saas-2026.2-2026-07-14-10-52-30
Fix for errors related to immutable collections in Elasticsearch publishing process (ISSUE-132368)
elasticsearch-integration
Fixed a rare error related to publishing reference data in the new schema for Elasticsearch indexing.
Fix for Broken sorting on sufficiency scores (ISSUE-137714)
elasticsearch-integration
Fixes sorting on sufficiency score fields in faceted search screen
Fix for recent update loss of selection or applied filter when switching to the Multi-Edit View in Web UI (HOTFIX-9410, ISSUE-830680)
basicportalcomponents
Fixed a problem where switching between display modes on the Web UI Node List used to clear filters.
Fix for Elasticsearch BGP error (ISSUE-871644, HOTFIX-9412)
elasticsearch-integration
The Elasticsearch EP Plugin now only goes idle when the queue is empty and no leftover background work still requires supervision. This enables the resource-saving benefit of the fix, and makes sure failures are always caught, retried, and surfaced as before.
Fix for errors related to immutable collections in Elasticsearch publishing process (HOTFIX-9414, RDSUP-499)
elasticsearch-integration
Fixed a rare error related to publishing reference data in the new schema for Elasticsearch indexing.
Fix for possible HTML injection (HOTFIX-9386, ISSUE-870805)
portalframework
Fixed a Cross-site Scripting (XSS) vulnerability in the Web UI selection URL.
Fix for display of Last Run and time zone are incorrect for the scheduled process (ISSUE-865439, HOTFIX-9413)
workbench
Fixed an error in workbench in which the Last Run field would display incorrectly for scheduled processes based on an incorrect time zone. This led to confusion over when the Last Run process actually occurred. The Last Run field has now been corrected to show the timestamp accurately based on the user's local settings, matching the Next Run display.
saas-2026.2-2026-07-13-09-41-30
Fix for validation and conversion errors loading new TecDoc reference in automotive module (ISSUE-871977, HOTFIX-9400)
automotive
Fixed a problem with validation errors that occurred during reference data imports.
Upgraded component to latest version (HOTFIX-9385, RDSEC-3623)
automotive
Upgraded a component to the most current version.
Fix for Tecdoc Supplier Data import error (HOTFIX-9396, ISSUE-871907)
automotive
Fixed a problem wherein a leading zero was stripped when parsing fractional criteria attribute values during the TAF file conversion.
saas-2026.2-2026-07-10-11-45-13
Fix for production environment is not accessible (HOTFIX-9399, ISSUE-863748)
core
Now, events will be deleted as soon as they are processed if the retention is 0. This will prevent the event table from growing too large between Cassandra Garbage Collection runs. This will help system performance, in particular, when purging revisions and when checking to see if there are events for the revision.
Fix for inability to launch manual workbench login instance when SAML SSO is enabled (ISSUE-867976, HOTFIX-9357)
core
Fixed a manual workbench login (/manualwblogin) that was returning an internal server error on Jetty 12 by correcting the invalid servlet url-pattern to /manualwblogin in Webstart web.xml.
Fix for inbound for STEPXML ends during testing with ‘completed with errors’ (HOTFIX-9314)
core
Fixed a problem where inbound integration endpoints for STEPXML ended during testing with a ‘completed with errors’ message. It also had an error when copying the file to the failed directory. This is now fixed.
Fix for 0-byte files created for SAP messages (HOTFIX-9379, ISSUE-870376)
core
Fixed a concurrency issue which led to the system moving empty 0-byte files into the In and Failed hotfolders when processing the file via a hotfolder by inbound integration endpoint (IIEP) on a clustered system with multiple nodes.
Ruleset information added to matching execution reports (ISSUE-129711)
core
Added ruleset information to matching execution reports.
Fix for Schedule Category Profiling is not working (ISSUE-855329, HOTFIX-9406)
core
The Product Hierarchy Root was excluded when updating catalog profiling. This has been fixed.
Fix for ECLASS BASIC export not working (HOTFIX-9350)
core
To fix an issue with the ECLASS BASIC exporter, exported products now automatically pick up attributes inherited from the classification groups they belong to. This change lets you exclude specific kinds of classification nodes (e.g., ECLASS ADVANCED application classes) from that inheritance, so unwanted attributes no longer get pulled into the export and your output stays clean and relevant.
Fix for unbound workflow variables automatically limited to 1 MB value size (ISSUE-872333, HOTFIX-9402)
core
Introduced a public configuration property called StateFlowVariable.MaxLengthMB, set to 1 (MB) by default, which allows users to change the default limit of a stateflow variable size.
Fix for scheduled bulk updates failing without privilege (ISSUE-846915, HOTFIX-9403)
core
Fixed a problem that occurred when users without the Manage Background Process Execution privilege could not schedule a background process (BGP) with OneQueue enabled.
Fix for export via JDBC taking longer time (HOTFIX-9378, ISSUE-833906)
core
The JDBC Delivery Plugin was slow when configured with Snowflake drivers. The line-by-line processing of a CSV file was too slow, but now it is possible to first upload to Snowflake using a temporary table and then merge the changes, making the process faster overall.
Fix for 'RuntimeException: Cannot subtract from' error (HOTFIX-9374, ISSUE-861599)
core
Fixed an issue that occurred in which a SnapshotTooOldException error was thrown when running the health checks 'Unrevised values should be revised' or 'Revised values should be unrevised.'
Fix for scheduled outbound integration endpoint (OIEP) not pushing all events (HOTFIX-9397, ISSUE-867407)
core
When processing events with de-duplication enabled and a batch size larger than 10,000, not all duplicate events would be marked as processed. This has been fixed.
Fix for event processor crash when changing an object type (ISSUE-868765, HOTFIX-9358)
core
To fix an issue where changing an object type caused an event processor crash, hidden Lock-free Schema Change (LFSC) shadow copies will now be ignored when setting the object type for a node. This will prevent unexpected exceptions from occurring in the customer's business logic.
Fix for STEP unavailablity (HOTFIX-9394, ISSUE-871557)
core
A fix was implemented that improved performance when checking for deprecated scripting APIs when running JavaScript business rules.
Fix for Bulk Update BGP processes failing (ISSUE-871315, HOTFIX-9389)
core
Fixed a problem with Bulk Update background processes (BGPs) failing with an 'ArithmeticException' error when run on an empty node collection.
Fix for performance issues during exports of large images (HOTFIX-9346)
core
Fixed a problem with zero xdpi and ydpi in the lowres-jpg and lowres-png image pipelines that were causing performance issues. The default is now set to 72dpi.
Fix for STEP availability issues (HOTFIX-9373, ISSUE-868730)
core
Addressed a mapDB file leak that occurred during STEP import and export processes. This fix should prevent disk pressure events controlled by mapDB tmp files not being deleted.
Fix for inability to revert to old revision due to invalid data (HOTFIX-9359, ISSUE-869038)
core
Fixed an unexpected exception caused by Lock-free Schema Change (LFSC) leftovers when reverting to an old revision.
Fix for thousands of non-descript BGPs running following 2026.1 update (HOTFIX-9356, ISSUE-867520)
core
Fixed a problem that occurred when an inbound integration endpoint (IIEP) user attempted to delete background processes (BGPs) but did not have the required privileges needed to do so. This left these orphan BGPs without any attributes populated (Status, Started by, etc.). Now, these BGPs will no longer have these values wiped out if the execution user attempts to delete but does not have the required privileges needed to delete BGPs.
Fix for CMDM merge finalization does not guarantee export of final MERGED_INTO reference (ISSUE-852364, HOTFIX-9355)
core
Fixed a problem that occurred when the EventQueue.EventReadDelay did not work on Cassandra systems. The CMDM merge finalization did not guarantee export of the final MERGED_INTO reference and Deactivate Record attribute via an outbound integration endpoint (OIEP), causing downstream systems to miss the required merge state. The fix has been added to an existing hotfix (HOTFIX-8479) and backported to 2024.2.
Fix for STEP unavailablity (ISSUE-871381, HOTFIX-9387)
core
Fixed a problem that caused the Cassandra Garbage Collector to run for a long time reading System Setup values, which in turn led to the Vacuum Cleaner being blocked.
Fix for RCA - STEP monitoring alert [aap-uat] (ISSUE-873144)
core
Fixed memory leak when unlinking object types from the attribute on STEP with Oracle DB, which caused an OOM.
Fix for inbound integration endpoint throwing 'exclusive lock Worker' error on import (HOTFIX-9371, ISSUE-867513, HOTFIX-9384)
core
Running a strict inbound integration endpoint (IIEP) threw errors like 'Failed to acquire exclusive lock Worker'. These errors occurred because the worker started a new process when it finished its batch if there were more files to process, but the poller was also scheduled to start a new worker process every minute. As there were lots of files to to process, a task that often takes only a few seconds, there were new workers being created all the time. Therefore, there was a high possibility the poller and worker each created workers which then clashed as only one can run at the same time when an IIEP is set to strict. This has been fixed.
Fix for outbound error (HOTFIX-9349)
core
Fixed an unexpected exception that occurred during BGPLegacySharedFSStorageFolderPlugin (a negative list fallback for endpoints / exports), copying files to a shared directory.
Fix for outbound integration endpoint error (ISSUE-868301, ISSUE-868399)
core
Fixed an unexpected exception during BGPLegacySharedFSStorageFolderPlugin (a negative list fallback for endpoints / exports) that was copying files to a shared directory.
saas-2026.2-2026-07-09-19-56-28
Fix for high disk utilization issue (HOTFIX-9409, ISSUE-872267)
basicportalcomponents
Fixed an unexpected error caused by Match Tuning Data Profiling that was using a deprecated plugin not supported by Cassandra DB.
Fix for invalid BasicAuth credentials not rejected causing Smartsheet error (ISSUE-872174, HOTFIX-9395)
basicportalcomponents
Fixed a problem in which basic authentication in Excel Smartsheets did not throw an 'Invalid password' exception when the user provided an invalid password in a Smartsheet login pop-up.
Fix for inconsistent unit selection behavior between CustomerNumber and Minimum Reaction Time fields (ISSUE-868532, HOTFIX-9407)
basicportalcomponents
Fixed a problem in which users were unable to choose units from the Embedded Number pop-up on the Web UI Node Editor.
Fix for possible HTML injection (HOTFIX-9386, ISSUE-870805)
basicportalcomponents
Fixed a Cross-site Scripting (XSS) vulnerability in the Web UI selection URL.
saas-2026.2-2026-07-08-07-34-33
Fix for withdrawal messages have incorrect handling (HOTFIX-9393, HOTFIX-9353, ISSUE-866429)
gdsn2-receiver
Created a fix for handling withdrawal messages for GS1BMSFormat in the GDSN receiver.
Fix for parent object with child objects cannot be deleted (ISSUE-866743, HOTFIX-9377)
graphql
A fix has been applied so that removing a compound (specified) ingredient that has more than one sub-ingredient now succeeds in a single operation.
Fix for max 2mb check on Streaming not matching what Kafka/Confluent set as default (HOTFIX-9404)
kafka-integration
Increase of the Streaming receiver limit for max.message.size by a few bytes to align with the default max message size on the topic - reverted (no change)
Fix for impossible to open / edit datapool format configuration (HOTFIX-9351, ISSUE-866431)
gdsn2-receiver
Fixed a null pointer exception that occurs when opening a DataPool format configuration. The fix introduces a null safety guard.
saas-2026.2-2026-07-07-13-50-48
Fix for Upgrade log4j-api in formatted-excel to latest version (HOTFIX-9339)
formatted-excel
Library upgrades have been implemented
saas-2026.2-2026-07-07-08-48-38
Change to ECLASS Advanced dictionary importer (ISSUE-134113, HOTFIX-9320)
eclass
The ECLASS Advanced dictionary importer no longer adds the per-version "Data Attribute" (for example "ECLASS 14.0 Data Attribute") to the ECLASS version root and every classification below it. The attribute is now added only on Advanced Application Class classifications, so it is no longer visible on Basic or Asset Application Classes, segments, main groups, groups, or commodity classes.
Fix for ECLASS business rule validation issue (ISSUE-131171, HOTFIX-9270)
eclass
Improved handling of multi-level polymorphic blocks. Previously, when fetching, application implementation blocks were not recognized properly in some cases.
Fix for missing auto-generated objects in exported products (HOTFIX-9282, ISSUE-132795)
eclass
To fix an issue where auto-generated objects were missing in exported products, auto generation now works correctly when the attribute has a unit.
Fix for ECLASS ADVANCED dictionary import of SCS structure (ECA) creating new hierarchy (HOTFIX-9348, ISSUE-866460)
eclass
When ECLASS dictionaries from different systems were imported, the system version was being reformatted to a standard "major.minor" style. For systems like SCS, that reformatted version was incorrect and appeared that way in the exported product data. A change has been made that lets us tell the system which providers should keep their original version label exactly as delivered, instead of reformatting it. SCS (and any other system we choose) now keeps its real version (SCS1 stays SCS1) in the exported BMECat / PIES data, so the information customers receive matches the source. The behavior is configurable and turned off by default, so nothing changes for existing customers unless we explicitly opt a system in. Only the version label shown in the export is affected; the underlying data, identifiers, and import matching are unchanged. Configuration required To activate this for a system, a property must be added to the STEP server configuration (sharedconfig / config.properties): - Eclass.Harmonization.ExcludedSystemName=SCS To exclude more than one system, list them separated by commas, for example Eclass.Harmonization.ExcludedSystemName=SCS,APP. After the property is set, a server restart is needed for it to take effect. If the property is left out entirely (the default), all versions continue to be reformatted exactly as before, so no action is needed for customers who do not require this.
Fix for dictionary importer sort issue (HOTFIX-9319, ISSUE-134569)
eclass
When importing customer-specific ECLASS ADVANCED dictionaries (e.g., SCS), the Application Classes were written to STEPXML on the root level rather than as a child of Commodity Class. Now, Application Classes are written to STEPXML as a child of Commodity Class, which is the correct way.
Fix for wrong IRDI for polymorphic blocks in BMECat (ISSUE-135545, HOTFIX-9345)
eclass
In ECLASS ADVANCED, CSV data attribute and BMEcat export output files are now using International Registration Data Identifiers (IRDIs) of selected polymorphic blocks instead of abstract.
Fix for polymorphic behavior in ECLASS ADVANCED (HOTFIX-9333, HOTFIX-9329, ISSUE-134526)
eclass
Added support for abstract polymorphic blocks. Now, a polymorphic block without implementation is a valid block.
Fix for ECLASS ADVANCED import error (ISSUE-134477, HOTFIX-9313)
eclass
Fixed an error that occurred in the ECLASS ADVANCED importer when a data attribute was linked to the application classification.
Fix for exports using current context as default rather than setting (ISSUE-134196, HOTFIX-9306)
eclass
When exporting ECA products using the BMECat 2005.1 Converter, plugin data was exported in the workbench context instead of the default context selected in the Cross Context Chooser in the Select Format step. This relates to feature names in the exported file. Now, data is exported in the correct default context.
saas-2026.2-2026-07-02-19-52-04
Fix for Web UI performance following deployment of Unfolding Data Container component (ISSUE-864622, HOTFIX-9380)
basicportalcomponents
When opening a product screen in the Web UI with multiple validation business conditions configured, users may have experienced performance issues while the screen was loading. This was due to an issue with multiple user notifications being saved simultaneously. This issue has been resolved. Screen loading performance should now be improved.
saas-2026.2-2026-06-29-21-37-00
Fix for STEP monitoring alert (ISSUE-870438, ISSUE-870723)
serveradministration
Improved a STEP SaaSv2 infrastructure sensor so it will no longer alert users about sporadic single Keycloak authentication errors.
Fix for STEP monitoring alert (HOTFIX-9376)
serveradministration
Improved a STEP SaaSv2 infrastructure sensor so it will no longer alert users when sporadic single Keycloak authentication errors occur.
Fix for Hotfolder processing issue in ShotRequestInbound – (HOTFIX-9328)
restapi
The REST API v1 upload method for uploading import files to a Inbound Integration Endpoint had some problems for clustered systems with 2 servers. The method created an empty placeholder file before putting the data into it, and there is a small risk that the endpoint start processing it while it is empty and that causes that import to fail. This has now been fixed.
saas-2026.2-2026-06-24-11-17-12
Fix for system slowdown (HOTFIX-9364, ISSUE-869311)
workbench
To fix an issue where the system had become extremely slow, the number of assets that can be exported in the STEP Workbench by right-clicking on a classification and selecting 'Export Images & Documents' has been limited to one million. Exceeding this limit will cause memory issues.
Fix for inability to read properties of null when an object is approved in workflow through Web UI (HOTFIX-9360, ISSUE-865918)
basicportalcomponents
Fixed an unexpected and sporadic Google Web Toolkit (GWT) client-side error caused by leaving the Web UI's Node Editor screen with tab pages when moving the item to the next state in the workflow.
Fix for dropdown appearing on text box in the Workflow Details Screen (HOTFIX-9367, ISSUE-869510)
basicportalcomponents
Fixed a problem, when the Rich Text attribute value component under the Classification Specific Value Group / Value component in the Web UI Node Editor displayed an empty suggestion box even when no units were available for the configured attribute.
Fix for intermittent failures of Dynamic JMS integrations (HOTFIX-9362, ISSUE-866436, HOTFIX-9361, HOTFIX-9365)
jms-integration
To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.
Fix for internal server error due to datastore version mismatch (HOTFIX-9363, ISSUE-867813)
basicportalcomponents
To fix an internal server error caused by a datastore version mismatch for an object, it will now no longer be possible to execute Toolbar actions twice on a Web UI Node List by double-clicking it.
saas-2026.2-2026-06-23-21-54-28
Fix for AutoCare imports failing on conversion (ISSUE-858567, HOTFIX-9318)
automotive
Fixed a problem with the VCdb Change Handling Service. Previously, the service was running problematically ,which caused the system to become unresponsive. After the fix, the system now works as expected.
Fix for NullPointerException in VehicleConfigurationsBuilder.buildDriveTypes (HOTFIX-9336, ISSUE-134777)
automotive
Fixed a problem that occurred during conversions for Offhighway/Equipment VCDB. Now, the conversion does not look for the DriveType table if the DriveType table does not exist in the data set.
Fix for tecdoc supplier import needs to start manually for go to import mode (ISSUE-853515)
automotive
Fixed a problem with the TecDoc import, which was not ignoring empty files in the supplier data files.
Fix for issue with VCdbChangeHandlingService background process (HOTFIX-9301, ISSUE-132983)
automotive
To fix an issue with automated tests failing for the AutoCare Reference Data solution due to a problem with Change Handling, more logging has been added to VCdbChangeHandlingService.
Fix for RuntimeException error after adding Parent AAIA ID to PIES Export (ISSUE-134454)
automotive
Corrected a problem that occurred when the Parent AAIAID was not exported correctly and was causing the export error.
saas-2026.2-2026-06-19-18-40-30
Fix for intermittent failures of Dynamic JMS integrations (ISSUE-866436, HOTFIX-9365)
jms-integration
To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.
saas-2026.2-2026-06-18-19-33-14
Fix for intermittent failures of Dynamic JMS integrations (HOTFIX-9362, ISSUE-866436)
jms-integration
To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.
saas-2026.2-2026-06-18-16-08-47
Fix for intermittent failures of Dynamic JMS integrations (ISSUE-866436, HOTFIX-9361)
jms-integration
To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.
saas-2026.2-2026-06-17-17-31-15
Fix for Match and Merge inbound integration endpoint contributor data corruption on subsequent loads (ISSUE-865517, HOTFIX-9307)
matching
Fixed an unexpected exception during Match and Merge related to stored empty external revision contributor data.
Fix for missing Create and Update timestamp (HOTFIX-9331, ISSUE-852027)
matching
Now, Source Relation's reference metadata will be correctly populated on a source record during Match And Merge imports, and will correspondingly promote to Golden Record according to survivorship rules logic.
Fix for matching ruleset config import / export tests using unsupported `` XML format (ISSUE-135704)
matching
Corrected the hard-coded MatchingRulesetConfiguration fixtures in MatchingImportTest and MatchingAlgorithmExportTest to use the
Error in unmerge functionality related to data containers (HOTFIX-9275, ISSUE-124770)
matching
Fixed an error occurring in the unmerge functionality related to manual changes with keyed and key-less data containers.
Fix for issues with data containers on Match and Merge when used with standardization business actions (HOTFIX-9332, ISSUE-867114)
matching
Fixed a problem that occurred when multi-value data containers, imported via Match And Merge inbound integration endpoints (IIEPs) with Standardization business actions, were sometimes duplicated or missing.
Fix for task number error on 'Golden Record Clerical Review Task List' (HOTFIX-9276, ISSUE-845235)
matching
Removed the hard-coded MAX_TASKS = 10000L variable in the ClericalReviewTaskHelper component, so the limit is now fully controlled by the system property MergeGoldenRecord.ClericalReview.TaskList.MaxTasks (default still 10,000). Customers with workflows larger than 10,000 tasks can raise this value to ensure all relevant tasks are reachable.
Fix for unexpected error in FindSimilar and Match and Merge (ISSUE-133696)
matching
Fixed a 500 internal server error in FindSimilar and Match&Merge when a matching ruleset matcher had no thresholds configuration.
Performance optimizations for matching with active ruleset (ISSUE-134217)
matching
To implement some performance optimizations in matching, the system now caches the matchers-enabled map per ruleset in the MatchersEnabledMapCache so the per-pair ranking path stops re-deserializing the JSON attribute. This eliminates the ~4-5% residual ruleset-module CPU left after B2.
Fix for ruleset setup entity is immutable when active (ISSUE-118397)
matching
To fix an issue in which the ruleset setup entity is immutable when active, including read-only in the workbench, an active matching ruleset is now immutable at the domain layer. Once a ruleset is activated, the system blocks any operation that would alter its behavior or remove it, ensuring matching results stay stable. To make changes again, the user must first deactivate the ruleset.
Fix for matching rule set domain bundle missing javax.xml.xpath OSGi import (ISSUE-135839)
matching
Add javax.xml.xpath.* to the OSGi import allow-list in com.stibo.matching.matchingruleset/domain.bnd. The bundle imports the sibling XML packages (org.w3c.dom.*, org.xml.sax.*) but not javax.xml.xpath, which MatchingRulesetSetupEntityImplExportImportTest uses (XPath added at r1528817). Without it, the bundle classloader cannot resolve javax.xml.xpath.XPath, so the test class fails to initialize (NoClassDefFoundError -> initializationError) on every full-system run. This is for Tests / packaging only; no product behavior changed.
saas-2026.2-2026-06-17-06-43-37
Fix for outdated code signing certificate for the Workbench launcher (RDHELP-10404)
workbench-launcher
The certificate used to sign the workbench launcher installer was outdated, causing a warning when trying to install it. The workbench launcher has been signed again, with the updated certificate, so it can be installed without warnings.
saas-2026.2-2026-06-16-18-57-01
Upgrade netty-resolver in audit-messaging to latest version (HOTFIX-9325)
audit-messaging
Upgrade netty-resolver in audit-messaging component to latest version
Fix for ECLASS business rule validation issue (ISSUE-131171)
onboarding
Improved handling of multi-level polymorphic blocks. Previously, when fetching, application implementation blocks were not recognized properly in some cases.
Fix for ECLASS ADVANCED deletion of old data model taking exceedingly long time (ISSUE-865832)
core
The change broadens the In-Memory attribute force-delete pass in InMemAttributeImpl from AttributeProductLinkPO to the AttributeLinkPO super-type so that classification (DCL) links are removed in the fast, batched, and Cassandra-safe path instead of the slow, unbatched deleteExtras loop.
Fix for asset push stoppage following language dimension removal (ISSUE-856731)
core
Fixed a problem in which the push status information (which tracks whether each asset has been successfully delivered to its destination) is silently lost after language dimension removal.
Fix for missing dictionaries when Silicon variant of workbench launcher is installed (ISSUE-135325)
workbench
Due to lack of support for AArch64 from Hunspell jni, a switch has been implemented from AArch64 to Apache Lucene Hunspell.
Fix for inbound for STEPXML ends during testing with ‘completed with errors’ (ISSUE-845567)
core
Fixed a problem where inbound integration endpoints for STEPXML ended during testing with a ‘completed with errors’ message. It also had an error when copying the file to the failed directory. This is now fixed.
Fix for SFTP configurations setup in Self-Service UI (HOTFIX-9344, ISSUE-866210)
core
To fix an issue in which SFTP configuration setups in the Self-Service UI were not reflected in the Export Configuration SFTP delivery methods, custom SSH keys will now be correctly supported by the normal exports with SFTP delivery in STEP.
Upgrade log4j-api in smartsheet to latest version (HOTFIX-9327)
smartsheet
Upgrade log4j-api in smartsheet component to latest version
Fix for ECLASS BASIC export not working (ISSUE-866777)
core
To fix an issue with the ECLASS BASIC exporter, exported products now automatically pick up attributes inherited from the classification groups they belong to. This change lets you exclude specific kinds of classification nodes (e.g., ECLASS ADVANCED application classes) from that inheritance, so unwanted attributes no longer get pulled into the export and your output stays clean and relevant.
Error in unmerge functionality related to data containers (HOTFIX-9275, ISSUE-124770)
core
Fixed an error occurring in the unmerge functionality related to manual changes with keyed and key-less data containers.
TPL Upgrade for log4j-api in core to latest version (HOTFIX-9302)
core
Closing security vulnerabilities in log4j TPLs
Fix for telemetry metrics naming (ISSUE-133955)
core
To fix inconsistent naming conventions for telemetry metric names, the names have been standardized to a component.operation.metric pattern. Verb tenses are now aligned across background process, mail, user, and workbench metrics.
Fix for after submitting in PDX the Data Container status shows 'Success' (ISSUE-800959, HOTFIX-9322)
productdatasyndication-integration
Introduced an option to handle the status of a product received from the old PDX inbound integration endpoint API call, so that it does not get overwritten by the new wrong status. To enable this option, contact Stibo Systems Support.
Fix for metrics on email per environment (ISSUE-129392)
core
There was an issue where there was no visibility into how many emails customers were sending through STEP, including volumes and sizes, making it impossible to track email usage per environment. Metric names were corrected and the feature was tied to a feature flag for gradual rollout.
Fix for inability to see Config_Code attribute tag in Comps Sku (HOTFIX-9288, ISSUE-854384)
core
To fix an issue in which Config_Code on the Companion SKU (child object) is not exported when the value is empty, a description attribute which is valid for a parent and its child node will now be exported if the value of the description attribute of the parent node is not empty and the value of the attribute is empty on the child node and the export is Advanced STEP XML and the parameter of STEP-ProductInformation tag: ExportValidAndAbsent="true".
Fix for New UI not loading (HOTFIX-9342, ISSUE-866481)
core
When trying to store or import data in the Centralized Configuration Setup Entity, e.g., the Default Context in the New UI, the user could see an error message about 'configuration' attributes being not valid for the Setup Entity Object Type. This issue has been resolved. The Setup Entity Object Type will be updated and error messages should not appear when storing or importing data in the Centralized Configuration Setup Entity.
Fix for outbound export behavior differing between SaaS and on-premises (ISSUE-859815, HOTFIX-9324)
core
XSLT post-processing is now skipped when the exported STEP XML is semantically empty (root-element only). This has been done to prevent spurious deliveries when the export user lacks object visibility. The fix also adds a semantic empty-file check using existing EmptyFileHandler before calling the post-processor, which matches on-prem behavior.
Fix for OneQueue BGP not processing BGPs following update to 2026.1 (ISSUE-854961, HOTFIX-9279)
core
An issue where a memory leak could prevent new background processes from starting has been fixed.
Fix for performance issues during exports of large images (ISSUE-857867)
core
Fixed a problem with zero xdpi and ydpi in the lowres-jpg and lowres-png image pipelines that were causing performance issues. The default is now set to 72dpi.
Fix for incorrect base unit conversions in export (ISSUE-830566)
core
BigDecimal can now be used for base unit conversion to avoid floating-point precision errors.
Fix for ProductCrossReference is inherited at the size level in On-prem but not in SaaS. (HOTFIX-9283, ISSUE-857496)
core
Fix the problem in the exporter, where the inherited ProductCrossReferences were not included in the exported file.
Upgraded library to latest version (RDSEC-3755)
instrument
Updated a core component library to the latest version.
Component upgraded to latest version (RDSEC-3760)
ai-service
Updated a component to the latest version.
Fix for transformations not saved for import configurations (HOTFIX-9317, ISSUE-865133)
core
When configuring import configurations in the workbench, transformations configured by the user were not stored for the Reference Type ID, Reference Target, Data Container Type ID, and Data Container ID mappings. This issue has been resolved. All transformations for these mappings will now be stored after the import configuration is updated.
Fix for ruleset setup entity is immutable when active (ISSUE-118397)
core, matchingagent
To fix an issue in which the ruleset setup entity is immutable when active, including read-only in the workbench, an active matching ruleset is now immutable at the domain layer. Once a ruleset is activated, the system blocks any operation that would alter its behavior or remove it, ensuring matching results stay stable. To make changes again, the user must first deactivate the ruleset.
Fix for automap fails with 'Unable to Map Column' for 'Hybris UK - Web Group Location' despite matching attribute name (HOTFIX-9271, ISSUE-857791)
core
Attributes created by Lock Free Schema Change will no longer cause problems with the auto-mapping of attribute names during data import.
Fix for intermittent failures of Dynamic JMS integrations (ISSUE-866436, HOTFIX-9347)
jms-integration
To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.
saas-2026.2-2026-06-16-07-34-20
Fix for intermittent failures of Dynamic JMS integrations (ISSUE-866436, HOTFIX-9347)
jms-integration
To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.
saas-2026.2-2026-06-12-00-15-08
Fix for STEP availability issues (HOTFIX-9340, ISSUE-867523)
audit-messaging
Fixed a memory leak in the Audit Messaging framework, which caused the full table to be read instead of only metadata, which led to Out Of Memory problems.
Fix for error during inbound integration endpoint that was configured with Legacy Asset Importer (ISSUE-857605, HOTFIX-9265)
assetloader
Fix the ClassCastExceptions and NullPointerException that occur in the Legacy Asset Importer when the Hotfolder receiver is used on an Inbound Integration Endpoint.
Fix for validation error only showing on the Italian version of the attribute but not on the French/English/Dutch column (HOTFIX-9284, ISSUE-861755)
basicportalcomponents
Now the validation error about missing the conditionally mandatory workflow attribute in Smartsheets will correctly affect all cross-context attribute value cells.
Fix for error in Uniform Resource Identifier (URI) creation method (HOTFIX-9330, ISSUE-866982)
assetdownload
Fixed a problem that occurred when asset URLs starting with "file:" were rejected by CreateAssetFromURLOperation when called from business logic. The issue was caused by the replacement of HttpUrlConnection with Apache Http Client, which doesn't support non-http protocols.
Fix for STEP Monitoring Alert (HOTFIX-9274, ISSUE-863218)
basicportalcomponents
Addressed a memory leak that allowed the system to load an indefinite amount of users via Create User actions on the Web UI User List screen, which in turn caused an Out of Memory error. Now, the amount of users is limited to 5000 (by default) by the same configuration property (WebUI.UserList.Max) as for the User List screen.
Fix for different extension type on SaaS and for on-prem system (ISSUE-825585)
assetdownload
Made a change to the ContentMetadataUtil, so that full filenames that look like extensions (e.g., png, jpg, etc.) are used. This is the case for asset info from the Celum cloud service that manages asset data. Before the fix, this would not work because the dot separator was missing, and so the metadata was based on the content of the imported asset. But now, the DAM-provided extension is to be trusted first.
Fix for electronic address(EAddressDataContainer) is missing key values for ElectronicAddress Error (ISSUE-814297, HOTFIX-9304)
basicportalcomponents
Solved a sporadic problem, when the Rich Text Values on a Globally Configured Unfolding DC on a Web UI Node Editor screen were sometimes not properly set, which led to title attribute value loss and incorrect overall DC values being saved.
Fix for Upgrade log4j-api & log4j-core in core to latest version (HOTFIX-9338)
autoclassification
Library upgrades have been implemented
Fix for translation failed when translation export was split into multiple files (HOTFIX-9269, ISSUE-857199)
async-translation
The translation export for a large number of products may be split into multiple files before being sent to the translation agency. In this case no files were sent to the translation agency and the translation process had to be restarted manually. This has been corrected. The translation now correctly handles exports that have been split into multiple files, and all parts are passed on to the translation agency as intended.
Fix for STEP monitoring alert (HOTFIX-9335, ISSUE-867488)
configuration-management
Fixed a problem that occurred when Git delivery was fetching the repository with full commit history, causing disk pressure and alerts on the STEP system. Now, the Git delivery will only fetch a history of the last commit.
Fix for AI translation BGP log information missing (ISSUE-133691)
async-translation
Pending files were not reported correctly in the execution log for the asynchronous AI translation job.
Upgraded library to latest version (RDSEC-3776)
audit-messaging
Upgraded a component to the latest approved version.
Fix for StringIndexOutOfBoundsException in Web UI (webui-0.js) (ISSUE-865912, HOTFIX-9308)
basicportalcomponents
Fixed an unexpected exception in Web UI Design Mode, related to the Description Summary Card component.
Fix for data absent from export when selection size is large in the Web UI (HOTFIX-9285, ISSUE-861909)
basicportalcomponents
Fixed a problem when the Export Action on a Web UI Node List did not work correctly when exporting data beyond Portal.MaxResultCount limit on the Advanced Search Screen.
Fix for validation error disappearing after focus change without modifying value in Web UI (ISSUE-866479, HOTFIX-9321)
basicportalcomponents
Fixed a problem that occurred when a validation error message for Regular Expression attributes unexpectedly cleared when the user pressed the Tab key on the Web UI Node Editor screen.
Fix for it is not possible to apply formatting with some tags in the 'How to' table within complex attributes (ISSUE-803894, HOTFIX-9268)
basicportalcomponents
Fixed a problem with bold and bullet list tags on the 'Add Data Container' popup for attribute values, edited in the Rich Text Editor.
saas-2026.2-2026-06-09-20-53-31
Fix for error observed while searching for objects (HOTFIX-9315, ISSUE-864250)
workbench
Fixed a concurrent modification exception in the workbench that was caused by slow typeahead search.
Fix for root cause analysis - STEP is unavailable (ISSUE-865081, HOTFIX-9280)
smartsheet
Introduced a 10k limit to exported LOV values in Smartsheets format. By default, it is now set to 10k. Please contact Stibo Support if this limit should be increased. Additionally, fixed a memory leak in the LOV filters export in Smartsheets, which increased the memory usage during the export when exporting huge LOVs with filters.
Fix for ConcurrentModificationException following workbench start (HOTFIX-9316, ISSUE-796900)
workbench
Fixed a sporadic Concurrent Modification error in the workbench that occurred when opening the asset editor directly following starting the workbench.
Fix for Upgrade log4j-core in elasticsearch-integration to latest version (HOTFIX-9305)
elasticsearch-integration
upgrade of log4j tpls
Fix for STEP application server crashes (ISSUE-864601, HOTFIX-9278)
integration-amazon-sqs
Added guardrails to protect against STEP application server crashes due to running out of heap memory when sending very large messages through Amazon SQS. By default, a limit of 100Mb has been introduced. However, this limit can be changed if needed by using the SQSDeliveryConnector.MaxFileSize= property. It should be noted that raising this limit increases the chance of application server crashes due to running out of heap memory.
Fix for Upgrade log4j-api in fabdis to latest version (HOTFIX-9337)
fabdis
Library security upgrades have been implemented
Fix for different extension type on SaaS and for on-prem system (ISSUE-825585)
core
Made a change to the ContentMetadataUtil, so that full filenames that look like extensions (e.g., png, jpg, etc.) are used. This is the case for asset info from the Celum cloud service that manages asset data. Before the fix, this would not work because the dot separator was missing, and so the metadata was based on the content of the imported asset. But now, the DAM-provided extension is to be trusted first.
Fix for Async File Exchange Poller logs ClassCastException and 'BGP not found' (HOTFIX-9263, ISSUE-855870)
external-async-kernel
Users may encounter a ClassCastException error when using the Async Poller for the File Exchange translation service in the workbench. This has been fixed. The ClassCastException error should no longer occur when using the Async Poller for the translation service.
Fix for subscription messages errors at datapool (HOTFIX-9323, ISSUE-865493)
gdsn2-receiver
The '#' is no longer an accepted character for the GDSN Instance Identifier. This fix introduces the configuration property GDSN2.BackgroundProcessIDDelimiter with which the default delimiter can be overridden to another character accepted by the GDSN provider.
Fix for cannot cancel reindexing when child background process failed (ISSUE-133334)
elasticsearch-integration
Fixed a bug where the user could not cancel reindexing when a child background process failed.
Fix for inability to disconnect objects from classification hierarchy (HOTFIX-9277)
industry-standard
Added a tool that enables users to disconnect objects from a classification hierarchy.
Fix for Upgrade log4j-api in gdsn2-receiver to latest version (HOTFIX-9334)
gdsn2-receiver
Library security upgrades have been implemented
Fix for intermittent timeouts when calling Stibo REST API (HOTFIX-9286, ISSUE-865232)
instrument
Fixed a problem that occurred when the Instrument graphql JAR Version updater sometimes caused inbound REST calls to fail by putting too much pressure on the foreground (FG) pod.
Fix for Smartsheet template labels are output in English instead of Japanese (HOTFIX-9309, ISSUE-865410)
smartsheet
Fixed a caching problem in Smartsheet Exporter, which led to intermittent problems with Smartsheets locale.
saas-2026.2-2026-06-04-18-08-56
Fix for getSimilarObjects SOAP call from Salesforce to STEP does not work (HOTFIX-9264, ISSUE-860007)
soapapi
Fixed a problem when the inner Entity tag in the exportConfigurationXML tag in the GetSimilarObjects SOAP request caused an unexpected exception.
Fix for Upgrade log4j-api in workbench to latest version (HOTFIX-9311)
workbench
upgrading log4j tpl CVE
Error in unmerge functionality related to data containers (HOTFIX-9275, ISSUE-124770)
graphql
Fixed an error occurring in the unmerge functionality related to manual changes with keyed and key-less data containers.
Fix for Upgrade log4j-core in kafka-integration to latest version (HOTFIX-9312)
kafka-integration
bumping log4j tpl
Fix for root cause analysis: STEP was unavailable (ISSUE-865381, HOTFIX-9303)
dtp
Fixed a problem, which could have caused a Failover Group pod outage if the InDesign server is unavailable and the Intrusion Detection System Worker thread is stuck indefinitely in fetching InDesign Web Services Description Language.
Fix for PDF generation for a publication with DTP files intermittently fails with an error (ISSUE-863288, HOTFIX-9267)
dtp
A problem occurred where PDF generation for a publication with DTP files intermittently failed with 'PDF header signature not found' errors and missing pages. This is now fixed.