2026.11.0

New permissions added: Organization:list_webhooks, Organization:create_webhook, Organization:delete_webhook, OrganizationSettings#webhooks:view.

New permissions added: Profile:view, Profile:delete_account.

New permission added: ProfileSettings:view, ProfileSettings#account:view.

Switch to Spring AI 2.0.1

Properties ocp.role.<role>.permissions and ocp.role.project.<role>.permissions have been removed in favor of hardcoded permissions. Therefore, each downstream product doesn’t need to declare the permissions anymore if they use the same configuration as Obeo Enterprise for Sirius. In the situation where they want to customize them, new properties ocp.role.<role>.permissions.override and ocp.role.project.<role>.permissions.override have been added, following the same value format than the original properties

New permission added: Project:view_history. Custom role permission overrides must include this permission to allow history consultation.

History snapshots now use Sirius Web semantic data and representation storage. Existing snapshots are migrated automatically, and the dedicated snapshot tables and Java APIs have been removed.

New permissions added: ProjectRevision:restore. Custom role permission overrides must include this permission to allow revision restoration.

Contributors can now list, create, and delete project webhooks.

New branches now include the representations from main, preserving diagram layouts and portal views.

Sandbox uploaded images when accessed directly to prevent active content from accessing the application.

Revision counters now display animated placeholders while the History page is loading.

The CSP policy now authorizes the web app manifest served by the application.

CSP nonce initialization now runs before the application bundle, preventing runtime styles from being blocked when Vite splits the frontend into multiple chunks.

A new Profile structure exposes a minimal view of the authenticated user, separately from the administration-oriented Account type.

Authenticated users can now access a profile settings page with an Account tab.

Add a first version of the discussions view to create conversations attached to specific objects

The profile settings Account tab now includes a capability-based account deletion section and confirmation dialog.

The History page now shows versions and live updates for the selected changeset. Restoring, keeping, and deleting versions apply to that changeset’s history.

The account deletion mutation and its supporting infrastructure have been added. The complete account deletion behavior will be added in follow-up changes.

The History page header now lets you return to the project editor or browse the history of another changeset.

The History page now displays revisions in a list on the left and the selected revision’s summary on the right. Select a revision to view its name, creation date, authors, and current or saved version status.

In the Notifications page, users can now select notifications to mark them as read or unread.

In the Notifications page, users can now delete selected notifications.

Add ipAddress and authenticationStrategy to the log message context. By using the Spring framework structured logging settings, it was possible to see the username (causedBy) which had caused most of our logging messages for the detection of unauthorized access and system security. It would thus be easy to detect requests performed by accounts using the Username/Password authentication strategy which would bypass a central OIDC based authentication provider.

Revision items now highlight the selected version and display a current version badge, with authors and creation date on a single line.

The History page now lets you filter revisions by name using the Find a revision field. Clear the search to display all revisions again.

Consulting history has its own permission, granted to project readers by default. The History button is displayed only when consultation is allowed. Restoring a version has its own permission, granted to project writers and administrators with the Contributor or Administrator account role by default. The restoration action is displayed only when restoration is allowed.

The selected revision summary now includes a header, a current revision badge, author and date icons, and an indication of whether the revision was saved manually or automatically.

For technical details on this Obeo Enterprise for Sirius release, including breaking changes, please refer to changelog.