Release Notes

Release Notes

Every Core dna product, release by release, newest first. Each product ships on its own schedule.

Platform 2026.5.1

What’s new in Core dna Platform 2026.5.1

Configurable Backend Sessions and Bug Fixes

Administration sessions can be set to last longer and to stay open while they are in use. Deactivating a user now signs them out at once.

Key highlights

  • Admin session length: choose how long an admin session lasts, and keep it open while it is in use.
  • Deactivation signs users out: a deactivated user loses every open session at once.

Changes in behaviour

  • Deactivated users are signed out at once, and sign in again if they are reactivated later.

Choose how long an admin session lasts

How long an admin session lasts is now configurable, in the Backend Session group under Users › OAuth Authentication › Configuration:

  • Session length (hours): how long a session lasts after signing in. The default is still 4 hours, so nothing changes until you set it.
  • Extend session while in use: keep extending the session while the admin is being used, instead of ending it a fixed time after sign-in.
  • Maximum session length (hours): the longest an extended session can last, 168 hours (seven days) by default.

Background requests, such as keep-alive checks and edit-lock renewals, do not count as use, so an idle open tab does not keep a session alive.

The Backend Session group of the OAuth settings: Session length 8 hours, Extend session while in use switched on, Maximum session length 72 hours
Users › OAuth Authentication › Configuration › Backend Session

Deactivating a user ends their sessions

Deactivating a user now ends their open sessions at once, instead of leaving them signed in until their tokens expire. A deactivated admin with a page still open is signed out on their next request and told that the account is no longer active.

Other improvements and bug fixes

  • Tree listings such as pages, categories and custom entity records now remember which branches you had expanded and re-open them when you return to the listing in the same browser tab.
  • Fixed an issue where files could no longer be dragged from the desktop into the file manager to upload them.
  • Fixed an issue where a form field required to be unique, such as an email address, could be permanently blocked by a submission that was never completed, including an abandoned multi-step form or one left waiting on a payment. The check is also considerably faster on forms that have collected a large number of submissions.
Go deeper

Was this page helpful?

Your answer goes to the docs team.