Version 6.6.3748 dated 30.01.2026

Release information

Parameter	Value
Version	6.6.3748
Date	30.01.2026
Commit	c81cadb49

⚠️ Changes for Enterprise clients

Due to the migration from Spring Boot 2 to Spring Boot 3, the following is required to install the new version:

Change environment variables

1. PATH

# Было (Java 11)
/usr/local/openjdk-11/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

# Стало (Java 21)
/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

2. JWTSECRET

The new version requires stricter key validation. Tokens are signed with the HS512 algorithm, which requires a key no shorter than 512 bits — a minimum of 64 characters. With a short key, the application will reject user login with an error WeakKeyException in the logs.

Length check:

echo -n "$JWTSECRET" | wc -c   # должно быть ≥ 64

Generating a new key (if the current one is short):

openssl rand -base64 64 | tr -dc 'a-zA-Z0-9' | head -c64

Update Checklist

• Update PATH (if explicitly set)
• Verify JWTSECRET length (≥64 characters)

Rollback

To roll back to the previous version — contact support.

✨ New features

• AI prompt management has been added to the administrator settings: you can now centrally configure which prompts and scenarios the AI assistant uses within the company.
• Registry export has been added: you can now export registry data for analysis, reporting, or migration to other systems.
• Org structure transfer (orgchart transfer) has been implemented: it is now easier to transfer and update department structures between environments or versions.
• A new badge for DES models has been added to the modeler: they are now easier to distinguish from standard BPMN diagrams, and the required model type can be found faster.

🚀 Improvements

• The header in the registry tree has been updated, and an "expand/collapse all" button has been added. The tree is collapsed by default (unless saved settings exist), making it easier and more intuitive to work with large structures.
• The display of the org structure tree and levels has been improved: elements no longer "shift," filters work consistently, and the structure reads more stably.
• The process save window opens significantly faster, and its state is updated correctly, saving time when making frequent edits to process models.
• Data handling (JSON format) in the assignments calendar has been improved, making the planning and viewing of executor workloads more reliable.
• On marketing and reference pages (Help, BPMN elements, DES), call-to-action blocks have been optimized, and "skeletons" have been added during loading, making pages feel faster and better guiding users toward the desired action.
• Banners and UTM tags in the blog have been improved: transitions from articles are now better tracked, and useful user actions are higher.
• The optimizations page has been redesigned: new sections with problem indicators and real-world cases have been added, the structure, tabs, and glossary have been improved, making it easier to understand what process improvements are possible and how to apply them.
• Navigation and readability have been improved: tabs for optimizations and the glossary have been added, cards have been expanded, a two-column glossary has been implemented, a "Where to Start" block has been included, and the "Back to Top" button has been placed in a more convenient location.
• Accessibility and SEO for reference materials (HowTo and FAQ) have been improved: it is easier for users to find answers via search and navigate the documentation.
• A "skeleton" for the current plan block has been added to the pricing interface, making the page look neater during loading.

🔧 Fixes

• Improved access handling for shared diagrams: unauthorized users no longer receive excessive permissions, and system responses for access denial are now more accurate.
• Fixed errors during import by category and corrected the file name during export — data operations are now more stable and user-friendly.
• Refined validation and checks when creating an administrator and saving processes: the save button is disabled when errors occur, and invalid data is caught before being written.
• Removed the deprecated payment provider, added checks for recurring payments, and fixed errors related to payment type — payment and subscription renewal now work more reliably.
• Fixed issues with the display of DES cards, icons, and tab bottom borders, as well as minor visual flaws — the interface now looks cleaner and more predictable.
• Eliminated stuttering and "jumps" when scrolling articles, as well as redundant or duplicate search fields — reading materials and finding information is now more comfortable.
• Fixed the search functionality for multiple authors in the deprecated method, along with a number of inaccuracies in filters and form data generation — search results and forms now behave as expected.
• Improved analytics compatibility and interface performance in Safari to ensure reports and pages open without failures.
• Hidden internal technical optimization codes and "free" mentions in certain buttons and texts — the interface is now cleaner and clearer for end users.

Disclaimer

This changelog was automatically generated using AI based on developer commits. Some of the described features may not be available in your configuration or may require additional licenses. For details, please refer to the documentation or contact support.

Docker image

docker pull cr.selcloud.ru/stormbpmn-enterprise/stormbpmn_fullstack_enterprise:6.6.3748

Image signature verification (Cosign)

All Docker images are cryptographically signed using Sigstore Cosign. To verify the authenticity of an image:

1. Install Cosign:

# macOS
brew install cosign

# Linux
curl -sSL https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64 -o /usr/local/bin/cosign
chmod +x /usr/local/bin/cosign

2. Verify the signature:

cosign verify \
  --certificate-identity-regexp="https://github.com/KotskinKotskin/stormfullstack/*" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
  cr.selcloud.ru/stormbpmn-enterprise/stormbpmn_fullstack_enterprise:6.6.3748

A successful verification guarantees that the image was built in the official CI/CD pipeline and has not been tampered with.