We're pleased to announce the release of Fess 15.4.0.

This release brings support for OpenSearch 3.4, major new features for cloud storage integration, enhanced security, and numerous improvements across the platform.

🚀 Highlights

• OpenSearch 3.4 Support
  Fess is now compatible with OpenSearch 3.4, enabling use of the latest OpenSearch features and performance improvements.

• Cloud Storage Crawling (S3 & GCS)
  Added S3 and GCS protocol support for file crawling, allowing you to index documents directly from Amazon S3 and Google Cloud Storage buckets.

• Storage Abstraction Layer
  New storage abstraction layer with S3 and GCS support, providing flexible storage options for thumbnails and other generated files.

• API Rate Limiting
  Added configurable rate limiting for API requests to protect your Fess instance from excessive load.

• New Language Support
  Added support for Hindi, Indonesian, and Turkish languages.

🔧 Improvements

• Security Enhancements

  • Prevented ReDoS vulnerabilities and improved cookie security
  • Enhanced SSO implementations with security improvements
  • Improved Action classes with security enhancements

• SSO & Authentication

  • Renamed Azure AD to Microsoft Entra ID
  • Added configurable base URL for SSO authenticators
  • Added lazy loading for parent group lookup in EntraIdAuthenticator
  • Improved LDAP authentication error handling and resource management

• Thumbnail Generation

  • Improved thumbnail generation with ImageMagick v7 support and SVG handling

• Network

  • Added IPv6 address support for URL construction
  • Added proxy configuration support to startup scripts

• Code Quality

  • Improved thread safety in ProcessHelper and rank fusion implementation
  • Enhanced data store handling with thread safety and resource management
  • Improved exception handling and Throwable support
  • Modernized JavaScript implementations with ES5 compatibility
  • Added multilingual support to online help

• Developer Experience

  • Improved log message format and added logging guidelines
  • Added integration tests for Search API endpoints

We recommend upgrading to Fess 15.4.0 to take advantage of the latest OpenSearch support, cloud storage integration, and enhanced security features.

📜 Documentation
📦 Docker Image: GitHub Packages - codelibs/fess
💬 Community Forum: discuss.codelibs.org

Thank you for using Fess!

We’re releasing Fess 15.3.2, a minor update that resolves an HTML parsing issue caused by a library bug.

🛠 Fixes

• HTML Parsing Fix
  Fixed an issue where certain HTML documents could not be parsed correctly during crawling.
  This was addressed by updating and patching the nekohtml library to restore expected behavior.

We recommend updating to Fess 15.3.2 if you encountered issues with HTML parsing during crawl operations.

📜 Documentation
📦 Docker Image: GitHub Packages - codelibs/fess
💬 Community Forum: discuss.codelibs.org

Thank you for using Fess!

We’re releasing Fess 15.3.1, a patch update that includes a critical fix for differential crawling and updates to the latest OpenSearch dependencies.

🛠 Fixes and Improvements

• Fixed Differential Crawling Issue
  Renamed internal configuration files from "Elasticsearch" to "OpenSearch" to resolve an issue where differential crawling was not working as expected.
  (#2927)

• Updated OpenSearch Dependencies
  Updated OpenSearch and related plugins to their latest versions to ensure compatibility and improved performance.
  (#2928)

We recommend all users upgrade to Fess 15.3.1, especially if you rely on differential crawling or are using the latest version of OpenSearch.

📜 Documentation
📦 Docker Image: GitHub Packages - codelibs/fess
💬 Community Forum: discuss.codelibs.org

Thank you for using Fess!

We’re pleased to announce the release of Fess 15.3.0.

This release adds support for OpenSearch 3.3 and updates several core dependencies to improve compatibility with modern environments.

🚀 Highlights

• OpenSearch 3.3 Support
  Fess is now compatible with OpenSearch 3.3, enabling use of the latest OpenSearch features and performance improvements.

• Dependency Updates

  • Updated jcifs to a newer version for better SMB/CIFS protocol support in modern Java environments
  • Updated nekohtml and related libraries to improve HTML parsing stability and compatibility

These updates enhance system stability, security, and compatibility across different platforms and runtime environments.

We recommend upgrading to Fess 15.3.0 to take advantage of the latest OpenSearch support and improved dependency compatibility.

📜 Documentation
📦 Docker Image: GitHub Packages - codelibs/fess
💬 Community Forum: discuss.codelibs.org

Thank you for using Fess!

We’re pleased to announce the release of Fess 15.2.0.

This version adds compatibility with OpenSearch 3.2 and includes an update to the Azure AD authentication integration.

🚀 Highlights

• OpenSearch 3.2 Support
  Fess is now compatible with OpenSearch 3.2, ensuring smooth integration with the latest OpenSearch features and enhancements.

• Azure AD Authentication Update
  Migrated from the deprecated ADAL4J to MSAL4J for Azure Active Directory authentication.
  This update improves security, maintainability, and ensures continued support with Microsoft's modern authentication standards.

We recommend upgrading to Fess 15.2.0 if you're using Azure AD integration or planning to adopt OpenSearch 3.2.

📜 Documentation
📦 Docker Image: GitHub Packages - codelibs/fess
💬 Community Forum: discuss.codelibs.org

Thank you for using Fess!

We’re pleased to announce the release of Fess 15.1.0. This version adds support for OpenSearch 3.1 and includes several improvements in SSO handling, thumbnail processing, and crawling control.

🚀 Highlights

• OpenSearch 3.1 Support
  Fess is now compatible with OpenSearch 3.1, ensuring seamless integration with the latest APIs.
  (#2893)

🔧 Notable Improvements

• SSO Enhancements

  • Preserved and restored search parameters via cookies during SSO flow. (#2895)
  • Encoded search parameters in SSO redirect URLs. (#2900)
  • Refactored redirect logic in SsoAction and improved debug logging. (#2896)
  • Added null checks for IdP Single Logout Service URL. (#2909)

• Thumbnail Generation

  • Improved error handling and logging during thumbnail generation. (#2899, #2908)

• Crawling Control

  • Added support for excluding URLs from crawling using regular expressions. (#2906)
  • Updated URL exclusion logic to use full-pattern matching. (#2907)

• UI and Localization

  • Clarified label translations and added new localization files. (#2897)
  • Refined UI labels for improved consistency and clarity. (#2892)

We recommend upgrading to Fess 15.1.0 to benefit from the improved integration with OpenSearch 3.1 and the latest enhancements in crawling and authentication.

Thank you for using Fess!

Fess 15.0.0

We’re excited to announce the release of Fess 15.0.0, a major update that introduces support for OpenSearch 3.0 and brings numerous improvements across the system—from build optimization to UI enhancements and better cloud integration.

Highlights

• OpenSearch 3.0 Support
  Fess is now fully compatible with OpenSearch 3.0. This includes updated plugin support (opensearch-analysis-fess), API migrations, and refactored internal packages to reflect the OpenSearch transition.

• UI and UX Enhancements

  • Upgraded to Bootstrap 5.3, jQuery 3.7.1, and AdminLTE 3.2
  • Improved accessibility (ARIA references, labels, lang attribute on <html>)
  • Cleaner print view for search results
  • Updated index settings display for AWS/cloud compatibility

• Improved Configuration and Codebase

  • Added comments to fess_config.properties to improve readability
  • Removed deprecated code and obsolete admin upgrade paths
  • Refactored admin API HTTP methods to follow RESTful conventions
  • Cleaned up Maven warnings and suppressed unnecessary log output

• Crawler and Logging Improvements

  • Optimized search log queue and batch processing
  • Introduced URL crawl order configuration
  • Enhanced HTML link extraction with tag-based rules
  • Kryo serialization support for crawler temp data
  • Added logging improvements including exception detail inclusion

• Security and Integration

  • Introduced configurable response headers with HttpHeaderSecurityFilter
  • Added support for sAMAccountName in LDAP role mapping
  • Hardened request handling and improved serialization via DataSerializer

• Build & Test Environment Updates

  • Now builds against Java 21 and Tomcat 10.1
  • Updated GitHub Actions and test environments (e.g., macOS 14)

We recommend reviewing your current configuration and upgrading to Fess 15.0.0 to take full advantage of the OpenSearch 3.x series and modern Java ecosystem.

• Documentation
• Docker Image
• Forum
• Issue Tracker

Thank you for using Fess!

Fess 14.19.2

We’re releasing Fess 14.19.2, a minor update that includes security enhancements and improvements to file crawling behavior and cookie handling.

🔒 Security Fixes

• CVE-2025-48382: Fixed insecure temporary file permissions used during processing.
  This update improves file system security when handling temporary data on all platforms.

🔧 Improvements

• Controlled Recursion for File List Crawling
  Added depth control for recursive file list crawling to improve resource usage and prevent unexpected deep traversal.
  (#2878)

• Secure Cookie Refactoring
  Refactored cookie security logic by introducing isSecureCookie() for consistent handling of secure attributes.
  (#2880)

We recommend all users update to this version, especially those using file crawling features or deploying Fess in shared environments.

For more details, please visit the documentation or join the discussion on the community forum.

Thank you for using Fess!

We’re releasing Fess 14.19.1, a patch update that addresses a startup failure on Windows environments.

What’s Fixed

• Windows Startup Failure
  Resolved an issue where Fess failed to start on Windows due to a java.lang.IllegalAccessException.
  The fix adds the following JVM option to fess.in.bat:
  –add-opens=java.base/java.io=ALL-UNNAMED
  This ensures proper access to internal Java APIs required during Tomcat initialization on Java 17+.

This update is recommended for users running Fess on Windows with recent Java versions.

We welcome your feedback and contributions.
Join the discussion on the community forum.

Thank you for using Fess!

We are pleased to announce the release of Fess 14.19.0. This version adds support for OpenSearch 2.19 and includes improvements for better stability and maintainability.

Improvements:

• #2866: Prevent URL decoding of filenames for specific schemes.
• #2863: Add upper limits to Search Log and Click Log queue sizes.

As always, we appreciate the continued support and feedback from the community. Please feel free to share your thoughts through our forum.

Thank you for using Fess!