Skip to main content

77.0.0

· 7 min read

Added​

  • all services: a9s BOSH Deployer: Add healthz and livez endpoints for liveness and readiness probing.
  • all services: a9s Service Broker: Add a new broker-mtls NGINX upstream, listening on port 3002. This allows internal a9s Data Services Framework components to authenticate against the a9s Service Broker using mutual TLS (mTLS) in addition to the existing basic authentication. This upstream is backed by the new CredHub certificate a9s_broker_mtls_cert. This port is not yet consumed by any component, thus no new firewall rules need to be configured.
  • all services: a9s Template Uploader Errand: Introduce scoped parameters template-scoped-variables, and template-scoped-templates to allow more fine-grained configuration.
  • a9s Service Broker: a9s PostgreSQL: Add a Rake task to migrate the custom parameters of a9s PostgreSQL Service Instances to modify the schema of custom parameters according to the latest structure.
  • docs: Platform Operator: a9s PostgreSQL: Create a migration guide covering the manual steps required by Platform Operators to migrate the custom parameters of a9s PostgreSQL Service Instances. For more information, see a9s Lifecycle Management - a9s Service Broker - Migrate a9s PostgreSQL Custom Parameters
  • docs: Platform Operator: a9s PostgreSQL: Update the documentation to reflect the new parameters available in the custom parameter configuration. For more information, see a9s PostgreSQL - SPI Configuration.
  • docs: Platform Operator: a9s Service Broker: Document the new a9s_broker_mtls_cert certificate and the broker-mtls port used for mTLS authentication against the a9s Service Broker. For more information, see Additional Configuration - TLS Encryption, Getting Started - Architecture - Networks - Ports and a9s Service Broker - mTLS Endpoint.
  • docs: Platform Operator: a9s Template Uploader Errand: Document the usage of the scoped parameters template-scoped-variables, and template-scoped-templates. For more information, see a9s Lifecycle Management - a9s Template Uploader Errand.

Changed​

  • breaking change a9s PostgreSQL: Change the underlying schema of custom parameters in a9s PostgreSQL. To ensure a smooth migration for the existing Service Instances, some additional steps are needed in the stated order. Before upgrading to v77.0.0, all a9s PostgreSQL Service Instances must be backed up via the platform backup framework. Once the backup is performed and PostgreSQL Service Instances are updated to adapt the latest BOSH releases, the Platform Operator needs to manually execute a migration task to migrate custom parameters for PostgreSQL Service Instances in deleted, stopped and failed states. For more information regarding the migration of custom parameters, see Migrate a9s PostgreSQL Custom Parameters, and UPGRADE.md.
  • all services: a9s BOSH Deployer: Improve internal handling of temp files and harden Shell command usage.
  • all services: a9s BOSH Deployer: Improve internal handling of VM details.
  • all services: a9s Service Broker: Extend error handling in the a9s Service Broker to return a 410 Gone status when attempting to delete credentials from a Service Instance that has been deleted. Furthermore, the debug logs of the related actions have been extended.
  • a9s Backup Services: a9s Backup Manager: Limit the amount of jobs running at the same time, to reduce the load during full backup runs. This does not impact backup runtime.
  • a9s KeyValue: a9s KeyValue SPI: Change the custom parameters min-replicas-to-write, min-replicas-max-lag, and repl-backlog-size to be enabled only for cluster Service Instances instead of all Service Instances.
  • docs: Application Developer: a9s KeyValue: Update the documentation to reflect the new behavior of the custom parameters min-replicas-to-write, min-replicas-max-lag, and repl-backlog-size. For more information, see a9s KeyValue - Custom Parameters.
  • docs: Application Developer: a9s Messaging: Add information about the limitations in the metrics emitted for a9s Messaging 4. For more information, see a9s Messaging - Metrics.
  • docs: Platform Operator: Update the End-of-Life dates for vendored MongoDB Data Service versions. For more information, see a9s Platform Operator Sunrise Sunset - a9s Data Service Release Lifecycle Table.
  • docs: Platform Operator: all services: Improve wildcard certificate documentation with updated SAN requirements and key usage extensions. For more information, see Wildcard Certificates.
  • docs: Platform Operator: a9s KeyValue: Update the documentation to reflect the new behavior of the custom parameters min-replicas-to-write, min-replicas-max-lag, and repl-backlog-size. For more information, see a9s KeyValue - SPI Configuration.
  • BOSH stemcell: all services: Update Jammy stemcell to version 1.1411 for internal tests of all supported services.
  • INTERNAL RELEASE a9s Template Uploader Errand: a9s PostgreSQL: Update the templates and the keylist to read custom parameters from the new internal format.

Updated Dependencies​

  • all services:
    • bpm to v1.4.40.
    • logstash to v8.19.21.
    • routing to v0.393.0.
    • nginx:
      • nginx to v1.31.5.
      • pcre2 to v10.48.
    • a9s Smoke Tests: Update internal dependencies.
  • a9s Billing: Update internal dependencies.
  • a9s MariaDB:
    • a9s MariaDB 10.4: mariadb to v10.4.34.
    • a9s MariaDB 10.11: mariadb to v10.11.19.
  • a9s Messaging:
    • a9s Messaging 4: erlang to v27.3.4.17.
  • a9s MongoDB:
    • a9s MongoDB 7:
      • mongodb to v7.0.43.
      • mongosh to v2.11.1.
    • a9s MongoDB 8:
      • mongodb to v8.0.30.
  • a9s PostgreSQL:
    • a9s PostgreSQL 13: postgresql-info-webservice to v3.9.1.
  • a9s Prometheus:
    • grafana13:
      • fontconfig to v2.18.3.
      • grafana to v13.2.2.
      • libxml2 to v2.15.4.
      • util-linux to v2.42.4.
    • prometheus2:
      • statsd_exporter to v0.31.0.
    • prometheus-legacy:
      • statsd_exporter to v0.31.0.
    • promgraf2:
      • statsd_exporter to v0.31.0.
      • alertmanager to v0.34.0.
      • memcached_exporter to v0.17.0.
      • mysqld_exporter to v0.20.0.

Removed​

  • docs: Application Developer: a9s PostgreSQL: Remove the mention of metric_pg_node_status as a custom parameter, since it is not tied to the node status metrics group. For more information, see a9s PostgreSQL - Info Status Metrics.

Fixed​

  • all services: a9s BOSH Deployer: Improve the handling of Service Instances which have already been deleted by the BOSH director, but their state got stuck in deleting in the a9s Deployer.
  • all services: a9s Service Broker: Improve the error message when providing a malformatted custom parameter.
  • all services: a9s Smoke Tests: Fix the a9s LogMe and a9s LogMe2 Smoke Tests failing intermittently because of a race condition between sending the test log line and the CF syslog agent establishing its connection to the syslog drain. The Smoke Tests now resend the log line until it arrives in OpenSearch.
  • a9s Billing: Fix permissions when using helper scripts in the BOSH release.
  • docs: Application Developer: a9s PostgreSQL: Adjust documentation to reflect default values set for the idle_in_transaction_session_timeout custom parameter. For more information, see a9s PostgreSQL - Configuration Parameters.

Security​

  • all services:
    • a9s Smoke Tests:
      • Fix CVE-2026-77403.
      • Fix CVE-2026-77404.
      • Fix CVE-2026-77405.
      • Fix CVE-2026-77406.
      • Fix CVE-2026-77407.
      • Fix CVE-2026-77408.
      • Fix CVE-2026-77409.
      • Fix CVE-2026-77410.
      • Fix CVE-2026-77411.
      • Fix CVE-2026-77412.
      • Fix CVE-2026-79921.
  • a9s MongoDB:
    • a9s MongoDB 7:
      • Fix CVE-2026-82052.
      • Fix CVE-2026-82053.
      • Fix CVE-2026-82054.
      • Fix CVE-2026-82056.
      • Fix CVE-2026-82058.
      • Fix CVE-2026-82059.
      • Fix CVE-2026-82060.
      • Fix CVE-2026-82063.
      • Fix CVE-2026-82064.
      • Fix CVE-2026-82065.
      • Fix CVE-2026-82066.
      • Fix CVE-2026-82067.
      • Fix CVE-2026-82068.
      • Fix CVE-2026-82070.
      • Fix CVE-2026-82074.
      • Fix CVE-2026-82075.
      • Fix CVE-2026-82076.
      • Fix CVE-2026-89099.
    • a9s MongoDB 8:
      • Fix CVE-2026-82052.
      • Fix CVE-2026-82053.
      • Fix CVE-2026-82054.
      • Fix CVE-2026-82056.
      • Fix CVE-2026-82058.
      • Fix CVE-2026-82059.
      • Fix CVE-2026-82060.
      • Fix CVE-2026-82063.
      • Fix CVE-2026-82064.
      • Fix CVE-2026-82065.
      • Fix CVE-2026-82066.
      • Fix CVE-2026-82067.
      • Fix CVE-2026-82068.
      • Fix CVE-2026-82070.
      • Fix CVE-2026-82074.
      • Fix CVE-2026-82075.
      • Fix CVE-2026-82076.
      • Fix CVE-2026-89099.
  • a9s Prometheus:
    • grafana13:
      • Fix CVE-2026-15815.
      • Fix CVE-2026-76154.
      • Fix CVE-2026-86140.