The Isis team is pleased to announce the release of:
* Apache Isis Core version 1.7.0
* Wicket Viewer 1.7.0
* SimpleApp Archetype 1.7.0
* ToDoApp Archetype 1.7.0
New features in this release include:
- ISIS-809: @ViewModel annotation, no longer requiring explicit implementation of the IViewModel interface.
- ISIS-916: ability to override framework-provided services, such as MementoService or BookmarkService.
- ISIS-917: (beta): pluggable representations for the RO viewer
There are also some security fixes:
- ISIS-883: Bookmarkable action URLs can be submitted by a user without permissions to bring up action dialog (thereafter that user can invoke).
- ISIS-884: ErrorPage vulnerable to XSS attacks.
- ISIS-895: HomePage should honour authorization rules.
Full release notes are available at [1,2,3,4] on the Isis website.  
Isis modules that in 1.6.0 were released as part of Isis core have now moved to Isis addons [5]. Meanwhile the profilestore component (previously in core, but unused in the Wicket viewer) has been retired.  Migration should be straightforward, see [6].
Significant updates in Isis add-ons:
- isis-module-security module [7], for administering authentication and authorization
- all modules re-released against for 1.7.0.
You can access this release directly from the Maven central repo [8], 
or download the release and build it from source [9].
Enjoy!
--The Isis team
[1] http://isis.apache.org/core/release-notes/isis-1.7.0.html
[2] http://isis.apache.org/components/viewers/wicket/release-notes/isis-viewer-wicket-1.7.0.html
[3] http://isis.apache.org/archetypes/release-notes/todoapp-archetype-1.7.0.html
[4] http://isis.apache.org/archetypes/release-notes/simpleapp-archetype-1.7.0.html
[5] http://isis.apache.org/core/release-notes/migrating-to-1.7.0.html
[6] https://github.com/isisaddons/isis-module-security
[7] http://www.isisaddons.org
[8] http://search.maven.org
[9] http://isis.apache.org/download.html