Release Notes FirstSpirit™ 2026.11

Release Notes

FirstSpirit™ 2026.11

1 Administration

1.1 Audit logging for changes to server configuration files

The Audit Logging of FirstSpirit has been extended to include changes to the configuration files fs-server.conf and fs-server-aux.conf, which are saved via ServerMonitoring. The acting user, the modified file, as well as the added, changed, and removed parameters are logged. The values of password parameters are not displayed.

1.2 New logOnly mode for execution constraints

The execControlConstraints parameter in fs-server.conf now accepts the value logOnly. In this mode, disallowed calls from scripts and templates are only written to the server log and are not blocked. This lets you check which scripts and templates would be affected before turning the constraints on, without disrupting ongoing operations. Calls that would cause the server to shut down remain blocked even in this mode. The change takes effect only after a server restart.

2 AI-powered tools

2.1 Announcement: New Standard Model of the AI Suite - GPT 6

In one of the upcoming FirstSpirit versions, the standard model of the AI Suite will be updated to GPT 6.

If you are using your own connection, please ensure that the GPT-6 Luna model is available. When using our OpenAI connection, no further action is required.

2.2 Content Assistant with Form Context

Until now, the Content Assistant only recognized the text field in which it was called. It now takes into account the current language as well as the contents of the other text fields in the same form. With the new "Edit Form with Content Assistant" action, an operation can be applied to all text content of a form. The suggestions are offered for adoption in a comparison dialog; the action is available in the form, in the preview, and in data source management.

2.3 New default model gpt-5.6-luna in the OpenAI Connector

The AI assistants in FirstSpirit that use the OpenAI Connector module operate by default with the gpt-5.6-luna model, which delivers overall better results.

Installations without a custom model entry automatically switch to the new model with the module update; an explicitly configured model remains unchanged.

At Microsoft Azure OpenAI, gpt-5.6-luna is often not deployed – in this case, the model must be deployed or a available model must be entered in the configuration.

For requests with function calls, the ServerManager configuration additionally provides the field "Reasoning Effort (Tools)".

2.4 Preselection of options in the Content Assistant

The user guidance for options in the Content Assistant has been optimized. Now the first entry is preselected, and options with only one entry are no longer shown. For special cases where an explicit empty selection is still desired, an entry with an empty prompt can be prefixed to the entries.

3 Module Development, Scripts, API

Download fs-isolated-runtime.jar directly from the server

Applications accessing the server via the FirstSpirit API require the fs-isolated-runtime.jar matching the server version.

Until now, it had to be obtained from an artifact repository or copied from the server's file system to match the exact server version.

The server now provides it at <server>/jar/fs-isolated-runtime.jar. Valid login credentials are required for the download. For example:

curl -u <benutzer>:<passwort> -O <server>/jar/fs-isolated-runtime.jar

The server consistently provides the file corresponding to its current version. Following a server update, it is sufficient to download the file again without requiring knowledge of the updated version number.

Overview

ID Description Categories
CORE-16713

The user guidance for options in the Content Assistant has been improved.

Further information can be found in chapter “AI-powered tools: Preselection of options in the Content Assistant”.

AI-powered tools, Content Assistant
CORE-17849

The OpenAI Connector module now uses gpt-5.6-luna instead of gpt-4o-mini as its default model.

Further information can be found in chapter “AI-powered tools: New default model gpt-5.6-luna in the OpenAI Connector”.

AI-powered tools
CORE-18090

The FirstSpirit server now offers the fs-isolated-runtime.jar matching its version directly for download.

Further information can be found in chapter “Module Development, Scripts, API: Download fs-isolated-runtime.jar directly from the server”.

Module development, Server Administrator
CORE-18134

Log output of the core web apps is forwarded to the FirstSpirit Server and written again to the corresponding fs-webapp-*.log files.

Logging
CORE-18165

A FirstSpirit HTTP client connection now supports automatic proxy authentication on Windows.

Server Administrator
CORE-18189

Performance improvements have been achieved for displaying the language-dependent release status in the SiteArchitect navigation tree for very large subtrees.

Performance, SiteArchitect
CORE-18191

The version of the integrated web server module "Embedded Tomcat" has been increased to 11.0.25. The use is not suitable for productive operation and should only be for testing purposes.

Server Administrator
CORE-18192

The establishment of new connections to the FirstSpirit server has been optimized for long runtimes under heavy loads.

Server Administrator
CORE-18199

Violations of the execution constraints for scripts and templates can now be logged instead of blocked.

Further information can be found in chapter “Administration: New logOnly mode for execution constraints”.

FirstSpirit Administrator
CORE-18204

An error in generation has been fixed for the output of FS_REFERENCE with useSections="only" within DOM elements in JSON.

Input Components, Support for JSON
CORE-18217

Cleanup of resources that are no longer needed within open connections has been optimized. On long-running servers, this can positively affect memory consumption.

Server Administrator
CORE-18220

When importing a project, the setting for strict MIME type checking during media uploads is now correctly transferred to the target project.

Project export / import
CORE-18230

The audit logging of FirstSpirit now also includes changes to configuration files made via the ServerMonitor.

Further information can be found in chapter “Administration: Audit logging for changes to server configuration files”.

Server Administrator
CORE-18231

Thread dumps from FirstSpirit are now saved in the standard format and include information about relevant virtual threads.

Server Administrator
CORE-18246

MultiSite Management no longer opens unnecessary connections to the server when displaying target projects. This reduces the server load and ensures that the server remains reliably accessible even with many target projects.

Multisite Management
CORE-18248

A bug restricting access to security-critical Java methods from schedule task scripts has been fixed.

Security, Tasks
CORE-18249

The "AgencySupport" module has not been supported since FirstSpirit 2025.8. With the current version of FirstSpirit, it will be automatically uninstalled when the server starts.

Modules, Server Administrator
CORE-18251

The closing and cleanup of aborted connections to the FirstSpirit server have been improved.

Server Administrator, Sessions
CORE-18273

There have been performance improvements in displaying store structures within the SiteArchitect navigation tree, especially for very large subtrees.

Performance, SiteArchitect
CORE-18290

The standard model of the AI Suite will be updated to GPT 6 in one of the next versions.

Further information can be found in chapter “AI-powered tools: Announcement: New Standard Model of the AI Suite - GPT 6”.

AI-powered tools
CXT-3862

The Content Assistant can edit an entire form in a single step.

Further information can be found in chapter “AI-powered tools: Content Assistant with Form Context”.

Content Assistant
CXT-3870

When performing a quick search in the input components FS_REFERENCE and FS_DATASET, it could happen that the displayed search results were cut off at the bottom of the screen.

ContentCreator
CXT-3877

Under Java 23 or earlier versions, there could be resource issues when establishing the connection to MicroApp.

FirstSpirit Content Experience Tools (CXT)
CXT-3882

In ContentCreator, there could be a timing issue during the initialization of OCM in external preview applications. This caused editing functionalities in the preview to be unavailable.

FirstSpirit Omnichannel Manager
CXT-3883

Security improvements based on regularly conducted pentests.

ContentCreator
CXT-3884

In certain cases, ContentCreator could experience session issues due to faulty media preview URLs.

ContentCreator

Deprecations

Functionality Deprecated as of Will be removed / Was removed as of
Input component CMS_INPUT_CONTENTAREALIST 5.2R3
Input component CMS_INPUT_CONTENTLIST 5.2R3
Input component CMS_INPUT_FILE 5.2R3
Input component CMS_INPUT_LINKLIST 5.2R3
Input component CMS_INPUT_OBJECTCHOOSER 5.2R3
Input component CMS_INPUT_PAGEREF 5.2R3
Input component CMS_INPUT_PICTURE 5.2R3
Input component CMS_INPUT_TABLIST 5.2R3
FirstSpirit Access API: de.espirit.firstspirit.agency.GroupsAgent 5.2R15
FirstSpirit Access API: delete (de.espirit.firstspirit.access.AccessUtil) 5.2R18
FirstSpirit Access API: release (de.espirit.firstspirit.access.AccessUtil) 2018-06
FirstSpirit Access API: getLastLoginAsDate (de.espirit.firstspirit.agency.UserStatisticsAgent) 2018-07
FirstSpirit Access API: getLostAndFoundStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) 2018-10
FirstSpirit Access API: getDeletedStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) 2018-10
FirstSpirit Access API: de.espirit.firstspirit.access.store.Previewable 2019-01
WebSphere Application Server support for FirstSpirit 2019-05
FirstSpirit Access API: redirectTemplateLogToDefaultLog() (Interface RenderingAgent.Renderer) 2021-05
Omnichannel Manager 2.x 2025-01