Bug ID · Description

Bug ID · Description

432315283 · Fixed a multi-certificate truststore so that its trust anchors take effect without a Message Processor restart when features.truststore.multi_cert_bundle.enabled is toggled at runtime; the outbound SSL context is now rebuilt automatically on any trust-anchor change.

565072374 · VerifyJWT policies that use a JWKS uriRef no longer return steps.jwt.NoMatchingPublicKey on the first request after the JWKS cache TTL expires when the identity provider has rotated to a new key ID. The cache now re-fetches synchronously when its entry expires.

535395491 · Extension Processor (ext_proc) denials now return the status and body that the policy or FaultRule produced, instead of always returning HTTP 500.

558421499 · Apigee runtime runs on JRE 21.

517953321 · The lookupcache.<n>.isEncrypted and responsecache.<n>.isEncrypted flow variables now report the per-entry on-disk encryption state of the L2 cache, rather than approximating whether the cache-encryption key is loaded. L1 cache hits report false. Review any policy conditions that rely on these flow variables.

563557547 · Fixed EventFlow (Server-Sent Events) coalescing multiple events into a single policy invocation under burst load on the http-adaptor data path, which produced malformed SSE output to the client.

562740573 · Apigee Analytics now populates the processing_mode dimension, distinguishing proxy traffic from extension-processor traffic. This dimension is not populated in billing-only analytics mode.

357042873 · Stopped redirecting apigee-cassandra-schema-readiness init container logs to /dev/null, improving troubleshooting. Workloads undergo a rolling restart upon upgrade.

N/A · Updates to infrastructure and libraries.