Release Notes
1 Administration
Support for Local Network Access (LNA) in ContentCreator
Chromium-based browsers (Chrome, Edge from version 142) block requests from public web applications to private or internal network addresses (Local Network Access) by default. This also affects the embedded preview in the ContentCreator, as explicit permission is required for embedded frames.
In certain cases, such connections to the local network may be explicitly desired, for example, to be able to communicate with an internal company portal.
With the new server property webedit.preview.allowLocalNetworkAccess in the fs-server.conf, a comma-separated list of hostnames can be configured for which access to the local network from the preview is allowed. However, it should be noted that there are additional requirements for the use of such network connections, which can be found, among other places, in the specification.
Similar to the already existing property allowedRedirectHosts, wildcards can also be used here for the definition. Example:
webedit.preview.allowLocalNetworkAccess=*.example.com,localhost2 FirstSpirit Content Experience Tools (CXT)
Latest module versions
FirstSpirit 2026.7 supports the following module versions for FirstSpirit Content Experience Tools.
| Module / file name | Version number |
FirstSpirit CXT Plattformplatform-[version].fsm | 8.0.4 |
FirstSpirit Media DAPmediadap-[version].fsm | 2.0.1 |
FirstSpirit PageRef DAPpageref-[version].fsm | 2.0.1 |
FirstSpirit Image Assistantimagerecognition-module-[version].fsm | 1.1.3 |
FirstSpirit Analyze AsisstantFirstSpirit-AiAnalyze-[version].fsm | 2.0.2 |
Template Development MicroAppfs-sitedev-microapp-[version].fsm | 1.0.3 |
FirstSpirit Multisite Managementfs-multisite-[version].fsm | 2.1.2 |
FirstSpirit Collaboration (Beta)fs-collaboration-[version].fsm | 1.1.4 |
3 FirstSpirit REST API
FirstSpirit REST API - Open beta phase
With the FirstSpirit version 2026.7, the new feature "FirstSpirit REST API" enters a open beta phase.
For further information, see the Crownpeak Support Portal.
4 Module Development, Scripts, API
JSpecify annotations for nullability in the Access API
From this release, the FirstSpirit Access API additionally uses JSpecify annotations for nullability information. The JSpecify library is defined as a dependency by the artifact fs-isolated-runtime.jar and is thus automatically available to module developers. For new nullability annotations in your own code, the use of @Nullable and @NonNull is recommended.
Further information can be found in the documentation.
5 Module: Multisite Management
New API for Bundling Strategies in MSM
It is now possible to implement and use custom bundling strategies. To do this, the BundlingStrategy interface must be implemented and declared as @PublicComponent in a FirstSpirit module — the Multisite Management automatically recognizes and loads external strategies.
The existing built-in strategies remain available, and current bundle settings will be migrated automatically.
Additionally, the reference view now unconditionally displays all outgoing references.
6 Remote Data
Import/export of remote schema properties
Schemas imported from a remote project now retain their link to the remote source after transport via ContentTransport or external synchronization.
Prerequisites:
- The remote project exists on the target server or can be assigned via GID.
- The target layer is configured as read-only and no-schema-sync.
- The remote schema is not yet integrated into the target project — multiple integrations are not possible.
7 Language-dependent user persmissions
Language-dependent user permissions
A new feature has been introduced to restrict editing permissions based on the project languages.
Project administrators can now specify in the ServerManager which user groups are allowed to edit which languages.
In ContentCreator, input components for which the user does not have language permission are automatically displayed as read-only; a corresponding notice is shown in the form dialog.
Overview
| ID | Description | Categories |
|---|---|---|
| CORE-16760 | When logging out of the ContentCreator and then logging in with a different user account in the same browser window, the previous session was mistakenly used for MicroApp actions. |
FirstSpirit Content Experience Tools (CXT), Sessions |
| CORE-17379 | When importing via Feature-Transport or ExternalSync, previously deleted sections and bodies are now correctly mapped to their original IDs, preventing duplicate GIDs for newly created sections with the same name. |
Content Transport, External synchronization |
| CORE-17401 | JSpecify annotations for nullability in the Access API |
FirstSpirit API |
| CORE-17566 | Multisite Management now supports custom bundling strategies via API. |
Multisite Management |
| CORE-17625 | FirstSpirit now supports the import and export of remote schema properties via ExternalSync or ContentTransport, ensuring that the linkage to remote data is maintained during transport operations. |
Content Transport, External synchronization, Remote Data |
| CORE-17656 | When assembling the bundle content, explicitly added elements are now correctly processed, even if they were previously already indirectly captured through outgoing references of other bundle elements. |
Multisite Management |
| CORE-17787 | A problem with time-limited archiving has been fixed: If archiving makes no progress due to a time limit, it will now continue archiving until the next savable continuation point. |
Archiving |
| CORE-17855 | The method IDProvider#moveChild now correctly sets the start node of the target folder even if it is locked during the move operation. |
FirstSpirit API |
| CORE-17863 | The behavior of the URL registry with deleted elements has been improved. Reserved paths (preview URLs) and stored URLs of deleted elements are no longer considered in URL conflict resolution within the URL registry, so new elements do not receive unnecessary numbered suffixes when an element is deleted and a new one with the same name is created. |
Advanced URL |
| CORE-17873 | When using the FOP module on an Apache Tomcat server, error messages such as "factory already defined" occurred. |
Modules |
| CORE-17877 | The JRE supplied with the FirstSpirit Launcher has been updated to version 21. |
Launcher |
| CORE-17925 | The project export no longer fails when symlink targets are unreachable or other filesystem access errors occur in the FirstSpirit server directory. |
Project export / import |
| CORE-17931 | Editing permissions can now be restricted per user group based on project languages. |
Language-dependent user permissions |
| CORE-17937 | The new method Connection#matchesTicket(String) in the FS Access API provides the ability to verify whether the passed login ticket belongs to the current connection. |
FirstSpirit API |
| CORE-17970 | Resource conflicts between modules on the server scope are now detected and displayed both as a warning in the server log and in the ServerManager under "Resource Issues". |
Modules, Server Administrator |
| CORE-17983 | A display issue with outdated remote schema information in the SiteArchitect has been fixed. |
Remote Data |
| CORE-17985 | FirstSpirit Content Experience Tools: Latest module versions |
FirstSpirit Content Experience Tools (CXT) |
| CORE-17990 | The return value of the API method IDProvider#getReleaseStatus(Language) has been adjusted. If none of the provided languages have a release revision, the method now returns |
FirstSpirit API, Language-dependent Release |
| CORE-17994 | A problem with the language-dependent release of datasets using BasicWorkflows has been resolved. |
Language-dependent Release |
| CORE-18005 | The current version of the FirstSpirit Launcher (1.3.0) now offers native support for Apple Silicon processors. |
Launcher |
| CORE-18036 | Open beta phase for the new feature "FirstSpirit REST API" |
FirstSpirit REST API |
| CXT-3705 | The ContentCreator now supports Local Network Access (LNA) in preview. Access to internal network addresses can be configured for selected hostnames. |
ContentCreator, Server Administrator |
| CXT-3776 | In ContentCreator, the element status area and menus have been adapted to the new look. |
ContentCreator |
| CXT-3782 | Updating the NPM dependencies to the latest versions, specifically TypeScript 5.7.2 → 6.0.3. |
ContentCreator, Integrated software |
| CXT-3796 | General validation notices of the |
ContentCreator, Dynamic Forms |
| CXT-3797 | When using MicroApps, a state could be reached in which connections to FirstSpirit could no longer be terminated. |
FirstSpirit Content Experience Tools (CXT) |
| CXT-3802 | When maintaining SEO URLs, outdated URLs were displayed when repeatedly editing individual entries. |
ContentCreator |
| CXT-3810 | In OCM 3.0, there was an issue with detecting the drop zones after a change in the visibility or size of the navigation area. |
FirstSpirit Omnichannel Manager |
Deprecations
| Functionality | Deprecated as of | Will be removed / Was removed as of |
|---|---|---|
| Input component CMS_INPUT_CONTENTAREALIST | 5.2R3 | |
| Input component CMS_INPUT_CONTENTLIST | 5.2R3 | |
| Input component CMS_INPUT_FILE | 5.2R3 | |
| Input component CMS_INPUT_LINKLIST | 5.2R3 | |
| Input component CMS_INPUT_OBJECTCHOOSER | 5.2R3 | |
| Input component CMS_INPUT_PAGEREF | 5.2R3 | |
| Input component CMS_INPUT_PICTURE | 5.2R3 | |
| Input component CMS_INPUT_TABLIST | 5.2R3 | |
| FirstSpirit Access API: de.espirit.firstspirit.agency.GroupsAgent | 5.2R15 | |
| FirstSpirit Access API: delete (de.espirit.firstspirit.access.AccessUtil) | 5.2R18 | |
| FirstSpirit Access API: release (de.espirit.firstspirit.access.AccessUtil) | 2018-06 | |
| FirstSpirit Access API: getLastLoginAsDate (de.espirit.firstspirit.agency.UserStatisticsAgent) | 2018-07 | |
| FirstSpirit Access API: getLostAndFoundStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) | 2018-10 | |
| FirstSpirit Access API: getDeletedStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) | 2018-10 | |
| FirstSpirit Access API: de.espirit.firstspirit.access.store.Previewable | 2019-01 | |
| WebSphere Application Server support for FirstSpirit | 2019-05 | |
| FirstSpirit Access API: redirectTemplateLogToDefaultLog() (Interface RenderingAgent.Renderer) | 2021-05 | |
| Omnichannel Manager 2.x | 2025-01 |