Added env variable LANGUAGE for default language setting, Added access denied page

Added

forms-flow-web-root-config

• Added env variable LANGUAGE for default language setting

forms-flow-web

• Added access denied page

Fixed

forms-flow-web-root-config

• Fixed service worker cache issue

forms-flow-bpm

• Fixed white label error on login to bpm

Modified

forms-flow-web

• The tenant user's default language is set from their data, tenant data, or the default application language.

Added internationalization for Spanish

Added

forms-flow-root-config

• Added internationalization for Spanish.

Fixed

forms-flow-root-config

• Fixed service worker cache issue

Added option to add registered user to the tenant, Task filter enhancements, Version upgrades and security vulnerability fixes

Added

forms-flow-web

• Added user search by role for Admin
• Added option to add registered user to the tenant
• Implemented functionality to generate filters based on form

forms-flow-bpm

• Added new field to notify listener to support email address injection

forms-flow-api

• Added the feature to capture task variables on application creation without FormBPMFilteredDataPipelineListener during initial submission
• Added user search by role for Admin
• Added option to add registered user to the tenant

forms-flow-data-analysis-api

• Added environment variable API_LOG_ROTATION_WHEN for specifying the frequency of log file rotation
• Added environment variable API_LOG_ROTATION_INTERVAL for setting the time interval for log file rotation
• Added environment variable API_LOG_BACKUP_COUNT for determining the number of backup log files to keep

Modified

forms-flow-web

• Task filter enhancements:
  • Updated default Tasks Filter to display tasks authorized for current logged-in user
  • Modified candidate group listing based on logged user access in filter create
  • Modified Assignee in create filter from manual input to select from list
  • Modified Candidate group label to User group/ User role
  • Modified definition key to workflow name select for workflow selection
  • Modified "Show task based on logged user roles" to "Display authorized tasks based on user roles" which is visible to admin
    users only, will be true by default
  • Task variable create UI and UX change
  • Adjusted task variables according to task attributes in card view
  • Updated default All Tasks Filter to display tasks authorized for current logged-in user
• Modified user listings to exclusively display users associated with the respective tenant for multi-tenant admin

forms-flow-api

• Changes have been made to the Roles and Groups endpoint to accommodate modifications related to subgroups in Keycloak 23.

Upgrade notes:

forms-flow-bpm

• SpringBoot version upgraded to 3.1.10
• groovy version upgraded to 3.0.21
• postgresql version upgraded to 42.7.2
• graalvm version upgraded to 23.0.0
• snakeyaml version upgraded to 2.2

forms-flow-api

• Python version upgraded to 3.12.1

forms-flow-documents

• Python version upgraded to 3.12.1

forms-flow-data-analysis-api

• Python version upgraded to 3.11.7

Generic Changes

• Fixed security vulnerabilities

Vulnerability fixes and minor bug fixes on filters

Changes

forms-flow-web

• Fixed task page infinity loading issue
• Fixed task list filter API breaking on initial time
• Fixed tenant based all tasks not showing issue

forms-flow-documents

• Fixed security vulnerabilities

forms-flow-data-analysis-api

• Fixed security vulnerabilities

RBAC support modified, Custom task filter implemented, UI and UX enhanced, Implemented multi-modules in forms-flow-bpm

Added

forms-flow-web

• Added new UI for forms, submissions, tasks, processes, dashboards, navbar
• Added RBAC support in form listing for reviewer
• Added RBAC support in submission(application) listing for client and reviewer
• Added form description to form
• Added a description input field for the form.
• Added create custom filter for task in task page
• Added environment variable DATE_FORMAT to change the date format
• Added environment variable TIME_FORMAT to change the time format
• Added environment variable CUSTOM_THEME_URL to override the theme
• Added environment variable CUSTOM_RESOURCE_BUNDLE_URL to customize resource bundle for internationalization

forms-flow-api

• Added RBAC support in form listing for reviewer
• Added RBAC support in submission(application) listing for client and reviewer
• Added migration script to move existing task filters from forms-flow-bpm to forms-flow-api, checkout here
• Added environment variable API_LOG_ROTATION_WHEN for specifying the frequency of log file rotation
• Added environment variable API_LOG_ROTATION_INTERVAL for setting the time interval for log file rotation
• Added environment variable API_LOG_BACKUP_COUNT for determining the number of backup log files to keep

forms-flow-bpm

• Added task filter custom implementation
• Added multi-modules

forms-flow-documents

• Added environment variable API_LOG_ROTATION_WHEN for specifying the frequency of log file rotation
• Added environment variable API_LOG_ROTATION_INTERVAL for setting the time interval for log file rotation
• Added environment variable API_LOG_BACKUP_COUNT for determining the number of backup log files to keep

Modified

forms-flow-web

• Modified Tasks page with List view and Card view of tasklist
• Modified Applications to Submissions in UI
• Modified accessibility enhancement
• Modified Name, Type, Path as advanced options while form create

Removed

forms-flow-web

• Removed filter by form type from form listing table

Generic Changes

• Move task filters from forms-flow-bpm to forms-flow-web
• Support Resubmit/ Edit Submission dynamically in the application flow with respect to isResubmit Key

Solution Component Upgrades

forms-flow-api

• Flask upgraded to 2.3.3 and fixed security vulnerabilities

forms-flow-web

• Fixed security vulnerabilities

forms-flow-bpm

• Camunda upgraded to 7.20.0, SpringBoot upgraded to 3.1.5 and fixed security vulnerabilities

forms-flow-documents

• Flask upgraded to 2.3.3 and fixed security vulnerabilities

Security vulnerability fixes

forms-flow-bpm

• Updated spring boot to 3.x
• Updated spring security to 6.x
• Updated camunda to 7.20

** All other components **

• Updated dependencies to fix vulnerabilities

Fixed: BPMN property panel css cdn, Documents API chrome driver and version

Fixed

forms-flow-web

• Fixed bpmn property panel css issue.

forms-flow-documents

• Fixed the problem of conflicting versions between Chrome and Chrome Driver when downloading forms.

Enhanced Role-Based Access Control, User Role Management, Introduced Micro-Frontend Support and Form Bundling

Added

forms-flow-web

• Added Form bundling premium feature, refer here for more details.
• Added RBAC(Role Based Access Control) support in form listing for designer and client.
• Added admin module for adding keycloak roles and user assignment.
• Added formsflow-admin group for RBAC support.

forms-flow-web-root-config

• Added micro-frontend integration using single-spa, for more details checkout here.
• Added environment variables MF_FORMSFLOW_WEB_URL, MF_FORMSFLOW_NAV_URL, MF_FORMSFLOW_SERVICE_URL, MF_FORMSFLOW_ADMIN_URL, MF_FORMSFLOW_THEME_URL to get MicroFrontend Components Created.
• Added environment variables ENABLE_FORMS_MODULE, ENABLE_TASKS_MODULE, ENABLE_DASHBOARDS_MODULE, ENABLE_PROCESSES_MODULE, ENABLE_APPLICATIONS_MODULE to disable a particular module in forms-flow-web.
• Added environment variable CUSTOM_THEME_URL for providing theming configuration.

forms-flow-bpm

• Added migration to support new Role Based Access(RBAC) with existing camunda authorizations.

forms-flow-api

• Added RBAC(Role Based Access Control) support in form listing for designer and client.
• Added migration script for existing users to get all forms listed, checkout here
• Added admin module for adding keycloak roles and user assignment.
• Added formsflow-admin group for RBAC support.

Modified

forms-flow-web

• Application history is modified to Application status and Request status.
• Environment variable USER_ACCESS_PERMISSIONS is replaced with ENABLE_APPLICATION_ACCESS_PERMISSION_CHECK to enable Role level permission.

forms-flow-analytics

• Redash upgraded from version 10.1.4 to 10.1.5

forms-flow-api

Upgrade notes:

• Flask upgraded from version 2.1.3 to 2.3.2.

Fixed

forms-flow-web

• Fixed resubmit issue in form adapter for custom submission.

forms-flow-bpm

• Task list variables not updated on re-submission by client issue fixed.

Generic Changes

• forms-flow-web is replaced by forms-flow-web-root-config as the deafult web application, for the setup refer here
• Added Micro-frontend feature to enable component level customisation which includes
  • forms-flow-admin (includes functionalities available for the user with admin privilages)
  • forms-flow-navbar (trigger the routing, internationalization, and login/logout functionalities for all users)
  • forms-flow-service (contains all the common functionalties used by micro front-ends like authentication service, storage APIs etc.)
  • forms-flow-theme (contains the common style sheet shared by all micro-front-ends)
    
    Refer the forms-flow-ai-micro-front-ends repository for further details.
• Dashboard authorization is moved from designer role to admin user.

Camunda Version Upgrade and major Vulnerability fixes in forms-flow-bpm

Added

forms-flow-bpm

• External Task APIs are exposed in bpm abstraction layer.

Modified

forms-flow-bpm

Upgrade notes:

• camunda upgraded from version 7.17.0 to 7.18.0.
• camunda-keycloak upgraded from version 2.2.3 to 7.18.0.
• camundaConnect upgraded from 1.5.0 to 1.5.4.
• camundaMail upgraded from 1.3.0 to 1.5.0.
• camunda-template-engines upgraded from 1.0.0 to 2.1.0
• spring boot upgraded from version 2.6.6 to 2.7.11.
• spring security Oauth2 upgraded from version 2.6.6 to 2.6.7.
• camunda-bpm-assert upgraded from 12.0 to 13.0.
• groovy upgraded from 3.0.13 to 3.0.17.
• graalVm upgraded from 22.1.0.1 to 22.3.2.
• jackson upgraded from version 2.14.0 to 2.15.0.

Patch release : Major Vulnerability fixes of tar and upgraded formioJs version in forms-flow-forms

Fixed

forms-flow-web

• Fixed major vulnerabilities of tar.

Modified

forms-flow-forms

• Modified formiojs version to 4.15.0-rc.10.