Release 1.30.2 of the Interoperability Test Bed software is now available.
This is a limited maintenance release to address reported bugs and apply restrictions to remote resource lookups in test sessions. Several third-party library patches were also applied, including a patch that resolves CVE-2026-107937 and CVE-2026-108039.
This new release is online in the Interoperability Test Bed service hosted by DIGIT but is also available for you to set up as a standalone instance. If a standalone instance best matches your needs, the following supporting resources are available:
- The installation guide (for development and production use).
- The user guide.
- The Test Bed's Docker images.
- The Test Bed's source code.
If you are updating from a previous release, please follow the Test Bed's update guide.
Release Notes - Version 1.30.2
The following list summarises the issues included in this release, classified as bug fixes, new features and improvements.
Bug fixes
| [ITB-2218] [UI] A user updating their own organisation’s name is not reflected in the test session history |
| [ITB-2219] [UI] Creating an organisation with a new API key and self-registration token does not update the API key |
| [ITB-2220] [UI] Multiple selection inputs for interact steps may return a different string representation than what is expected |
| [ITB-2221] [UI] An input in an interact step that depends on another multiple selection list input is not satisfied if more than one values are selected |
Improvements
| [ITB-2202] [TESTS] Control access to remote resources referenced in pure (SCH) Schematron rules used in the XmlValidator and SchematronValidator |
| [ITB-2203] [OTHER] No longer use the OS temp folder for temporary storage |
| [ITB-2226] [TESTS] Check all direct and indirect resource loading related to test cases to block access to internal resources and addresses |
| [ITB-2227] [TESTS] Apply count and size limitations to indirect external resource lookups in test sessions |
| [ITB-2230] [TESTS] Support whitelisting and blacklisting specific RDF content types used by RDF-related step handlers |
| [ITB-2231] [OTHER] Upgrade CXF to v4.2.4 to resolve CVE-2026-107937 and CVE-2026-108039 |