Workflow Engine 13.2.1

June 25, 2024

Overview

Workflow Engine 13.2.1 is a stabilization patch for Designer, Core, Providers, and Samples.

Why update

• Fix multiple Designer regressions (CreateProcess, SignalR, plugin list).
• Fix subprocess execution behavior in core.
• Fix MongoDB provider process history counter behavior.
• Get security fixes from updated dependencies in Designer and sample identity packages.

Key features

• Stabilized Designer flows: CreateProcess, SignalR connection, and plugin list.
• Fixed subprocess execution behavior in core and corrected MongoDB GetProcessHistoryCount.
• Applied security-related dependency updates in Designer and samples.

Changelog

Update instructions

• Update all Workflow Engine packages to 13.2.1.
• No additional migration steps are required.

Enhancements

• Updated sample dependencies: Microsoft.Identity.Client 4.60.3 to 4.61.3, Azure.Identity 1.11.3 to 1.11.4.
• Updated Designer dependencies in Workflow-designer-angular: braces 3.0.2 to 3.0.3, engine.io 6.5.4 to 6.5.5, socket.io-adapter 2.5.4 to 2.5.5, ws 8.16.0 to 8.17.1.

Bug fixes

• Fixed multiple issues with CreateProcess activity behavior in Designer.
• Fixed SignalR connection issue in Designer.
• Fixed plugin list issue in Designer.
• Fixed subprocess execution bug in core.
• Corrected GetProcessHistoryCount in MongoDB provider.

Security

• Microsoft.Identity.Client 4.60.3 -> 4.61.3 in samples for CVE-2024-35255 (GHSA-m5vv-6r4h-3vj9); affected ranges include >=4.49.1 <4.60.4 and >=4.61.0 <4.61.3.
• Azure.Identity 1.11.3 -> 1.11.4 in samples for CVE-2024-35255 (GHSA-m5vv-6r4h-3vj9); affected range is <1.11.4.
• braces 3.0.2 -> 3.0.3 in Workflow-designer-angular for CVE-2024-4068 (GHSA-grv7-fg5c-xmjg); affected range is <3.0.3.
• ws 8.16.0 -> 8.17.1 in Workflow-designer-angular for CVE-2024-37890 (GHSA-3h5v-q93c-6h6q); affected range includes >=8.0.0 <8.17.1.