Release Notes

List of new features and improvements

Platform and OroCRM:

• Add logging of API request body. Add optional logging of API request bodies to aid debugging and auditing. [BAP-23341]
• Add support of "container.service_subscriber" DI tag for TWIG extensions. Allow Twig extensions to use the container.service_subscriber tag for better DI patterns. [BAP-23286]
• Rename "API Type (View)" field to "API" for OpenAPI specification management. Simplify OpenAPI configuration terminology by renaming “API Type (View)” to “API”. [BAP-23281]
• OAuth 2.0 authorization server metadata HTTP endpoints. Implement OAuth2 authorization‑server metadata endpoints to conform to modern OAuth tooling. [BAP-23273]
• Enable "meta" API filter for dictionaries. Allow dictionary APIs to use the meta filter for richer responses. [BAP-23261]
• Login shows misleading invalid credentials message for users without assigned organization business unit. Show a more accurate error for users missing organization/business‑unit assignment at login. [BAP-12161]

List of fixed issues

Platform and OroCRM:

• Decrease log level of aggregation time failure logs. Reduce log level for aggregation time failures to avoid noisy logs while keeping visibility. [BAP-23334]
• 500 on GET /admin/api/productprices when filtering by both price list and ID. Prevent HTTP 500 when /admin/api/productprices is filtered by both price list and ID. [BAP-23314]
• Sanitized database backup creation fails when entity has no backing table. Make sanitized backup creation robust to entities without physical tables. [BAP-23304]
• Custom reports and segment snapshots stop working after upgrade if they use filters by enums. Fix enum‑based filters so custom reports and segment snapshots continue to work after upgrade. [BAP-23277]
• oro_api_async_data keeps unnecessary outdated records. Add cleanup for outdated oro_api_async_data rows to avoid table bloat. [BAP-23228]
• Unexpected errors during install caused by DB requirements checks executed for read-only "reports" database connection. Avoid installation errors when DB checks run against read‑only “reports” connections. [BAP-22973]
• Validation errors on Clone Role page clear copied entity permissions. Preserve copied entity permissions on the Clone Role page even when validation fails. [BAP-14133]