Workflow Engine 16.2.1

January 9, 2025

Overview

Workflow Engine 16.2.1 updates Designer dependencies, changes .NET Framework sample update policy, and fixes a MongoDB Workflow API issue.

Why update

• Get security and compatibility fixes from updated Designer dependencies.
• Fix MongoDB Workflow API behavior when multiple duplicate schema entries exist.

Key features

• Updated Designer dependencies to newer versions.
• .NET Framework samples are no longer updated alongside each Workflow Engine release.
• Fixed duplicate handling in MongoDB Workflow API schema collection.

Changelog

Update instructions

Update all Workflow Engine packages to 16.2.1.

Enhancements

• Updated Designer dependencies: nanoid 3.3.7 to 3.3.8, express 4.21.0 to 4.21.2, path-to-regexp 0.1.10 to 0.1.12, cross-spawn 7.0.3 to 7.0.6.
• .NET Framework samples are no longer updated alongside the Workflow Engine release. You can update them yourself or ask our support team for assistance at support@optimaget.com.

Bug fixes

• Fixed an issue in MongoDB Workflow API where, if there were multiple duplicate entries in the schema collection, only the first duplicate was affected.

Resources

• Support contact: support@optimaget.com.
• Workflow API documentation: Web API.

Security

• Updated nanoid from 3.3.7 to 3.3.8 in Designer dependencies, addressing CVE-2024-55565 (GHSA-mwcw-c2x4-8c55); affected range includes versions <3.3.8, fixed in 3.3.8.
• Updated path-to-regexp from 0.1.10 to 0.1.12 in Designer dependencies, addressing CVE-2024-52798 (GHSA-rhx6-c78j-4q9w); affected range includes versions <0.1.12, fixed in 0.1.12.
• Updated cross-spawn from 7.0.3 to 7.0.6 in Designer dependencies, including the fix for CVE-2024-21538 (GHSA-3xgq-45jj-v275); affected range includes versions >=7.0.0 and <7.0.5, fixed in 7.0.5.