Subscribe to our RSS feed or by email to receive automatic notifications when new releases are published. Get notified when we ship new features and improvements.
August 11, 2025

6.0.7

Platform 6.0.7 is a maintenance release containing enhancements, bug fixes, and security updates.

FeatureDescription
Unused files and dependencies removal (ENG-10705)Removed all unused files, code, and dependencies in Platform 6.
Workflow data UUID property (ENG-12003)A new UUID property has been added to workflow data to enhance data management and identification.
Cookie escaping and hashing security fix (ENG-12675)Updates were made in the Platform to fix cookie escaping and hashing, addressing low vulnerabilities that were previously identified.
Docker image Itential user ID standardization (ENG-12772)The Itential user within Docker images has now been assigned a group/user id of 1001:1001 to standardize user management.
CyberArk CCP secrets provider support (ENG-12789)Added support for CyberArk CCP as a secrets provider.
Network dependency addition (ENG-13401)A new network dependency was added to enhance the functionality and fix issues related to the Platform pipeline.
Gateway Manager clusterId connection deduplication (ENG-13928)Gateway Manager connection validation now ensures only one connection exists per clusterId during new connection handling.
FeatureDescription
Pre-built import duplicate key race condition (ENG-7955)When importing a pre-built, a “duplicate key error collection” error returned. Fixed a race condition in the processAutomations method that occurred if multiple workflows in the imported pre-built contain the same group. This fix ensures the pre-built will no longer error the import API.
Admin Essentials out-of-sync banner (ENG-8372)The “out of sync” banner no longer persists when an application is “in sync” after a user selects an application within the Application section of Admin Essentials and refreshes the page.
getTimeByTimezone task with DST support (ENG-8589)Created a new getTimeByTimezone task that presents timezones by location to accommodate for time variations caused by Daylight Savings Time. Additionally, timezone input is now optional and will default to the system’s timezone if not present, also accounting for Daylight Savings Time.
Child job loop stuck in running state (ENG-8815)Fixed a bug in which child job loops remained stuck in a running state when all child jobs were cancelled.
Parallel revert infinite loop fix (ENG-8999)Fixed an issue where jobs that had reverts in parallel could trigger an infinite loop that saturated the CPU.
convertTimezone input time default (ENG-10315)Fixed an issue where the convertTimezone task and other time tasks would default to using the current date and time as opposed to the correct input time.
Transformation internal function backspace delete (ENG-10848)A bug was fixed where the internal functions of transformation would disappear upon pressing the backspace key, improving user experience.
Service memory crash and restart (ENG-11043)An issue was fixed where a service (application/adapter) crashed due to running out of memory and could not be restarted, ensuring better service reliability.
Task palette default variable keys for transformations (ENG-12350)The task palette has been updated to set default keys for incoming and outgoing variables specifically for transformation assets, based on the asset’s schema.
Deep nested object task stuck in running state (ENG-12865)A fix was made to address an issue where tasks that utilized deeply nested objects or large arrays of objects as inputs could become stuck in a running state, resulting in a “Maximum Call Stack” error being logged.
Studio workflow strict validation disable (ENG-13023)The strict mode for Studio workflow run validation has been disabled to improve flexibility and usability during workflow execution and prevent workflow error.
mongo_url password masking in Admin Essentials (ENG-13035)Resolved an issue that exposed passwords in mongo_url. The mongo_url property is now effectively masked in the Admin Essentials Configuration view to enhance security and prevent unauthorized access.
JST conditional step reference breakage (ENG-13291)An issue was resolved in JST Transformations where adding conditionals to a step that had multiple assignments from the return would lead to a broken reference. Additionally, a fix was implemented to ensure that a new context would properly propagate from a step with multiple assignments.
Adapter property encryption on import (ENG-13377)A bug was fixed concerning the adapter properties, which were previously unencrypted upon import when the propertySchema did not explicitly declare the property as encrypted.
JST anchor assigned state after invalid transition (ENG-13405)Resolved issue where anchors incorrectly remained marked as assigned when drawing invalid transitions from context variables to parameters across different tasks.
Gateway creation service-group state (ENG-14383)Fixed an issue where creating a new gateway would succeed, but result in a bad service-group state.
FeatureDescription
semver vulnerable version update (ENG-11009)Packages have been updated to ensure a non-vulnerable version of semver is utilized across the Platform, enhancing overall security.
swagger-client and swagger-ui-react security update (ENG-11611)Updated the swagger-client and swagger-ui-react dependency versions to resolve a security vulnerability.
axios security update (ENG-11626)Updated the axios dependency version to fix a security vulnerability that was detected in previous versions.
prismjs security update (ENG-11629)Updated the prismjs dependency version to resolve a security vulnerability.
path-to-regexp security update (ENG-11631)Updated the path-to-regexp dependency version to address a security vulnerability.
cookie-parser and express-session security update (ENG-11634)Updated the cookie-parser and express-session versions to mitigate a security vulnerability.
Studio Command component XSS prevention (ENG-13135)Implemented XSS prevention measures by adding proper input sanitization and character escaping in the Automation Studio Command component.
Studio component XSS remediation (ENG-13136)Applied additional XSS vulnerability remediation with enhanced input validation and character escaping in Automation Studio components.
form-data dependency security update (ENG-13771)Updated the form-data dependency version to address a security vulnerability.