EspoCRM v10.1 released

The most significant enhancement in this release is the OAuth 2.0 server. It enables API access to EspoCRM on behalf of regular or administrator users, making it particularly useful for MCP clients.

Release notes

Enhancements:

• OAuth 2.0 server #3782
• Job processing with workers, RabbitMQ implementation #3724

Improvements:

• KB Article: Markdown body #3805
• Page content full width option #3792
• Record view content width preferences parameter #3793
• Split RTL direction from theme selection #3697
• URL-Multiple field: Protocol Required parameter #3774
• OAuth account: Support PKCE #3775
• Formula: Print problem excerpt and position for failed script #3809
• Config parameter enabling/disabling admin’s ability to manage extensions #3795
• Config parameter enabling exposing exception messages #3780
• Formula: Function string\replaceMany #3855
• UI action to inactivate all authentication tokens #3847

Framework improvements:

• DI: Qualifiers #3734
• Entry point metadata definitions and supporting non-GET requests #3777
• Routes: Defining allowed request content types #3797
• Route and entry point parameter forbidding API authentication #3856

Changes:

• Formula: record\create to allow only a-zA-Z0-9\- characters for ID #3791
• Form requests sent to API endpoints to be not authenticated #3796
• Change in AuthToken\Manager interface #3773
• Return type change in Espo\Core\Container\Loader #3732
• Added toPsr7 and applyPsr7 methods to Request and Response interfaces #3778
• Migrating Doctrine DBAL to v4 #3801

Compatibility:

• Drop MariaDB 10.3-10.5 support #3800