GeoTools / GeoServer PMC meeting - 2026-05-19
Attending
-
Torben Barsballe
-
Cécile Vuilleumier
-
Kevin Smith
-
Andrea Aime
-
Nuno Oliveira
-
Peter Smythe
-
Alessandro Ricchiuti
-
Jody Garnett
Actions from prior meetings:
-
jody: Contact OGC about CITE for 3.0.0
- Asked can just certify 3.0.0 and replace 2.28 sticker on website
(no response yet)
- Asked can just certify 3.0.0 and replace 2.28 sticker on website
-
jody: checkout 3.0-RC tag and deploy manually
Agenda
-
CITE certification costs
-
GeoServer Security Volunteers (Alessandro and Pierre)
-
GeoServer 2.28.4 release manager
-
GeoServer 3.0 release planning
-
OAuth extension promotion & migration guide
-
Chit Chat
Actions
CITE certification costs
Cost estimation: up to 2700$ (OGC API tiles might be one instead of 5, which needs to be confirmed).
Jeroen then replied, contacting OGC, and getting new feedback… we might switch certification from 2 to 3 (losing the certification on 2.28 in the process).
We either switch in time, or we’ll indicate that we pass, that we’re working on getting certified, and we’ll make an announcement later.
GeoServer Security Volunteers (Alessandro and Pierre)
AI reports are increasing (duplicates, false positives too), and we need more manpower. Here is Alessandro Ricchiuti, who would like to join. Pierre from C2C would also like to join.
Jody: Add new volunteers to Security list
GeoServer 2.28.4 release manager
https://github.com/geoserver/geoserver/wiki/Release-Schedule#2026
Peter is working on it, Andrea to release imageio-ext 2.0.1
GeoServer 3.0 release planning
QA fixes and UI improvement:
https://github.com/geoserver/geoserver/pull/9494
OAuth extension promotion & migration guide
The new OAUTH plugin is not backwards compatible, so a migration manual is needed, Alessio will work on it. When GeoServer starts up if it doesn’t find a filter that doesn’t exist it will break, this should be reviewed.
The promotion to extension didn’t move forward, one requirement for it to move forward would be to have some real use cases installations. There were two users reporting they were configuring it and deploying it.
For pending:
-
This is an option, but real world experience may be gathered in time.
-
We can also consider jwt-headers for pending
Chit Chat
Please help review pull-requests folks!
We are into “final” crunch when many unexpected PRs show up with fixes prior to release.