SquashTM Orchestrator 6.3.0 Release Note

Introduction

SquashTM Orchestrator is a set of micro-services to perform automated test execution workflows described in a specific format.

This release note describes the changes of SquashTM Orchestrator version 6.3.0 compared to 6.2.2.

SquashTM Orchestrator 6.3.0 was released on May 28, 2026.

New features

• Issue squash-orchestrator #451 🔑 [Squash Orchestrator Docker image] The Docker image should pin the digest of the base image
  Issue otf-all-in-one-images #241 [All-in-one Docker image] The Docker image should pin the digest of the base image
  The base image has been changed to the python slim in order to reduce the image's size. The curl package has also been installed separately to help debug during deployment.

• Issue micronaut-java-plugins #141 🔑 [Java 25] squash-autom-devops/micronaut-java-plugins upgrade to Java 25
  Issue squash-orchestrator #450 🔑 [Java 25] squash-autom-devops/squash-orchestrator upgrade Squash to Java 25
  Issue micronaut-java-plugins #131 [Java 25] opentestfactory/micronaut-java-plugins upgrade to Java 25
  Issue micronaut-java-toolkit #90 [Java 25] opentestfactor/micronaut-java-toolkit upgrade to Java 25
  Issue otf-all-in-one-images #240 [Java 25] opentestfactory/otf-all-in-one-images upgrade Squash to Java 25
  The squash-orchestrator image has been updated to use Java 25.

Bug fixes

• Issue otf-all-in-one-images #230 CVE-2026-0861 in docker-group.squashtest.org/opentestfactory/allinone:libc6-dev
  Issue otf-all-in-one-images #243 CVE-2025-14087 (affects 5 packages)
  Issue squash-orchestrator #453 🔑 CVE-2025-14087 (affects 5 packages)
  Issue otf-all-in-one-images #232 CVE-2025-15467 in docker-group.squashtest.org/opentestfactory/allinone:openssl
  Issue squash-orchestrator #423 🔑 CVE-2025-15467 in docker-group.squashtest.org/squashtest/squash-orchestrator:openssl
  Various packages have been updated to fix security issues.