internalError=Interner Fehler. Es wurde kein Realm-Name angegeben.
 
 ## Manage Users
 manageUsers.UserID=Benutzer-ID: