​

Known issues

• FLEXDEPLOY-16028 - Customers that upgrade to FlexDeploy and Configuration Management versions 10.0.0.0-10.0.0.5 from an earlier version and use SSO may face an issue stating that the logout filter is invalid. This is resolved in 10.0.0.6. As a workaround, manually update your config file from io.buji.pac4j.filter.LogoutFilter to org.pac4j.jee.filter.LogoutFilter.

​

Launch Webinar Recordings

​

FlexDeploy 10.0.0.10 (10-31-2026)

​

Application Updates

​

Security

• Node, Angular, Grunt, Oracle Visual Builder Plugin
  • FLEXDEPLOY-16676 - Plugin Node.js version selections v22, v24, and v26 now install the October 21, 2026 security releases (22.23.4, 24.22.1, and 26.12.1). Existing endpoint installs under installs/nodejs are keyed by major version and are not replaced automatically; delete those v22/v24/v26 folders to pick up the patched binaries on the next run.
• Flexagon SaaS Platform
  • FLEXDEPLOY-16676 - The node version shipped for SaaS customers is updated to 22.23.4+ for CVEs.
  • FLEXDEPLOY-16677 - Updated cacerts during Docker image builds to address security vulnerability CVE-2026-91403.
• FLEXDEPLOY-16620 - FlexDeploy and Configuration Management and HTTP Agent - Upgraded the version of Apache Tomcat to 9.0.0.123.

​

FlexDeploy 10.0.0.9 (9-18-2026)

​

Application Updates

​

Salesforce

• FLEXDEPLOY-16494 - Upgraded the Salesforce plugin to API version 68.0 (Winter ’27) so deployments to Winter ’27 orgs succeed. New metadata types FlowValueMap, UiWidgetBundle, AiAgentDefinition, and AiAgentDefinitionVersion are supported. The default API version is 68.0; BASIC authentication remains limited to 64.0.

​

Plugin Updates

• Oracle Cloud Plugins (Analytics Cloud, API Platform, Integration Cloud, EPM, Visual Builder)
  • FLEXDEPLOY-16527 - Allow selecting the JWT signature algorithm on OCI-related cloud accounts for OAuth JWT assertion.

​

Resolved Issues

• Oracle EPM Plugin
  • FLEXDEPLOY-16519 - Resolved an issue where the exportNewSnapshot and downloadSnapshot operations could fail with an Invalid URL error after FlexDeploy stopped automatically removing trailing slashes from REST URLs.
    • Oracle EPM Cloud requires the /interop/rest/ endpoint to contain a single trailing slash. Older Oracle EPM plugin versions could generate /interop/rest//, which does not work with FlexDeploy 10.0.0.3 - 10.0.0.8 or 11.0.0.0 - 11.0.0.5, and 11.1.0.0 - 11.1.02.
    • Customers using affected Oracle EPM plugin versions should upgrade to the plugin included with FlexDeploy 10.0.0.9, 11.0.0.6, 11.1.0.3, 11.2.0.0, or a later plugin build for those release lines.

​

FlexDeploy 10.0.0.8 (8-9-2026)

​

Application Updates

​

Salesforce

• FLEXDEPLOY-15982 - Added a new FDSF_PACKAGE_XML_TYPE_LIMITS project property to customize how many items of each object type are included in each package.xml file during download. This helps prevent FlexDeploy from creating packages that are too large. The default limits have also been adjusted to use smaller package sizes for Report and Document metadata types.
• FLEXDEPLOY-16330 - Increased read and connection timeouts for Salesforce API calls to reduce timeout issues during longer-running operations.

​

Https Agent

• FLEXDEPLOY-16379 - Updated JVM GC logging options to be compatible with Java 21 while maintaining support for earlier Java versions. This resolves HTTPS Agent startup failures caused by deprecated JVM options on newer JDKs.

​

Plugin Updates

• Oracle WebLogic Plugin
  • FLEXDEPLOY-16382 - WebLogic createOrUpdateWeblogicConfig now allows values like TwoPhaseCommit GlobalTransactionsProtocol for XA datasources.

​

FlexDeploy 10.0.0.7 (7-12-2026)

​

Application Updates

​

Security

• FLEXDEPLOY-16114 - FlexDeploy and Configuration Management and HTTP Agent - Upgraded the version of Apache Tomcat to 9.0.0.119.

​

Salesforce

• FLEXDEPLOY-16053 - Improved support for using the project property to exclude Salesforce objects. Filtering by SOAP name now works consistently, eliminating the need to exclude each object individually using the TYPE#NAME format for complete removal.

​

Plugin Updates

• Azure PowerBI Plugin
  • FLEXDEPLOY-16073 - Azure PowerBI Plugin now supports a target folder path for RDL File, allowing the Paginated Reports to be imported inside a Folder in the Workspace.

​

Resolved Issues

• General
  • FLEXDEPLOY-16113 - Resolved issues on work item screens that could cause thread deadlocks in some environments, particularly on servers with low CPU core counts.
  • FLEXDEPLOY-16137 — Resolved an issue where certain pages were not auto-refreshing when WebSockets were unavailable/disabled. Affected screens were project executions, user notifications, and release dashboards.
• Security
  • FLEXDEPLOY-16077 - Restricted the Enable Preview action on the Edit Notification Template page to users with Notification Templates update permission.
  • FLEXDEPLOY-16078 - Restricted the Send Test action on the Edit Notification Template page to users with Notification Templates update permission.
• Salesforce
  • FLEXDEPLOY-16152 - Resolved a StringIndexOutOfBoundsException when determining the file name from the object path when a period was in the path, but there was no period after the last forward slash in the path.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-16173 – Resolved an issue where B2B Project and Library objects were incorrectly marked as inactive during Oracle Integration (OIC) rediscovery when the Inactivate Missing Files option was enabled.

​

FlexDeploy 10.0.0.6 (6-19-2026)

​

Application Updates

​

Salesforce

• FLEXDEPLOY-15980 - Resolved an issue where downloading profile metadata files could fail with a LIMIT_EXCEEDED error. FlexDeploy now splits and rebuilds profiles when downloading them for discover triggers, comparisons, and backups to improve handling of large Salesforce profiles.

​

Plugin Updates

• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-15760 – Resolved an intermittent issue where Oracle Integration Cloud (OIC) API operations could fail due to connection or read timeout errors. The process now automatically retries up to three times when a timeout occurs before marking the operation as failed.
  • FLEXDEPLOY-16001 - Added new B2B object export and import operations. Individual B2B objects can now be exported using exportB2BDocument, exportB2BHostProfile, exportB2BSchema, and exportB2BTradingPartner, and imported using importB2BDocument, importB2BSchema, importB2BHostProfile, and importB2BTradingPartner. Bulk export operations are also available for B2B Documents, B2B Schemas, and B2B Trading Partners using a CSV list of B2B object identifiers.

​

Resolved Issues

• Security
  • FLEXDEPLOY-16020, FLEXDEPLOY-16022, FLEXDEPLOY-16023, FLEXDEPLOY-16036 - Resolved a security issue identified during Flexagon-commissioned penetration testing that could allow users to perform an action without proper validation.
• Target
  • FLEXDEPLOY-16089 - Resolved an issue where saving Target properties could fail with an invalid properties value error after a property definition was changed from encrypted to not encrypted.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-16002 - Resolved an issue where B2B Documents and B2B Schemas could not be updated when they were associated with active agreements or integrations. The deployment process now automatically handles the associated artifacts, allowing the update to complete successfully.
  • FLEXDEPLOY-16019 - Resolved an issue where B2B objects, including documents, schemas, trading partners, and host profiles, could have identical names and cause duplicate conflicts. Prefixes are now applied to these object types to ensure unique identification across B2B artifacts.
  • FLEXDEPLOY-16050 - Resolved a regression introduced in versions 11.0.0.1 and 10.0.0.5 that caused JSON files within extracted OIC IAR structures to be incorrectly discovered as Integration objects during Git discovery.
• Azure Power BI Plugin
  • FLEXDEPLOY-16065 - Fixed an issue where Name Conflict for Paginated Reports (RDL) was always being set to Overwrite
• SQL*Plus, SQLcl, EBS Plugins
  • FLEXDEPLOY-15938 - Improved EXIT handling in the SQL*Plus, SQLcl, and EBS plugins to prevent SQL files with EXIT statements inside loops from causing scripts to hang indefinitely.

​

Incompatible Changes

• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-16019 - Resolved an issue where B2B objects, including documents, schemas, trading partners, and host profiles, could have identical names and cause duplicate conflicts. Prefixes are now applied to these object types to ensure unique identification across B2B artifacts. To resolve missing files and recreate previously discovered objects, run discover with Inactive Missing Files checked.

​

FlexDeploy 10.0.0.5 (5-23-2026)

​

Application Updates

​

Security

• FLEXDEPLOY-15956 - Updated Tomcat Version used by FlexDeploy, Configuration Management, and the HTTPS Agent to Apache Tomcat 9.0.118, addressing security vulnerabilities CVE-2026-41284, CVE-2026-43514, CVE-2026-41293, CVE-2026-43512, CVE-2026-42498, CVE-2026-43515, CVE-2026-43513.

​

Salesforce

• FLEXDEPLOY-15962 - Upgraded Salesforce API JARs to version 67.0 (Summer ’26) to resolve an error that could occur when invoking Salesforce APIs: “Unable to find end tag at: START_TAG seen …”. Support for additional Salesforce objects and attributes will be added in a future release.

​

Reports

• FLEXDEPLOY-15969 - Added an Active column to the Group Permissions Report to indicate whether each object is active. This can help users filter inactive objects and completed releases from the report.

​

Plugin Updates

• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-15800 – Added support for discovering B2B Documents, B2B Schemas, B2B Trading Partners, and B2B Host Profiles from an Oracle Integration Cloud instance and/or SCM. These components can now be built and deployed independently.

​

Resolved Issues

• FLEXDEPLOY-15937 - Increased the maximum length of the Action By value from 128 to 4000 characters. Values are now truncated when necessary to fit the supported length. This resolves the error: “Value for [ActionBy] can not be larger than 128.”
• Salesforce
  • FLEXDEPLOY-15971 - Resolved an issue in FlexDeploy 10.0.0.0 through 10.0.0.4 and 11.0.0.0 that prevented layout subcomponents from being deployed.
• Report
  • FLEXDEPLOY-15954 - Resolved an issue where Group Permissions Report does not show permission setup for FOLDER Object Type.
  • FLEXDEPLOY-15972 - Resolved an issue in the Group Permissions Report where pipeline-specific permissions displayed All instead of the pipeline name.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-15935 – Resolved an issue where deploying project integrations incorrectly updated all connections in the project instead of only those used by the integration. Now, only the connections used by the specific integration are updated correctly.
• SQL*Plus, SQLCl, and EBS Plugin
  • FLEXDEPLOY-15938 - Improved EXIT handling in the SQL*Plus, SQLCl, and EBS plugins to prevent SQL files with EXIT statements inside loops from causing scripts to hang indefinitely.
• SQL*Plus and SQLcl Plugin
  • FLEXDEPLOY-15957 - Updated the SQL*Plus and SQLcl plugins to correctly handle SQL file names containing $.
  • The SQLcl plugin now also supports spaces in file names.
• REST Plugin
  • FLEXDEPLOY-15970 - The REST Plugin no longer strips trailing slashes from URLs.

​

FlexDeploy 10.0.0.4 (4-24-2026)

​

Plugin Updates

• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-15813 – Connection Attachment Overrides now support the ProjectId-based folder structure for both Projects and Project Integrations. While overrides were already supported, this enhancement improves handling of scenarios where connections with the same name exist across multiple projects. This behavior is optional, as the system will automatically fall back to the non-ProjectId folder structure if needed.
  • FLEXDEPLOY-15838 – Lookup Overrides now support the ProjectId-based folder structure for both Projects and Project Integrations. While overrides were already supported, this enhancement improves handling of scenarios where lookups with the same name exist across multiple projects. This behavior is optional, as the system will automatically fall back to the non-ProjectId folder structure if needed.
• Oracle BI Plugins
  • FLEXDEPLOY-15830 - Oracle BI, OAC, and OTBI - Introduced AUTO_INCLUDE_FOLDERS project property to allow enabling or disabling automatic inclusion of parent folders when adding files to package in OTBI, OAC, and OBI plugins. Default behavior remains unchanged since 10.0.0.0, enabled.

​

Resolved Issues

• General
  • FLEXDEPLOY-15857 - Resolved a regression in 10.0.0.0 that caused the UI to prevent sending larger requests for performance reasons and throw an error. This artificial limit is now removed.
• Security
  • SSO Integration
    FLEXDEPLOY-15876 - When using OIDC with SSO Realm, FlexDeploy and Configuration Management now correctly populate the username, email, first, and last name fields when creating a new user.
• Git Integration
  • FLEXDEPLOY-15831 – FlexDeploy now captures the first matching commit on the build branch for both package and standard project build requests. This ensures that commits—and their associated work items—are properly detected, particularly when changes are introduced through pull-request merges. This restores behavior consistent with versions prior to FlexDeploy 9.0.0.0.
• Reports
  • FLEXDEPLOY-15705 - Resolved an issue where the Test Automation report displayed duplicate Target Group ID columns.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-15715 – Resolved an issue where credential mapping errors during Project Object import caused the import to fail. Added retry logic to ensure the process completes successfully.
• Oracle CPQ Plugin
  • FLEXDEPLOY-15890 - Resolved a regression in 10.0.0.0 where the CPQ properties were improperly validated before file catalog discovery.

​

FlexDeploy 10.0.0.3 (4-12-2026)

​

Application Updates

​

Security

• FLEXDEPLOY-15822 - Updated the Tomcat versions used by FlexDeploy and HTTPS agents to Apache Tomcat 9.0.117, addressing security vulnerabilities CVE-2026-29146, CVE-2026-29145, CVE-2026-25854, CVE-2026-24880, CVE-2026-29129,CVE-2026-34483,CVE-2026-34487,CVE-2026-32990,CVE-2026-34486, CVE-2026-34500.
• FLEXDEPLOY-15308 – Enhanced reference tracking to show credential usage within SSO configurations, preventing accidental deletion. Improved SSO initialization to safely ignore invalid configurations when required credentials are missing. Added additional logging and a banner notification to clearly surface SSO configuration issues.

​

Groovy Functions

• FLEXDEPLOY-15529 - Added new FLEXDEPLOY groovy functions to assist in automating project rollbacks.
  • public RollbackWorkflowRequestInput prepareRollBackWorkflowRequest(Long pWorkflowExecutionId)
  • public WorkflowRequestDataObject rollBack(RollbackWorkflowRequestInput pRollbackWorkflowRequestInput)

​

Plugin Updates

• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-15714 – Project integrations now support both lookup overrides and schedule overrides.
  • FLEXDEPLOY-15568 – Introduced support for discovering Project items such as Integrations, Robots, and Decisions from an Integratio Cloud instance, allowing each component to be built and deployed independently.
• Oracle EBS Plugin
  • FLEXDEPLOY-15770 - Deploying AOL Files to multiple languages is now supported. To use this new feature, comma-separate multiple Languages in the NLS_LANG parameter.
• Oracle APEX Plugin
  • FLEXDEPLOY-15798 - FlexDeploy now supports exporting Private Reports. A new project property is added. Check it to export private reports.

​

Resolved Issues

• Projects
  • Package Files – Updated the label in the Add Files Shopping Cart from “Last Updated” to “Last Configured” for improved clarity.
  • FLEXDEPLOY-15781 - Resolved inconsistent mapping of changed files (from Git commits) to project objects when multiple paths could match; the product now consistently prefers the most specific path.
• Security
  • FLEXDEPLOY-15750 – Resolved an issue where clicking the Reset button did not trigger any action, preventing the Reset Password feature from functioning properly.
  • FLEXDEPLOY-15803 - FlexDeploy SSO configurations that are contain invalid lines which do not contain equals signs and are not comments no longer prevent server startup. Instead, SSO is disabled and a banner is shown on startup.
• Rollback
  • FLEXDEPLOY-15743, FLEXDEPLOY-15744 – Resolved various issues affecting rollback operations for package-based projects when using Rollback File approach:
    • After performing a rollback using rollback files, subsequent deployments of the original package no longer require Force Deploy.
    • Repeated rollback attempts on the same package also no longer trigger an unnecessary Force Deploy requirement.
• Git Integration
  • FLEXDEPLOY-15821 – Addressed a regression introduced in FlexDeploy 9.0.0.0 related to initial change log detection for Git branch and project/package combinations. The original 9.0 release notes stated that a Force Build might be required for the first build, particularly when changes were introduced via pull-request merges. However, this regression caused subsequent builds failing to capture change logs and associated work items from commit messages. This issue has now been resolved. Any packages that were previously built without this fix will require a one-time Force Build.
• Release and Pipeline Orchestration
  • FLEXDEPLOY-15439 - Resolved an issue where the Project Group Name column did not appear in the Release Definition export.
• Scheduled Events
  • FLEXDEPLOY-14135 – Updated behavior so that all pending events are now marked as failed when the server restarts. Additionally, introduced a Groovy timeout snippet with a default timeout of one hour.
• Deployment Audit Report
  • FLEXDEPLOY-15638 - Resolved a regression introduced in version 10.0.0.1 that caused the Work Items column to be missing from the Deployment Audit report. The column is now displayed correctly.
  • FLEXDEPLOY-15701 - Resolved an issue where Workflow Version Override column filter throws error in Deployment Audit Report.
• Oracle EBS Plugin
  • FLEXDEPLOY-15718 - Resolved executeCommand operation failures in the EBS plugin caused by Windows-style line endings by applying automatic dos2unix normalization.
• Oracle BI Plugins
  • FLEXDEPLOY-15700 - FLEXDEPLOY - The OBI, OAC, and OTBI plugins now only add .folder parent files to packages if they are active in the file catalog.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-15758 – Resolved an issue where identical non-shared connection files in different OIC projects were incorrectly skipped during deployment due to matching content.
  • FLEXDEPLOY-15633 - Resolved an issue where reactivating scheduled integrations failed. Now, the plugin properly stops the schedule before deactivating each integration, ensuring successful reactivation.
• SQL*Plus Plugin
  • FLEXDEPLOY-15742 - Resolved SQL*Plus execution issues when folder paths contain spaces.

​

Incompatible Changes

• FLEXDEPLOY-15754 – Updated the behavior of the FlexRESTClient class, which previously removed trailing slashes from URLs and paths. It now strips slashes only when concatenating a path to a URL, preventing doubled slashes while preserving valid trailing slashes. This class is commonly used in Groovy scripts, so the fix ensures more predictable URL handling in those scripts.

​

FlexDeploy 10.0.0.2 (3-15-2026)

​

Application Updates

​

Groovy Functions

• FLEXDEPLOY-14675 - Added new FLEXDEPLOY functions to retrieve pipeline definition details.
  • public PipelineDefinitionDataObject getPipelineById(Long pPipelineId)
  • public PaginatedResponse<PipelineDefinitionDataObject> searchPipelines(PipelineDefinitionDataObject pCriteriaObject, Integer pLimit, Integer pOffset)
• FLEXDEPLOY - 15043 - Added parentFolderPath criteria for FLEXDEPLOY.searchFolders() method. Now one can search by parent folder.

​

OAuth Applications

• FLEXDEPLOY-15538 - Gmail OAuth Connection – Added support for configuring a Gmail OAuth connection for sending and receiving emails. This integration uses OAuth 2.0 authentication as required by Google, eliminating the need for traditional username/password credentials and providing a more secure and compliant way to connect to Gmail.

​

Plugin Updates

• Oracle APEX Plugin
  • FLEXDEPLOY-15613 – The Application Alias is now the primary identifier for resolving applications in the APEX environment within a workspace during build, deploy, and export operations. If the Alias is missing or cannot be resolved, the Application Name is used as a fallback. The Application ID, when provided, continues to take precedence.
• MuleSoft Plugin
  • FLEXDEPLOY-15416 - Enabled CloudHub 2.0 integration for MuleSoft applications.
• Siebel Plugin
  • FLEXDEPLOY-15585 - Added Input operations to include/exclude Application Data Service and Application Data Service with Transformation in Migration Plan.

​

Resolved Issues

• General
  • FLEXDEPLOY-15610 – Resolved issues affecting tag-based searches in both page-level and global search contexts.
  • FLEXDEPLOY-15643 - Resolved an issue where min and max value validations were not being enforced unless a property had both min and max values defined. This affected several system settings, as well as target, integration, project, and pipeline properties.
• Security
  • FLEXDEPLOY-15616, FLEXDEPLOY-15621, FLEXDEPLOY-15622, FLEXDEPLOY-15649 – Fixed a security vulnerability that could allow SQL injection by authenticated users on a specific screen. Users are encouraged to upgrade to the patched version. Contact support for further details.
  • FLEXDEPLOY-15650 – Hardened the generation of Content-Disposition headers in FlexDeploy to improve security.
• Projects
  • FLEXDEPLOY-15600 - Resolved an issue in the project execution request popup where workflow inputs were sometimes not updating when switching between workflow versions.
  • FLEXDEPLOY-15688 - Removed unnecessary Saved snack message when Execute Submit is clicked in the Utility project.
• Salesforce
  • FLEXDEPLOY-15601 – Resolved a regression introduced in FlexDeploy 10.0.0.0 that caused profile and permission set dependencies for FieldLevelSecurity and RecordTypeVisibility to not be added correctly.
  • FLEXDEPLOY-15609 - Resolved an issue where the first selected subcomponent was not properly added to the “Subcomponents to Add” list.
  • FLEXDEPLOY-15639 - FlexDeploy no longer retrieves profiles and permission set dependencies for destructive package objects.
• Groovy Library
  • FLEXDEPLOY-15662 - Resolved an issue where the Groovy Library save did not show a confirmation message and busy animation.
• Tags
  • FLEXDEPLOY-15594 - Resolved an issue where tags created through the UI were not allowing periods in the name. Tag names now allow letters, numbers, underscores, spaces, dashes, and periods.
• Flex Work Items
  • FLEXDEPLOY-15467 - Resolved an issue where a script returning a GString type caused an error - class org.codehaus.groovy.runtime.GStringImpl cannot be cast to class java.lang.String. The return value is now properly handled and converted to a String.
• ResourceTypes
  • FLEXDEPLOY-15060 - Resource Types can no longer be inactivated if they are still being used. Enhanced validation now detects usage in Targets, Test Instances, and any active Workflow, ensuring safe and reliable updates.
• Oracle EBS Plugin
  • FLEXDEPLOY-15708 - Resolved an issue with startAll and stopAll operations when using -mode=allnodes for Input Options.
• Oracle BI Plugin
  • FLEXDEPLOY-15645 - Resolved a regression in 9.0.0.5 what the RPD password was not encrypted properly when updating the password using XUDML patching.
• Azure Power BI Plugin
  • FLEXDEPLOY-15679 - Resolved an issue where Powershell home path did not correctly work on Linux.
  • FLEXDEPLOY-15680 - Resolved an issue where executions failed when using Az.Accounts module version 5.0+ with “Use Default Script” enabled, primarily impacting Power BI operations on Linux endpoints.
• SQL*Plus and SQLcl Plugin
  • FLEXDEPLOY-15646 - Resolved an issue in the SQL*Plus and SQLcl plugins where the EXIT command was incorrectly detected when user-defined exceptions (e.g., EXIT_ERROR, EXIT_NOERROR, eExit, vGeneralException) were present in PL/SQL scripts.

​

Incompatible Changes

• FLEXDEPLOY-15613 – The Application Alias is now the primary identifier for resolving applications in the APEX environment within a workspace during build, deploy, and export operations. If the Alias is missing or cannot be resolved, the Application Name is used as a fallback. The Application ID, when provided, continues to take precedence.

​

FlexDeploy 10.0.0.1 (2-14-2026)

​

Recommended Updates

• Recommendation for Microsoft Entra ID SSO Configuration – Added guidance to use saml2Config.maximumAuthenticationLifetime =7776000 in SSO Realm configurations. This value represents 90 days, matching the default sign-in frequency for Microsoft Entra ID. This configuration helps prevent the “Authentication issue instant is too old or in the future” error. This value is now automatically applied when SSO is enabled for the first time.

​

Application Updates

​

Platform Update

• FLEXDEPLOY-15579 - saml2Config.maximumAuthenticationLifetime is now defaulted to 7776000 when SSO is enabled for the first time.

​

Projects

• FLEXDEPLOY-14695 – Improved performance when opening File Details in the File Catalog or Package Files, reducing load times.

​

Git Integration

• FLEXDEPLOY-14712 – Added a default Git timeout of 60 minutes. This timeout can be overridden on the Git Integration Instance; however, if no value is provided, the 60-minute default will be applied. This helps prevent scenarios where processes may hang indefinitely if underlying Git provider calls become unresponsive.

​

Bitbucket Integration

• FLEXDEPLOY-15013 - Migrated to new Workspace/Repository APIs due to the deprecation of all cross-workspace APIs - https://developer.atlassian.com/changelog/#CHANGE-2770.

​

Plugin Updates

• Oracle BI Plugins
  • FLEXDEPLOY-10132 – Enhanced Project Types (OTBI, OAC, OBIV2) so that when a file is added to a package, all parent folders are now automatically included.

​

Resolved Issues

• Projects
  • FLEXDEPLOY-15590 - Resolved an issue where enabling backup for project types OBI, OTBI, and OAC caused a ClassCastException.
• Release and Pipeline Orchestration
  • FLEXDEPLOY-15374 - Pipelines - Resolved an issue where Pipelines could not be activated/inactivated, copied, or deleted from the Pipeline table by non-admin users.
• Reports
  • FLEXDEPLOY-15572 – Resolved an issue in the Environment History Report where selecting Show File Details and filtering by File Type caused an error when using a PostgreSQL database.
  • Environment History and Environment State Report
    • FLEXDEPLOY-15571 - Resolved an issue where filtering the Work Item Details or Change Ticket Details columns caused an error. These columns were not intended for reporting and have been permanently hidden.
  • Deployment Audit Report
    • FLEXDEPLOY-15571 - When filtering the Commits column, the filter title is now displayed as Commit Hash. While the column includes other information such as the committer and commit date, filtering only applies to the commit’s hash value, which was not clearly indicated by the previous title.
• Salesforce
  • FLEXDEPLOY-15150 - Resolved issues with comparing Custom Object subcomponents - such as Custom Fields, List Views, Validation Rules, etc., during Package-to-Org comparisons for SFDX.
  • FLEXDEPLOY-15204 - Resolved an issue where the Show Selected Only option was not including selected subcomponent files.
  • FLEXDEPLOY-15539 - Resolved a rare NPE when committing files after comparing changes.
• Oracle EBS Plugin
  • FLEXDEPLOY-15607 – Resolved an issue where the ADOP Cleanup operation always ran in Standard mode, regardless of the selected Cleanup Option.
  • FLEXDEPLOY-15340 - The deploy operation is now able to copy files to the patch file system even if the source script starts with [. ]
• MS Build Plugin
  • FLEXDEPLOY-15563 – Added a new input option to restrict environment variables. When configured, only variables associated with the specified target group codes are passed to the execution environment.
• Ansible Plugin
  • FLEXDEPLOY-15329 - Resolved an issue where incorrect input (FDANS_INP_EXTRA_VARS) was being added to the ansibleInstallRoles plugin operation, causing an invalid install command. The extra-vars input has now been removed.

​

FlexDeploy 10.0.0.0 (1-18-2026)

​

Application Updates

​

Platform Update

• FLEXDEPLOY-15005 – The FlexDeploy Docker image has been updated to use Ubuntu 24.04 as its base. This update also applies to the Flexagon SaaS platform.
• FLEXDEPLOY-15004 – The FlexDeploy Docker image now includes Node.js 22. This update also applies to the Flexagon SaaS platform.
• FLEXDEPLOY-15460 – Upgraded the FlexDeploy application to use Apache HttpClient 5, replacing the previous HttpClient 4 implementation.
• FLEXDEPLOY-15379 – Updated the Salesforce, OIC, OVB, and Siebel plugins to no longer explicitly set the HTTPS protocols property. The Java runtime default is now used, with protocol auto-negotiation occurring as needed with the web server.
• FLEXDEPLOY-15199 – Reduced memory churn when working with package-based projects in FlexDeploy.
• FLEXDEPLOY-15053 – Upgraded the GraphQL version shipped with FlexDeploy from 20.4 to 24.2, improving performance.
• FLEXDEPLOY-14756 – Updated the Jersey and Jackson versions used by FlexDeploy and its plugins to Jersey 2.46 and Jackson 2.19.2.
• FLEXDEPLOY-14433 - Updated the TFS SDK shipped with FlexDeploy and the FlexDeploy TFS plugin to the newest available.
• FLEXDEPLOY-13801 - Upgraded Apache Velocity Engine from 2.3 to 2.4.1.

​

Security

• FLEXDEPLOY-13661, FLEXDEPLOY-14817, FLEXDEPLOY-14899 – Updated Spring Core to address security vulnerabilities CVE-2025-41242, CVE-2025-22233, and CVE-2024-38820.
• FLEXDEPLOY-15402 – Upgraded SnakeYAML to version 2.5 to address security vulnerability CVE-2022-1471.
• FLEXDEPLOY-15006 - Updated crossspawn to address GHSA-3xgq-45jj-v275.
• FLEXDEPLOY-15007 - Updated brace-expansion to address GHSA-v6h2-p8h4-qcjw / CVE-2025-5889.
• FLEXDEPLOY-14818 - Jython Plugin - Updated the version of Jython packaged with the Jython plugin for several transient dependency vulnerabilities.
• FLEXDEPLOY-14807 – Updated the InfluxDB version shipped in the Docker container to 2.7.12 to address CVE-2024-45337. This version is recommended and automatically installed by the FlexDeploy installer for version 10.0 and above. It is not compatible with FlexDeploy versions earlier than 10.0.
• FLEXDEPLOY-14805 - Updated Jose Nimbus to address security vulnerability CVE-2025-53864.
• FLEXDEPLOY-14711 - Updated Netty dependencies in the Azure PowerBI plugin to resolve vulnerability CVE-2025-25193.
• FLEXDEPLOY-14710 - Oracle Forms Plugin - Updated the version of Jackson Core to address CVE-2025-49128.
• FLEXDEPLOY-13758 - SSO Metadata download from IDP now honors the proxy settings of FlexDeploy.

​

Projects

​

Package-Based Projects

• FLEXDEPLOY-13609 – As of FlexDeploy 10.0, the FILE_CONTENTS variable used in project object match scripts and default value scripts has been deprecated. The recommended replacement is PROJECT_OBJECT.getLines(), which improves performance through lazy loading. File content is loaded only when the code path using getLines() is executed—significantly enhancing discover and evaluate performance. All FlexDeploy-provided scripts have been updated to use this new method; however, customer-owned customizations are not modified during upgrade. We recommend reviewing your custom scripts to determine whether they are still needed and whether they can be updated to use PROJECT_OBJECT.getLines().
• FLEXDEPLOY-13600, FLEXDEPLOY-13607, FLEXDEPLOY-13608, FLEXDEPLOY-15199 – Improved performance of the Discover from SCM process on File Catalog.
• FLEXDEPLOY-14849 – Improved discover performance on File Catalog when using the Inactivate Missing Files option.
• FLEXDEPLOY-13747 – Improved performance of installing and upgrading package-based plugins.

​

Configuration Management Integration

• Pipeline now includes steps to perform Baseline and Comparisons. You must have Configuration Management license in order to use these features.

​

Compliance and Audit

• FLEXDEPLOY-11120 – Improved performance when changing which columns are displayed on report pages.
• FLEXDEPLOY-4326 – Added links across all reports to allow navigation directly to referenced objects.
• FLEXDEPLOY-15091 - Added Context Type and Context Name details to the Change History for package entries.

​

PDF Record Format

• All reports can now be exported in a PDF record format, making them suitable for printing, archiving, and meeting audit and compliance requirements. This capability also applies to Saved Query–based subscriptions, which allow users to receive scheduled report exports in CSV or PDF format via email.
• This report does not have any column limit as it exports data in record format.

​

Deployment Audit Report

• The Deployment Audit Report provides a comprehensive audit trail of all Deploy and Utility executions across FlexDeploy. It serves as a single, centralized source of truth designed to answer the full set of questions typically required by audit and compliance teams.
• The report includes core deployment details such as who performed the deployment, what was deployed, when it occurred, and related metadata. It also captures all relevant approval and scheduling information, including details from external change-management systems.
• In addition, the report lists all files and commits that were part of each deployment. If a customer’s pipeline includes custom gates, those results are also incorporated. Any schedule overrides or gate overrides—whether for out-of-box gates like Quality or Test, or for customer-defined gates—are clearly indicated. For example, if a Quality gate did not meet criteria but was manually overridden, the report will explicitly call this out.
• See Deployment Audit Reportfor more details.

​

Configuration Audit Report

• The new Configuration Audit report replaces the previous Change History report. Additional contextual information has been included to improve understanding and interpretation of change records.

​

Release Snapshot State Report

• A new Release Snapshot State report was added, which displays all Release Snapshots in FlexDeploy along with additional information about each Release Snapshot.

​

Code Editor

• Code history is a new feature in FlexDeploy which allows users to have an SCM-like functionality to many scripts in FlexDeploy. As you save, a new version is created. You can diff and restore old versions in FlexDeploy. This supported for:
  • Project replacement and test automation configurations
  • Incoming and Outgoing Webhook script
  • Custom Gate and Step script
  • Gate and Step precondition script
  • Groovy Libraries
  • Custom Issue Tracking, Change Management, Credential Store provider scripts
  • Notification Templates
  • Custom project type match script
  • File attribute default and list script

​

Credentials

• Breaking change - Groovy Libraries are no longer supported in groovy script of custom credential stores.
• FLEXDEPLOY-12723 - Added support for OCI Vault as a new Credential Store Provider. See Integrate with OCI Vault.

​

Dashboards

• Health monitoring dashboard panels were added. Some of the panels include:
  • CPU Usage
  • CPU Snapshot
  • Memory Usage
  • Memory Snapshot
  • Artifacts Disk Usage
  • Worker (Bot) Status
  • Database Connection Requests
  • Endpoint Disk Usage
  • Worker Submitter Performance
  • Workder Processing Time
  • Database Table Size
  • Database Table Usage
  • Application Errors
• FLEXDEPLOY-13982 - Project and Release Insights now displays a banner indicating the interval at which metrics are pushed to InfluxDB.
• FLEXDEPLOY-14183 - Specifying dashboard panel inputs are no longer specified before dragging new panels into the dashboard. The behavior has changed to match Pipeline editing where the input configuration is configured immediately after dropping the new panel into the grid.
• FLEXDEPLOY-14228 - Data charts displayed on Project and Release Insights pages will no longer zoom in or out with the mouse scroll wheel. If you wish to zoom in and out, the chart controls, located on the top right of each chart, can be used.

​

Health Monitoring

• FLEXDEPLOY-11119, FLEXDEPLOY-3675 – FlexDeploy now includes a Health page and dashboard widgets for monitoring the health and performance of both FlexDeploy and the underlying server. Users can also configure alerts to receive notifications for specific conditions, helping proactively identify and resolve issues.

​

Workflows

• FLEXDEPLOY-14305 - A new Retry Workflow Step has been added. This step allows 1 or more steps to be retried should an error occur while running.
• FLEXDEPLOY-1831 - Failed Steps no longed show 0 as their duration.

​

User Notifications

• In-App Notifications – FlexDeploy now provides in-app notifications accessible via the bell icon in the top-right corner of the application. This feature complements the existing email notifications, giving users a convenient way to see relevant updates directly within the application.
• Key highlights include:
  • Notifications can be marked as read or deleted, allowing users to manage their notification feed.
  • Customizable templates are supported, similar to email notifications, enabling organizations to tailor in-app messages to their requirements.
  • Old notifications are automatically purged based on configurable purge settings, keeping the notification list manageable.
  • Example notifications include approval requests, plugin upload completions, and other workflow events.
• This feature enhances visibility and responsiveness, allowing users to stay informed of important system events without relying solely on email.
• FLEXDEPLOY-14896 – Added an in-app notification in the top-right corner to inform the user when a plugin upload succeeds or fails to activate.

​

User Settings

Introduced a new Export section under the User Profile Settings. These settings will be used by default when exporting data across FlexDeploy:

• Default Export Format: The format that will be used by default when exporting data. Options are CSV, PDF Table, and PDF Record.
• Default Export PDF Page Size: The page size that will be used by default when exporting to PDF format (PDF Table or PDF Record).
• PDF Font Size: Size of the font in the PDF document. Only applies to PDF Record format. Adjustable between size 6 and 30 font.
• Landscape: Default the PDF page orientation to landscape. Only applies to PDF Record format.
• Show Empty Values: Include attributes with empty values in the exported PDF Document. Only applies to PDF Record format.

​

Export

• FLEXDEPLOY-15142 – Improved PDF export performance and eliminated a condition that could cause out-of-memory errors.
• FLEXDEPLOY-15172 – PDF exports no longer fail when the output contains invalid characters.
• FLEXDEPLOY-14900 – Exports now display the timezone alongside datetime values. The datetime format has been updated to include a three-letter month abbreviation to reduce confusion when reports are shared across global teams.
• FLEXDEPLOY-14624 – Added support for a third export type: PDF Record, which has no column limitations.
• FLEXDEPLOY-4260 – Added the ability to export projects and/or work items associated with a release.
• PDF Export Enhancements – PDF exports now support configurable file size and font size options.
• FLEXDEPLOY-14624 - Simplified the data export process across FlexDeploy tables by replacing the separate “Export CSV” and “Export PDF” buttons with a single “Export” option. This option uses the user’s default export settings by default, with the ability to customize the format and options for one-time exports.

​

Reports

• FLEXDEPLOY-14316 - Reports no longer show row counts by default in order to improve performance when loading the report. A new button has been added next to the pagination controls to calculate the total row count separately.

​

Code Editor

• FLEXDEPLOY-14263 - The Groovy Code Editor now supports Go To Definition functionality either by holding ctrl and clicking on the variable or by right clicking on the variable and selecting “Go To Definition”. The behavior may differ depending upon the context:
  • Local variables and functions - The editor will scroll to the definition of the variable or function
  • Groovy Libraries - A new window will open with the Groovy Library selected.
  • FlexDeploy Libraries and Classes - The Javadoc will open for the appropriate library.
• Editor navigation history is also now supported. You can navigate back and forth between your recent cursor positions with “alt+back_arrow” and “alt+foward_arrow”.

​

Purge

• FLEXDEPLOY-13925 – Simplified the purge logic, resulting in improved performance.
• FLEXDEPLOY-8825 – FlexDeploy now automatically purges old data from the post-refresh history tables.
• FLEXDEPLOY-14110 - Introduced a new Purge Setting, “User Notification Purge Days,” enabling the automatic deletion of User Notification data after a specified number of days, whether the notification is seen or not.

​

Salesforce

• Salesforce Integration Enhancements – The Salesforce integration has been updated for improved performance and efficiency. Users will see a significant reduction in memory usage when using the Salesforce compare feature, along with faster processing times.
• As of FlexDeploy 10.0, the UI for all compare screens has been updated: the source is displayed on the left, the target on the right, and file statuses and diffs are now consistent with the dropdown order. Compare results are also sorted for easier review.
• FLEXDEPLOY-14247 - Added support to selectively stage and commit certain changes within a file. When selecting the Commit option after completing an SCM to Org compare, the popup will now show the list of files selected to commit, where users can stage and unstage whichever line changes they’d like to commit to Git.
• FLEXDEPLOY-14347 – FlexDeploy no longer uses JAXB for subcomponent processing; custom XML parsing is now used, improving speed and reducing memory usage.
• FLEXDEPLOY-14665, 14694, 14693 – Improvements and fixes for Salesforce comparison performance.
• FLEXDEPLOY-15075 - Improve the performance of Salesforce Compare operations by cleaning up old comparison temporary files asynchronously as part of the purge.
• FLEXDEPLOY-11522, 14814, 15123 – Resolved several issues in Package-to-Org compare.
  • Compare results are now consistent with which file statuses are shown across all compare types (SCM to Org, Org to Org, and Package to Org). New files are files which only exist in the source, and deleted files are files which only exist in the target. This was previously reversed for Org to Org and Package to Org.
• FLEXDEPLOY-11910 – The input FDFS_ROLLBACK_ON_ERROR is no longer configurable and is always true, resolving inconsistencies in compare results when it was previously set to false.
• FLEXDEPLOY-15257 - Improved the performance of compare when checking the “Include dependent profiles and Permissions Sets” option.
• FLEXDEPLOY-15205 - When you add a static resource to a package, FlexDeploy now locates the required metadata file to go with it and adds it to the package if the added file is in a subfolder.
• FLEXDEPLOY-15201 – Added support for retrieving dependencies (Profiles and Permission Sets) for RecordType (.recordType) and Custom Metadata Type (__mdt.object) components.
• FLEXDEPLOY-15194 - When comparing by object type on the Org to Org tab, now an error message is shown if a type isn’t present in either the source or target org. Previously, only the object types in the target org were shown.
• FLEXDEPLOY-14848 - SFDX projects now add the .resource-meta.xml file to scm and to packages when adding from compare. Additionally if building from SCM, even if the .resource-meta.xml file is not in the package, it is checked out with its associated staticresource file.
• FLEXDEPLOY-14822 - Improved the object match script to accurately determine the types for SCM-based Salesforce projects. Improved matching applies to keyword lists, Account Relationship Share Rules, Assessment Questions, Bots, and more. The changes take effect for newly discovered files only. Contact Support if you have an existing project with files that are showing up as the wrong type.
• FLEXDEPLOY-14815 - Org to Org object type comparisons now consider files in both the source and target orgs.

​

Plugin Updates

• REST Plugin
  • FLEXDEPLOY-15010 – The REST plugin now supports equals signs (=) in query-parameter values.
• Maven, MuleSoft, Apigee Plugin
  • FLEXDEPLOY-14819 - Updated the Maven version shipped with the Apigee, Maven, and Mule plugin to 3.9.11. If you require an older Maven, set the Maven Home property.

​

Resolved Issues

• General
  • FLEXDEPLOY-11120 - Changes to table columns must now be saved before they are applied. Previously, each column modification (add/remove) would immediately update the table, sometimes triggering a requery and negatively affecting performance.
• Security
  • FLEXDEPLOY-15189 – Resolved several issues where passwords could be inadvertently displayed on screen or captured in logs.
  • FLEXDEPLOY-8051 - Global Permissions - Submitting the Grant Read Only popup was saving all changes on the Global Permissions page. Now, clicking Save on the page is required to apply all changes when granting read only permissions.
  • FLEXDEPLOY-15207 - Deployment Permissions - Resolved an issue where changes were not being applied in certain cases when removing the All Environments permission for a group.
• Blueprints
  • FLEXDEPLOY-15423 - Resolved an issue in OTBI Blueprint where the Cloud Account (Account Name) property was not available for the Build environment when the source was configured as OTBI Server.
• Projects
  • FLEXDEPLOY-15370 – Resolved an issue where package file exports displayed files in an incorrect order.
  • FLEXDEPLOY-15256 - Resolved an issue where filtering by the Workflow Version column in Project Executions caused an error and values were not displayed.
  • FLEXDEPLOY-15146 - Updated several column names in exported package files to use more meaningful labels (e.g., object path, file SCM path, object type). Previously, these columns displayed internal values that were less user-friendly.
  • FLEXDEPLOY-15120 - Resolved an issue where clearing the filter on the Copy/Move Files to Package screen caused an error.
  • FLEXDEPLOY-12276 - Resolved an issue where copying a standard project with ITS configured and a webhook enabled resulted in duplicate triggers being created.
  • FLEXDEPLOY-1831 - Resolved an issues where Duration was not shown on workflow execution page for Invoke Tests step in case of failure.
• Release and Pipeline Management
  • FLEXDEPLOY-15420 - Release Settings - Resolved an issue where comments were locked regardless of release status when Lock Comments setting was enabled.
  • FLEXDEPLOY-15363 – Resolved an issue in which the Promote step might fail because of missing snapshot inputs but still appear successful without showing any error message.
• Salesforce
  • FLEXDEPLOY-15231 - Resolved an issue where committing files within the Salesforce Org Management tab required Configure or Execute permission on the project. Now, only Configure Files permission is required to commit files.
  • FLEXDEPLOY-15123 - Resolved an issue where SCM content was retrieved from the wrong branch sometimes when using the latest source option on the Package to Org compare.
  • FLEXDEPLOY-15082 - Resolved an issue where SCM to Org compare results would sometimes show duplicate files when a meta file was modified.
  • FLEXDEPLOY-14853 - Resolved an issue where compare results didn’t automatically add associated meta files when adding files to a package.
  • FLEXDEPLOY-14826 - Resolved an issue when viewing compare results where the page shown in the URL didn’t match the page being viewed.
  • FLEXDEPLOY-14814 - Resolved an issue with Package to Org comparisons where files only present in the package (added files) were not shown in compare results.
  • FLEXDEPLOY-14693 - Resolved an issue with Org to Org compare where a constraint violation error was thrown when trying to add multiple subcomponents to a package without ever discovering.
  • FLEXDEPLOY-14665 - Resolved an issue where sorting compare results by subcomponent wasn’t working as expected.
• Project Types
  • FLEXDEPLOY-15036 - Resolved an issue where Ctrl + s was not triggering save on the Project Types screen in some cases.
  • FLEXDEPLOY-4246 - Added support for imports in match script, project type defaults, and most other Groovy scripts. Also fixed support for imports in more edge cases, such as static imports and imports that had multiple spaces between words, or space before the word import in all scripts.
• Groovy Scripts
  • FLEXDEPLOY-15241 – Resolved an issue where a script returning a GString type caused an error. The return value is now properly handled and converted to a String.
• Reports
  • FLEXDEPLOY-15367 – Resolved an issue where Test Automation Report results were not accurate based on the selected filters in some situations.
  • FLEXDEPLOY-15172 - PDF Exports no longer fail if invalid characters are in the exported data. Instead, the invalid characters are replaced with spaces.
• Notification Templates
  • FLEXDEPLOY-15216 - Resolved an issue where the notification template failed to fetch release properties.
• Plugins
  • FLEXDEPLOY-15356 - Plugins - Resolved an issue where only admins could activate plugins. Now users with upload plugins permission can also activate them.
• PowerShell Plugin
  • FLEXDEPLOY-15302 – Resolved an issue where PowerShell operations failed when using version 6 or higher due to a missing parameter.

​

Incompatible Changes and Deprecations

​

Upgrade

• Upgrade Requirements for FlexDeploy 10.0 – FlexDeploy 10.0 requires FlexDeploy Installer 1.0.26 or later. Before upgrading to 10.0, you must first upgrade to 9.0.0.3 or later; the latest 9.0 release is recommended. After upgrading to 9.0.0.3+, verify that build and deploy executions are working correctly before beginning the 10.0 upgrade.
• FLEXDEPLOY-12740 – All plugins now require Java 8 or higher.

​

File Catalog

• Deprecation Notice – As of FlexDeploy 10.0, the FILE_CONTENTS variable used in project object match scripts and default scripts has been deprecated, use PROJECT_OBJECT.getLines().

​

Plugin Changes

• Standard EBS Projects Deprecation – Standard EBS projects are deprecated and will be removed in FlexDeploy 11.0. Users should create Package-based EBS-type projects for all EBS Build and Deploy projects. It is recommended to convert projects at a convenient time before upgrading to FlexDeploy 11.0.
• ACC Plugin Removal – The ACC plugin has been removed.

​

Groovy Function Changes

• TOPOLOGY – Methods previously named instance are now deprecated and replaced with methods using targetGroup. This change is not for removal; it only aligns method names with the UI screens. Existing code is not expected to be affected.
• new FlexDeploy2Functions() is not allowed in Groovy Scripts now, use FLEXDEPLOY variable.

​

Custom Credential Store

• Breaking Change – Groovy Libraries are no longer supported within Groovy scripts used by custom credential stores.

​

Outgoing Webhook

• FLEXDEPLOY-13877 - The ErrorOccurred outgoing webhook payload datetime fields createdOn and updatedOn that were returning longs previously now return a formatted datetime.