Please review our [[Upgrading_Obsidian|Upgrade Instructions]].

Read about our [[Planned_Releases|Planned Releases]].

Looking for old release notes? See [[Release_Notes_-_Older_Releases|Release Notes - Older Releases]].

<div class="toclimit-2">__TOC__</div>

== Obsidian 7.0.0 ==

To Be Released July 2026

=== Features / Enhancements ===

* '''OAuth 2.0 / OIDC Single Sign-On''' — Obsidian now supports OAuth 2.0 / OIDC SSO authentication via [[Authenticator#OAuthAuthenticator_(OIDC_SSO)|OAuthAuthenticator]]. Configure any OIDC-compliant identity provider (Keycloak, Microsoft Entra ID, Okta, Auth0, or Generic OIDC) as the login provider. See [[Advanced_Configuration#OAuth_/_OIDC_Authentication_Properties|OAuth/OIDC Authentication Properties]] for full configuration details.

* '''Bearer JWT authentication for the REST API''' — REST clients can now authenticate using a signed JWT access token in the ''Authorization: Bearer'' header. See [[Advanced_Configuration#OAuth_/_OIDC_Authentication_Properties|OAuth/OIDC Authentication Properties]] for configuration.

* '''Installer upgrade (IzPack 5)''' — Obsidian 7.0.0 ships an IzPack 5-based installer. GUI and headless installs behave as in Obsidian 6 for standard flows. Customers with saved Obsidian 6 automated install XML must run the migrate helper included in the download before headless install. See [[Upgrading_Obsidian#Migrating_saved_automated_install_XML_.28Obsidian_6_.E2.86.92_7.29|Upgrading Obsidian]].

* '''Embedded Tomcat quick start''' — Jetty quick-start pack removed; evaluation and local runs now use Apache Tomcat 10.1.x embedded runtime (Jakarta Servlet 5). The release zip includes '''h2-tomcat-quick-start.xml''' as a ready-to-use sample. Four installer deployment profiles are available: Obsidian WAR, Obsidian Embedded Tomcat JAR, Obsidian Standalone Admin WAR, and Obsidian Standalone Admin Embedded Tomcat JAR. See [[Installation_Guide#Deployment_options|Deployment options]] and [[Getting_Started#Starting_Obsidian_with_embedded_Tomcat|Starting embedded Tomcat]].

* '''Global parameter autocomplete and tooltips''' — While editing a job, typing ''{{'' in a parameter value opens suggestions for global parameter names (subject to visibility settings). On job view, hover over values containing ''Name'' to see resolved global values when your user's permissions allow. Administration screens for defining global parameters are unchanged. See [[Advanced_Configuration|Advanced Configuration]] for visibility settings.

* '''Install-time dependency resolution''' — The published installer download does not embed public open-source JARs. Libraries are fetched (or read from a pre-staged cache) when you run the installer. See [[Installation_Guide#Offline_or_restricted-network_install|Offline install]] for air-gapped preparation steps.

* '''Modular Groovy and Flexmark libraries''' — Obsidian no longer ships '''apache-groovy-all-4.0.24.jar''' or '''flexmark-util-0.62.2.jar''' uber archives. Scripting and UI documentation rendering use the modular JAR sets documented in [[Advanced_Configuration#Dependent_Libraries|Dependent Libraries]].

=== Removals ===

* '''Remember Me login option removed''' — The Remember Me checkbox and associated session-cookie mechanism have been removed. The ''USER_COOKIE'' table and ''allowRememberMe'' system parameter are removed automatically during the upgrade to 7.0.0; no operator action is required.

=== Bug Fixes ===

* '''User logout''' - Fixed an issue where users were not fully logged out in certain session states.
* '''Job edit screen accessible to users with no roles''' — Users with no assigned roles could previously access the job edit screen but not make changes; this has been corrected.
* '''Firefox UI icons''' — Fixed icons not rendering correctly in Firefox.

== Obsidian 6.4.0 ==
Released December 2025

=== Enhancements ===
* New [[Built-in_Jobs#Obsidian_Execution_Statistics_Job|Execution Statistics Job]] and built in [[Admin_Job_Stats|UI]] and [[Embedded_API#List_Stats|Embedded API]] and [[REST_Endpoints#GET_a_list_of_job_execution_statistics|REST API]]

=== Bug Fixes ===

* Fixed issue preventing [[Admin_Jobs#Deleting|job deletion]] when resubmissions of failed executions existed. Bug existed in UI and APIs.
* Fixed UI styling issue for [[Admin_Jobs#Deleting|job deletion]] where checkbox label did not appear.

== Obsidian 6.3.3 ==
Released November 2025

=== Enhancements ===
* [https://web.obsidianscheduler.com/obsidianapi/com/carfey/suite/security/LdapAuthenticator.html LDAPAuthenticator] supports configurable check user active override - com.carfey.suite.security.LdapAuthenticator.checkActiveAttribute
* [https://web.obsidianscheduler.com/obsidianapi/com/carfey/suite/security/LdapAuthenticator.html#isUserActive(javax.naming.directory.DirContext,java.lang.String) LDAPAuthenticator.isUserActive(DirContext,String)] visibility increased to protected to allow for functionality override in subclasses.

=== Bug Fixes ===

* Correct LdapAuthenticator case with delimited configuration where active check wasn't applied.
* [https://web.obsidianscheduler.com/obsidianapi/com/carfey/suite/security/LdapAuthenticator.html#isUserActive(javax.naming.directory.DirContext,java.lang.String) LDAPAuthenticator.isUserActive(DirContext,String)] javadoc added for isUserActive fully detailing the implementation.

== Obsidian 6.3.2 ==
Released October 2025

=== Enhancements ===
* Notification failures now trigger Dispatch category Error level event on first failure. For use in log alerts and Event Hooks.

=== Bug Fixes ===

* Notification failures no longer log on every failure reducing chatty failure logs.
* No-arg constructors added to multiple JSON serializable candidate POJOs missing them. Addresses GSON's workaround use of sun.misc.Unsafe.

== Obsidian 6.3.1 ==
Released August 2025

=== Bug Fixes ===

* Fix failure response codes on [[REST_Endpoints#GET_health_details_on_an_existing_scheduling_host|REST health endpoint]]
* Fix automatic upgrade issue from 6.1.0 to any of 6.2.0, 6.2.1, 6.3.0
* Fix auth issue when [[Admin_User_Management#Multi-Factor_Authentication_.28MFA.29|MFA]] is enabled that allows REST access when account has been locked out due to MFA not being setup. [[Contact_the_Obsidian_Scheduler_Team|Contact us]] if you need workaround details for earlier versions.
* Fix native auth issue that allows REST access when account has been flagged as inactive.

== Obsidian 6.3.0 ==
Released July 2025

=== Features / Enhancements ===

* Cron day of month expansion for [[Cron#Special_Character_Usage|day of week proximity]] using [[Cron#Examples|~]]
* Annotation based job and chain configuration [[Initializing_and_Restoring#Annotation_Initialization|initialization]]
* Health endpoint with details for Job Queuer and Job Spawner - [[REST_Endpoints#GET_health_details_on_an_existing_scheduling_host|REST API]] or Embedded API [https://web.obsidianscheduler.com/obsidianapi/com/carfey/ops/api/embedded/HostManager.html#getHealth(java.lang.String) by hostname] or [https://web.obsidianscheduler.com/obsidianapi/com/carfey/ops/api/embedded/HostManager.html#getHealth(long) by host id]
* JDBC URL construction from parts [[Advanced_Configuration#Database_Properties|host/port/databaseName/dbType/oracleSid]]

== Obsidian 6.2.1 ==
Released June 2025

=== Bug Fixes ===

* Certain recoveries greater than 24 hours using new day of month proximity patterns introduced in 6.2.0 would result in no jobs spawning.
* Migrations targeting 6.0.0 and greater that start earlier than 5.0.0 skip the 5.0.0 migration. Migrating to any 5.x version first and then to 6.0.0 or later works around this issue.

== Obsidian 6.2.0 ==
Released May 2025

=== Features / Enhancements ===

* Cron day of month expansion for [[Cron#Special_Character_Usage|day of week proximity]] using [[Cron#Examples|< > ≥ ≤]]
* Cron day of month expansion for [[Cron#Special_Character_Usage|weekday proximity]] using [[Cron#Examples|< > ≥ ≤]]
* [[Admin_Global_Parameters#Using_Global_Parameters_in_Jobs|Global Parameters]] reference in job edit page support mouseover/title display of actual value when permissions allow
* Host time displayed in [[Admin_Host_Status|hosts status]] in UI
* [[Admin_Job_Runtime_Preview|Runtime Preview]] optimizations for large date ranges in both UI and APIs.

=== Bug Fixes ===

* Combination of table prefix, sorting by clob column and Oracle metadata load failure no longer results in sql error. This occurred in the UI when viewing raw job history results and in API calls for job runtime results.

== Obsidian 6.1.1 ==
Released March 2025

=== Features / Enhancements ===

* [[Authenticator#Implementation_of_a_Custom_Authenticator|Authenticator]] supports optional <code>authenticateREST()</code> method.

=== Bug Fixes ===

* Native authentication REST logins do not apply 'last login' timestamps. Avoids noisy error that was appearing in logs.

== Obsidian 6.1.0 ==
Released March 2025

=== Features / Enhancements ===

* Native authentication now disables users after 4 invalid login attempts, either password or MFA code if applicable. Invalid attempts threshold is configurable.
* Native authentication last login datetime displayed on list user screen.
* Stronger licensing controls. Site and hardware licenses as of this version must be regenerated by Carfey Software and every 2 years. Contact us at licensing [[Image:atSymbol.png]] obsidianscheduler.com.

=== Bug Fixes ===

* Native authentication password complexity pattern properly created and no longer overwritten on restart.

== Obsidian 6.0.1 ==
Released February 2025

=== Features / Enhancements ===

* [[Built-in_Jobs#File_Archive_Job|File Archive Job]] and [[Built-in_Jobs#File_Scanner_Job|File Scanner Job]] both now support min/max file sizes and minimum age.

=== Bug Fixes ===

* Native authentication user updates now support long passwords.

== Obsidian 6.0.0 ==
Released December 27, 2024

=== Features / Enhancements ===

* Jakarta Servlet 5.0
** Servlet container for Web Admin must support Jakarta Servlet 5.0 (e.g. Tomcat 10, Jetty 11)
* [[Micronaut_Integration|Micronaut]] integration support
* [[Advanced_Configuration#Dependent_Libraries|Groovy 4]] support
* [[Advanced_Configuration#Properties.2FYaml_File|Yaml]] configuration support<ref>

If you are using automated installer files from previous releases, you will need to add an additional configuration item to choose between yaml and properties formats in UserInputPanel.0.
<pre>
<com.izforge.izpack.panels.UserInputPanel id="UserInputPanel.0">
<userInput>
......snip......
<entry key="config.format" value="yaml" />
OR
<entry key="config.format" value="properties" />
......snip......
</userInput>
</com.izforge.izpack.panels.UserInputPanel>
</pre></ref>
* Native authentication supports customizable [[Admin_Login#Password_Complexity|password complexity]] requirements
* XML support deprecated across the product including XML UI downloads, XML runner configurations and XML license leases.
** '''Starting January 1st 2027, XML license lease requests will stop being processed. All Obsidian instances running using internet-verified licenses (including licence key proxies) will be required to use release 6.0.0 or later as of January 1st 2027.'''
** Above noted XML support will be removed in the first Obsidian version released in 2027.
* License leases use JSON payloads.

== Obsidian 5.5.1 ==
Released December 16, 2024

=== Bug Fixes ===

* Admin only (no scheduler) UI no longer generates event hook errors while running nor during shutdown
* Quick start installer file no longer generates errors during installation
* A few small web UI enhancements

== Obsidian 5.5.0 ==
Released October 2024

=== Features / Enhancements ===

* Event Hooks management available in [[Admin_Host_Status#Event_Hook_Status|UI]], [[Embedded_API#Event_Hook_Resume_or_Pause|Embedded API]] and [[REST_Endpoints#POST_event_hook_pause_or_resume|REST API]].
* [[Installation_Guide#Additional_configuration_items|Installer]] supports custom add on configurations '''Potential breaking change to automated installer files.''' <ref>

If you are using automated installer files from previous releases, you will need to add a new section of xml as of Obsidian 5.5.0 to handle a new UserInputPanel. Immediately after the UserInputPanel.17 closing brace, add the following:
<pre>
<com.izforge.izpack.panels.UserInputPanel id="UserInputPanel.18">
<userInput>
<entry key="extra.log4j2.properties.1" value=""/>
<entry key="extra.log4j2.properties.2" value=""/>
<entry key="extra.log4j2.properties.3" value=""/>
<entry key="extra.log4j2.properties.4" value=""/>
<entry key="extra.log4j2.properties.5" value=""/>
<entry key="extra.log4j2.properties.6" value=""/>
<entry key="extra.log4j2.properties.7" value=""/>
<entry key="extra.log4j2.properties.8" value=""/>
<entry key="extra.log4j2.properties.9" value=""/>
<entry key="extra.log4j2.properties.10" value=""/>
<entry key="extra.log4j2.properties.11" value=""/>
<entry key="extra.log4j2.properties.12" value=""/>
<entry key="extra.log4j2.properties.13" value=""/>
<entry key="extra.log4j2.properties.14" value=""/>
<entry key="extra.log4j2.properties.15" value=""/>
<entry key="extra.log4j2.properties.16" value=""/>
<entry key="extra.log4j2.properties.17" value=""/>
<entry key="extra.log4j2.properties.18" value=""/>
<entry key="extra.log4j2.properties.19" value=""/>
<entry key="extra.log4j2.properties.20" value=""/>
<entry key="extra.carfey.properties.1" value=""/>
<entry key="extra.carfey.properties.2" value=""/>
<entry key="extra.carfey.properties.3" value=""/>
<entry key="extra.carfey.properties.4" value=""/>
<entry key="extra.carfey.properties.5" value=""/>
<entry key="extra.carfey.properties.6" value=""/>
<entry key="extra.carfey.properties.7" value=""/>
<entry key="extra.carfey.properties.8" value=""/>
<entry key="extra.carfey.properties.9" value=""/>
<entry key="extra.carfey.properties.11" value=""/>
<entry key="extra.carfey.properties.10" value=""/>
<entry key="extra.carfey.properties.12" value=""/>
<entry key="extra.carfey.properties.13" value=""/>
<entry key="extra.carfey.properties.14" value=""/>
<entry key="extra.carfey.properties.15" value=""/>
<entry key="extra.carfey.properties.16" value=""/>
<entry key="extra.carfey.properties.17" value=""/>
<entry key="extra.carfey.properties.18" value=""/>
<entry key="extra.carfey.properties.19" value=""/>
<entry key="extra.carfey.properties.20" value=""/>
</userInput>
</com.izforge.izpack.panels.UserInputPanel>
</pre>
</ref>

=== Bug Fixes ===

* Certain Cron expressions that fail to generate text descriptions no longer impact scheduling.
* Text database columns were previously restricted to maximum length of MySQL implementation. Corrected to validate length via DB implementation.

== Obsidian 5.4.0 ==
Released June 2024

=== Features / Enhancements ===

* Event Hooks available in [[Embedded_API#List_Event_Hooks|Embedded API]] and [[REST_Endpoints#GET_event_hooks|REST API]].
* [[Advanced_Configuration#Dependent_Libraries|GSON library]] upgrade to support Java 21

=== Bug Fixes ===

* Oracle identifier no longer too long when using prefixes.

== Obsidian 5.3.0 ==
Released March 2024

=== Features / Enhancements ===

* New [[Admin_Host_Status#Event_Hook_Status| Event Hooks Status]] available in the UI.

=== Bug Fixes ===

* Some improvements throughout the [[Admin_Web_Application_Guide|Admin Web Application]] for autofocus of fields.
* Additional classes and interfaces added to [https://web.obsidianscheduler.com/obsidianapi/ javadoc].
* Some cleanup in [https://web.obsidianscheduler.com/obsidianapi/ javadoc] documenation.

== Obsidian 5.2.1 ==
Released January 2024

=== Features / Enhancements ===

* [[Built-in_Jobs#Maintenance_Jobs|Maintenance Jobs]] are now scheduled by default in new installations. Can be disabled via [[Advanced_Configuration#Miscellaneous_Properties|Configuration]] property.
* New [[Event_Hooks#Standard_Output.2FError_Streams_Event_Hook | Standard Output/Error Streams Event Hook]].

=== Bug Fixes ===

* Schedule descriptions are now updated after edits are applied in all UI screens and APIs.

== Obsidian 5.2.0 ==
Released December 2023

=== Features / Enhancements ===

* [[Cron]] & [[Cron#Recurrence|Recur]] patterns along with any use of [[Admin_Schedule_Aliases|Schedule Aliases]] now support plain language description of the patterns throughout the [[Admin_Web_Application_Guide|UI]], visible while hovering patterns, and in [[REST_Endpoints|REST]] and [[Embedded_API|Embedded]] API responses.
* All screens supporting UI exports now support JSON ([[Admin_Job_Activity#Exporting_Results|Job Activity]], [[Admin_Jobs#Exporting_Results|Jobs]], [[Admin_Job_Runtime_Preview#Exporting_Results|Runtime Previews]], [[Admin_Job_Chains#Job_Chain_Listing|Job Chains]], [[Admin_Logs#Exporting_Results|Logs]], [[Admin_Notifications#Exporting_Results|Sent Notifications]], [[Admin_User_Management#Exporting_Results|Users]], [[Admin_Custom_Calendars#Calendar_Listing|Calendars]])
* All screens supporting UI exports and search criteria and/or inline filters now include any specified search criteria and filter text in Excel, XML and JSON downloads ([[Admin_Job_Activity#Exporting_Results|Job Activity]], [[Admin_Jobs#Exporting_Results|Jobs]], [[Admin_Job_Runtime_Preview#Exporting_Results|Runtime Previews]], [[Admin_Job_Chains#Job_Chain_Listing|Job Chains]], [[Admin_Logs#Exporting_Results|Logs]], [[Admin_Notifications#Exporting_Results|Sent Notifications]], [[Admin_User_Management#Exporting_Results|Users]])
* Support for [[Installation_Guide#Choosing_Email_Support|Jakarta EE mail]] '''Potential breaking change to automated installer files.''' <ref>

If you are using automated installer files from previous releases and had email configured, you will need to add a new section of xml as of Obsidian 5.2.0 to handle a new UserInputPanel. Immediately after the UserInputPanel.16 closing brace, add the following:
<pre>
<com.izforge.izpack.panels.UserInputPanel id="UserInputPanel.17">
<userInput>
<entry key="mail.type.selection" value="javax"/>
</userInput>
</com.izforge.izpack.panels.UserInputPanel>
</pre>
</ref>
* New [[Event_Hooks#REST_Endpoint_Event_Hook|REST Endpoint Event Hook]]
* [[Key_Server_Proxy|Key Server proxy]] artifact obtained via web download during installation

=== Bug Fixes ===

* Time picker buttons (hour, minute, AM/PM) in [[Admin_Job_Activity#Filtering|Job Activity filtering]] no longer change other elements of the selected time.
* Cron pattern with [[Cron#Special_Character_Usage|LW]] and any other non-L value in day position no longer also incorrectly evaluates to last day.

== Obsidian 5.1.1 ==
Released June 2023

=== Bug Fixes ===

* [[Authenticator|Native authentication]] no longer fails when user deletes are attempted from the UI.
* Built in maintenance job [[Built-in_Jobs#Job_History_Cleanup_Job|Job History Cleanup]] no longer leaves deletion candidate CHAIN SKIPPED records in the JOB_HISTORY table in rare circumstances.

== Obsidian 5.1.0 ==
Released April 2023

=== Features / Enhancements ===

* [[Admin_Schedule_Aliases#Schedule_Alias_Fragments|Schedule Aliases]] now support fragments for configuration-time substitutions.
* New convenience job [[Built-in_Jobs#Database_File_Export_Job|Database File Export Job]] for generating basic file extracts from database queries.
* New convenience job [[Built-in_Jobs#REST_Invocation_Job|REST Invocation Job]] for making simple REST calls and storing results.
* Performance improvements in job failure handling.

== Obsidian 5.0.4 ==
Released February 2022

=== Features / Enhancements ===
* Log4j2 2.17.1 as fix for [https://logging.apache.org/log4j/2.x/security.html#log4j-2.17.1 RCE vulnerability] where attackers can modify log4j configuration.
* Restore missing default log4j2 configuration in installation artifacts.

== Obsidian 5.0.3 ==
Released December 2021

=== Features / Enhancements ===
* Log4j2 2.17.0 as fix for [https://logging.apache.org/log4j/2.x/security.html#log4j-2.17.0 DOS vulnerability]
* Fix native login issue showing as inactive on some databases.

== Obsidian 5.0.2 ==
Released December 2021

=== Features / Enhancements ===
* Log4j2 2.16.0 as permanent fix for [https://logging.apache.org/log4j/2.x/security.html#log4j-2.16.0 RCE vulnerability]

== Obsidian 5.0.1 ==
Released December 2021

=== Features / Enhancements ===
* Log4j2 2.15.0 as fix for [https://logging.apache.org/log4j/2.x/security.html#log4j-2.15.0 RCE vulnerability]

=== Bug Fixes ===
* Fix sporadic native login issue on some databases.
* Formatting fix in quick installer file

== Obsidian 5.0.0 ==
Released August 2021.

=== Features / Enhancements ===
* Java 11 (minimum Java version)
* [[Admin_Schedule_Aliases|Schedule Aliases]] including support in [[REST_Endpoints#Schedule_Alias_Endpoints|REST API]] and [[Embedded_API#ScheduleAliasManager_API|Embedded API]]
* [[Admin_User_Management#Multi-Factor_Authentication_.28MFA.29|MFA Support]] for UI logins
* New [[Admin_User_Management#User_Rights|Author and Operator]] roles
* Convention-based role permissions by [[Admin_User_Management#Job_Folder_Rights|root job folder]] for Write, Author and Operator.<ref>
There is a possibility of a breaking change to Embedded or REST API use due to the need to change the [[Embedded_API#Enumerations|User Role enumeration]] from a Java enum to an enum-style class to support this feature. Bringing in the upgraded Obsidian library and compiling should reveal any such broken use of these enumerations. Needed changes should be minor and self-explanatory.</ref>
* Bundled Jetty 10.0.2
* Legacy Embedded API (from Obsidian 1.5) dropped
* Signal handler disabled by default. Enabled only via [[Advanced_Configuration#Miscellaneous_Properties|configuration]].
* Many [[Advanced_Configuration#Dependent_Libraries|library upgrades]].
* UI javascript library updates.

== Footnotes ==
<references/>

2026-01-21T21:55:50Z

Craig:

/* All CSS here will be loaded for users of the MonoBook skin */

/* MonoBook: left (namespace) tabs – green + Title Case */
#p-namespaces #ca-nstab-main a,
#p-namespaces #ca-talk a {
color: #008000 !important;
text-transform: capitalize;
}

/* Optional: keep “Discussion” from going red when the talk page doesn't exist */
#p-namespaces #ca-talk.new a,
#p-namespaces #ca-talk a.new {
color: #008000 !important;
}

#p-views a,
#p-cactions a {
color: #008000 !important;
text-transform: capitalize;
}