Pages get lost after move into new document and undo

Fixed a bug where pages got lost after undo moving into new document via context menu “Seiten ab/bis hier verschieben”

Bug

Use external URL for export result

When organizer.useExternalFlow is false, the export result now references the Organizer’s external link instead of the internal container URL

Bug

Preconditions and restrictions for Drag & Drop from jadice to OO

An update has been made to the documentation regarding dnd requirements for Jadice Viewers
See: https://levigo.github.io/output-organizer-documentation/integration/import-integration#drag-and-drop

Task

Improve Backend Logging

Improved log quality with various adjustments like tweaked logging levels for less verbose operation, improved Error logging and more.

Task

renamable token secret

Token secret name can now be modified with `organizer.secrets.token.name`.
Because the secret is also used by the controller, the same name has to be set at controller.auth.existingTokenSecret`.

Story

OAuth: Authorization Code Flow with PKCE

The documentation was updated with a section about OAuth flow used in Output Organizer
See:https://levigo.github.io/output-organizer-documentation/integration/authentication/#code-flow--pkce

Story

Use subchart function for name templating

Fixed a problem where the deployment name used as a prefix for resource names would differ between Helm dependencies.

Bug

Missing documentation page "automated deletion"

Add sidebar link to housekeeping page for automated deletion https://levigo.github.io/output-organizer-documentation/operations/housekeeping/automated-deletion

Bug

Worker configuration with dynamic worker address

When the toPDF-worker deployment is renamed the kubernetes service address is also changed to reflect this new name. Previously customers had to edit the service name in the worker definition manually, now the change in name is automatically injected into the worker definition.

Task

Stamp and text annotations don't work properly any more

Fixed a problem when creating stamp and note annotations, was well as editing text of existing ones.

Bug

Scroll increment in viewer too small

The scroll behaviour of the jadice web toolkit was changed and the scroll speed has been adjusted to match the previous behaviour.

Bug

Helm resource name configuration

Some helm resources had static names and now have either fully customizable names or use the deployment name as a prefix.
The deployment name can be customized with:
organizer.fullnameOverride / organizer.nameOverride
viewer.fullnameOverride / viewer.nameOverride
controller.fullnameOverride / controller.nameOverride
worker-topdf.fullnameOverride / worker-topdf.nameOverrideResources that now use a Prefix:
flyway-cm → [Deployment-Name]-flyway
version-config → [Deployment-Name]-version-configResource names customizable using Helm value properties:
anno-profile → viewer.annotationConfigMap
jadice-flow-jobtemplates → controller.jobtemplatesConfigMap
jadice-flow-workers → controller.workersConfigMap

Task

Upgrade to jadice webtoolkit 6

For better performance and the latest features and functionality.
In this new Version the GWT RPCs where removed, which improves application security.

Task

Security improvement: Remove CSP script-src: 'unsafe-eval'

Content security policy 'unsafe-eval' could now be removed. All scripts are now compiled on server side.
This improves the overall application security and prevents script injection.

Task

JSON-Logging for Organizer & Viewer

It is now possible to switch the logging format to JSON. This is useful when aggregating logs or processing them in a automated way.
The Helm properties to toggle this feature are:
organizer.enableJsonLogging and viewer.enableJsonLogging

Task

Adapt default resource limits in documentation

Default resources limits was adjusted in documentation
See: https://levigo.github.io/output-organizer-documentation/installation/sizing/

Task

Metadata in Drag & Drop from jadice viewers

When importing pages from other Jadice Viewers whitelisted parameters can now be imported as metadata.
To configure this use the Helm value:

organizer.config.importPropertiesWhitelist:
  - my_parameter_1
  - my_parameter_2

The result will be included in the collection element metadata:

{
    "id": "ELEMENT_ID",
    "metadata": {
        "my_parameter_1": 123,
        "my_parameter_2": "abc",
        "output-organizer": {
            ...
        }
    },
    "specification": {
       ...
    }
}

Story

Transaction isolation and potential database deadlocks

Explicitly defined isolation levels on database transactions to prevent deadlocks.

Bug

Viewer is broken after undo (endless spinner)

Fixed an issue where the document loading process wouldn't stop after undoing a page move made via drag-and-drop

Bug

Problem starting OO (with Auth in Edge)

Problem with Auth in Edge was fixed

Bug

Flow workers use external address to request document data from Fusion

Per default the connection between Export worker and Fusion is now using the internal service address to prevent problems with certificates and improved performance.
If you use an external Flow, not reachable with the service address, you can toggle the behaviour to use the external address again. For this there is a new Helm configuration property:
organizer.flow.useExternalFlow: true
https://levigo.github.io/output-organizer-documentation/next/installation/deployment/#output-organizer-organizer

Bug

Unnecessary render settings data gets saved

Render settings with default values will no longer be saved in the collection definition.

Bug

CVE-2025-24813

Fixed.

Bug

CVE-2025-22235

Fixed.

Bug

CVE-2025-22228

Fixed.

Bug

Collection Types cannot be loaded with subpath

There was a problem with loading an internal configuration script that has been fixed.

Bug

Cache expiration configuration problem

The calculation of the expiration time for jadiceStreamCache was improved.

Bug

push OCI images to registry for OO

Helm images can now be pulled as OCI Artifact

$ helm pull oci://registry.jadice.com/fusion/{{chart_name} --version {{version}}

Task

Handle Frame options with CSP frame-ancestors

Please use Helm setting organizer.config.frameAncestors instead of organizer.config.xframeOptions from now on; organizer.config.xframeOptions is still supported, but deprecated and will be removed with the next major release.https://levigo.github.io/output-organizer-documentation/integration/client-integration

Task

refresh sts token after it expires

STS Token for S3 storage will be refreshed correctly

Bug

wrong DurationSeconds for STS

Fixed incorrect values for the STS durationTime in the documentation. The correct values have now been updated to ensure accuracy

Bug

Update the controller name in Docu

The documentation was updated to reflect the renaming of jadice-flow-controller to jf-controller
See: https://levigo.github.io/output-organizer-documentation/installation/deployment

Bug

Configuration of AutoMarkForDeletion is broken

misconfiguration is fixed

Bug

Set default registry of flyway and busybox to docker.io

The default registry for flyway and busybox is now set to docker.io

organizer:
  initContainer:
    repository: flyway/flyway
    registry: docker.io
    
controller:
  initContainer:
    repository: busybox
    registry: docker.io

Bug

Unauthorized access to document tiles (via JWT TileUrl)

Deny unauthorized access to document tiles in the viewer in case the authorization is enabled

Bug

Invalidate sessions on user logout

Invalidate refresh token on logout
Also see:
https://levigo.github.io/output-organizer-documentation/integration/authentication/
https://levigo.github.io/dossier-organizer-documentation/integration/authentication/

Bug