Release Notes FirstSpirit™ 2026.7

Release Notes

FirstSpirit™ 2026.7

1 Administration

Support for Local Network Access (LNA) in ContentCreator

Chromium-based browsers (Chrome, Edge from version 142) block requests from public web applications to private or internal network addresses (Local Network Access) by default. This also affects the embedded preview in the ContentCreator, as explicit permission is required for embedded frames.

In certain cases, such connections to the local network may be explicitly desired, for example, to be able to communicate with an internal company portal.

With the new server property webedit.preview.allowLocalNetworkAccess in the fs-server.conf, a comma-separated list of hostnames can be configured for which access to the local network from the preview is allowed. However, it should be noted that there are additional requirements for the use of such network connections, which can be found, among other places, in the specification.

The setting is disabled by default and requires explicit confirmation from Customer Support for SaaS customers.

Similar to the already existing property allowedRedirectHosts, wildcards can also be used here for the definition. Example:

webedit.preview.allowLocalNetworkAccess=*.example.com,localhost

2 FirstSpirit Content Experience Tools (CXT)

Latest module versions

FirstSpirit 2026.7 supports the following module versions for FirstSpirit Content Experience Tools.

Module / file nameVersion number
FirstSpirit CXT Plattform
platform-[version].fsm
8.0.4
FirstSpirit Media DAP
mediadap-[version].fsm
2.0.1
FirstSpirit PageRef DAP
pageref-[version].fsm
2.0.1
FirstSpirit Image Assistant
imagerecognition-module-[version].fsm
1.1.3
FirstSpirit Analyze Asisstant
FirstSpirit-AiAnalyze-[version].fsm
2.0.2
Template Development MicroApp
fs-sitedev-microapp-[version].fsm
1.0.3
FirstSpirit Multisite Management
fs-multisite-[version].fsm
2.1.2
FirstSpirit Collaboration (Beta)
fs-collaboration-[version].fsm
1.1.4

3 FirstSpirit REST API

FirstSpirit REST API - Open beta phase

With the FirstSpirit version 2026.7, the new feature "FirstSpirit REST API" enters a open beta phase.

For further information, see the Crownpeak Support Portal.

4 Module Development, Scripts, API

JSpecify annotations for nullability in the Access API

From this release, the FirstSpirit Access API additionally uses JSpecify annotations for nullability information. The JSpecify library is defined as a dependency by the artifact fs-isolated-runtime.jar and is thus automatically available to module developers. For new nullability annotations in your own code, the use of @Nullable and @NonNull is recommended.

Further information can be found in the documentation.

5 Module: Multisite Management

New API for Bundling Strategies in MSM

It is now possible to implement and use custom bundling strategies. To do this, the BundlingStrategy interface must be implemented and declared as @PublicComponent in a FirstSpirit module — the Multisite Management automatically recognizes and loads external strategies.

The existing built-in strategies remain available, and current bundle settings will be migrated automatically.

Additionally, the reference view now unconditionally displays all outgoing references.

6 Remote Data

Import/export of remote schema properties

Schemas imported from a remote project now retain their link to the remote source after transport via ContentTransport or external synchronization.

Prerequisites:

  • The remote project exists on the target server or can be assigned via GID.
  • The target layer is configured as read-only and no-schema-sync.
  • The remote schema is not yet integrated into the target project — multiple integrations are not possible.

7 Language-dependent user persmissions

Language-dependent user permissions

A new feature has been introduced to restrict editing permissions based on the project languages.

Project administrators can now specify in the ServerManager which user groups are allowed to edit which languages.

In ContentCreator, input components for which the user does not have language permission are automatically displayed as read-only; a corresponding notice is shown in the form dialog.

Overview

ID Description Categories
CORE-16760

When logging out of the ContentCreator and then logging in with a different user account in the same browser window, the previous session was mistakenly used for MicroApp actions.

FirstSpirit Content Experience Tools (CXT), Sessions
CORE-17379

When importing via Feature-Transport or ExternalSync, previously deleted sections and bodies are now correctly mapped to their original IDs, preventing duplicate GIDs for newly created sections with the same name.

Content Transport, External synchronization
CORE-17401

JSpecify annotations for nullability in the Access API

Further information can be found in chapter “Module Development, Scripts, API: JSpecify annotations for nullability in the Access API”.

FirstSpirit API
CORE-17566

Multisite Management now supports custom bundling strategies via API.

Further information can be found in chapter “Module: Multisite Management: New API for Bundling Strategies in MSM”.

Multisite Management
CORE-17625

FirstSpirit now supports the import and export of remote schema properties via ExternalSync or ContentTransport, ensuring that the linkage to remote data is maintained during transport operations.

Further information can be found in chapter “Remote Data: Import/export of remote schema properties”.

Content Transport, External synchronization, Remote Data
CORE-17656

When assembling the bundle content, explicitly added elements are now correctly processed, even if they were previously already indirectly captured through outgoing references of other bundle elements.

Multisite Management
CORE-17787

A problem with time-limited archiving has been fixed: If archiving makes no progress due to a time limit, it will now continue archiving until the next savable continuation point.

Archiving
CORE-17855

The method IDProvider#moveChild now correctly sets the start node of the target folder even if it is locked during the move operation.

FirstSpirit API
CORE-17863

The behavior of the URL registry with deleted elements has been improved. Reserved paths (preview URLs) and stored URLs of deleted elements are no longer considered in URL conflict resolution within the URL registry, so new elements do not receive unnecessary numbered suffixes when an element is deleted and a new one with the same name is created.

Advanced URL
CORE-17873

When using the FOP module on an Apache Tomcat server, error messages such as "factory already defined" occurred.

Modules
CORE-17877

The JRE supplied with the FirstSpirit Launcher has been updated to version 21.

Launcher
CORE-17925

The project export no longer fails when symlink targets are unreachable or other filesystem access errors occur in the FirstSpirit server directory.

Project export / import
CORE-17931

Editing permissions can now be restricted per user group based on project languages.

Further information can be found in chapter “Language-dependent user persmissions: Language-dependent user permissions”.

Language-dependent user permissions
CORE-17937

The new method Connection#matchesTicket(String) in the FS Access API provides the ability to verify whether the passed login ticket belongs to the current connection.

FirstSpirit API
CORE-17970

Resource conflicts between modules on the server scope are now detected and displayed both as a warning in the server log and in the ServerManager under "Resource Issues".

Modules, Server Administrator
CORE-17983

A display issue with outdated remote schema information in the SiteArchitect has been fixed.

Remote Data
CORE-17985

FirstSpirit Content Experience Tools: Latest module versions

Further information can be found in chapter “FirstSpirit Content Experience Tools (CXT): Latest module versions”.

FirstSpirit Content Experience Tools (CXT)
CORE-17990

The return value of the API method IDProvider#getReleaseStatus(Language) has been adjusted. If none of the provided languages have a release revision, the method now returns NEVER_RELEASED as the return value.

FirstSpirit API, Language-dependent Release
CORE-17994

A problem with the language-dependent release of datasets using BasicWorkflows has been resolved.

Language-dependent Release
CORE-18005

The current version of the FirstSpirit Launcher (1.3.0) now offers native support for Apple Silicon processors.

Launcher
CORE-18036

Open beta phase for the new feature "FirstSpirit REST API"

Further information can be found in chapter “FirstSpirit REST API: FirstSpirit REST API - Open beta phase”.

FirstSpirit REST API
CXT-3705

The ContentCreator now supports Local Network Access (LNA) in preview. Access to internal network addresses can be configured for selected hostnames.

Further information can be found in chapter “Administration: Support for Local Network Access (LNA) in ContentCreator”.

ContentCreator, Server Administrator
CXT-3776

In ContentCreator, the element status area and menus have been adapted to the new look.

ContentCreator
CXT-3782

Updating the NPM dependencies to the latest versions, specifically TypeScript 5.7.2 → 6.0.3.

ContentCreator, Integrated software
CXT-3796

General validation notices of the INFO type were mistakenly displayed as "recommended correction." The display of these notices is now limited, similarly to SiteArchitect and the documentation, to the corresponding input component.

ContentCreator, Dynamic Forms
CXT-3797

When using MicroApps, a state could be reached in which connections to FirstSpirit could no longer be terminated.

FirstSpirit Content Experience Tools (CXT)
CXT-3802

When maintaining SEO URLs, outdated URLs were displayed when repeatedly editing individual entries.

ContentCreator
CXT-3810

In OCM 3.0, there was an issue with detecting the drop zones after a change in the visibility or size of the navigation area.

FirstSpirit Omnichannel Manager

Deprecations

Functionality Deprecated as of Will be removed / Was removed as of
Input component CMS_INPUT_CONTENTAREALIST 5.2R3
Input component CMS_INPUT_CONTENTLIST 5.2R3
Input component CMS_INPUT_FILE 5.2R3
Input component CMS_INPUT_LINKLIST 5.2R3
Input component CMS_INPUT_OBJECTCHOOSER 5.2R3
Input component CMS_INPUT_PAGEREF 5.2R3
Input component CMS_INPUT_PICTURE 5.2R3
Input component CMS_INPUT_TABLIST 5.2R3
FirstSpirit Access API: de.espirit.firstspirit.agency.GroupsAgent 5.2R15
FirstSpirit Access API: delete (de.espirit.firstspirit.access.AccessUtil) 5.2R18
FirstSpirit Access API: release (de.espirit.firstspirit.access.AccessUtil) 2018-06
FirstSpirit Access API: getLastLoginAsDate (de.espirit.firstspirit.agency.UserStatisticsAgent) 2018-07
FirstSpirit Access API: getLostAndFoundStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) 2018-10
FirstSpirit Access API: getDeletedStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) 2018-10
FirstSpirit Access API: de.espirit.firstspirit.access.store.Previewable 2019-01
WebSphere Application Server support for FirstSpirit 2019-05
FirstSpirit Access API: redirectTemplateLogToDefaultLog() (Interface RenderingAgent.Renderer) 2021-05
Omnichannel Manager 2.x 2025-01