Changelog

4.3.7 November 6, 2026

Added:

  • Prometheus metrics endpoint on the Studio and Runtime REST actuator,
  • Configuration option to exclude decision table matrix values from the global search.

Changed:

  • User account lifecycle: an account must be blocked before it can be deleted, user list actions depend on the account status and require confirmation, with a warning that deleting a user also deletes all of its tokens,
  • Actuator endpoints other than health now require authentication in Studio and Runtime REST; health no longer shows component details.

Fixed:

  • Current CPU licence usage calculated from stale data and average usage not based on elapsed time,
  • CPU usage chart connecting separate load periods across data gaps,
  • Snapshot imports and scheduled jobs blocked by a long-running scheduled job,
  • Util functions ($u) not handling Long and Double context values, comparisons of integer and decimal numbers and nested context paths,
  • Util functions ($u) truncating decimal results of diff, rejecting two dates in add/diff and reporting raw errors for invalid arguments,
  • MCP SSE sessions not bound to the user who opened them,
  • Tokens of suspended, closed or demoted users still accepted,
  • Tokens of role users not revoked when a tag or profile right of the role is removed or renamed,
  • Token revocation not applied atomically with user changes and token refresh accepted for revoked tokens,
  • Profile with the reserved code ALL accepted, and unclear errors when updating or deleting a non-existing profile,
  • Bookmark names limited below 255 characters,
  • Work session filter by id failing on PostgreSQL,
  • Clipboard copy confirmed even when it failed,
  • Context upload dialog heading,
  • Minimum password length not shown immediately on the reset password screen,
  • User could be saved without any role when editing,
  • Duplicated alias not locked to the profile of its master decision table,
  • Allowed characters tooltip for codes not listing digits,
  • In-session filter toggle out of sync after returning to the overview list,
  • Security dependency updates (Spring Boot 4.1.2, Tomcat 11.0.27, Jackson 2.21.8 / 3.1.8, Guava 33.7.2, PostgreSQL JDBC driver 42.7.14).

4.3.6 October 14, 2026

Changed:

  • Decision table matrix deduplication (hardlinks) disabled by default.

Fixed:

  • Import removal options not applied when importing a snapshot without config.json.

4.3.5 October 6, 2026

Added:

  • Snapshot export filter excluding elements whose names begin with the given prefixes,
  • Output level selection in the flow decision table block,
  • Profile deletion over MCP, with an explicit confirmation step,
  • On-demand loading of decision table matrix pages while scrolling.

Changed:

  • Decision table matrix rows sorted by all levels,
  • Sort indicator icon in table headers.

Fixed:

  • Alias created or duplicated in the profile of the current view instead of the profile of its master decision table,
  • Aliases not reverted together with their master decision table when reverting session changes,
  • Flows whose decision table block cannot store the result in the assigned variable now rejected on save, with a hint to select an output level,
  • Decision table block result not assigned to a typed flow variable in Runtime,
  • Flow actions referencing undeclared arguments or variables now rejected on save, with a readable Runtime error for unresolved arguments,
  • Decision table matrix row total not counting a copied row,
  • Decision table matrix layout not recalculated after a browser zoom change,
  • Session change marker overlapping row numbers in the decision table matrix,
  • Overview list filters wrapping to a second row,
  • Runtime REST Docker image health check ignoring the configured server port and context path,
  • Security dependency updates (Tomcat 11.0.26, Jackson 2.21.7 / 3.1.7, Groovy 5.0.8).

4.3.4 September 23, 2026

Added:

  • Marking and filtering elements changed in the session, now also in function and flow lists,
  • Paging, column filters and row-count-only mode for the decision table matrix over MCP,
  • MCP server start-up instructions and a getting-started guide resource for AI clients,
  • Licence type reported in the runtime logs.

Fixed:

  • Token refresh failing with a “contact support” error after two logins within the same second, leaving the user logged out,
  • MCP tool arguments validated against the published schema: missing, mistyped, unknown enum and misspelled arguments now reported as validation errors instead of silent defaults or server errors,
  • Flow domain nodes bound to the flow’s own profile: separate profile picker removed, domain node unavailable in global flows, domain cleared with a warning when the flow profile changes,
  • Flows generated by the AI assistant rejected on save due to an outdated link condition format in the knowledge base,
  • AI assistant not reporting aliases of a master decision table,
  • Runtime diagnostics failing on MySQL due to table name casing,
  • Endless error logging from runtime watchers when a Spring Boot application using the runtime starter fails to start,
  • Security dependency updates (Spring Boot 4.1.1, Tomcat 11.0.25, FreeMarker 2.3.35).

4.3.3 September 8, 2026

Added:

  • Marking and filtering elements changed in the session, in decision table lists and matrices,
  • Clickable links to the elements an AI answer mentions,
  • Comparison type declared in flow conditions, with values converted before comparing,
  • Profile creation and update available over MCP,
  • Global search in External Storage (blob) columns,
  • Column resizing on tabular screens,
  • Delete action in domain collection tables, with per element permissions,
  • Opening list elements in a new browser tab from the overview row link.

Fixed:

  • Flow usages missing from AI assistant answers,
  • Context argument now always kept first in function signatures,
  • Validation rules applied to MCP requests the same way as to REST requests,
  • Unknown profile code reported as a validation error instead of a server error,
  • Right codes translated to role names in the snapshot import report,
  • Elements the user has no rights to remove are now refused during snapshot import,
  • Error message for a decision table import without the required rights,
  • Global search results showing the whole matrix row instead of the matched cell value,
  • Session element loading, now incremental and limited to missing elements,
  • Navigation blocked while the viewed session was loading, with failures now reported,
  • User filter on the session list matching logins that only start with the selected one,
  • Test result panel not rebuilt after switching to another tested element,
  • Decision table range boundary controls after changing the level type or clearing one side,
  • Decision table matrix horizontal scroll lost after filtering out all rows,
  • Unreadable header row in the extract codes XLSX export,
  • Flow node types that cannot be edited in Studio no longer accepted by the write API,
  • Diagnostic panel tab kept after page reload, unified section headers, licence limit and warning marklines separated on the CPU chart, and empty columns dropped from the JDBC usage list,
  • Expired licence banner pointing to sales contact instead of a dead renew button,
  • Security dependency updates (Tomcat).

4.3.2 August 18, 2026

Fixed:

  • Connection arrows missing from flow diagram SVG export,
  • Security dependency updates (Tomcat, Bouncy Castle, Log4j, Apache HttpClient, Spring LDAP, Micrometer, c3p0).

4.3.1 August 5, 2026

Added:

  • Domain definition changes shown in the snapshot import report,
  • Explicit search button in advanced search, with a confirmation before searching decision table matrix content and filter reset on entering the dashboard,
  • Data-collected dialog shown after a profiler run in test cases,
  • Server runtime information in monitoring system info,
  • System CPU series in the monitoring CPU chart,
  • Auto-refresh of the monitoring view for current-day ranges,
  • Average call times in the profiler call tree and method list,
  • Value-source markers and element definition shortcut in the flame graph context menu.

Fixed:

  • Missing-rights names in decision table, function and flow import reports not matching the names shown in the interface,
  • Region attach and detach for parameters, functions and flows not synchronized with the Runtime cache,
  • Domain type collection deletions not applied on snapshot import,
  • Current session not reloaded after a snapshot import completes,
  • Profiler summary covering only part of the batch test scope,
  • Permissions not refreshed after license changes, requiring a reload to unlock tabs,
  • higson-cli push failing with the default Studio integration token configuration,
  • Decision table matrix header misaligned with rows while filtering,
  • Decimal comma handling in decision table list matcher values,
  • Unsaved changes warning shown for untouched decision table dialog sections,
  • JSON and structured result formatting in the test result view,
  • First element result and result element name in the tester result view,
  • Grants not sorted alphabetically in the role edit dialog,
  • No-profile checkbox enabled without global permission,
  • View action shown for elements created in an inactive region version,
  • Profile add/edit row not fitting on screen,
  • Vertical spacing in the assign profile list,
  • Modification date column wrapping in history,
  • Diagnostic panel display details — flame graph tooltip, numeric column alignment, duration rounding and selected export scope highlight.

4.3.0 July 21, 2026

Added:

  • Diagnostic panel — a dedicated view for Runtime monitoring and analysis, comprising:
    • real-time monitoring dashboard with JVM memory, GC, threads and per-minute CPU usage,
    • performance profiler with flamegraph and call-stack profiling for functions, flows and domain attributes,
    • diagnostic export and import for offline analysis,
    • light theme support,
  • Licensing — a license is now required to run Higson, with:
    • developer license for non-production environments,
    • production license for commercial use,
    • license diagnostics — current license, usage and vCPU exceedance episodes,
    • expiry warnings — footer banner, daily popup and notifier,
  • Rule encapsulation based on profiles; rule elements can now be explicitly assigned to a profile, with:
    • profile assignment for decision tables, functions, flows and regions,
    • profile-aware read/write authorization,
    • profile-scoped filtering, export/import and snapshots,
  • Lighter versioning and faster snapshot export — memory and snapshot size optimization; when a new parameter version introduces no changes, Higson links to the previous version instead of storing a full copy, reducing footprint across Runtime, snapshot import/export, Excel import and region attach/detach, with merge, split and deduplication operations,
  • Asynchronous snapshot import — imports now run in the background and, if an instance fails mid-import, are automatically resumed by another instance, making Higson more resilient and cloud-friendly; includes job status tracking and history,
  • AI (beta) — LLM-powered assistance and AI-agent integration, with:
    • AI assistant for functions — explain and generate function code,
    • AI-assisted decision table generation,
    • documentation chat assistant backed by the Higson knowledge base,
    • Higson MCP (Model Context Protocol) server exposing Studio operations to AI agents, with per-user session scoping and tools for regions, profiles and versions,

Changed:

  • Important: Higson Studio now requires a valid license to run,
  • Refresh token stored in an HttpOnly cookie with the access token kept in memory,
  • User tokens invalidated on role reduction,