Platform 6.1.2 Maintenance Release

Prev Next

Improvements

Key ID Release Note
ENG-16048, ENG-16050, ENG-16055, ENG-16056 Improved Canvas Debug Mode usability with UI enhancements including renaming the "Mock Data" tab to "Mocked Tasks", relocating the delete scenario button, better indication of required fields, and clearer messaging for failure transition outputs.
ENG-16182 AG Manager now uses Redis-based configuration storage for automatic cluster-wide synchronization. For more information, see Automatic discovery in IAG.
ENG-16456 Updated the failure transition type view in the Mock Data dialog to display "output is null" for improved user experience.

Security Fixes

Key ID Release Note
ENG-13145, ENG-13147, ENG-16416, ENG-16642, ENG-16656, ENG-16657, ENG-16658, ENG-16673, ENG-16677 Resolved multiple Snyk vulnerabilities by upgrading dependencies across core IAP components, adapters, and applications.
ENG-15651, ENG-15652, ENG-15653, ENG-15750, ENG-15751 Fixed DOM-based XSS vulnerabilities in Operations Manager automation interface, DeviceGroup Titlebar component, and SVG rendering. Implemented URL sanitization in useUserGroupedAppsQuery.jsx.
ENG-15654 Implemented URL component sanitization to resolve Open Redirect vulnerability in src/common/utils.js.
ENG-15657, ENG-15676 Updated axios to version 1.12.2 to address resource allocation vulnerability.
ENG-15669, ENG-16310 Resolved path traversal vulnerabilities by enhancing file path validation in itential-utils.

Bug Fixes

Key ID Release Note
ENG-16710 Restored functionality for manual tasks in MOP templates and Form Builder.
ENG-16481 Resolved issue where forms were blocked by failed query calls. Forms now execute successfully within workflows despite jQuery dependency issues.
ENG-16268 Updated the Integration Model import process to reject OpenAPI 3.0.4 models, preventing compatibility issues. Integration Models without authentication now work as expected.
ENG-16175 Template Builder now operates without requiring access to the /tmp/iap_python_jail directory or sudo chroot access to run Jinja2 templates, enabling functionality in STIG'ed and FIPS-enabled environments.
ENG-15842 Enabled dragging workflows from the Asset tab to automatically create childJob tasks with properly populated incoming variables based on the workflow's input schema.
ENG-15672 Fixed import issue in Operations Manager where Automations with GBAC groups that don't exist on the target system would import but remain inaccessible. Automations are now properly visible after import.
ENG-15306 Corrected the 'Save and Run' button functionality to properly execute triggers after saving.
ENG-15201 Eliminated excessive API calls to /myTtl from Operations Manager.
ENG-10398 Fixed issue where renaming a workflow from the metadata would prevent the UI from displaying tasks and connections in Automation Studio.
ENG-9934 Resolved race condition in service discovery during index creation in high availability environments.
ENG-8982 Added support for configurable timeout values on integration instances, restoring timeout functionality.
ENG-7332 Users with default "engineer" and "operator" roles no longer see unauthorized access error messages on the Studio landing page.
ENG-6662 Resolved issue where the Recent Tasks palette failed to populate when opening a workflow.
ENG-4949 Fixed sorting in Project Builder to maintain current page position after sorting and implement case-insensitive alphabetical ordering.
ENG-4110 Corrected issue where searching for a JST by ID in the Studio collections dialog caused the Itential Platform UI to crash. Search now functions as expected.
ENG-3183 Job variables can no longer be modified when a user is in reference view mode.
ENG-2894 Corrected naming convention for project assets in system search results and fixed linking to project assets.
ENG-2890 Implemented regex expression to properly escape special characters when searching for workflows in Studio.