Till Gerken

Fire Arrow Server 2.5.0 has been released.

• (security) A permission change can no longer stay cached when a concurrent request stores an older answer after the change has committed
• (feature) Several instances that share one PostgreSQL database now coordinate through that database
• (bugfix) Replacing a CarePlan via PlanDefinition/$apply now removes Tasks for activities the new plan dropped, including past-due Tasks
• (bugfix) Orphan-blob cleanup recognizes FHIR Binary blobs, counts them separately, and never deletes them

Fire Arrow Server 2.2.2 has been released.

• (bugfix) CarePlans with activity completion enabled now reach completed when their last Task finishes
• (bugfix) Task search with an unqualified numeric patient id no longer returns 412

Fire Arrow Server 2.2.1 has been released.

• (bugfix) The Azure production image for 2.2.x now builds; use 2.2.1 in place of 2.2.0

Fire Arrow Server 2.2.0 has been released.

• (feature) LegitimateInterest now finds Consent resources through Consent.performer as well as Consent.patient
• (bugfix) Patient Task search with no Tasks no longer falls through to default-validator
• (bugfix) _include and _revinclude results ride with their matching resources instead of consuming _count slots
• (bugfix) Task search during $renew-due-events no longer returns 403 Forbidden
• (bugfix) Identity lookup outages return a retryable 503 instead of 403 Forbidden
• (bugfix) $renew-due-events and $subscribe-due-events no longer fail with 409 Conflict while a Subscription is activating
• (bugfix) Recurring CarePlan Task ids stay stable across reconciles
• (bugfix) A transient uniqueness check no longer reports a new email as already taken
• (bugfix) Expected subscription-create retries no longer log as ERROR
• (maintenance) HAPI FHIR 8.12.0 platform upgrade and dependency updates including PostCSS CVE-2026-69153

Fire Arrow Server 2.1.6 has been released.

• (bugfix) Updating an externalized Binary no longer leaves it permanently unreadable through $binary-access-read

Fire Arrow Server 2.1.3 has been released.

• (feature) Faster subscription activation removes a roughly one-second delay from CarePlan event and materialization requests

Fire Arrow Server 2.1.4 has been released.

• (bugfix) Reading attachment content with $binary-access-read now follows your existing read rules instead of returning 403 Forbidden

Fire Arrow Server 2.1.5 has been released.

• (bugfix) Reading externalized Binary content with $binary-access-read no longer fails with 500 Internal Server Error

Fire Arrow Server 2.1.2 has been released.

• (bugfix) CarePlan activity.reference values that pin a historical resource version (…/_history/N) are now stored and used as sent

Fire Arrow Server 2.1.1 has been released.

• (bugfix) The Azure production image no longer fails to start because of a duplicate binary-storage configuration key