Semaphore 5.12.0

Semaphore 5.12.0 is a major software update from the Semaphore 5.8.8 release.

Refer to semaphore-v5.12.0-14.august.2026.txt for the bill of materials.

Installation Prerequisites

Important: Starting with Semaphore 5.12.0, the minimum supported Java version is Java 21.

Before installing or upgrading to this version of Semaphore, review the following:

For general information:

• Third-party software requirements (Linux)
• Third-party software requirements (Windows)

For installation server requirements:

• Plan your Semaphore Installation (Linux)
• Plan your Semaphore Installation (Windows)

Generative AI Notice

Starting with Semaphore 5.10.0, if you have access to an Azure OpenAI Service, it is possible to use the AI Model Builder incorporated into the Knowledge Model Manager (KMM) tool.

Important: When using the AI Model Builder, you must use your own Azure OpenAI Service. Progress is not a party to any agreement between you and Azure. Progress has no control over the Azure OpenAI Service or its availability and cannot be held liable for any output, errors, damages, losses, or other results of your use of the third-party generative AI integrated into the KMM tool. The cost of using the Azure OpenAI Service is charged by Azure to your Azure account.

Docker Images

New Functionality

• 26659—Standardized Docker images are now provided for all releasable Semaphore components. Each component has its own dedicated image, versioned in alignment with the corresponding component release. This simplifies deployment and version management across Semaphore environments, making it easier to run components consistently in on-premises, cloud, and CI/CD workflows. Images are production-ready and include full configuration documentation covering environment variables, ports, volumes, and startup parameters. For details, see Using Progress-supplied Docker images.

Issues Resolved

• 38218—The Classification Server Java Docker image ran as root instead of the sem_cs user.

Visualisation Application

New Functionality

• 30093—The Visualisation Application was rewritten to replace the legacy AngularJS and smartlogic-visualisation library with React and @semaphore/bubbles. This modernizes the frontend architecture, delivering improved performance and a more responsive user experience, while laying the foundation for faster delivery of future enhancements.
• 30169—The Tree and Visualizer views now use backend paging, enabling the application to handle large models more efficiently. Users can navigate large hierarchies and visualizations without waiting for all data to load at once.

Model Management

Changed Behavior

• 25155—Token-in-path authentication is now disabled by default, preventing authentication tokens from appearing in generated URLs and access logs.

New Functionality

• 18881—Added Semaphore AI Model Builder, which uses large language model (LLM) suggestions to help users add concepts based on existing model data.
• 17292—Added SKOS mapping relationships for mapping concepts within a model.
• 18939—Added import and export of SHACL shapes from TTL files.
• 19604—Extended mapping relationships to point to external resources.
• 17289—Added search and selection of external standard resources in the structure pane.
• 18769—Added relationship metadata publication in Concepts Server and Velocity Writer.
• 20248—Label settings can now be configured at label-type level.
• 20257—Added constraint definition through the user interface.
• 20266—Moved the rulebase action from labels to concepts.
• 20891—Added configurable large language model provider selection for the AI Model Builder. For configuration details, see Configure the AI Model Builder.
• 21209—Added reuse of concept branches across multiple Semaphore models.
• 21182—Added support for editing AI Model Builder prompts.
• 22367—Added the ability to define and run SPARQL before export.
• 22352—Upgraded TopBraid Libraries and dependent components to maintain compatibility across model-management and publishing workflows.
• 23425—Added support for defining metadata on labels in a model.
• 17290—Added support for skos:Collection.
• 25168—Added the ability to assign metadata to combinations of concepts, concept subclasses, concept schemes, collections, labels, and relationships while respecting domains defined by linked models.
• 27667—Improved performance for models containing many classes.

Issues Resolved

• 12800—After deleting a task some of its records remained in master.
• 18767—Excel import did not import hasTopConcept relation.
• 20803—Concepts Widgets could return a TypeError when opened in a language for which preferred labels were missing.
• 21892—Backup operations stopped returning the backup checksum.
• 22348—Publisher configurations overwritten during upgrade.
• 24308—Wrong model displayed in AI Model Builder configuration interface after navigating away and back.
• 24925—Abstract classes appeared in the search-as-you-type class picker.
• 26770—Branch exports were processed synchronously instead of as background operations.
• 27234—A concept could not be re-exported after its previous copy was deleted from the target model.
• 27801—Publisher logs contained unnecessary DEBUG output, including thousands of lines for some operations.
• 26042—Backups larger than 2 GB could not be restored.
• 29262—The Standalone Publisher SPARQL endpoint did not work with Studio authentication after token-in-URL support was removed.
• 29029—Users were redirected to the wrong URL after successful OAuth login.
• 28452—semsys:hasTask returned all tasks to unauthorized users.
• 28534/28748—Creating a concept in a large model could leave KMM unusable for about 12 seconds.
• 28634/29161—The Constraint Violations report could take excessive time, prevent navigation within the model, and ignore its configured timeout.
• 30598—The structure editor generated incorrect SHACL shapes.
• 31108—Spreadsheet imports did not preserve column order.
• 30859—Label validation results were displayed inconsistently in concept details.
• 29299—Concept schemes configured with the Do not generate rulebase option could still be returned in classification results. Excluded concept schemes are now correctly omitted from generated rulebases.
• 28802—The Clear changes on master model setting could not be switched off after it had been enabled.
• 29316—Inconsistent behavior when exposing metadata properties on resources prevented exposed properties from being disabled and re-enabled correctly.
• 30223—Tracking the operation status of long-running concept scheme deletions could cause users to lose their session.
• 30860—A SHACL validation pattern intended to accept only digits accepted only a single digit.
• 28619—The Lexical Side Panel opened automatically when entering a model.
• 38067—Importing the Space Missions plug-in could produce unresolved or conflicting labels.
• 38197—The metadata picker displayed types outside the selected resource's domain, allowing choices that caused constraint violations.

Knowledge Model Manager

Issues Resolved

• 36162—Custom roles defined in the auth-override.properties file were not appearing in the user interface until a user assigned to the role had logged in. Custom roles are now available for permission configuration immediately after application startup.
• 36275—Custom-role mapping did not work correctly when using NO_AUTH authentication. Users assigned to custom roles that are mapped to Semaphore roles now receive the expected permissions and access to models.
• 37372—Expired licenses could not be deleted in certain scenarios.

Classification Server and Document and Text Analysis

New Functionality

• 17288—A new request parameter can filter classification results by publish set, allowing teams using different models to share the same Classification Server instance.
• 27870—Added the optional Bitext natural language processing (NLP) engine.
• 23787—Added Hyland document parsers.
• 25404—Added dynamic memory allocation when publishing rulenets.

Issues Resolved

• 37670—A crash could occur on certain JVM versions when many language packs were installed.

Concepts Server

New Functionality

• 22473—Added semantic embedding search.
• 36546—The Concepts Server now returns modification dates for models, concepts, and concept schemes. This metadata can be queried through the API to support integration and governance scenarios.
• 36547—Concepts Server API documentation now specifies formats for structured values returned as strings, including date-time values.
• 37461—Expanded Concepts Server API documentation with response-field data types, nullability, and purpose.

Issues Resolved

• 26343—The Concepts Server search index could be missing.
• 37458—Date-time formats were inconsistent between Semaphore and Concepts Server.

Publisher and Velocity Writer

New Functionality

• 31619—The HttpCalloutNotifier, a Publisher component that sends configurable HTTP notifications during the publish process, can now be configured to run during the initialization phase, before the model is loaded. This enables external validation or authorization checks, such as verifying model version metadata with an external service, before publishing proceeds. If the HTTP response is not in the 2xx range, publishing stops immediately.
• 14844—Added a tutorial plug-in for Apache Velocity with examples of common Velocity Writer properties and methods.

Issues Resolved

• 29490—Publisher could fail when processing very long SPARQL queries.

Configuration

Issues Resolved

• 37633—Default configuration files were not restored when the model configuration directory was empty.
• 38076—SBOM files in the distribution's license directories were not valid JSON.

CMIS Widget

Changes

• 38157—Updated deployment guidance for the CMIS widget, replacing an invalid HTTP-server copy workflow with a supported Caddy proxy approach.

Distribution Changes

• 37967—The Integrations component is no longer included in the Semaphore distribution.
• 37968—The obsolete Smartlogic-visualization-1.6.14-5.10.6.3.tgz archive is no longer included in the Semaphore distribution.

Vulnerabilities

List of fixed vulnerabilities