Subscribe to our RSS feed or by email to receive automatic notifications when new releases are published.
Get notified when we ship new features and improvements.
6.5.0
Platform 6.5.0 is a minor release that introduces FlowAI and Work Center. This release also includes security updates, bug fixes, and enhancements across Workflows, Workflow Engine, Configuration Manager, NSO Service Manager, and Platform infrastructure, including Cisco NSO 6.7 compatibility.
For more information on new features introduced in this release, see Platfrom 6.5 feature announcement.
Enhancements (19)
| Component | Feature | Description |
|---|---|---|
| Admin Essentials | Exclude query parameter for config/apps API (ENG-25095) | Added an exclude query parameter to the GET /config/apps API. You can now exclude data for methods, topics, and views from the API response. |
| Admin Essentials | Download Integration Model as JSON (ENG-24611) | Added a button to the titlebar that lets you download an integration model as a JSON file while viewing it. |
| Configuration Manager Essentials | Remove service launch timeout cap (ENG-24921) | Removed the maximum constraint on service_launch_timeout, previously capped at 1,200 seconds. You can now set whatever value your environment requires for extended startup migrations on large datasets. |
| NSO Service Manager | Cisco NSO 6.7 commit parameter support (ENG-24880) | Added support for new commit parameters to improve compatibility with Cisco NSO 6.7 and later versions. |
| NSO, NSO Service Manager | Dry-run support for prepare-transaction RPC (ENG-24791) | Updated the NETCONF prepare-transaction RPC to use the dry-run parameter for compatibility with Cisco NSO 6.7 and later versions. |
| NSO Service Manager | NSO version detection for Cisco NSO 6.7 (ENG-24706) | Enhanced NSO version detection and Itential-tools package resolution to support compatibility with Cisco NSO 6.7. |
| Studio | Child Job task workflow dropdown format (ENG-24678) | The Child Job task workflow dropdown now displays selected project member workflows in the correct format: <workflow> from <project>. |
| NSO | Cisco NSO 6.7 support via Unix Domain Sockets (ENG-24607) | Added support for Cisco NSO 6.7 by updating itential-tools internal package communication from TCP to Unix Domain Sockets and aligning build requirements with Java 21. |
| Core | Context-aware helper functions for Ancestry (ENG-24562) | Added context-aware helper functions for Ancestry. |
| Gateway Manager | Gateway Manager database import and export (ENG-24471) | Implemented Gateway database import and export functionality in Gateway Manager via the UI, workflow tasks, and APIs. |
| Operations Manager | Agent session start error handling (ENG-24233) | Fixed agent session start error handling in Operations Manager. The system now propagates AEE failures, guards against a missing sessionId, and opens a new tab when a session successfully begins. |
| Compliance Plans | Compliance plan start and complete events (ENG-24205) | Compliance Plans now emit events on compliance plan start and complete. |
| Configuration Manager Essentials | Throttle field for concurrent devices (ENG-24089) | Added a throttle field that lets you limit the number of concurrent devices used during a compliance plan run. |
| Workflow Engine (WFE) | Work Center integration for manual tasks (ENG-21708) | The Workflow Engine now integrates with Work Center when a manual task is encountered. When Work Center is installed, a work item is automatically created in Work Center as the task becomes actionable, enabling operators to view and complete manual tasks directly from Work Center. |
| Workflow Engine (WFE) | Support for async task type (ENG-22998) | Added Workflow Engine support for async type tasks. |
| Workflow Engine (WFE) | onWorkItemCompletion for Work Center integration (ENG-23247) | Added onWorkItemCompletion support in the Workflow Engine for Work Center integration. |
| Workflow Engine (WFE) | getWorkItemStatuses for Work Center reconciliation (ENG-23246) | The Workflow Engine now exposes a getWorkItemStatuses method, enabling Work Center to automatically resolve orphaned work items during its reconciliation cycle. Work Center can now query the Workflow Engine directly to determine the current status of items that were previously stuck in a PENDING state and close them out as either COMPLETED or CANCELED. |
| Tool Registry | Subscribe to audit events and update tools (ENG-22044) | Tool Registry now subscribes to audit events and updates tools accordingly. |
| Gateway Manager | Gateway Manager database import and export via JSON-RPC (ENG-22256) | Implemented database import and export JSON-RPC methods in Gateway Manager. |
Bug fixes (29)
| Component | Feature | Description |
|---|---|---|
| NSO Service Manager | Dry-run option format incompatibility (ENG-25336) | Fixed a regression where the dry-run option format was incompatible with the deleteServiceDryRun task in the JSON-RPC adapter, causing commit failures. |
| Workflows | ForEach loop error with multiple query tasks merging (ENG-24941) | Fixed an issue where connecting multiple query tasks to a merge task caused tasks to be unable to draw transitions to other tasks within the same loop, under certain criteria. |
| Workflows | Query not applied for child job task loop array input (ENG-24684) | Fixed an issue where the query was not applied when calculating loop iteration count and fetching loop elements for child job task loop array input, causing runtime errors. |
| Workflows | Evaluation task UI update on delete (ENG-24315) | Fixed an issue where the evaluation task UI didn’t update correctly when you deleted an evaluation that had multiple evaluations with queries configured. |
| Studio | Workflow validation for deleted task actor references (ENG-23820) | Added workflow validation for task actor fields that reference deleted tasks, surfacing broken references before workflow execution. |
| Configuration Manager Essentials | Toast close icon (ENG-23765) | Fixed an issue where the toast close icon displayed incorrectly. |
| Configuration Manager Essentials | Non-compliant device read from API (ENG-23760) | Fixed an issue where non-compliant devices weren’t read correctly as returned from the API. |
| Configuration Manager Essentials | Compliance dashboard display bugs (ENG-23705) | Fixed issues in the compliance dashboard including device count mismatch, backup sorting, and incorrect node display. |
| Projects | Export with unsaved document changes (ENG-23338) | Exporting a project with unsaved document changes now saves the document first before exporting. The same save-before-action behavior now applies consistently across all asset export, duplicate, and delete operations in both Automation Studio and Lifecycle Manager. |
| Workflow Engine (WFE) | Scheduled task window error messages (ENG-23173) | Invalid scheduled task window errors now output a descriptive schema error instead of [object Object]. |
| Configuration Manager Essentials | JSON compliance dynamic variables not honored (ENG-22859) | Fixed an issue where JSON compliance dynamic variables weren’t honored in workflow tasks. |
| Golden Configuration | runComplianceForDevice scope (ENG-22750) | Fixed an issue where runComplianceForDevice executed compliance against all task instances in a JSON Golden Config tree instead of only the specified device instance. |
| JSON Forms | Static dropdown label truncation (ENG-22711) | Fixed an issue where static dropdown labels with a single option were truncated and not fully shown in the preview form. |
| Workflows | Duplicate jobs from rapid button clicks (ENG-22327) | Fixed an issue in Automation Studio where rapidly clicking Run, Duplicate, Delete, or Save multiple times could produce duplicate jobs, clones, or deletes. These buttons are now disabled while their operations are in progress. |
| Configuration Manager Essentials | pronghorn.json reference to missing file (ENG-21845) | Fixed a reference in Configuration Manager’s pronghorn.json to a file that didn’t exist. |
| Projects | Asset name displays internal ID prefix (ENG-20138) | Fixed an issue where project asset names displayed an internal ID prefix (@<ObjectId>:) in the delete-with-references confirmation dialog and the Edit Details name field. Asset names now display consistently with the rest of the UI. |
| Workflows | Mock data validation update button (ENG-18464) | Fixed an issue where the update button for mock data didn’t become disabled when there was a validation error in object data. The button is now grayed out until the error is resolved. |
| Workflows | Mock data error for renderJsonSchema task (ENG-18427) | Fixed a “Cannot read properties of null” error when viewing mocked Render JSON Schema tasks in Debug Mode. |
| Studio | Navigation dialog with no unsaved changes (ENG-18177) | Fixed an issue where navigating from the workflow editor to the Projects view incorrectly triggered an “unsaved changes” dialog when no changes had been made. |
| Configuration Manager Essentials | Configuration parsers GBAC save failure (ENG-15613) | Fixed an issue where configuration parsers failed to save GBAC. |
| Operations Manager | Large data download in JSON view (ENG-13006) | Fixed the download button for large data in the JSON view. It now downloads the full data set instead of returning a “data is too large” message. |
| Configuration Manager Essentials | Golden Configuration preview config (ENG-11393) | Fixed an issue where the Golden Configuration preview config wasn’t working. |
| Studio | DiscoverReferences parentPointer consistency (ENG-11033) | DiscoverReferences now returns a consistent, concrete parentPointer regardless of discovery direction. Inverse references previously returned a schema-level pointer; they now resolve the actual data path using the parent model’s forward reference definition. |
| JSON Forms | Sub-container expansion in Preview Form (ENG-10827) | Subcontainers with Collapse by Default set to true and a custom container name are now expandable in Preview Form. |
| Lifecycle Manager | Missing query parameters in Swagger UI (ENG-10616) | Fixed an issue where some API endpoints didn’t show their available query parameters in the /rest-api Swagger UI, making it appear as though those endpoints didn’t support filtering, sorting, or pagination even though they did. The Swagger UI now correctly displays all supported query parameters for affected endpoints. |
| Workflows | Unclear warning for undefined task variable references (ENG-10597) | Added a clarifying warning when variables are set to task variables that don’t exist. |
| Workflows | Error toast on integration task Details tab (ENG-10152) | Fixed an issue where integration tasks displayed an error toast when you opened the Details tab of the Task Details panel. |
| Transformations | Stale data left behind after deleting unsaved asset (ENG-8274) | Fixed an issue where deleting a Transformation, Template, JSON Form, Command Template, or Analytic Template with unsaved changes showed an unexpected “Confirm Navigation” dialog or left stale data in the next opened asset. |
| Workflows | Adapter ID ghost after deletion (ENG-5905) | Fixed an issue where an integration ID left a ghost reference on a task after the integration was deleted. |
Security fixes (13)
This release includes security updates that address vulnerabilities in third-party packages and platform components.
| Component | Feature | Description |
|---|---|---|
| Core | CRLF injection (ENG-24987) | Resolved a CRLF injection vulnerability in Core. |
| Core | Asymmetric resource consumption in ws (ENG-24885) | Updated the ws dependency in Core to resolve an asymmetric resource consumption (amplification) vulnerability. |
| Admin Essentials | Open redirect in react-router-dom (Admin Essentials) (ENG-24884) | Updated the react-router-dom dependency to address an open redirect vulnerability. |
| Configuration Manager Essentials | Open redirect in react-router-dom (Configuration Manager Essentials) (ENG-24884) | Updated the react-router-dom dependency to address an open redirect vulnerability. |
| Lifecycle Manager | Open redirect in react-router-dom (Lifecycle Manager) (ENG-24884) | Updated the react-router-dom dependency to address an open redirect vulnerability. |
| Operations Manager | Open redirect in react-router-dom (Operations Manager) (ENG-24884) | Updated the react-router-dom dependency to address an open redirect vulnerability. |
| Studio | Open redirect in react-router-dom (Studio) (ENG-24884) | Updated the react-router-dom dependency to address an open redirect vulnerability. |
| NSO Service Manager | Prototype pollution in axios (adapter-nso) (ENG-24883) | Resolved a prototype pollution vulnerability (CVE-2026-44494) by updating axios to a secure version in adapter-nso. |
| NSO Service Manager | Prototype pollution in axios (app-nso_manager) (ENG-24882) | Resolved a prototype pollution vulnerability (CVE-2026-44494) inside app-nso_manager by updating axios to a secure version. |
| Inventory Manager | Axios and React Router security updates (ENG-24512) | Updated the axios and react-router-dom dependencies in Inventory Manager to resolve security vulnerabilities. |
| Inventory Manager | Axios security update (Adapter Inventory) (ENG-24511) | Updated the axios dependency in Adapter Inventory to resolve a security vulnerability. |
| Core | Prototype pollution in axios (itential-utils) (ENG-24443) | Updated the axios dependency in itential-utils to resolve a prototype pollution vulnerability. |
| Core | Prototype pollution in axios (iap) (ENG-24441) | Updated the axios dependency to resolve a prototype pollution vulnerability. |
Component versions
| Component | Version |
|---|---|
| FlowAI | 1.0 |
| Gateway Manager | 1.1.1 |
| Inventory Manager | 1.2.8 |
| Service Manager | 6.5.0 |