2026.7.0

1. Key highlights

  • Support for several security features have been added or improved, this includes CSP, CSRF, additional security headers & secure sessions cookies.

  • The UI of the AI view has been improved and is now using MUI X Chat API

  • The UI of the admin accounts & licenses pages has been improved with new dashboards that have more information and new tools to improve license and role assignment.

  • The MCP log structure has been extended and more logs have been added to better audit the application

2. Breaking changes

  • Obeo Enterprise for Sirius now requires Java 21 or later to build and to run.

  • The frontend code related to AI has been split into more modules, project that depends on @obeo/obeo-cloud-platform should have @obeo/obeo-cloud-platform-core and @obeo/obeo-cloud-platform-ai as peer dependencies.

  • The backend AI support has been extracted from the previous modules, as such new modules have been introduced:

    • obeo-cloud-platform-ai-infrastructure

    • obeo-cloud-platform-ai-mcp-infrastructure

    • obeo-cloud-platform-ai-mcp-application

  • Extract the frontend AI support in a dedicated npm package named @obeo/obeo-cloud-platform-ai

The internal AI support and the MCP support are being extracted into two sets of maven modules because on one hand, the AI support is an internal feature being used by the application while the MCP support is a brand new set of APIs being added on top of the entire application.

Their set of dependencies are very different, one could consider that the AI support will just depend on Spring AI and some technical modules from Sirius Components while the MCP support will depend on everything.

  • Disabling the CSRF check with ocp.security.csrf.enabled=false might be needed in development if the frontend & backend are not served from the same source.

3. Bug fixes

  • Ensure default license token assignment is only triggered on account creation and not on a new role assignment on an existing account.

  • Perform the same checks before a token assignment when an account is created and when it is updated

  • Make license display order deterministic in the role token usage card.

  • Restore the history to make it work with change sets

4. New features

  • AI

    • Replace the user interface of the AI View with a new one based on MUI X Chat.

Obeo Enterprise for Sirius AI view

  • Collaboration

    • Add support for the management of changeset. It is now possible to create a changeset in a project to create an alternate version of the content of your project. You can easily switch back and forth between changes to evaluate these versions.

Obeo Enterprise for Sirius changeset management

  • Security

    • Add support for additional HTTP security headers: Referrer-Policy, Permissions-Policy, Cross-Origin-Embedder-Policy, Cross-Origin-Opener-Policy, and Cross-Origin-Resource-Policy. These policies can be configured with the ocp.security.referrer-policy, ocp.security.permissions-policy, ocp.security.cross-origin-embedder-policy, ocp.security.cross-origin-opener-policy, and ocp.security.cross-origin-resource-policy properties.

    • Restore support for CSRF protection. It is enabled by default but can be disabled thanks to the configuration property

    • Add support for CSP headers with a per-request nonce injected into index.html and reused by the frontend runtime for Emotion/MUI styles.

    • server.servlet.session.cookie.http-only & server.servlet.session.cookie.secure are now true by default

5. Improvements

  • Add authentication method check for protected routes to avoid verifying permission when the user is not authenticated.

  • Distinguish clearly the unauthenticated and forbidden access control errors while returning error messages to the frontend and logging details.

  • Capability check errors caused by unauthenticated users will now produce less verbose log messages with a message indicating clearly the cause of the issue.

  • Add support for the publication of maven modules and npm packages on AWS CodeArtifact.

  • Add the current username to the structured log messages

  • Improve the account table header by adding the total number of accounts and the number of active accounts.

  • Move project title to the left on the navigation bar.

  • Improve the context menu of the license table by regrouping all "Transfer token assignments to xxx" inside the same section

  • On the admin account table, you can now choose the license that will be consumed when changing user role.

Obeo Enterprise for Sirius users table