diff --git a/doc/release-notes/12493-payara7-2026.7plus.md b/doc/release-notes/12493-payara7-2026.7plus.md
new file mode 100644
index 00000000000..5b03708313c
--- /dev/null
+++ b/doc/release-notes/12493-payara7-2026.7plus.md
@@ -0,0 +1,76 @@
+This release updates to the recommended Payara-7.2026.7 release and updates many of the third-party libraries Dataverse uses.
+
+### Upgrade from Payara 7.2026.2 to Payara 7.2026.7
+
+The instructions below describe the upgrade procedure based on moving your existing Payara 7.2026.2 domain directory into the new Payara 7.2026.7 distribution. We recommend this method because it is the easiest way to recreate your current configuration and preserve your data.
+
+1. Stop Payara:
+
+ ```shell
+ sudo service payara stop
+ ```
+
+2. Move the current Payara 7.2026.2 directory out of the way:
+
+ ```shell
+ mv /usr/local/payara7 /usr/local/payara7-2026.2
+ ```
+
+3. Download the new Payara version 7.2026.7, and unzip it in its place:
+
+ ```shell
+ cd /usr/local
+ curl -L -O https://nexus.payara.fish/repository/payara-community/fish/payara/distributions/payara/7.2026.7/payara-7.2026.7.zip
+ unzip payara-7.2026.7.zip
+ mv payara-7.2026.7 payara7
+ ```
+
+4. Replace the brand new `payara7/glassfish/domains/domain1` with your old, preserved domain1:
+
+ ```shell
+ mv /usr/local/payara7/glassfish/domains/domain1 /usr/local/payara7/glassfish/domains/domain1_DIST
+ cp -ar /usr/local/payara7-2026.2/glassfish/domains/domain1 /usr/local/payara7/glassfish/domains/
+ ```
+
+5. Remove the cache directories:
+
+ ```shell
+ rm -rf /usr/local/payara7/glassfish/domains/domain1/generated/
+ rm -rf /usr/local/payara7/glassfish/domains/domain1/osgi-cache/
+ ```
+
+6. Update configuration files in the moved domain:
+
+ The file `glassfish-acc.xml` is replaced with the new `payara-acc.xml`, and `default-logging.properties` has been updated in the new Payara distribution. We recommend copying these new files from the distribution domain into your reused domain.
+
+ ```shell
+ rm /usr/local/payara7/glassfish/domains/domain1/config/glassfish-acc.xml
+ cp /usr/local/payara7/glassfish/domains/domain1_DIST/config/payara-acc.xml /usr/local/payara7/glassfish/domains/domain1/config/
+ cp /usr/local/payara7/glassfish/domains/domain1_DIST/config/default-logging.properties /usr/local/payara7/glassfish/domains/domain1/config/
+ ```
+
+7. Update JVM options in **domain.xml**:
+
+ Edit `payara7/glassfish/domains/domain1/config/domain.xml` to add the following JVM option to the `server-config` section:
+
+ ```xml
+ --add-opens=java.base/java.lang.reflect=ALL-UNNAMED
+ ```
+
+ Also, check for any JVM options that reference the old Payara path (e.g., `/usr/local/payara7-2026.2`) and update them to the new path (`/usr/local/payara7`).
+
+8. (Optional): If you use a dedicated service account like `dataverse`, update the ownership permissions:
+
+ ```shell
+ sudo chown -R dataverse /usr/local/payara7/glassfish/domains/domain1
+ ```
+
+9. Start Payara:
+
+ ```shell
+ sudo service payara start
+ ```
+
+
+
+
diff --git a/doc/sphinx-guides/source/api/changelog.rst b/doc/sphinx-guides/source/api/changelog.rst
index ca36d972326..c61ee41d61e 100644
--- a/doc/sphinx-guides/source/api/changelog.rst
+++ b/doc/sphinx-guides/source/api/changelog.rst
@@ -26,6 +26,7 @@ v6.12
- **/api/admin/index/perms/{id}**
- Dataset creation API calls may now behave differently when neither a license nor terms are provided, depending on the new :ref:`dataverse.feature.do-not-assume-default-license` feature flag.
+- Whether file extensions are included in the "Content-disposition" header returned when downloading auxiliary files depends on whether the relevant format is one of the content types supported in Tika. A recent update to the version of Tika has added new content types, including "text/markdown", and auxiliary files with these types now have a a file extension included (e.g. ".md" in this case) in the header.
v6.11
-----
diff --git a/doc/sphinx-guides/source/installation/prerequisites.rst b/doc/sphinx-guides/source/installation/prerequisites.rst
index 2ad06b5ea39..db808519cca 100644
--- a/doc/sphinx-guides/source/installation/prerequisites.rst
+++ b/doc/sphinx-guides/source/installation/prerequisites.rst
@@ -44,7 +44,7 @@ On RHEL/derivative you can make Java 21 the default with the ``alternatives`` co
Payara
------
-Payara 7.2026.2 is recommended. Newer versions might work fine. Regular updates are recommended.
+Payara 7.2026.7 is recommended. Newer versions might work fine. Regular updates are recommended.
Installing Payara
=================
@@ -55,8 +55,8 @@ Installing Payara
- Download and install Payara (installed in ``/usr/local/payara7`` in the example commands below)::
- # wget https://nexus.payara.fish/repository/payara-community/fish/payara/distributions/payara/7.2026.2/payara-7.2026.2.zip
- # unzip payara-7.2026.2.zip
+ # wget https://nexus.payara.fish/repository/payara-community/fish/payara/distributions/payara/7.2026.7/payara-7.2026.7.zip
+ # unzip payara-7.2026.7.zip
# mv payara7 /usr/local
If nexus.payara.fish is ever down for maintenance, Payara distributions are also available from https://repo1.maven.org/maven2/fish/payara/distributions/payara/
diff --git a/modules/dataverse-parent/pom.xml b/modules/dataverse-parent/pom.xml
index c5c746202d7..54daeddba8d 100644
--- a/modules/dataverse-parent/pom.xml
+++ b/modules/dataverse-parent/pom.xml
@@ -1,3 +1,4 @@
+
4.0.0
@@ -149,12 +150,12 @@
-Duser.timezone=${project.timezone} -Dfile.encoding=${project.build.sourceEncoding} -Duser.language=${project.language} -Duser.region=${project.region}
- 7.2026.2
+ 7.2026.742.7.129.8.016
- 2.33.0
- 26.30.0
+ 2.51.3
+ 26.69.01.7.35
@@ -173,7 +174,7 @@
3.7.15.10.25.11.0
-
+
9.3
@@ -199,16 +200,16 @@
1.7.05.7.0.69700.8.14
-
+
0.48.0
-
+
https://sonarcloud.ioiqssIQSS_dataverse${project.groupId}:${project.artifactId}
- jacoco
+ jacoco
@@ -431,7 +432,7 @@
unidata-allUnidata All
- https://artifacts.unidata.ucar.edu/repository/unidata-all/
+ https://artifacts.unidata.ucar.edu/repository/unidata-allfalse
diff --git a/pom.xml b/pom.xml
index dd8c46d6e9b..fa00b9fbe49 100644
--- a/pom.xml
+++ b/pom.xml
@@ -33,13 +33,13 @@
war
- 1.2.18.4
- 10.19.0
+ 1.2.26
+ 12.9.01.1.11.20.1
- 5.4.0
- 3.2.2
- 5.9.1
+ 5.5.1
+ 3.3.2
+ 5.10.0Dataverse API${project.version}
@@ -111,7 +111,7 @@
org.apache.jamesapache-mime4j-dom
- 0.8.7
+ 0.8.14xerces
@@ -218,7 +218,7 @@
com.apicatalogtitanium-json-ld
- 1.4.0
+ 1.7.0com.google.code.gson
@@ -407,7 +407,7 @@
commons-validatorcommons-validator
- 1.7
+ 1.10.1
@@ -466,6 +466,9 @@
${poi.version}
+
org.openpreservation.jhovejhove-core${jhove.version}
@@ -499,7 +502,7 @@
edu.ucsb.nceasezid
- 1.0.0
+ 1.0.3jar
@@ -527,7 +530,7 @@
org.javaswiftjoss
- 0.10.0
+ 0.10.4org.apache.commons
@@ -544,7 +547,7 @@
com.nimbusdsoauth2-oidc-sdk
- 11.22.1
+ 11.30.1
@@ -1160,7 +1163,7 @@
maven-checkstyle-plugin${project.basedir}/src/maven/checkstyle.xml
- UTF-8
+ UTF-8true
diff --git a/src/main/java/edu/harvard/iq/dataverse/DataFileServiceBean.java b/src/main/java/edu/harvard/iq/dataverse/DataFileServiceBean.java
index 7af16372f40..4dac952b42c 100644
--- a/src/main/java/edu/harvard/iq/dataverse/DataFileServiceBean.java
+++ b/src/main/java/edu/harvard/iq/dataverse/DataFileServiceBean.java
@@ -505,7 +505,7 @@ public DataFile findCheapAndEasy(Long id) {
return null;
}
- Integer file_id = (Integer) result[0];
+ Integer file_id = ((Number) result[0]).intValue();
dataFile = new DataFile();
dataFile.setMergeable(false);
diff --git a/src/main/java/edu/harvard/iq/dataverse/GuestbookResponseServiceBean.java b/src/main/java/edu/harvard/iq/dataverse/GuestbookResponseServiceBean.java
index 740543067bd..fb5eecbe5d3 100644
--- a/src/main/java/edu/harvard/iq/dataverse/GuestbookResponseServiceBean.java
+++ b/src/main/java/edu/harvard/iq/dataverse/GuestbookResponseServiceBean.java
@@ -176,7 +176,7 @@ public List