2026.01.01

Portal UI
Resolved a version mismatch so the correct software version is accurately displayed to users.

Enhanced observability
Updated telemetry monitoring components for more accurate backend diagnostics and performance tracking.

Refined testing methodology
Integrated a new system-testing approach and updated code-quality rules to ensure long-term stability and fewer regressions.

Patched potential security vulnerabilities by upgrading essential third-party libraries across services (including Lodash-es, Hono, and deepdiff).

Standardized automated security scanning under the Mend framework.

Nelson Rules
Integrated Nelson Rules to help identify non-random patterns or out-of-control conditions in process data.

Updated user documentation with clearer overviews and precise examples to guide users on applying Nelson Rules effectively.

Added SASL (Simple Authentication and Security Layer) authentication support for Kafka integrations, ensuring safer data streaming and messaging.

Resolved known security vulnerabilities (CVEs) across system dependencies.

Consolidated security scanning under a unified framework.

Master Data Management (MDM) Sync
Introduced a new project module for MDM synchronization, enhancing data consistency across environments.

User interface modernization
Upgraded the underlying Angular framework and refined formatting to deliver better UI performance and responsiveness.

Aligned global environment and logging configurations to meet standard system standards, and improved cache handling (TenantCache) and Lock Manager performance.

Cleaned up the codebase by removing obsolete orchestration references, legacy asynchronous communication modes, and deprecated OpConXml modules.

Upgraded critical third-party dependencies (such as Handlebars) to patch known security vulnerabilities (CVEs).

Fully integrated advanced security analysis (CodeQL and Mend scanning) for both frontend and backend modules to proactively secure code.

Framework upgrade
Upgraded the user interface to Angular 21 for improved responsiveness and long-term stability.

Refined background deployment workflows for faster, more reliable updates with minimal disruption.

Resolved frontend issues for a more stable visual experience across all user workflows.

Resolved security vulnerabilities (CVEs) by updating key third-party libraries, including Angular, Spring Boot, Jackson, and Lodash.

Eliminated potential injection risks by removing outdated query libraries.

Strengthened secure web server (Nginx) configurations and updated the underlying Java base image to the latest version.

Updated official open-source license disclosure documents to reflect current software versions.

Applies a consistent 24px padding between the Commandbar and the Table across all views to improve layout consistency (382153)

IdP Manager users can now view the defined group mappers in the mappers list (read-only) (578592)

Module IDs are resolved correctly when navigating back and forth in the contract wizard (579357)

Replaced the reactive WebClient with a synchronous RestClient to restore stability of MACMA Core 1.39 under Spring Boot 4; cache executor pools were improved and explicit timeouts added to prevent stalls (581639)

Applied security hotfixes to Keycloak 26.4.7-macma 8 to fix CVE-2026-11800 (581953) and CVE-2026-9086 (581954)

Per-Logger log-level configuration with defaults (SECURITY / LIFE-CYCLE loggers default to INFO, others to WARN); a WARN is logged if SECURITY or LIFE-CYCLE is set away from INFO (570084)

Facility deletion is now controlled by user roles rather than a Helm variable, enabling privileged users to delete facilities without OPS involvement (575959)

Resolved locationId is now shown as a read-only text field with a Copy button and updates automatically when OpConLocationString changes (575965)

Device Type and Facility relationships are now visible on Error Definitions and Measuring Points (581093)

Filtering by Device on the Error Definitions and Measuring Points pages (581095)

Equipment topology view refreshed with clearer icons, a redesigned layout, and a new Expand Full Subtree action; auto-arrange yields a left-to-right tree and preserves child expansion state (578747)

Stability improvements for the MMPD → MDM migration process prevent timeout during error code migration (569725)

Adjusted CultureCode and LanguageCode sizes to align with BCP-47 (language code 2 chars, culture code up to 10 chars) (571051)

Material type name now translated as "Material Type Name" instead of "Material Name" (574492)

Prevent automatic recentering when expanding a hierarchy so the current work area remains visible (575772)

Fixed stored HTML injection pentest finding (2026.01) (578240)

Notifications now honor per-topic opt-out preferences defined by modules, delivering messages only to users who have not opted out; topic registrations apply across all tenants.

Notification emails now include direct View and Unsubscribe links for the related topic, letting users adjust topic-specific settings from the email footer.

Users can test their notification channels (Email or Web Push) from Notification Settings to verify configuration.

OpenTelemetry tracing now uses parent-based sampling (default 10 %, operator-configurable) for complete end-to-end visibility across services.

Default log levels standardized: SECURITY and LIFE-CYCLE logs use INFO, other logs use WARN, with a warning when overrides weaken security-critical logging.

API enforces unique recipient emails, preventing duplicate recipients through the user-contact-details endpoint.

Notifications are no longer sent to deleted MACMA users.

BaseSync preserves local entities during transient remote API errors instead of deleting local data.

Direct notifications and templates now preserve Unicode (umlauts, accents, emojis) in subject and body.

Email distribution matches the selected resolution group.

Banner now displays immediately when showBanner is called, without needing manual change detection (581472)

Toast notifications are now displayed at the bottom center of the screen (580244)

Footer configuration changes apply immediately without reloading the page (580245)

Last Accessed and Last Modified timestamps now respect the user’s profile time zone (581139)

Security patches.

Security patches.

Security patches.

Fixed a regression bug that blocked editing downtimes in the hierarchical calendar.

Fixed editing of the downtime’s additional information in finalized shifts in some edge cases.

Fixed an issue in the creation of dynamic resources for fine-grained access.

Fixed the template editor so the main content is no longer overlapped by the detail view; the main view updates correctly when the detail view is opened programmatically, preventing clipping and unwanted scrollbars (578389)

Made complete routine tiles in the routine overview clickable again.

Removed the generic MDM error text from the sustainability view to prevent misleading error messages (556480)

Fixed sync failures caused by long MDM error definitions; syncing now succeeds even when MDM text exceeds internal length limits, and errors in one type no longer block other synchronizations (570649)

Users can choose which ticket-change notifications they receive (via email and web push); notifications include the update category to reflect their preferences (564847)

OpenTelemetry tracing captures complete traces across services; the default sampler is parentbased_traceidratio at 10 %, operator-configurable via the Helm chart (570073)

Deleting a filter in the dialog now preserves the current filter when Cancel is pressed (443834)

Reselecting the facility filter now resets the device list consistently and keeps filtering aligned with the backend (448073)