2026-10-16

Admin

• Added a new unified resource management experience for sites, groups, workflows, cases, roles, videowalls, alerts, and IO records
• Introduced searchable, paginated management tables with CSV export, cloning, status toggles, editing, and delete actions across supported resources
• Expanded admin controls for workflows, alerts, videowalls, and role management with configurable fields and operational settings
• Improved session reliability with automatic access token refresh to reduce unexpected logouts and interrupted workflows
• Enhanced authentication handling to seamlessly restore expired sessions when possible
• Improved account sign-out behavior to fully clear active sessions
• Improved user profile retrieval and related account management flows
• Updated Gravatar handling to better support missing or normalized email addresses
• Changed the default local development server port from 4200 to 4201

Hub API

• Added authenticated playback and livestream access reporting endpoints to improve audit visibility for media viewing activity
• Expanded audit tracking across account management, evidence handling, workflows, billing, site administration, and other operator actions with more accurate before/after change details
• Improved audit search with support for human-readable action matching and richer recording metadata such as device names and timestamps
• Updated face redaction APIs with clearer endpoint paths, stricter validation, and more reliable redaction job submission handling
• Improved reliability of redaction processing by confirming queue dispatch success before reporting completion
• Added compatibility support for legacy channel and ownership data without requiring database migrations
• Improved accuracy of site, floor-plan, placement, case, label, and organisation change tracking by excluding unchanged fields and no-op updates
• Added in-memory heartbeat credential caching to reduce repeated verification overhead and improve API responsiveness for connected agents
• Strengthened handling of registration and activation flows with improved audit coverage and safer logging behavior

Hub Workflows

• Added support for triggering workflows based on device system tags, enabling targeted rollouts and pilot workflows across devices
• Improved workflow matching so device system tags are resolved only when needed, reducing unnecessary processing overhead
• Workflow runs now retain resolved device system tags throughout execution, ensuring consistent stage behavior without repeated lookups
• Added safeguards for system tag handling, including strict tag validation and fail-closed behavior when tag resolution is unavailable
• Enhanced conditional workflow stages to support decisions based on device system tags across the full lifecycle of a run

Hub Objecttracking

• Added end-to-end trace context propagation across object tracking workflows for improved request continuity between pipeline stages
• Improved reliability of object tracking processing by preserving workflow execution even when trace continuation encounters issues
• Enhanced workflow message handling to maintain trace-aware processing throughout analysis and result delivery

Hub ANPR

• Improved overall security and stability through updates to the application runtime and underlying components
• Reduced known vulnerabilities in the service container image and dependencies
• Enhanced platform compatibility and reliability with an updated Linux base environment

Hub Loitering

• Improved internal reliability and service stability through backend infrastructure updates

Hub Frontend

• Improved video wall setup with clearer permission summaries, better draft layout persistence, and easier-to-use link expiry controls
• Enhanced recording timeline previews to accurately reflect recording gaps and preserve original video proportions in hover thumbnails
• Expanded audit event details with clearer field-change history, richer recording labels, and direct “Open recording” links when available
• Added smoother and more responsive timeline navigation, including animated zooming, multi-range export selections, and improved selection visibility
• Improved context filtering with support for direct device selection, server-side search, and simpler filter clearing
• Recording timelines now automatically resize to fit selected devices while keeping layouts compact when fewer devices are shown
• Added optional Day Overview feature flag and new vertical context timeline layout option for media views
• Improved playback and livestream access auditing for authenticated sessions, including more accurate tracking of recording playback and stream access events

Pipeline Event

• Improved container security and runtime hardening with a minimal non-root deployment image
• Enhanced platform reliability and security through updated queue handling components and vulnerability fixes

Pipeline Monitor

• Improved handling of processing result events to avoid counting them against upload limits
• Result events now bypass entitlement and activity processing while still preserving source ownership information for downstream workflows
• Enhanced forwarding behavior for metadata-related events to improve reliability of media processing pipelines

Pipeline Sequence

• Added support for persisting generated thumbnail and sprite processing results to media records
• Improved reliability of processing result handling with validation and automatic retries when source media is not yet available
• Enhanced distributed tracing compatibility using standard OpenTelemetry trace propagation across pipeline events

Pipeline Throttler

• No customer-facing changes in this release; updates focused on internal maintenance and release process improvements.

Pipeline Notification

• Internal reliability improvements to message queue handling and notification delivery stability

Pipeline Analysis

• Added an optional in-memory cache for site vault lookups to reduce repeated database queries and improve performance on high-traffic device operations
• Added configurable cache expiration controls for site vault lookup caching
• Made the dominantcolor analysis stage opt-in, allowing deployments to enable it only when the corresponding processing consumer is available

Pipeline Dominantcolors

• No customer-facing changes in this release; update includes internal reliability and maintenance improvements.

Pipeline Thumbnail

• Added Vault processing mode for thumbnail jobs, including direct source retrieval, artifact upload, and completion callbacks
• Improved thumbnail generation performance by using keyframe-only frame extraction by default
• Added a new option to disable keyframe-only extraction when exact frame selection is required
• Added configurable RabbitMQ prefetch limits to better control concurrent job processing and throughput

Pipeline Counting

• Internal maintenance update to improve background queue processing stability and reliability with no expected user-facing changes

Pipeline Sprite

• Added support for Vault-based sprite processing workflows, including direct job retrieval, artifact upload, and completion reporting
• Improved compatibility with Vault processing events by automatically selecting the correct processing mode from incoming pipeline messages
• Expanded sprite metadata reporting with tile layout details such as row count, frame count, and frame interval
• Added configurable RabbitMQ consumer prefetch limits to help tune throughput and processing concurrency under load

Pipeline Export

• Improved background queue handling and messaging reliability to support more stable pipeline exports

Pipeline Redaction

• Added support for bounded MP4 stream processing to reduce disk usage during redaction workflows
• New deployment options allow streaming mode to be enabled or rolled back independently for safer production rollout
• Improved workflow reliability and diagnostics by preserving trace context across redaction pipeline stages

Vault

• Added per-account recording pipeline configuration, allowing separate cloud and edge processing assignments with customizable sequential or fanout workflows
• Introduced direct local processing support for thumbnail and sprite generation with secure worker callbacks, retry handling, and independent delivery lanes
• Added a live object browser for supported storage providers, including paginated browsing of files, metadata, and nested objects directly from the UI
• Added daily storage usage history charts and API access for long-term provider usage tracking across 7, 30, 90, and 365 day periods
• Improved account and integration validation with clearer API errors and stronger protection against invalid or conflicting pipeline assignments
• Added the ability to purge active Outbox deliveries for a specific integration queue without removing recordings or delivery history
• Improved integration connection handling to better clean up active queue connections when integrations are removed
• Updated authentication internals to use maintained JWT libraries while preserving existing login and token refresh behavior for clients

Factory

• Improved configuration reliability in Kubernetes environments so Settings and the agent editor consistently use the latest saved global configuration, including timezone settings after restarts
• Fixed timezone inheritance behavior so global timezones apply correctly across agents while allowing per-agent overrides to take precedence
• Updated mobile navigation with a responsive sidebar, bottom navigation toggle, and improved layout behavior on smaller screens
• Improved sidebar usability with sticky desktop navigation, scrollable menus, and a streamlined profile/logout section
• Fixed navigation links so management pages open correctly from nested routes
• Improved persistence verification for Kerberos Hub and Kerberos Vault integrations with clearer validation errors and more reliable credential checks
• Reduced exposure of sensitive credentials in persistence verification responses
• Fixed an issue where log streaming sessions could remain active after a pod was deleted or became unavailable

Learn

• Added a complete step-by-step guide for building external workflow stages, including workflow setup, RabbitMQ delivery, callback handling, and access token configuration
• Introduced new security documentation with production-focused container image hardening and deployment best practices
• Clarified that dominant color analysis is an optional pipeline stage that can be enabled separately without affecting the rest of the processing flow
• Updated workflow tutorials to better support running external workers outside the Hub cluster, including links to the end-to-end person detection exercise
• Added new illustrated documentation screenshots covering workflow design, trigger setup, forwarder configuration, and access token creation

Helm Charts

• Added support for system-tag-based global workflows, allowing workflows to target specific devices across organisations using administrator-defined device tags
• Added configurable CORS allowlists for the Hub API to support additional frontend or integration origins
• Added a frontend feature flag for the Day Overview page and navigation menu
• Added optional deployment support for the dominant color analysis stage
• Added configurable OpenTelemetry trace sampling settings for improved control over telemetry volume
• Added in-memory database caching options for the analysis pipeline to improve lookup performance
• Added configurable RabbitMQ prefetch counts for thumbnail and sprite processing services to help tune workload throughput and resource usage