New Features:

• Added Microsoft Fabric OneLake Connection with Output support. This connection can be used to send files to an Azure Data Lake Storage Gen2 (ADLS2) container.
• Added Input support for Azure Blob Storage connection.
• Added Databricks SQL Connection with Input support. This connection can query tables within Databricks.
• Added an MCP Client connection to access the tools of other MCP servers.
• Added new Browse and Branch Read MCP Tools for MQTT Connections. They can be enabled in the connection settings and are exposed through the MCP Server.
• Added ‘For Each’ and ‘While’ loop stages to Pipelines to iterate over each element in an array while preserving the original order.
• Removed the need to log in for each new tab. Login sessions are now persisted up to the configurable session timeout.
• Added support for creating Models from Connection Inputs and other sources. This allows quick creation of Models from SQL tables, for example.
• Added support for importing OPC UA Nodesets as Models.
• Added support for synchronizing configuration among high availability (HA) nodes. When a new node becomes the primary, the node will start with the last set of synchronized configuration.
• Added a new JSONata transform stage for querying and transforming JSON values. The former “Transform” stage has been renamed to “JavaScript,” and both the JavaScript and JSONata stages are now grouped under “Transform Stages.”
• Added a new Dashboard that provides a landing page for users when they log in offering an overview of the installed and configured components, the status of connections and pipelines, and quick visibility to the latest event log messages.
• Added drag and drop parameter support to the reference panel for Inputs and Instances.
• Added support for browsing the Namespaces while building a Smart Query stage, allowing users to convert visual interactions into stage configuration.
• Added audit logging for Project Sync actions.
• Transitioned all bulk actions to be properly recorded in a single log when logging is enabled.
• Enhanced the PostgreSQL Connection to support writing to partitioned tables.
• Added Keep-Alive support for SQL Connections with Change Data Capture (CDC) enabled.
• Enhanced the Breakup Stage to allow breaking up to a certain depth, no longer requiring multiple breakup stages to process hierarchy.
• Added the ability to copy/paste references in Instance Attributes and Pipeline Stages to speed up configuration.
• Added Connect and Session timeout settings when using SFTP. The default timeout for both is 30 seconds.
• Added support for clearing out Store-and-Forward files through the UI, allowing users to recover disk space.
• Added new “Pending Write Size” connection statistic that represents the size of pending store and forward writes.
• Added support for renaming Certificates after importing.
• Enhanced reference field for Instance attributes and Read and Read Merge stages to support advanced mode, allowing users to edit the reference details manually.
• Changed the Instance UI to move auto collapse advanced configuration like Templates and Initialization.
• Refreshed toast card styling and added dark mode support.
• Changed the Application Settings page layout to be more condensed and support collapse/expand.
• Standardized tooltip styling throughout the product to be left-aligned.
• Standardized tags to be sorted alphabetically throughout the product.
• Removed parameter summary from Inputs and Instances.

Fixes:

• Fixed an issue with Google Cloud Pub/Sub Store-and-Forward occasionally dropping messages during connection loss. Google Cloud Pub/Sub Connection now operates on an “at least once” standard. All messages will be sent and received at least once but may be sent more than once.
• Fixed an issue with the request timeout not being properly applied to the PI System AF SDK Agent.
• Fixed an issue where the PI System AF SDK Agent asset refresh thread could throw a null exception resulting in a log message.
• Fixed an issue where a value of quality Good No Data reflecting as ‘Failed’ in the input test reader to correctly reflect a ‘Success’ status.
• Fixed an issue that ignored the user-supplied name and email for commits made during Git backup.
• Fixed an issue that was causing a Smart Query with no results to produce an error instead of stopping without an error.
• Fixed an issue where Amazon Kinesis Data Streams and Amazon Data Firehose connections failed to complete Store-and-Forward writes after a connection loss.
• Fixed an issue where buffer flushes could bypass the max event queue count for Pipelines.
• Fixed and issue with Oracle Query and Change Data Capture (CDC) inputs having incorrect or missing data with some datatypes.
• Fixed an issue where high frequency events would be returned in the opposite order when viewing a historical replay or debug event.
• Fixed an issue causing Apache Parquet connections to be unable to process some Oracle CDC inputs.
• Fixed an issue causing Server Message Block (SMB) directory inputs to be excessively slow.
• Fixed an issue that caused the remote configuration client to generate a new client ID each time the application was restarted.
• Fixed an issue where Sparkplug Birth Certificate Metrics without timestamps would fail. Missing metric timestamps now fall back to the payload’s timestamp or to the Unix Epoch (January 1, 1970) if the payload timestamp is also missing.
• Fixed an issue with Sparkplug where group level subscriptions could cause timeout sending birth requests.
• Fixed an issue that would cause an unknown error when attempting to batch updates for the AWS IoT SiteWise API.
• Improved the error message on a read/write when missing a Snowflake Certificate.

Breaking Changes:

• Google Cloud Pub/Sub connections now operate on “at least once” logic, so messages may be sent more than once in connection loss scenarios to guarantee delivery.

Security Patch Updates:

Runtime:

• CVE-2025-48924: Defect that can cause stack overflow and crash when resolving classes.
• CVE-2024-52338: Deserialization flaw that could allow code execution when reading untrusted data.
• CVE-2025-55163: HTTP/2 processing issue that could enable denial of service.
• CVE-2025-24970: Defect that allows a crafted SSL packet to cause a native crash in SslHandler.
• CVE-2025-58056: Defect that permits HTTP request smuggling via incorrect parsing of chunk extensions.

Frontend:

• CVE-2025-7783: Weak randomness in form boundaries that could allow parameter pollution.
• CVE-2025-58751: Defect where files with names like those in the public directory are served bypassing access control.
• CVE-2025-58752: Defect that serves HTML files outside the intended directory, ignoring server.fs restrictions.
• CVE-2025-58754: Defect that allows a data: URL with a large payload to exhaust memory and crash the process.

Azure Blob Storage:

• CVE-2025-22227: Redirect handling flaw that could expose credentials.

Ignition Module:

• CVE-2024-30171: Timing side channel in TLS handshake that could leak information.
• CVE-2024-29857: Curve parameter validation issue that could cause denial of service.
• CVE-2023-33201: LDAP injection vulnerability during certificate validation.