From 0cd5d0c48c3150680951953d21233d5bbed4af7f Mon Sep 17 00:00:00 2001
From: Manuel Fink <manuel.fink@sap.com>
Date: Fri, 21 Aug 2026 15:24:26 +0200
Subject: [PATCH] Java 4.5.1 CHANGELOG

---
 docs/Libraries/java/changelog.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docs/Libraries/java/changelog.md b/docs/Libraries/java/changelog.md
index dc61979..261524d 100644
--- a/docs/Libraries/java/changelog.md
+++ b/docs/Libraries/java/changelog.md
@@ -2,6 +2,10 @@
 
 ## Version 4
 
+### 4.5.1
+- Fix: AmsBundleLoader no longer freezes the mTLS client certificate on first use. A KeyStore supplier (e.g. for ZTIS) or updated PEM credentials are checked before each bundle request, and the HTTP client is rebuilt when the certificate changes. 
+- Minor breaking change: The Spring auto-configurations now only accept an `amsKeyStore` bean of type `Supplier<KeyStore>` to support certificate rotations, no longer a plain `KeyStore`. If you provide your own `amsKeyStore` bean, change its type to `Supplier<KeyStore>`, e.g. by returning `() -> keyStore`.
+
 ### 4.5.0
 
 - Added support for SAP "act-as" support users: `SciAuthorizationsProvider` now builds `Authorizations` with a preference for claims from the `sap_support_act_as` claim structure over top-level claims.