> For the complete documentation index, see [llms.txt](https://wiki.datadike.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.datadike.com/sonar/release-notes.md). # Release notes Changes in each DataDike SONAR release, newest first, with the agent version each release ships and the items that change what you do after an upgrade. ## What this section is This section records what changed in each DataDike SONAR release: new screens and capabilities, improvements to existing ones, and fixes. Entries are grouped by version, newest first, and each one gives the month of the release where it is known. The SONAR version is the version of the server. The console and the agent are delivered with it, so one number identifies the release. When a release ships a new agent version, its entry says so. To see which version you run, open **Admin Center › Settings**. The heading of the **General** section reads *Sonar Version* followed by the number. {% hint style="info" %} Server upgrades are carried out with DataDike implementation support. Agents are updated on their own path, described in [Update agents](/sonar/deploy-operate/agent-updates.md). Read the [entries that affect an upgrade](#the-entries-that-affect-an-upgrade) before your server moves to a new version. {% endhint %} ## Versions at a glance | Version | Release month | Agent version shipped | Main changes | | ------------------ | ----------------- | --------------------- | --------------------------------------------------------------------------------------------------------------------- | | **5.4.0** | September 2026 | 4.3.0 | Windows Updates across the fleet; update results with the error detail returned by Windows | | **5.3.0** | July 2026 | 4.2.0 | Asset Inventory; extension requests and the Requests screen; temporary policies | | **5.2.0** | June 2026 | 4.2.0 | Tolerance time, client and global scope, and CSV import for access policies | | **5.1.0 to 5.1.3** | May and June 2026 | 4.2.0 | Force Logout, delivery of policy changes, time zones in user schedules | | **5.0.0** | May 2026 | 4.2.0 | Employee targeting and identity verification for access policies; details of console sessions; new header and sidebar | | **4.5.0** | October 2025 | — | Users Behavior; paginated device list | | **4.4.9** | — | — | Geolocation; dashboard cards that open their view | | **4.4.0** | September 2025 | — | Location history; Last Seen filter; device uptime | ## The entries that affect an upgrade | Version | Item | What to do | | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | 5.4.0 | The server ships agent 4.3.0 and refuses to install an older agent. A Windows installer downloaded before the upgrade stops with the message `Old installer detected` | Download a new installer from **Agents › Install Agent** and use it for new devices | | 5.4.0 | Installed agents move to 4.3.0 through the automatic update, which runs at 35 minutes past every hour while **Enable agent automatic self update** is on. The option is shown read-only in **Admin Center › Settings**, in the **General** section, and is set with DataDike implementation support | Nothing to schedule. A device that is offline at the hourly cycle updates in the first cycle after it reconnects. See [Update agents](/sonar/deploy-operate/agent-updates.md) | | 5.4.0 | The result code and error detail of Windows Update installs are reported by agent 4.3.0 and later | Devices still on an older agent show the install status without the detail until they update | | 5.3.0 | The **Specific machines** list of an access policy shows only Windows devices running agent 4.2.0 or later | Update older agents to have their devices listed | | 5.3.0 | End users make extension requests from the productivity module shipped with 5.3.0. The agent downloads the module from the server when it installs it, which happens when the agent is installed with the *Sessions* optional feature. The request dialog needs the Microsoft Edge WebView2 Runtime on the endpoint | Endpoints installed before the upgrade keep the module they received. Updating it is done with DataDike implementation support | ## 5.4.0 September 2026 · ships agent 4.3.0 ### New * **Windows Updates across the fleet.** **Devices › Windows Updates** shows the update state of every Windows machine you can access. The screen needs the *List Agents* permission. It has two tabs and a scan panel: * **Overview** holds the *Monitored machines*, *Pending updates*, *Installed* and *Failed installs* counters, the *Update distribution* and *Updates by severity* charts, and a table of machines. Search the table by hostname, filter it by *With pending* or *Up to date* and by *Online*, *Offline* or *Overdue*, or select a severity in the chart to filter it. * Selecting a machine opens its updates by state (*Pending*, *Downloaded*, *Failed*, *Installed*), with the approval actions *Inherit*, *Approve*, *Ignore* and *Do Nothing* and the **Rescan** and **Install approved** buttons. Opening a machine needs the *Manage Windows Updates* permission. * **All updates** lists every update found across the fleet. Selecting an update lists the machines where it is *Missing* or *Installed*. Select online machines and run **Scan** or **Install approved** on them. Install approved installs every approved update on the selected machines, not only the one you opened. * **Environment scans** has **Scan now**, which asks every Windows machine you can access to check Windows Update and report the updates it finds. It installs nothing. *Scan activity* lists the recent scans. * **Install results with the Windows error detail.** With agent 4.3.0, each install reports the result that Windows returned. The machine panel shows *Installed with errors* when Windows installed an update but reported errors, and shows the error message, the HRESULT and the result code of an install that failed. * **Last scan per machine.** The machine table has a *Last scan* column, which reads *Never scanned* for a machine that has not been asked to scan yet. * **Agent 4.3.0** for Windows, Linux and macOS. ### Improvements * On the **Updates** tab of a device, **Run Update Scan** and **Install Approved Updates** are available while the device is online. * In **Admin Center › Settings › Retention**, *Productivity data retention (days)* removes the idle periods and user sessions older than the retention period as well as the activity events. ## 5.3.0 July 2026 · ships agent 4.2.0 ### New * **Asset Inventory.** **Devices › Asset Inventory** gathers the hardware and system data that the agents report into six pages: **Overview**, **Devices**, **Hardware**, **Operating Systems**, **Network** and **Storage**. The overview breaks the fleet down by operating system, CPU generation, memory, disk size, device type and manufacturer. Open a segment to list the devices in it. * **Extension requests from the endpoint.** On Windows devices with the productivity module, the icon that the module adds to the notification area has an option to ask for more access time. The request dialog sets the hours for each day, shows the history of the user's own requests and cancels a request that is still pending. A request can cover a shift that crosses midnight. * **Observability › Requests.** Lists the extension requests, with a search by username, a status filter (*Pending*, *Approved*, *Denied*, *Expired*, *All statuses*) and a sort order. The request panel shows the requested schedule next to the current one. Before you decide, you can change the access expiry date and the schedule and add a review note. **Approve** and **Deny** ask for the code from your authenticator app when your account uses multi-factor authentication. Approving creates a temporary policy that adds the approved hours for that user until the access expiry. It adds access time and never removes any. * **Temporary policies.** In the settings of an access policy, **Temporary Policy** limits the policy to a *From* and *Until* date and time. A temporary policy carries a *Temporary* badge in the policy list. * **Admin Center › Roles** is a page of its own. ### Improvements * The **Specific machines** list of an access policy shows only Windows devices. As before, a device needs agent 4.2.0 or later to appear in it. * Productivity module (Windows): the user gets a notification when a request is denied and when their access schedule changes. The full-screen notice shown when access is blocked displays the user name and the computer name. A window that ends at 23:59 lasts until the end of the day. * Selecting an alert in the notifications list under the bell, in the header, opens the alerts overview. * On the **Updates** tab of a device, **Install Approved Updates** is unavailable when the device lists no updates. * When your console session expires, the console shows one notice instead of one for each pending request. * Switching between access policies shows a loading state until the details of the selected policy arrive. * **Admin Center › Users** does not offer **Force Logout** on your own account. * New layout for the lists of **Management › Employees**, **Management › Terms** and **Reports & Audits › Reports**. ### Fixes * Choosing a date on **Observability › Users Behavior** no longer shows an error. ## 5.2.0 June 2026 · ships agent 4.2.0 ### New * **Tolerance Time for access policies.** Widens every allowed window of the policy by 0 to 240 minutes at both ends, within the same day. * **Client and global scope.** Under *Access Scope*, a policy can cover every device of the selected clients (**Full client access**) or every device (**Global**), in addition to whole sites and specific machines. * **Import policies from a CSV file.** **Import** in the policy list of **Observability › Policies** opens *Import Policies*: download the CSV template, add your file, review the *Import preview* (policies, warnings, and skipped rows with the reason), then confirm. Confirming asks for the code from your authenticator app when your account uses multi-factor authentication. ### Improvements * **Agents › Install Agent** and the deployment form show only the optional features that apply to the selected operating system and agent type: *Sessions*, *Geolocation*, *Remote access* and *Ping* for Windows, and *Disable sleep/hibernate* for workstations. * **Admin Center › Users** has a *Role* column. * **Force Logout** asks you to confirm before it disconnects a session. * New visual design across the console, including **Observability › Users Traces** with sortable and resizable columns, **Softwares**, **Geolocation**, **Reports** and **Settings**. * Settings forms check the values you enter before they are saved. * Saving or deleting a role shows a message when the operation fails. * Changes to access policies are delivered to devices by a background process that retries a delivery that fails. ### Fixes * **Clear Filters** on **Dashboard › Sysadmin** also clears the search. ## 5.1.0 to 5.1.3 May and June 2026 · ships agent 4.2.0 ### Improvements * **5.1.0** (May 2026): **Admin Center › Users** offers **Force Logout** only for users who have an active session. * **5.1.2** (June 2026): changes to access policies are sent to the affected devices in batches by a background task. ### Fixes * **5.1.3** (June 2026): when the users of one device fall under policies in different time zones, each user's schedule follows the time zone of that user's policy. ## 5.0.0 May 2026 · ships agent 4.2.0 ### New * **Employee targeting for access policies.** Under *Employees Scope*, a policy applies to specific employees, to the employees of selected sites (*Employee sites*), or to usernames that match a pattern (*Prefix*, *Suffix* or *Contains*). Under *Access Scope*, a policy can cover whole sites (**Full site access**) as well as specific machines. * **Identity verification for policy changes.** Creating, editing or deleting an access policy, and adding or removing its assignments, asks for the code from your authenticator app when your account uses multi-factor authentication. One verification is valid for 15 minutes. * **Details of console sessions.** In **Admin Center › Users**, **Show Active Sessions** lists the browser, operating system and IP address of each session. **Force Logout** disconnects one session (**Disconnect**) or all of them (**Disconnect All**). * **New header.** The *Search functionality...* field and the **Alerts**, **Agents**, **Tools** and **Management** menus give direct access to the actions of the console. * **Search in Observability › Policies.** Search policies by name and filter them by username. ### Improvements * In **Management › Employees**, an employee can belong to several sites and has an active or inactive status. *Username* replaces the registration number in Employees and in **Management › Terms**. * Moving a device to another site updates the access policies sent to it. * Redesigned sidebar and screens. Forms open as side panels. * The **Location** tab of a device groups the location history by date. * The *Devices per OS* and *Devices Per CPU* cards on **Dashboard › Home** show device totals. ### Fixes * The code asked for by identity verification is accepted within the same time window as the code used to sign in. ## 4.5.0 October 2025 ### New * **Users Behavior.** **Observability › Users Behavior** shows the activity of users on monitored devices: the applications and websites they use (*Top Applications*, *Top Websites*), their time of use and their idle periods. ### Improvements * The sidebar is organised in sections, among them **Dashboard**, **Observability**, **Management**, **Reports & Audits** and **Admin Center**. * The device list of **Dashboard › Sysadmin** is paginated, so it loads faster. ### Fixes * The installed software count of a device no longer counts the same software twice. ## 4.4.9 ### New * **Geolocation.** Devices report their geographic coordinates, shown in **Observability › Geolocation**. Collection runs on Windows devices where geolocation was enabled when the agent was installed. * **Dashboard cards open their view.** Select a card on the dashboard to open the matching view. ## 4.4.0 September 2025 ### New * **Location history.** The **Location** tab of a device shows its current position and its location history over the time range you choose. * **Last Seen filter.** The filters of **Dashboard › Sysadmin** include *Last Seen*, with preset periods from *Last 1H* to *Last 30D* and a custom range, to list devices by when they last communicated. ### Improvements * Faster loading of the device list and of device details. * The **Uptime** tab of a device shows how long it has been powered on. * Dashboard elements are clickable and apply the matching filter in **Dashboard › Sysadmin**. ### Fixes * **Reports & Audits › Audits** shows its records correctly the first time you open it. ## Related pages * [Update agents](/sonar/deploy-operate/agent-updates.md) * [Windows Updates across the fleet](/sonar/administration/patching/windows-updates.md) * [Access policies](/sonar/administration/access/access-policies.md) * [Extension requests](/sonar/administration/access/requests.md) * [The productivity module](/sonar/deploy-operate/productivity-module.md)