Release notes

Axiomatics Policy DevOps (APD) features, bug fixes, and known issues by release.

Version 1.1.0

What's new

• New product name: Axiomatics Policy DevOps (APD)

  The Policy Testing Framework (PTF) has been renamed to Axiomatics Policy DevOps (APD). This change reflects the product’s expanded scope, which includes policy authoring, validation, tracing, and integration into DevOps workflows. The same core functionality is offered, along with several additional features introduced in this new release.

• Access Decision Service (ADS) 2 support

  APD now supports running ADS 2 locally, while ADS 1 is still supported. For details, read the Gradle tasks and dependency configurations section.

• Visual tracing feature

  Visual tracing is out of beta and now generally available. Learn more about this feature in the Visual tracing section.

• Tracing supports Extended Indeterminate

  APD traces now display the potential effect values that would have resulted if an error had not caused an Indeterminate rule value, aligning with the XACML 3.0 specification.

• Constant attribute connector decommission

  The Constant attribute connector (Constant PIP) has been decommissioned and is now replaced by the Parser attribute connector (Parser PIP).

• Updated dependencies

  Name	New version
  Access Decision Service (ADS)	2.2.0
  Table attribute connector	7.2.0
  SQL attribute connector	6.4.0
  LDAP attribute connector	6.4.0
  HTTP attribute connector	5.5.0

Improvements

• Documentation rework

  The Axiomatics Policy DevOps (APD) documentation has been reworked to provide better structure, searchability, and readability for an improved user experience.

• Performance improvements

  This release speeds up build and testing times. The system now runs independent tasks, like ALFA compilation and PDP setup, concurrently. ALFA compilation is faster, utilizing in-memory processing to reduce I/O and better leveraging Gradle's caching to eliminate redundant work.

• Seamless offline installation APD is now distributed as a self-contained fat JAR, enabling seamless offline installation without external dependencies.

Fixed issues

• Security fixes

  Several third-party libraries were updated to address the following security vulnerabilities: CVE-2025-48924, CVE-2020-29582.

• pushToAdm task failure

  We have increased the limit for the YAML object mapper to prevent the pushToAdm task from failing when processing large domain files.

Known issues

• New domain format limitations

  APD does not yet support the following new domain features:

  • JSON configuration for Axiomatics attribute connectors:

    Workaround - Continue using the XML configuration format for these connectors.

  • ALFA names in attribute connector metadata:

    Workaround - Use the attribute ID instead of ALFA names in the attribute connector metadata.

  • Cache override in attribute connector metadata:

    Workaround - Don't utilize the cache override feature in the connector metadata.

Version 1.0.42

Fixed issues

• Detailed "Duplicate key" exception logs

  Added debug information to logs when an internal "Duplicate key" exception occurs.

Version 1.0.41

Fixed issues

• Visual tracing fix

  Corrected handling of the map function in Visual tracing.

Version 1.0.40

What's new

• Visual tracing

  Introduced beta preview of the new feature Visual tracing.

Version 1.0.33

What's new

• Updated dependencies

  Name	Old version	New version
  Table attribute connector	7.0.1	7.1.0
  SQL attribute connector	6.2.3	6.3.0
  JUnit 5	5.11.0-M	5.11.2
  com.fasterxml.jackson.core	2.15.3	2.17.1

Version 1.0.31

What's new

• Updated dependencies

  Name	Old version	New version
  io-commons	2.11.0	2.17.0

Version 1.0.30

What's new

• Test execution trace logging

  After test execution, the resulting JSON request and response is stored in the build/trace/ directory.

Version 1.0.29

Improvements

• Error message improvements

  Improved error messages when tests not run using Gradle.

Version 1.0.28

What's new

• Updated dependencies

  Name	Old version	New version
  Access Decision Service (ADS)	1.15.1	1.16.0

Improvements

• Fixes for attribute connector unit tests

  Attribute connector unit tests no longer fail if non-relevant configuration is incomplete.

Version 1.0.27

What's new

• Updated dependencies

  Name	Old version	New version
  Access Decision Service (ADS)	1.15.0	1.15.1
  Table attribute connector	6.2.2	6.2.3
  SQL attribute connector	7.0.0	7.0.1
  LDAP attribute connector	6.3.0	6.3.1
  HTTP attribute connector	5.2.0	5.3.0
  Parser attribute connector	1.0.1	1.0.2

Fixed issues

• Correct handling of JUnit5 methods

  Fixed a bug where JUnit4 aborted tests using JUnit5 methods instead of ignoring them.

Version 1.0.26

What's new

• JUnit upgrade

  Upgraded to JUnit 5. The JUnit4 class rule AlfaTestRule is deprecated. Update all tests to use the JUnit 5 extension com.axiomatics.cr.alfa.test.junitAlfaExtension. JUnit 4 (Vintage Engine) is still available, and existing JUnit 4 tests will remain functional.

  • If you upgrade by pulling from Axiomatics' origin on GitHub, you may encounter conflicts in the src/test directory. Keep your local changes and discard the remote changes.

  • To migrate tests from JUnit4 to JUnit5, change your test files as follows:

    "diff

    +import org.junit.jupiter.api.Test;
    -import org.junit.Test;
    -import org.junit.Rule;
    +import ort org.junit.jupiter.api.extension.RegisterExtension;
    -    @Rule
    -    public AlfaTestRule rule = new AlfaTestRule().withMainPolicy("acme.Main");
    +    @RegisterExtension
    +    public AlfaExtension rule = new AlfaExtension();

• New Java requirement

  Java 17 is now required. It will be automatically downloaded using the toolchain plugin. For air-gapped installations, ensure you have a Java 17 installation that Gradle can detect. Verify your Java installation by running:

  gradlew -q javaToolchains