Release notes - Lobster Platform 26.1.0
Release date: 2026-01-27
Release Blog
For a detailed description of the new features, check our Release Blog.
Upgrade Note
Installations running Lobster Platform version 25.1-LTS can be upgraded directly to version 26.1 without any adjustments.
For any installations older than this this, you cannot go straight to 26.1.
For Lobster Data Platform 25.0, please upgrade please upgrade first to 25.1-LTS.
For _data or _pro, please upgrade first to _data 4.6.14 and _pro 4.12 before upgrading to 25.1-LTS, after which you can install the Lobster Data Platform 26.1
When using Lobster Bridge, please make sure to update this all Bridges as well using the one-click "Update Lobster Bridges" button to ensure compatibility with version 26.1.x.
For more details see: https://www.lobster-world.com/en/blog/what-to-expect-from-our-updates-quarterly-releases-an-annual-lts/
Features & Improvements
LDP-5774
Company: Added warning in deletion confirmation dialog
LDP-5699
Prometheus tokens are now auto-generated by the system for enhanced security.
Prometheus tokens are only visible during initial creation and cannot be retrieved afterwards.
LDP-5639
Offer generic search/filter possibility in server logging view
LDP-5570
AppendFileToPdfContainerIU: offer new parameter "Skip embedding fallback fonts" to decrease size of PDF file
LDP-5555
Support exporting performance metrics to industry-standard monitoring platforms, enabling real-time visibility into system health and performance. Expose of JVM metrics Exposure & Application metrics.
Supported Platforms:
Prometheus (pull-based /metrics endpoint)
Datadog (direct push integration)
OTLP-compatible platforms (New Relic, Grafana Cloud, OpenTelemetry Collector)
LDP-5505
When importing DataFlows with profiles, the test files for the mapping "Test mapping" will be imported
LDP-5439
Key Vault: Added UI for vault provider configuration
LDP-5423
Key Vault: Implemented password/secret support for Azure Key Vault
LDP-5418
Trading Partner Manager (TPM): LDP view for collaboration connection status and registration including Inbound/Outbound tests
LDP-5386
The File Routing View in AS2 Configurations has been refactored
LDP-4340
AS2 service will auto restart after chaning the configuration.
LDP-4335
New token-based login for Transport-Manager which can be used if the target system prevents you from logging in with username and password.
LDP-4332
Navigation items reorganized.
AS2 Configuration with children Partner Channel and File Routing was moved under Adminstration. Queue Traffic was moved with new name "AS2 Queue Traffic" directly under Control Center
LDP-4271
REST API Manager: Offer rate limits via policies
LDP-4252
The configuration file for the unattended Bridge installation can now be downloaded via the context menu of Bridge connections
LDP-4241
Support Google Pub/Sub message protocol in Phase 1 & Phase 6 including HA
LDP-4230
Licensing: REST API operations and MCP tools are now also counted towards the licensed configuration items
LDP-4126
Optimized UI/UX in configuration dialog for config files
LDP-4122
Introducing Pathfinder - A multi talent AI assisting at various places in the platform
LDP-4105
Key Vault: Implemented support for HashiCorp password
LDP-4102
The CEP & Peppol Connectors can now be downloaded directly from the Template Gallery
LDP-4089
Configurable Jetty SessionCookie for multiple Bridge instances on the same server
LDP-4055
Added error message when fonts are missing for creating the PDF
LDP-4031
Changed the behavior of the Select Input Agent button so that it now selects the input agent instead of opening the documentation.
LDP-4011
The error handling for the pathfinder API has been improved.
Bug fixes
LDP-5935
Added support for observability in high availability clusters, with database configurations automatically synchronizing from primary to replica nodes.
LDP-5856
Fixed "PortalByNameKey" issues when exporting forms or event handlings with reference to portals
LDP-5830
Database connections no longer become uneditable when the alias contains uppercase letters.
LDP-5810
ETL tasks with parquet files: missing "duckdb" database alias will now be added to the database pool, if missing, when an ETL Task is run. There is no need, and it should not be done, to add it to the "database.xml"
The "duckdb" alias can not be edited in the database view.
LDP-5751
Fixed potential invalid status of custom client structures after system start
LDP-5721
JsonParser: Exception when value of object exceeds 20000000 characters
LDP-5700
Fixed an issue leading to errorneous profile validiation check failures when saving or testing mappings.
LDP-5696
Fixed potential OptimisticLockException with persisting statistics
LDP-5643
An expired session in multiple open browser tabs or windows no longer causes random session issues
LDP-5638
Fixed a potential wrong serialization state after changing a custom entity
LDP-5629
Fixed an error related to custom subroutines which prevented new actors from beeing added
LDP-5625
Fixed support of multiple circular data structures in json serialization
LDP-5613
Portals referenced by ribbon commands and event handling actions are now also exported as expected
LDP-5524
ZUGFeRD postexecuter produces a second unnecessary PDF file
LDP-5521
Fixed ETL Parquet persistent layer and optimized ETL logging
LDP-5520
EnvironmentCheckByFilter: during a rerun the correct filename is passed to filters/functions
LDP-5504
Now deleted channels will be correctly created again if a package with same channel is reimported after deletion.
LDP-5479
Unnecessary error-log entry when unknown users are trying to login via SSH (e.g. during brute force attacks)
LDP-5471
Changed order of rest default response types from client/json to application/json
LDP-5466
New Event to prevent users from deregistering TFA device
LDP-5455
Fixing error when creating new tracking status entries manually
LDP-5444
Improved logging on the ZUGFeRD XML template, superfluous trace logging now removed.
LDP-5430
Some users experienced random session logouts, we've fixed these issues.
LDP-5413
When exporting the end point list of a REST API, no error will be raised
LDP-5407
If an object is requested from the history via "versionAt" parameter in a "Search" action, the original object was returned instead of the historized one
LDP-5385
Fixed typo (csfr -> correct is csrf). In case you disabled CSRF through the system property, please reconfigure this (ldp.security.csfr.enabled --> ldp.security.csrf.enabled)
LDP-5384
Performance improvement: replaced BCrypt cookie with proxy header in platform redirect
LDP-5379
Database Connection passwords can no longer be viewed when the "paranoid" setting is true.
LDP-5374
Fixed regularly occurring error log message on a DMZ if a CertBotHandler is used
LDP-4532
Enable empty pool size, Database max. pool size can be now set to Zero. This improves the behavior of CData connections.
LDP-4463
UpdateCenter: After termination the update still got installed on working notes and DMZ
LDP-4386
REST API: Made "name" input field mandatory
LDP-4385
Fixed potential optimistic lock exception on persisting statistics
LDP-4375
Creating a new entity via the "Save changes later" event action does no longer result in a permission error. Also the "Create" event is dispatched again for such cases.
LDP-4365
Now an AS2 channel can be created, if a Lobster Bridge Connection without a partner exists.
LDP-4358
IFrames can now also load HTML code that has no DOCTYPE or html root element
LDP-4357
YAML Import structure: Structure is not created but success message appears
LDP-4355
Form renderer: The set focus action works again for syntax highlighting text fields
LDP-4354
Form renderer: Fixed layout issues with the "Options" view type of a combobox
LDP-4347
DataCockpit: Replaced user management functions related to DataCockpit users to adhere to the unified Platform User Management.
LDP-4345
Improved error handling for faulty AS2 configuration.
LDP-4342
MQTT: A broker restart will now result into a single subscription, instead of creating multiple subscriptions and duplicate data records.
LDP-4339
Phase 3: Fixed broken functions related to user data (e.g. mail)
LDP-4336
A boolean json projection can now be used for row formatting
LDP-4334
Bridge Gateway: Improved performance of tunneled JDBC requests
LDP-4327
The profile creation wizard maps paths of nodes correctly when configured to create a 1:1 mapping, or none at all
LDP-4290
CertBot ACME challenge is now working with DMZ again
LDP-4289
Fixed table list display for all supported DB vendors
LDP-4287
Fixes issue allowing any user to move, edit, or create profile groups bypassing intended role restrictions
LDP-4286
Document management: New event "Document requested" which gets dispatched once a document gets requested via URL.
LDP-4269
Removed modal blocking from intergration views, which caused issues in certain circumstances
LDP-4268
SAP PI Import: NullpointException when missing tree element
LDP-4250
OAuth2 Server: JWT Tokens without scopes will trigger an 401 Unauthorized response instead of a null-pointer exception.
LDP-4214
Fixed erroneous response code 500. Improved security for the Partner/Channel REST API
LDP-4198
Forms are no longer broken if another auto synchronized form is embedded directly into a repeatable element
LDP-4189
Two factor authentication is now working again with enabled CSFR protection
LDP-4143
Override style properties can be reset to their original value again, by using the remove button of the according theme value
LDP-4129
HTMLtoPDFPostexcuter is now available through the default configuration.
LDP-4127
ControlCenter (Remote-Logs): consumer can whitelist Lobster systems to access logs via the message service port
LDP-4124
Fixed missing translations in the profile creator
LDP-4123
Profiles which are created by the form designer are no longer initially inactive
LDP-4120
CloudStorage: AzureBlobStorage OutOfMemory in byte array if downloaded file is larger than 2GB
LDP-4101
ControlCenter (Remote-Logs): viewer fails to connect to DMZs (due to a missing message consumer)
LDP-4088
Improved page layout for Bridge "home view" for smaller browser windows.
LDP-4080
File Upload: Added warning banner to highlight the default security settings
LDP-4076
Fixed potential CSFR access error on fast switch of the user session
LDP-4067
The server logs are no longer spammed with permission errors, if the user can see the "Activity feed" widget but has no read permission for any of its listed items
LDP-4064
The menu entry picker in a 'Custom overview' dialog now offers the correct menu to pick from
LDP-4056
AMQP 0.9.1: Added prefetch parameters to input agent
LDP-4016
Kafka: Not configured registry channel no longer produces a log entry
LDP-4013
Fixed memory leak within profile phase 3 gui
LDP-4010
Fixed bug in private blocks where references where not updated on configuration import
LDP-4000
CI: Added retry mechanism for file existence checks (can be enabled via system property hub.datawizard.ci.inspectorThread.enableRetries)
LDP-3997
Cockpit: Users are now able to see logs to the jobs that are specifically allowed for them via the role
LDP-3983
Admin: Roles with only permissions to view active sessions can now view the sessions view
Known Issue
When using 2 DMZ servers in a cluster we've observed that in two cases the user cannot log in. We are working on a patch for this.
Installations without DMZ or with only 1 DMZ function as expected.
Update February 11th, 2026 - solved in 26.1.1.
```