openDesk 1.10. Enhanced security architecture

Projects

The OpenProject update to version 16.6 brings big performance improvements to the backend that IT admins will appreciate, most notably for API requests and autocomplete functions in large environments. Managing custom fields is also more flexible now, so that parent elements in hierarchical lists can be edited retrospectively.

The update also introduces several improvements that enhance the way users handle project data. The introduction of calculated values in project attributes allows for more precise analyses. The new workflow table with a fixed header row and first column improves navigation in complex processes, and the tabs for different transition types provide an additional overview. In day-to-day work, detailed improvements such as the re-introduction of the mini-calendar on mobile web and extended options in the Meetings module make organising projects much easier.

From a strategic perspective, this new version provides better portfolio analysis capabilities thanks to hierarchy fields and weighted lists. This helps decision makers manage resources more efficiently and monitor complex project landscapes with greater transparency.

Document management

With Collabora 25.04.6, the underlying platform has been made more stable by a controller update and several bug fixes. Administrators benefit from a robuster environment, with issues such as data loss and errors when loading images now resolved. The autosave function for CSV and TXT files has also been improved.

Additionally, this update introduces several improvements that enhance the way users manage and analyse spreadsheet data. New formulas such as VSTACK, HSTACK or TEXTSPLIT make complex analyses much easier. PDF export now includes comments, which simplifies document reviews and the coordination across different systems.

Improved interoperability is also worth noting. Support for custom XML mappings in the OOXML format allows openDesk to be smoothly integrated into existing document workflows, including proprietary solutions.

IAM

The IAM system was updated to version 1.15.2 (UCS 5.2-3) and now integrates Keycloak 26.4.x. For administrators, this means not only the latest security patches, but also an LDAP import option that's active by default and improves support for federated identities.

Thanks to the new back-channel logout via OIDC, logging out of the portal automatically ends sessions in all connected services. Accessibility improvements provide better support for screen readers.

The update reflects a strong focus on security and compliance. Updating the underlying components helped remove known vulnerabilities, and accessibility improvements support modern public sector standards for digital inclusion.

Email, calendar and contacts

The latest OpenXchange update gives administrators more flexible configuration options. The Dovecot configuration is aligned with best practices, cache options can now be adjusted more flexibly, and the metacache size is calculated automatically. Security options such as SASL for Postfix can be controlled through templates.

Communication in large organisations is easier for users, too. The system supports LDAP group-based mailing lists. Emails to a group address are reliably distributed to all current members without the need to maintain any manual group lists.

Optimisations in caching and routing, including LDAP-based transport maps, improve scalability and performance in the groupware component, as well as support reliable operation in growing environments.

Video conferencing (Jitsi)

With the latest Jitsi version, the video conferencing system received a maintenance update focussed on stability. Background improvements provide more stable connections and overall smoother operation when doing calls with a large number of participants.

Knowledge (XWiki)

XWiki was technically revised in version 17.4.7. Auto-save processes are now more reliable and security gaps were closed.

Deployment

openDesk deployment in version 1.10 addresses specific configuration and pipeline improvements.

Correction for ConfigMaps

A bug that created duplicate data keys when the same file was referenced multiple times within a component was fixed. Configuration objects in the cluster are now created correctly.

Optimised Helmfile pipelines
Deployment pipelines were improved through more consistent annotations. Chart verification for XWiki is activated by default, which helps maintain the integrity of deployed artefacts.

Automatic database creation
To prepare for future authentication features, the deployment process automatically creates a nubus_authsession database.

Documentation

The accompanying documentation was updated to reflect the technical changes introduced in version 1.10.

Security and migration
The table of non-verifiable charts in the Security section has been updated. In addition, the Migration guide contains important information on the new Postfix SASL security options (from version 1.9.0), as well as a dedicated section for the update to v1.10.0.

Getting Started and operation
The Getting Started guide was supplemented with information on the maximum length of the openDesk domain and contains updated information on accessing deployments. Finally, the Data Storage chapter was updated to reflect the current state of the application.

Changelog

You can find our entire changelog for openDesk 1.10 at openCode.