October 22, 2025 release (5.0.1460.0)

This is for:

Developer System Administrator

This release includes the 2.10123.0 version of the JavaScript Search Framework (see May 2025 release (v2.10123.0)).

When using a CDN with the Coveo Hive framework, this release includes the latest 2.10123 version of the JavaScript Search Framework (see Choosing between local and CDN Coveo JavaScript resource files).

Downloads

This section provides build 5.0.1460.0 download links for all supported versions of Sitecore. Download and install the Coveo for Sitecore package that matches your version of Sitecore (see Install).

To insert Coveo components in your SXA pages, download and install both the Coveo for Sitecore package and the SXA UI Components package (see Install Coveo for Sitecore SXA components).

To upgrade your version of Coveo for Sitecore 5 to this release, follow the upgrade procedure (see Upgrade steps).

Important

A packaging error occurred when generating the WDPs for this release. The WDP download links have been removed from the table. See .NET SqlClient Data Provider error when installing WDP for details and instructions to generate WDPs for this release.

You can then download the coveoforsitecore-module.json file and follow the instructions in install Coveo for Sitecore alongside Sitecore in Azure PaaS.
Coveo for Sitecore SXA UI components

Sitecore 10.4
Sitecore 10.3
Sitecore 10.2
Sitecore 10.1
Sitecore 10.0

Supported Sitecore Versions

SXA 10.4
SXA 10.3
SXA 10.2
SXA 10.1
SXA 10.0

SXA compatibility tables

Release notes

This section summarizes the new features and fixed support cases introduced in the Coveo for Sitecore October 22, 2025 release (5.0.1460.0).

Note

Coveo has ended support for Sitecore 9.1 releases. Sitecore’s extended support end date for these versions was December 31, 2024.

New features and enhancements

Issue number Description

CTGEN-7193, CTGEN-7345, CTGEN-7425

Added logging and error handling for items pushed to the Coveo index.

CTGEN-7204

Added support for the latest Sitecore 10.1 - 10.4 updates.

CTGEN-7256

Improved the search token expiration handling to reduce errors.

CTGEN-7314

Removed references to CES, marked code as obsolete, and cleaned up the codebase.

CTGEN-7384

Enhanced Coveo Platform authorization flow security.

CTGEN-7405

Disabled the ExcludeFieldsFromConfigProcessor processor in the default configuration, and added a one-time warning log when the processor is executed.

CTGEN-7544

Improved diagnostics.

CTGEN-7560

Added support for Coveo JavaScript Search Framework version 2.10123.

Bug fixes

Issue number Description

CTGEN-6993

Fixed 500 - Internal Server Error by removing <add name="X-Frame-Options" value="SAMEORIGIN" /> header from Web.config files.

CTGEN-7024, CTGEN-7912

Fixed vulnerabilities.

CTGEN-7362

Fixed issue causing Coveo for Sitecore to fetch organizations in a region using the HTTP scheme instead of the HTTPS scheme.

CTGEN-7920

Improved the organization endpoints fallback mechanism and added log warnings when an invalid endpoint is configured.

Maintenance cases

Issue number Case Description

CTGEN-7341

00119706

Fixed issue with unnecessary API deletion calls being triggered when the value of a shared or unversioned field is updated.

CTGEN-7760

00125797

Fixed issue with media item URLs including the wrong sclang query parameter value.

CTGEN-7850

00127163

Fixed the handling of CoveoSearchResources component Resources local path data source values entered in URL format.

CTGEN-7931

00128798

Improved search resilience when license retrieval fails.

Upgrade steps

This section describes how to upgrade Coveo for Sitecore from June 11, 2024 (5.0.1368.1) to October 22, 2025 (5.0.1460.0). If you’re upgrading over multiple versions, Coveo has a procedure to streamline the process.

Important

See Leading practices when upgrading Coveo for Sitecore and Upgrade Sitecore with Coveo for Sitecore to ensure successful upgrades.

Step 1: Upgrade Coveo for Sitecore

Important

Make sure the Microsoft MVC security update MS14-059 is installed on every Sitecore host in your environment.

  1. Log into the Sitecore Desktop.

  2. Access the Installation Wizard (Sitecore Start Menu > Development Tools > Installation Wizard).

  3. Upload and install the Coveo for Sitecore 5.0.1460.0 package built for the specific version of Sitecore you’re running (for example, Sitecore 10.2). You can find it in Downloads.

  4. When prompted to overwrite files, click Yes to all.

  5. When prompted to overwrite items, select Overwrite, then click Apply to all.

    Note

    You might be prompted twice with this question. Select the Overwrite option and click Apply to all both times.

  6. Once the installation is completed, make sure that you restart both the Sitecore client and server.

    Restart Server and Client dialog

Step 2: Manually update Coveo configuration files

Coveo for Sitecore packages contain some .config.example files. When you activated Coveo for Sitecore, the .config.example configuration files copied to your Sitecore instance were renamed (the .example was removed) making them enabled .config files. The name change also prevents the resulting .config files from being overwritten by .config.example files during a Coveo for Sitecore upgrade. In a nutshell, Coveo uses .config.example files for upgrade configuration changes that must be merged manually. Otherwise, Coveo uses standard .config files that get overwritten during step 1 of the upgrade process.

Tip

Use a tool like WinMerge to compare the new Coveo.*.config.example files with your existing Coveo.*.config files.

Here are the modifications to the .config.example files between the previous and current Coveo for Sitecore releases:

Coveo.SearchProvider.config

The <processor type="…​ExcludeFieldsFromConfigProcessor /> element has been commented out, effectively disabling the processor. A comment has been added to the configuration file to explain why this processor is now disabled by default.

<!--
    The ExcludeFieldsFromConfigProcessor excludes the fields defined in the ExcludeField element from the search index. This processor is currently disabled because no fields are included by default (OOTB).
    Keeping it disabled improves indexing performance, as the processor introduces unnecessary overhead when no inclusions are defined.
    For more details on managing indexed fields, see: https://docs.coveo.com/en/2499/coveo-for-sitecore-v5/specify-which-fields-to-index
-->
<!-- <processor type="Coveo.AbstractLayer.Processors.Indexing.Fields.ExcludeFieldsFromConfigProcessor, Coveo.AbstractLayer" /> -->

Apply this change to your configuration.

If you were previously configuring only field indexing exclusions, disabling ExcludeFieldsFromConfigProcessor implies that you should now configure field inclusions instead. For instructions on how to do this, see the Specify which fields to index article.

Step 3: Remove references to obsolete solution elements

Changes in this release include the marking of many code elements as obsolete:

  • The Coveo.AbstractLayer.Communication.CES.CESCommunication class

  • The Coveo.AbstractLayer.Communication.CES.ICESCommunication interface

  • The Coveo.AbstractLayer.Exceptions.MissingCrawlerException class

  • Two members of the Coveo.CloudPlatformClientBase.CloudObjects.LicenseProperties class

    Members

    CESLICENSE_PARAMETER_NAME, CesLicense

  • A member of the Coveo.Framework.Compatibility.ICoveoForSitecoreFeaturesResolver interface

    Member

    IsOnPremiseEnabled

  • The Coveo.Framework.Configuration.CesAcceptedConnections class

  • The Coveo.Framework.Configuration.CesComponentType enum

  • The Coveo.Framework.Configuration.CesConnectionType enum

  • A member of the Coveo.Framework.Configuration.CoveoIndexConfigurationDefaultValues class

    Member

    DEFAULT_CES_CONFIGURATION_PATH

  • The Coveo.Framework.Connection.ICommunicationChannel interface

  • Many members of the Coveo.Framework.CoveoIndexConfigurationXmlConstants class

    Members

    REST_APPLICATION_SECRET_ELEMENT_NAME, CES_CONFIGURATION_PATH_ELEMENT_NAME, SEARCH_CERTIFICATE_PATH_ELEMENT_NAME, QUEUE_PASSWORD_ELEMENT_NAME, QUEUE_URI_ELEMENT_NAME, QUEUE_USERNAME_ELEMENT_NAME, ADMIN_SERVICE_USERNAME_ELEMENT_NAME, ADMIN_SERVICE_PASSWORD_ELEMENT_NAME, ADMIN_SERVICE_URI_ELEMENT_NAME

  • The Coveo.Framework.Exceptions.CesUnavailableException class

  • The Coveo.Framework.Exceptions.CesUninitializedException class

  • The Coveo.Framework.Exceptions.SecurityProviderUnavailableException class

  • The Coveo.Framework.TopResults.TopResultDocumentItem class

  • The Coveo.Framework.TopResults.TopResultItem class

  • The Coveo.SearchProvider.Applications.Admin.DiagnosticStatusDisplayNameConstants class

  • A member of the Coveo.SearchProvider.Licensing.Cloud.LicenseProperties class

    Member

    CES_LICENSE_FIELD_NAME

  • Three members of the Coveo.SearchProvider.Licensing.ILicenseDetails interface

    Members

    CesLicense, IsMirrorsLimited, MirrorsLimit

  • A member of the Coveo.SearchProvider.Licensing.License class

    Member

    CesLicense

  • Four members of the Coveo.SearchProvider.Licensing.Logging.SourceStatistics class

    Members

    CES_BUILD_NUMBER_PARAMETER_NAME, CES_LICENSE_EXPIRATION_DATE_PARAMETER_NAME, CesBuildNumber, CesLicenseExpirationDate

Ensure you update your custom code to remove any references to these obsolete elements.

Step 4: Remove references to deleted solution elements

Changes in this release include the removal of several code elements that were previously marked as obsolete:

  • A member of the Coveo.CloudPlatformClient.SecurityProviderManagement.ExpandedPermissionsHandler class

    Member

    ShouldReactivateDisabledSecurityEntitiesOnRebuild

  • A member of the Coveo.CloudPlatformClient.SecurityProviderManagement.IExpandedPermissionsHandler interface

    Member

    ShouldReactivateDisabledSecurityEntitiesOnRebuild

  • Five members of the Coveo.Framework.Configuration.CoveoIndexConfiguration class

    Members

    EncryptDataOnQueue, IndexFilePath, QueuePassword, QueueUri, QueueUsername

  • A member of the Coveo.Framework.Configuration.RestEndpointConfiguration class

    Member

    ApplicationSecret

  • Two members of the Coveo.Framework.Configuration.SecurityConfiguration class

    Members

    ReactivateDisabledSecurityEntitiesOnRebuild, SkipSitecoreCredentialsUpdate

  • A member of the Coveo.Framework.CoveoIndexConfigurationXmlConstants class

    Member

    SYNCHRONIZE_TOP_RESULTS_AGENT_NAME

  • A member of the Coveo.Framework.CoveoSettingDefaultValues class

    Member

    TOP_RESULTS_REPOSITORY_ITEM_PATH_DEFAULT_VALUE

  • A member of the Coveo.Framework.CoveoSettingNames class

    Member

    TOP_RESULTS_REPOSITORY_ITEM_PATH

  • A member of the Coveo.Framework.CoveoSettings class

    Member

    TopResultsRepositoryItemPath

  • A member of the Coveo.Framework.ICoveoSettings interface

    Member

    TopResultsRepositoryItemPath

  • A member of the Coveo.Framework.Links.IMediaUrlOptions interface

    Member

    MediaUrlOptions

  • A member of the Coveo.Framework.Links.IUrlOptions interface

    Member

    UrlOptions

  • A member of the Coveo.Search.Api.Proxy.ProxyHttpHandler class

    Member

    IsConnectedToCloud

  • A member of the Coveo.SearchProvider.Applications.Shell.Installation.CoveoSearchProviderPostInstallationStep class

    Member

    CoveoSearchProviderPostInstallationStep constructor

  • A member of the Coveo.SearchProvider.IProviderIndexHelperFactory interface

    Member

    CreateIndexCommunication(CoveoIndexConfiguration, CoveoFieldNameTranslator, IFieldFetcherFactory, IIndexDatabaseProperties, IUrlUtilities, IEnumerable<IDatabaseWrapper>)

  • The Coveo.SearchProvider.IProviderIndexUserIdentityHelper interface

  • A member of the Coveo.SearchProvider.ProviderIndexHelperFactory class

    Member

    CreateIndexCommunication(CoveoIndexConfiguration, CoveoFieldNameTranslator, IFieldFetcherFactory, IIndexDatabaseProperties, IUrlUtilities, IEnumerable<IDatabaseWrapper>)

  • The Coveo.SearchProvider.ProviderIndexUserIdentityHelper class

  • Two members of the Coveo.SearchServiceProvider.Rest.ClientSessionWrapper class

    Members

    ClientSessionWrapper(IHttpClient, IHttpContextProvider, RestEndpointConfiguration) constructor, ClientSessionWrapper(IHttpClient, IHttpContextProvider, RestEndpointConfiguration, IUrlUtilities, string, string) constructor,

  • A member of the Coveo.SearchServiceProvider.Rest.ClientSessionWrapperFactory class

    Member

    ClientSessionWrapperFactory(ISitecoreFactory, IHttpClient, IHttpContextProvider) constructor

  • A member of the Coveo.UI.Components.Helpers.IUiPropertiesHelper interface

    Member

    GetCoveoUiSupportedCultureFile

  • A member of the Coveo.UI.Components.Helpers.UiPropertiesHelper class

    Member

    GetCoveoUiSupportedCultureFile(string, string)

  • Two members of the Coveo.UI.Core.Strings.SitecoreLocalizedCoveoUiDictionaryFetcher class

    Member

    SitecoreLocalizedCoveoUiDictionaryFetcher(IDatabaseWrapper p_DatabaseWrapper, ILocalizedStringFetcher p_CoveoHiveLocalizedStringFetcher) constructor, SitecoreLocalizedCoveoUiDictionaryFetcher(IDatabaseWrapper,ILocalizedStringFetcherFactory) constructor

  • The Coveo.UI.Core.Validators.IValidator.ISearchIndexValidator interface

  • The Coveo.UI.Core.Validators.IValidator.SearchIndexValidator class

Ensure you update your custom code or configuration files to remove any references to these deleted elements.

Step 5: Publish your site

In the Sitecore Content Editor, perform a publish site action. This ensures any changes related to Coveo components in the upgrade are published.

〈  Previous version upgrade steps