4.5.1

Release notes for version 4.5.1 of the Rhize application.

Highlights:

• New workflow editor experience with associated workflow engine improvements (2-3x improvement under concurrent load) built on Restate 1.7
• Nested mutations
• Further support for generic OIDC providers
• Many Admin UI and BaaS console fixes
• Access to environment variables for workflow steps
• Event source configuration from Kubernetes environment
• Improvements to for alignment with the ISA-95 standard

Release date: 14 Oct 2026

Changes by service

The following sections document the changes this release brings to each service.

Admin

Add

• New workflow editor with enhanced editors and debugging support. To enable, set the feature flag APP_ENABLE_WORKFLOW_EDITOR in the environment variables. Requires enabling the new workflow engine.

Change

• Change Invocations log to include additional detail from Restate journals
• Change Material Class page to use generic versioned entity components
• Change Person page to use generic versioned entity components
• Change Operational Location Class page to use generic versioned entity components
• Change Physical Asset Class page to use generic versioned entity components
• Change Operational Location page to use generic versioned entity components
• Change Personnel Class page to use generic versioned entity components
• Change Equipment Class page to use generic versioned entity components

Fix

• Fix Equipment Asset Mapping tab not saving new mappings on tab change
• Fix validation of Person data
• Fix properties when creating another Operations Event Class version
• Fix cloning Work Master version
• Fix saving new Operation Location Class version
• Fix editing of Physical Asset Class hierarchy scope
• Fix Back to top navigation on master data pages left panel
• Fix Person page version create error handling
• Various minor improvements and fixes

Agent

Change

• Upgrade Restate SDK

BaaS

Add

• Support read-only replicas
• Enhance lambda requests to pass selection set info
• REST API to check caller permissions

Change

• Change default search tokenizer for date-time values from year to day
• Improve replication & indexing resilience to failure conditions
• Redirect to authentication provider instead of showing login prompt (support portal embedding)
• Remove duplicate permission checks for admin API

Fix

• Fix error on logout from console
• Fix generic OIDC compatibility for Ping Federate
• Fix validation of backup destination
• Fix validation of local export destination
• Fix error display for invalid schema input

ISA-95

Add

• Support for nested mutations
• Adds operationalLocationClassProperty Attribute to OperationalLocationProperty Type (and its inverse)
• Support for generic OIDC providers

Change / Fix

• Upgrade Restate SDK
• Change relationships between resource class properties and resource properties from 1-to-1 to 1-to-many. DATA MIGRATION REQUIRED

Portal

• New portal UI provides a gateway for accessing Rhize sites

Typescript host service

No changes. Releasing in step with other components.

Workflow

Add

• New workflow engine. To enable, deploy updated schema to change handler for createAndRunBPMN
• Support event source configuration from environment
• Access environment variables from workflow steps

Change

• Upgrade Restate SDK
• Fix createAndRunBPMNSync to always return id

Known issues

This release has the following known issues:

• Admin UI various issues with property editing
• Admin UI pagination issues on props pages

Compatibility

• Grafana: 11.6.0
• Keycloak: 26.4
• Prometheus: 3.7.3
• Restate: 1.7.0
• Redpanda: 25.2.10
• Redpanda Console: 3.2.2

Checksums

When you install, check the container images against these checksums:

## Admin
registry.gitlab.com/libremfg/frontend/libre-admin-ui:v4.5.1
sha256:126a2252baf4f1146cfd9e53e190c05f898184d7c4db2ab337560b5d38841d36

## BAAS
registry.gitlab.com/libremfg/baas:v4.5.1
sha256:9c19686e3359533049d886285f8df16a146faab077275087b7b8039f4aa594ea

## Libre Agent
registry.gitlab.com/libremfg/libre-agent:v4.5.1
sha256:4e692238ad654f6185178bf6bc76ce32f574c92ff1ec4c96f989afd7f74f9bba

## Libre Keycloak Theme
registry.gitlab.com/libremfg/frontend/libre-keycloak-theme:v4.5.1
sha256:77227d1804ba0bcfca5705930ff88031ed1bd8edb52b6f658f612b7330a94c6f

## ISA-95
registry.gitlab.com/libremfg/isa95:v4.5.1
sha256:c0d5a43c278d9df9d2bfd2ebae003f0a373a659276a762ddbf015f1136cf0cb2

## Rhize Portal
registry.gitlab.com/libremfg/rhize-portal:v4.5.1
sha256:49d18a8e141689030a176d1784a1434eff3000b0ea43578dc166abbc6df67071

## Typescript Host
registry.gitlab.com/libremfg/typescript-host-service:v4.5.1
sha256:374439cc8238bd38d305acc043f3a728a516c8308dfe1fa3b33b9b7ba8117eda

## Workflow
registry.gitlab.com/libremfg/workflow:v4.5.1
sha256:16b3e42c9c225490549bace90144ee4a28b76f0a485d4a1f165691bdedddff93

Download v4.5.1-checksums.txt

Upgrade

Upgrade to 4.4.1 requires the following:

-To enable the new workflow engine, the schema must be upgraded and the new workflow editor in Admin UI must be enabled through the APP_ENABLE_WORKFLOW_EDITOR feature flag environment variable.

• ⚠️ To deploy the updated schema but remain on the old workflow engine, you must modify the createAndRunBpmn endpoints in the schema to use the old workflow Restate function.
• Check if data migration is required for some ISA95 relationships, which have been updated to better align with the standard

Then follow the Upgrade instructions.