RESTHeart 9.2.0 Release Notes

Release Date: March 16, 2026

Summary

RESTHeart 9.2.0 introduces GridFS bulk delete for efficient multi-file removal in a single request, OAuth 2.0 client credentials grant support for machine-to-machine authentication flows, an updated GraalVM 25.0.2 runtime, and a round of dependency updates across the stack.

New Features

GridFS Bulk Delete

A new bulk delete handler for GridFS allows removing multiple files in a single request. This complements the existing GridFS API and is particularly useful in scenarios where large numbers of stored files need to be cleaned up atomically.

OAuth 2.0 Client Credentials Grant

RESTHeart now supports the OAuth 2.0 client credentials grant type, enabling server-to-server authentication without user interaction. This is the standard flow for machine-to-machine (M2M) integrations where a service authenticates directly as itself rather than on behalf of a user.

Runtime & Infrastructure

• GraalVM updated to 25.0.2 in the official Dockerfile, bringing the latest performance and native image improvements. This build includes AWT support — while not directly relevant in a server environment, it is required by certain libraries that depend on AWT in headless mode, such as Apache PDFBox.

Dependency Updates

• mongodb-driver-sync
• undertow-core
• java-jwt
• logback-classic
• junit-jupiter

Full Changelog: https://github.com/SoftInstigate/restheart/compare/9.1.2...9.2.0