Core | Essentials | DAM (6.7)

Appearance

Core Engine Release 6.5 ​

September 2026

We upgraded! What's new? Learn more about new features, technical changes and solved bugs in 4App Core Engine.

Note on upgrading: If you skip a version when upgrading, check all release and patch notes in between for important information. They apply cumulative.
Note on individualization: If your 4ALLPORTAL is highly customized or if you installed individual apps, please contact your implementation partner before upgrading. We recommend checking your custom contents, especially layouts and object renderers, carefully after an upgrade.

Improvements ​

Streaming Downloads for ZIP Archives ​

ZIP archives containing multiple files are now streamed directly during compression, rather than being fully generated before download. This improves the handling of large download packages and reduces the risk of failed downloads due to expired processing sessions. Interrupted downloads can be started again.

Download Tracking ​

Download counters and usage history now record only completed downloads. Aborted or partial download requests are no longer counted.

Internal roles of type service and fourallportal_support are no longer available in the role type-ahead search. This applies to newly created or modified roles as well as after an index rebuild. Existing index entries for these role types are removed automatically during the version update.

Improved Accessibility for Keyboard Navigation and Screen Readers ​

We have further improved accessibility across the application to provide better keyboard navigation and screen reader support:

  • Popup focus handling: When opening a quick-edit popup for an object, focus is now set directly to the first interactive element within the popup content.
  • Screen reader support: Tabbable elements now provide more complete information to screen readers. Relevant ARIA attributes are also forwarded to the child elements that receive focus, improving how input components are identified and announced by screen readers.

Technical Changes & Admin Instructions ​

Download links now enforce stricter path validation to prevent files outside the designated download folder from being served. Missing archive or source files are now reported as server errors and logged for troubleshooting.
Please note: No action is required for existing valid download links.

Download Concurrency and Transfer Buffer Settings ​

Streamed downloads now use dedicated processing resources, improving behavior when many large downloads run in parallel.
Please note: Standard installations require no changes. Installations with high download concurrency or custom transfer buffer settings should review the relevant configuration.
Further information: Streamed Downloads: Concurrency and Memory Usage

Custom Error Message for Drop Actions ​

A dedicated label is now available for disallowed drop actions, for example due to missing permissions. This allows administrators to configure the corresponding error message separately from other action messages.

Solved Bugs ​

  • Fix full text search for hyphenated words: terms like e-mail or high-resolution now match again instead of returning no or unrelated results
  • Fix recurring JSON parse errors in the log events caused by corrupted server push comet messages
  • Fix the not working option to long drop an object to a module in the mega menu
  • Fix the context menu display in the role configuration
  • Fix full text search for hyphenated words: terms like e-mail or high-resolution now match again instead of returning no or unrelated results

Patch releases ​

Version 6.5.1 ​

Technical Changes & Admin Instructions ​

  • Roles of the types service and fourallportal_support are now excluded from the system comparison and are no longer transferred between systems

Solved Bugs ​

  • The compare step of the system comparison no longer fails when the source system supplies a role without a friendly name

Version 6.5.2 ​

  • The token based session registration (GET /api/session/tokens/register/{token} and GET /api/session/tokens/{token}) does not meet our security requirements and is now disabled, the endpoints answer with 404. A replacement is planned
    Integrations that still depend on them can re-enable the endpoints (more details)

Version 6.5.3 ​

  • Fix saved filter templates not being displayed for some users when adding filter templates.

Version 6.5.4 ​

  • Fix short system outages caused by many real-time connections closing at once

Version 6.5.5 ​

  • Fix options such as "Only apply if no value is set" not being selectable for fields in mass update
Request missing documentation