This version, released on the 22^nd July 2026, provides alignment with DSpace 9.3 tag with improvements and bug fixing.

Improvements to existing features

• Shared Workspace permissions have been corrected so that all members of a Collection’s Submitters group can view and manage every Workspace Item in that Collection, regardless of who created the item.
  The existing optional author/co-author behaviour controlled by sharedWorkspaceAuthorMetadataFields is preserved: when enabled, authors and co-authors can manage workspace items where they are listed, even if they are not submitters.
  Users who are neither Collection submitters nor eligible
• Several enhancements have been made to the APA citation export for different publication types - co-founded by HEP-VAUD
• Migrated the old SherpaRomeo API to Open Policy Finder API (dismissed in May 2026)
• Configured OpenPolicyFinderPolicy Step to Publications submission process
• Now Privacy Policy page is customized as CMS
• Improved Equipment entity configurations for discovery and metadata. Added new metadatafield crisequipment.decommission.date - co-founded by EuroCRIS
• Added support for CORE identifiers by introducing the identifier.core subtype and rendering it with the CORE icon (available when dc.identifier.coremetadata will be introduced)
• Improved Solr core export/import tooling to better handle large datasets and varied input files
• Added http://x.com links to the AuthorityLink rendering type
• Improved Jisc OpenPolicyFinder (OPF) integration: Added the OPF logo to Authority search results on the frontend and fixed a performance issue in OpenPolicyFinderService where execution was unnecessarily paused after the first request instead of only on failure
• The “Other Workspace Items” menu now appears to non-submitter users registered as Authors of an item in a collection flagged as Shared Workspace, with role-based action permissions preserved
• Updated the CollectionExportCli script to support a new -e parameter for specifying the DSpace user email. This resolves the IllegalArgumentException that occurred when running the collection export from CLI without a user context.
• Added a legend on top of the submission form that can be customized and disabled/enabled
• Added support for PreSignedURL for downloading bitstream to keep track of the download in the statistics
• Implemented new configurable system to reduce the number of requests to obtain user permissions. Integrated API endpoint to obtain multiple authorizations within a single request
• Implemented reCaptcha validation for feedback submission to prevent possible email sending from robots - donated by University of St. Gallen (HSG)
• Add control field 001 to MarcXML export in OAI
• Port improvements done on DSpace to the Audit system. See Audit Trail feature - DSpace 10.x Documentation - LYRASIS Wiki
• Added a configuration option to open bitstream download in new browser tabs.
•  

Bug fixes

• Fixed workflow configuration detection by removing reliance on workflow group naming and validating the actual assigned group instead - donated by kskaiser
• Fixes post-alignment issues
• Fixed an issue where ORCID authentication could return 401 errors after login.
• Fixed some bugs that were causing unnecessary error logs
• Fixed an issue happening while reloading an item page
• Fixes error during file upload whenever the workspaceitem doesn’t have a proper submitter
• Email VTL templates now support headers containing dash characters
• Fixed an issue where tag fields with active language and authority could fail to save manually entered values not returned by the vocabulary search due to an incorrect JSON patch
• Fixed login flow to properly handle exceptions and ensure contexts are always closed, preventing pending requests and resource leaks
• Adapted item statistics translation
• Fixed missing item statistics menu entry
• Fixed health endpoint returning empty JSON; it now correctly returns Actuator status
• Optimized bitstream retrieval by moving bundle-name filtering to a JPQL query at database level, reducing N+1 lookups when resolving item bitstreams in specific bundles
• Removed the unnecessary “Angular” label in the application title
• Disabled OAI cache by default
• Implemented manually an old bootstrap class.
  • WARNING: Bootstrap CSS classes older than v5 are not supported anymore. The only exception is in the font-weight-bold class, that is now DEPRECATED and will be removed in the next major release.
• Fixed tag search/browse rendering for special characters, failing to return results for terms containing the & symbol
• Fixed an issue with autoritylink rendering types not showing a default icon for external website links
• Fixed filter-media filling up disk space. The JPEGFilter now properly cleans up temporary files during processing, preventing disk exhaustion if the script stops unexpectedly. Additionally, JPEGFilter is disabled by default when ImageMagickImageThumbnailFilter is in use, avoiding redundant thumbnail generation and potential color issues
• Set transferState to false
• Improved statistic loading to avoid issue with missing data
• Aligned es, it, de translations
• Fixed error happening during statistics export as image on Firefox
• Fixed recurring issue caused by google api in unit tests
• Fixed an issue in DSpace CRIS 7 where requesting RDF graph serializations of resources via content negotiation (for example text/turtle) caused an internal server error
• Improved the ZDBAuthorityIT test configuration so that the ZDB mock works correctly for any page and page size, instead of only for page 0 with limit 10
• Fixed a bug where the new user and forgot password links repeated for each authentication button
• Fixed the machine tokens' expiration to ~20 years instead of 30 minutes
• Properly configured object-deletion scripts for CLI execution
• Removed animation on bitstream upload if the process is actually only in queue
• Fixed an issue about metadata rendering IDENTIFIER colliding with values that include the identifier URI already
• Fixed issue on search params reset
• Permitted JAVA_OPTS to override hardcoded properties inside the /bin/dspace executable
• Fixed lucky search redirect
• Fixes missing mappings for ORCID author provider
• Fixed the "In workflow since" label incorrectly appearing on archived items. It is now displayed only for items that are actually in a workflow state
• Fixed social sharing not working properly
• Fixes no items error during export from admin workflow
• Added info panel for Markdown syntax
• Fixed security vulnerability in ConfigurationRestRepository where configuration properties could be exposed without proper admin authorization checks
• Fixed an issue with search results page size changing when switching pages
• Forced uuid in url of item’s administrative pages to prevent issue with custom url
• Fixed an issue that caused PlumX tooltips to be hidden
• Improved the default end user agreement
• Fixed an issue with missing icons on authority-link rendering types
• Fixed global search wrong behaviour
• Improved statistics loading by splitting out requests into multiple sub-requests to load specific usagereport
• Fixed missing update on submission errors
• Fixed issue with link subrendering label
• Added support for links in value-pair
• Fixed issue with back button on workflow items
• Fixed the logout behaviour happening when trying to land on a restricted item that was opened in a logged-in tab inside another tab
• Improved memory handling for the update-metrics script and during internal metrics update

Breaking changes

Sherpa-Romeo Keys migration

• API key required. Register at Developers | Open policy finder and set in modules/external-providers.cfg.
• Update authority.cfg to use OpenPolicyFinderAuthority for journal lookups.
• Renamed all SHERPA-related classes, beans, and config IDs (sherpa.romeo.* → openpolicyfinder.*).
• No DB migration is needed—this is a purely API/config change.

Audit core configurations

1. Properties dspace/config/modules/audit.cfg

1. It's mandatory to update the Audit solr core by uploading the new configurations and by reloading the core.
   You should upload / move configuration to the proper audit/conf solr folder then force the reload of the core using the command:
   curl "http://{solrhost:port}/solr/admin/cores?action=RELOAD&core={audit-core-name}

Download: