Release Notes FirstSpirit™ 2025.7

Release Notes

FirstSpirit™ 2025.7

1 Administration

1.1 Update of HttpClient

The internally used dependency org.apache.httpcomponents.client5:httpclient5 has been updated.

This version no longer supports authentications via NTLM or Kerberos. This applies exclusively to HTTP connections established by FirstSpirit itself.

This continues to potentially affect scripts and modules with legacy resources that use classes from these dependencies.

Please note that support for modules with non-isolated resources will be discontinued with FirstSpirit 2025.8.

1.2 Update of internally used software

As of the release 2025.7, the following internally used software has been updated.

  • Apache HttpClient
    Update to version 5.4.4

2 ContentCreator

Optimized language management and element status

Language selection in the toolbar

A new language menu next to the status button allows for selecting the project language. The approval status of each language is displayed in the flyout. A colored indicator on the dropdown signals changes in other languages (orange = changed, red = in workflow). The preview updates according to the selected language.

UID=language_dropdown

UID=language_dropdown_2

UID=language_dropdown_3

Differences in element status of individual elements in different languages are only possible using the beta feature Language-dependent release.

Media and datasets

The views for media and data sources now also support language-specific release. The language switch has also been integrated there.

Table views behave like forms with language-dependent labels. The display of snippets and display names depends on the project or editorial language. Additionally, the toolbar now shows the status of the selected element – no longer that of the folder.

3 FirstSpirit Content Experience Tools (CXT)

Latest module versions

FirstSpirit 2025.7 supports the following module versions for FirstSpirit Content Experience Tools.

Module / file nameVersion number
FirstSpirit CXT Plattform
platform-[version].fsm
6.1.17
FirstSpirit CXT DAP Bridge
dataservice-[version].fsm
1.44.35
FirstSpirit CXT FragmentCreator
fragment-creator-[version].fsm
5.0.22
FirstSpirit Fragment DAP
fragmentdap-[version].fsm
1.40.44
FirstSpirit Media DAP
mediadap-[version].fsm
1.31.33
FirstSpirit PageRef DAP
pageref-[version].fsm
1.9.33
FirstSpirit Markdown Editor
markdown-editor-[version].fsm
1.29.33
FirstSpirit Tagging Editor
tagging-editor-[version].fsm
1.29.33
FirstSpirit CXT FragmentCreator - CaaS Integration
caas-integration-[version].fsm
1.31.32
FirstSpirit Image Assistant
imagerecognition-module-[version].fsm
1.0.62
FirstSpirit Analyze Asisstant
FirstSpirit-AiAnalyze-[version].fsm
0.9.10
Template Development MicroApp
fs-sitedev-microapp-[version].fsm
0.9.44
FirstSpirit Multisite Management
fs-multisite-[version].fsm
1.5.5

4 Module Development, Scripts, API

4.1 API: The new ScriptAgent

The new ScriptAgent in the FirstSpirit API allows for easy execution of scripts.

4.2 New methods for providing information about remote data sources

The ProjectAgent has been expanded with two new methods that provide information about remote data sources.

  • Map<Schema, Collection<Long>> getExportedRemoteSchemas()
  • Map<Schema, Long> getImportedRemoteSchemas()

4.3 Optimized logging in FirstSpirit through SLF4J integration

The logging API SLF4J has been updated to version 2.0.17.

The fs-isolated-runtime.jar now contains their classes directly, so module developers no longer need to define additional dependencies.

Please also refer to the chapter Logging in FirstSpirit in the documentation regarding this topic.

5 Security

Standard permission restriction for project-related schedule task

Project-related tasks have so far been carried out with the permissions of a server administrator, which poses a potential security risk.

Starting from the current FirstSpirit version, permissions are limited by default to those of a project administrator.

If schedule tasks with scripts require additional permission, this can be achieved by specifying a separate connection with the appropriate access data.

6 SiteArchitect / ServerManager

Java version update

The FirstSpirit desktop apps (FirstSpirit SiteArchitect and ServerManager) are started and updated (rolled out) via the FirstSpirit Launcher.

The “FirstSpirit Launcher JRE” module enables customers and partners to easily switch between different Java versions for the operation of Java-based applications. The desired Java version can be selected server-wide for Microsoft Windows and macOS separately.

The included Java versions have been updated with the current release.

  • 17.0.14+7 -> 17.0.15+6
    (Default - the version delivered with the FirstSpirit Launcher)
  • 21.0.6+7 -> 21.0.7+6

Overview

ID Description Categories
CORE-15640

From the current FirstSpirit version onward, permissions for project-related tasks are by default restricted to those of a project administrator.

Further information can be found in chapter “Security: Standard permission restriction for project-related schedule task”.

FirstSpirit API, Permissions, Tasks
CORE-16400

The ProjectAgent received two new methods for providing information about remote data sources.

Further information can be found in chapter “Module Development, Scripts, API: New methods for providing information about remote data sources”.

FirstSpirit API, Remote Data
CORE-16732

The new ScriptAgent in the FirstSpirit API enables the easy execution of scripts.

Further information can be found in chapter “Module Development, Scripts, API: API: The new ScriptAgent”.

FirstSpirit API
CORE-17035

The Logging API SLF4J has been updated to version 2.0.17.

Further information can be found in chapter “Module Development, Scripts, API: Optimized logging in FirstSpirit through SLF4J integration”.

Logging
CORE-17074

For more secure password handling when establishing connections with the ConnectionManager from the FirstSpirit API, new methods now exist that accept char arrays instead of strings.

FirstSpirit API
CORE-17098

When importing a schema as a Remote data source, an error may occur if a schema with the same name already exists in the target project.

Remote Data
CORE-17120

The internally used dependency org.apache.httpcomponents.client5:httpclient5 has been updated.

Further information can be found in chapter “Administration: Update of HttpClient”.

Module development, Server Administrator
CORE-17128

A problem was fixed where background searches continued to run. This also occurred when using the QueryAgent API expanded with 2025.5 to close active search queries.

Search
CORE-17132

With the current release, the Java versions have been updated.

Further information can be found in chapter “SiteArchitect / ServerManager: Java version update”.

Launcher
CORE-17140

The security of the ChaCha20 encryption mode has been improved, and compatibility with WireGuard keys has been prepared.

Security, Server Administrator
CORE-17144

Update of internally used software

Further information can be found in chapter “Administration: Update of internally used software”.

Integrated software
CORE-17157

A problem with saving credentials in schedule task scripts has been fixed.

Security, Tasks, Template Development
CORE-17182

FirstSpirit Content Experience Tools: Latest module versions

Further information can be found in chapter “FirstSpirit Content Experience Tools (CXT): Latest module versions”.

FirstSpirit Content Experience Tools (CXT)
CORE-17187

The version of the integrated web server module "Embedded Tomcat" has been increased to 10.1.41

Web server
CORE-17190

The scrollbar was temporarily not visible on longer bundle lists.

Multisite Management
CXT-3212

For the display of the "Create dataset" actions in the "New" menu, neither filtering nor the display name for selection was considered for multiple valid data sources per table template.

ContentCreator
CXT-3469

When changes are made to options within the prompt configuration, the display of the option is now correctly updated in the ContentAssistant.

AI-powered tools, Content Assistant
CXT-3490

The Analyze Assistant can now be customized within the "Tailored UI" functionality to meet project-specific requirements.

AI-powered tools, Analyze Assistant, Project Administrator
CXT-3494

The language management and status display have been revised.

Further information can be found in chapter “ContentCreator: Optimized language management and element status”.

ContentCreator
CXT-3504

Depending on the size of the projects, successive search queries could cause search processes on the FirstSpirit server to continue running in the background.

ContentCreator, Search
CXT-3519

Multiple updates in the Code Assistant report caused tooltips with explanations of the problem to be displayed multiple times in the code file. The existing findings are now correctly removed before new ones are added.

Code Assistant
CXT-3555

In very long prompt definitions, display issues could occur in certain cases within the AI prompt configuration.

AI-powered tools
CXT-3560

A problem was fixed where toolbars on report entries could only be operated via the keyboard.

ContentCreator

Deprecations

Functionality Deprecated as of Will be removed / Was removed as of
Input component CMS_INPUT_CONTENTAREALIST 5.2R3
Input component CMS_INPUT_CONTENTLIST 5.2R3
Input component CMS_INPUT_FILE 5.2R3
Input component CMS_INPUT_LINKLIST 5.2R3
Input component CMS_INPUT_OBJECTCHOOSER 5.2R3
Input component CMS_INPUT_PAGEREF 5.2R3
Input component CMS_INPUT_PICTURE 5.2R3
Input component CMS_INPUT_TABLIST 5.2R3
FirstSpirit Access API: de.espirit.firstspirit.agency.GroupsAgent 5.2R15
FirstSpirit Access API: delete (de.espirit.firstspirit.access.AccessUtil) 5.2R18
FirstSpirit Access API: release (de.espirit.firstspirit.access.AccessUtil) 2018-06
FirstSpirit Access API: getLastLoginAsDate (de.espirit.firstspirit.agency.UserStatisticsAgent) 2018-07
FirstSpirit Access API: remainingDurationOfCurrentStageInMillis (de.espirit.firstspirit.server.MaintenanceModeInfo) 2018-07 2025-13
FirstSpirit Access API: getStartingTimeOfStageAsDate (de.espirit.firstspirit.server.MaintenanceModeInfo) 2018-07 2025-13
FirstSpirit Access API: getSelectedWebserverConfiguration (de.espirit.firstspirit.access.serverConfiguration) 2018-10 2025-13
FirstSpirit Access API: setSelectedWebserverConfiguration (de.espirit.firstspirit.access.serverConfiguration) 2018-10 2025-13
FirstSpirit Access API: getSelectedWebServer (de.espirit.firstspirit.access.project.Project) 2018-10 2025-13
FirstSpirit Access API: setSelectedWebServer (de.espirit.firstspirit.access.project.Project) 2018-10 2025-13
FirstSpirit Access API: getLostAndFoundStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) 2018-10
FirstSpirit Access API: getDeletedStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) 2018-10
FirstSpirit Access API: de.espirit.firstspirit.access.store.Previewable 2019-01
WebSphere Application Server support for FirstSpirit 2019-05
FirstSpirit Access API: redirectTemplateLogToDefaultLog() (Interface RenderingAgent.Renderer) 2021-05
Omnichannel Manager 2.x 2025-01
FragmentCreator 2025-01 2025-12
Modules with legacy resources 2025-02 2025-09
FirstSpirit Agency Support 2025-02 2025-08