Workflow Engine 16.3.0

January 23, 2025

Overview

Workflow Engine 16.3.0 is a Designer maintenance release with dependency updates and an npx command-line fix.

Why update

• Get security and compatibility fixes from updated Designer and sample dependencies.
• Fix the npx command-line issue in the Designer startup flow.

Key features

• Updated js-base64 and multiple Designer sample dependencies.
• Fixed the Designer npx command-line issue.

Changelog

Update instructions

Update Designer packages and samples to 16.3.0.

Enhancements

• The js-base64 dependency has been upgraded from version 2.6.3 to 3.7.7.
• The path-to-regexp dependency in the Designer samples has been updated from version 0.1.10 to 0.1.12.
• The express dependency in the Designer samples has been updated from version 4.21.1 to 4.21.2.
• The nanoid dependency in the Designer samples has been upgraded from version 3.3.4 to 3.3.8.
• The json5 dependency has been updated from version 2.2.0 to 2.2.3.

Bug fixes

• Fixed the npx command-line issue. For more information, refer to the documentation.

Resources

• Integration documentation: How to integrate Designer.

Security

• Updated sample dependency path-to-regexp from 0.1.10 to 0.1.12, addressing CVE-2024-52798 (GHSA-rhx6-c78j-4q9w); affected range includes versions <0.1.12, fixed in 0.1.12.
• Updated sample dependency nanoid from 3.3.4 to 3.3.8, addressing CVE-2024-55565 (GHSA-mwcw-c2x4-8c55); affected range includes versions <3.3.8, fixed in 3.3.8.
• Updated sample dependency json5 from 2.2.0 to 2.2.3, addressing CVE-2022-46175 (GHSA-9c47-m6qq-7p4h); affected range includes versions >=2.0.0 and <2.2.2, fixed in 2.2.2.