> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flexagon.com/llms.txt
> Use this file to discover all available pages before exploring further.

# FlexDeploy 11.0 Release Notes

> Did you know you can subscribe to updates to the release notes? Right click and copy and paste it into your feed reader of choice. Known issues FLEXDE

> [!NOTE]
>
> Did you know you can subscribe to updates to the release notes? Right-click and copy [this link](https://flexagon.atlassian.net/wiki/createrssfeed.action?title=FlexDeploy+Release+Feed\&labelString=release-notes\&sort=modified\&maxResults=5\&timeSpan=30) and paste it into your feed reader of choice.

# Known issues

* FLEXDEPLOY-16028 - Customers that upgrade to FlexDeploy and Configuration Management versions 11.0.0.0-11.0.0.1 from 9.x or earlier versions and use SSO may face an issue stating that the logout filter is invalid. This is resolved in 11.0.0.2. As a workaround, manually update your config file from **io.buji.pac4j.filter.LogoutFilter** to **org.pac4j.jee.filter.LogoutFilter**.

* FLEXDEPLOY-16090 - In FlexDeploy 11.0.0.0-11.0.0.2 the self password reset feature is broken. This is resolved in 11.0.0.3. As a workaround, have an administrator reset your password.

* FLEXDEPLOY-16516 - FlexDeploy Functions - `createPackage` and `updatePackage` may leave an object out of the package when archive-based files are discovered in expanded format. This can occur for Oracle Integration Cloud integrations and other project types where many files and folders exist under a single discovered File Catalog path. The issue occurs when deleted files under the object cancel pending additions or modifications for the same object while processing Git change logs. A fix will be provided in FlexDeploy 11.1.0.4 and later, and 11.2.0.0 and later. Contact Flexagon Support if a backport is needed for an earlier version.

* **CM-1923 - SSO Configuration**

  * If FlexDeploy and Configuration Management are running without SSO, configuring SSO in only one application and restarting the other server may cause startup failure.

  * Error: `There is no filter with name 'ssoFilter' to apply to chain [/faces/**] in the pool of available Filters`

  * Workaround: Disable SSO, restart both servers, enable SSO on both servers, then restart both servers again.

  * Fix planned for 11.1.0.4+ and 11.2.0.0+.

# Launch Webinar Recordings

> [!TIP]
>
> * [A Milestone in Transformation: FlexDeploy 8.0](https://www.youtube.com/watch?v=uJCDaRAA5Vw)
>
> * [Elevating Efficiency & Innovation: FlexDeploy 9.0](https://www.youtube.com/watch?v=I9NK49SbkSQ)
>
> * [What’s New: The Next Evolution of FlexDeploy & ConfigSnapshot](https://www.youtube.com/watch?v=9JAADtKAQQE)
>
> * [One Platform, Zero Gaps: Unified DevOps and Configuration Management for Oracle](https://flexagon.com/resource/oracle-devops-configuration-management-flexagon-platform-demo/)

# FlexDeploy 11.0.0.7 (10-31-2026)

> [!NOTE]
>
> **Version Details**
>
> * FlexDeploy Installer 1.0.28 or later should be used with FlexDeploy 11 upgrades.
>
> * Upgrading to FlexDeploy 11.0 can only be done from FlexDeploy 9.0.0.3+. The latest 9.0 release is recommended.
>
> * **FlexDeploy 11.0 requires Java 21 or 17. All plugins require Java 8 or higher**, see [Plugin Java Requirements](https://flexagon.atlassian.net/wiki/spaces/SHAR/pages/10176823301/Plugin+Java+Requirements) for Java version requirement for plugins.
>
> * HTTPS Agent has been updated with this release.
>
> * Application Version - 11.0.0.7.111
>
> * Plugin and Application major version (11.0) must match unless otherwise approved by Flexagon.

## Application Updates

### Security

* Node, Angular, Grunt, Oracle Visual Builder Plugin

  * FLEXDEPLOY-16676 - Plugin Node.js version selections v22, v24, and v26 now install the October 21, 2026 security releases (22.23.4, 24.22.1, and 26.12.1). Existing endpoint installs under installs/nodejs are keyed by major version and are not replaced automatically; delete those v22/v24/v26 folders to pick up the patched binaries on the next run.

* Flexagon SaaS Platform

  * FLEXDEPLOY-16676 - The node version shipped for SaaS customers is updated to 22.23.4+ for CVEs.

  * FLEXDEPLOY-16677 - Updated `cacerts` during Docker image builds to address security vulnerability CVE-2026-91403.

* FLEXDEPLOY-16620 - FlexDeploy and Configuration Management and HTTP Agent - Upgraded the version of Apache Tomcat to 9.0.0.123.

# FlexDeploy 11.0.0.6 (10-4-2026)

> [!NOTE]
>
> **Version Details**
>
> * FlexDeploy Installer 1.0.28 or later should be used with FlexDeploy 11 upgrades.
>
> * Upgrading to FlexDeploy 11.0 can only be done from FlexDeploy 9.0.0.3+. The latest 9.0 release is recommended.
>
> * **FlexDeploy 11.0 requires Java 21 or 17. All plugins require Java 8 or higher**, see [Plugin Java Requirements](https://flexagon.atlassian.net/wiki/spaces/SHAR/pages/10176823301/Plugin+Java+Requirements) for Java version requirement for plugins.
>
> * Application Version - 11.0.0.6.108
>
> * Plugin and Application major version (11.0) must match unless otherwise approved by Flexagon.

## Application Updates

### Salesforce

* FLEXDEPLOY-16494 - Upgraded the Salesforce plugin to API version 68.0 (Winter ’27) so deployments to Winter ’27 orgs succeed. New metadata types FlowValueMap, UiWidgetBundle, AiAgentDefinition, and AiAgentDefinitionVersion are supported. The default API version is 68.0; BASIC authentication remains limited to 64.0.

## Plugin Updates

* Oracle Cloud Plugins (Analytics Cloud, API Platform, Integration Cloud, EPM, Visual Builder)

  * FLEXDEPLOY-16527 - Allow selecting the JWT signature algorithm on OCI-related cloud accounts for OAuth JWT assertion.

## Resolved Issues

* Oracle Integration Cloud

  * FLEXDEPLOY-16425 - Resolved an issue where a failed OIC Project Integration execution restored lookups from the source artifact. Lookups now keep their target (environment) values after a failed execution.

* Oracle EPM Plugin

  * FLEXDEPLOY-16519 - Resolved an issue where the exportNewSnapshot and downloadSnapshot operations could fail with an Invalid URL error after FlexDeploy stopped automatically removing trailing slashes from REST URLs.

    * Oracle EPM Cloud requires the /interop/rest/ endpoint to contain a single trailing slash. Older Oracle EPM plugin versions could generate /interop/rest//, which does not work with FlexDeploy 10.0.0.3 - 10.0.0.8 or 11.0.0.0 - 11.0.0.5, and 11.1.0.0 - 11.1.02.

    * Customers using affected Oracle EPM plugin versions should upgrade to the plugin included with FlexDeploy 10.0.0.9, 11.0.0.6, 11.1.0.3, 11.2.0.0, or a later plugin build for those release lines.

# FlexDeploy 11.0.0.5 (9-7-2026)

> [!NOTE]
>
> **Version Details**
>
> * FlexDeploy Installer 1.0.28 or later should be used with FlexDeploy 11 upgrades.
>
> * Upgrading to FlexDeploy 11.0 can only be done from FlexDeploy 9.0.0.3+. The latest 9.0 release is recommended.
>
> * **FlexDeploy 11.0 requires Java 21 or 17. All plugins require Java 8 or higher**, see [Plugin Java Requirements](https://flexagon.atlassian.net/wiki/spaces/SHAR/pages/10176823301/Plugin+Java+Requirements) for Java version requirement for plugins.
>
> * Application Version - 11.0.0.4.106
>
> * Plugin and Application major version (11.0) must match unless otherwise approved by Flexagon.

## Resolved Issues

* FLEXDEPLOY-16503 - Resolved an issue where download zip was missing few plugins.

# FlexDeploy 11.0.0.4 (8-9-2026)

> [!NOTE]
>
> **Version Details**
>
> * FlexDeploy Installer 1.0.28 or later should be used with FlexDeploy 11 upgrades.
>
> * Upgrading to FlexDeploy 11.0 can only be done from FlexDeploy 9.0.0.3+. The latest 9.0 release is recommended.
>
> * **FlexDeploy 11.0 requires Java 21 or 17. All plugins require Java 8 or higher**, see [Plugin Java Requirements](https://flexagon.atlassian.net/wiki/spaces/SHAR/pages/10176823301/Plugin+Java+Requirements) for Java version requirement for plugins.
>
> * HTTPS Agent has been updated with this release.
>
> * Application Version - 11.0.0.4.105
>
> * Plugin and Application major version (11.0) must match unless otherwise approved by Flexagon.

## Application Updates

### Salesforce

* FLEXDEPLOY-15982 - Added a new `FDSF_PACKAGE_XML_TYPE_LIMITS` project property to customize how many items of each object type are included in each `package.xml` file during download. This helps prevent FlexDeploy from creating packages that are too large. The default limits have also been adjusted to use smaller package sizes for `Report` and `Document` metadata types.

* FLEXDEPLOY-16330 - Increased read and connection timeouts for Salesforce API calls to reduce timeout issues during longer-running operations.

### Https Agent

* FLEXDEPLOY-16379 - Updated JVM GC logging options to be compatible with Java 21 while maintaining support for earlier Java versions. This resolves HTTPS Agent startup failures caused by deprecated JVM options on newer JDKs.

## Plugin Updates

* Oracle WebLogic Plugin

  * FLEXDEPLOY-16382 - WebLogic createOrUpdateWeblogicConfig now allows values like TwoPhaseCommit GlobalTransactionsProtocol for XA datasources.

## Resolved Issues

* Security

  * FLEXDEPLOY-16363 - SSO logout now respects the configured logout.defaultUrl instead of always returning to the FlexDeploy home page.

* Blueprints

  * FLEXDEPLOY-15841 - Resolved an issue where creating a new project using a blueprint was sometimes failing to create with no visible error.

* Workflow

  * FLEXDEPLOY-16166 - Resolved an issue where code editors were not displaying suggestions at times. It was occurring most frequently while editing workflow inputs and only observed for shell and markup languages.

* Release and Pipeline Orchestration

  * FLEXDEPLOY-16303 - Resolved an issue where the release content actions menu was sometimes not being displayed when first accessing a release.

# FlexDeploy 11.0.0.3 (7-12-2026)

> [!NOTE]
>
> **Version Details**
>
> * FlexDeploy Installer 1.0.28 or later should be used with FlexDeploy 11 upgrades.
>
> * Upgrading to FlexDeploy 11.0 can only be done from FlexDeploy 9.0.0.3+. The latest 9.0 release is recommended.
>
> * **FlexDeploy 11.0 requires Java 21 or 17. All plugins require Java 8 or higher**, see [Plugin Java Requirements](https://flexagon.atlassian.net/wiki/spaces/SHAR/pages/10176823301/Plugin+Java+Requirements) for Java version requirement for plugins.
>
> * Application Version - 11.0.0.3.99
>
> * Plugin and Application major version (11.0) must match unless otherwise approved by Flexagon.

## Application Updates

### Security

* FLEXDEPLOY-16114 - FlexDeploy and Configuration Management and HTTP Agent - Upgraded the version of Apache Tomcat to 9.0.0.119.

### Salesforce

* FLEXDEPLOY-16053 - Improved support for using the project property to exclude Salesforce objects. Filtering by SOAP name now works consistently, eliminating the need to exclude each object individually using the `TYPE#NAME` format for complete removal.

## Plugin Updates

* Oracle Integration Cloud Plugin

  * FLEXDEPLOY-16074 - Added support for overriding OIC B2B Trading Partner identifiers and control number settings during packageDeploy and importTradingPartner operations using the TradingPartnerIdentifiersPlan.properties file.

* Azure PowerBI Plugin

  * FLEXDEPLOY-16073 - Azure PowerBI Plugin now supports a target folder path for RDL File, allowing the Paginated Reports to be imported inside a Folder in the Workspace.

## Resolved Issues

* General

  * FLEXDEPLOY-16113 - Resolved issues on work item screens that could cause thread deadlocks in some environments, particularly on servers with low CPU core counts.

  * FLEXDEPLOY-16137 — Resolved an issue where certain pages were not auto-refreshing when WebSockets were unavailable/disabled. Affected screens were project executions, user notifications, and release dashboards.

* Security

  * FLEXDEPLOY-16090 - Resolved a regression in 11.0.0.0 that prevented users from resetting their own passwords. The reset link in the password reset email directed users to a blank page.

  * FLEXDEPLOY-16077 - Restricted the **Enable Preview** action on the Edit Notification Template page to users with Notification Templates update permission.

  * FLEXDEPLOY-16078 - Restricted the **Send Test** action on the Edit Notification Template page to users with Notification Templates update permission.

* Projects

  * FLEXDEPLOY-15785 - Resolved an issue where inactive or not applicable project properties were still being validated.

  * FLEXDEPLOY-15861 - Resolved an issue in Project Insights where deployment data did not refresh correctly after applying a status filter.

  * FLEXDEPLOY-16079 - The Change History tab under Project Insights is now disabled (greyed out) for users who do not have Report Read permission, so users without access cannot navigate to that view.

* Salesforce

  * FLEXDEPLOY-16152 - Resolved a StringIndexOutOfBoundsException when determining the file name from the object path when a period was in the path, but there was no period after the last forward slash in the path.

* Oracle Integration Cloud Plugin

  * FLEXDEPLOY-16173 – Resolved an issue where B2B Project and Library objects were incorrectly marked as inactive during Oracle Integration (OIC) rediscovery when the Inactivate Missing Files option was enabled.

* Oracle FSM Plugin

  * FLEXDEPLOY-16109 – Updated the default Playwright version bundled with FlexDeploy from 1.57v to 1.58v. This update includes fixes for browser automation stability issues encountered during BPM Export operations.

  * CM-1720 - Resolved 404 error with playwright driver download using alternative download location.

# FlexDeploy 11.0.0.2 (6-21-2026)

> [!NOTE]
>
> **Version Details**
>
> * FlexDeploy Installer 1.0.28 or later should be used with FlexDeploy 11 upgrades.
>
> * Upgrading to FlexDeploy 11.0 can only be done from FlexDeploy 9.0.0.3+. The latest 9.0 release is recommended.
>
> * **FlexDeploy 11.0 requires Java 21 or 17. All plugins require Java 8 or higher**, see [Plugin Java Requirements](https://flexagon.atlassian.net/wiki/spaces/SHAR/pages/10176823301/Plugin+Java+Requirements) for Java version requirement for plugins.
>
> * HTTPS Agent has been updated with this release.
>
> * Application Version - 11.0.0.2.80
>
> * Plugin and Application major version (11.0) must match unless otherwise approved by Flexagon.

## Application Updates

### Security

* FLEXDEPLOY-15779 - FlexDeploy and Configuration Management now support separate SSO Realm settings. Existing realm configurations are shared initially, but future changes in one application are no longer synced to the other, allowing customers to configure separate SSO settings for each application.

### Salesforce

* FLEXDEPLOY-15980 - Resolved an issue where downloading profile metadata files could fail with a `LIMIT_EXCEEDED` error. FlexDeploy now splits and rebuilds profiles when downloading them for discover triggers, comparisons, and backups to improve handling of large Salesforce profiles.

* FLEXDEPLOY-15644 - Enhanced the Salesforce Org Management screen by disabling the Export action when the export list is empty.

* FLEXDEPLOY-15964 - Added support for several new Salesforce Object types.

### Flex Work Items

* FLEXDEPLOY-15900 - Improved Flex Work Item navigation by automatically redirecting users to the Work Item List after deleting an internal work item.

## Plugin Updates

* Oracle Integration Cloud Plugin

  * FLEXDEPLOY-15760 – Resolved an intermittent issue where Oracle Integration Cloud (OIC) API operations could fail due to connection or read timeout errors. The process now automatically retries up to three times when a timeout occurs before marking the operation as failed.

  * FLEXDEPLOY-16001 - Added new B2B object export and import operations. Individual B2B objects can now be exported using `exportB2BDocument`, `exportB2BHostProfile`, `exportB2BSchema`, and `exportB2BTradingPartner`, and imported using `importB2BDocument`, `importB2BSchema`, `importB2BHostProfile`, and `importB2BTradingPartner`. Bulk export operations are also available for B2B Documents, B2B Schemas, and B2B Trading Partners using a CSV list of B2B object identifiers.

  * FLEXDEPLOY-15759 - Improved performance of the `exportIntegrations` operation when exporting the provided integrations. This resolves an issue where exports took longer than expected.

* Oracle APEX Plugin

  * FLEXDEPLOY-15767 - Added a new input for the `exportAPEXApplications` operation to control export folder naming. When enabled, the operation uses the Alias Name as the folder name; otherwise, it continues to use the Application Name.

## Resolved Issues

* General

  * FLEXDEPLOY-16006 - Updated the FlexDeploy registration process to allow Configuration Management to be registered before FlexDeploy. This resolves an installation order issue where FlexDeploy previously had to be registered first.

  * FLEXDEPLOY-16056 - Resolved a regression in 11.0.0.1 that prevented cache clears from working correctly between Configuration Management and FlexDeploy servers. This could cause some changes to not take effect properly between servers. The fix is included in 11.0.0.2.

* Security

  * FLEXDEPLOY-16020, FLEXDEPLOY-16022, FLEXDEPLOY-16023, FLEXDEPLOY-16036 - Resolved a security issue identified during Flexagon-commissioned penetration testing that could allow users to perform an action without proper validation.

  * FLEXDEPLOY-16034 - Added protections to prevent Influx injection through user-defined input.

* Workflow Definition

  * FLEXDEPLOY-15752 - Resolved an issue where clicking Save Draft incorrectly displayed the busy icon for Activate, and vice versa.

* Target

  * FLEXDEPLOY-16089 - Resolved an issue where saving Target properties could fail with an invalid `properties` value error after a property definition was changed from encrypted to not encrypted.

* Integrations

  * FLEXDEPLOY-15644 - Added snack messages for activation/inactivation for Integration Instance/Provider.

* Internal CMS / ITS providers

  * FLEXDEPLOY-15697 - Restricted Ticket Field creation and editing for FlexDeploy Internal CMS and ITS providers across the API and UI.

* Reports

  * FLEXDEPLOY-15967 - Resolved issues with sorting and filtering functionality in the Group Permissions Report.

* Git Integration

  * FLEXDEPLOY-16021 - Resolved a regression that caused Git command executions to run slower than expected.

* System Settings

  * FLEXDEPLOY-16037 - Resolved an issue where passwords could not be saved on the Email Settings page.

* Oracle Integration Cloud Plugin

  * FLEXDEPLOY-16002 - Resolved an issue where B2B Documents and B2B Schemas could not be updated when they were associated with active agreements or integrations. The deployment process now automatically handles the associated artifacts, allowing the update to complete successfully.

  * FLEXDEPLOY-16019 - Resolved an issue where B2B objects, including documents, schemas, trading partners, and host profiles, could have identical names and cause duplicate conflicts. Prefixes are now applied to these object types to ensure unique identification across B2B artifacts.

  * FLEXDEPLOY-16050 - Resolved a regression introduced in versions 11.0.0.1 and 10.0.0.5 that caused JSON files within extracted OIC IAR structures to be incorrectly discovered as Integration objects during Git discovery.

* Azure Power BI Plugin

  * FLEXDEPLOY-16065 - Fixed an issue where Name Conflict for Paginated Reports (RDL) was always being set to Overwrite

* SQL\*Plus, SQLcl, EBS Plugins

  * FLEXDEPLOY-15938 - Improved EXIT handling in the SQL\*Plus, SQLcl, and EBS plugins to prevent SQL files with EXIT statements inside loops from causing scripts to hang indefinitely.

## Incompatible Changes

* Oracle Integration Cloud Plugin

  * FLEXDEPLOY-16019 - Resolved an issue where B2B objects, including documents, schemas, trading partners, and host profiles, could have identical names and cause duplicate conflicts. Prefixes are now applied to these object types to ensure unique identification across B2B artifacts. To resolve missing files and recreate previously discovered objects, run discover with **Inactive Missing Files** checked.

# FlexDeploy 11.0.0.1 (5-23-2026)

> [!NOTE]
>
> **Version Details**
>
> * FlexDeploy Installer 1.0.28 or later should be used with FlexDeploy 11 upgrades.
>
> * Upgrading to FlexDeploy 11.0 can only be done from FlexDeploy 9.0.0.3+. The latest 9.0 release is recommended.
>
> * **FlexDeploy 11.0 requires Java 21 or 17. All plugins require Java 8 or higher**, see [Plugin Java Requirements](https://flexagon.atlassian.net/wiki/spaces/SHAR/pages/10176823301/Plugin+Java+Requirements) for Java version requirement for plugins.
>
> * HTTPS Agent has been updated with this release.
>
> * Application Version - 11.0.0.1.48
>
> * Plugin and Application major version (11.0) must match unless otherwise approved by Flexagon.

## Application Updates

### Security

* FLEXDEPLOY-15956 - Updated Tomcat Version used by FlexDeploy, Configuration Management, and the HTTPS Agent to Apache Tomcat 9.0.118, addressing security vulnerabilities CVE-2026-41284, CVE-2026-43514, CVE-2026-41293, CVE-2026-43512, CVE-2026-42498, CVE-2026-43515, CVE-2026-43513.

* FLEXDEPLOY-15920 - Upgraded quartz libraries to resolve vulnerabilities CVE-2026-27727, CVE-2026-27830.

* FLEXDEPLOY-15929 - Active sessions are now closed automatically when a user is inactivated.

### Projects

* FLEXDEPLOY-15371 - Added documentation links for Project Execution, Insights, Commits, Salesforce Compare Org, and SAP Change Request views.

### Release and Pipeline Orchestration

* FLEXDEPLOY-15871 - Enabled the actions menu for Release Roles, including Edit and Copy ID options.

### Salesforce

* FLEXDEPLOY-15962 - Upgraded Salesforce API JARs to version 67.0 (Summer ’26) to resolve an error that could occur when invoking Salesforce APIs: “Unable to find end tag at: START\_TAG seen ...”. Support for additional Salesforce objects and attributes will be added in a future release.

### Flex Work Items

* FLEXDEPLOY-15312 - Added an option to copy the Work Item Status Id.

### Reports

* FLEXDEPLOY-15969 - Added an Active column to the Group Permissions Report to indicate whether each object is active. This can help users filter inactive objects and completed releases from the report.

* FLEXDEPLOY-15955 - Added a new report that displays weekly commit counts grouped by user. The report can be filtered by commit message to find commits containing specific text, helping engineering teams measure developer commit activity and compare it with commits generated by AI tools when commit message standards, such as including GenAI, are in place.

## Plugin Updates

* Oracle Integration Cloud Plugin

  * FLEXDEPLOY-15800 – Added support for discovering B2B Documents, B2B Schemas, B2B Trading Partners, and B2B Host Profiles from an Oracle Integration Cloud instance and/or SCM. These components can now be built and deployed independently.

* Oracle CPQ Plugin

  * FLEXDEPLOY-15934 - Introduced a new plugin input, Polling Interval (Seconds) for Oracle CPQ migration operations, allowing users to control how frequently FlexDeploy checks the migration package import and export status.

## Resolved Issues

* General

  * FLEXDEPLOY-15937 - Increased the maximum length of the Action By value from 128 to 4000 characters. Values are now truncated when necessary to fit the supported length. This resolves the error: “Value for \[ActionBy] can not be larger than 128.”

  * FLEXDEPLOY-15693 - Tag style updates are now restricted to tag owners and administrators, and all tag changes are recorded in the audit report.

* Security

  * FLEXDEPLOY-15924 - Restricted access to the Test Credential screen for users with update credential permissions to reduce exposure of credential information.

  * FLEXDEPLOY-15930 - Restricted integration instance test connection API access for read-only users. Test connections now use only saved properties for read-only users to reduce exposure of credential information.

  * FLEXDEPLOY-15931 - Restricted endpoint test connection API access for read-only users. Test connections now use only saved properties for read-only users to reduce exposure of credential information.

* Workflow

  * FLEXDEPLOY-15517 - Resolved an issue where Redo and Undo icons were not automatically resetting after canceling changes.

* Release and Pipeline Orchestration

  * FLEXDEPLOY-15716 - Resolved an issue where selecting Save Draft and Activate in quick succession could cause recent pipeline changes to be missing in the activated version.

  * FLEXDEPLOY-15849 - Resolved an issue where the pipeline link was disabled on the Release page, preventing users from accessing pipelines despite having the required permissions.

  * FLEXDEPLOY-15868 - Resolved an issue where the “View Pipeline Definition Properties” link was hidden on the Release Properties tab despite proper permissions.

  * FLEXDEPLOY-15870 - Resolved an issue where the “View Pipeline Definition Roles” link was hidden on the Release Roles tab despite proper permissions.

  * FLEXDEPLOY-15873 - Resolved an issue where the pipeline link was disabled on the Snapshots dashboard, preventing users from accessing pipelines despite having the required permissions.

* Salesforce

  * FLEXDEPLOY-15971 - Resolved an issue in FlexDeploy 10.0.0.0 through 10.0.0.4 and 11.0.0.0 that prevented layout subcomponents from being deployed.

* Flex Work Items

  * FLEXDEPLOY-15323 - Resolved an issue where activating or inactivating a work item status did not refresh the work item status list.

* Reports

  * FLEXDEPLOY-15961 - Resolved "ORA-01489: result of string concatenation is too long" for Environment History and Environment State reports when large number of work items are associated with workflow execution.

* Webhook

  * FLEXDEPLOY-15717 - Resolved an issue where the UI did not refresh after deleting an inbound webhook.

* Notification

  * FLEXDEPLOY-15528 - Added validation to prevent Notification Templates referenced by active pipelines from being deleted. When deletion is blocked, an informative validation message is now displayed.

* Report

  * FLEXDEPLOY-15954 - Resolved an issue where Group Permissions Report does not show permission setup for FOLDER Object Type.

  * FLEXDEPLOY-15972 - Resolved an issue in the Group Permissions Report where pipeline-specific permissions displayed **All** instead of the pipeline name.

* Oracle Integration Cloud Plugin

  * FLEXDEPLOY-15935 – Resolved an issue where deploying project integrations incorrectly updated all connections in the project instead of only those used by the integration. Now, only the connections used by the specific integration are updated correctly.

* SQL\*Plus, SQLCl, and EBS Plugin

  * FLEXDEPLOY-15938 - Improved EXIT handling in the SQL\*Plus, SQLCl, and EBS plugins to prevent SQL files with EXIT statements inside loops from causing scripts to hang indefinitely.

* SQL\*Plus and SQLcl Plugin

  * FLEXDEPLOY-15957 - Updated the SQL\*Plus and SQLcl plugins to correctly handle SQL file names containing \$.

  * The SQLcl plugin now also supports spaces in file names.

* REST Plugin

  * FLEXDEPLOY-15970 - The REST Plugin no longer strips trailing slashes from URLs.

# FlexDeploy 11.0.0.0 (4-26-2026)

> [!NOTE]
>
> **Version Details**
>
> * FlexDeploy Installer 1.0.28 or later should be used with FlexDeploy 11 upgrades.
>
> * Upgrading to FlexDeploy 11.0 can only be done from FlexDeploy 9.0.0.3+. The latest 9.0 release is recommended.
>
> * **FlexDeploy 11.0 requires Java 21 or 17. All plugins require Java 8 or higher**, see [Plugin Java Requirements](https://flexagon.atlassian.net/wiki/spaces/SHAR/pages/10176823301/Plugin+Java+Requirements) for Java version requirement for plugins.
>
> * This contains all features and fixes that are part of 10.0.0.4.
>
> * HTTPS Agent has been updated with this release.
>
> * Application Version - 11.0.0.0.161
>
> * Plugin and Application major version (11.0) must match unless otherwise approved by Flexagon.

## Application Updates

### Platform Update

* FLEXDEPLOY-15464 - Docker Image - The default shell interpreter in Docker containers is now set to bash.

* FLEXDEPLOY-15811 - Updated the versions of Jersey and Jackson.

### Security

* FLEXDEPLOY-15326 – Upgraded Monaco Editor to version 0.55.1 to address security vulnerability CVE-2025-26791.

* FLEXDEPLOY-15326 – Upgraded Monaco Editor to version 0.55.1 to address security vulnerability CVE-2025-26791.

### Enhanced Security & Access Controls

#### Password Lockout Policy

FLEXDEPLOY-14538 - Administrators can now configure account lockout settings to better protect against unauthorized access:

* Configurable failed login attempts (range: 3–100, default: 5)

* Adjustable auto-unlock duration (minimum: 5 minutes; default: no auto-unlock)

#### Advanced Password Policy Enforcement

* FLEXDEPLOY-15426 - A password strength estimate is displayed when creating or updating any user password. Strength is determined based on length, character diversity, and comparing against common word lists, patterns, repeating sequences, etc. A system setting has been added to require passwords to reach a certain strength level (Fair, Strong, Strongest).

#### Automated User Deactivation

* FLEXDEPLOY-14865 - Automatically deactivate user accounts after a defined (configurable) period of login inactivity.

#### Detailed Login Audit Trail

Gain deeper visibility into authentication activity with enhanced logging attempts report, including:

* Username, IP address, timestamp, and login status

* Session ID and device fingerprint

* Two-factor authentication usage

* Authentication source (e.g., SSO, specific realms)

* Access method (UI vs. REST API, password vs. token)

This report has its own security permission due to the sensitive nature of its contents.

### Salesforce

* FLEXDEPLOY-14689 – Updated Salesforce CLI usage to use the newer `sf` commands, replacing deprecated `sfdx` commands.

### Outgoing Webhooks

* FLEXDEPLOY-13780 - Added Project General Configuration Updated and Project Source Configuration Updated events for Outgoing Webhook. Now one can track changes occurred in, General and Source Control tabs of Project Screen.

### Scheduled Events

* FLEXDEPLOY-14135 – Updated behavior so that all pending events are now marked as failed when the server restarts. Additionally, introduced a Groovy timeout snippet with a default timeout of one hour.

### Work Items

* FLEXDEPLOY-15466 - Increased the Work Item Validation Script size limit from 4000 characters to CLOB to support longer and more complex scripts

### Dashboards

* FLEXDEPLOY-15447 - Allow non-admin users to see more health monitoring information.

### Groovy Functions

* FLEXDEPLOY-15647 - FLEXDEPLOY function now includes search Integration Instances method - `searchIntegrationInstances`.

## Plugin Updates

* Oracle SaaS FSM Plugin

  * FLEXDEPLOY-15554 – The file catalog discovery process can now ignore permission issues during discovery when the Inactivate Files option is not selected. This allows discovery to continue and successfully catalog files that are accessible, even if some files cannot be read due to permission restrictions.

## Resolved Issues

* General

  * FLEXDEPLOY-15583 - Resolved an issue where the last column in a table was sometimes cut off when browser was zoomed in.

  * FLEXDEPLOY-15748 - Resolved an issue where the fullscreen keyboard shortcut was not working in some spots. The default ctrl + f11 shortcut can now be used in all code editors and text areas, or it can be customized to a new keybinding.

* Projects

  * FLEXDEPLOY-15578 - Resolved an issue where images in project execution reports were sometimes cut off when they extended beyond the height of the screen.

  * FLEXDEPLOY-15783 - Resolved an issue where the default column width in Project Package Files truncated file names.

* Salesforce

  * FLEXDEPLOY-15457 - Resolved an issue during compare where dependent Profiles and Permission Sets were sometimes not included in the compare results when comparing multiple projects at once.

  * FLEXDEPLOY-15553 - Resolved a 503 error that could happen when deploying more than 20 profiles in a package.

  * FLEXDEPLOY-15719 - Resolved an issue where the default column width for Salesforce subcomponent names caused truncation.
