6.0.4
Platform 6.0.4 is a maintenance release containing enhancements, bug fixes, and security updates.
Enhancements (5)
This section highlights quality improvements to Itential Platform’s functionality in this maintenance release.
| Feature | Description |
|---|---|
| Configurable serverId strategies (ENG-11313) | Support has been added for configurable serverId strategies, including a new strategy for generating a random UUID as the serverId. This improvement allows for greater flexibility in server identification. |
| auth-metadata endpoint for AAA providers (ENG-11314) | Introduced a new /.well-known/auth-metadata endpoint to support AAA providers in retrieving relevant metadata while users are unauthenticated. This update, along with enhancements to the Azure AAA adapter, allows the Platform to dynamically set the client and tenant IDs on the SSO login page, significantly improving the user experience. |
| Workflow Engine task events (ENG-11418) | Task events have been added to the Workflow Engine, which significantly improves the auditing capabilities of job processing, allowing for better tracking and management of tasks. |
| Gateway Manager runService task variables (ENG-11516) | Implemented custom job and task variable support in the Gateway Manager runService task. This task enhances the functionality of Gateway Manager, allowing users to select the service type and gateway cluster, and use variable options for cluster and service inputs. |
| Gateway Manager sidebar relocation (ENG-11700) | The Gateway Manager option has been relocated to the Administration section of the Itential Platform sidebar. This UI change is accompanied by a new icon for better visibility and user experience. |
Bug fixes (16)
This maintenance release of Itential Platform includes fixes for bugs that were reported to Itential Product Support.
| Feature | Description |
|---|---|
| the custom role dialog in Admin Essentials did not d… (ENG-1609) | Fixed an issue where the custom role dialog in Admin Essentials did not display roles for methods categorized as tasks, which are not HTTP endpoints. The endpoint behind the configuration dialog has been corrected to return task methods, enabling comprehensive configuration of custom roles. |
| Redis initialization logging (ENG-9045) | Enhancements have been made to logging and error checking processes during Redis initialization, improving overall reliability and troubleshooting capabilities. |
| Project import createdBy field failure (ENG-10364) | A problem was identified where projects containing workflows with a createdBy field would fail to import. This issue has been rectified by removing the createdBy field during the import process. |
| rodeo-ui myTtl API repeated calls (ENG-10673) | Updated the rodeo-ui version to resolve a bug issue where the /myTtl API endpoint was being unnecessarily triggered multiple times when the Logout Warning Dialog was displayed. |
| GitHub project over 2 MB pull error (ENG-10721) | An issue was resolved where Projects larger than 2MB would encounter errors when pulled from a Github repository. This issue has been corrected to ensure smoother Project management. |
| Schedule trigger nextRunAt calculation (ENG-10753) | Resolved calculation errors in nextRunAt for schedule triggers that occurred under specific creation circumstances, ensuring that nextRunAt is now calculated accurately. |
| Symlink support for custom apps (ENG-10757) | Restored support for using symlink with custom apps and adapters. |
| PHSpinner default value handling (ENG-10758) | Corrected the method by which the PHSpinner component was setting its current and default values in the UI. |
| Job start workflow validation regression (ENG-10784) | A critical issue was fixed where starting a job would fail to validate the workflow correctly. Instead, it relied on outdated error data from the workflow document to determine if the job could start. This issue has been corrected to ensure proper validation. |
| New service startup without restart (ENG-11370) | When the profile document serves as the source for the services configuration property, a new service can now be added to the Platform, which will spin up the service during the first startup rather than only upon restart. This regression from version 2023.2 has been resolved for Platform 6. |
| forEach revert transition loop termination (ENG-11399) | A fix has been applied to address an issue where revert transitions initiated from within a forEach loop could unexpectedly terminate the loop prematurely, causing disruptions in the intended logic. |
| Operations Manager project name loss on import (ENG-11602) | An issue was resolved where Operations Manager Automations lost the referenced Project name from the imported Project. This issue has been corrected to ensure proper functionality. |
| LDAP authentication custom group login (ENG-11641) | A bug was fixed that prevented users from successfully logging in when utilizing the LDAP authentication method with custom groups. |
| Transformation import function deselection (ENG-11692) | Upon import, valid functions were deselected from the transformation when opened and saved, and the transformation did not work as expected when running it in JST Designer. Updated the checkType parameter in the function check logic. Imported transformations now retain their selected functions on import, and are no longer empty. |
| A critical fix was implemented to the Node version h… (ENG-11872) | A critical fix was implemented to the Node version health check, which now ensures that the post-merge pipeline can successfully pass without any hindrance. |
| Health status endpoint readiness probe timeout (ENG-11901) | The /health/status endpoint, used to ping downstream services when performing a health check, caused timeouts when used with a readiness probe. Added a new optional query parameter exclude-services so that the endpoint only returns health information related to the Platform itself, and not the health of its connections to downstream systems. |
Security fixes (1)
This section highlights fixes and measures to prevent and minimize security risks and vulnerabilities.
| Feature | Description |
|---|---|
| undici insecure randomness in Admin Essentials (ENG-10283) | During security scans, it was discovered that certain versions of the undici package in Admin Essentials were vulnerable to Insecure Randomness risks. To address this vulnerability, the package dependency has been upgraded to version 6.21.1. |