Collection Types cannot be loaded with subpath

fixed

Bug

Push images as OCI artifacts

Helm images can now be pulled as OCI Artifact

$ helm pull oci://registry.jadice.com/fusion/{{chart_name} --version {{version}}

Task

Security improvement: Remove CSP script-src: 'unsafe-eval'

Collection-Type rules will now be compiled on server side.

Task

Upgrade to jadice webtoolkit 6

For better performance and feature-rich functionality

Task

Transaction isolation / deadlocks

Explicitly defined isolation levels on database transactions to prevent deadlocks.

Bug

Configuring entitySizeThreshold

Wrong indentations were fixed, configuration is working properly now.

Bug

tiles can't be loaded

Fixed session cookie settings to support cross-site requests while maintaining security

Bug

Viewer is broken after undo (endless spinner)

Fixed an issue where the document loading process wouldn't stop after undoing a page move made via drag-and-drop

Bug

fix configuration of cache expiration

the configuration of expiration time for jadiceStreamCache was fixed

Bug

Configurable limit for long URLs in combined Thumbnailview

Avoid too long URLs by setting the thresholds to cache composite paged as follow:

viewer:
  fusion:
    compositePagedCache:
      entitySizeThreshold: 2000   #The default is 50000 characters

This configuration only affects the combined thumbnail view. See Documentation: https://levigo.github.io/dossier-organizer-documentation/installation/deployment

Task

Viewer pod is killed due DiskPressure when loading several large collections

The expiration time for document streams in the viewer cache in the EphemeralStorage can now be configured via Helm

viewer: 
  jadiceStreamCache:
    expirationTime: PT2H

Also, the default expiration period was reduced from 12 to 2 hours.Beware to configure the ephemeral-storage of the jwt-viewer pods to a value that matches the behaviour of the users, size of collections and document size. The value of 10 GB that’s recommended as a starting point in the Sizing documentation may sometimes be way too low.

Bug

CVE-2025-24813

Fixed CVE-2025-24813

Bug

Set default registry of flyway and busybox to docker.io

The default registry for flyway and busybox is now set to docker.io

organizer:
  initContainer:
    repository: flyway/flyway
    registry: docker.io
    
controller:
  initContainer:
    repository: busybox
    registry: docker.io

Bug

Unauthorized access to document tiles (via JWT TileUrl)

Deny unauthorized access to document tiles in the viewer in case the authorization is enabled

Bug

Invalidate sessions on user logout

Invalidate refresh token on logout
Also see:
https://levigo.github.io/output-organizer-documentation/integration/authentication/
https://levigo.github.io/dossier-organizer-documentation/integration/authentication/

Bug

Add Referrer-Policy header

Referrer: same-origin header was added.

Task

Support collections with up to 1000 documents in combined thumbnail view

Increased allowed maximum http header size and added a mechanism to support and display extremely large composite paged element definitions.

Task

Update SQLServerDialect in documentation

org.hibernate.dialect.SQLServer2012Dialect has been deprecated; use org.hibernate.dialect.SQLServerDialect instead. see Documentation

Task

Drag handle graphic is not showing up

Adjusted csp to not block data images.

Bug

Disable context menu for inactive collections

Disable context-menu for closed/Marked for deletion collections.

Bug

Improve initial tree node selection

The first element in the tree will be selected after collection loading

Bug

MySQL JDBC URL in documentation is wrong

Added necessary parameter to MySQL JDBC URL in documentation.

Bug

Allowed origins are empty by default

Default value for allowed origins is set to *

Bug

Prevent inline script execution

Policy script-src 'self' 'unsafe-inline' was removed to inhibit execution of JavaScript code that may have been injected.

Bug

Creating a collection on certain DBs results in SQL error (foreign key constraint fails)

This problem was introduced with Dossier Organizer version 1.16.1, when a foreign key on table “collection_version_history” was added. Additional measures were taken that the integrity of this key is kept when creating collections.

Bug

Bookmark list is not updated immediately after adding the first bookmark

Fixed.

Bug

Empty card when canceling the bookmark creation process

Fixed.

Bug

Lock not released after collection deletion job

Lock will be released at the end of the job.

Bug

strict separation for create and update collection Endpoints

Restrict collection update via POST method, as PUT is intended for updating

Bug

Usage of existing secrets is missing in documentation

Added section in the deployment documentation.

Bug

Problem when changing properties that impact the access rule conditions

Checks on access rule criterias are now executed on before and after any changes in data transactions.

Bug

Unify loading indicators

All instances of loading spinners are now using the same graphic and animation.

Bug