5.33.0 - August 05, 2026

All Release Changes

✨ New Functionality

• [OpenAPI] Added experimental support for generating clients from OpenAPI 3.1 specifications

All Commits

New Contributors

• @ZhongpinWang made their first contribution in #1231

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.33.0

What's Changed

• chore: [DevOps] bump org.bouncycastle:bcpkix-fips from 2.1.9 to 2.1.11 in the test group by @dependabot[bot] in #1205
• chore: [DevOps] bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.3 to 4.10.2.0 in the plugins group by @dependabot[bot] in #1204
• chore: [DevOps] bump the production-minor-patch group with 5 updates by @dependabot[bot] in #1203
• feat: [Connectivity] Dynamic Keystore in HttpDestination by @MatKuhr in #1202
• chore: [DevOps] bump org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0 in the plugins group by @dependabot[bot] in #1208
• chore: [DevOps] bump the production-minor-patch group with 2 updates by @dependabot[bot] in #1207
• chore: [DevOps] bump the test group with 2 updates by @dependabot[bot] in #1210

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.32.0

5.31.0 - June 10, 2026

All Release Changes

✨ New Functionality

• OAuth token requests to IAS now attempt to dynamically resolve the IAS tenant host, if not given.
  When the current tenant does not contain a subdomain, and the IAS service binding contains the property btp-tenant-api, then an HTTP call to that URL is performed to obtain the IAS tenant host.

📈 Improvements

• (Generic OData Client) Allow for parameters in OData v4 expand sub-queries.

What's Changed

• chore: Update netty versions by @Jonas-Isr in #1171
• chore: [DevOps] bump the test group with 4 updates by @dependabot[bot] in #1176
• chore: [DevOps] bump the production-minor-patch group with 10 updates by @dependabot[bot] in #1175
• [IAS] Dynamically Resolve IAS Host On-Demand by @MatKuhr in #1177
• fix: [OData Generic] Enable query params on odatav4 expand by @newtork in #1181
• chore: Set permissions for GH workflows explicitly by @Jonas-Isr in #1182
• chore: [DevOps] bump the test group with 4 updates by @dependabot[bot] in #1193
• chore: [DevOps] bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0 in the plugins group by @dependabot[bot] in #1192
• chore: [DevOps] bump slackapi/slack-github-action from 3.0.2 to 3.0.3 in the github-actions group by @dependabot[bot] in #1189
• fix: [OpenAPI] Api client method with oneOf primitive param stays simplified in OpenAPI generator 7.22.0 by @CharlesDuboisSAP in #1179
• chore: [DevOps] bump the production-minor-patch group across 1 directory with 13 updates by @dependabot[bot] in #1194
• chore: [DevOps] bump org.json:json from 20251224 to 20260522 in the production-major group by @dependabot[bot] in #1191
• chore: [DevOps] Update Jackson to 2.22.0 by @rpanackal in #1195
• chore: [DevOps] bump net.bytebuddy:byte-buddy from 1.18.9 to 1.18.10 in the test group by @dependabot[bot] in #1200
• chore: [DevOps] bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 in the plugins group by @dependabot[bot] in #1199
• chore: [DevOps] bump the production-minor-patch group with 2 updates by @dependabot[bot] in #1198
• fix: [Connectivity] Change (almost) all JKS usage to PKCS12 by @rpanackal in #1185

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.31.0

What's Changed

All Release Changes

🚧 Known Issues

🔧 Compatibility Notes

• [OpenAPI] In Apache HttpClient generator, file upload parameters are now pinned to type java.io.File, unmodifiable with <typeMappings> in generator configuration.

✨ New Functionality

📈 Improvements

• Enable Retry behavior for HttpClient5 instances, to mirror legacy behvior for HttpClient4: 1 retry with 1s delay
  for response codes 429 (Too Many Requests) and 503 (Service Unavailable).

All Commits

New Contributors

• @dira-AUR made their first contribution in #1153

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.30.0

What's Changed

• chore: Use GH app instead of PAT by @marikaner in #1140
• chore: bump org.bouncycastle:bcpkix-jdk18on from 1.83 to 1.84 by @dependabot[bot] in #1150
• fix: [DevOps] Declare io.grpc:grpc-netty as direct dependency by @rpanackal in #1152
• chore: [DevOps] bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre in the test group by @dependabot[bot] in #1154
• fix: Upgrade minor netty version (transitive dependency patch) by @newtork in #1155
• fix: Declare dependency updates explicitly while leveraging Netty BOM by @newtork in #1156
• Fix: Remove redundant test setup condition by @newtork in #1157
• chore: [DevOps] bump the production-major group across 1 directory with 2 updates by @dependabot[bot] in #1146

New Contributors

• @marikaner made their first contribution in #1140

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.29.0

5.28.0 Release Notes

All Release Changes

🔧 Compatibility Notes

• [OpenAPI Apache Generator] Remove no args constructor in generated API clients.

✨ New Functionality

• Added support for SAP Cloud Identity Services (SCI) sap_id_type and sub claims in OIDC principal extraction.
  When sap_id_type=user, the sub claim is now used as the Subject Name Identifier (User ID, Email, or Custom Attribute as configured in SCI).

📈 Improvements

• Improved the support for the credential type X509_ATTESTED.
  HttpDestination objects created via ServiceBindingDestinationLoader no longer need to be re-created for the rotation of certificates to take effect.

🐛 Fixed Issues

• Fixed stateful OData request path construction caused by shared ODataResourcePath instances being mutated when building count, read-by-key, and function requests.
• ODataRequestRead, ODataRequestCount, ODataRequesReadByKey, ODataRequestFunction and ServiceWithNavigableEntitiesImpl now create a defensive copy of the ODataResourcePath to prevent unintended side effects from shared mutable state.

What's Changed

• chore: [DevOps] bump the test group with 2 updates by @dependabot[bot] in #1123
• chore: [DevOps] bump the production-minor-patch group with 15 updates by @dependabot[bot] in #1122
• feat: Migrate to HttpClient5 in OAuth2Service by @Jonas-Isr in #1103
• [Security] Support new sap_id_typeclaim by @CharlesDuboisSAP in #1124
• fix: avoid mutating resource paths in ODataRequestCount by @Louis-Stegra in #1121
• chore: [DevOps] bump the production-minor-patch group with 8 updates by @dependabot[bot] in #1125
• fix: [OpenAPI] Remove generated no args constructor by @CharlesDuboisSAP in #1128
• chore: [DevOps] bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.2 to 4.9.8.3 in the plugins group by @dependabot[bot] in #1133
• chore: [DevOps] bump org.openapitools:openapi-generator from 7.20.0 to 7.21.0 in the production-minor-patch group by @dependabot[bot] in #1131
• feat: [DevOps] Slack notification for Common Artifactory Snapshots by @CharlesDuboisSAP in #1136
• fix: [OData] Revert mutability of ODataResourcePath and resolve segment duplication by @rpanackal in #1138
• chore: [DevOps] bump slackapi/slack-github-action from 2.1.1 to 3.0.1 in the github-actions group by @dependabot[bot] in #1137
• chore: [DevOps] bump net.bytebuddy:byte-buddy from 1.18.7 to 1.18.8 in the test group by @dependabot[bot] in #1139
• feat: [OpenAPI] withDefaultHeader on Api classes by @rpanackal in #1130
• feat: [Connectivity] Improve Certificate Rotation with ZTIS for OAuth2TokenService by @MatKuhr in #1142
• chore: Bump service-binding library to newly released version by @Jonas-Isr in #1144

New Contributors

• @Louis-Stegra made their first contribution in #1121

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.28.0

5.27.0 - March 13, 2026

All Release Changes

🔧 Compatibility Notes

• [Connectivity Destination Service] Migrated to Apache Httpclient 5.
  • The replacement for HttpClientAccessor is ApacheHttpClient5Accessor

✨ New Functionality

• [OpenAPI] SAP Cloud SDK OpenAPI Generator now supports apache-httpclient library besides Spring RestTemplate through the newly introduced module openapi-core-apache.
• [IAS] Add IasOptions.withTokenFormat() to allow specifying token format

🐛 Fixed Issues

• [OData v4] Binary deserialization can now handle both Base64URL and Base64.

All Commits

New Contributors

• @SvenScheurer made their first contribution in #1113
• @n-o-u-r-h-a-n made their first contribution in #1114

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.27.0

What's Changed

• chore: [DevOps] bump the production-major group across 1 directory with 2 updates by @dependabot[bot] in #1047
• chore: Ignore incompatible spring boot updates by @newtork in #1049
• chore: [DevOps] bump the github-actions group with 3 updates by @dependabot[bot] in #1050
• chore: [DevOps] bump the test group across 1 directory with 3 updates by @dependabot[bot] in #1043
• chore: [DevOps] bump the production-minor-patch group with 19 updates by @dependabot[bot] in #1051
• chore: replace guava identity function reference with java.util.function by @newtork in #1059
• chore: Add release note for updated Apache HttpClient 5.6 by @newtork in #1060
• chore: [Dependabot] ignore checkstyle >=13.0.0 by @CharlesDuboisSAP in #1061
• feat: Temporary: Use email as fallback principal id when user_uuid is missing. by @CharlesDuboisSAP in #1065
• fix: Fix caching in getOrComputeAllDestinationsCommand by @Jonas-Isr in #1055
• feat: Add pre lookup check to DestinationService.tryGetDestination by @Jonas-Isr in #1056
• chore: [DevOps] bump org.junit.jupiter:junit-jupiter-engine from 6.0.1 to 6.0.2 in the test group by @dependabot[bot] in #1064
• chore: [DevOps] bump the production-minor-patch group across 1 directory with 5 updates by @dependabot[bot] in #1069
• chore: [DevOps] bump the plugins group with 2 updates by @dependabot[bot] in #1068
• feat: [OpenAPI] Make Spring Optional with Apache HttpClient by @rpanackal in #1046
• chore: [DevOps] bump the test group with 2 updates by @dependabot[bot] in #1073
• chore: [DevOps] bump the production-minor-patch group with 9 updates by @dependabot[bot] in #1072
• feat: [OpenAPI] ResponseMetadataListener with case insensitive header map by @rpanackal in #1070
• fix: [OpenAPI] Revert making Spring optional in OpenAPI by @rpanackal in #1077
• fix: Correct OAuth2 parameter for IAS refresh token workaround by @davidkna-sap in #1066

New Contributors

• @davidkna-sap made their first contribution in #1066

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.26.0

What's Changed

• fix: Javadoc warnings by @CharlesDuboisSAP in #995
• chore: [DevOps] bump the test group with 2 updates by @dependabot[bot] in #998
• chore: [DevOps] bump the production-minor-patch group with 10 updates by @dependabot[bot] in #997
• release: [DevOps] Set autoPublish to true by @CharlesDuboisSAP in #996
• chore: [DevOps] bump the production-minor-patch group with 4 updates by @dependabot[bot] in #1003
• chore: [DevOps] bump the test group with 2 updates by @dependabot[bot] in #1008
• chore: [DevOps] bump org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0 in the plugins group by @dependabot[bot] in #1007
• chore: [DevOps] bump the production-minor-patch group with 3 updates by @dependabot[bot] in #1005
• Add test covering the default retry behavior of HTTP client 5 by @MatKuhr in #1004
• feat: [OpenAPI] Type and Import mapping support by @rpanackal in #1010
• chore: [DevOps] bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.1 to 4.9.8.2 in the plugins group by @dependabot[bot] in #1012
• chore: [DevOps] bump actions/checkout from 5 to 6 in the github-actions group by @dependabot[bot] in #1020
• chore: [DevOps] bump the plugins group with 2 updates by @dependabot[bot] in #1022
• chore: [DevOps] bump net.bytebuddy:byte-buddy from 1.18.1 to 1.18.2 in the test group by @dependabot[bot] in #1021
• fix: [OData] Name mapping bug in NamingUtils by @rpanackal in #1026
• fix: [OData] TreatserviceNameMappings.properties readonly by @rpanackal in #1029
• chore: bump org.mozilla:rhino from 1.8.0 to 1.8.1 in /datamodel/openapi/openapi-generator by @dependabot[bot] in #1023
• chore: Fix bom comment for axis2 by @newtork in #1033
• Transparent proxy: TP Loader Cloud SDK native integration by @VladislavAtanasov95 in #981

New Contributors

• @VladislavAtanasov95 made their first contribution in #981

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.25.0

What's Changed

• chore: Archetype Java 21+ compatibility by @CharlesDuboisSAP in #962
• chore: [DevOps] bump net.bytebuddy:byte-buddy from 1.17.7 to 1.17.8 in the test group by @dependabot[bot] in #966
• chore: [DevOps] bump the production-minor-patch group with 4 updates by @dependabot[bot] in #963
• chore: [DevOps] bump the plugins group with 2 updates by @dependabot[bot] in #965
• fix: README image + deepwiki by @CharlesDuboisSAP in #967
• chore: [DevOps] bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.6.0 to 4.9.8.1 in the plugins group by @dependabot[bot] in #972
• chore: [DevOps] bump com.puppycrawl.tools:checkstyle from 11.1.0 to 12.0.1 in the production-major group by @dependabot[bot] in #964
• fix: Circuit breaker exception handling by @Jonas-Isr in #971
• chore: Remove buildpacks declaration from archetype by @newtork in #988
• chore: [DevOps] bump org.apache.maven.plugins:maven-plugin-plugin from 3.15.1 to 3.15.2 in the plugins group by @dependabot[bot] in #990
• chore: [DevOps] bump the production-minor-patch group with 4 updates by @dependabot[bot] in #989
• chore: Enable JavaDoc Aggregate with Delombok by @newtork in #969
• ZTIS Support for Kyma by @MatKuhr in #985
• feat: support provider:client for IAS app-to-app by @mpern in #986
• Transparent Proxy: Seamless handling of Cross-level consumption of destination-fragment pairs by @panayotmarinov in #903
• chore: [DevOps] bump the github-actions group with 6 updates by @dependabot[bot] in #991
• chore: [DevOps] bump the production-minor-patch group with 3 updates by @dependabot[bot] in #992
• Add release note for App2App by @MatKuhr in #993

New Contributors

• @mpern made their first contribution in #986
• @panayotmarinov made their first contribution in #903

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.24.0