This maintenance release adds configurable PDF upload protection and resolves targeted User Portal and Administration issues affecting error pages, saved views, long follow-up links, dark-theme global-list controls, and row reordering.
Important
- After upgrading, set
ApplicationDefaultFileUploadPdfSecurityProfiletoCompatibilityorStrictto enable PDF-specific validation.Off, missing, blank, or unknown values disable this protection.
Security
-
Bug (#4847, #4859): Added configurable active-content and structural validation for PDFs uploaded through WorkflowGen forms and corrected validation of malformed files, postback attachments, and same-name replacements. The default
Compatibilityprofile blocks detected active content and malformed PDFs while allowing encrypted PDFs, XFA, and object streams;Strictalso blocks those formats. API, remote-launch, and administration process-data uploads are unchanged. -
Update: Updated the bundled and supported Node.js runtime to 22.23.2 LTS for the July 2026 security fixes.
Portal
-
Bug (#4827): Kept the User Portal navigation and dashboard visible when action launch or access errors occur.
-
Bug (#4842): Restored bulk selection for saved views.
-
Bug (#4856): Restored automatic refresh for request and action saved-view dashboard popups and kept Advanced View result counts synchronized after refreshes.
-
Bug (#4868): Kept long detected URLs, email addresses, and other links within request and action follow-up data cards.
Administration
-
Bug (#4848): Improved Global Lists editor icon visibility in dark theme.
-
Bug (#4851): Preserved Global Lists row values when reordering a row while another field is focused.
WorkflowGen MCP Server Preview
-
Security (#4709): Strengthened OAuth security for the WorkflowGen MCP Server Preview.
-
Security: Updated WorkflowGen MCP Server dependencies to address known security vulnerabilities.
-
Bug: Fixed MCP file imports when allowed folders are configured using relative paths.
Notes
-
Node.js modules are
GraphQL v5.4.4,Webhooks v6.3.4,Auth v3.3.5,SCIM v3.3.4, andMCP v0.1.1. All WorkflowGen Node.js applications require Node.js 22.23.2 LTS. -
The WorkflowGen MCP Server remains in Preview.
-
For background on earlier enhancements and major features, refer to the WorkflowGen 9.6.0 release notes.
Installation Packs
WorkflowGen 9.6.1 (Upgrade)
WorkflowGen 9.6.1 (Clean Install - PowerShell)
WorkflowGen 9.6.1 (Clean Install - manual)
Documentation
WorkflowGen 9.6.1 Upgrade Guide: English - Français
WorkflowGen 9.6 PowerShell Installation: English - Français
WorkflowGen 9.6 Manual Installation: English - Français
WorkflowGen 9.6 Technical Guide: English - Français
WorkflowGen 9.6 Administration Guide: English - Français
WorkflowGen 9.6 User Portal Guide: English - Français
WorkflowGen 9.6 Integration Guide: English
WorkflowGen 9.6 for Azure: English - Français
WorkflowGen 9.x for Docker: English - Français
WorkflowGen Documentation: English - Français