CrafterCMS Version 4.7.0 and 4.7.0E

Released October 21, 2026

Important

Please see Upgrade Notes for CrafterCMS 4.7.0 for an important note and Breaking changes for breaking changes and other things to consider before upgrading

For instructions on how to update your CrafterCMS install, please see Upgrading CrafterCMS

New Features

  • New basic users.properties file to support Engine authentication
    See Engine Properties-Based Authentication for more information

  • New configuration property studio.authoring.serverUrl for external/browser-facing Studio links.
    See Authoring URL for more information

  • New generatePreviewToken API for generating preview tokens. The Token Management UI now uses this API instead of the general-purpose encryption API.

Enhancements

  • Deployer target management APIs now accept the management token in the X-Crafter-Management-Token header, preventing the token from being exposed in URLs and request logs. See Breaking changes for the required client changes.

  • Engine now reports detailed URL rewrite configuration errors and continues serving the site without URL rewriting when the configuration is invalid.

  • Crafter Profile Enterprise only feature now uses configurable access tokens. New Authoring installations generate installation-specific token IDs and store them in $CRAFTER_DATA_DIR/profile/access-tokens.env.
    See Profile Access Tokens and Upgrade Notes for CrafterCMS 4.7.0 for the configuration required before an existing installation can start.

Dependency Updates

  • Noteworthy dependency updates:

    • OpenSearch to version 3.9

    • AWS SDK to version 2.56.0

    • Apache Commons Lang to version 3.21.0

    • Joda Time to version 2.15.0

For a complete list of community tickets, please visit: GitHub 4.7.0

For information on upgrading 3.1.x sites, see here