Workflow Engine 14.1.0

September 20, 2024

Overview

Workflow Engine 14.1.0 fixes subprocess parameter initialization behavior and MongoDB provider query logic, and includes Designer dependency security updates.

Why update

• Prevent subprocess parameter values from being overwritten by schema default values during subprocess creation.
• If you relied on previous default initialization, keep legacy behavior temporarily via WorkflowRuntimeSettings.ObsoleteSubprocessParametersInitializationBehavior.
• Fix MongoDB sorting/paging and scheme tag list generation in key provider methods.
• Apply security fixes in Designer dependencies (webpack and axios).

Key features

• Before 14.1.0: subprocess creation initialized parameters with schema default values, which could overwrite actual subprocess parameter values.
• Since 14.1.0: parameters are no longer initialized with schema default values during subprocess creation.
• Added compatibility path via WorkflowRuntimeSettings.ObsoleteSubprocessParametersInitializationBehavior.
• Fixed MongoDB behavior in GetProcessInstancesAsync, GetSchemesAsync (including tag list generation), and GetTopTimersToExecuteAsync.
• Updated Designer dependencies: webpack 5.94.0, axios 1.7.4.

Changelog

Update instructions

• Update all Workflow Engine packages to 14.1.0.
• No database migration is required for this release.
• If your schemas relied on subprocess parameter default initialization, either update schema behavior or set WorkflowRuntimeSettings.ObsoleteSubprocessParametersInitializationBehavior to true.
• This compatibility option affects parameters not copied under CopySpecified, IgnoreSpecified, or IgnoreAll.
• With CopyAll, parameters are copied from the parent process, so default initialization is not required.

Enhancements

• Updated Designer dependencies: webpack to 5.94.0, axios to 1.7.4.

Bug fixes

• Fixed subprocess parameter overwrite behavior caused by schema default initialization during subprocess creation.
• WorkflowRuntimeSettings.ObsoleteSubprocessParametersInitializationBehavior affects only parameters not copied under CopySpecified, IgnoreSpecified, or IgnoreAll.
• Under CopyAll, parameters are copied from the parent process, so default initialization is unnecessary.
• This subprocess behavior correction is treated as a bug fix, not as a breaking change.
• Fixed GetProcessInstancesAsync sorting and paging for MongoDB provider.
• Fixed GetSchemesAsync tag list generation, sorting, and paging for MongoDB provider.
• Fixed GetTopTimersToExecuteAsync: now throws an exception when top < 0, and fixed top handling for MongoDB provider.

Security

• Updated webpack to 5.94.0 in Designer dependencies, addressing CVE-2024-43788 (GHSA-4vvj-4cpr-p986); affected range: >=5.0.0-alpha.0 <5.94.0.
• Updated axios to 1.7.4 in Designer dependencies, addressing CVE-2024-39338 (GHSA-8hc4-vh64-cxmj); affected range: >=1.3.2 <=1.7.3.