π‘οΈ Security: CVE Dependency Upgrades
This release batch-upgrades third-party libraries across all modules (server, client, donkey, CLI, manager, webadmin) to remediate known CVEs β including the netty upgrade addressing CVE-2026-44249, CVE-2026-45416, and CVE-2026-50010, and the log4j upgrade addressing CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, and CVE-2026-34480.
| Library | Before | After |
|---|---|---|
| log4j (api / core / 1.2-api / slf4j2-impl) | 2.25.3 | 2.25.4 |
| netty | 4.1.119.Final | 4.1.135.Final |
| jetty (core + ee8) | 12.0.32 | 12.0.33 |
| commons-io | 2.13.0 | 2.16.1 |
| commons-configuration2 | 2.10.1 | 2.12.0 |
| commons-fileupload | 1.5 | 1.6.0 |
| commons-compress | 1.24.0 | 1.26.0 |
| pdfbox / fontbox / xmpbox | 2.0.24 | 2.0.36 |
| postgresql (JDBC) | 42.7.10 | 42.7.11 |
- The log4j upgrade covers all four bundled family artifacts in lockstep; channel-context (MDC) field rendering and exception stack-trace output were verified unchanged on the new jars
- Rhino remains at 1.7.13 for JavaScript compatibility and stability
- xstream (1.4.20) and BouncyCastle (1.78.1) upgrades were evaluated and intentionally deferred to a future release after regression testing
Phone-Home Disabled
Server-side usage/registration reporting is now disabled. BridgeLink no longer attempts to send usage statistics to external endpoints.
ποΈ MySQL Table Case Migration
Older releases could create the message storage tables in lowercase on case-sensitive MySQL servers (lower_case_table_names=0, the Linux default), causing failures when the engine later referenced the uppercase names.
26.6.0 ships a schema migration that automatically renames the lowercase message storage tables to uppercase on first startup.
- Runs only on MySQL with
lower_case_table_names=0(Linux default); Windows (=1) and macOS (=2) installations are case-insensitive and are skipped - Skipped automatically when tables are already uppercase β no action required for healthy installations
- No serialized data changes; all other database types are unaffected
π New Feature: Channel Context in Server Logs
Server log lines can now be enriched with the channel context they were emitted from β channelId, channelName, metaDataId, connectorName, messageId, scriptPhase, and scriptLine β making multi-channel log triage dramatically easier.
- Opt-in: set
log.channelcontext.enabled=trueinmirth.properties(default:false, legacy log format preserved) - Context propagates through source/destination connectors, poll jobs, recovery tasks, and user script execution (fields render only when present)
log4j2.propertiesconsole and rolling-file patterns updated to include the new context fields
π Version History 3.0.2: Commit Limit
History views (Channel, Code Template, Global Scripts, Library) now support a configurable maximum number of commits to load, preventing slow loads and timeouts on repositories with long histories.
- New commit-limit selector in the history dialogs
- REST
getHistoryoperations accept an optionallimitquery parameter (default0= no limit)
π Message Trends 1.1.0
Time-series rollup windows are now replaced atomically using database upserts (MySQL, PostgreSQL, SQL Server, Oracle), preventing duplicate or stale aggregate rows when a rollup window is recalculated.
π§© New Feature: WebAdmin Plugin UI Endpoints
Core support for declarative, engine-served plugin UIs in the WebAdmin:
GET /extensions/_webadminβ JSON listing of every installed and enabled extension carrying awebadmin/webadmin.jsonmanifestGET /extensions/{extensionName}/webadmin/defaults/{transportName}β XML serialization of a connector's default properties- Both endpoints are read-only; manifest reads are canonical-path guarded against the extensions directory
- A sample extension demonstrating the contract is included
π Bug Fixes
- Source Queue: Fixed the "phantom stuck queue" state where a race during queue invalidation could leave the dashboard showing a permanent QUEUED count while the source-queue thread hot-spun on the database. The queue now self-heals by re-syncing its size from persistent storage and correcting the dashboard immediately
- Dynamic Lookup Gateway: Importing lookup groups with
cacheSize = 0no longer fails - Database bootstrap: Initial schema version in the database setup scripts corrected to 26.6.0
βοΈ Configuration File Changes
mirth.properties
| Key | Description |
|---|---|
log.channelcontext.enabled=false |
Opt-in channel-context enrichment of server log lines |
log4j2.properties
Console and rolling-file layout patterns now include the optional channel-context fields (channelId, channelName, metaDataId, connectorName, messageId, scriptPhase, scriptLine); they render only when channel-context logging is enabled.
Downloads
| OS | Arch | Download Link |
|---|---|---|
| x64 | Installer | |
| x64 | Zip | |
| x64 | RPM | |
| x64 | Tar.gz | |
| x64 | Installer | |
| ARM | Installer | |
| ARM | Tar.gz |
π New: BridgeLink WebAdmin
BridgeLink 26.6.0 introduces BridgeLink WebAdmin β a modern, browser-based administration console for the BridgeLink integration engine, and a replacement for the legacy Java Swing administrator. It runs as a lightweight Node.js server and requires no Java runtime and no per-workstation install: point any modern browser (Chrome, Edge, Firefox, or Safari) at it and log in with your existing BridgeLink credentials.
Key capabilities:
- Dashboard β live channel/connector status and message statistics
- Channels β browse, edit, deploy, and manage channels with the full channel editor
- Message Browser β search, inspect, and reprocess messages
- Events, Alerts, Users, Code Templates, Global Scripts, and server settings
- Dark mode, adjustable view density, and a built-in Monaco code editor
BridgeLink WebAdmin requires a BridgeLink server running 26.3.0 or newer. The legacy Java Swing administrator remains fully supported β both clients can be used against the same server, so you can adopt WebAdmin at your own pace.
Full documentation, Docker deployment (innovarhealthcare/bridgelink-webadmin), and source: github.com/Innovar-Healthcare/BridgeLink-WebAdmin
WebAdmin Downloads
| OS | Arch | Download Link |
|---|---|---|
| x64 | Installer | |
| x64 | Tar.gz |
Prefer Docker? docker pull innovarhealthcare/bridgelink-webadmin:latest