Release Notes for Mindbreeze InSpire
Version 24.8

Innovations and new features

Easier navigation to the original source of an answer by enhancing the PDF preview

With Mindbreeze InSpire Release 24.8, customers receive an optimized PDF preview for displayed answers and generated AI answers. Users can now jump directly to the original source in the document by opening the PDF preview of an answer. It is also possible to highlight the source text in colour to make it easier to find and to clarify the scope of the source text (see screenshot).

On the API side, you can configure whether the start and end points of a source are marked or whether the source text is highlighted in colour. When marking the start and end points, you can also define that only the start point, only the end point or the start and end point are marked. By default, the marking of the start and end point of a source is activated.

Link to the documentation

New and advanced connectors

Indexing of Microsoft Loop content with the Microsoft Loop Connector

With the Mindbreeze InSpire 24.8 release, users are able to use their content from Microsoft Loop in Mindbreeze InSpire. The Microsoft Loop connector adds Loop Pages to the index and enables the use of this information, for example in Insight Apps. Users receive a more comprehensive overview of their company data with Loop Pages in 360-Degree Views. In addition, searching Loop workspaces with the Mindbreeze InSpire AI Chat is more intuitive and efficient.

The Microsoft Loop connector is included as a plugin in Mindbreeze InSpire by default. Administrators can start configuring the connector after the update has been completed.

Link to the documentation

Technical extensions

Mindbreeze supports Python 3.12

As part of the ongoing modernisation of the base, Mindbreeze now supports Python 3.12 with the Mindbreeze InSpire 24.8 release. This enables the use of new technologies in the development of new features, as well as in the expansion and optimization of existing features.

Increased security and extended compatibility with .NET Update

With Mindbreeze InSpire 24.8 Release, .NET receives an update to a higher version. This update enables the use of the latest technologies in the product development. In addition, security has been increased and compatibility has been extended.

Administration dashboard for licence use added

With the Mindbreeze InSpire 24.8 release, customers can view the current status of their Mindbreeze licence. The number of currently indexed documents and the number of API calls made are displayed in a dashboard. The number of API calls made refers to the current period. The dashboard provides administrators with a clear overview of the current licence status. Potential licence problems, such as approaching a document or API call limit, can be identified and prevented at an early stage.

Extended use of the log directory and log files possible via download option

With the Mindbreeze InSpire 24.8 release, users can download the log directory and the log files from a service in tar.gz format. The download option depends on the assigned rights. This allows users to easily share the log directory and log files with their colleagues. In addition, Mindbreeze Support can use this data to carry out more detailed error analyses in the event of a problem.

Link to the documentation

Notification for content searchability available

With the Mindbreeze InSpire 24.8 release, a new backend API is available that sends notifications as soon as documents are effectively searchable. These notifications can be used to implement workflows on the API side, for example.

Link to the documentation

Additional improvements

Increased and optimized security of Mindbreeze InSpire

To continuously optimize the security of Mindbreeze InSpire, a constant focus on this topic is necessary. As part of the Mindbreeze InSpire 24.8 release, Core OS, Chromium, iDrac and EFI, among others, will receive updates to more recent versions to increase the security of Mindbreeze InSpire.

Additional information on the administration of Insight Services for Retrieval Augmented Generation (RAG)

To provide Mindbreeze users with the best possible support, the documentation is constantly being optimized and expanded. With the Mindbreeze InSpire 24.8 release, the documentation now contains additional information and more detailed explanations for the administration of Insight Services for RAG.

Link to the documentation

Security relevant changes

24.8.2.406

• Fix for: Additional escaping of the characters double quote ("), single quote ('), backtick (`), equal sign (=) and slash (/) for possibly stored XSS attacks within unescaped mustache templates.

24.8.1.369

• Fix for: Webpage Thumbnail Generator did not verify URLs that were set explicitly with a mesthumbnailurl property.
• Changed: Restrict access to some API endpoints.
• Disabled: Temporarily disable WebBrowser.Service Feature due to a possible privilege escalation.

24.8.0.335

• Updated: Dell Firmware (BIOS, UEFI-Firmware, CPU-Firmware) to fix CVEs (CVE-2024-38303, CVE-2024-38304, CVE-2024-21829, CVE-2024-21781, CVE-2023-43753, CVE-2024-23599, CVE-2024-23984, CVE-2024-21820, CVE-2024-23918, CVE-2024-27457).
• Updated: Migration to higher .NET version (CVE-2023-29337, CVE-2023-4914,CVE-2022-26907,CVE-2024-30105,CVE-2024-0057,CVE-2018-8292,CVE-2019-0820).
• Updated: CoreOS security to fix CVE-2024-45306.
• Updated: Chromium to version 131.0.6778.69 (CVE-2024-9954, CVE-2024-9955, CVE-2024-9956, CVE-2024-9957, CVE-2024-9960, CVE-2024-9961, CVE-2024-9962, CVE-2024-9964, CVE-2024-9966, CVE-2024-10230, CVE-2024-10231, CVE-2024-11110, CVE-2024-11111, CVE-2024-11112, CVE-2024-11113, CVE-2024-11114, CVE-2024-11115, CVE-2024-11116, CVE-2024-11117, CVE-2024-10487, CVE-2024-10827).
• Fix for: ICMP Timestamp Request Remote Date Disclosure (CVE-1999-0524).

Additional changes

24.8.2.406

• Fix for: The RAG service crashed if an invalid credential was configured.
• Fix for: A Query performance issue occured in the Similarity Search, when the answer was extracted from large content.
• Improved: Visualisation and robustification of the 360-Degree View.
• Improved: Stability of showing Interactive Exploded Views when hovering on annotations.

24.8.1.369

• Added: Robustification, if kubernetes label "apps.kubernetes.io/pod-index" is not available.
• Added: Robustification of HTML Filter metadata processing.
• Added: Missing "libxml2.dll" on Windows, which prevented the index service to start, if Mindbreeze InSpire had been installed in a new installation directory.
• Fix for: Kernel bug made the local console unusable via iDRAC.
• Fix for: Windows installer did not create services properly.

24.8.0.335

• Added: Support for python 3.12 plugins.
• Added: The File Manager allows the download of folders as tar.gz file.
• Added: The source of the Answer or AI Answer is highlighted in the PDF. The feature "Jump to Answer" navigates directly to the page in the PDF file where the answer is highlighted.
• Added: Option to truncate prompts for Mindbreeze InSpire LLMs.
• Added: Zero downtime update for the search for Kubernetes deployments.
• Added: The setting „Summary Sources Separation Text“ in the RAG UI.
• Added: Optional LLM parameters are allowed in a text generation call.
• Fix for: Undefined input handling issue in Wiring.performComputation.
• Fix for: Missing HTML escaping for the configuration and the user context in Insight Apps.
• Fix for: In the Web Connector, a problem occurred, where, in some cases, a number of documents that surpassed the configured "Allowed Delete Ratio" could be deleted.
• Fix for: The Outlook Add-In sometimes did not open “hrefs” in the default browser.
• Fix for: The user session got lost on webview reinitialization.
• Fix for: Under certain conditions, the mesmaster process did not close the connections to index for index_mode requests.
• Fix for: Search requests did not automatically convert to “jsonp” format for certain queries.
• Fix for: Keycloak update failed with certain password policies.
• Fix for: The PDF diff service required a RAG feature flag to work.
• Fix for: Issue with leaked confluence resources (cursors).
• Fix for: The RAG configuration did not synchronize to more than one consumer.
• Fix for: Issue in the bootstrap's dropdown.
• Improved: Integration of chatframe.
• Improved: Stabilized loading of the 360-Degree View module in the Insight App Designer with a 360-Degree View configuration.
• Changed: In the Client Service, the token fetch task now has a shorter retry delay, if the reason for the failure was a missing credential.
• Removed: The following weak SSH ciphers and key exchange algorithms were disabled: aes128-cbc, aes256-cbc, diffie-hellman-group-exchange-sha1.