RESTEasy 6.2.17.Final and 7.0.3.Final Releases

By James R. Perkins | August 03, 2026

Today we would like to announce the release of RESTEasy 6.2.17.Final and RESTEasy 7.0.3.Final. Both releases include bug fixes, component upgrades, and some notable enhancements.

A major milestone in both releases is the addition of JPMS module descriptors for RESTEasy artifacts (RESTEASY-3011). This has been a long-standing request. Rather than simply adding Automatic-Module-Name manifest entries, full module-info.java descriptors have been added to the core modules and providers. This enables proper use of RESTEasy in modular Java applications and with jlink.

Both releases continue the CDI improvements started in 6.2.16.Final and 7.0.2.Final. The new CDI @*Param injection support (RESTEASY-3755) enables injection of @PathParam, @QueryParam, and other parameter annotations via CDI. A regression introduced by these changes (RESTEASY-3752), where deployments with invalid CDI beans would fail to deploy instead of falling back to RESTEasy’s own resource handling, has been resolved.

One upgrade worth noting is RESTEASY-3776, which upgrades Yasson from 3.0.4 to 3.0.5. This upgrade changes the Yasson groupId from org.eclipse to org.eclipse.yasson. If you depend on Yasson directly, you will need to update your dependency coordinates.

7.0.3.Final

RESTEasy 7.0.3.Final is a Jakarta REST 4.0 implementation. This release includes bug fixes, enhancements, and component upgrades.

Enhancement

  • RESTEASY-3011 Add module descriptors or automatic module names for RESTEasy artifacts

  • RESTEASY-3755 Enable injection of @*Param annotated parameters with CDI

Bug

  • RESTEASY-3752 Regression of behaviour: Deployment with invalid CDI bean can’t be deployed anymore

  • RESTEASY-3754 PriorityServiceLoader silently drops distinct services that share the same @Priority

  • RESTEASY-3675 ServerDrivenNegotiation does not weigh the matching language more than a null language

  • RESTEASY-3621 Resource methods inherited from package-private class not registered

Component Upgrade

  • RESTEASY-3783 Bump commons-logging:commons-logging from 1.3.6 to 1.4.0

  • RESTEASY-3782 Bump org.wildfly:wildfly-channel-maven-plugin from 1.0.32 to 1.0.33

  • RESTEASY-3781 Bump version.org.bouncycastle from 1.81.1 to 1.85

  • RESTEASY-3779 Bump commons-codec:commons-codec from 1.19.0 to 1.22.1

  • RESTEASY-3776 Upgrade Yasson from 3.0.4 to 3.0.5

  • RESTEASY-3772 Bump commons-logging:commons-logging from 1.3.2 to 1.3.6

  • RESTEASY-3767 Bump com.fasterxml.jackson:jackson-bom from 2.21.4 to 2.21.5

  • RESTEASY-3760 Bump org.wildfly.security:wildfly-elytron-ssl from 2.6.9.Final to 2.6.10.Final

  • RESTEASY-3759 Bump version.org.bouncycastle from 1.81 to 1.81.1

  • RESTEASY-3758 Bump org.eclipse.jetty:jetty-server from 12.0.32 to 12.0.36

  • RESTEASY-3757 Bump version.io.undertow from 2.3.24.Final to 2.3.26.Final

  • RESTEASY-3749 Upgrade resteasy-junit-extension to 1.0.0.Beta5

  • RESTEASY-3746 Upgrade the resteasy-junit-extension to 1.0.0.Beta4

  • RESTEASY-3742 Bump the jakarta-json-dependencies group across 1 directory with 2 updates

  • RESTEASY-3784 Upgrade the WildFly provisioning version from 37.0.1.Final to 41.0.0.Final.

Full release notes can be found at https://github.com/resteasy/resteasy/releases/tag/v7.0.3.Final.

6.2.17.Final

RESTEasy 6.2.17.Final is a Jakarta REST 3.1 implementation. This release includes bug fixes, enhancements, and component upgrades.

Enhancement

  • RESTEASY-3011 Add module descriptors or automatic module names for RESTEasy artifacts

  • RESTEASY-3755 Enable injection of @*Param annotated parameters with CDI

Bug

  • RESTEASY-3752 Regression of behaviour: Deployment with invalid CDI bean can’t be deployed anymore

  • RESTEASY-3754 PriorityServiceLoader silently drops distinct services that share the same @Priority

  • RESTEASY-3675 ServerDrivenNegotiation does not weigh the matching language more than a null language

  • RESTEASY-3621 Resource methods inherited from package-private class not registered

Component Upgrade

  • RESTEASY-3783 Bump commons-logging:commons-logging from 1.3.6 to 1.4.0

  • RESTEASY-3782 Bump org.wildfly:wildfly-channel-maven-plugin from 1.0.32 to 1.0.33

  • RESTEASY-3781 Bump version.org.bouncycastle from 1.81.1 to 1.85

  • RESTEASY-3780 Bump com.fasterxml:classmate from 1.5.1 to 1.7.3

  • RESTEASY-3779 Bump commons-codec:commons-codec from 1.19.0 to 1.22.1

  • RESTEASY-3776 Upgrade Yasson from 3.0.4 to 3.0.5

  • RESTEASY-3774 Bump version.io.netty.netty4 from 4.1.135.Final to 4.1.136.Final

  • RESTEASY-3772 Bump commons-logging:commons-logging from 1.3.2 to 1.3.6

  • RESTEASY-3768 Bump com.fasterxml.jackson:jackson-bom from 2.18.8 to 2.18.9

  • RESTEASY-3766 Bump org.hibernate.validator:hibernate-validator from 8.0.3.Final to 8.0.5.Final

  • RESTEASY-3760 Bump org.wildfly.security:wildfly-elytron-ssl from 2.6.9.Final to 2.6.10.Final

  • RESTEASY-3757 Bump version.io.undertow from 2.3.24.Final to 2.3.26.Final

  • RESTEASY-3749 Upgrade resteasy-junit-extension to 1.0.0.Beta5

  • RESTEASY-3746 Upgrade the resteasy-junit-extension to 1.0.0.Beta4

  • RESTEASY-3742 Bump the jakarta-json-dependencies group across 1 directory with 2 updates

Full release notes can be found at https://github.com/resteasy/resteasy/releases/tag/v6.2.17.Final.

Finally

As always, feedback is welcome. Stay safe, and, depending on where you are, stay warm or be cool.

Apache License 2.0 Security
Copyright © RESTEasy. All rights reserved. For details on our trademarks, please visit our Trademark Policy and Trademark List. Trademarks of third parties are owned by their respective holders and their mention here does not suggest any endorsement or association.