Current Firely Server release notes (v6.x)

Note

For information on how to upgrade, please have a look at our documentation on Upgrading Firely Server. You can download the binaries of the latest version from this site, or pull the latest docker image:

docker pull firely/server:latest

Release 6.7.1, May 20th, 2026

Fix

Introduced pagination for the results of the $everything operation. Before, when a large number of resources would be returned by the $everything operation, this could lead to stack overflow errors. With pagination, the results of the $everything operation are now returned in smaller chunks, improving performance and reducing the likelihood of timeouts. For more information, also see Pagination for $everything.

Warning

With the change in pagination for the $everything operation, Bundle.total has been removed. If your workflow relies on it, we advise to update it and iterate through all pages to retrieve all resources.

Release 6.7.0, March 26th, 2026

Improvements

Improved the performance of SQL Server repositories by restructuring and optimizing several indexes. See the Database section of the release notes for more information about the index changes.
Improved the operation outcome of disabled operations. In case of a disabled delete operation, the outcome would incorrectly indicate that the operation was successful even though the operation was disabled. In the current situation a 501 Not Implemented response is returned with an empty response body.
BundleOptions in the appsettings were not validated upon startup for consistency. This could lead to misconfigurations that would only be noticed when executing a bundle operation. We now validate the BundleOptions upon startup to prevent this from happening.
We improved the resolving of index files in the UI when the server is running in a virtual directory. Before, the UI would not be able to find the index files when running in a virtual directory, which would lead to missing styles and images. This has now been fixed by adjusting the paths to the index files in the UI.
We improved handling of Patient Access Metrics sent via OpenTelemetry when no fhirUser could be derived from the access token.
We clarified the logs when the lastN operation would be used together with a SQLite DB. This log message would suggest that only SQL Server repositories support the lastN operation, which is not the case. The log message has now been updated to clarify that the lastN operation is supported for MongoDB and SQL Server repositories, but not for SQLite repositories.

Features

Introduced advanced terminology validation with Conformance Archives (CAR files), allowing for validation against large and complex terminology systems such as LOINC, ICD10, and SNOMED CT. We provide pre-built CAR files for SCT and LOINC on request. For more information see Advanced Terminology with Conformance Archives (CAR files). This feature requires a separate license plugin, licenses can be updated upon request.
PubSub users that utilize RabbitMQ as a message broker can now specify custom queue arguments when creating queues. For more information see RabbitMQ Configuration.
Introduced the $fhirUser-lookup operation to look up the fhirUser claim of a patient or practitioner user in Firely Auth. This operation replaces the old fhirUser lookup in FA that existed internally.. It is now exposed as a public operation that can be called by custom plugins or external systems. For more information see FHIR User Lookup - $fhirUser-lookup.
FSI now supports ingestion of bundles of type collection, transaction, and batch in ndjson format.
We introduced the $questionnaire-package operation with support for the coverage, questionnaire, changedsince, and packagebundle parameters following the specification of the DTR Questionnaire Package Operation. This operation requires a separate license plugin. More documentation will follow.

Fix

Fixed an issue with BDE in multi-instance deployments of Firely Server where the same BDE task could be picked up by multiple instances at the same time, which could lead to duplicate processing of the same task. This was caused by that task not getting the correct status update. We have improved handling of these tasks in multi-instance deployments to prevent this from happening and to ensure the process is more robust in case of unexpected crashes or shutdowns of instances.
Fixed an issue where the _summary parameter was applied in searches but not in direct reads.
Consolidated the behavior of the _since filter for $PatientEverything in SQL and MongoDB repositories. Before, the _since filter would return additional results in MongoDB repositories due to the way the filter was applied. Now, the behavior of the _since filter is consistent across both repository types.
The _summary and _elements parameters would not be applied when used in batch or transaction bundles. This has now been fixed so that these parameters are applied correctly in these types of bundles.
Fixed an issue where Firely Server would throw an error when handling a RetrievePlanCommand from RabbitMQ.

Database

Optimized several indexes in the SQL Server repository database to improve query performance. This requires an update of the SQL database schema to version v29. The migration will be done automatically upon startup when upgrading from FS 6.x.x, please be aware that this migration can be time-consuming when done on large databases. If you are upgrading from FS 5.x.x, please check the previous release notes for the required migration steps. The following changes were made to the indexes:
- Updated the vonk.ref.ref_name_relativereference index to include the Version column if not already present.
- Replaced the vonk.tkn.ix_tkn_code_name_systemhash index with a new tkn_name_code_systemhash index, reordering the columns to Name, Code, SystemHash.
- Updated the vonk.ref.ref_name_urlhash index to include additional columns EntryId, Id, Url, Version.
- Updated the vonk.uri.uri_name_hash index to include the UriValue column in the INCLUDE clause.

Release 6.6.0, January 29th, 2026

Improvements

Replaced the technical UI framework for the Firely Server Demo Homepage to simply the deployment using subdomains.

Features

Add support for the _until parameter in the Bulk Data Export operations on all levels and Patient/$everything.
Added support for dedicated OpenTelemetry metrics for counting the Patient Access API metrics according to the CMS definition of the reporting requirements for CMS-0057-F. The exporter metric is called “firely.server.cms0057.patient.count”.

Fix

Tenant labels are now also applied on contained resources.
Posting a Bundle with type=collection returns now a correct OperationOutcome instead of a success message with status code HTTP 501.
Fixed an issue due to which $liveness was blocked longer than necessary when loading conformance resources.

Release 6.5.2, January 15th, 2026

Fix

Updated the SQLite dependencies of Firely Server to address CVE-2025-6965. The package SQLitePCLRaw.provider.e_sqlite3 has been updated to the latest version 3.0.2, and the SQLite version that is used is updated to version 3.50.4.2
Updated AWSSDK.Core dependency to version 4.0.3.8 to address CVE-2026-22611.

Release 6.5.1, November 25th, 2025

Fix

We updated the dependencies of the docker image to address security vulnerabilities in some of the base layers. The updated base image is now mcr.microsoft.com/dotnet/aspnet:8.0.22-alpine3.22.

Release 6.5.0, November 4th, 2025

Improvements

The behavior of the $purge operation has been adjusted with regard to Group resources. Purged Patient references are now removed without deleting the entire Group, as Groups may contain additional references to other Patient instances.
Firely Server MassTransit dependencies were updated to enhance SASL authentication with Kafka, improving message passing security.

Features

It is now possible to configure the file retention period for Bulk Data Export task files. It specifies how long the exported files should be retained on the servr before they are automatically deleted. For more information see BDE Configuration.
SSL configuration details are now supported for RabbitMQ in Firely Server PubSub. It enables configuring SSL settings to secure the connection between Firely Server and RabbitMQ. For more information see RabbitMQ Configuration.
To support quick and easy debugging, Serilog Log Level hot reloading capabilities can now be leverages. The log level of Serilog can now be changed in the logsettings at runtime without restarting Firely Server. For more information see Hot-reloading log event level.
Added support for indexing custom search parameters in FSI. See Custom Search Parameters for more information.
We provide a beta release of CDS hooks services. For more information see CDS Hooks.

Programming API changes and plugins

Firely Server was updated to use the Firely .NET SDK v6.0.1. For those implementing custom plugins or facades, we recommend updating these to use the .NET SDK v6.0.1 when upgrading to this version of Firely Server. Please check out the release notes here for more information.
It is likely all custom plugins need to be recompiled against new version of Vonk.Core package due to SDK changes.

Fix

Fixed an issue that resulted references not being resolved using the resolve() function in FHIRPath when validating constraints against resources wrap inside a Bundle.
The default appsettings missed the EnforceAccessPolicies element in the SmartAuthorizationOptions section.
$liveness and $readiness contained invalid values for the RequireTenant settings in their respective Operations configuration section.
Fixed a FHIRPath-related issue when validating the ctm-1 constraint against CarePlan resources.

Known behavioral changes

You may encounter issues ingesting same resources if they contain elements unknown to the StructureDefinition. Previous versions of SDK would discard unknown elements, however, the new SDK will now report these as validation issues.

Release 6.4.0, August 26th, 2025

Fixes

We improved the behavior of the validator for resolving references and applying validation in contained resources and bundle resources. FHIRPath constraints using resolve() statements will now evaluate correctly in these situations.

Release 6.3.1, August 11th, 2025

Fixes

We updated dependencies of the Elasticsearch sink to fix a security vulnerability in a dependency of the Elastic.Serilog.Sinks package. The updated version is now 8.18.2. See the Elastic Sink 8.18.2 release notes for more information.
We fixed a bug where FSI would take a long time to start up when the MongoDb target database would contain a large number of resources. This was caused by FSI trying to perform a count on the target database, which would take a long time when there were many resources.

Release 6.3.0, July 22th, 2025

Features

We introduced the AdvisorRules setting for the validator for Firely Prior Authorization and Scale licenses. The implementation of the Advisor Rules system allows users to customize validation behaviour on a more granular level by setting filters with which the outcome of validation or the validation itself can be modified. Note that this feature is still in beta. For meore information see Filter validation outcome based on advisor rules.
The validator will now create extensions on validation errors pointing to the profile that caused the error in the http://hl7.org/fhir/StructureDefinition/operationoutcome-issue-source extension. These issues will also be annotated with line numbers in the http://hl7.org/fhir/StructureDefinition/operationoutcome-issue-col and http://hl7.org/fhir/StructureDefinition/operationoutcome-issue-line extension.

Release 6.2.0, July 15th, 2025

Improvements

Updated Serilog ApplicationInsights sink configuration to use Connection String instead of the deprecated Instrumentation Key. Azure no longer supports Instrumentation Keys, so one should use connectionString in the ApplicationInsights sink configuration. The connection string can also be configured via ApplicationInsights:ConnectionString in appsettings.json. See Application Insights for more information.
Updated search anonymization to work across multiple Firely Server instances. This also changed the configuration, see: Search Anonymization on how to configure the search anonymization.
It is now possible for Firely Server to pick up appsettings.json files during startup by specifying the file location in the environment variable VONK_PATH_TO_SETTINGS. See Providing settings in a different folder. Before, the configuration was only loaded from appsettings.instance.json.
We improved the behavior of license checks upon startup so that users will no longer see warnings for unlicensed plugins that are not enabled in the pipeline.
We made some improvements to Firely Server Ingest (FSI):
- We have improved the efficiency of FSI with regard to memory usage/CPU when generating the final usage statistics after a run. This could lead previously to excessive memory consumption and crashes.
- FSI will now show a warning if it is unable to connect to a source database.

Fixes

Requests with a double slash (//) would lead to an uncaught exception. This will now lead to a 501 Not Implemented response in case the double slash is used within the URL and to a 404 Not Found response in case the double slash is at the end of the URL.
We made some fixes to the Vonk.Facade.Starter kit to help developers on their way with building a facade.
- It is now possible to create Observation resources again.
- _total=none is now handled properly. Before this would lead to an error when doing a search.

Features

It is now possible to validate QuestionnaireResponse resources against their original Questionnaire resource. See Advanced Validation for more information.
Message brokers can now be used as a target for Firely Server Ingest. FSI will publish messages to the message broker upon ingesting resources, which can then be consumed by Firely Server. Currently, only Azure Service Bus and RabbitMQ can be configured as message brokers for FSI. The use of a MongoDb source is not supported if the target is set to a message broker, only ingestion from files/folders is supported. See Target (for PubSub) for more information.
We upgraded the .Net SDK to v5.12.0. See the SDK 5.12.0 release notes for more information.

Release 6.1.0, May 23rd, 2025

Security

AccessPolicy resources can now only be accessed or modified with system-level scopes (e.g., system/AccessPolicy.*). Patient-level scopes (patient/AccessPolicy.*) and user-level scopes (user/AccessPolicy.*) are not allowed and will be rejected with a 403 Forbidden response.
TrustedProxyIPNetworks now has an additional setting AllowAnyNetworkOrigins to allow any network origins to be trusted. Before, this configuration was only allowed if ASPNETCORE_ENVIRONMENT was set to Development. Systems that used this environment variable to bypass the ip-range restrictions should switch to using this setting instead. This setting is disabled by default and should only be enabled if you are sure that your network is secure.
We added a check to the SMART on FHIR settings to ensure that Authority is always configured.
We added the ClockSkew setting to the SmartAuthorizationOptions. This setting is used to adjust the expiration time and validity of JWT tokens. Before, you could only adjust the expiration time of a JWT token in FA, and Firely server would add an additional window of 5 minutes to this expiration time where the token would still be valid. This window can now be adjusted with this setting. See Enforcing access control for more information.

Improvements and Fixes

We improved the behavior of AuditEvent generation in combination with $member-match. The AuditEvent will now capture the Patient ID and Identifier of the member after a successful match.
We improved the performance of snapshot generation queries for Bulk Data Export against a SQL back-end.
We fixed a bug for the Document Handling operation. Before, references of the posted document bundle could not always be resolved.
We improved error messaging of Firely Server for SMART on FHIR reference tokens. Operation Outcomes indicating errors with regard to the token would only mention JWT tokens when a reference token was used. As this was misleading, we adjusted the error message to dynamically show the type of token that was used.
We fixed a bug in the handling of the above modifier in search queries. Firely Server does not support the above modifier and would show a large stack trace when this modifier was used in queries. Error handling for the use of this modifier is now improved.

Features

We added support for the use of the Claim Check pattern in PubSub. This features allows you to outsource the payload of a message to an Azure Blob Storage Account that can be referenced in the message, leading to smaller messages and improved performance. See Claim Check Pattern for more information.

Release 6.0.0, April 15th, 2025

Firely is proud to announce a new major version of Firely Server. This release represents a significant step forward in our commitment to providing a reliable, compliant, and easy to use FHIR server. With this new version, we’ve focused on delivering:

support for Sharding with MongoDB (see MongoDB Sharding)
zero-downtime migrations with MongoDB (see Zero-downtime Migration)
detailed insights into Firely Server deployments based on OpenTelemetry metrics and traces (see OpenTelemetry)
improved integration into existing infrastructures with Kafka support for Firely Server PubSub (see Configuration)
out-of-the-box compliance with more HL7 DaVinci Implementation Guides, e.g. by providing support for the HRex $member-match operation (see Da Vinci - Da Vinci Payer Data Exchange)
flexibility for deployments requiring multi-tenancy (see Multi-tenancy)

Please study the release notes carefully as they contain breaking changes to the behavior of Firely Server, as well as the configuration of the server. Our support team is happy to provide assistance in the upgrade and can be reached at server@fire.ly or through the support desk. Need hands-on support with your upgrade? Our expert consultants are here to help. Explore our Upgrade Support Package to get started.

Note

With the release of Firely Server 6.0, we will officially stop support for Firely Server v4.x. We will continue supporting customers that run Firely Server v5.x.

Security

To avoid accidentally granting access to AccessPolicies, AccessPolicy resources cannot be accessed by a resource wildcard scope. E.g. system/*.* should be replaced with - system/AccessPolicy.* to be able to access AccessPolicy resources.
The $lastN operation can now be used with in combination with permissions defined in an AccessPolicy resource.
Intreractions with system-level scopes where the token is bound to a fhirUser of type Device will be rejected if no matching AccessPolicy can be found.

Database

Raised the minimum supported version of MongoDB to 6.0 to enable sharding.
Sharding is now natively supported by Firely Server when using MongoDB as the database backend (see MongoDB Sharding). Sharding improves the read/write performance of Firely Server. A new license token is required for this feature. Please contact us for an updated license.
Virtual multi-tenancy can now be enabled to logically separate stored resources in the database. The tenant identifier can be retrieved either from an HTTP header value or from a token claim (see Multi-tenancy).
Firely Server Ingest can now auto-provision the target database to facilitate zero-downtime migrations (see Zero-downtime Migration). A new license token is required for this feature. Please contact us for an updated license.

Attention

Firely Server requires a schema upgrade to version v28 of the database. This is only required for MongoDB database backends. The migration MUST be done using the zero-downtime migration process.

Features

Firely Server now implements the $member-match operation to find members of a health plan based on demographic information. See HRex Member Match - $member-match for more information.
Traces and ASP .NET metrics based on OpenTelemetry can now be exported to OTLP-enabled backends. See OpenTelemetry for more information.
memberOf() expressions are now supported in FHIRPath constraints when validating resources.
Added support for validating MIME types (bcp:13) and language codes (bcp:47).
Firely Server has a new homepage featuring a refreshed and modern UI.
$realworldtesting can now be executed using a POST request.
It is now possible to disable the create-on-update feature with a new setting in the FhirCapabilities section of the app settings. See FHIR Capabilities for more information.
With this release Update with no changes (No-Op) is enabled by default. For more information about the plugin see Update with no changes.
The NoOp plugin now also works in combination with transaction bundles.
Added support for reading messages from a Kafka topic when using Firely Server PubSub.
We have updated the validator api that is used by Firely Server for improved validation.
Added support for JWT-based authentication against remote terminology services. See Options for more information.
Expose port option in PubSub for RabbitMQ. See Configuration for more information.
Performance counters are now exported via OpenTelemetry when ingesting data via Firely Server Ingest.
Enable use of AuditEvent output parameters (e.g. IP address) for regular logging.

Attention

With the introduction of the new validator it is no longer allowed to use id fields containing underscores (_) in the resource id.

Programming API changes and plugins

Upgraded the Firely .NET SDK to v5.11.4, see its release notes.
Upgraded to v2.0 of the firely-validator-api for validation and removed the legacy validator previous used. This applies to all validation within Firely Server.
ISearchRepository programming API has been changed to prevent unintended unauthorized access. It is required to explicitly set SearchOptions.Authorization when calling search, or use one of the extension methods for ISearchRepository, e.g.: GetByKeyWithFullAccess or SearchCurrentWithFullAccess. SearchOptions authorization can be configured using one of the extension methods: WithAuthorization, WithFullAccess.
ISearchRepository extension methods that were not accepting SearchOptions as a parameter: GetByKey and SearchCurrent - are replaced with GetByKeyWithFullAccess and SearchCurrentWithFullAccess respectively.
SearchOptions is now an immutable record type, which might be a breaking change for some plugin code.
Extended the base class RelationalQueryFactory with support for the ResourceTypesNotValue (see IFilterValue implementations) and methods to express a predicate that is AlwaysFalse() or AlwaysTrue().
The VonkConfigurationAttribute no longer supports the deprecated isLicensedAs property.
The deprecated VonkConstants.MediaType values XmlR3, JsonR3 and TurtleR3 have been removed. Use FhirXml, FhirJson and FhirTurtle instead.
The deprecated method Check.HasValue() has been removed. Use Check.NotNull() instead.
Added documentation for ICapabilityStatementBuilder and related methods, see Capability Statement Management.
Starting from this release the Vonk.Smart and Vonk.Plugin.SoFv2 plugins are no longer supported and have been removed. They are replaced by the Vonk.Plugin.Smart plugin. For more information see Enforcing access control. It is necessary to adjust the pipeline options accordingly.
Removed plugin Vonk.Plugins.TerminologyIntegration. Vonk.Pluigins.Terminology should be used instead.
Removed ISpecificationZipLocator from the public API.

Adjustments and Fixes

“This is an open FHIR endpoint for testing and educational purposes only. Uploading real personal data is strictly prohibited.” will no longer be shown on the homepage when running in production mode.
Improved transaction handling for MongoDB to avoid duplicate key exceptions during the ingestion of resources.
SearchParameters of type Reference without a target are no longer logged as errors; they are now logged as warnings.
Improved handling of invalid resources within batch bundles. Firely Server now returns HTTP 200 - OK with individual OperationOutcomes when resources in the bundle are invalid.
Improved handling of large Bulk exports for MongoDB.
Fixed pre-validation when a pipe character (|) and a version are used within a canonical in meta.profile.
Improved handling of Patch exceptions.
Fixed FormatException when using $versions with an invalid MIME type.
Limited recursive Group-level Bulk exports to skip other Group resources that are transitively included.
Authorization endpoints listed in AdditionalIssuersInToken were previously accepted as the only valid issuers when the setting was used. Now, the authority is also accepted as a valid issuer of tokens.
Fixed indexing of elements of type url for URI search parameters.
Improved debug logging for the reindex operation to allow tracking the progress of long-running operations.
Administration APIs reset, reindex/all, reindex/searchparameters, preload and importResources are now $reset, $reindex-all, $reindex, $preload and $import-resources to conform with the naming rules for custom operations.
SMART on FHIR v2 scopes can include search arguments. Upon writing resources (create, update, delete) Firely Server used to only evaluate those for patient/ scopes. Now, they are also evaluated for user/ and system/ scopes.

Configuration

Attention

Default behavior of Firely Server has been tweaked by changing configuration values. Make sure to reflect the desired behaviour by adjusting appsettings.instance.json or environment variables.

The use of other compartments then Patient in SMART on FHIR authorization is not well defined and potentially unsafe. So we redacted the Filters settings in SmartAuthorizationOptions. You can now only specify a filter on the Patient compartment. For more information see Enforcing access control. If you configured just a Patient filter in the old format, Firely Server will interpret it in the new format and log a warning that you should update your settings. If you configured a filter on a different compartment, Firely Server will log an error and halt.
Evaluation of Subscriptions is now turned off by default. To enable - adjust SubscriptionEvaluatorOptions accordingly.
BundleOptions.DefaultTotal from now on has a default value of none for performance reasons. For available options see Search size.
TaskFileManagement.StoragePath was already marked as obsolete, and is now also no longer forward compatible. Use the TaskFileManagement.StorageService settings to provide the storage path, see Bulk Data Export for details.
SupportedInteractionOptions type has now been replaced by Operations<T> to accommodate for the requirements of a configuration revamp.
The configuration structure for operations has been completely revamped:
- SupportedInteractionOptions has been replaced by a new top-level Operations configuration section
- Administration.Security.OperationsToBeSecured has been replaced by per-operation NetworkProtected property
- SmartAuthorizationOptions.Protected has been replaced by per-operation RequireAuthorization property
- Each operation now has granular control over authorization, network protection, tenant requirements, etc.
- See Enable or disable interactions for detailed information about the new configuration structure and migration guide

Note

If MultiTenancy is enabled, the history and vread operations are blocked for all resources. This is to prevent the possibility of cross-tenant access to resources. The history and vread operations are not supported in a multi-tenant environment.