WorkflowGen v9.6.1

This maintenance release adds configurable PDF upload protection and resolves targeted User Portal and Administration issues affecting error pages, saved views, long follow-up links, dark-theme global-list controls, and row reordering.

Important

  • After upgrading, set ApplicationDefaultFileUploadPdfSecurityProfile to Compatibility or Strict to enable PDF-specific validation. Off, missing, blank, or unknown values disable this protection.

Security

  • Bug (#4847, #4859): Added configurable active-content and structural validation for PDFs uploaded through WorkflowGen forms and corrected validation of malformed files, postback attachments, and same-name replacements. The default Compatibility profile blocks detected active content and malformed PDFs while allowing encrypted PDFs, XFA, and object streams; Strict also blocks those formats. API, remote-launch, and administration process-data uploads are unchanged.

  • Update: Updated the bundled and supported Node.js runtime to 22.23.2 LTS for the July 2026 security fixes.

Portal

  • Bug (#4827): Kept the User Portal navigation and dashboard visible when action launch or access errors occur.

  • Bug (#4842): Restored bulk selection for saved views.

  • Bug (#4856): Restored automatic refresh for request and action saved-view dashboard popups and kept Advanced View result counts synchronized after refreshes.

  • Bug (#4868): Kept long detected URLs, email addresses, and other links within request and action follow-up data cards.

Administration

  • Bug (#4848): Improved Global Lists editor icon visibility in dark theme.

  • Bug (#4851): Preserved Global Lists row values when reordering a row while another field is focused.

WorkflowGen MCP Server Preview

  • Security (#4709): Strengthened OAuth security for the WorkflowGen MCP Server Preview.

  • Security: Updated WorkflowGen MCP Server dependencies to address known security vulnerabilities.

  • Bug: Fixed MCP file imports when allowed folders are configured using relative paths.

Notes

  • Node.js modules are GraphQL v5.4.4, Webhooks v6.3.4, Auth v3.3.5, SCIM v3.3.4, and MCP v0.1.1. All WorkflowGen Node.js applications require Node.js 22.23.2 LTS.

  • The WorkflowGen MCP Server remains in Preview.

  • For background on earlier enhancements and major features, refer to the WorkflowGen 9.6.0 release notes.

Installation Packs

WorkflowGen 9.6.1 (Upgrade)
WorkflowGen 9.6.1 (Clean Install - PowerShell)
WorkflowGen 9.6.1 (Clean Install - manual)

Documentation

WorkflowGen 9.6.1 Upgrade Guide: English - Français
WorkflowGen 9.6 PowerShell Installation: English - Français
WorkflowGen 9.6 Manual Installation: English - Français
WorkflowGen 9.6 Technical Guide: English - Français
WorkflowGen 9.6 Administration Guide: English - Français
WorkflowGen 9.6 User Portal Guide: English - Français
WorkflowGen 9.6 Integration Guide: English
WorkflowGen 9.6 for Azure: English - Français
WorkflowGen 9.x for Docker: English - Français
WorkflowGen Documentation: English - Français