9.5.1

WorkflowGen 9.5.1

This release includes bug fixes, security improvements, and a Node.js platform support update for the WorkflowGen Node.js modules.

Important

• Node.js 22.22.2 LTS security release (March 24, 2026)

Security

• Bug (#4648, #4645): Added missing CSRF token validation on administration forms.

Portal

• Bug (#4650): Improved the application-start data lock feedback page with clearer messaging and data grouped by user and unlock time.

• Bug (#4619): Fixed an issue where UpdateView access validation was performed inside the database transaction instead of before it, improving resource usage for unauthorized requests.

Administration

• Bug (#4665): Fixed swapped directory count aliases where user counts displayed group counts and vice versa.

• Bug (#4664): Removed unused directory detail count queries that were fetching data no longer displayed.

• Bug (#4621): Restored directory reorder arrows that were not functioning due to outdated DOM access patterns.

Workflow Designer

• Bug (#4627): Improved the SetXpdl method to avoid fetching the full XPDL column unnecessarily, reducing overhead on process saves.

• Bug (#4611): Fixed a PostgreSQL compatibility issue where table-qualified column names in UPDATE SET clauses caused errors when renaming form field parameters.

Node.js Apps

• Update (#4661): Updated supported and pinned Node.js runtime references to 22.22.2 LTS in the WorkflowGen Node.js modules, CI configuration, Docker images, and PowerShell setup tooling (v2.0.13).

Notes

• All Node.js modules (GraphQL v5.4.2, Webhooks v6.3.2, Auth v3.3.2, and SCIM v3.3.2) now require Node.js 22.22.2 LTS.

• Production dependency updates were applied across the Node.js modules to address current security advisories.

• For background on earlier enhancements and major features, refer to the WorkflowGen 9.0.0, WorkflowGen 9.1.0, WorkflowGen 9.2.4, WorkflowGen 9.3.1, WorkflowGen 9.4.0, and WorkflowGen 9.5.0 release notes.