The open-source geospatial community has announced the official release of GeoServer 3.0.2, bringing a robust set of updates, core library upgrades, and critical security considerations to production environments worldwide. Available immediately for download across multiple platforms including binary, WAR distributions, and Windows installer packages, this stable release also includes comprehensive documentation and a wide array of extensions.

The development and deployment of version 3.0.2 represent a collaborative milestone for the international geospatial community. Core contributors instrumental to this release include Jody Garnett of GeoCat, who managed the overall release process; Andrea Aime of GeoSolutions, who led testing and development efforts; and Gabriel Roldan of Camptocamp, who spearheaded the concurrent launch of GeoServer Cloud. Notably, this marks the first time an updated GeoServer Cloud release has been made available precisely on release day, aligning containerized deployments with the core software’s release schedule.

Under the hood, GeoServer 3.0.2 incorporates the latest versions of foundational geospatial libraries. The software now integrates GeoTools 35.2 and GeoWebCache 2.0.2, alongside mapfish-print-v2 version 2.5.2 and ImageN version 0.9.3. These updates ensure heightened performance, better compatibility with modern geospatial standards, and improved rendering capabilities for mapping applications across enterprise and government networks.

Security Considerations

Addressing potential vulnerabilities remains a core priority for the GeoServer project maintainers. Version 3.0.2 introduces important security fixes designed to protect production installations against emerging threats. Because of these patches, project maintainers strongly recommend that all organizations operating production systems plan their upgrade cycles accordingly. Comprehensive details regarding the specific security fixes and vulnerability disclosures are scheduled to be published at the beginning of November. Administrators seeking deeper insights into how the project manages security reporting and vulnerability lifecycles can consult the official GeoServer security policy on GitHub.

OGC API Maps 1.0

Interoperability continues to be a driving force behind open-source GIS development. In GeoServer 3.0.2, the OGC API Maps community module has been officially aligned with the final OGC API – Maps 1.0.0 standard. This integration allows organizations to serve map resources in full compliance with modern Open Geospatial Consortium web standards, facilitating seamless data sharing across diverse platforms and web clients.

Development of the OGC API – Maps module was driven by Andrea Aime of GeoSolutions, with Jody Garnett handling the 3.0.x backport and implementing key improvements to the conformance table editor. Detailed documentation on configuring and utilizing this updated module is now accessible within the official GeoServer user manual.

GeoFence for GeoServer 3

The release of GeoFence extensions for GeoServer 3 marks the completion of Milestone 4: Integration under the ambitious GeoServer 3 crowdfunding campaign. GeoFence has undergone extensive modernization to align with enterprise Java standards, featuring updates to Jakarta EE, Spring Framework 7, and Hibernate 7.

These architectural upgrades significantly enhance security management and spatial data governance within multi-user environments. However, administrators managing existing installations should exercise caution. Due to underlying changes—including the renaming of the datasource configuration file and the removal of the legacy GeoFence authentication provider—current users are strongly advised to review the official migration guide before executing an upgrade. The successful delivery of this milestone was directed by Emanuele Tajariol of GeoSolutions, supported by contributions from the broader community and funded by dedicated crowdfunding sponsors.

FIPS Compliance and Federal Deployments

To better serve government agencies and heavily regulated industries, GeoServer 3.0.2 introduces a new Federal Information Processing Standard (FIPS) community module. FIPS 140-3 is a stringent United States government standard governing cryptographic modules. Many federal agencies, defense organizations, and their commercial suppliers face strict regulatory mandates requiring them to run software certified against these cryptographic specifications.

The newly introduced FIPS module provides the necessary framework for compliant operations, though administrators should note specific operational requirements. The module currently operates exclusively on Linux environments and mandates a fresh data directory, as automated migration tools for existing data directories are not yet available. Visual status monitoring and configuration settings are fully integrated into the administrative interface, offering clear oversight of cryptographic compliance.

Broad Industry and Community Support

The continued advancement and stability of the GeoServer 3 series are made possible through the financial backing, resource contributions, and active participation of a diverse coalition of organizational sponsors and individual donors. Institutional supporters span global telecommunications, meteorological services, defense research, municipal governments, and specialized geospatial consultancies.

Organizations backing the platform include AfriGIS, Camptocamp, DLR, Dorset Council, Deutsche Telekom, Frachtwerk GmbH, GeoCat BV, Geocrafter, Comune di Genova, g.on, GeoSolutions SRL, geosos, Geospatial Enabling Technologies, Incloud Limited, HL Consulting, Institut national de l’information géographique et forestière, ITS Digital, JDev, Kreditanstalt für Wiederaufbau, Mammoth Geospatial, National Ocean Service, Plangis, Office of Public Works, Open Geo Groep, OSGeo:Korea, OSGeo:UK, Quarticle Research Srl, Sea Island Software, Tailormap, terrestris, Ubigu, Value AG, Region Västra Götaland, and WaldExpert.

Additionally, individual contributions from community members—including Abhijit Gujar, Hennessy Becerra, Ivana Ivanova, John Bryant, Jason Horning, Jose Macchi, Peter Smythe, Sajjadul Islam, Sebastiano Meier, and Stefan Overkamp—have played a vital role in sustaining ongoing development, documentation, and community outreach.

Release Notes and Community Development

The 3.0.2 release includes numerous bug fixes, performance improvements, and minor feature additions across the codebase, designed to streamline stability and resolve known issues from previous iterations in the 3.0 series. Developers interested in exploring cutting-edge features can also review ongoing work within the various community modules. Because community modules are shared as source code to foster collaborative experimentation, developers and users interested in specific experimental topics are encouraged to reach out directly to module authors to offer assistance or testing feedback.

With a strong foundation established across the 3.0.x release cycle, GeoServer continues to solidify its position as an enterprise-grade spatial data server capable of meeting the rigorous demands of modern spatial data infrastructures, cloud-native deployments, and strict regulatory environments.