Skip to content

Drovio Server releases

Release history of Drovio Server and of the plugins that ship under the same version number. Entries marked Cloud apply to the hosted service only. Versions older than 3.5.0 are not covered here.

3.6.6

Released on 4 September 2026

  • Added The Microsoft Teams integration can now be set up from the administration panel. The app package is built there and published to your tenant catalog, as a new app or as an update, and the panel reports what the catalog already holds
  • Added The Teams integration can be turned off from the panel without uninstalling the plugin, and its launch and join URLs are editable there
  • Changed On the web client, the session layout adapts to a mobile screen
  • Changed SAML now runs on OpenSAML 5. The service provider metadata is rebuilt from your settings every time the server starts
  • Changed Vert.x has been updated to 4.5.33 along with other dependencies
  • Changed Teams: the app manifest follows schema 1.25 and declares its channel features, and the icons use the new Drovio logo
  • Fixed The join page failed when the browser sent no user agent
  • Security Local account passwords are now hashed with argon2id instead of SHA-512. Existing hashes are upgraded transparently the next time each user signs in, with no action needed from you or from them
  • Security Outlook: adm-zip, qs and uuid are pinned to versions free of the vulnerabilities the Office add-in tooling still pulls in

3.6.5

Released on 31 August 2026

  • Fixed Email templating failed intermittently when Drovio Server is clustered

3.6.4

Released on 31 August 2026

  • Added Web client experience has been rewritten from the ground up with a new session hub, color theming and multi-language support
  • Added New email code system to validate user emails before sign-ups, password reset and email change
  • Changed Vert.x has been updated to 4.5.32, along with other dependencies
  • Changed Every page except the administration panel has been reshaped
  • Changed Cloud: the upcoming dashboard rework is announced in the interface
  • Fixed Several web client issues, including microphone and camera device selection and no sound on Safari
  • Fixed The periodic anonymization still had some impact on the database

3.6.3

Released on 13 August 2026

  • Removed The ws_session_timeout and ws_reply_timeout settings have been removed
  • Fixed The periodic anonymization still had an important impact on the database
  • Fixed License renegotiation made contacts go offline

3.6.2

Released on 7 August 2026

  • Added The Redis TLS settings are now editable from the administration panel, and the settings it does not manage are no longer reset
  • Added Sessions can now be transferred from one Redis store to another
  • Added The missing pool_recycle_timeout property has been added to the session store schema
  • Changed Bridged requests still awaiting a reply are reported before their timeout expires
  • Changed The SockJS connection closed messages are filtered out of the logs, they were too noisy
  • Fixed SSO authentication, both SAML and OIDC, failed when Drovio Server is clustered or uses the Redis session store
  • Fixed Cloud: SSO did not work when signing in on the web portal. The Drovio app was not affected
  • Fixed Cloud: the profile menu reported an error

3.6.1

Released on 30 July 2026

  • Added The TLS settings of the Redis session store are now configurable
  • Fixed Access to the Redis session store was denied
  • Fixed The administrator was denied when their password held a special character
  • Fixed The database ssl_mode value require was rejected, as the schema expected required
  • Fixed The packaged default administrator was merged into the deployed configuration
  • Fixed An unchanged Hazelcast configuration was revalidated on every scan
  • Fixed Cloud: some emails were rejected when the name was blank

3.6.0

Released on 29 July 2026

  • Added LDAP authentication now handles referrals and applies connection timeouts and safety guards
  • Added An optional ca_certificate_path in the LDAP settings, to trust the certificate of a directory reached over LDAPS
  • Added Support for RHEL 10
  • Changed Drovio Server now runs on Java 21
  • Changed arm64 packages are now built for Linux
  • Changed Docker: the images are now based on Debian 13
  • Changed Cloud: customers paying via purchase order can transfer the ownership of their team
  • Changed Cloud: the plan overview has been made less confusing for customers paying via purchase order
  • Removed Support for RHEL 8 has been dropped
  • Removed Support for Debian 12 has been dropped
  • Fixed Database performance during the anonymization process
  • Fixed Contact group management failed on PostgreSQL 16 and later
  • Fixed Signing in with a time-limited license was slow
  • Security An SQL injection in the statistics anonymization query has been fixed
  • Security LDAP authentication has been hardened and can now be configured over LDAPS

3.5.0

Released on 1 April 2026

This release renames and reorganizes most of the settings file. Your existing configuration is migrated automatically the first time the server starts, so there is nothing to edit by hand. Anything that writes settings.conf for you, a configuration management tool or a deployment script, has to be updated to the new names.

  • Added Read replicas can be declared under database.replicas, each with its own connection details and its own pool sizes
  • Added database.ssl_mode sets the TLS policy of the connection to PostgreSQL, from disable to verify-full, following PostgreSQL semantics. It defaults to prefer
  • Added Each database pool now has its own connect_timeout, for the main pool and for the licensing one
  • Added Support for RHEL 9 and Ubuntu 24.04
  • Added JVM optimization parameters for Hazelcast
  • Changed Drovio Server now runs on Java 17
  • Changed Vert.x has been updated to 4.5.25, along with other dependencies
  • Changed Five settings sections were renamed: http_server became http, db became database, mail became smtp, plugin_manager became plugin_management, and automatic_usage_report_generation became reporting
  • Changed Every authentication method now sits under users.auth, one section each for local, ldap, saml and oidc
  • Changed The user account management settings were renamed after what they actually do: auto_removal became remove_inactive, unvalidated_accounts became remove_unvalidated, and auto_license_allocation became license_allocation
  • Changed Database pool sizes and timeouts moved under database.pool_options, split between the main pool and the licensing pool. max_pool_size and nv_max_pool_size became pool_options.main.max_size and pool_options.licensing.max_size
  • Changed The Redis session store settings moved from http_server.sessions_store.config to http.session_store.redis
  • Changed Three SMTP settings are now spelled out like the others: startTLS, trustall and ownhostname became start_tls, trust_all and own_hostname
  • Changed The two call cleanup settings were grouped: clean_task_enabled and clean_task_frequency became calls.clean_task.enabled and calls.clean_task.frequency, and the same grouping applies to the low license count notification
  • Changed database.port is now a number instead of a string
  • Changed The removal of unvalidated accounts now has its own switch, left off by default. Once turned on, accounts are kept for 30 days and up to 50 are removed per run, against 30 before
  • Changed OpenID Connect custom parameters are now written as an object instead of a list
  • Changed Log archives are now named drovio-server-yyyy-mm-dd.log, following the switch to logback
  • Changed Correlation IDs in the logs have been reworked for logback
  • Changed Major internal rework
  • Removed database.driver_class is gone, the server no longer reaches PostgreSQL through a JDBC driver
  • Removed Support for CentOS 7 and Debian 10 (buster) has been dropped
  • Removed The logging.handlers setting has been removed
  • Fixed A number of deprecated APIs have been replaced