Skip to main content

Release Notes

The list below shows the latest releases and the respective features/improvements to Axinom Mosaic.

July 07, 2026​

Managed Services​

  • Encoding Service2.57.26173.1
    • Option for maximum horizontal and vertical tile count in thumbnail sprite sheets.
    • Option to switch off adding EXT-X-SESSION-KEY to the HLS master manifest in multi-key scenarios. The behaviour is enabled by default and can be turned off per job via the HlsSessionKeyEnabled content-processing setting.
    • Azure Blob file acquisition could pick up content from folders that share the same prefix. For example, content from a folder named video might get mixed with content from a folder named video2.
    • Files uploaded to Azure Blob storage now include a Content-MD5 value, so downstream consumers can verify content integrity.

July 01, 2026​

Breaking Changes​

  • AxAuth Service The passwordHash field has been removed from the AxAuth Service's Admin GQL API. This field exposed sensitive data, even if it was done so for authenticated & authorized requests. This field has no valid client use cases.

General​

  • General Several managed services received further monitoring and observability improvements, with richer metrics now emitted across authentication, token-generation, and service-usage flows. This will allow us to detect and respond to incidents faster and provide better transparency via the Axinom Status Page.

Libraries​

  • @axinom/mosaic-ui Improved filter accessibility. A filter's label is now correctly associated with its input for input-based, expanded filters (including the new SearchableOptions filter type), so clicking the label focuses the correct input.

Managed Services​

  • Identity Service Authentication flows are now validated against a list of allowed origins. All Management System URLs are allowed by default, so standard Management System logins continue to work with no action needed.

    For Developers

    The default localhost development origin http://localhost:10053 will be automatically added to the Allowed Origins to all Development type Mosaic Environments, and no actions will be required.

    If you are using different ports than the default mentioned above, add such origins to the Allowed Origins list in the Identity Service Configuration station in the Admin Portal. Wildcard patterns are also supported, e.g. https://*.example.com or http://localhost:100*.

  • Identity Service Services that register permissions can now declare a usageScope of SERVICE or ANY (the default). Permissions marked SERVICE, intended for service accounts rather than user accounts are hidden by default from the permission-assignment view of the User Role station, reducing clutter. Permissions with usageScope set to ANY remain visible in both the User Role and Service Account scopes. See docs for more details.

  • Identity Service Custom identity providers can now enable Auto Logout from the Identity Provider. When enabled, logging out of the Management System also ends the Custom IDP's session via OIDC RP-initiated logout, avoiding a silent re-login. When using this feature, the IDP must allow the Management System base URL (i.e. https://your-unique-mgmt-subdomain.eu.axinom.net) as a post_logout_redirect_uri within the relevant configuration of the Custom IDP.

    Screenshot

    Auto Logout Auto Logout

  • User Service Token enrichment is now stricter. If a token-enrichment webhook is configured, the downstream webhook implementation MUST return the expected response. An empty or invalid enrichment response now fails the flow instead of continuing silently.

    For Developers

    If you use token enrichment, please make sure your webhook returns the expected claims. See Extending the Access Token for details.

  • Image Service ImageNotExists errors received after EnsureImageExists RMQ Commands now include the requested image_path, making it faster to diagnose missing-asset references.

  • Image Service Added an on-demand Connection Check in the Acquisition Profile settings to validate the connectivity and configuration of a storage location before running acquisition.

    Screenshot

    Connectivity Check Connectivity Check

  • Hosting Service Fixed the deployment manifest status so deployments in the Initialized state are displayed correctly when tracking deployment progress. Also improved the error messages when registering pilets with missing or invalid serviceId.

June 10, 2026​

Managed Services​

  • Encoding Service2.57.26159.2
    • Option to specify region in S3Compatible
    • Fix: HLS multi-key DRM playback might fail

June 04, 2026​

Libraries​

  • @axinom/mosaic-ui The Icons component now supports custom icons. You can pass custom SVG icon definitions to render alongside the built-in icon set.

  • @axinom/mosaic-ui QuickView mode now shows the InfoPanel of the selected station. It is expanded when there is enough space, and collapsed otherwise. If the user manually expands the InfoPanel in a smaller screen space, it will be displayed as an overlay on top of the form elements.

  • @axinom/mosaic-ui Improved TimePicker usability, the scroll column now loops in both directions and closes when clicking outside.

  • @axinom/mosaic-ui Various bug fixes: updated DragIcon and DynamicList styling to match the color and disabled-state behavior of other icons for a more consistent look, and fixed InlineMenu actions propagating clicks to components beneath them.

  • @axinom/mosaic-portal Added registerHomePage to the Piral API, allowing a custom workflow to replace the default Home page with its own component. See the Mosaic Portal documentation for more details.

Managed Services​

  • General Multiple managed services received monitoring and alerting improvements, with richer metrics now emitted across key operational flows. This will allow us to detect and respond to incidents faster and provide better transparency via the Axinom Status Page.

  • AxAuth Service Updated to send a notification email whenever a Management User's password has been reset.

  • Identity Service User Service Received some improvements for the JWKS endpoints. Now the JWKS endpoint always exposes only the currently active key and the previously active key. If the previously active key was revoked, only the current key is returned.

  • Identity Service Bug fixes for when using the EntraID IDP with consumers tenant, the service now falls back to the ID Token's name property if the User Info response does not include it.

Customizable Services (R150)​

  • General Bumped dependencies to fix security vulnerabilities, including CVEs in handlebars, lodash, picomatch, yaml, flatted, brace-expansion, qs, and minimatch. #516

June 03, 2026​

Managed Services​

  • DRM Service
    • Widevine API 6.30.2 Logging improvements.
    • FairPlay API 6.26.2 Logging improvements.

June 02, 2026​

Managed Services​

  • DRM Service
    • PlayReady API 6.24.4
      • PlayReady SDK updated to v4.7.8120_qfe1 (required update from Microsoft; no change in API functionality expected).
      • Logging improvements.

May 19, 2026​

Managed Services​

  • Video Service Multiple acquisition and publishing profiles: You can now create and manage multiple acquisition and publishing profiles per environment. Previously, a single profile of each type was supported; now you can maintain distinct profiles for different source locations and publishing targets.

    One profile per environment is designated as the default and is automatically pre-selected when starting a new encoding job or when using the ingestion functionality. The default can be changed at any time from the profile settings.

  • Video Service GraphQL API updates: Added thumbnailsEnabled and thumbnailsVttPath arguments to the createCustomVideo mutation.

May 13, 2026​

Managed Services​

  • DRM Service
    • Key Service API 1.25.1 /api/Logs is now deprecated and will be removed in a future release. As of this release, it no longer returns the latest log data. Contact Axinom to request access to logs, if required.

May 07, 2026​

General​

  • General Mosaic has a refreshed brand identity. The updated logo is now reflected across all surfaces.
  • General We also did some house-keeping for fixing security vulnerabilities caused by dependant packages.

Libraries​

  • @axinom/mosaic-ui Introduced FormGroup - a new form component for organizing related fields into collapsible sections, helping reduce visual clutter in complex forms. The previous FormGroupTitle component is now deprecated in favor of FormGroup, which fully replaces and extends its functionality.

  • @axinom/mosaic-ui Renamed the Quick Edit feature to Quick View and updated its icon to better reflect that the Explorer supports viewing both editable and non-editable stations. Existing QuickEdit APIs remain fully compatible. More details are here.

  • @axinom/mosaic-ui Various bug fixes for InlineMenu, MessageBar, DynamicDataList, ProgressBar components.

  • @axinom/mosaic-ui Aligned DynamicDataList column header styles (font, padding, wrapping) with List header styles for a more consistent table experience.

  • @axinom/mosaic-agent-skills Added a new deploy-service skill that allows AI agents (Claude Code, GitHub Copilot, etc.) to deploy customizable services via the Mosaic CLI's hosting commands, directly from your customized repository. See the Mosaic Agent Skills documentation for more details.

Managed Services​

  • AxAuth Service Admin Portal Fixed a bug where setting a user's Email Verified status to Yes in the Admin Portal had no effect.

  • User Service Fixed an issue where cached tokens were not invalidated when the signing key was rotated, which could cause authentication failures.

  • Personalization Service The Array and Set Progress APIs now accept object keys containing hyphens (e.g., movie-1). Previously, keys with hyphens were rejected by schema validation. See the Data API documentation for more details.

Customizable Services (R148)​

  • General Added a new /fix-vulnerabilities Claude Skill to scan for and fix vulnerable npm dependencies in the media template monorepo. The skill uses GitHub Dependabot as the authoritative source of vulnerability data and applies safe, automated lockfile updates where possible - while prompting for user input on cases that require a forced resolution or a deliberate risk acceptance decision.

  • General Bumped external dependencies to fix various CVEs. #509, #512

  • Media Service Entity actions such as Publish Now now display a toast notification to confirm the operation completed. #304

  • Media Service Fixed an issue in Safari where validation result icons exceeded their container dimensions on the Snapshot Details station. #515

Frontend Samples​

  • Frontend Samples Added a minimum interval validation (1,000 ms) for the Set Progress scenario frequency field to prevent invalid configurations. #189

May 06, 2026​

Managed Services​

  • DRM Service
    • Widevine API 6.30.1
      • Added max_vulnerability_level setting to the entitlement message. Licenses will be granted only if the requesting device is below the configured threshold; otherwise, the request will be denied.
      • Added allow_vulnerability_level_unspecified flag to the entitlement message. When enabled, devices with an unspecified vulnerability level are permitted to request a license. Defaults to true if not set.
      • Added disallowed_device_verification_statuses to the entitlement message. Accepts a list of device verification statuses; any client matching a denied status will be refused a license. If not set, all verification statuses are permitted.
      • Updated Widevine License Server SDK from v19.10.1 to v19.15.0.
      • Added new fields for reporting logs.
  • Encoding Service2.56 Fix: Some encoding jobs might fail with error ‘Rate exceeded’

May 05, 2026​

Managed Services​

  • DRM Service
    • FairPlay API 6.26.1
      • Added support to accept key ID as binary/UUID bytes.
      • Added new fields for reporting logs.

April 09, 2026​

Managed Services​

  • Video Service Enhanced validation for video and audio stream representations.
  • Video Service Introduced language toggle to switch between localized and English display names for tracks in stream manifests.
  • Video Service Improved branding support on the Video Detail screen.
  • Video Service Fixed an issue where videos could not be modified immediately after creation.

April 08, 2026​

Managed Services​

  • Encoding Service2.54
    • New language code: pcm (“Nigerian Pidgin”/”Nigerian Pidgin”)
    • Fix: ‘Deutsch’ erroneously has localised display name 'Deutsche'
    • Fix: Validation file is uploaded to a redundant subfolder with Azure Blob
    • Fix: HLS TS streams with fractional FPS (e.g., 23.976) might have drifting audio lag in some players
    • Fix: Subtitles are sometimes created slightly longer than the video file

March 23, 2026​

Managed Services​

  • DRM Service
    • Key Service API 1.24.0
      • Added an option to create a key based on the default key seed to POST ContentKeys.
      • Export/ContentKeys can now return keys generated based on key seeds.
      • Thumbprint-whitelisted certificate support for Export: The Export endpoint now accepts certificates validated via thumbprint whitelisting.

March 19, 2026​

Managed Services​

  • DRM Service
    • Management API 6.14.0 Security and stability improvements.

March 18, 2026​

Libraries​

  • @axinom/mosaic-ui The InfoPanel now supports collapsing and expanding to save screen space. A dedicated toggle button appears in the panel header, and the panel can optionally auto-collapse when the available width drops below a configurable threshold. Dev teams can control the behavior through new properties: collapsible, defaultCollapsed, onCollapseChange, minWidthThreshold, and siblingMinWidth.

    Screenshots

    InfoPanel expanded InfoPanel in expanded state

    InfoPanel collapsed InfoPanel in collapsed state

  • @axinom/mosaic-ui Explorer column headers now support wrapping up to two lines before truncating with an ellipsis, reducing label cutoff in tables with longer column names.

  • @axinom/mosaic-ui Various bug fixes across DynamicDataList, DateTimeFilter, DateTimeText, and BooleanViewField.

  • @axinom/mosaic-ui Bulk Edit now supports clearing field values across multiple selected items in one action. A Clear button appears next to supported fields in the Bulk Edit panel. The @axinom/graphql-codegen-plugins code generator for Bulk Edit UI configurations also now generates clearable fields automatically from a new clear section in the config. See Bulk Edit documentation for more details.

  • @axinom/mosaic-ui Bulk Edit now supports field-specific validation, displaying more targeted error messages per field. See Bulk Edit documentation for more details.

  • @axinom/mosaic-cli General house-keeping for fixing security vulnerabilities caused by dependant packages.

Managed Services​

  • Admin Portal Fixed a bug that was triggered when adding new Identity Providers with built-in default configurations to an Environment would not be marked as Enabled.

  • Hosting Service Improved the checks done to determine if the Upgrade action shall be enabled in the customizable service station.

  • User Service The Access Token Enrichment Webhook request now includes two additional fields: user_id (the user's internal Mosaic ID) and external_subject_id (the user's ID from the login provider). These make it easier for webhook implementations to identify and match users to their external login provider. See the payload format in the documentation for more details.

  • User Service Application users can now be blocked and unblocked directly from the Application Users Explorer via inline actions, or from the Application User Details station via a dedicated action button. The status field on the details station is now read-only.

  • Image Service S3-compatible storage is now supported as an acquisition source for images. You can configure an S3-compatible provider (endpoint, access key, secret, and bucket) from the Image Service acquisition profile settings.

  • Image Service Improved performance in the Focal Point station by reducing unnecessary preview requests that were generated and immediately cancelled while typing coordinate values.

Customizable Services (R144)​

  • General Upgraded Yarn to v4.12.0. As part of this, an npmMinimalAgeGate of 7 days has been introduced for third-party npm packages: newly published packages must be at least 7 days old (or explicitly allowlisted) before they can be adopted. @axinom/* packages are pre-approved and not subject to this gate. This is a supply chain security measure. #504

  • Media Service Fixed an issue where genre filter options in the Explorer were not respecting the configured sort order. Episodes and Seasons now also use the correct TV show genre query. #502

  • Media Service Updated the ingest icon. #508

Frontend Samples​

  • Frontend Samples Bumped @axinom/mosaic-fe-samples-host and @axinom/mosaic-user-auth to their latest versions, and upgraded webpack-dev-server from v4 to v5. #188

March 17, 2026​

Managed Services​

  • Encoding Service2.51.26057.1 Improvement of reliability of Azure Blob connections

March 10, 2026​

Managed Services​

  • Video Service File naming convention for Media Mappings: The Media Mappings section of Content Processing Profiles (Settings → Video Encoding Management → Processing) can now detect source media files using the file naming convention, which we recommend as the simpler, more robust approach. If you need more control, the regex-based method remains available; select between them with the Media Detection value in Media Mappings. New Content Processing Profiles use the file naming convention by default; existing profiles stay unchanged.

    With the file naming convention, all files of supported types are picked up automatically. Language codes, descriptive audio tracks (-ad), and closed captions (-cc) are inferred directly from the file name, so no regex is required. This means less configuration, fewer mistakes, and a setup that stays correct as your source files evolve.

  • Video Service New options in the Media Mappings section:

    • Fallback Language Code: the language code assigned to a track when no language can be detected from the file name or track metadata. Defaults to en. Can be disabled, but then the encoding job fails if no language code was detected.
    • Fail on Unrecognized Language Codes: when enabled (the default), the job fails if any detected language code is not in the list of supported languages. Disable to allow unrecognized codes through as warnings.
    • Fail on Unused Tracks: when enabled, the job fails if any tracks in the downloaded files were not used in the output, e.g. when a track with a better bitrate was also detected. A good safeguard when you know all source tracks should contain only necessary tracks and any ignored tracks might point to a problem in the source content set. Disabled by default.
    • Fail on Unused Files: when enabled, the job fails if any files in the acquisition folder were not picked up, for example due to unsupported file extensions or a mismatching regex. Useful to confirm all expected source files are being downloaded. Disabled by default.

  • Video Service General improvements and bug fixes.

February 17, 2026​

Managed Services​

  • Encoding Service2.51.26037.1 Fix: Language code fre ("French"/"Français") is not recognised

February 10, 2026​

Managed Services​

  • DRM Service
    • PlayReady API 6.24.2
      • Fixed bug causing server error 500 for "Client does not support AES128CBC”.
      • Added error codes for client revocation errors.

February 09, 2026​

Managed Services​

  • DRM Service
    • Widevine API 6.29.2
      • Added error codes for client revocation errors (temporary and permanent revocation).
      • Fixed license requests from clients with development certificates causing internal server errors.

January 26, 2026​

Breaking Changes​

  • User Service Completed the removal of the deprecated profileData field from the UserProfile GQL type. This field was originally deprecated in May 14, 2025. If you need to store user-specific data, please use the Mosaic Personalization Service API instead.

Libraries​

  • @axinom/mosaic-ui Multiple usability improvements including better bulk action visibility in Explorer, improved filter styling with hover/focus states, tag overflow handling with tooltips, and refined DateTime picker UI.

  • @axinom/mosaic-agent-skills This new library providing agent skills and integration tools for MCP-based AI agents (such as Claude Code or GitHub Copilot) was already released last DEC. For more details, please see the announcement blog post.

  • @axinom/graphql-codegen-plugins Improved error handling in the bulk edit UI configuration generation plugin to gracefully handle types that do not have a component mapping.

Managed Services​

  • Identity Service
    • Improved permission sorting in user role management (grouped by managed services first, then customizable services, alphabetically within each group).
    • Enhanced bulk edit experience for user roles and permissions.
    • User status (active/blocked) can now be changed via action buttons on the user details station and with bulk actions available in the explorer.
    • Hardened security for Entra ID authentication in the Management System by using the upn claim instead of email during "Sign In with Microsoft" OAuth flow.

  • Image Service Added tag search and filtering capability in the Image Station explorer.

  • Personalization Service Enabled GraphiQL interactive query UI for easier API exploration.

Customizable Services (R141)​

  • Media Template Bumped external dependencies to fix various CVEs. #499

January 15, 2026​

Managed Services​

  • Encoding Service2.51.26014.1 New language code: dut ("Dutch"/"Nederlands")

January 13, 2026​

Managed Services​

  • Encoding Service2.51.25350.1
    • Regex (for file acquisition) is now optional, and simple file naming conventions can be used as an alternative.
    • Language code handling is now more transparent and straightforward.
    • Option to fail the encoding job if any file in the acquisition folder was ignored.
    • Option to fail the encoding job if any track in the acquired files was ignored.

More release notes can be found here.

Was this page helpful?