saas-2026.2-2026-07-14-10-52-30

Fix for errors related to immutable collections in Elasticsearch publishing process (ISSUE-132368)
elasticsearch-integration

Fixed a rare error related to publishing reference data in the new schema for Elasticsearch indexing.

Fix for Broken sorting on sufficiency scores (ISSUE-137714)
elasticsearch-integration

Fixes sorting on sufficiency score fields in faceted search screen

Fix for recent update loss of selection or applied filter when switching to the Multi-Edit View in Web UI (HOTFIX-9410, ISSUE-830680)
basicportalcomponents

Fixed a problem where switching between display modes on the Web UI Node List used to clear filters.

Fix for Elasticsearch BGP error (ISSUE-871644, HOTFIX-9412)
elasticsearch-integration

The Elasticsearch EP Plugin now only goes idle when the queue is empty and no leftover background work still requires supervision. This enables the resource-saving benefit of the fix, and makes sure failures are always caught, retried, and surfaced as before.

Fix for errors related to immutable collections in Elasticsearch publishing process (HOTFIX-9414, RDSUP-499)
elasticsearch-integration

Fixed a rare error related to publishing reference data in the new schema for Elasticsearch indexing.

Fix for possible HTML injection (HOTFIX-9386, ISSUE-870805)
portalframework

Fixed a Cross-site Scripting (XSS) vulnerability in the Web UI selection URL.

Fix for display of Last Run and time zone are incorrect for the scheduled process (ISSUE-865439, HOTFIX-9413)
workbench

Fixed an error in workbench in which the Last Run field would display incorrectly for scheduled processes based on an incorrect time zone. This led to confusion over when the Last Run process actually occurred. The Last Run field has now been corrected to show the timestamp accurately based on the user's local settings, matching the Next Run display.

saas-2026.2-2026-07-13-09-41-30

Fix for validation and conversion errors loading new TecDoc reference in automotive module (ISSUE-871977, HOTFIX-9400)
automotive

Fixed a problem with validation errors that occurred during reference data imports.

Upgraded component to latest version (HOTFIX-9385, RDSEC-3623)
automotive

Upgraded a component to the most current version.

Fix for Tecdoc Supplier Data import error (HOTFIX-9396, ISSUE-871907)
automotive

Fixed a problem wherein a leading zero was stripped when parsing fractional criteria attribute values during the TAF file conversion.

saas-2026.2-2026-07-10-11-45-13

Fix for production environment is not accessible (HOTFIX-9399, ISSUE-863748)
core

Now, events will be deleted as soon as they are processed if the retention is 0. This will prevent the event table from growing too large between Cassandra Garbage Collection runs. This will help system performance, in particular, when purging revisions and when checking to see if there are events for the revision.

Fix for inability to launch manual workbench login instance when SAML SSO is enabled (ISSUE-867976, HOTFIX-9357)
core

Fixed a manual workbench login (/manualwblogin) that was returning an internal server error on Jetty 12 by correcting the invalid servlet url-pattern to /manualwblogin in Webstart web.xml.

Fix for inbound for STEPXML ends during testing with ‘completed with errors’ (HOTFIX-9314)
core

Fixed a problem where inbound integration endpoints for STEPXML ended during testing with a ‘completed with errors’ message. It also had an error when copying the file to the failed directory. This is now fixed.

Fix for 0-byte files created for SAP messages (HOTFIX-9379, ISSUE-870376)
core

Fixed a concurrency issue which led to the system moving empty 0-byte files into the In and Failed hotfolders when processing the file via a hotfolder by inbound integration endpoint (IIEP) on a clustered system with multiple nodes.

Ruleset information added to matching execution reports (ISSUE-129711)
core

Added ruleset information to matching execution reports.

Fix for Schedule Category Profiling is not working (ISSUE-855329, HOTFIX-9406)
core

The Product Hierarchy Root was excluded when updating catalog profiling. This has been fixed.

Fix for ECLASS BASIC export not working (HOTFIX-9350)
core

To fix an issue with the ECLASS BASIC exporter, exported products now automatically pick up attributes inherited from the classification groups they belong to. This change lets you exclude specific kinds of classification nodes (e.g., ECLASS ADVANCED application classes) from that inheritance, so unwanted attributes no longer get pulled into the export and your output stays clean and relevant.

Fix for unbound workflow variables automatically limited to 1 MB value size (ISSUE-872333, HOTFIX-9402)
core

Introduced a public configuration property called StateFlowVariable.MaxLengthMB, set to 1 (MB) by default, which allows users to change the default limit of a stateflow variable size.

Fix for scheduled bulk updates failing without privilege (ISSUE-846915, HOTFIX-9403)
core

Fixed a problem that occurred when users without the Manage Background Process Execution privilege could not schedule a background process (BGP) with OneQueue enabled.

Fix for export via JDBC taking longer time (HOTFIX-9378, ISSUE-833906)
core

The JDBC Delivery Plugin was slow when configured with Snowflake drivers. The line-by-line processing of a CSV file was too slow, but now it is possible to first upload to Snowflake using a temporary table and then merge the changes, making the process faster overall.

Fix for 'RuntimeException: Cannot subtract from' error (HOTFIX-9374, ISSUE-861599)
core

Fixed an issue that occurred in which a SnapshotTooOldException error was thrown when running the health checks 'Unrevised values should be revised' or 'Revised values should be unrevised.'

Fix for scheduled outbound integration endpoint (OIEP) not pushing all events (HOTFIX-9397, ISSUE-867407)
core

When processing events with de-duplication enabled and a batch size larger than 10,000, not all duplicate events would be marked as processed. This has been fixed.

Fix for event processor crash when changing an object type (ISSUE-868765, HOTFIX-9358)
core

To fix an issue where changing an object type caused an event processor crash, hidden Lock-free Schema Change (LFSC) shadow copies will now be ignored when setting the object type for a node. This will prevent unexpected exceptions from occurring in the customer's business logic.

Fix for STEP unavailablity (HOTFIX-9394, ISSUE-871557)
core

A fix was implemented that improved performance when checking for deprecated scripting APIs when running JavaScript business rules.

Fix for Bulk Update BGP processes failing (ISSUE-871315, HOTFIX-9389)
core

Fixed a problem with Bulk Update background processes (BGPs) failing with an 'ArithmeticException' error when run on an empty node collection.

Fix for performance issues during exports of large images (HOTFIX-9346)
core

Fixed a problem with zero xdpi and ydpi in the lowres-jpg and lowres-png image pipelines that were causing performance issues. The default is now set to 72dpi.

Fix for STEP availability issues (HOTFIX-9373, ISSUE-868730)
core

Addressed a mapDB file leak that occurred during STEP import and export processes. This fix should prevent disk pressure events controlled by mapDB tmp files not being deleted.

Fix for inability to revert to old revision due to invalid data (HOTFIX-9359, ISSUE-869038)
core

Fixed an unexpected exception caused by Lock-free Schema Change (LFSC) leftovers when reverting to an old revision.

Fix for thousands of non-descript BGPs running following 2026.1 update (HOTFIX-9356, ISSUE-867520)
core

Fixed a problem that occurred when an inbound integration endpoint (IIEP) user attempted to delete background processes (BGPs) but did not have the required privileges needed to do so. This left these orphan BGPs without any attributes populated (Status, Started by, etc.). Now, these BGPs will no longer have these values wiped out if the execution user attempts to delete but does not have the required privileges needed to delete BGPs.

Fix for CMDM merge finalization does not guarantee export of final MERGED_INTO reference (ISSUE-852364, HOTFIX-9355)
core

Fixed a problem that occurred when the EventQueue.EventReadDelay did not work on Cassandra systems. The CMDM merge finalization did not guarantee export of the final MERGED_INTO reference and Deactivate Record attribute via an outbound integration endpoint (OIEP), causing downstream systems to miss the required merge state. The fix has been added to an existing hotfix (HOTFIX-8479) and backported to 2024.2.

Fix for STEP unavailablity (ISSUE-871381, HOTFIX-9387)
core

Fixed a problem that caused the Cassandra Garbage Collector to run for a long time reading System Setup values, which in turn led to the Vacuum Cleaner being blocked.

Fix for RCA - STEP monitoring alert [aap-uat] (ISSUE-873144)
core

Fixed memory leak when unlinking object types from the attribute on STEP with Oracle DB, which caused an OOM.

Fix for inbound integration endpoint throwing 'exclusive lock Worker' error on import (HOTFIX-9371, ISSUE-867513, HOTFIX-9384)
core

Running a strict inbound integration endpoint (IIEP) threw errors like 'Failed to acquire exclusive lock Worker'. These errors occurred because the worker started a new process when it finished its batch if there were more files to process, but the poller was also scheduled to start a new worker process every minute. As there were lots of files to to process, a task that often takes only a few seconds, there were new workers being created all the time. Therefore, there was a high possibility the poller and worker each created workers which then clashed as only one can run at the same time when an IIEP is set to strict. This has been fixed.

Fix for outbound error (HOTFIX-9349)
core

Fixed an unexpected exception that occurred during BGPLegacySharedFSStorageFolderPlugin (a negative list fallback for endpoints / exports), copying files to a shared directory.

Fix for outbound integration endpoint error (ISSUE-868301, ISSUE-868399)
core

Fixed an unexpected exception during BGPLegacySharedFSStorageFolderPlugin (a negative list fallback for endpoints / exports) that was copying files to a shared directory.

saas-2026.2-2026-07-09-19-56-28

Fix for high disk utilization issue (HOTFIX-9409, ISSUE-872267)
basicportalcomponents

Fixed an unexpected error caused by Match Tuning Data Profiling that was using a deprecated plugin not supported by Cassandra DB.

Fix for invalid BasicAuth credentials not rejected causing Smartsheet error (ISSUE-872174, HOTFIX-9395)
basicportalcomponents

Fixed a problem in which basic authentication in Excel Smartsheets did not throw an 'Invalid password' exception when the user provided an invalid password in a Smartsheet login pop-up.

Fix for inconsistent unit selection behavior between CustomerNumber and Minimum Reaction Time fields (ISSUE-868532, HOTFIX-9407)
basicportalcomponents

Fixed a problem in which users were unable to choose units from the Embedded Number pop-up on the Web UI Node Editor.

Fix for possible HTML injection (HOTFIX-9386, ISSUE-870805)
basicportalcomponents

Fixed a Cross-site Scripting (XSS) vulnerability in the Web UI selection URL.

saas-2026.2-2026-07-08-07-34-33

Fix for withdrawal messages have incorrect handling (HOTFIX-9393, HOTFIX-9353, ISSUE-866429)
gdsn2-receiver

Created a fix for handling withdrawal messages for GS1BMSFormat in the GDSN receiver.

Fix for parent object with child objects cannot be deleted (ISSUE-866743, HOTFIX-9377)
graphql

A fix has been applied so that removing a compound (specified) ingredient that has more than one sub-ingredient now succeeds in a single operation.

Fix for max 2mb check on Streaming not matching what Kafka/Confluent set as default (HOTFIX-9404)
kafka-integration

Increase of the Streaming receiver limit for max.message.size by a few bytes to align with the default max message size on the topic - reverted (no change)

Fix for impossible to open / edit datapool format configuration (HOTFIX-9351, ISSUE-866431)
gdsn2-receiver

Fixed a null pointer exception that occurs when opening a DataPool format configuration. The fix introduces a null safety guard.

saas-2026.2-2026-07-07-13-50-48

Fix for Upgrade log4j-api in formatted-excel to latest version (HOTFIX-9339)
formatted-excel

Library upgrades have been implemented

saas-2026.2-2026-07-07-08-48-38

Change to ECLASS Advanced dictionary importer (ISSUE-134113, HOTFIX-9320)
eclass

The ECLASS Advanced dictionary importer no longer adds the per-version "Data Attribute" (for example "ECLASS 14.0 Data Attribute") to the ECLASS version root and every classification below it. The attribute is now added only on Advanced Application Class classifications, so it is no longer visible on Basic or Asset Application Classes, segments, main groups, groups, or commodity classes.

Fix for ECLASS business rule validation issue (ISSUE-131171, HOTFIX-9270)
eclass

Improved handling of multi-level polymorphic blocks. Previously, when fetching, application implementation blocks were not recognized properly in some cases.

Fix for missing auto-generated objects in exported products (HOTFIX-9282, ISSUE-132795)
eclass

To fix an issue where auto-generated objects were missing in exported products, auto generation now works correctly when the attribute has a unit.

Fix for ECLASS ADVANCED dictionary import of SCS structure (ECA) creating new hierarchy (HOTFIX-9348, ISSUE-866460)
eclass

When ECLASS dictionaries from different systems were imported, the system version was being reformatted to a standard "major.minor" style. For systems like SCS, that reformatted version was incorrect and appeared that way in the exported product data. A change has been made that lets us tell the system which providers should keep their original version label exactly as delivered, instead of reformatting it. SCS (and any other system we choose) now keeps its real version (SCS1 stays SCS1) in the exported BMECat / PIES data, so the information customers receive matches the source. The behavior is configurable and turned off by default, so nothing changes for existing customers unless we explicitly opt a system in. Only the version label shown in the export is affected; the underlying data, identifiers, and import matching are unchanged. Configuration required To activate this for a system, a property must be added to the STEP server configuration (sharedconfig / config.properties): - Eclass.Harmonization.ExcludedSystemName=SCS To exclude more than one system, list them separated by commas, for example Eclass.Harmonization.ExcludedSystemName=SCS,APP. After the property is set, a server restart is needed for it to take effect. If the property is left out entirely (the default), all versions continue to be reformatted exactly as before, so no action is needed for customers who do not require this.

Fix for dictionary importer sort issue (HOTFIX-9319, ISSUE-134569)
eclass

When importing customer-specific ECLASS ADVANCED dictionaries (e.g., SCS), the Application Classes were written to STEPXML on the root level rather than as a child of Commodity Class. Now, Application Classes are written to STEPXML as a child of Commodity Class, which is the correct way.

Fix for wrong IRDI for polymorphic blocks in BMECat (ISSUE-135545, HOTFIX-9345)
eclass

In ECLASS ADVANCED, CSV data attribute and BMEcat export output files are now using International Registration Data Identifiers (IRDIs) of selected polymorphic blocks instead of abstract.

Fix for polymorphic behavior in ECLASS ADVANCED (HOTFIX-9333, HOTFIX-9329, ISSUE-134526)
eclass

Added support for abstract polymorphic blocks. Now, a polymorphic block without implementation is a valid block.

Fix for ECLASS ADVANCED import error (ISSUE-134477, HOTFIX-9313)
eclass

Fixed an error that occurred in the ECLASS ADVANCED importer when a data attribute was linked to the application classification.

Fix for exports using current context as default rather than setting (ISSUE-134196, HOTFIX-9306)
eclass

When exporting ECA products using the BMECat 2005.1 Converter, plugin data was exported in the workbench context instead of the default context selected in the Cross Context Chooser in the Select Format step. This relates to feature names in the exported file. Now, data is exported in the correct default context.

saas-2026.2-2026-07-02-19-52-04

Fix for Web UI performance following deployment of Unfolding Data Container component (ISSUE-864622, HOTFIX-9380)
basicportalcomponents

When opening a product screen in the Web UI with multiple validation business conditions configured, users may have experienced performance issues while the screen was loading. This was due to an issue with multiple user notifications being saved simultaneously. This issue has been resolved. Screen loading performance should now be improved.

saas-2026.2-2026-06-29-21-37-00

Fix for STEP monitoring alert (ISSUE-870438, ISSUE-870723)
serveradministration

Improved a STEP SaaSv2 infrastructure sensor so it will no longer alert users about sporadic single Keycloak authentication errors.

Fix for STEP monitoring alert (HOTFIX-9376)
serveradministration

Improved a STEP SaaSv2 infrastructure sensor so it will no longer alert users when sporadic single Keycloak authentication errors occur.

Fix for Hotfolder processing issue in ShotRequestInbound – (HOTFIX-9328)
restapi

The REST API v1 upload method for uploading import files to a Inbound Integration Endpoint had some problems for clustered systems with 2 servers. The method created an empty placeholder file before putting the data into it, and there is a small risk that the endpoint start processing it while it is empty and that causes that import to fail. This has now been fixed.

saas-2026.2-2026-06-24-11-17-12

Fix for system slowdown (HOTFIX-9364, ISSUE-869311)
workbench

To fix an issue where the system had become extremely slow, the number of assets that can be exported in the STEP Workbench by right-clicking on a classification and selecting 'Export Images & Documents' has been limited to one million. Exceeding this limit will cause memory issues.

Fix for inability to read properties of null when an object is approved in workflow through Web UI (HOTFIX-9360, ISSUE-865918)
basicportalcomponents

Fixed an unexpected and sporadic Google Web Toolkit (GWT) client-side error caused by leaving the Web UI's Node Editor screen with tab pages when moving the item to the next state in the workflow.

Fix for dropdown appearing on text box in the Workflow Details Screen (HOTFIX-9367, ISSUE-869510)
basicportalcomponents

Fixed a problem, when the Rich Text attribute value component under the Classification Specific Value Group / Value component in the Web UI Node Editor displayed an empty suggestion box even when no units were available for the configured attribute.

Fix for intermittent failures of Dynamic JMS integrations (HOTFIX-9362, ISSUE-866436, HOTFIX-9361, HOTFIX-9365)
jms-integration

To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.

Fix for internal server error due to datastore version mismatch (HOTFIX-9363, ISSUE-867813)
basicportalcomponents

To fix an internal server error caused by a datastore version mismatch for an object, it will now no longer be possible to execute Toolbar actions twice on a Web UI Node List by double-clicking it.

saas-2026.2-2026-06-23-21-54-28

Fix for AutoCare imports failing on conversion (ISSUE-858567, HOTFIX-9318)
automotive

Fixed a problem with the VCdb Change Handling Service. Previously, the service was running problematically ,which caused the system to become unresponsive. After the fix, the system now works as expected.

Fix for NullPointerException in VehicleConfigurationsBuilder.buildDriveTypes (HOTFIX-9336, ISSUE-134777)
automotive

Fixed a problem that occurred during conversions for Offhighway/Equipment VCDB. Now, the conversion does not look for the DriveType table if the DriveType table does not exist in the data set.

Fix for tecdoc supplier import needs to start manually for go to import mode (ISSUE-853515)
automotive

Fixed a problem with the TecDoc import, which was not ignoring empty files in the supplier data files.

Fix for issue with VCdbChangeHandlingService background process (HOTFIX-9301, ISSUE-132983)
automotive

To fix an issue with automated tests failing for the AutoCare Reference Data solution due to a problem with Change Handling, more logging has been added to VCdbChangeHandlingService.

Fix for RuntimeException error after adding Parent AAIA ID to PIES Export (ISSUE-134454)
automotive

Corrected a problem that occurred when the Parent AAIAID was not exported correctly and was causing the export error.

saas-2026.2-2026-06-19-18-40-30

Fix for intermittent failures of Dynamic JMS integrations (ISSUE-866436, HOTFIX-9365)
jms-integration

To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.

saas-2026.2-2026-06-18-19-33-14

Fix for intermittent failures of Dynamic JMS integrations (HOTFIX-9362, ISSUE-866436)
jms-integration

To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.

saas-2026.2-2026-06-18-16-08-47

Fix for intermittent failures of Dynamic JMS integrations (ISSUE-866436, HOTFIX-9361)
jms-integration

To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.

saas-2026.2-2026-06-17-17-31-15

Fix for Match and Merge inbound integration endpoint contributor data corruption on subsequent loads (ISSUE-865517, HOTFIX-9307)
matching

Fixed an unexpected exception during Match and Merge related to stored empty external revision contributor data.

Fix for missing Create and Update timestamp (HOTFIX-9331, ISSUE-852027)
matching

Now, Source Relation's reference metadata will be correctly populated on a source record during Match And Merge imports, and will correspondingly promote to Golden Record according to survivorship rules logic.

Fix for matching ruleset config import / export tests using unsupported `` XML format (ISSUE-135704)
matching

Corrected the hard-coded MatchingRulesetConfiguration fixtures in MatchingImportTest and MatchingAlgorithmExportTest to use the / form that the ruleset plugin actually serializes (was /) with ExportDataColumns as a single comma-separated value. The old format threw a ClassCastException error: String is not a List whenever the matchingruleset plugin is registered (full-system / Wesley runs), keeping Wesley-trunk red across all database configurations. Also ensured the merged-golden-record test's background-process-area parent directory exists before use. The affected module is com.stibo.matching.domain (tests only; no product code change).

Error in unmerge functionality related to data containers (HOTFIX-9275, ISSUE-124770)
matching

Fixed an error occurring in the unmerge functionality related to manual changes with keyed and key-less data containers.

Fix for issues with data containers on Match and Merge when used with standardization business actions (HOTFIX-9332, ISSUE-867114)
matching

Fixed a problem that occurred when multi-value data containers, imported via Match And Merge inbound integration endpoints (IIEPs) with Standardization business actions, were sometimes duplicated or missing.

Fix for task number error on 'Golden Record Clerical Review Task List' (HOTFIX-9276, ISSUE-845235)
matching

Removed the hard-coded MAX_TASKS = 10000L variable in the ClericalReviewTaskHelper component, so the limit is now fully controlled by the system property MergeGoldenRecord.ClericalReview.TaskList.MaxTasks (default still 10,000). Customers with workflows larger than 10,000 tasks can raise this value to ensure all relevant tasks are reachable.

Fix for unexpected error in FindSimilar and Match and Merge (ISSUE-133696)
matching

Fixed a 500 internal server error in FindSimilar and Match&Merge when a matching ruleset matcher had no thresholds configuration.

Performance optimizations for matching with active ruleset (ISSUE-134217)
matching

To implement some performance optimizations in matching, the system now caches the matchers-enabled map per ruleset in the MatchersEnabledMapCache so the per-pair ranking path stops re-deserializing the JSON attribute. This eliminates the ~4-5% residual ruleset-module CPU left after B2.

Fix for ruleset setup entity is immutable when active (ISSUE-118397)
matching

To fix an issue in which the ruleset setup entity is immutable when active, including read-only in the workbench, an active matching ruleset is now immutable at the domain layer. Once a ruleset is activated, the system blocks any operation that would alter its behavior or remove it, ensuring matching results stay stable. To make changes again, the user must first deactivate the ruleset.

Fix for matching rule set domain bundle missing javax.xml.xpath OSGi import (ISSUE-135839)
matching

Add javax.xml.xpath.* to the OSGi import allow-list in com.stibo.matching.matchingruleset/domain.bnd. The bundle imports the sibling XML packages (org.w3c.dom.*, org.xml.sax.*) but not javax.xml.xpath, which MatchingRulesetSetupEntityImplExportImportTest uses (XPath added at r1528817). Without it, the bundle classloader cannot resolve javax.xml.xpath.XPath, so the test class fails to initialize (NoClassDefFoundError -> initializationError) on every full-system run. This is for Tests / packaging only; no product behavior changed.

saas-2026.2-2026-06-17-06-43-37

Fix for outdated code signing certificate for the Workbench launcher (RDHELP-10404)
workbench-launcher

The certificate used to sign the workbench launcher installer was outdated, causing a warning when trying to install it. The workbench launcher has been signed again, with the updated certificate, so it can be installed without warnings.

saas-2026.2-2026-06-16-18-57-01

Upgrade netty-resolver in audit-messaging to latest version (HOTFIX-9325)
audit-messaging

Upgrade netty-resolver in audit-messaging component to latest version

Fix for ECLASS business rule validation issue (ISSUE-131171)
onboarding

Improved handling of multi-level polymorphic blocks. Previously, when fetching, application implementation blocks were not recognized properly in some cases.

Fix for ECLASS ADVANCED deletion of old data model taking exceedingly long time (ISSUE-865832)
core

The change broadens the In-Memory attribute force-delete pass in InMemAttributeImpl from AttributeProductLinkPO to the AttributeLinkPO super-type so that classification (DCL) links are removed in the fast, batched, and Cassandra-safe path instead of the slow, unbatched deleteExtras loop.

Fix for asset push stoppage following language dimension removal (ISSUE-856731)
core

Fixed a problem in which the push status information (which tracks whether each asset has been successfully delivered to its destination) is silently lost after language dimension removal.

Fix for missing dictionaries when Silicon variant of workbench launcher is installed (ISSUE-135325)
workbench

Due to lack of support for AArch64 from Hunspell jni, a switch has been implemented from AArch64 to Apache Lucene Hunspell.

Fix for inbound for STEPXML ends during testing with ‘completed with errors’ (ISSUE-845567)
core

Fixed a problem where inbound integration endpoints for STEPXML ended during testing with a ‘completed with errors’ message. It also had an error when copying the file to the failed directory. This is now fixed.

Fix for SFTP configurations setup in Self-Service UI (HOTFIX-9344, ISSUE-866210)
core

To fix an issue in which SFTP configuration setups in the Self-Service UI were not reflected in the Export Configuration SFTP delivery methods, custom SSH keys will now be correctly supported by the normal exports with SFTP delivery in STEP.

Upgrade log4j-api in smartsheet to latest version (HOTFIX-9327)
smartsheet

Upgrade log4j-api in smartsheet component to latest version

Fix for ECLASS BASIC export not working (ISSUE-866777)
core

To fix an issue with the ECLASS BASIC exporter, exported products now automatically pick up attributes inherited from the classification groups they belong to. This change lets you exclude specific kinds of classification nodes (e.g., ECLASS ADVANCED application classes) from that inheritance, so unwanted attributes no longer get pulled into the export and your output stays clean and relevant.

Error in unmerge functionality related to data containers (HOTFIX-9275, ISSUE-124770)
core

Fixed an error occurring in the unmerge functionality related to manual changes with keyed and key-less data containers.

TPL Upgrade for log4j-api in core to latest version (HOTFIX-9302)
core

Closing security vulnerabilities in log4j TPLs

Fix for telemetry metrics naming (ISSUE-133955)
core

To fix inconsistent naming conventions for telemetry metric names, the names have been standardized to a component.operation.metric pattern. Verb tenses are now aligned across background process, mail, user, and workbench metrics.

Fix for after submitting in PDX the Data Container status shows 'Success' (ISSUE-800959, HOTFIX-9322)
productdatasyndication-integration

Introduced an option to handle the status of a product received from the old PDX inbound integration endpoint API call, so that it does not get overwritten by the new wrong status. To enable this option, contact Stibo Systems Support.

Fix for metrics on email per environment (ISSUE-129392)
core

There was an issue where there was no visibility into how many emails customers were sending through STEP, including volumes and sizes, making it impossible to track email usage per environment. Metric names were corrected and the feature was tied to a feature flag for gradual rollout.

Fix for inability to see Config_Code attribute tag in Comps Sku (HOTFIX-9288, ISSUE-854384)
core

To fix an issue in which Config_Code on the Companion SKU (child object) is not exported when the value is empty, a description attribute which is valid for a parent and its child node will now be exported if the value of the description attribute of the parent node is not empty and the value of the attribute is empty on the child node and the export is Advanced STEP XML and the parameter of STEP-ProductInformation tag: ExportValidAndAbsent="true".

Fix for New UI not loading (HOTFIX-9342, ISSUE-866481)
core

When trying to store or import data in the Centralized Configuration Setup Entity, e.g., the Default Context in the New UI, the user could see an error message about 'configuration' attributes being not valid for the Setup Entity Object Type. This issue has been resolved. The Setup Entity Object Type will be updated and error messages should not appear when storing or importing data in the Centralized Configuration Setup Entity.

Fix for outbound export behavior differing between SaaS and on-premises (ISSUE-859815, HOTFIX-9324)
core

XSLT post-processing is now skipped when the exported STEP XML is semantically empty (root-element only). This has been done to prevent spurious deliveries when the export user lacks object visibility. The fix also adds a semantic empty-file check using existing EmptyFileHandler before calling the post-processor, which matches on-prem behavior.

Fix for OneQueue BGP not processing BGPs following update to 2026.1 (ISSUE-854961, HOTFIX-9279)
core

An issue where a memory leak could prevent new background processes from starting has been fixed.

Fix for performance issues during exports of large images (ISSUE-857867)
core

Fixed a problem with zero xdpi and ydpi in the lowres-jpg and lowres-png image pipelines that were causing performance issues. The default is now set to 72dpi.

Fix for incorrect base unit conversions in export (ISSUE-830566)
core

BigDecimal can now be used for base unit conversion to avoid floating-point precision errors.

Fix for ProductCrossReference is inherited at the size level in On-prem but not in SaaS. (HOTFIX-9283, ISSUE-857496)
core

Fix the problem in the exporter, where the inherited ProductCrossReferences were not included in the exported file.

Upgraded library to latest version (RDSEC-3755)
instrument

Updated a core component library to the latest version.

Component upgraded to latest version (RDSEC-3760)
ai-service

Updated a component to the latest version.

Fix for transformations not saved for import configurations (HOTFIX-9317, ISSUE-865133)
core

When configuring import configurations in the workbench, transformations configured by the user were not stored for the Reference Type ID, Reference Target, Data Container Type ID, and Data Container ID mappings. This issue has been resolved. All transformations for these mappings will now be stored after the import configuration is updated.

Fix for ruleset setup entity is immutable when active (ISSUE-118397)
core, matchingagent

To fix an issue in which the ruleset setup entity is immutable when active, including read-only in the workbench, an active matching ruleset is now immutable at the domain layer. Once a ruleset is activated, the system blocks any operation that would alter its behavior or remove it, ensuring matching results stay stable. To make changes again, the user must first deactivate the ruleset.

Fix for automap fails with 'Unable to Map Column' for 'Hybris UK - Web Group Location' despite matching attribute name (HOTFIX-9271, ISSUE-857791)
core

Attributes created by Lock Free Schema Change will no longer cause problems with the auto-mapping of attribute names during data import.

Fix for intermittent failures of Dynamic JMS integrations (ISSUE-866436, HOTFIX-9347)
jms-integration

To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.

saas-2026.2-2026-06-16-07-34-20

Fix for intermittent failures of Dynamic JMS integrations (ISSUE-866436, HOTFIX-9347)
jms-integration

To fix an issue with intermittent failures of Dynamic JMS integrations, an option has been added to disable the custom classloader when receiving messages.

saas-2026.2-2026-06-12-00-15-08

Fix for STEP availability issues (HOTFIX-9340, ISSUE-867523)
audit-messaging

Fixed a memory leak in the Audit Messaging framework, which caused the full table to be read instead of only metadata, which led to Out Of Memory problems.

Fix for error during inbound integration endpoint that was configured with Legacy Asset Importer (ISSUE-857605, HOTFIX-9265)
assetloader

Fix the ClassCastExceptions and NullPointerException that occur in the Legacy Asset Importer when the Hotfolder receiver is used on an Inbound Integration Endpoint.

Fix for validation error only showing on the Italian version of the attribute but not on the French/English/Dutch column (HOTFIX-9284, ISSUE-861755)
basicportalcomponents

Now the validation error about missing the conditionally mandatory workflow attribute in Smartsheets will correctly affect all cross-context attribute value cells.

Fix for error in Uniform Resource Identifier (URI) creation method (HOTFIX-9330, ISSUE-866982)
assetdownload

Fixed a problem that occurred when asset URLs starting with "file:" were rejected by CreateAssetFromURLOperation when called from business logic. The issue was caused by the replacement of HttpUrlConnection with Apache Http Client, which doesn't support non-http protocols.

Fix for STEP Monitoring Alert (HOTFIX-9274, ISSUE-863218)
basicportalcomponents

Addressed a memory leak that allowed the system to load an indefinite amount of users via Create User actions on the Web UI User List screen, which in turn caused an Out of Memory error. Now, the amount of users is limited to 5000 (by default) by the same configuration property (WebUI.UserList.Max) as for the User List screen.

Fix for different extension type on SaaS and for on-prem system (ISSUE-825585)
assetdownload

Made a change to the ContentMetadataUtil, so that full filenames that look like extensions (e.g., png, jpg, etc.) are used. This is the case for asset info from the Celum cloud service that manages asset data. Before the fix, this would not work because the dot separator was missing, and so the metadata was based on the content of the imported asset. But now, the DAM-provided extension is to be trusted first.

Fix for electronic address(EAddressDataContainer) is missing key values for ElectronicAddress Error (ISSUE-814297, HOTFIX-9304)
basicportalcomponents

Solved a sporadic problem, when the Rich Text Values on a Globally Configured Unfolding DC on a Web UI Node Editor screen were sometimes not properly set, which led to title attribute value loss and incorrect overall DC values being saved.

Fix for Upgrade log4j-api & log4j-core in core to latest version (HOTFIX-9338)
autoclassification

Library upgrades have been implemented

Fix for translation failed when translation export was split into multiple files (HOTFIX-9269, ISSUE-857199)
async-translation

The translation export for a large number of products may be split into multiple files before being sent to the translation agency. In this case no files were sent to the translation agency and the translation process had to be restarted manually. This has been corrected. The translation now correctly handles exports that have been split into multiple files, and all parts are passed on to the translation agency as intended.

Fix for STEP monitoring alert (HOTFIX-9335, ISSUE-867488)
configuration-management

Fixed a problem that occurred when Git delivery was fetching the repository with full commit history, causing disk pressure and alerts on the STEP system. Now, the Git delivery will only fetch a history of the last commit.

Fix for AI translation BGP log information missing (ISSUE-133691)
async-translation

Pending files were not reported correctly in the execution log for the asynchronous AI translation job.

Upgraded library to latest version (RDSEC-3776)
audit-messaging

Upgraded a component to the latest approved version.

Fix for StringIndexOutOfBoundsException in Web UI (webui-0.js) (ISSUE-865912, HOTFIX-9308)
basicportalcomponents

Fixed an unexpected exception in Web UI Design Mode, related to the Description Summary Card component.

Fix for data absent from export when selection size is large in the Web UI (HOTFIX-9285, ISSUE-861909)
basicportalcomponents

Fixed a problem when the Export Action on a Web UI Node List did not work correctly when exporting data beyond Portal.MaxResultCount limit on the Advanced Search Screen.

Fix for validation error disappearing after focus change without modifying value in Web UI (ISSUE-866479, HOTFIX-9321)
basicportalcomponents

Fixed a problem that occurred when a validation error message for Regular Expression attributes unexpectedly cleared when the user pressed the Tab key on the Web UI Node Editor screen.

Fix for it is not possible to apply formatting with some tags in the 'How to' table within complex attributes (ISSUE-803894, HOTFIX-9268)
basicportalcomponents

Fixed a problem with bold and bullet list tags on the 'Add Data Container' popup for attribute values, edited in the Rich Text Editor.

saas-2026.2-2026-06-09-20-53-31

Fix for error observed while searching for objects (HOTFIX-9315, ISSUE-864250)
workbench

Fixed a concurrent modification exception in the workbench that was caused by slow typeahead search.

Fix for root cause analysis - STEP is unavailable (ISSUE-865081, HOTFIX-9280)
smartsheet

Introduced a 10k limit to exported LOV values in Smartsheets format. By default, it is now set to 10k. Please contact Stibo Support if this limit should be increased. Additionally, fixed a memory leak in the LOV filters export in Smartsheets, which increased the memory usage during the export when exporting huge LOVs with filters.

Fix for ConcurrentModificationException following workbench start (HOTFIX-9316, ISSUE-796900)
workbench

Fixed a sporadic Concurrent Modification error in the workbench that occurred when opening the asset editor directly following starting the workbench.

Fix for Upgrade log4j-core in elasticsearch-integration to latest version (HOTFIX-9305)
elasticsearch-integration

upgrade of log4j tpls

Fix for STEP application server crashes (ISSUE-864601, HOTFIX-9278)
integration-amazon-sqs

Added guardrails to protect against STEP application server crashes due to running out of heap memory when sending very large messages through Amazon SQS. By default, a limit of 100Mb has been introduced. However, this limit can be changed if needed by using the SQSDeliveryConnector.MaxFileSize= property. It should be noted that raising this limit increases the chance of application server crashes due to running out of heap memory.

Fix for Upgrade log4j-api in fabdis to latest version (HOTFIX-9337)
fabdis

Library security upgrades have been implemented

Fix for different extension type on SaaS and for on-prem system (ISSUE-825585)
core

Made a change to the ContentMetadataUtil, so that full filenames that look like extensions (e.g., png, jpg, etc.) are used. This is the case for asset info from the Celum cloud service that manages asset data. Before the fix, this would not work because the dot separator was missing, and so the metadata was based on the content of the imported asset. But now, the DAM-provided extension is to be trusted first.

Fix for Async File Exchange Poller logs ClassCastException and 'BGP not found' (HOTFIX-9263, ISSUE-855870)
external-async-kernel

Users may encounter a ClassCastException error when using the Async Poller for the File Exchange translation service in the workbench. This has been fixed. The ClassCastException error should no longer occur when using the Async Poller for the translation service.

Fix for subscription messages errors at datapool (HOTFIX-9323, ISSUE-865493)
gdsn2-receiver

The '#' is no longer an accepted character for the GDSN Instance Identifier. This fix introduces the configuration property GDSN2.BackgroundProcessIDDelimiter with which the default delimiter can be overridden to another character accepted by the GDSN provider.

Fix for cannot cancel reindexing when child background process failed (ISSUE-133334)
elasticsearch-integration

Fixed a bug where the user could not cancel reindexing when a child background process failed.

Fix for inability to disconnect objects from classification hierarchy (HOTFIX-9277)
industry-standard

Added a tool that enables users to disconnect objects from a classification hierarchy.

Fix for Upgrade log4j-api in gdsn2-receiver to latest version (HOTFIX-9334)
gdsn2-receiver

Library security upgrades have been implemented

Fix for intermittent timeouts when calling Stibo REST API (HOTFIX-9286, ISSUE-865232)
instrument

Fixed a problem that occurred when the Instrument graphql JAR Version updater sometimes caused inbound REST calls to fail by putting too much pressure on the foreground (FG) pod.

Fix for Smartsheet template labels are output in English instead of Japanese (HOTFIX-9309, ISSUE-865410)
smartsheet

Fixed a caching problem in Smartsheet Exporter, which led to intermittent problems with Smartsheets locale.

saas-2026.2-2026-06-04-18-08-56

Fix for getSimilarObjects SOAP call from Salesforce to STEP does not work (HOTFIX-9264, ISSUE-860007)
soapapi

Fixed a problem when the inner Entity tag in the exportConfigurationXML tag in the GetSimilarObjects SOAP request caused an unexpected exception.

Fix for Upgrade log4j-api in workbench to latest version (HOTFIX-9311)
workbench

upgrading log4j tpl CVE

Error in unmerge functionality related to data containers (HOTFIX-9275, ISSUE-124770)
graphql

Fixed an error occurring in the unmerge functionality related to manual changes with keyed and key-less data containers.

Fix for Upgrade log4j-core in kafka-integration to latest version (HOTFIX-9312)
kafka-integration

bumping log4j tpl

Fix for root cause analysis: STEP was unavailable (ISSUE-865381, HOTFIX-9303)
dtp

Fixed a problem, which could have caused a Failover Group pod outage if the InDesign server is unavailable and the Intrusion Detection System Worker thread is stuck indefinitely in fetching InDesign Web Services Description Language.

Fix for PDF generation for a publication with DTP files intermittently fails with an error (ISSUE-863288, HOTFIX-9267)
dtp

A problem occurred where PDF generation for a publication with DTP files intermittently failed with 'PDF header signature not found' errors and missing pages. This is now fixed.