2026.2.5: NRC: monitor unhealthy receiver endpoints

February 11, 2026

Component	Summary (english)	Relevance for consumers (English)	Relevance for end users (Dutch)	Relevance for system administration (Dutch)
NRC Listener	In the Hangfire dashboard for outgoing notifications a new page is added with unhealthy endpoints.			In het dashboard kun je zien welke endpoints (al dan niet tijdelijk) onbereikbaar zijn. Te bereiken via ZCA -> Beheer -> NRC Jobs -> Unhealthy endpoints
IDP Legacy	Log level for health check failures from ERROR to WARNING

2026.1.21: Secret restricted

January 28, 2026

Component	Summary (english)	Relevance for consumers (English)	Relevance for end users (Dutch)	Relevance for system administration (Dutch)
ZCA	Security improvements: the visibility of the secret in taakapplicaties has been restricted to just after creation or rotation. The JWT copy function has been removed.		Het secret kan nu alleen vlak na het creeren of roteren ervan gekopieerd worden. Bovendien moet bij het roteren een reden opgegeven worden. U dient dus vanaf nu het secret direct op een veilige plaats op te slaan. Mocht u het kwijtraken, dan moet u het secret roteren (een nieuwe maken). De functie om een JWT te genereren is verwijderd. In plaats daarvan kan uw software bij IDP zelf een JWT opvragen. Deze maatregelen maken het moeilijker om ongewenste toegang tot OneGround te krijgen.
ZTC	GET on Besluittype returned null for attribute 'vastgelegdIn' (incorrect). Now it returns []
DRC	A delete on enkelvoudiginformatieobject returned sometimes a 500 error. This has been solved
DRC	A post of enkelvoudiginformatieobject without bestandsnaam resulted in a 500-error (incorrect). This has been solved.
Number generator	The number generator returned wrong case numbers if a case was created in the first hour of a new year. This has been resolved for new cases.		Als een zaak werd aangemaakt in het eerste uur van het nieuwe jaar werd de teller van de nummergenerator niet teruggezet naar 0. Hierdoor ging de nummering van daaropvolgende zaken door met weliswaar het juiste jaartal in het zaaknummer maar met een volgnummer gebaseerd op het laatste volgnummer van het jaar daarvoor. Dit is opgelost voor nieuwe gevallen.

2026.1.15: special client id for support tooling and field 'reason' in the JWT function

January 19, 2026

Component	Summary (english)	Relevance for consumers (English)	Relevance for end users (Dutch)	Relevance for system administration (Dutch)
ZCA	The client id for support now has a preferred name 'support tooling'. Use of the name Postman is deprecated. This client id can only be created or modified by admins. Also, when creating a JWT token, the new field 'reason' has to be filled in by the user. In this way it will be clear to customers when support actions are taking place and why.			De client-ID voor support heeft nu de voorkeursnaam 'support tooling'. Deze client-ID kan alleen door beheerders worden aangemaakt of gewijzigd. Het gebruik van de naam 'Postman' wordt vanaf nu afgeraden. Bij het aanmaken van een JWT-token moet de gebruiker bovendien het nieuwe veld 'reden' invullen. Zo is het voor klanten duidelijker wanneer en waarom supportacties plaatsvinden.
ZCA	Subscriptions could not be removed anymore. This has been solved			Abonnementen konden niet meer worden verwijderd. Dit probleem is opgelost.
BRC	Updating a besluit of a deprecated Besluittype was not possible. This has been solved		Het is nu mogelijk besluiten van een besluittype dat een einddatum vóór vandaag heeft, aan te passen.
DRC	There were errors when deleting document objects (=relationship to zaak or besluit), possibly because of simultaneous API delete calls on enkelvoudiginformatieobjects and objectinformatieobjects. The delete queries within the delete operation for objectinformatieobjects now have been separated in order to prevent concurrency problems.

2026.1.7: stricter check on language code 'taal' of informatieobject

January 13, 2026

Component	Summary (english)	Relevance for consumers (English)	Relevance for end users (Dutch)	Relevance for system administration (Dutch)
DRC	Two-letter and capital language codes were accepted in attribute 'taal' whereas the standard allows only three lowercase letters. Now the taal is checked on valid ISO-values. In case of often occuring deviating values like NLD or nl, it is replaced by nld.
NRC LISTENER	After the last retry on sending a notitifcation to an non-responding endpoint an Error was logged. Because of this the logs were full of errors of external systems while the NRC was functioning correctly. For this reason the error level now is reduced to Warning.

2026.1.5: improvements on notifications and document deletion

January 10, 2026

Component	Summary (english)	Relevance for consumers (English)	Relevance for end users (Dutch)	Relevance for system administration (Dutch)
NRC Listener	The retry mechanism for sending notifications has been improved with separate retry queues in Hangfire. Unresponding endpoints now are temporarily marked as unhealthy to prevent unnecessary loads of retry notifications.
DRC	There were errors when deleting documents, possibly because of simultaneous API delete calls on enkelvoudiginformatieobjects and objectinformatieobjects. The delete queries within the delete operation for enkelvoudiginformatieobjects now have been separated in order to prevent concurrency problems.

2025.12.10: Notifications via Hangfire

December 22, 2025

Component	Summary (english)	Relevance for consumers (English)	Relevance for end users (Dutch)	Relevance for system administration (Dutch)
ZRC, BRC, DRC Listener	Rabbitmq has been replaced by Hangfire as a mechanism for dipatching notifications from BRC and ZRC to DRC. DRC Listener now has an endpoint for receiving notifications.	It is now easier to combine OneGround registrations with other registrations. For example, a OneGround BRC can be combined with an external DRC and vice versa.		Systeembeheerders kunnen nu notificaties van BRC en ZRC bekijken en beheren in het Hangfire-dashboard.
CSV	Swagger endpoints for CSV have been completed, especially those for ZSDMS
All ZGW API's	There was a possibility in the test environment to access data of all tenants with one ClientId. This possibility has been removed.
All ZGW API's	The Postman test is now integrated in the pipeline and runs automatically.
ZTC, CSV	When a catalogue is added automatically, user contact data are automatically retrieved from RAB and stored in the Catalogue in the ZTC.
ZRC, DRC	When a date/time was returned, for example a registration date of the case, it was returned without timezone indication. ISO-8601 says: "If the time is in UTC, add a Z directly after the time without a space". Now the Z has been added.	This might be a breaking change
ZCA	The lay out of the Custom Headers section in Application client has been improved
All ZGW	Health checks on ZGW API's did not follow the Roxit standard and created errors for monitoring tools. Now, an authenticated health endpoint has been added.	Monitoring tools now can use the authenticated endpoint
ZCA	The edit-possibilities of subscriptions have been removed. The reason is that filter options were not shown, and the result of editing was therefore unpredictable. Also automatically insertion of subscriptions by CSV makes manual editing superfluous. A tooltip was added showing the filter values of each subscription.

2025.11.6: Expiration of token

November 18, 2025

Component	Summary (english)	Relevance for consumers (English)	Relevance for end users (Dutch)	Relevance for system administration (Dutch)
IDP	Lifetime of bearer tokens now is restricted to 24 hours	Self generated bearer tokens should have an expiration time less than 24 hours ahead
API Gateway	Possibilty to add version headers on incoming requests	In order to deal with the breaking changes in ZTC 1.2 and 1.3 we created the possibility to add Api-version headers on the Api Gateway for consumers. It is relevant for consumer that assume an older version of the ZTC but do not send a Api-version header. The following HTTP version headers are possible: accept, accept-crs, accept-language, api-version, content-crs, content-type, if-match, if-none-match, prefer, x-audit-toelichting, x-nlx-request-application-id, x-nlx-request-subject-id, x-nlx-request-user-id, x-client-, x-custom-
ZCA	ClientId ZSDMS not editable			De door het systeem gegenereerde ZSDMS-ClientId was bewerkbaar in ZCA-taakapplicaties. Het bewerken is nu niet meer mogelijk.
Reflist	Revert removal of P29			Vorige week is een aantal wijzigingen aan de referentielijsten gedaan. P29 is daarbij verwijderd bij procestype verzoeken behandelen omdat de rubriek van P29 in de provinciale selectielijst toezicht en handhaving is wat niet overeen lijkt te komen met verzoeken behandelen. Het blijkt nu echter dat in de ZTC Omgevingswet 1.8 P29 wel degelijk gekoppeld is aan dit proces. Daarom is P29 weer toegevoegd aan procestype verzoeken behandelen.

2025.11.3: IDP endpoint for retrieving token

November 11, 2025

Component	Summary (english)	Relevance for consumers (English)	Relevance for end users (Dutch)	Relevance for system administration (Dutch)
IDP	Endpoint for retrieving bearer token	Instead of generating a bearer token by the application, it can now be requested from IDP.

2025.10.10: reference list change

November 3, 2025

Component	Summary (english)	Relevance for consumers (English)	Relevance for end users (Dutch)	Relevance for system administration (Dutch)
Reference list	Changes in result types of provincial selection lists		Resultaattype P46-ingewilligd was gerelateerd aan procestype 'toezicht en handhaving' en is nu gerelateerd aan procestype 'verzoeken behandelen'. P29-ingewilligd is verwijderd bij proces 'toezicht en handhaving'. Resultaattypen P1-Afgebroken en P22-Verleend zijn toegevoegd aan procestype 'Evaluatie uitvoeren'.
ZCA	The label 'modified' in page 'Application Client' was incorrect and is replaced by 'last action'		Op pagina 'Taakapplicatie' stond in de kop van de lijst 'laatste wijziging'. Dit was niet correct en is nu vervangen door 'laatste actie'
ZCA	The button 'case types' in page 'Application Client' had disappeared and is now visible again.		Op pagina 'Taakapplicatie' was de knop 'zaaktypen' in sommige gevallen verdwenen. Deze is weer zichtbaar
ZSDMS	Notifications for ZSDMS were transported via RabbitMQ. Now they are sent as regular notifications via a web hook.		Het signaal om ZSDMS-close te starten wordt nu via een andere technische component verstuurd

2025.10.6: notification retries by Hangfire

October 2, 2025

Component	Summary (english)	Relevance for consumers (English)	Relevance for end users (Dutch)	Relevance for system administration (Dutch)
NRC_Listener	Notification retries previously were handled by Rabbit MQ. Rabbit MQ now is replaced by Hangfire			Niet gelukte notificaties kunnen nu terug gevonden worden in Hangfire (ZCA menu item Beheer -> NRC Jobs) en daar herstart
ZCA	The checkbox for synchronization with PMA in the subscriptions panel has been removed.			De chckbox "subscribe from PMA" is verwijderd omdat de werking en bedoeling onduidelijk waren.