WorkflowGen 9.8.0
WorkflowGen 9.8.0 expands PDF upload compatibility and includes security fixes, improvements to Administration and Portal lists, and updated Node.js components.
These notes describe the changes since WorkflowGen 9.7.0.
Important
-
Looking ahead to WorkflowGen v10: While this is the last planned release of v9, WorkflowGen v9 remains supported. We encourage you to discover WorkflowGen 10.5.0, which builds on the familiar v9 interface with enhanced search and data indexing capabilities. You can keep SQL Server 2016–2022 and benefit from full-text search by following the upgrade guide. Moving to SQL Server 2025 is optional and can happen later, when you are ready to enable semantic search and its associated configuration. This lets you adopt v10 at your own pace while preserving familiar ways of working.
-
Database upgrades: There’s no new 9.8.0 database update script. Installations already updated through 9.7.0 don’t need an additional database script for this release. Older installations must first apply the applicable update scripts in order.
-
PDF uploads: For new installations,
ApplicationDefaultFileUploadPdfSecurityProfilenow defaults toOff, instead ofCompatibilityin 9.7.0. PDF-specific validation is disabled with this setting. SelectCompatibilityorStrictwhen this protection is required. Update packages preserve the installed configuration and provide a configuration sample; existing sites keep their selected profile unless an administrator changes it. For Docker deployments, a container created from the new image usesOffunless the PDF profile is explicitly configured. SetWFGEN_APP_SETTING_ApplicationDefaultFileUploadPdfSecurityProfiletoCompatibilityorStrictto retain the desired PDF protection. -
Node.js: The recommended runtime and supplied Docker images now use Node.js 24.21.0. The supported minimum remains 24.19.0 within the Node.js 24 release line.
-
Quick search: Text quick searches continue to default to Contains. In Configuration > Portal > Search, administrators can select
Equalsas the default and optionally choose a relative period in months for request creation dates. The period defaults to No filter (0).
Security
-
Improvement (#4990): Expanded the PDF
Compatibilityprofile to accept supported single-PDF Portfolios and specific date and currency formatting in PDF forms. Other embedded files and scripts remain restricted, and theStrictprofile continues to reject these exceptions. -
Bug (#5053): Protected delegation changes and their notification emails against requests that fail the required security checks.
-
Bug (#5054): Strengthened security checks for global list management.
-
Update (#5059): Updated Authentication components to address known security vulnerabilities.
-
Update (#5065, #5133): Updated production dependencies in Authentication, GraphQL, Webhooks, and SCIM to address known security vulnerabilities.
-
Bug (#5122): Strengthened security checks when saving process settings.
Administration
-
Bug (#5035): Restored ascending and descending sort indicators in Administration lists, including light and dark themes. Widened the Order headers in Process Activities, Data, and Participants lists to accommodate longer translations.
-
Bug (#4902): Improved the display of descriptions and visibility labels in the process data list.
-
Bug (#5122): Corrected saving the requester notification setting for request closure in all process states, including Active and Archived.
Portal
-
Bug (#4845): Corrected synchronization of the select-all checkbox with individual selections in the saved views list.
-
New Feature (#5103): Added an Equals/Contains toggle for text quick searches and optional relative month periods for request creation dates. Search and refinement forms also offer Last months periods. Saved views retain the selected period and update its dates when reopened; later changes to administrator defaults do not alter existing views. Numeric and request-number searches keep their existing behavior.
-
Bug (#5103): Saved search views now retain the search scope, comparison, and date criteria used for the displayed results, including when reopened in another language.
WorkflowGen MCP Server
- Update (#5033, #5058, #5119, #5133): Updated MCP Server production dependencies, including security fixes. The bundled MCP Server version is 1.0.1.
Platform
- Update (#5067): Updated the recommended Node.js runtime and supplied Docker images to 24.21.0. The supported minimum remains 24.19.0 within Node.js 24.
Notes
-
Included Node.js modules are Authentication 3.4.2, GraphQL 5.6.1, Webhooks 6.5.1, MCP 1.0.1, and SCIM 3.4.1.
-
PDF validation applies to new uploads through workflow forms. It does not change API, remote-launch, Administration process-data uploads or existing attachments.
Compatibilitydoes not guarantee complete inspection of encrypted PDFs, XFA or all compressed content; useStrictwhen those formats must be rejected. -
Text searches using Equals, including full searches and reports, now follow the database’s comparison rules. Matching of some Unicode characters may differ from earlier releases.
-
For earlier features and fixes, refer to the WorkflowGen 9.7.0 release notes.
Installation Packs
WorkflowGen 9.8.0 (Upgrade)
WorkflowGen 9.8.0 (Clean Install - PowerShell)
WorkflowGen 9.8.0 (Clean Install - manual)
Documentation
WorkflowGen 9.8.0 Upgrade Guide: English - Français
WorkflowGen 9.8 PowerShell Installation: English - Français
WorkflowGen 9.8 Manual Installation: English - Français
WorkflowGen 9.8 Technical Guide: English - Français
WorkflowGen 9.8 Administration Guide: English - Français
WorkflowGen 9.8 User Portal Guide: English - Français
WorkflowGen 9.8 Integration Guide: English
WorkflowGen 9.8 for Azure: English - Français
WorkflowGen 9.x for Docker: English - Français
WorkflowGen Documentation: English - Français