Viewer renders adaptively by default (device-pixel-ratio)

The viewer now always adapts its rendering resolution to the user's screen. On standard displays, high-resolution (HiDPI / Retina) displays, and at higher browser zoom levels alike, documents are shown sharp out of the box — no configuration required.
The viewer.qualityEnhancement setting has therefore been removed.
See:
https://levigo.github.io/output-organizer-documentation/installation/deployment#jadice-web-viewer-viewer

Task

Add HPA Support

Components can now scale automatically based on configured resource utilization thresholds. See https://levigo.github.io/output-organizer-documentation/installation/scaling

Task

Signature annotations

New feature signature annotations. Predefined signatures can be set per collection and used to export signed documents.
For more information, see https://levigo.github.io/output-organizer-documentation/customizing/signature-stamps/

Story

"Redact all" feature for text selections

• A new feature has been added that allows you to redact all instances of the selected text in the document using a pop-up button after selecting the text.
• Added Annotation list sidebar to monitor the list of annotations belonging to a document and easy navigation between them.




See: https://levigo.github.io/output-organizer-documentation/installation/deployment/#jadice-web-viewer-viewer

Story

CVE-2026-54268

Fixed

CVE

CVE-2026-54267

Fixed

CVE

CVE-2026-54266

Fixed

CVE

CVE-2026-41850 / NVD High 7,5

Fixed

CVE

CVE-2026-41007 / NVD High 7.5

Fixed

CVE

CVE-2026-40984 / NVD High 7,5

Fixed

CVE

CVE-2026-40983 / NVD High 7,5

Fixed

CVE

Support user token claims in conditions

Added functionality to the Access Policies that allow the integrator to define claim specific conditions.
For this the prefix `principal.claim:` can be used to extract information from the authentication token. The syntax is the same as the already existing claim selector in the subject field of access policies and defines a path in the token data.See https://levigo.github.io/dossier-organizer-documentation/model/conditions/

Task

Authenticated download for export result

When authentication is enabled the export result link is protected by the configured authentication.Because of this many of the options included in the export UI dialog were not usable without technical knowledge and are now only available when the authentication is disabled.To compensate for this, we added a new option to download the document with the current user authentication.

Task

First applied rule overrules all following definitions in Access Policies on Client Side

Fixed a client side problem for disabling or enabling UI elements based on Access Policies.

Bug

Some custom translations not working any more

Fixed a path collision that was causing customized translations to be overwritten

Bug

True and False conditions have wrong syntax in documentation

Fixed documentation for true and false conditions.

Bug

global.extraEnvVars does not affect viewer deployment

Added missing {{extraEnvVars}}to viewer deployment. Configuration via {{global.extraEnvVars}}now work properly for the {{organizer }}and {{viewer }}pods, as described in the documentation.

Bug

Changed default config on EH-Cache

Reversed accidentally changed default option for the Helm Value storage.ehcache.enabled to false.

Bug

CVE-2026-43512

Fixed.

CVE

CVE-2026-41293

Fixed.

CVE

CVE-2026-43513

Fixed.

CVE

CVE-2026-42587

Fixed.

CVE

CVE-2026-42584

Fixed.

CVE

CVE-2026-42583

Fixed.

CVE

CVE-2026-42582

Fixed.

CVE

CVE-2026-42579

Fixed.

CVE

CVE-2026-42577

Fixed.

CVE

CVE-2026-42498

Fixed.

CVE

CVE-2026-41284

Fixed.

CVE

CVE-2026-41254

Fixed.

CVE

CVE-2026-40973

Fixed.

CVE

Skip export notification if no URL is provided

Prevent an Error if no notification URL is configured while notifications are enabled.

Bug

Duplicate text search popup

Prevented opening multiple popup windows when using the ctrl+F shortcut.

Bug

PVC as export storage solution

Added PVC as an alternative to S3 as a production storages solution.Documentation can be found here:
https://levigo.github.io/output-organizer-documentation/installation/storage

Task

Prevent "createdBy" from being set manually via REST

createdBy is now always set to the principal provided by the current user authentication and can not be overwritten.

Task

Documentation improvements

Various improvements to the documentation.

Task

Support CA-Certs with password

Password support on the ca-Certs was addedSee: https://levigo.github.io/output-organizer-documentation/installation/additional-configuration/

Task

Extensions for Access Policies (Auth comparison and list check)

New functionality for conditions added:

• Comparison Conditions now allow you to use Specifiers on the right hand side, which allows you to compare to specifier values.
• New In- and Any-Conditions allows comparison with lists.

For more information the documentation can be found here:https://levigo.github.io/output-organizer-documentation/model/conditions/

Story

OAuth authentication settings have no effect on document up- and download API endpoints

Endpoints below the API prefix api/v1/documents/* were not affected by authentication configuration settings in Helm (organizer.oauth.enabled: true).This Endpoint is used to upload local documents and download them. The Download requires knowledge about a generated UUID and can not be listed or easily guessed.Export results are also provided using this API and external users or systems now require valid authentication.If enabled the user oAuth authentication is now active for all endpoints.

Bug

Export notification with global config is not working

The export notification is working properly again.

Bug

Missing storage configuration

New article about S3 storage configuration:
https://levigo.github.io/output-organizer-documentation/installation/storage

Bug

Deleting the active document does not reset the viewer

After document deletion, viewer is cleared.

Bug

GHSA-2m67-wjpj-xhg9

Fixed.

Bug

CVE-2026-5598

Fixed.

Bug

CVE-2026-42198

Fixed.

Bug

CVE-2026-40478

Fixed.

Bug

CVE-2026-40477

Fixed.

Bug

CVE-2026-34487

Fixed.

Bug

CVE-2026-34486

Fixed.

Bug

CVE-2026-34483

Fixed.

Bug

Enhance cleanup robustness (cleanup for edge cases and error situations)

The logging for the automatic deletion process has been improved, in particular, attention is drawn to errors occurring during deletion. Also, logging is introduced for information after the deletion process has been performed.

Task

Adaptations in proprietary flow components (Document Processors) due to Spring Boot 4/Spring 7

Customers with proprietary preprocessing via custom DocumentProcessor in worker-topdf should be careful with regard to the recent update to Spring Boot 4 and Spring 7 in jadice flow.To build their existing DocumentProcessor for use with a current worker-topdf Release, Java Version must be set to at >= 17 and any other spring Boot components must be compatible with Spring Boot 4 and Spring 7.This is only required when the flow environment is using a worker-topdf >= 1.69.3 or document conversion bundle >= 1.15.1
https://releases.levigo.solutions/document-conversion

Task

Support Common Labels for Organizer and Viewer

Added support for <service>.commonLabels in organizer and viewer Helm charts, aligning with controller & worker-topdf

Task

Increase replica recommendation in documentation for worker-topdf

See: https://levigo.github.io/output-organizer-documentation/installation/sizing/

Task

Different optional management port

Configuring the management endpoint port is now possible:

<service>: # Service can be organizer, viewer, controller or worker-topdf
  managementPort: 8081

Task

Deployment scenarios for Custom Preprocessing in Output Organizer

See jadice knowledge base article: https://levigo-solutions.atlassian.net/wiki/spaces/JKB/pages/1093599252/Output+Dossier+Organizer+und+jadice+flow

Task

Angular 21 Update

Angular updated to version 21

Task

Improve documentation for Access Policies

Enhanced the access policies documentation to improve clarity and usability, introducing structured step-by-step setup guidance along with enriched examples covering multiple use cases. https://levigo.github.io/output-organizer-documentation/integration/access-policies

Task

Merging documents is broken

Solved a race condition causing merging issues

Bug

Importing multiple documents from Jadice Viewer only imports pages from a single document

Import pages from various documents via Jadice Viewer are imported correctly

Bug

Generated PDFs are larger than before

Resolved an issue that caused exported document sizes to grow excessively, ensuring stable and predictable output file sizes.

Bug

Redo merging a document after undo is broken

Fixed a bug that caused an error when undoing merge operations.

Bug

Port of Prometheus for Worker-ToPDF is wrong

The port of Prometheus is set to Management Port instead of Container Port

Bug