Skip to main content

31 posts tagged with "Fire Arrow Server"

Fire Arrow Server Releases

View All Tags

Fire Arrow Server 1.16.2

· 3 min read

Fire Arrow Server 1.16.2 has been released.

  • (bugfix) Polling-only CarePlan-event subscriptions no longer stall server startup when Azure Queue is not enabled
  • (feature) New fire-arrow.search.reindex-on-startup-when-index-missing setting rebuilds the search index on cold start for deployments using ephemeral storage

Fire Arrow Server 1.16.1

· 3 min read

Fire Arrow Server 1.16.1 has been released.

  • (feature) $materialize now brings a CarePlan up to the current materialization horizon on every call, instead of only enabling scheduling on the first call
  • (bugfix) CarePlans whose scheduled activities use a versioned reference (.../_history/N) now materialize and complete correctly instead of failing
  • (bugfix) The GraphQL playground at /admin/graphql loads again instead of hanging on a spinner

Fire Arrow Server 1.16.0

· 4 min read

Fire Arrow Server 1.16.0 has been released.

  • (feature) CarePlans now carry a materialized-at-version marker, so a client can tell when the server has finished creating Tasks for its latest update without making a synchronous call
  • (bugfix) A scheduled activity's own Timing.repeat.duration now sets how long the resulting Task stays actionable, instead of always using the server-configured validity period

Fire Arrow Server 1.15.0

· 4 min read

Fire Arrow Server 1.15.0 has been released.

  • (feature) On the synchronous activation path, past-due care plan Tasks are created directly in ready status instead of being created as requested and immediately transitioned
  • (feature) Synchronous CarePlan/$subscribe-due-events results are returned in due-time order, so the first entry is the most urgent actionable Task
  • (bugfix) The immediate post-activation due-task transition now respects auto-transition-to-ready; previously it ran even when that setting was disabled
  • (maintenance) Platform and dependency updates, including a jackson-databind security fix in the license tooling

Fire Arrow Server 1.14.0

· 7 min read

Fire Arrow Server 1.14.0 has been released.

  • (breaking) The web UI now signs in through a server-side confidential OAuth client; every login profile must be given a client secret and have its identity provider redirect URI updated before upgrading, or the server will not start
  • (feature) A new $drop-privilege operation lets a privileged caller mint a short-lived token scoped down to a single identity, never granting more access than the caller already has

Fire Arrow Server 1.14.1

· 2 min read

Fire Arrow Server 1.14.1 has been released.

  • (bugfix) Expired drop-privilege tokens are now cleaned up on schedule instead of failing every run and logging an error hourly
  • (maintenance) The Oracle database driver has been removed from the shipped artifact

Fire Arrow Server 1.13.0

· 7 min read

Fire Arrow Server 1.13.0 has been released.

  • (feature) Care plan Tasks automatically move to a terminal status when their validity window expires, so Task?status=ready only returns currently actionable work
  • (bugfix) GraphQL search modifiers such as _tag:not now work; previously they returned no results
  • (maintenance) Upstream HAPI FHIR JPA starter sync (release 8.10.0-2) and dependency updates

Fire Arrow Server 1.12.0

· 5 min read

Fire Arrow Server 1.12.0 has been released.

  • (feature) Server warns at startup when authorization rules could allow a role to escalate its own access
  • (feature) License details are now visible to administrators in the web UI
  • (feature) Due-task transition throughput is configurable; defaults now drain backlogs of up to 5,000 Tasks per run
  • (bugfix) QuestionnaireResponse/$extract is now granted by an operation: extract authorization rule as intended
  • (maintenance) Dependency updates

Fire Arrow Server 1.11.0

· 8 min read

Fire Arrow Server 1.11.0 has been released.

  • (breaking) Token generation, binary upload, and CarePlan materialize operations no longer return distinct HTTP codes for unknown or deleted resource IDs
  • (security) CareTeam-scoped access no longer includes patients outside the practitioner's actual teams
  • (feature) New CarePlan $materialize and $dematerialize operations to start and stop task materialization without Subscription write access
  • (bugfix) Token generation honors every matching practitioner-role-code rule, not only the first one in configuration
  • (maintenance) HAPI FHIR 8.10.0 platform upgrade (HAPI CLI database migration required) and dependency updates including Spring Security 6.5.10 (CVE-2026-22732)