Platform Cloud July 2026 is a minor release that introduces two new products: FlowAI and Work Center. This release also includes enhancements, bug fixes, and security updates across the platform.
Enhancements (18)
| Component | Feature | Description |
|---|---|---|
| Admin Essentials | Password encryption in Adapters and Integrations (IT-509) | Passwords saved in Adapter and Integration configurations in Admin Essentials are automatically encrypted and never displayed in the UI. This is now the recommended approach for managing sensitive credentials in the Platform. |
| Admin Essentials | Exclude query parameter for config/apps API (ENG-25095) | Added an exclude query parameter to the GET /config/apps API. You can now exclude data for methods, topics, and views from the API response. |
| Work Center | QuickForm task JSON path support (ENG-25067) | Changed the QuickForm task to use JSON path instead of JSON pointer for the data path field. |
| NSO Service Manager | Cisco NSO 6.7 commit parameter support (ENG-24880) | Added support for new commit parameters to improve compatibility with Cisco NSO 6.7 and later versions. |
| NSO | NETCONF dry-run parameter for NSO 6.7 (ENG-24791) | Updated the NETCONF prepare-transaction RPC to use the dry-run parameter for compatibility with Cisco NSO 6.7 and later versions. |
| NSO Service Manager | NETCONF dry-run parameter for NSO 6.7 (ENG-24791) | Updated the NETCONF prepare-transaction RPC to use the dry-run parameter for compatibility with Cisco NSO 6.7 and later versions. |
| NSO Service Manager | NSO version detection for itential-tools 6.7 (ENG-24706) | Enhanced NSO version detection and itential-tools package resolution to support compatibility with Cisco NSO 6.7. |
| Admin Essentials | Download Integration Model as JSON (ENG-24611) | Added a button to the titlebar that lets you download an integration model as a JSON file while viewing it. |
| NSO | itential-tools Unix Domain Socket support (ENG-24607) | Updated itential-tools internal package communication from TCP to Unix Domain Sockets and aligned build requirements with Java 21 to support Cisco NSO 6.7. |
| Core | Context-aware ancestry helper functions (ENG-24562) | Added context-aware helper functions to ancestry. |
| Gateway Manager | Gateway 5 database import and export (ENG-24471) | Implemented Gateway 5 database import and export functionality in Gateway Manager, accessible from the UI and APIs. |
| Compliance Plans | Compliance plan start and complete events (ENG-24205) | Compliance plans now emit events when a plan starts and when it completes. |
| Configuration Manager Essentials | Concurrent device throttle field (ENG-24089) | Added a throttle field so you can limit the number of concurrent devices used during compliance plan runs. |
| Workflow Engine (WFE) | onWorkItemCompletion for Work Center integration (ENG-23247) | Added an onWorkItemCompletion method to the Workflow Engine to support Work Center integration. |
| Workflow Engine (WFE) | getWorkItemStatuses for Work Center reconciliation (ENG-23246) | The Workflow Engine now implements a getWorkItemStatuses method, enabling Work Center to automatically resolve orphaned work items during its reconciliation cycle. Previously, a work item could remain stuck in a PENDING state if a cancelWorkItem call failed to reach Work Center. Work Center can now query the Workflow Engine directly to close out those items as COMPLETED or CANCELED. |
| Workflow Engine (WFE) | Asynchronous task support (ENG-22998) | Added support for asynchronous tasks in the Workflow Engine. |
| Gateway Manager | Gateway database import and export JSON-RPC methods (ENG-22256) | Implemented JSON-RPC methods for database import and export in Gateway Manager. |
| Workflow Engine (WFE) | Work Center integration for manual tasks (ENG-21708) | The Workflow Engine now integrates with Work Center when a manual task is encountered. When Work Center is installed, a work item is automatically created as the task becomes actionable, so operators can view and complete manual tasks directly from Work Center. |
Bug fixes (31)
| Component | Feature | Description |
|---|---|---|
| NSO Service Manager | Dry-run option format regression (ENG-25336) | Fixed a regression where a dry-run option format incompatibility caused commit failures for the deleteServiceDryRun task in the JSON-RPC adapter. |
| Workflows | ForEach loop transitions to merge tasks (ENG-24941) | Fixed an issue where tasks were unable to draw transitions to other tasks in the same loop under certain criteria. |
| Admin Essentials | Service launch timeout cap removed (ENG-24921) | Removed the maximum constraint on service_launch_timeout, previously capped at 1,200 seconds. You can now set whatever value your environment requires for extended startup migrations on large datasets. |
| Workflows | Child job task loop array query (ENG-24684) | Fixed an issue where a query was not applied when calculating loop iteration count and fetching loop elements for child job task loop array input, which caused runtime errors. |
| Studio | Child job task workflow dropdown format (ENG-24678) | The child job task workflow dropdown now displays selected project member workflows in the correct format: <workflow> from <project>. |
| Workflows | Evaluation task UI with multiple evaluations (ENG-24315) | Fixed an issue where the evaluation task UI didn’t update correctly when there were multiple evaluations with queries configured and you deleted an evaluation. |
| Workflows | Deleted task actor reference validation (ENG-23820) | Added workflow validation for task actor fields that reference deleted tasks, surfacing broken references before workflow execution. |
| Configuration Manager Essentials | Toast close icon (ENG-23765) | Fixed an issue where the toast close icon displayed incorrectly. |
| Configuration Manager Essentials | Non-compliant device read from API (ENG-23760) | Fixed an issue where non-compliant devices weren’t read correctly as returned from the API. |
| Configuration Manager Essentials | Compliance dashboard display bugs (ENG-23705) | Fixed issues in the compliance dashboard, including a device count mismatch, incorrect backup sorting, and incorrect node display. |
| Projects | Unsaved document changes on export (ENG-23338) | Exporting a project with unsaved document changes now saves the changes first before exporting. This same save-before-action behavior is applied consistently across all asset export, duplicate, and delete operations in both Automation Studio and Lifecycle Manager. |
| Workflow Engine (WFE) | Scheduled task window error messages (ENG-23173) | Invalid scheduled task window errors now output a descriptive schema error instead of [object Object]. |
| Configuration Manager Essentials | JSON compliance dynamic variables (ENG-22859) | JSON compliance dynamic variables are now honored in workflow tasks. |
| Golden Configuration | runComplianceForDevice scope (ENG-22750) | Fixed an issue where runComplianceForDevice executed compliance against all task instances in a JSON Golden Config tree instead of only the specified device instance. |
| JSON Forms | Single-option dropdown label truncation (ENG-22711) | Static dropdown labels are now fully shown in the preview form. |
| Workflows | Duplicate jobs from repeated button clicks (ENG-22327) | Clicking Run, Duplicate, Delete, or Save multiple times rapidly in Automation Studio no longer produces duplicate jobs, clones, or deletes. Buttons are now disabled while their operations are in progress. |
| Configuration Manager Essentials | Missing pronghorn.json schema reference (ENG-21845) | Fixed the pronghorn.json schema for getAdapterTasks. |
| Projects | Asset name prefix in delete dialog (ENG-20138) | Fixed an issue where project asset names displayed internal ID prefixes (@<ObjectId>:) in the delete-with-references confirmation dialog and the Edit Details name field. Asset names now display consistently with the rest of the UI. |
| Workflows | Mock data save with validation errors (ENG-18464) | When you edit or create mock data for an object and the data contains a validation error, the update button is now grayed out until the error is resolved. |
| Workflows | Mock data error for Render JSON Schema tasks (ENG-18427) | Fixed a “Cannot read properties of null” error when viewing mocked Render JSON Schema tasks in Debug Mode. |
| Studio | Unsaved changes dialog on navigation (ENG-18177) | Navigating from the workflow editor to the Projects view no longer incorrectly triggers an “unsaved changes” dialog when no changes were made. |
| Configuration Manager Essentials | Configuration parser GBAC save (ENG-15613) | Configuration parsers now save GBAC settings successfully. |
| Operations Manager | Large data download button (ENG-13006) | Fixed the download button for large data in the JSON view so it downloads the full data instead of showing a “Data is too large” message. |
| Configuration Manager Essentials | Golden Configuration preview (ENG-11393) | Fixed an issue preventing the Golden Configuration preview from working correctly. |
| Studio | DiscoverReferences parentPointer consistency (ENG-11033) | DiscoverReferences now returns a consistent, concrete parentPointer regardless of the direction of discovery. Inverse references previously returned a schema-level pointer; they now resolve the actual data path using the parent model’s forward reference definition. |
| JSON Forms | Subcontainer expansion after modification (ENG-10827) | Subcontainers with Collapse by Default set to true and a custom container name are now expandable in the preview form. |
| Lifecycle Manager | Missing query parameters in Swagger UI (ENG-10616) | Some API endpoints weren’t showing their available query parameters in the /rest-api Swagger UI, making it appear as though they didn’t support filtering, sorting, or pagination. The Swagger UI now correctly displays all supported query parameters for affected endpoints. |
| Workflows | Undefined task source validation warning (ENG-10597) | Added a clarifying warning when variables are set to task variables that don’t exist. |
| Workflows | Integration task details error toast (ENG-10152) | Fixed an issue where integration tasks displayed an error toast when opening the Details tab of the Task Details panel. |
| Transformations | Stale data after deleting unsaved asset (ENG-8274) | Deleting a Transformation, Template, JSON Form, Command Template, or Analytic Template with unsaved changes no longer shows an unexpected “Confirm Navigation” dialog or leaves stale data in the next opened asset. |
| Workflows | Adapter ID ghost after deletion (ENG-5905) | An integration ID no longer remains on a task after the integration has been deleted. |
Security fixes (13)
This release includes important security updates that address vulnerabilities in third-party packages and platform components.
| Component | Feature | Description |
|---|---|---|
| Core | CRLF injection in undici (ENG-24987) | Updated the undici dependency to resolve a security vulnerability. |
| Core | Asymmetric resource consumption in ws (ENG-24885) | Updated the ws dependency to resolve a security vulnerability. |
| Admin Essentials | Open redirect in react-router-dom (ENG-24884) | Updated the react-router-dom dependency to address an Open Redirect security vulnerability. |
| Configuration Manager Essentials | Open redirect in react-router-dom (ENG-24884) | Updated the react-router-dom dependency to address an Open Redirect security vulnerability. |
| Lifecycle Manager | Open redirect in react-router-dom (ENG-24884) | Updated the react-router-dom dependency to address an Open Redirect security vulnerability. |
| Operations Manager | Open redirect in react-router-dom (ENG-24884) | Updated the react-router-dom dependency to address an Open Redirect security vulnerability. |
| Studio | Open redirect in react-router-dom (ENG-24884) | Updated the react-router-dom dependency to address an Open Redirect security vulnerability. |
| NSO Service Manager | Prototype pollution in axios (adapter-nso) (ENG-24883) | Resolved a Prototype Pollution vulnerability (CVE-2026-44494) by updating axios to a secure version in adapter-nso. |
| NSO Service Manager | Prototype pollution in axios (app-nso_manager) (ENG-24882) | Resolved a Prototype Pollution vulnerability (CVE-2026-44494) by updating axios to a secure version in app-nso_manager. |
| Inventory Manager | Axios and React Router security bumps (ENG-24512) | Updated the axios and react-router dependencies to resolve security vulnerabilities. |
| Inventory Manager | Axios security update in adapter (ENG-24511) | Updated the axios dependency in the Inventory adapter to resolve security vulnerabilities. |
| Core | Prototype pollution in axios (itential-utils) (ENG-24443) | Updated the axios dependency to resolve a security vulnerability. |
| Core | Prototype pollution in axios (product-engineering) (ENG-24441) | Updated the axios dependency to resolve a security vulnerability. |