Skip to content

Release 7.0.1: Security Hardening, Reliability Improvements, and Maintenance Updates - #601

Merged
frankgiordano merged 26 commits into
mainfrom
jul28
Aug 4, 2026
Merged

Release 7.0.1: Security Hardening, Reliability Improvements, and Maintenance Updates#601
frankgiordano merged 26 commits into
mainfrom
jul28

Conversation

@frankgiordano

@frankgiordano frankgiordano commented Jul 28, 2026

Copy link
Copy Markdown
Collaborator

Summary (And Release Notes Reference)

This pull request prepares the 7.0.1 maintenance release of the Zowe Client Java SDK.

The release focuses on improving the overall quality, security, and reliability of the SDK without introducing new user-facing features. It primarily addresses issues identified through advanced security analysis, along with several minor robustness, correctness, and maintainability improvements throughout the codebase.

Highlights

  • Eliminated unnecessary mutation of shared Unirest configuration where possible.
  • Resolved multiple security findings identified during automated code analysis.
  • Improved reliability of SSH command execution, including enhanced timeout handling, detection of unexpected network disconnects and requiring known hosts file by default.
  • Corrected URL encoding in REST requests where required.
  • Introduce custom TrustStore support for SSL connections.

Overall, version 7.0.1 is a maintenance release that strengthens the SDK's security posture and operational reliability.

There is a minor breaking change included in this release. This change does not affect any API methods or signatures. It is limited to error message formatting, where the keyword casing has changed in some cases from "DataSet" to "dataset".

Summary of all issues resolved in this release:

#598 - Refactor StrictHostKeyChecking for Ssh connection processing.
#597 - Confine relaxed hostname verification to the Unirest client instance used by the SDK.
#594 - Clear out http headers in initialize method only within ZosmfRequest.
#593 - Remove verifySsl usage for basic and token authentication once the mutated Unirest implementation is removed.
#592 - Avoid mutating the global Unirest configuration.
#602 - Mask sensitive information.
#604 - UssCmd environments variables missing due to profile files not loading in ChannelExec
#605 - Prevent infinite thread block in UssCmd loop during network drop
#606 - Clarify TLS certificate validation options and introduce custom TrustStore support for SSL connections
#607 - Global Unirest Configuration Broke Connection Isolation

@frankgiordano frankgiordano changed the title Rework Unirest usage Rework Unirest usage and security updates. Jul 28, 2026
@frankgiordano frankgiordano linked an issue Jul 28, 2026 that may be closed by this pull request
@frankgiordano frankgiordano linked an issue Jul 29, 2026 that may be closed by this pull request
Signed-off-by: Frank Giordano <giofr01@yahoo.com>
Signed-off-by: Frank Giordano <giofr01@yahoo.com>
Signed-off-by: Frank Giordano <giofr01@yahoo.com>
Signed-off-by: Frank Giordano <giofr01@yahoo.com>
@frankgiordano frankgiordano changed the title Rework Unirest usage and security updates. Release 7.0.1: Security Hardening, Reliability Improvements, and Maintenance Updates Jul 31, 2026
@frankgiordano frankgiordano linked an issue Aug 1, 2026 that may be closed by this pull request
@frankgiordano frankgiordano added the documentation Improvements or additions to documentation label Aug 1, 2026
@frankgiordano
frankgiordano merged commit 424f81f into main Aug 4, 2026
4 checks passed
@frankgiordano
frankgiordano deleted the jul28 branch August 4, 2026 03:00
@frankgiordano frankgiordano linked an issue Aug 6, 2026 that may be closed by this pull request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment