Welcome to the Lobster Data Platform release notes. Under this node, you will find a summary of the new features, fixed issues, and important changes included in each version. Direct migration path: _data 4.6.1x / _pro 4.12 → 25.1-LTS → 26.x.
2026
26.3 — Summer Release (Q3 2026)
Version | Type | Date | Highlights |
|---|---|---|---|
Patch | 2026-10-07 | Internal server runtime components updated for stability and security; Bridge database connections ("Via Bridge – standard") read large results and BLOB/CLOB values reliably and can now also write BLOB/CLOB values, including in batches; replacing an OFTP partner certificate no longer puts subsequent TLS connections at risk; the emergency license can be created correctly on Windows 11; IDoc templates loaded via file structure analysis include their variables; additional bug fixes and UI improvements. | |
Patch | 2026-09-23 | AS2 Bridge Service ignores invalid Bridge Inbound rules instead of becoming unstable, with File Routing error icons and timestamped error tooltips; path traversal and deserialization vulnerabilities closed; Standard Bridge driver connects aliases whose name contains a space; redundant temporary JAR files in tmpIO resolved; Pathfinder SQL Assistant receives the database schema again; TransportManager release now requires the "TransportManager: mark as ready" permission; SshService accepts EC-based public keys; additional bug fixes and UI improvements. | |
Patch | 2026-09-15 | Resolved an issue for 26.3.3 and later where the configuration for sending emails may not have been transferred correctly to Base settings > System Emails. | |
Patch | 2026-09-10 | Database Migration: Resolved an issue where the migration of role permissions could stop with a duplicate key error, leaving later database changes unapplied and logins failing. Affected systems complete the migration automatically on the next start. Known issues: Resolved with 26.3.6: The configuration for sending emails may not be transferred correctly to Base settings > System Emails. For the workaround, see System email configuration not migrated (26.3.3 and later). | |
Patch | 2026-09-09 | DMZ AS2 message buffering no longer deletes persistent incoming messages when the inner system is unavailable; OAuth2 client_credentials requests no longer fail with 400 Bad Request in HA environments; FTP input agent preserves the full file path in VAR_SYS_FILE_PATH; Email Settings migration and channel duplication fixes; Get HTTP Generic Access Token now fetches a new token when the existing one has expired. Known issues:
| |
Patch | 2026-08-26 | Faster driver available for connecting to Lobster Bridge; session handoff between cluster nodes fixed for HA setups with CSRF protection enabled; user access permissions now enforced for MCP endpoints in the API Manager; excessive heap consumption by Aspose PDF classes resolved; PDF reports can be generated for a selected profile again; drag-and-drop mapping and tree navigation work under strict web security rules; system emails support multiple recipients separated by semicolons. Known issues: Resolved with 26.3.6: The configuration for sending emails may not be transferred correctly to Base settings > System Emails. For the workaround, see System email configuration not migrated (26.3.3 and later). | |
Patch | 2026-08-13 | StorageService no longer shuts down when saving to a MySQL or MariaDB database during a daylight saving time change; AS4 messages are no longer rejected because of Service and Action restrictions in generated P-Mode configurations, with a new option to preserve P-Mode files across restarts; OPC UA browser expands nodes beyond the previous depth limit on large address spaces; memory leak in the BSH Library resolved; profile list refreshes when switching clients; Pathfinder shows the full text of agent error messages. | |
Patch | 2026-07-29 | Critical fix for profile triggering in HA/load-balanced setups; GLS added as a CEP Connector provider; additional bug fixes and UI improvements. | |
Major Release | 2026-07-14 | Foundation for the public Platform API (Profiles, Channels, Partners, read-only); AMQP OAuth2 client credentials support; completely remastered UI color themes; ZUGFeRD 2.5.0 and Factur-X 1.0.9 templates; Pathfinder Auto-Mapping (MAPS) for AI-powered field mapping suggestions; Trading Partner Manager HTTPS channel management with OpenID/OAuth2; Process Map JSON/XML/image export; platform settings (system e-mails, log settings, storage & backup) now configurable via UI instead of startup.xml; profile backup storage performance optimization (up to 8.5× faster on HA clusters); enhanced system monitoring and node management. |
26.2 — Spring release (Q2 2026)
Version | Type | Date | Highlights |
|---|---|---|---|
Patch | 2026-09-10 | Resolved an issue in DMZ AS2 message buffering where persistent incoming messages could be deleted if the inner system was unavailable. | |
Patch | 2026-07-01 | DataWizard OAuth2 endpoint hardened against flexjson deserialization; UpdateCenter now displays new GA versions correctly regardless of outdated settings; EN16931 and Basic WL conformance levels fixed for Mustang integration; startup table-creation messages moved from the error log to the message log; missing fonts fixed in PDF/UA-1 to PDF/A-3 transformation via Mustang; ZUGFeRD-to-PDF/A-3 compliance issue fixed for specific PDFs via Mustang. | |
Patch | 2026-06-19 | Background task that could corrupt profile state disabled. | |
Patch | 2026-06-18 | DuckDB driver added to the library folder; ZUGFeRD 2D-graphics transparency preserved in PDFs; AS2 mTLS fix for separate TLS/encryption certificates; Update Center now downloads exactly the selected update on DMZ/worker nodes; "Separate HTTP Server" option removed from the Web settings UI. | |
Patch | 2026-06-03 | AMQP/JMS Phase 6 response retry mechanism & connection settings (aligned with AS2); unified JasperReports 6.21.5 for PDF components (remove old JasperReports libraries from extlib); ZUGFeRD XRECHNUNG XMP metadata v3.0 fix; Load Balance service starts without resolvable worker-node DNS; DataCockpit synchronous execution option in input agent. | |
Patch | 2026-05-19 | File I/O throughput benchmarks added; form designer style tokens for the new platform design system; Transport Manager access between Lobster Data and LDP restored; DMZ Connector HTTP header alignment with server configuration; ZUGFeRD XRECHNUNG XMP metadata v3.0 fix. | |
Patch | 2026-04-30 | BSH variable scope regression fixed; Jasper compiler error in print documents fixed; Swagger YAML import fixes (1:1 mapping, LTS, non-200 status codes); OpenAPI/Swagger accessible without active GUI session. | |
Patch | 2026-04-24 | DMZ Watchdog CPU optimization, Application Wrapper class-file loading, SAP JDBC driver re-added. | |
Major release | 2026-04-21 | API Manager GA includes rate limiting, RBAC, versioning/deprecation headers, and Java 21 support. New features include self-service platform restart, process map improvements, and enforceable SSO. |
26.1 — Winter release (Q1 2026)
Version | Type | Date | Highlights |
|---|---|---|---|
Patch | 2026-03-26 | Includes bug fixes for various issues, including bridge gateway startup, REST-API channel creation, SSO migration, and more. | |
Patch | 2026-03-12 | Bridge & ETL thread safety + exception reporting; configurable AS2/DMZ gateway timeout with HTTP 503 fallback; Crontab "last day of month" fix. | |
Patch | 2026-02-27 | DataCockpit tile paging for large workflow sets (>3000); Google Fonts dependency removed; ZUGFeRD PDF metadata compliance. | |
Patch | 2026-02-11 | DMZ dual-node cluster login fix (known issue from 26.1.0); Jetty thread high-load on DMZ connection; ETL Bridge local database connection support. | |
Major release | 2026-01-27 | Pathfinder AI assistant across the platform; Key Vault (Azure & HashiCorp) with UI; Prometheus/Datadog/OTLP observability export. |
2025
25.1 — Q4 release/LTS (Q4 2025)
Long-Term Support (LTS) release. Release date: 2025-10-09.
Version | Type | Date | Highlights |
|---|---|---|---|
Patch (LTS) | 2026-09-22 | Path traversal vulnerability in file uploads closed; EC-based public keys are now accepted for public key authentication; menu item names in the main navigation are no longer cut off by adjacent action buttons. | |
Patch (LTS) | 2026-09-09 | OAuth2 client_credentials requests to the token endpoint no longer fail with 400 Bad Request in HA environments. | |
Patch (LTS) | 2026-08-26 | Pathfinder's MAPS agent correctly updates profiles containing numeric fields; IoT client certificate and application settings are persisted to the configuration file; Transport Manager keeps the Blob Type of Cloud Storage response paths; Regex Plugin no longer returns "No match" for valid expressions; Update Center interface overflow fix; Live Dashboard node list refreshes after a worker node restart. | |
Patch (LTS) | 2026-08-13 | StorageService no longer shuts down when saving to a MySQL or MariaDB database during a daylight saving time change. | |
Patch (LTS) | 2026-07-29 | Critical fix for profile triggering in HA/load-balanced setups; additional bug fixes for OPC UA, the database connector, and profile locking. | |
Patch (LTS) | 2026-07-01 | DataWizard OAuth2 endpoint hardened against flexjson deserialization; Profile Restart Dialog Run button no longer stays disabled when a file is preselected. | |
Patch (LTS) | 2026-06-19 | Background task that could corrupt profile state disabled. | |
Patch (LTS) | 2026-06-18 | AS2 mTLS fix for separate TLS/encryption certificates; DataCockpit database-alias resolution via startup.xml; Google Cloud Storage Cron recursive-subfolder fix; ZUGFeRD AFRelationship set to Alternative; DOMPurify updated to 3.4.8. | |
Patch (LTS) | 2026-05-19 | Informix DB support removed (breaking change, libraries no longer delivered); TLS server certificate fallback fix (configurable via system property); SSH incoming connections library fix; Swagger YAML importer fixes; CData driver distribution to Working Nodes. | |
Patch (LTS) | 2026-03-26 | Includes bug fixes for SMTP, Bridge, SSH, ZUGFeRD, Mapping, SQLBulkUnit, and ebd_jsch. | |
Patch (LTS) | 2026-03-12 | DMZ secondary reconnect with pushback after restart; configurable AS2 gateway request timeout; Bridge ETL job callback handling. | |
Patch (LTS) | 2026-02-27 | ZUGFeRD PDF metadata standard compliance; Azure File cron date filter fix; DataCockpit tile paging for large workflow sets. | |
Patch (LTS) | 2026-02-11 | SSO cookie SameSite fix; OFTP file deletion from DMZ after retrieval; OPC UA security mode selection. | |
Patch (LTS) | 2026-01-13 | Custom client structures invalid status on start; profile validation false-failures on save/test; OptimisticLockException on statistics persist. | |
Patch (LTS) | 2025-12-18 | ETL Parquet persistent layer fix; TFA device deregistration prevention event; SSH brute-force login error-log suppression | |
Patch (LTS) | 2025-12-03 | ETL Parquet logging optimization; new TFA device deregistration prevention event; modal blocking removed from integration views. | |
Patch (LTS) | 2025-11-19 | Random session logout fix; CSRF system property typo fix ( | |
Patch (LTS) | 2025-11-10 | BCrypt cookie replaced with proxy header (performance); Database pool size settable to zero for CData; Bridge Gateway JDBC tunnel performance. | |
Patch (LTS) | 2025-10-30 | Certbot ACME challenge with DMZ; HTMLtoPDFPostExecutor as official post-executor; TFA with CSRF protection fix. | |
Major release (LTS) | 2025-10-09 | Pathfinder AI: a natural-language integration guide & error resolution; Lobster MCP: AI-to-legacy connectivity; AI-guided Profile Creator wizard. |