LoginSign Up
← Back to all sparks
A

Apereo CAS

INFRA · APIS
Velocity0.0

Enterprise single sign-on and identity federation server

apereo.github.io/cas ↗

CAS 8.0 is six release candidates deep with notes that describe nothing

release-candidatesopaque-release-notesoidcsecurity-patchesidentity
◆Current state
Apereo CAS is working through a long v8.0.0 release-candidate series, reaching RC6 by late June 2026. The candidates are published with a fixed template — links to release notes, documentation, commit log and policies, plus contributor thanks — and no description of what each one changed, so the substance of the 8.0 cycle is not readable from the releases themselves. The one entry with real content is v7.3.7.1, a patch pointing at a published OIDC vulnerability advisory.
◆Where it's heading
The observable pattern is a maintained v7 line receiving security patches while v8 advances through candidates at roughly monthly intervals with a small, stable set of contributors. Beyond that, the release notes are too thin to establish what 8.0 changes for operators, which matters for an identity product where upgrade planning depends on knowing exactly what moved.
◆Prediction
Expect the RC series to continue at a monthly cadence toward an 8.0 release, and the v7 line to keep receiving security patches; what 8.0 actually delivers cannot be predicted from these entries.

◆Recent moves

  1. 1mo ago

    v8.0.0-RC6

    The sixth 8.0 release candidate, published with the same boilerplate as the others and no description of its changes. Its only readable content is the contributor list, which stays small and consistent across the series.

    View source ↗
  2. 1mo ago

    Patch release for a published OIDC vulnerability

    The only entry in this window carrying real substance: a v7 patch whose notes point directly at an OIDC vulnerability advisory. For a single sign-on server, a flaw in the OIDC path is the category of issue that forces an unscheduled upgrade.

    View source ↗
  3. 2mo ago

    v8.0.0-RC5

    The fifth 8.0 candidate, following the same template with no described changes. The roughly monthly gap to the next candidate is the only signal it carries.

    View source ↗
  4. 3mo ago

    v8.0.0-RC4

    The fourth 8.0 candidate, again documented only by links and contributor thanks. It has the widest contributor list of the series, which is the sole differentiator visible in the notes.

    View source ↗