Platform 6.3.1 is a maintenance release that includes critical bug fixes, authentication improvements, and security updates. This release addresses customer-reported issues to enhance platform stability and reliability.
Improvements to Existing Features
| Improvement | Description |
|---|---|
| Workflow Engine Schema Validation (ENG-18679) | Fixed invalid JSON schemas in Workflow Engine that were causing error-level logging messages during platform startup, improving system diagnostics and reducing log noise. |
Bug Fixes
| Issue | Description |
|---|---|
| API Token Authentication (ENG-18885) | • Fixed issue where API tokens and service accounts were incorrectly returning 403 Forbidden errors • Restored proper authentication for token-based API access • Resolved authentication failures impacting automated integrations and service accounts |
| JSON Forms Dynamic Dropdowns (ENG-18508) | • Fixed issue where JSON Forms with dynamic dropdowns displayed "undefined" when opening the dropdown • Resolved discrepancy between successful API call in form settings and failed runtime display • Ensured proper data population for dynamic POST request dropdowns |
| Job Variable Handling (ENG-18151) | • Fixed job error "Cannot destructure property 'location' of '_0x2f4fa8' as it is undefined" • Improved handling of missing job variables in push to array tasks • Addressed sub-optimal missing variable behavior causing job failures |
| Code Editor Component (ENG-18068) | • Fixed race condition in BackgroundTokenizer causing "Cannot read properties of null (reading 'getLength')" errors • Resolved issue where code editor component attempted to access document properties after unmounting • Improved editor component lifecycle management |
| OAuth Client Visibility (ENG-17392) | • Fixed issue where OAuth Client creation option remained visible when ITENTIAL_ADMIN_AUTH_PAGES_ENABLED environment variable was set to false • Ensured proper UI behavior for Cloud customers managing service accounts through Hub interface • Aligned interface options with environment variable configuration |
| OAuth2 Integration Models (ENG-16320) | • Fixed validation failure when creating OAuth2-capable Integration Models following documentation examples • Resolved issues preventing proper OAuth2 authentication configuration • Ensured compatibility with OAuth2-enabled API integrations |
| JST Schema Editor (ENG-12011) | • Fixed JST Designer Schema Editor errors occurring when property names contained forward slash (/) characters with incorrect types • Resolved validation errors in betterAjv.js library when processing properties with special characters • Restored proper save button functionality in schema editor |
| Masked Job Variables (ENG-11192) | • Fixed issue where renaming masked job variables left orphaned decorator entries in workflows • Resolved problem where old variable names appeared as masked in Operations Manager despite no longer being referenced • Ensured decorator array properly updates when job variable names change |
| JST Pointer Connections (ENG-10280) | • Fixed issue where JST pointers did not connect as expected when building map functions • Improved pointer behavior and connection logic in transformation designer • Enhanced user experience when creating complex transformations |
| JST Nested Functions Import (ENG-10021) | • Fixed issue where JSTs with nested functions imported incorrectly • Resolved ID conflict handling during function flattening process • Ensured proper reference resolution when moving nested functions to root level |
| Transformation Scoping (ENG-8392) | • Fixed incorrect scoping when creating transformations directly from child job task panel in unsaved workflows within projects • Resolved URL routing issue that caused loss of unsaved workflow changes • Ensured transformations are properly scoped to their containing project |
| Transformation Comment Timestamps (ENG-6498) | • Fixed issue where comments on transformations displayed dates one month earlier than actual creation date • Corrected date formatting logic for transformation comment timestamps • Ensured accurate timestamp display for all transformation comments |
Security Fixes
Platform 6.3.1 includes important security updates that address vulnerabilities in third-party packages.
| Key ID | Release Note |
|---|---|
| Out-of-bounds write vulnerability (ENG-18428) | Updated gnupg2/gpgv package to resolve the CWE-787 Out-of-bounds Write vulnerability (CVSS Score: 7.0). |