[v0.10.1] - 2026-06-27

Fixed

• Terminology: the version-less value set lookup now resolves to the latest version when several versions of the same value set are present (e.g. VSAC date versions), instead of an arbitrary one determined by database row order
• Rendering: fixed value set links in renderLinkComma (read the resolver's description/link fields and fall back to the raw URI)

Tx Conformance Statement

FHIRsmith passed all 2503 HL7 terminology service tests (modes tx.fhir.org+omop+general+snomed, tests v1.9.1, runner v6.9.11)

[v0.10.0] - 2026-06-27

Added

• Publisher: track the IG Publisher version used for each task, and show it on the tasks list and task detail pages
• Packages: new POST /packages/update-package endpoint to force-refresh specific packages in the registry, bypassing the feed crawler's de-duplication (used to push out a corrected package after a bad publish)
• Publisher: automatically update SUSHI to the latest release before each draft build and publication run, installed into a FHIRsmith-owned prefix so it needs no root privileges

Changed

• Rebuilt how caching works (see the tools IG for documentation)
• Renamed the compare worker/operation

Fixed

• Publisher: the publication run now verifies that the package about to be published is a real publication build (not a draft) before committing it to the web tree, so a failed publication build can no longer silently ship a notForPublication draft package
• Packages: the crawler now rejects any package flagged notForPublication at ingest, instead of only checking the feed entry
• Registry: better handling of versions on manual queries against the external registry
• Fixed handling of the cache-control header
• Corrections to generated test cases

Security

• SSRF protection: outbound fetches in the packages and registry crawlers now reject any host that resolves to a non-public address (private, loopback, link-local including cloud-metadata, CGNAT, unique-local, etc.). Enforced at connection time, so it also covers redirect targets and DNS rebinding, and prevents leaking registry API keys to a redirected host
• Path-injection hardening: local-file feed reads in the packages crawler are confined to explicitly-allowed directories; the update-package endpoint only accepts http(s) URLs
• Dependency updates (npm audit)

Tx Conformance Statement

FHIRsmith passed all 2503 HL7 terminology service tests (modes tx.fhir.org+omop+general+snomed, tests v1.9.1, runner v6.9.11

[v0.9.7] - 2026-06-12

Added

• Support for tx modele to load resources directly
• Missing overwork protection processing ECL

Fixed

• Fix bug validating secondary displays across languages
• Fix CORS issue (double headers)
• Fix czech code in snomed import
• Many minor validation fixes
• ECL processing bugs
• Publishing: better logging, and fix timeout & restart error

Tx Conformance Statement

FHIRsmith passed all 2503 HL7 terminology service tests (modes tx.fhir.org+omop+general+snomed, tests v1.9.1, runner v6.9.10)

[v0.9.6] - 2026-05-21

Added

• increase timeout when publishing IGs (for US Core)

Fixed

• Replace re2-wasm with re2js in library/regex-utilities.js to eliminate the underlying WASM-heap leak
• Fix async problem loading OMOP
• Fix memory leaks
• Don't leak database connections

Tx Conformance Statement

FHIRsmith passed all 1649 HL7 terminology service tests (modes tx.fhir.org+omop+general+snomed, tests v1.9.1, runner v6.9.7)

[v0.9.5] - 2026-05-16

Fixed

• Workaround for memory leak in re2-wasm library that reduces it's severity

Tx Conformance Statement

FHIRsmith passed all 1649 HL7 terminology service tests (modes tx.fhir.org+omop+general+snomed, tests v1.9.1, runner v6.9.7)

[v0.9.4] - 2026-05-01

Added

• Draft MCP specification from Ontoserver

Changed

• Update Danish SNOMED CT Extension to 2026-03-31 version.

Fixed

• fix problem with version specific code system resolution
• fix hgvs handling of error response
• update NPM dependencies

Tx Conformance Statement

FHIRsmith passed all 1649 HL7 terminology service tests (modes tx.fhir.org+omop+general+snomed, tests v1.9.1, runner v6.9.7)

[v0.9.3] - 2026-04-10

Added

• Add support for handling contained value sets
• Add beta support for ECL

Changed

• Bump vsac fetch to 1000 and improve history presentation

Fixed

• Fix count on empty value set

Tx Conformance Statement

FHIRsmith passed all 1651 HL7 terminology service tests (modes tx.fhir.org+omop+general+snomed, tests v1.9.1, runner v6.9.6)

[v0.9.2] - 2026-04-14

Fixed

• Improve VSAC logging
• Fix SCT import to handle SCT DK

Tx Conformance Statement

FHIRsmith passed all 1578 HL7 terminology service tests (modes tx.fhir.org+omop+general+snomed, tests v1.9.1, runner v6.9.6)

[v0.9.1] - 2026-04-10

Added

• TX: Add support for child-of filters

Changed

• TX: increase vsac timeout

Fixed

• Tidy up dashboard
• TX: fix bug listing versions when validating
• Fix support for child-of in R4/R3

Tx Conformance Statement

FHIRsmith passed all 1578 HL7 terminology service tests (modes tx.fhir.org+omop+general+snomed, tests v1.9.1, runner v6.9.5)

[v0.9.0] - 2026-04-09

Added

• TX: VSAC upgrade to pick up more changes
• TX: add definition of $related operation to CapabilityStatement

Changed

• TX: Deal with regex Denial of Service Issue
• TX: improve fragment handling in extensions per TI decision
• TX: Reduce snomed loaded versions - have already moved to affiliate managed servers
• TX: fix bug handling excluded concepts using a filter
• improve dashboard template

Fixed

• Update dependencies for security fixes
• TX: fix error in SNOMED translate for implicit concept maps
• TX: Fix OCL cache invalidation and case-insensitive concept lookups
• Publisher: fix handling of web templates folder
• Publisher: fix webtemplates table headings

Tx Conformance Statement

FHIRsmith passed all 1578 HL7 terminology service tests (modes tx.fhir.org+omop+general+snomed, tests v1.9.1, runner v6.9.5)