Java SDK 17.4.0

Released on Aug 25, 2026

KSM-531: Added HTTP/HTTPS proxy support. All SDK connections (secret queries, file upload, file download) can now route through a proxy.
- New proxyUrl option on SecretsManagerOptions, plus SecretsManagerOptions.withProxy(storage, proxyUrl) for Java callers.
- Precedence: explicit proxyUrl, then https.proxyHost/https.proxyPort, then HTTPS_PROXY/https_proxy. NO_PROXY and http.nonProxyHosts exclusions are honored. HTTP_PROXY is ignored since all KSM traffic is HTTPS.
- Authenticated proxies use http://user:pass@host:port. A 407 raises a typed SecretsManagerException naming the jdk.http.auth.tunneling.disabledSchemes JVM flag most applications need to set before making any other HTTP/HTTPS call.
- New options-taking overloads downloadFile(options, file) and downloadThumbnail(options, file) honor proxyUrl, allowUnverifiedCertificate, and the configured timeouts; the single-argument forms are unchanged.
KSM-1176: Added isEditable to KeeperRecord, forwarded from the server response envelope, so callers can check write permission before calling updateSecret.

KSM-1203: Fixed generatePassword's final character shuffle using Kotlin Random.Default instead of a cryptographic source. It now uses SecureRandom.
KSM-1207: Fixed HttpsURLConnection calls (queries, upload, download) having no timeout, allowing an indefinite hang. Added connectTimeoutMillis (5s default) and readTimeoutMillis (30s default) to SecretsManagerOptions.
KSM-1248: Server-supplied key IDs are now validated against the embedded public key table before being persisted; an unrecognized ID is rejected instead of overwriting stored key state. Key rotation retries are capped at 3.
KSM-1262: Config and cache files are now written via an atomic temp-file swap with 0600 permissions set before data is written, closing the window where another local user could read the file mid-write.

KSM-1081: Fixed getFolders() crashing when any folder in the response has a corrupted or missing key. Undecryptable folders are now skipped; the rest are returned normally.
KSM-1086: Fixed deleteFolder() returning the wrong response type. It now returns SecretsManagerDeleteFolderResponse with per-folder status, matching deleteSecret(). Both calls now surface per-item server failures to the caller.
KSM-1270: Fixed getSharedFolderKey() looping forever when server folder data contains a parent cycle. The affected folders are now skipped instead.

deleteFolder() return type. Now returns SecretsManagerDeleteFolderResponse instead of SecretsManagerDeleteResponse. Callers that read .records must switch to the new type's .folders list. In practice no working code is affected: the old type required a records field the backend never sent, so every previous call threw MissingFieldException rather than returning a value.
Widened constructors, bytecode-level only. KeeperRecord and SecretsManagerOptions gained constructor parameters. Java callers keep every 17.3.0 constructor form via @JvmOverloads, but Kotlin code compiled against 17.3.0 throws NoSuchMethodError if the 17.4.0 jar is swapped in without recompiling. Rebuild dependents rather than replacing the jar in place.

Last updated 19 days ago