​

Known issues

• FLEXDEPLOY-13513 - The JMeter plugin included in the 9.0.0.0 zip did not work. You can download a fixed version of the plugin here.
• FLEXDEPLOY-13544 - FlexDeploy 8.0.0.6-8.0.0.8 and 9.0.0.0 are affected by FLEXDEPLOY-13544. A regression in 8.0.0.6 causes the ServiceNow integration to not use the customized URL provided when there are multiple change tickets being checked simultaneously. A 9.0.0.0 patch is available if needed. 8.0.0.9 and 9.0.0.1 contain the fix for it.
• FLEXDEPLOY-13641 - FlexDeploy 9.0.0.0 has an issue where specifying SCM revisions while building a package is not handled correctly. The build fails. There is a 9.0.0.0 patch available.
• FLEXDEPLOY-14318 - If you upgraded from version 7.0 or earlier to 8.0.0.5-8.0.0.12 or 9.0.0.0-9.0.0.4 and use ADF, EBS, Oracle BI, Oracle API Platform, Oracle Forms, PeopleSoft, SAP, Siebel, WebLogic, WebMethods, Wildfly, or Mule Plugins, please verify the Endpoint Selection and Execution settings for workflows utilizing these plugins. Migrating from earlier versions directly to 8.0.0.16 / 9.0.0.7 is recommended.
• FLEXDEPLOY-14330 - FlexDeploy 8.0.0.6-8.0.0.12 and 9.0.0.0-9.0.0.4 are affected by FLEXDEPLOY-14330. A regression in 8.0.0.6 causes CMS tickets to sometimes send the wrong environment code into the isTicketApproved and isTicketRejected. This happens if tickets are waiting for approval in multiple environments and polling is enabled. Patches are available for 9.0 releases. 8.0.0.13 was released to fix this.
• FLEXDEPLOY-14428 - The 9.0.0.5.32 release of the OIC plugin exports all non-project connections when using the package build operation to build an integration. This is resolved in 9.0.0.5.33. The zip file was upgraded to have the newer version, but depending on when you upgraded to the 9.0.0.5 release, you may need to download it separately from the plugins download page.
• FLEXDEPLOY-14617 - Oracle Database Plugin - An issue in FlexDeploy 9.0.0.1-9.0.0.7 caused Oracle Database Projects to say that there are no changes and skip the files during deployments.
• FLEXDEPLOY-14739 – Versions 9.0.0.5, 9.0.0.6, and 9.0.0.7 of FlexDeploy are affected by an issue where Oracle Cloud-related plugins may fail with a java.lang.NoClassDefFoundError: org/bouncycastle/asn1/ntt/NTTObjectIdentifiers when using OAuth authentication. This is resolved in FlexDeploy 9.0.0.8. If you are using affected version, then place https://repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk15to18/1.80/bcutil-jdk15to18-1.80.jar in lib folder of affected plugin. Contact flexagon support if necessary.
• FLEXDEPLOY-14946 - FlexDeploy’s Jira integration fails to search work items due to the removal of certain search-related APIs by Jira. Users may encounter errors when searching for Jira work items. However, if the exact work item number is entered, the integration will still function correctly. These UI errors can be ignored. A fix for this issue is included in FlexDeploy 9.0.0.9+. If you upgraded to version 9.0.0.9 before September 17, 2025, you will need to apply an updated flexdeploy.war file. Please contact FlexDeploy Support for assistance. Once 9.0.0.9 patch is applied - Customers with custom Issue Tracking System implementations must update their searchWorkItems method. The method signature has changed to support the next page token and now returns a flexagon.fd.model.integration.its.api.WorkItemSearchResponse object. This response includes: List<WorkItemSearchResult> and String nextPageToken (for pagination support).

​

Launch Webinar Recordings

​

FlexDeploy 9.0.0.17 (6-19-2026)

​

Resolved Issues

• Security
  • FLEXDEPLOY-16022 - Resolved a security issue identified during Flexagon-commissioned penetration testing that could allow users to perform an action without proper validation. This fix is included in versions 11.1.0.0, 11.0.0.2, 10.0.0.6, and 9.0.0.17.
• AzurePowerBIPlugin
  • FLEXDEPLOY-16065 - Fixed an issue where Name Conflict for Paginated Reports (RDL) was always being set to Overwrite
• SQL*Plus, SQLcl, EBS Plugins
  • FLEXDEPLOY-15938 - Improved EXIT handling in the SQL*Plus, SQLcl, and EBS plugins to prevent SQL files with EXIT statements inside loops from causing scripts to hang indefinitely.

​

FlexDeploy 9.0.0.16 (5-24-2026)

​

Application Updates

​

Security

• FLEXDEPLOY-15956 - Updated Tomcat Version used by FlexDeploy, Configuration Management, and the HTTPS Agent to Apache Tomcat 9.0.118, addressing security vulnerabilities CVE-2026-41284, CVE-2026-43514, CVE-2026-41293, CVE-2026-43512, CVE-2026-42498, CVE-2026-43515, CVE-2026-43513.

​

Salesforce

• FLEXDEPLOY-15962 - Upgraded Salesforce API JARs to version 67.0 (Summer ’26) to resolve an error that could occur when invoking Salesforce APIs: “Unable to find end tag at: START_TAG seen …”.

​

Resolved Issues

• General
  • FLEXDEPLOY-15937 - Increased the maximum length of the Action By value from 128 to 4000 characters. Values are now truncated when necessary to fit the supported length. This resolves the error: “Value for [ActionBy] can not be larger than 128.”
• Git Integration
  • FLEXDEPLOY-15831 – FlexDeploy now captures the first matching commit on the build branch for both package and standard project build requests. This ensures that commits—and their associated work items—are properly detected, particularly when changes are introduced through pull-request merges. This restores behavior consistent with versions prior to FlexDeploy 9.0.0.0.
• SQL*Plus and SQLcl Plugin
  • FLEXDEPLOY-15957 - Updated the SQL*Plus and SQLcl plugins to correctly handle SQL file names containing $.
  • The SQLcl plugin now also supports spaces in file names.
• Azure Power BI Plugin
  • FLEXDEPLOY-15776 - The Plugin no longer requires the files to be in the current branch when re-evaluating files, which was a regression in 9.0.0.0.10.

​

FlexDeploy 9.0.0.15 (4-12-2026)

​

Application Updates

​

Security

• FLEXDEPLOY-15822 - Updated the Tomcat versions used by FlexDeploy and HTTPS agents to Apache Tomcat 9.0.117, addressing security vulnerabilities CVE-2026-29146, CVE-2026-29145, CVE-2026-25854, CVE-2026-24880, CVE-2026-29129,CVE-2026-34483,CVE-2026-34487,CVE-2026-32990,CVE-2026-34486, CVE-2026-34500.

​

Resolved Issues

• Git Integration
  • FLEXDEPLOY-15821 – Addressed a regression introduced in FlexDeploy 9.0.0.0 related to initial change log detection for Git branch and project/package combinations. The original 9.0 release notes stated that a Force Build might be required for the first build, particularly when changes were introduced via pull-request merges. However, this regression caused subsequent builds failing to capture change logs and associated work items from commit messages. This issue has now been resolved. Any packages that were previously built without this fix will require a one-time Force Build.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-15758 – Resolved an issue where identical non-shared connection files in different OIC projects were incorrectly skipped during deployment due to matching content.

​

FlexDeploy 9.0.0.14 (3-28-2026)

​

Application Updates

​

Security

• FLEXDEPLOY-15751 – Updated the Tomcat versions used by FlexDeploy and HTTPS agents to Apache Tomcat 9.0.115, addressing security vulnerabilities CVE-2025-66614 and CVE-2026-24734.

​

Resolved Issues

• General
  • FLEXDEPLOY-15610 – Resolved issues affecting tag-based searches in both page-level and global search contexts.
• Security
  • FLEXDEPLOY-15616, FLEXDEPLOY-15622, FLEXDEPLOY-15649 – Fixed a security vulnerability that could allow SQL injection by authenticated users on a specific screen. Users are encouraged to upgrade to the patched version. Contact support for further details.
• Rollback
  • FLEXDEPLOY-15743, FLEXDEPLOY-15744 – Resolved various issues affecting rollback operations for package-based projects when using Rollback File approach:
    • After performing a rollback using rollback files, subsequent deployments of the original package no longer require Force Deploy.
    • Repeated rollback attempts on the same package also no longer trigger an unnecessary Force Deploy requirement.
• Oracle EBS Plugin
  • FLEXDEPLOY-15708 - Resolved an issue with startAll and stopAll operations when using -mode=allnodes for Input Options.
• Oracle BI Plugin
  • FLEXDEPLOY-15645 - Resolved a regression in 9.0.0.5 what the RPD password was not encrypted properly when updating the password using XUDML patching.
• SQL*Plus and SQLcl Plugin
  • FLEXDEPLOY-15646 - Resolved an issue in the SQL*Plus and SQLcl plugins where the EXIT command was incorrectly detected when user-defined exceptions (e.g., EXIT_ERROR, EXIT_NOERROR, eExit, vGeneralException) were present in PL/SQL scripts.
• SQL*Plus Plugin
  • FLEXDEPLOY-15742 - Resolved SQL*Plus execution issues when folder paths contain spaces.

​

FlexDeploy 9.0.0.13 (2-14-2026)

​

Application Updates

​

Bitbucket Integration

• FLEXDEPLOY-15013 - Migrated to new Workspace/Repository APIs due to the deprecation of all cross-workspace APIs - https://developer.atlassian.com/changelog/#CHANGE-2770.

​

Resolved Issues

• Reports
  • FLEXDEPLOY-15572 – Resolved an issue in the Environment History Report where selecting Show File Details and filtering by File Type caused an error when using a PostgreSQL database.
• Oracle EBS Plugin
  • FLEXDEPLOY-15607 – Resolved an issue where the ADOP Cleanup operation always ran in Standard mode, regardless of the selected Cleanup Option.
• MS Build Plugin
  • FLEXDEPLOY-15563 – Added a new input option to restrict environment variables. When configured, only variables associated with the specified target group codes are passed to the execution environment.

​

FlexDeploy 9.0.0.12 (1-18-2026)

​

Application Updates

​

Security

• FLEXDEPLOY-15243 – Updated the Tomcat versions used by FlexDeploy and HTTPS agents to Apache Tomcat 9.0.111, addressing security vulnerabilities CVE-2025-61795, CVE-2025-55752, and CVE-2025-55754.
• FLEXDEPLOY-15461 – TLS 1.3 support added, using Java’s default TLS settings. This applies to FlexDeploy as well as Plugins.
• FLEXDEPLOY-15472 - Update Playwright in FlexDeploy and the FlexDeploy FSM plugin for CVE-2025-59288. Also fixes playwright issue 36650 where https proxies are not supported.
• FLEXDEPLOY-15473 - DependencyCheck Plugin - Updated DependencyCheck for CVE-2025-48924 in a bundled library.
• FLEXDEPLOY-15474 - PMD Plugin - Updated the PMD version to 7.19.0 to remedy several CVEs.

​

Salesforce

• FLEXDEPLOY-15143 – Added support for Salesforce API version 65.0 (Winter ’26). Version 65.0 supports OAuth authentication and removes BASIC authentication. The default API version remains 64.0 for compatibility, but the upper version limit has been removed. The following new Metadata Types are supported:
  • LightningOutApp
  • DgtAssetMgmtProvider
  • DgtAssetMgmtPrvdLghtCpnt
  • InvocableActionExtension
• FLEXDEPLOY-15350 - Added support for Client_Credentials grant flow. To use, setup a client application and select the user in Salesforce that you wish FlexDeploy to use. The username and password are no longer needed on the integration in this case, just the client id and client secret. Test connection now prefers OAuth over Basic auth (fix for Salesforce 65.0 where Basic Auth was removed and deprecated in earlier versions). If using OAuth with Username and Password, the token can now be stored either in the password credential or separately in the token input. Previously it had to be in the password credential for Oauth.
• FLEXDEPLOY-15351 - Allow modifying the type of Salesforce objects after discovery. This should rarely be done, but if an object is improperly discovered, it is now possible to correct it in the UI.

​

Jira Integration

• FLEXDEPLOY-15229 – Added a new Jira instance property to enable or disable the use of the JQL-based Search API. This property is enabled by default and is particularly useful for on-premises Jira installations where JQL may not be available.

​

Groovy Functions

• FLEXDEPLOY-15236 – The ExecuteOptions class now supports associating one or more change tickets when executing utility project via the executeUtility function, enabling better tracking and auditing of utility executions.

​

Plugin Updates

• Oracle SaaS FSM Plugin
  • FLEXDEPLOY-15289 – Improved plugin login scripts to better support the Oracle SaaS UI authentication flow across a wider variety of login pages and SSO configurations.
  • FLEXDEPLOY-15454 - Manage Public Sector Custom Roles (ORA_PSCR_TSK_CUSTOM_ROLES) setup task now allows for filter using ORA_ASE_FUNCTIONAL_SECURITY_CUSTOM_ROLES, ORA_ASE_FUNCTIONAL_SECURITY_CUSTOM_ROLE_HIERARCHY, ORA_ASE_FUNCTIONAL_SECURITY_CUSTOM_ROLE_PRIVILEGE_MEMBERSHIP business objects.
  • FLEXDEPLOY-15536 – Increased the timeout for loading SOA Composer pages to accommodate cases where page load times are slow.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-15483 - Added missing input “Update Schedules” to the packageDeploy operation.

​

Resolved Issues

• Security
  • FLEXDEPLOY-15365 – Resolved an issue that could allow Two-Factor Authentication (2FA) to be bypassed for local users.
  • FLEXDEPLOY-15427 – Dashboard panel parameters are now properly sanitized, preventing illegal characters.
• Projects
  • FLEXDEPLOY-15252 - Resolved an issue in Project Insights where certain filters caused an error.
• Release and Pipeline Management
  • FLEXDEPLOY-15240 - Resolved a regression introduced in version 9.0.0.7 that could cause the error “[RelSnapshot] is required for [RelSnapshotDBRow].” when creating a snapshot.
  • FLEXDEPLOY-15245 – Resolved an issue where, during pipeline activation, cron expressions defined as Groovy were incorrectly validated as literals.
  • FLEXDEPLOY-15287 – Resolved an issue where the Schedule Gate and Schedule Step skipped validation of Groovy expressions during pipeline activation. The Schedule Gate now correctly validates Groovy cron expressions, and the Schedule Step validates Groovy override role expressions.
• Salesforce
  • FLEXDEPLOY-15519 - Resolved issues when working with WaveXmd files.
• Groovy Libraries
  • FLEXDEPLOY-15341 – Resolved an issue where a Groovy library validation exception prevented other valid libraries from compiling. Valid libraries now continue to compile even if one fails validation.
• Outgoing Webhook
  • FLEXDEPLOY-15221 – Resolved an issue where the Task Created outgoing webhook could generate duplicate events.
• Oracle EBS Plugin
  • FLEXDEPLOY-15453 – Resolved issues in the EBS plugin Stop and Restart Concurrent Manager operations when attempting to terminate remaining processes after a stop did not complete within the configured time.
• Ansible Plugin
  • FLEXDEPLOY-15315 - Resolved an issue where a missing space between inputs caused failures when using FDANS_INP_EXTRA_VARS and FDANS_INP_FORKS Input together.

​

FlexDeploy 9.0.0.11 (10-25-2025)

​

Application Updates

​

Salesforce

• FLEXDEPLOY-15020 – Backups for Salesforce SFDX projects are now created in SFDX format, ensuring consistency with the format used in source control repositories. This improvement enhances reliability and simplifies rollback scenarios by maintaining alignment between backups and version-controlled files.

​

GIT Integration

• FLEXDEPLOY-15144 - Improved the performance of checking for changes in larger repositories.
• FLEXDEPLOY-15163 - Removed uses of the deprecated “whatchanged” command, and replaced them with log.

​

Compliance & Audit

• Groovy Library - Test, Admin Operations - Run Groovy, Administration - Change Log Level, and Workflow Execution using a non-active version are now recorded in the Change History.

​

Groovy Functions

• FLEXDEPLOY-7737 - The variable “FDInstances” now appears as a code suggestion in property definition List Data scripts. Additionally, a new method, FDInstances.getIntegrationInstancesLOV, has been introduced. It enables retrieval of detailed information for specific integration instance types, allowing for more dynamic and informative list data.
• FLEXDEPLOY-15088 - Added new FLEXDEPLOY functions to retrieve pending or approved content, commits, and work items associated with a stage execution.
  • public List<SnapshotCompareItem> getPendingOrApprovedContent(Long pStageExecId)
  • public List<ScmCommitDataObject> getPendingOrApprovedCommits(Long pStageExecId)
  • public List<WorkItemDataObject> getPendingOrApprovedWorkItems(Long pStageExecId)

​

Plugin Updates

• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-15092 – Resolved a “String index out of range” error that occurred during the packageBuild operation. The issue arose because the expected folder structure for a Library File was [LIBRARY_ID]/[LIBRARY_TYPE]/[LIBRARY_VERSION]/[LIBRARY_CODE]/[FILENAME], while export operations generated paths without the [LIBRARY_ID] segment. The packageBuild operation now supports both path structures for improved compatibility and reliability.
• Oracle Visual Builder Plugin
  • FLEXDEPLOY-15115 – Updated the Property Display Name (FDFSM_CLOUD_ACCOUNT_CODE) and Plugin Input Display Name (FDOVB_INP_SAAS_ACCOUNT_CODE) to remove “FSM” from their names for improved clarity.
• Oracle SaaS FSM Plugin
  • FLEXDEPLOY-15042 - Added filter criteria support for Expense rule–related setup tasks.
    • EXM_MANAGE_AUDIT_RULES_BY_TEMPLATES_AND_TYPES
    • EXM_MANAGE_EXPENSE_AUDIT_LIST_RULES
    • EXM_MANAGE_EXPENSE_AUDIT_RULE_ASSIGNMENTS
    • EXM_MANAGE_EXPENSE_REPORT_AUDIT_RULES
    • EXM_MANAGE_RECEIPT_AND_NOTIFICATION_RULES
    • ORA_EXM_MANAGE_EXPENSE_REPORT_AUDIT_RULES

​

Resolved Issues

• Migration
  • FLEXDEPLOY-15085 – Resolved a migration issue where a “duplicate key value violates unique constraint ix_property_key_value_uk1” error could occur if newer plugin versions were installed on an older version of FlexDeploy. This fix ensures smoother upgrades and prevents conflicts during migrations.
• Project
  • FLEXDEPLOY-15105 - Default Workflow Input values are now reapplied when changing the workflow version provided the value has not been changed from the original default value.
  • FLEXDEPLOY-15162 - Resolved an issue where subworkflow File deployment statuses were not being updated correctly after a failure. This caused already executed files to run again during redeployment. The deployment state is now properly retrieved, preventing redundant executions.
• Workflows
  • FLEXDEPLOY-15038 - The Run Groovy no longer allows assignment to workflow variables when the value being assigned does not match the data type of the variable.
• Releases
  • FLEXDEPLOY-15121 - Release Project cards now correctly show the username of the user that created the project as opposed to a json text block.
• Salesforce
  • FLEXDEPLOY-14926 - Resolved issues with data file deployments introduced in the 9.0.0.9 version.
• Groovy Library
  • FLEXDEPLOY-15180 – Resolved an issue where the Test Groovy function could expose credential values in error messages.
• Oracle EBS Plugin
  • FLEXDEPLOY-15106 – Resolved a regression issue introduced in version 9.0.0.9 affecting EBS Standard (Full Deploy, non–package-based) builds, which caused a java.lang.StringIndexOutOfBoundsException error.
• REST Plugin
  • FLEXDEPLOY-15009 - Introduced a new plugin input FDR_ALLOW_GZIP_RESPONSE to control automatic decompression of Gzip responses based on the content type. By default, it is set to true. This can help avoid java.util.zip.ZipException: Not in GZIP format for certain REST API calls.

​

FlexDeploy 9.0.0.10 (9-28-2025)

​

Application Updates

​

Workflow

• FLEXDEPLOY-13938 - Added filter option for Code and Display Name in workflow properties.

​

Salesforce

• FLEXDEPLOY-14874 - AppFrameworkTemplateBundle and GenAiFunctions types are now supported for file-level comparison.

​

Jira Integration

​

Webhooks

• FLEXDEPLOY-14444 – Introduced a new Groovy function, VBSTUDIO, to support processing payloads from Visual Builder Studio Git repositories.

​

Plugin Updates

• Oracle SaaS FSM Plugin
  • FLEXDEPLOY-14832 – Added new filtering options when editing an FSM Setup Task. Users can now exclude an entire business object using a new Exclude File option within the Filter Criteria. Additionally, a new option allows all business objects to be marked as excluded in a single action.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-14654 – Added a new OIC Properties input to file attributes, allowing users to specify integration properties to be updated.
  • FLEXDEPLOY-14934 – Enhanced the Connection Plan properties file by including the associated property name for each entry, improving readability. Property names are used as folder when managing connection attachement files.

​

Resolved Issues

• General
  • FLEXDEPLOY-14949 – Resolved an issue where InfluxDB on Windows could fail to start due to a 10-second initialization timeout. The wait time has been extended to up to 100 seconds to improve startup reliability.
• Security
  • FLEXDEPLOY-14905 – Resolved an issue where the password was not updated during the conversion of a user from external to internal, which previously required a separate password update. The password now updates automatically as part of the conversion process.
  • FLEXDEPLOY-14985 - Resolved an issue on the SSO realm’s Group Mapping tab where entering a name in the “Add Group” field caused the cursor to jump to a different input box, making it difficult to map external groups to existing FlexDeploy groups for security permissions.
• Projects
  • FLEXDEPLOY-14630 – FlexDeploy now throws an error when evaluating an SCM-based file that does not exist but is required to populate attributes. Previously, the process would continue without the file content, which could lead to unexpected results.
• Salesforce
  • FLEXDEPLOY-14797 – Resolved various issues with Rollback process for Metadata API-based Salesforce projects. This version improves on the fixes introduced in 9.0.0.9, addressing remaining problems with rollback behavior.
  • FLEXDEPLOY-14996 – Resolved a build execution failure related to Custom Labels in SFDX-type Salesforce projects.
  • FLEXDEPLOY-15046 – Resolved an issue that prevented build and validate operations from being used in the same workflow. This was a regression introduced in the 9.0.0.9 release.
  • FLEXDEPLOY-15050 – SFDX – Bundled objects are now built successfully even when the sparse checkout folder is not set and the objects reside in nested folders. This fixes a regression introduced in version 9.0.0.9.
  • FLEXDEPLOY-15054 - Reverted a change in 9.0.0.8 where salesforce data was pulled in parallel when doing org to org comparisons to reduce the amount of memory needed to hold the xml data coming back from Salesforce simultaneously.
  • FLEXDEPLOY-15056 - Improved the performance of handling dates when finding when Salesforce files were last updated.
  • FLEXDEPLOY-15059 - Email Templates can now be deployed properly. This was a regression in 9.0.0.9.
  • FLEXDEPLOY-15066 - Static Resources in folders can now be deployed properly. This was a regression in 9.0.0.9.
  • FLEXDEPLOY-15081 - Resolved an issue where BotVersion metadata file were incorrectly classified as Bot. The package.xml generator and metadata classification now correctly recognize and list them as BotVersion.
  • FLEXDEPLOY-14970 - Resolved a regression in 9.0.0.9 with the building of the Workflow metadata type.
  • FLEXDEPLOY-15008 - Custom Label subcomponents now build and deploy properly for SFDX project types.
  • FLEXDEPLOY-15020 - The backups of SFDX format projects are now converted to SFDX format to match the expected format that the files are in source control.
• Integrations
  • FLEXDEPLOY-14967 - Resolved issues with test connection having a confusing error message when missing required fields for CPQ and ApigeeX.
• Bitbucket Integration
  • FLEXDEPLOY-14986 - Resolved a java.lang.ArrayIndexOutOfBoundsException: Index 4 out of bounds error that occurred when viewing Bitbucket commits containing binary files in the Commits tab.
• Purge
  • FLEXDEPLOY-14959 - Resolved an issue with purge operations on Oracle databases where the Workflow and Plugin Execution tables were not being purged as expected. Data older than the configured retention period was often retained instead of being deleted.
• Oracle EBS Plugin
  • FLEXDEPLOY-14857 – Resolved an issue where the adcGenerateJar operation was incorrectly marked as Successful even when errors were present in the process output. A new input has been introduced to control whether to throw an error or ignore it, with the default set to false for backward compatibility.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-14759 – Resolved an issue where connection updates failed when both PGP public and private keys were present. Previously, deploying the public key first caused errors; the deployment process now ensures the private key is uploaded before the public key.
• Oracle API Gateway Plugin
  • FLEXDEPLOY-14921 - Resolved issues where several attributes were skipped during deployment.
• SQLPlus Plugin
  • FLEXDEPLOY-14991 - Resolved an issue where sql files that contained a space in the name were not able to be executed.
• Mule and Apigee Plugin
  • FLEXDEPLOY-15047 - Resolved a regression in the Mule and Apigee plugins where builds with tests could fail with errors about a Surefire reporter method not being found.

​

Incompatible Changes

• Customers with custom Issue Tracking System implementations must update their searchWorkItems method. The method signature has changed to support next page token and now returns a flexagon.fd.model.integration.its.api.WorkItemSearchResponse object. This response includes: List<WorkItemSearchResult> and String nextPageToken (for pagination support).

​

FlexDeploy 9.0.0.9 (8-30-2025)

​

Application Updates

​

Security

• FLEXDEPLOY-14771 - Upgraded Tomcat to 9.0.108 to resolve vulnerabilities CVE-2025-53506, CVE-2025-52520, CVE-2025-49125.
• FLEXDEPLOY-14804 - Upgraded the Apache Commons Lang library (commons-lang3) to address security vulnerability CVE-2025-48924 in FlexDeploy and the majority of FlexDeploy plugins. Note: In version 9.0, certain plugins that still target Java 7 are unable to be upgraded due to compatibility constraints. Additionally, the Jenkins plugin continues to utilize the commons-lang library.
• FLEXDEPLOY-14806 - Updated the Maven Surefire report parser to address security vulnerability CVE-2022-29599 in the Maven, Mule, and Apigee plugins.
• FLEXDEPLOY_14835 - Updated json-smart library for FlexDeploy application, ServiceNow and XPath plugins to resolve vulnerability CVE-2024-57699.
• FLEXDEPLOY-14847 - Updated SSHJ to version 0.40.0 to address the transitive dependency vulnerability CVE-2020-36843.

​

HTTPS Agent

• FLEXDEPLOY-14885- Upgraded Tomcat to 9.0.108 to resolve vulnerabilities CVE-2025-53506, CVE-2025-52520, CVE-2025-49125, CVE-2025-52434.

​

Projects

• FLEXDEPLOY-14839 - Enhanced the performance of the Discover action for the File Catalog, both when discovering from SCM and backend sources. Improvements are most noticeable in projects with over 10,000 files and multiple sources configured with SCM enabled.

​

Salesforce

• FLEXDEPLOY-14686 – Upgraded to Salesforce API Version 64.0 (Summer ’25). This upgrade adds support for the following new metadata types:
  • AnalyticsDashboard
  • AnalyticsVisualization
  • AnalyticsWorkspace
  • AppFrameworkTemplateBundle
  • CallCenterRoutingMap
  • ContentTypeBundle
  • ConvIntelligenceSignalRule
  • ExtlClntAppMobileConfigurablePolicies
  • ExtlClntAppMobileSettings
  • ExtlClntAppNotificationSettings
  • ExtlClntAppPushConfigurablePolicies
  • ExtlClntAppPushSettings
  • ExtlClntAppSamlConfigurablePolicies
  • GenAiPlannerBundle
  • LightningTypeBundle
  • OmniInteractionAccessConfig
• FLEXDEPLOY-14871 - Improved handling for Account Relationship Share Rules metadata type by removing a dot(.) in the metadata type definition.

​

Credentials

• FLEXDEPLOY-14795 – Added support for Oracle Wallet type credentials, allowing users to upload Oracle Wallet ZIP files directly within FlexDeploy. This enhancement eliminates the need to maintain wallet files manually on the file system, simplifying credential management and improving security. Additionally, the following plugins have been updated to utilize Oracle Wallet credentials:
  • JDBC
  • Oracle Database
  • Oracle APEX
  • ORDS
  • SODA
  • SQLcl
  • utPLSQL

​

Groovy Functions

• FLEXDEPLOY-14744 – Added a new function getReleaseProjects that retrieves the details of all release projects.
• FLEXDEPLOY-14782-Added a new function getPipelineProjectGroups that returns the Project Groups associated with a Pipeline.

​

Plugin Updates

• Oracle SaaS FSM Plugin
  • FLEXDEPLOY-9658 - FlexDeploy introduces support for managing (export and import) of BPM related files (tasks, rules, composite etc.). This requires the project property Enable BPM Migration to be checked. When BPM migration is enabled, the server uses Playwright to automate the download and upload of BPM-related files via the browser. Playwright drivers and browser binaries are automatically downloaded to the server and endpoint as needed. However, if your server or endpoint lacks internet access, you can manually download and install the required files. Refer to the Flexagon Playwright Compatibility Guide for instructions on how to obtain and place the necessary files manually. See Oracle SaaS FSM Plugin Guide for more details.
• Oracle EBS Plugin
  • FLEXDEPLOY-14661 – The EBS plugin now requires Java 8 to address multiple security vulnerabilities. This change, originally planned for FlexDeploy 10.0, has been introduced earlier for improved security.
    • If your environment still requires Java 6 or 7, you may continue using the 9.0.0.8 version of the plugin, which remains compatible with all FlexDeploy 9.0.0.x versions.
    • In FlexDeploy 10.0, Java 8 will be required on EBS endpoints.
    • Note: The actual compilation of EBS code will still use the Java version specified in the EBS Source Script, allowing flexibility in build configurations.
  • FLEXDEPLOY-14692 - Improved the match script used in the file discovery process to better determine if files are SQL or CP_SQL files.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-14726 – Added support for automatic activation of newly deployed libraries. Libraries are now set to Active status immediately upon successful deployment, streamlining the deployment process and eliminating the need for manual activation.
  • FLEXDEPLOY-14813 – Resolved an issue where previously, when exporting connections from an OIC instance, the Role attribute was ignored and hardcoded during import. Now, the Role attribute is properly exported and reused during import. If the Role is not found during import, the default value is used as before.
• Azure Power BI Plugin
  • FLEXDEPLOY-14190-Added File status outputs for updateParameters, bindToDatasourceConnection, updateDatasourceonnection, updateDatasouceCredentials and refreshSemanticModel operations.
  • FLEXDEPLOY-14735 – Enhanced the Power BI plugin to automatically sequence .SemanticModel files before .Report files during PBIP-type deployments, ensuring proper deployment order and improved reliability.
• Oracle BI and Oracle Data Integrator Plugin
  • FLEXDEPLOY-14856 - Resolved several CVEs in the OBI and ODI plugins. The ODI plugin now requires Java 8 as of 9.0.0.9. Using an earlier version will be necessary if unable to use Java 8 or later on your ODI endpoints.
• Oracle Visual Builder Plugin
  • FLEXDEPLOY-14872 - Updated default value of Component Exchange URL for the US component exchange. Users can override this behavior by specifying the EU URL in the Integration Instance configuration, if required.
• Maven Plugin
  • FLEXDEPLOY-14858 - The Maven plugin now parses Surefire Test Results from child projects as well as the top-level project.

​

Resolved Issues

• Folders
  • FLEXDEPLOY-14883 - Resolved an issue where Projects and Releases appeared in folder search results even for users without read permissions. While access to the objects was still restricted (resulting in a permission error when clicked), these items are now properly excluded from search results for unauthorized users.
• Projects
  • FLEXDEPLOY-14719 - Resolved a java.lang.IllegalStateException: Duplicate key xxxxx error that could occur when submitting a deployment workflow request containing files marked for deletion in a package.
  • FLEXDEPLOY-14929 - Resolved an issue where the Files tab within a project workflow request was sometimes not showing any files.
• Project / Folder Issue Tracking
  • FLEXDEPLOY-10159 - Resolved an issue where the Project/Folder ITS configuration order changed on save.
• Release and Pipeline Management
  • FLEXDEPLOY-14867 - Resolved a regression introduced in version 9.0.0.8 where the last execution details for Releases might not be saved correctly.
  • FLEXDEPLOY-14917 - Resolved an issue where Update Change Tickets step may fail with Cannot invoke “java.util.List.iterator()” because the return value of “java.util.Map$Entry.getValue()” is null if stage level change ticket is provided on stage execution info.
• Workflows
  • FLEXDEPLOY-14708 - Default values for inputs and properties are no longer cleared when changing the list data field.
• Integrations
  • FLEXDEPLOY-12532 - Resolved an issue that would prevent integration popups from opening when clicked from the Global Search menu and the Navigation Setting “Remember Page Set” is checked.
  • FLEXDEPLOY-14787 - Creating multiple Azure DevOps Git integrations with SSH is now using the appropriate SSH url for Azure DevOps repositories.
• Value Stream Metrics
  • FLEXDEPLOY-14895 - Optimized system behavior to reduce redundant InfluxDB calls during system-level issues, minimizing excessive logging in application logs.
• Plugins
  • FLEXDEPLOY-14702 - Resolved plugin auto‑upload issue where an invalid file blocked subsequent uploads; failed files are now moved to failedplugins and logged in application errors.
• Change Management
  • FLEXDEPLOY-14837 - Resolved FDML-99501: Value for [ActionBy] can not be larger than 128 in Change Management integration. This limit has now been increased to support up to 4,000 characters, improving handling when multiple approvers are present.
• Salesforce
  • FLEXDEPLOY-13611 - Resolved an issue where deployments failed when a Custom Object file and sub-components (Custom Fields, Validation Rules, Compact Layouts, etc) were included in the same package. The package.xml structure has been corrected to ensure proper handling of object subcomponents during deployment.
  • FLEXDEPLOY-14300 - Improved the integration of FlexDeploy project rollback with Salesforce especially with SFDX format projects.
  • FLEXDEPLOY-14590 – Resolved issues related to file deletion when using SFDX and Metadata API, ensuring proper handling in both regular and rollback deployment packages.
  • FLEXDEPLOY-14651 – When adding files to a package during Org-to-Org comparisons, the file source is now automatically set to either SCM or Salesforce, depending on whether the project is configured to use Source Control Management (SCM).
  • FLEXDEPLOY-14737 – Resolved an issue where Salesforce CLI JWT authentication failed on Unix environments.
  • FLEXDEPLOY-14825 - Resolved issues of custom objects being discovered as incorrect object types such as List Views.
  • FLEXDEPLOY-14828 - Resolved issues with comparison results when using the SFDX format, where certain object types (e.g., Custom Page Weblinks) were incorrectly displayed as WebLinks. Additionally, enhanced the performance of comparisons for SFDX project types.
  • FLEXDEPLOY-14879 - Resolved an issue where Salesforce API version detection could continue despite account connection failures, it now stops and reports the error.
  • FLEXDEPLOY-14913 - Resolved an issue where the version dropdown on the Package to Org tab was always showing the current date instead of the version creation time.
• Oracle EBS Plugin
  • FLEXDEPLOY-1726 – Resolved an issue where OAcore operations (startOAcore, stopOAcore, restartOAcore) were being marked as Successful even when errors were present in the server logs. The workflow will now correctly be marked as Failed if any errors are detected during execution.
  • FLEXDEPLOY-14840 - Restored the FD_AOL_TYPES constant, which was previously removed and caused issues with customer script overrides.
• OAuth with Oracle Cloud
  • FLEXDEPLOY-14922 - Resolved an issue where OCI Authentication could fail with the error “The resource does not support offline access” when using the OAuthResourceOwner authentication type. This affected multiple Oracle products, including SaaS FSM, Visual Builder, Analytics Cloud, Transactional BI, EPM, and Integration Cloud.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-14770 – Updated the Start Scheduled Request functionality to make the Run As User attribute optional in the payload. By default, this attribute remains enabled to ensure backward compatibility, but it can now be disabled by modifying the Run As User input as needed.
• SonarQube Plugin
  • FLEXDEPLOY-14748 – Resolved an issue where SonarQube scan results were always fetched from the main branch. FlexDeploy now correctly retrieves results from the specified branch, if configured and supported by the SonarQube edition.

​

FlexDeploy 9.0.0.8 (7-27-2025)

​

Application Updates

​

Security

• FLEXDEPLOY-14647 - Upgraded Tomcat to 9.0.106 to resolve vulnerabilities CVE-2025-46701, CVE-2025-48976, CVE-2025-48988, CVE-2025-49125, and CVE-2025-49124.
• FLEXDEPLOY-14659 - Upgraded Tomcat to 9.0.106 to resolve vulnerabilities CVE-2025-46701, CVE-2025-48976, CVE-2025-48988, CVE-2025-49125, and CVE-2025-49124.
• FLEXDEPLOY-14659 - Update Commons BeanUtils in the HTTPS Agent for CVE 2025-48734.

​

Folder

• The All tab (folder content view) for projects and releases now supports column-level filters, sorting, and saved queries. New displayed fields include last updated by/on, the next execution time for projects, and the pipeline for releases.

​

Project

• FLEXDEPLOY-8376 – Added a new Tags column to the Package List, enabling users to view, add, and remove tags directly from each package row for improved organization and usability.
• FLEXDEPLOY-9649 – Added a clickable link to the “Discover” text in the Add Files popup on the Package screen, allowing users to trigger the Discover action directly from the dialog.
• FLEXDEPLOY-14496 - Added sorting for Severity, Scan Rule, and Scan Component for scan results on workflow execution.

​

Release and Pipeline Management

• FLEXDEPLOY-14598 - The Update Change Tickets and Update Work Items steps now provide better file names for both single attachments and zipped attachments.

​

Salesforce

• FLEXDEPLOY-6140 – FlexDeploy now automatically detects the Salesforce API version at runtime, reducing the need to manually configure the FDSF_API_VERSION target property. Manual configuration is still supported for cases requiring a specific version. This enhancement improves reliability and minimizes configuration effort during Salesforce API upgrades.
• FLEXDEPLOY-7555 – The Development Org Type property in Salesforce Cloud accounts is now presented as a dropdown, improving usability and reducing input errors.
• FLEXDEPLOY-7201 - Added navigation link on Salesforce package screen to compare package with Salesforce Org.
• FLEXDEPLOY-14506 – Resolved an issue where the Salesforce SFDX comparison silently failed when the Salesforce CLI was not installed. A proper error message is now displayed in the UI.
• FLEXDEPLOY-14510 - Prior to FlexDeploy 9.0.0.8, the JWT Key was required to be present on the file system. When upgrading from FlexDeploy 9.0.0.7 or earlier, the Salesforce cloud account will automatically migrate to use a Private Key credential, eliminating the need to maintain the key on the file system. As a result, the JWT Key Path property is now replaced with the Private Key credential.
• FLEXDEPLOY-14679 - Improved the efficiency of adding dependent Profiles and PermissionSets.
• FLEXDEPLOY-14694 – Improved the performance of org-to-org comparisons by retrieving metadata from both orgs in parallel, significantly reducing comparison time.

​

Compliance & Audit

• FLEXDEPLOY-14448 - Addition and removal of work items related to packages are now captured in the change history report.

​

Groovy Function

• FLEXDEPLOY-14645 – Enhanced the FLEXDEPLOY.getPluginLogs function to include plugin and operation name details, providing better context in log retrieval.

​

Plugin Updates

• Oracle EBS Plugin
  • FLEXDEPLOY-948 - Added ADOP Operation to support actualize_all phase.
  • FLEXDEPLOY-8609 – The ADOP patch cycle status check now includes automatic retries—up to three attempts—if the initial check fails, improving reliability in transient failure scenarios.
• Oracle SaaS FSM Plugin
  • FLEXDEPLOY-14557 – The FileName attribute is now supported for single-attribute, value-based JSON inputs in the csvDownloadAdvanced operation.
• Azure Power BI Plugin
  • FLEXDEPLOY-14721 – Updated the ExportContent operation to skip workspace validation when the source is an SCM, streamlining execution and avoiding unnecessary checks.
  • FLEXDEPLOY-14724 - Special characters are now allowed in Workspace Name.
• Mule Plugin
  • FLEXDEPLOY-14584 - Mule Plugin build operation now allows passing additional Maven Arguments.
• OWASP Dependency Check Plugin
  • FLEXDEPLOY-14578 - Upgraded the bundled Dependency-Check version in the OWASP Dependency Check Plugin to 12.1.3 to address the following vulnerabilities: CVE-2025-27820 and CVE-2025-48734.

​

Resolved Issues

• Security
  • FLEXDEPLOY-14620 – Addressed an issue identified during internal testing where the “Remember Me” feature allowed previously authenticated local users to bypass key security checks - including account activity status, password expiration, and account lock status for up to one year.
• UI
  • FLEXDEPLOY-14752 - Resolved an issue with date time filters with filter type “between” that would cause incorrect form validation errors to appear.
  • FLEXDEPLOY-14780 - Resolved an issue causing a 500 splash screen to be displayed if accessing the home page from a new device.
• Release and Pipeline Management
  • FLEXDEPLOY-10905 – Resolved a regression introduced in version 9.0.0.7 that could cause errors when launching the Create Standalone Release popup. Additionally, the popup now clearly indicates the importance of selecting a Build Environment for continuous integration.
  • FLEXDEPLOY-14596 - Resolved an issue in the Update Change Tickets step causing not all attachments to be uploaded to a ticket if the ticket was associated with multiple packages or projects.
  • FLEXDEPLOY-14640 - The save draft button is now disabled while activating a pipeline version and vice versa.
  • FLEXDEPLOY-14785 – Resolved a regression introduced in version 9.0.0.7 that could cause the error [RelSnapshot] is required for [RelSnapshotDBRow]. when creating a snapshot.
• Salesforce
  • FLEXDEPLOY-12294 – Resolved an issue where metadata files were duplicated in the results list when performing org-to-org comparisons for SFDX-type projects.
  • FLEXDEPLOY-12840 - Resolved an issue where the Delete option could be enabled for a package file with a subcomponent selected. Only full files support the Delete option, so it is no longer shown for subcomponent files.
  • FLEXDEPLOY-14087 – Resolved an issue with Salesforce package deployments in SFDX project types where components such as MatchingRule, CustomLabel, and WorkflowAlert (with subcomponents) could cause deployment failures. The error message was: An object ’…’ of type MatchingRule was named in package.xml, but was not found in zipped directory. A new build using the 9.0.0.8 plugin is required if this failure was previously encountered.
  • FLEXDEPLOY-14173 – Resolved a NullPointerException that occurred when using the Compare Org feature in Salesforce projects where the target org had no associated build environments. The system now displays a meaningful error message instead of failing unexpectedly.
  • FLEXDEPLOY-14273 - When using Salesforce Org Management comparisons with the SFDX project type, profiles and permission sets are now correctly suffixed with -meta.xml. Additionally, validation has been added to ensure that a source control system is configured for SFDX projects.
  • FLEXDEPLOY-14594 - Resolved Salesforce test connection issue where connection previously succeeded despite expired user password, now it fails with appropriate error message.
  • FLEXDEPLOY-14649 – Resolved an issue where the Refresh button remained enabled in the Add Subcomponents popup, even when no Account was selected. The button is now correctly disabled until an Account is chosen.
  • FLEXDEPLOY-14663 – Resolved an issue with the Test Connection functionality for the “Developer Edition with DevHub (devhub)” org type. The system now checks for the Salesforce CLI installation and fails gracefully with a clear message if it is not found.
  • FLEXDEPLOY-14672 – Resolved a regression introduced in FlexDeploy 9.0.0.7 that could result in the error “Cannot invoke ‘java.util.List.size()’ because ‘typeMembers’ is null” when performing org comparisons in Salesforce projects.
  • FLEXDEPLOY-14736 – Resolved an issue where Salesforce CLI path validation failed when the specified path contained double quotes (”), even if the path was otherwise valid.
  • FLEXDEPLOY-14761 – Resolved issues where file types were incorrectly detected when comparing SFDX files between SCM and Org.
  • FLEXDEPLOY-14784 - Resolved an issue where the list of files was sometimes not automatically refreshing after using the Commit All option.
• Git Integration
  • FLEXDEPLOY-14720 – Resolved an issue that caused high CPU and memory usage in FlexDeploy when processing SCM commits containing a large number of files (100,000 or more).
  • FLEXDEPLOY-14368 – Resolved issues that occurred when files and branches shared the same name.
• Change Management
  • FLEXDEPLOY-14664 – Resolved an issue where processing tasks from an external change management system would fail if any individual task in a group of pending tasks failed for a project.
• Notification
  • FLEXDEPLOY-14662 – Resolved a regression in the IMAP email client introduced in versions 8.0.0.1 and 9.0.0.0, where processed emails were not deleted as expected. This led to increased server load and buildup of messages in the inbox over time. The issue has been resolved in versions 8.0.0.16, 9.0.0.8, and 10.0.0.0.
• Groovy Editor
  • FLEXDEPLOY-14610 - Resolved an issue causing for loop variables to not display correct suggestions if the “for” keyword did not have a space between itself and the opening parenthesis.
  • FLEXDEPLOY-14691 - Resolved an issue causing markdown to not render properly in the full screen field description.
• Outgoing Webhooks
  • FLEXDEPLOY-14626 - Resolved an issue where the Event Type filter dropdown was not sorted alphabetically.
• Oracle EBS Plugin
  • FLEXDEPLOY-1013 – Resolved an issue in EBS Workflow Services operations where success or failure messages were inaccurately reported, potentially leading to confusion about the actual execution status.
• Oracle EPM Plugin
  • FLEXDEPLOY-14741 - Resolved an issue where EDMCS Template files were not being discovered on projects where the discover snapshot project property was also defined.
• Oracle Database Plugin
  • FLEXDEPLOY-14617 – Resolved an issue in FlexDeploy versions 9.0.0.1 through 9.0.0.7 where Oracle Database projects incorrectly reported no changes and skipped files during deployments. This fix involves a server-side change; updating the plugin alone will not resolve the issue.
• Azure Power BI Plugin
  • FLEXDEPLOY-14727 – Resolved a PowerShell issue where the PSModulePath environment variable was incorrectly set.
  • FLEXDEPLOY-14740 - The Bind Connection operation now correctly handles UUIDs while mapping Semantic Models to an existing connection in Power BI.
• Various Plugins
  • FLEXDEPLOY-14729 – Resolved a regression introduced in FlexDeploy 9.0.0.5 that affected authentication with Oracle Cloud Infrastructure (OCI). The Helm, Kubernetes, OCI, and Oracle API Gateway plugins can now authenticate against OCI correctly.
  • FLEXDEPLOY-14739 - Resolved an issue where Oracle Cloud-related plugins may fail with a java.lang.NoClassDefFoundError: org/bouncycastle/asn1/ntt/NTTObjectIdentifiers when using OAuth authentication. This affects FlexDeploy versions 9.0.0.5, 9.0.0.6, and 9.0.0.7.

​

FlexDeploy 9.0.0.7 (6-14-2025)

​

Application Updates

​

Security

• FLEXDEPLOY-10659 - Upgraded the bundled Dependency-Check version in the OWASP Dependency Check Plugin to 12.1.0 to address the following vulnerabilities: CVE-2024-34447, CVE-2024-29857, CVE-2024-25710, CVE-2024-47554, CVE-2023-2976, CVE-2022-45868, CVE-2023-6378, CVE-2023-6378, CVE-2024-45772, and CVE-2024-47554.
• FLEXDEPLOY-14487 – Added three new columns to the Security → Users list: Password Updated On, Password Expires On, and Password Expired. Additionally, users who are locked or have expired passwords are now highlighted in red within the table. On the user details page, subtext has been added below the password field to display the password’s last update date and expiration status.
• FLEXDEPLOY-14541 – The Credential Show Usages feature has been enhanced to display usage within OAuth application properties as well. This improvement ensures more accurate visibility into where a credential is used. Additionally, if a credential is referenced by an OAuth application property, a clear error message will now be shown when attempting to delete it, explaining why the deletion is not permitted.
• FLEXDEPLOY-14579 – Upgraded Apache Commons BeanUtils in the Salesforce and Jenkins plugins, as well as the FlexDeploy application, to address vulnerability CVE-2025-48734.

​

Projects

• FLEXDEPLOY-3284 – FlexDeploy now provides an option to inactivate a successful build when necessary. Users must supply a reason for inactivation. This feature is useful in scenarios where a specific build version should not be deployed. Inactivated builds can be reactivated later if needed.
• FLEXDEPLOY-14291 – FlexDeploy now allows users to add or remove work items from a build execution. This feature is useful for correcting errors such as typos in SCM commit messages that prevented the correct work items from being associated with a build version. Note that changes to work item associations do not affect deployments already performed for that build version; work items associated at the time of deployment will continue to show as deployed, even if they are later removed or added.
• FLEXDEPLOY-13092 - Enhanced build execution performance for projects using Microsoft TFS as the source control system.
• FLEXDEPLOY-14592 - Enhanced build execution performance for projects using PVCS as the source control system.

​

Release and Pipeline Management

• FLEXDEPLOY-14065 - Enabled Groovy expression support for all Release settings.
• FLEXDEPLOY-14337 - Introduced a new Release setting: Default Build Environment Name, which is used when adding a project or package to a Release.

​

Topology

• FLEXDEPLOY-14587 - The Topology Target page header will now be pinned to the top of the page while scrolling.

​

Integrations

• FLEXDEPLOY-7128 – The default value for the Jira REST API pattern used in Jira integration has been updated to “/rest/api/3/issue/{JIRA_ISSUE}”. For existing Jira integration instances, we recommend updating the API version to 3 (from the previous default of version 2) if you haven’t already done so. This update enhances the integration between FlexDeploy and Jira for various actions.
• FLEXDEPLOY-11409 – Added support for customizing Commit, File Content, and File Content Commit URLs for TFS integration instances.
• FLEXDEPLOY-14311 – Added support for customizing Commit, File Content, and File Content Commit URLs for Subversion integration instances.
• FLEXDEPLOY-14158 - Added Test connection support for ApigeeX cloud accounts.

​

Outgoing Webhooks

• FLEXDEPLOY-6374 – Added the pipeline stage execution info field to the Pipeline Stage Completed event payloads for outgoing webhooks.
• FLEXDEPLOY-12318 - New outgoing webhook events have been added - Blackout Window Started and Blackout Window Ended.

​

OAuth Applications

• FLEXDEPLOY-14482 - Microsoft OAuth applications will now have two authorize options: “Authorize” and “Authorize - Force Consent”. Generally the first option can be used but when an app has been authorized the underlying permissions defined in the application change, then the app must be reauthorized with force consent, otherwise the new application permissions will not be applied.
• FLEXDEPLOY-14503 - Added support for connecting to Azure DevOps using Microsoft Entra tokens. New OAuth Application types are available in System Settings -> Integration Settings.

​

Groovy Functions

• FLEXDEPLOY-5553 – Deprecated pipeline Groovy methods that referenced target groups as “instances.” Introduced new methods using the correct “target group” terminology to replace the deprecated ones.

​

Blueprints

• FLEXDEPLOY-6450 – Blueprints now support the creation of Oracle CPQ projects.
• FLEXDEPLOY-6523 – The Parsing Schema field is no longer required in the APEX Blueprint.

​

Plugin Updates

• Oracle EBS Plugin
  • FLEXDEPLOY-14566 – Enhanced EBS Forms deployment to better support precompiled .fmx files. FlexDeploy now copies .fmx files directly during deployment, bypassing the compilation process, which is only required for .fmb files.
  • FLEXDEPLOY-6435 – FlexDeploy now provides clear and descriptive error messages when required custom properties, such as the database user and password, are missing or not assigned for the XDF object type.
• OWASP Dependency Check Plugin
  • Added optional input for the NVD API key, used in Dependency-Check version 9 and above, to enable unthrottled access to NVD database updates. Currently 12.1.0 is shipped in the OWASP Dependency Check Plugin.
• Oracle SaaS FSM Plugin
  • FLEXDEPLOY-14374 - A new documentation page Oracle FSM Privileges that describes more granular privileges/roles needed by the FSM Plugin.
• Oracle EPM Plugin
  • FLEXDEPLOY-14518 – Enhanced support for forward slashes (/) in template and dimension names.
• Maven Plugin
  • FLEXDEPLOY-14527 - Added an input to set an alternate Java Home. If it is specified, it is used. Otherwise the endpoint’s Java Home is used.
• XPATH Plugin
  • FLEXDEPLOY-14303 – Added a new input option to enforce non-blank output. When enabled, the plugin operation will fail if the generated output is blank.
• Mule Plugin
  • FLEXDEPLOY-14581 - Added the Surefire Report processing jar to allow the Mule plugin to handle running tests.

​

Resolved Issues

• General
  • FLEXDEPLOY-10709 - Resolved an issue where FlexDeploy with embedded PostgreSQL failed to start Tomcat when JAVA_HOME derived from the Windows Registry contained spaces.
• Migration / Upgrade
  • FLEXDEPLOY-14571 – Resolved an issue where workflow migration from version 5.7 to 8.0 or later could fail with the error: flexagon.fd.model.jaxb.plugindef.Operation.getEndPointSpecification() due to a null “operation” object.
• Security
  • FLEXDEPLOY-14549 – Resolved an issue where local users who had previously logged in with the “Remember Me” option enabled could potentially bypass password expiration and account lockout policies.
  • FLEXDEPLOY-14521 - Resolved an issue causing password expiration emails to be sent to inactive user accounts.
• Projects
  • FLEXDEPLOY-9382 – Resolved an issue that prevented deletion of folders containing prior executions.
  • FLEXDEPLOY-14615 – Resolved a “java.lang.IllegalArgumentException: fromIndex(4) > toIndex(3)” error occurring with PVCS integration during build request submission. Additionally, to improve performance with large repositories, if no previous revision is found, the latest commit will now be searched only within the last 90 days.
• Salesforce
  • FLEXDEPLOY-14372 – Resolved an “Internal Error - java.lang.NullPointerException” that occurred during the commit files operation for Salesforce when deleted files were present in the compare results.
  • FLEXDEPLOY-14556 – Resolved “java.lang.IllegalStateException: Duplicate key… (attempted merging values)” error encountered during discover files from Salesforce when using the SFDX format.
• Change Management
  • FLEXDEPLOY-14458 – Improved the status query process for change tickets from the change management system. Tickets associated with pending tasks are now queried in batches. If a batch query fails, each ticket is queried individually. Additionally, when a ServiceNow integration is configured with a limit of 1, this restriction is bypassed during batch processing.
• Integrations
  • FLEXDEPLOY-14591 – Resolved an issue where the TFS integration test connection feature which incorrectly treated domain.visualstudio.com URLs as invalid due to an improper expectation of a collection name in the URL.
• OAuth Applications
  • FLEXDEPLOY-14533 - Resolved an issue that would sometimes cause OAuth apps in the user profile screen to display the wrong connected status.
• Incoming Webhooks
  • FLEXDEPLOY-14543 - Resolved an issue preventing more than 50 webhook providers being shown in the provider dropdown on the Edit Function screen.
  • FLEXDEPLOY-14560 – Resolved a display-only issue where incoming webhook header and query parameter values containing commas were not shown correctly.
• Blackout Windows
  • FLEXDEPLOY-14565 - Resolved an issue in which blackout window start and end times would not be resolved properly if specifying a timezone. This fix also resolves similar issues on other date time inputs where timezone is allowed, such as request start time on the Workflow Request form.
• Blueprints
  • FLEXDEPLOY-11480 - Resolved an issue where blueprint failed to create SCM Integration Instance if SCM URL contained encoded space (%20).
• Oracle EPM Plugin
  • FLEXDEPLOY-14625 - Resolved an issue with EDMCS template deployments where only the first dimension within an application would be deployed when a package contained multiple dimensions from the same application.
• Oracle SOA Plugin
  • FLEXDEPLOY-14568 – Resolved a composite deployment error (java.lang.NumberFormatException) occurring when using server revision for a composite that has never been deployed. The plugin now correctly deploys the composite with a version of 1.0 in this scenario.
• Oracle Apex Plugin
  • FLEXDEPLOY-14436 - Resolved an issue with exporting APEX applications from version 5.1.4 and earlier where lines in the output file were missing.
• Azure Plugin
  • FLEXDEPLOY-14609 - Resolved an issue where Windows endpoints were not able to execute the build pipeline operation. Using cli version 2.53.1 is recommended.

​

FlexDeploy 9.0.0.6 (5-11-2025)

​

Application Updates

​

General

• FLEXDEPLOY-8030 - FlexDeploy will now render an error banner for critical errors that occur in the application. At this time, critical errors include migration errors during upgrades of the FlexDeploy application and errors with email configuration and processing.
• FLEXDEPLOY-13432 – Oracle Database: Added support for OJDBC17 drivers. For versions prior to 9.0.0.6, it is recommended to continue using OJDBC8 drivers. OJDBC8 and OJDBC17 are both JDBC (Java Database Connectivity) drivers provided by Oracle. The difference between them primarily lies in the version of Java they target and support.

​

Security

• FLEXDEPLOY-14437 – Updated FlexDeploy Docker images to address the CVE-2025-32433 vulnerability.
• FLEXDEPLOY-14473 - Upgraded Tomcat to 9.0.104 to resolve vulnerabilities CVE-2025-31650 and CVE-2025-31651.

​

HTTPS Agent

• FLEXDEPLOY-14473 - Upgraded Tomcat to 9.0.104 to resolve vulnerabilities CVE-2025-31650 and CVE-2025-31651.
• FLEXDEPLOY-8606 – Aligned with localhost endpoint behavior: when a new plugin is installed, older versions are deleted, retaining only the two most recent versions.
• FLEXDEPLOY-8607 – Reduced the minimum memory setting for the HTTPS agent process to optimize memory usage on the endpoint.

​

Projects

• FLEXDEPLOY-14161 – Added support for removing Custom File Type Attributes, even when they are used by project files. All usages of the attribute will be removed as part of the process, with a confirmation prompt shown before the action is performed.
• FLEXDEPLOY-14417 - The responsiveness of the Project Execution List screen has been improved. The changes allow will allow more data to be seen on smaller screens as well as prevent content overlap.
• FLEXDEPLOY-14477 - Enhanced build execution performance for projects using Surround SCM as the source control system.

​

Release and Pipelines Management

• FLEXDEPLOY-14341 – The ‘Test All’ and ‘Test’ pipeline steps now also include Utility projects defined in the Release Definition.

​

Salesforce

• FLEXDEPLOY-12750 - Packages now support adding dependent profiles and permission sets for a selected set of files in the package rather than only the entire package.
• FLEXDEPLOY-13624 - Salesforce compare result now has a Show Selected Only filter option which can be used to review all selected items before committing/add them to a package.

​

Compliance and Audit

• FLEXDEPLOY-14310 – Updates to project packages are now recorded in the Change History Report.
• FLEXDEPLOY-14340 – Updates to Ticket Fields on the CMS Provider are now recorded in the Change History Report.

​

Integrations

• FLEXDEPLOY-1432 - Added Test Connection support for Microsoft TFVC SCM integration in FlexDeploy.
• FLEXDEPLOY-14113 - FlexDeploy now caches access tokens for Thycotic and Delinea Secret Server API calls, improving efficiency and reducing server load.
• FLEXDEPLOY-14438 - Credential values are now cached. The cache lifetime is configurable in System Settings -> General Settings. There is also an option to force clear the credential cache in System Settings as well.

​

Groovy Functions

• FLEXDEPLOY-4417 – Introduced a new function createOrUpdatePackage to update an existing package or create one if it doesn’t exist. Also added getOrCreateBranchId to retrieve the branch Id or create it if it doesn’t exist.
• FLEXDEPLOY-13805 – Added support for scheduled start time when using the executeUtility method in the FLEXDEPLOY Functions class to trigger utility executions.
• FLEXDEPLOY-14306 – Introduced a new function getBuildWorkflowExecutionFiles to retrieve file details associated with package build executions. Also introduced getDeployWorkflowExecutionFiles to retrieve file details for package deploy executions.

​

Purge

• FLEXDEPLOY-14286 - Simplified the purge process for package-based projects, resulting in improved speed and efficiency.

​

Plugin Updates

• Oracle SaaS FSM Plugin
  • FLEXDEPLOY-13397 - Export and import of lookup files will now correctly bring across DFF values if found.
  • FLEXDEPLOY-13771 - The csvImport operation will now import Value Set values through Oracles REST API when possible. This resolves an issue where the Summary, Allow Posting, and Allow Budgeting fields of Value Set values would not be migrated. A new file attribute has also been added “Disable Missing Values” on Value Set files. When checked, we will disable values that are in the target environment but not found in the Value Set being imported.
  • FLEXDEPLOY-14085 - The FSM Plugin will now retry rest calls while checking csv export and import statuses if the call fails due to connection errors.
  • FLEXDEPLOY-14227 – Added an input option to the csvExport operation that allows the export process to continue with remaining package files even if a failure occurs.
• Oracle EBS Plugin
  • FLEXDEPLOY-6435 – FlexDeploy now displays clear and descriptive error messages when required custom properties for DB user and password are missing or unassigned in SQL and DATAFIX object types.
• Oracle EPM Plugin
  • FLEXDEPLOY-9402 - A validation has been added for snapshot related project property values to align with Oracle’s supported characters for snapshot names. The following characters will not be allowed - : \ / * ? " < > |
  • FLEXDEPLOY-14459 - Enterprise Data Management template deployments now support application-level templates. Applications will be discovered in the file catalog and will import both the application and all of its dimensions.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-14335 – Added a new exportLibraries operation that accepts a CSV list of Library Identifiers as input for exporting library details.
  • FLEXDEPLOY-14388 – Added a new exportProjects operation that accepts a CSV list of Project Identifiers as input to export the corresponding projects.
  • FLEXDEPLOY-14356 – Added an Export Folder input to the exportConnection, exportLibrary, and exportLookup operations. If an absolute path is provided, it will be used; otherwise, a subfolder within the artifacts directory will be used.
  • FLEXDEPLOY-14454 - exportIntegrations operation now allows use of absolute path for Export Folder input.
• Various Plugins
  • FLEXDEPLOY-14364 - Updated various script-type FlexDeploy plugins (Shell, Windows, PowerShell, Git, Azure, AWS, Docker, EBS, Gradle, Grunt, Helm, Kubernetes, Node, Maven, MSBuild, PMD, Postman, SoapUI, SqlPlus, Terraform, UTPLSQL) to display error messages on the workflow execution summary page upon failure.

​

Resolved Issues

• General
  • FLEXDEPLOY-14344 – Resolved an issue that triggered the error “ORA-01460: unimplemented or unreasonable conversion requested” when querying long string data in an Oracle database.
• HTTPS Agent
  • FLEXDEPLOY-14449 – Resolved a regression introduced in 9.0.0.2 where plugins were installed on every execution for endpoints using the HTTPS agent. Plugins will now only be installed if a new version is available and the previously installed version has changed on the endpoint.
• Projects
  • FLEXDEPLOY-14144 - Resolved an issue where encrypted workflow variables used in plugin inputs may appear in clear text when viewing the Input in the Plugin Execution Popup.
  • FLEXDEPLOY-14146 - Resolved an issue causing updates to encrypted Workflow Variables in the Run Groovy step to appear in plain text when viewing the Workflow Execution Details.
  • FLEXDEPLOY-14200 - Resolved an issue where error messages from project file discovery weren’t visible when a popup was opened.
  • FLEXDEPLOY-14474 - Reverted the change introduced in 9.0.0.5 that required a Force Build for the initial build of a branch and project/package combination. As before, these initial builds will not capture any change logs.
• Release and Pipelines Management
  • FLEXDEPLOY-14479 - Resolved an issue when using a Pipeline Property of type Date that would cause Release execution to fail with the error: No enum constant flexagon.fd.model.enums.release.VariableTypeEnum.DATE.
  • FLEXDEPLOY-14389 – Resolved an issue where selecting an older version of a Project/Package in a release snapshot caused it to be replaced by the latest version during the next scheduled snapshot. The system will now retain the user-selected version and only update to versions newer than the selected one.
  • FLEXDEPLOY-14426 - Resolved an issue that prevented users from switching between tabs on the Approval Gate in the Release Dashboard when using the “Classic” view. This was a regression introduced in version 9.0.0.5 as part of FLEXDEPLOY-14261.
  • FLEXDEPLOY-14450 - Resolved an issue that would sometimes cause an newly added pipeline step to remain in the canvas after cancelling it the configuration popup.
• Topology
  • FLEXDEPLOY-14491 - Resolved an issue that would cause duplicate Salesforce accounts to be selected in Topology Properties if editing and saving the currently selected account.
• Salesforce
  • FLEXDEPLOY-14293 - Updated the Salesforce integration to resolve errors, including “unexpected element (uri: ‘http://soap.sforce.com/2006/04/metadata’, local: ‘externalCredentialPrincipalAccesses’)”, which occurred when users clicked Discover Profiles or Permission Sets.
• Integrations
  • FLEXDEPLOY-14281 – Resolved an issue with the “Test Connection” for database credentials with SQL Server, which previously failed with the error: “The data type of connection property socketTimeout is not valid. All the properties for this connection must be of String type.”
  • FLEXDEPLOY-14367 - Improved error messaging when deleting CMS provider ticket fields mapped to deploy approvals. Users now see a clear explanation instead of just showing Internal Error - Constraint violation.
• Groovy Functions
  • FLEXDEPLOY-14365 – Resolved an issue where the searchByTag method did not return accurate results for pipeline and webhook scripts. The method now returns the correct results.
  • FLEXDEPLOY-14425 – Resolved a ClassCastException that occurred when processing webhook payloads from GitHub, triggered by an empty or non-JSON head_commit field.
• Groovy Libraries
  • FLEXDEPLOY-14478 - Saving a Groovy Library that uses certain disallowed functions or classes will now trigger an error.
• Oracle EBS Plugin
  • FLEXDEPLOY-14410 – The supported AOL object type list (FDC.FD_AOL_TYPES) has been removed from FlexDeploy constants. This is a potentially breaking change for custom default value scripts that reference this constant. Scripts should now define the required AOL types directly within the script instead of relying on the FlexDeploy constant.
• Salesforce Plugin
  • FLEXDEPLOY-14292 - Resolved an issue where SFDX builds were failing when selecting the Delete option on a package file.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-14452 – Resolved an issue where OIC Connections were deployed using the Identifier (code) as the Connection name instead of the Display Name. Builds done with version 9.0.0.6 or later will deploy with the correct name.
• Oracle EPM Plugin
  • FLEXDEPLOY-14430 - Resolved an issue where exporting a template file was throwing a 400 response error.
  • FLEXDEPLOY-14460 - Resolved an issue with the download snapshot operation where a null pointer exception was thrown when the snapshot to download property was not provided.
  • FLEXDEPLOY-14463 - Resolved an issue where builds were continually running and artifacts folder was taking up large amounts of space. 9.0.0.5.x plugin versions are affected.
  • FLEXDEPLOY-14471 - Resolved an issue where snapshot related project property values couldn’t be cleared even though they were optional. Now, empty values are supported for these properties when exporting only template files in a project.
• Oracle Database Plugin
  • FLEXDEPLOY-12528 - Resolved an issue where grants were being applied before the corresponding views were created, resulting in the error: “ORA-00942: table or view does not exist.”
• Docker Bench Plugin
  • FLEXDEPLOY-10410 - Docker Bench plugin now generates the scan results.
• REST Plugin
  • FLEXDEPLOY-14177 – Response media type application/zip is now correctly handled, and such responses will be saved as ZIP files instead of text files.

​

Incompatible Changes

• FLEXDEPLOY-14438 - Credential values are now cached now for 60 minutes. If this causes any issues, you can adjust cache timeout in System Settings -> General Settings. There is also an option to force clear the credential cache in System Settings as well.
• FLEXDEPLOY-14474 - Reverted the change introduced in 9.0.0.5 that required a Force Build for the initial build of a branch and project/package combination. As before, these initial builds will not capture any change logs.

​

FlexDeploy 9.0.0.5 (4-12-2025)

​

Application Updates

​

General

• FLEXDEPLOY-13531 - Blueprints now support the creation of Power BI projects, streamlining setup and configuration for Power BI deployments.
• FLEXDEPLOY-13437 - Improved the performance of the Tasks Report, with significant gains for customers using Oracle Database. The underlying query has been optimized for better performance across all supported platforms.

​

Security

• FLEXDEPLOY-12551 – Introduced a new global permission: Blackout Window. This permission allows administrators to control who can create, update, or delete blackout windows. Previously, only users with the FlexDeploy Administrator role could manage blackout windows.
• FLEXDEPLOY-12631 – Added a new system setting: Disable ‘Just In Time’ User Creation. When enabled, users will no longer be automatically created in FlexDeploy upon logging in via an external LDAP or SSO realm. Instead, users must be manually created in advance.
• FLEXDEPLOY-14207 - Upgraded SSHJ to version 0.39 and BouncyCastle to version 1.80 for improved security and compatibility.

​

Compliance & Audit

• FLEXDEPLOY-14217 - Changes to Credential Store Providers as well as the addition, update, and deletion of properties and credential inputs, are now recorded in the Change History report.
• FLEXDEPLOY-14248 - Changes to custom Property key definition are now captured in the change history report.

​

Projects

• FLEXDEPLOY-14191 - File paths in File Catalog are now left-truncated so names are always visible.

​

Release and Pipeline Management

• FLEXDEPLOY-13939 - Groovy libraries and pipeline script variables can now be accessed in the List Data, Default Value, and Validation scripts for Input Fields in the Pipeline Manual Step definition.
• FLEXDEPLOY-14201 - Update Work Items and Update Change Tickets step now display log messages generated during script execution, improving visibility and troubleshooting.
• FLEXDEPLOY-14283 - Work items from intermediate build versions—those between the previous snapshot version and the new one—are now automatically included in the release, ensuring all relevant work items are captured and tracked in the release process.
• FLEXDEPLOY-14329 – The code editor will no longer save drafts for Pipeline Custom Step and Custom Gate scripts, resolving confusion when viewing previous pipeline versions.
• FLEXDEPLOY-14360 - The snapshot comparison popup has been updated to always display “Out of Date” snapshots in the snapshot select dropdown.

​

Git Integration

• When there is no previous build, FlexDeploy will attempt to identify commits specific to the branch being built. However, this process may not always capture all relevant commits. Previously only first matching commit on the branch was used.
• In scenarios where changes are merged into the main branch via a pull request (PR), the first build on the main branch may require a Force Build, as initial change logs might not be detected. Subsequent builds will behave as expected and correctly capture the change logs.
• If the repository contains no change logs, a Force Build will also not display any changes, and the commit will not be visible on the project executions page.
• These improvements strengthen visibility and traceability across builds, enhancing value stream metrics and tracking processes that rely on Git commits and work item detection through commit messages.

​

Salesforce

• FLEXDEPLOY-12634 - A new option has been added to include Profiles and Permission Sets during compare.
• FLEXDEPLOY-13995 - Upgraded to Salesforce API Version 63.0 (Spring ’25). The following new metadata types are now supported:
  • DataObjectSearchIndexConf, ExperiencePropertyTypeBundle, CustomFieldDisplay, PricingActionParameters, and PricingRecipe.
• FLEXDEPLOY-14192 - The Salesforce Org Management screen now supports exporting compare results to a CSV or PDF file.

​

Replacements

• FLEXDEPLOY-14180 - Added support for regex-based replacement with a new option. When isReplaceRegex is set to true in YAML configuration, the replacement string can reference capture groups using $1, where $1 corresponds to the first match group defined using (). If no capture groups are defined, using $1 will result in an error. If `isReplaceRegex` is not specified, the replacement value is automatically quoted, and $1 will be treated as a literal string rather than referencing a match group.

​

Purge

• FLEXDEPLOY-14107 - Added support for purging blackout window history records. This is configurable via the Purge Settings page using the Retention Days for Executions property.

​

System Settings

• FLEXDEPLOY-14076 - Added a setting to automatically delete working directory folders on both the Server and Endpoint that were created more than a specified number of hours ago. By default, this is set to 24 hours, aligning with the previous behavior.
• FLEXDEPLOY-14072 - OAuth applications can now be edited, created, and authorized directly from the application select dropdown on Email Settings.

​

User Profile

1. Release Definition View Tab – Allows users to choose a default tab (“Content” or “Work Items”) when opening the Release Definition page. Previously, the last selected tab was remembered automatically. Now, this behavior is controlled by the new setting. The default is “Content”, unless the “Remember Page State” setting is enabled, in which case the last viewed tab will be used.
2. Release Dashboard Deploy Preview Tab – Lets users set a default tab (“Projects,” “Work Items,” or “Commits”) for the deploy preview shown in Approval, Scheduled, or External Approval gates on the Release Dashboard. The default is “Projects”, but this too is overridden if “Remember Page State” is enabled.

​

Code Editor

• FLEXDEPLOY-14309 - Parenthesis are now added automatically when accepting a function or method from the suggestion menu.

​

HTTPS Agent

• FLEXDEPLOY-14272, FLEXDEPLOY-14326 - Upgraded Tomcat to 9.0.102 to resolve vulnerability CVE-2025-24813.

​

Plugin Updates

• Oracle EBS Plugin
  • FLEXDEPLOY-14216 - Updated the Deactivate, Activate, and Abort Workflow Services operations to recycle workflow services at the container level.
• Oracle EPM Plugin
  • FLEXDEPLOY-13727 - Oracle EPM projects now support discovery and deployment of dimension-level template files for Enterprise Data Management (EDM) instances.
• Oracle Analytics Cloud Plugin
  • FLEXDEPLOY-12929 - Added support for RPD (Repository) migration. RPDs can now be migrated using new dedicated operations as well as the existing package build and deploy processes. Enhancements include:
    • Support for updating the RPD using XUDML and/or JSON.
    • Ability to update the RPD password during migration.
    • A new operation to download the connection pool JSON, allowing users to modify and store it for use in migrations.
    • These features require the OAC Client Tools to be installed on the migration endpoint.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-14204 – The agentDefinition parameter is now applied during the Update Connections step, after the deployment of the Integration or Project, instead of before deployment. This update resolves 412 errors when deploying modified files to Oracle.
  • FLEXDEPLOY-14236 - Added support for OIC Projects with following features:
    • Build and Deploy Projects
    • Update connection properties
    • Download connection plans
    • Activate / Deactivate integrations
    • Start, Stop, Pause, and Resume schedules
    • Sync to SCM
  • FLEXDEPLOY-14355 OIC - The activateIntegration operation now throws an exception if the integration was not able to be activated.
• Oracle Cloud Infrastructure Plugin
  • FLEXDEPLOY-11440 - Enhanced the OCI plugin to use a Private Key Credential instead of a filesystem-based private key file, improving overall security.
• SoapUI Plugin
  • FEXDEPLOY-14181 - SoapUI plugin now fails if test XML file is not provided or does not exist.
• Postman Plugin
  • FLEXDEPLOY-14266 - Postman plugin now fails if postman collection is not provided or does not exist.
• REST Plugin
  • FLEXDEPLOY-14176 - Refined the Display Name and Description for FDR_REQUEST_MEDIA_TYPE and FDR_REQUEST_BODY_MEDIA_TYPE in REST plugin operations to better reflect their purpose.
• Terraform Plugin
  • FLEXDEPLOY-14214 - Introduced a new plugin input to enable or disable property replacement, with the default set to true. Property replacement is automatically disabled when the chdir option is specified.

​

Resolved Issues

• Migrations
  • FLEXDEPLOY-14318 – Resolved an issue with workflow source migration where plugin-defined endpoint selection and execution details were not being migrated. If you upgraded from version 7.0 or earlier to 8.0.0.12 or 9.0.0.4 or a previous version and using ADF, EBS, Oracle BI, Oracle API Platform, Oracle Forms, PeopleSoft, SAP, Siebel, WebLogic, WebMethods, Wildfly, or Mule Plugins, please verify the Endpoint Selection and Execution settings for workflows utilizing these plugins.
• General
  • FLEXDEPLOY-14223 - Resolved a performance regression present in 9.0.0.0-9.0.0.3 of the pipeline definition and workflow screens.
  • FLEXDEPLOY-14259 - Resolved an issue where property list data scripts would not validate correctly if the script resulted in a list of Strings and nested Arrays.
  • FLEXDEPLOY-14332 - Resolved a regression resulting from FLEXDEPLOY-13011 causing filter date displays to appear as the millisecond value as opposed to a properly formatted date.
• Projects
  • FLEXDEPLOY-10811 - Resolved an issue where plugin execution on Windows SSH Endpoint prints “File Not Found” at the end in plugin logs even after successful execution.
  • FLEXDEPLOY-13583 - Consistent Handling of Hidden Workflow Request Input Values: Workflow request input values are now consistently marked as null for both UI and API requests. While UI forms do not send data for hidden inputs, this update ensures that hidden values are properly marked as null in all scenarios, providing consistent behavior across both UI and API requests.
  • FLEXDEPLOY-14298 - Resolved an issue where the Project Executions page did not consistently display the latest commit.
• Workflow
  • FLEXDEPLOY-14233 - Resolved an issue where the “Invoke Workflow” step input, defined as an expression, was inadvertently encrypted during the save workflow process.
• Release and Pipeline Management
  • FLEXDEPLOY-14246 - Resolved a rare issue where copying stages with several steps would not generate unique step ids or numbers and result in errors when saving.
  • FLEXDEPLOY-14320 - Resolved a styling regression introduced in 9.0.0.2 causing pending stage icons to appear almost invisible on the release dashboard focused view.
  • FLEXDEPLOY-14329 - The code editor will no longer save drafts for the custom script input in Pipeline Custom Step and Custom Gate definitions. This caused confusion when viewing prevision pipeline versions.
  • FLEXDEPLOY-14330 - Resolved a regression in version 8.0.0.6 that could cause External Gate Approvals to not continue, even when the external approval was in an approved status. This issue occurred specifically when using FD_ENVIRONMENT_CODE in the Approval Script.
  • FLEXDEPLOY-14350 - Resolved an issue Approval Gate and Schedule Gate details causing the Work Items tab to be in an indefinite loading state. This issue occurs if more than 50 work items are being deployed in the snapshot.
• Rollback
  • FLEXDEPLOY-14299 - Resolved an issue where package files were not auto-sequenced when creating a package. This caused package-based rollback requests to error on submit, and also affected the REST API.
  • FLEXDEPLOY-14334 - Resolved an issue for Rollback Request Form where the rollback files tab was showing each file twice when the deploy workflow invoked a child workflow.
• Salesforce
  • FLEXDEPLOY-13062 - Resolved an issue where the UI would allow a user to commit files and add them to a package without read permission, and then an error was shown. These actions require project configure and execute permissions.
  • FLEXDEPLOY-14178 - Resolved an issue where dynamic packages were showing as an option to add committed objects to package.
  • FLEXDEPLOY-14293 - Updated the Salesforce integration to address errors such as unexpected element (uri:"http://soap.sforce.com/2006/04/metadata", local:"externalCredentialPrincipalAccesses") when users clicked Discover Profiles or Permission Sets.
  • FLEXDEPLOY-14296 - Resolved an issue where files were being skipped during deployment after the first time they were deployed, even if there were new changes to deploy. This only applied when using SFDX source format within a Salesforce project.
• Work Items
  • FLEXDEPLOY-13895 - Resolved an issue while loading the Work Items list screen that would result in an error being displayed: “API Transaction already in progress”.
• Change Management
  • FLEXDEPLOY-14280 - Resolved a regression issue introduced in version 9.0.0.4, where updates to custom ticket fields in the CMS Provider triggered the error: “Change Management System is read-only and cannot be updated or deleted.”. Additionally, addressed an issue where the Save button remained disabled after adding a ticket field in the out-of-the-box Change Management System provider..
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-14203 - Resolved an issue where agent definitions were still being updated even when Input Update Connection Mode was set to NONE. Agent updates now correctly respect this setting and will no longer occur when set to NONE.
  • Plugin input Start Schedules now correctly controls whether the file attribute is used during OIC Integration deployment. If unchecked, the file attribute Start Schedules is ignored as expected.
• PeopleSoft Plugin
  • FLEXDEPLOY-9505 – Resolved an issue where the PeopleSoft plugin deploy operation did not fail despite errors in the log file. The plugin now validates logs and triggers a clear exception when errors are detected, improving both reliability and error visibility.

​

Incompatible Changes

• GIT Integration
  • A Force Build may be required when initiating the first build for the Git branch and project/package combination, particularly when changes are introduced via pull request merges. In such cases, initial change logs will not be detected.
  • Additionally, if no changes exist in the repository branch, a Force Build will not display any changes, and the associated commit will not appear on the project executions page.
• Other SCM Integrations
  • A Force Build will be required when initiating the first build for the branch and project/package combination.
  • Additionally, if no changes exist in the repository branch, a Force Build will not display any changes, and the associated commit will not appear on the project executions page.

​

FlexDeploy 9.0.0.4 (3-15-2025)

​

Application Updates

​

General

• FLEXDEPLOY-14213 - Upgraded Tomcat to 9.0.102.

​

Security

• FLEXDEPLOY-14139 - Updated version of pac4j library used for single sign-on.
• FLEXDEPLO.Y-14206 - Update Netty dependencies in the Azure PowerBI plugin to resolve vulnerability CVE-2025-24970.

​

Compliance & Audit

• Changes made in System Settings > Integration Settings (OAuth Applications) are now captured in the change history report. Additionally, authorize and revoke actions for OAuth Applications are now tracked in the change history report.
• Description change for Workflow and FlexField is now captured in the change history report.
• Changes made in Integration > Providers along with addition and removal of properties is now captured in the change history report.
• Creation and deletion of tags is now captured in the change history report.
• Tag assign and unassign for Project, Package, Work Item, Release, Workflow, Target Group, Environment, and Endpoint is now captured in the change history report.

​

Release and Pipeline Management

• FLEXDEPLOY-13446 - The “Change History” section has been removed from the Insights tab for Standalone Releases, as there is only one package in a standalone release there will be no changes to the content.
• FLEXDEPLOY-13876 - Added the option to change the status of a change ticket during the “Update Change Tickets” pipeline step. The input can also be a Groovy expression, allowing for the assignment of different statuses based on the change ticket.
• FLEXDEPLOY-14074 - The Projects tab on the Approval, External Approval, and Schedule Gate will now only display snapshot content that is scheduled for deployment or has already been deployed in the stage, aligning with the Work Items and Commits tabs. Utility projects will be excluded. A new column has also been added to indicate whether the content was force-deployed. Once the stage completes, Gates will display the content that was actually deployed during the stage execution. Additionally, performance improvements have been implemented to handle a large number of projects more efficiently.
• Compare snapshot feature now also shows Target Group in the compare result.
• FLEXDEPLOY-14102 – Improved performance for release execution when the snapshot includes a large number of projects.

​

Integrations

• FLEXDEPLOY-13202 - Integration accounts can now be edited and created directly on the Target Properties page or Plugin Inputs popup.
• FLEXDEPLOY-4323 - Added Test connection support for Oracle CPQ Cloud accounts.
• FLEXDEPLOY-11989 - Added Test connection support for Azure DevOps cloud accounts.
• A new method has been introduced in the abstract ChangeManagementSystem class to update the status of a change ticket. This method will be automatically supported by ServiceNow and Jira ITSM instances. Custom CMS providers must implement this method if they wish to use it with the “Update Change Tickets” step to automatically update ticket statuses.
• FLEXDEPLOY-13893 - Groovy Libraries are now accessible in custom Groovy implementations for Change Management System, Issue Tracking System, and Credential Store providers. Code suggestions are also provided as appropriate in the Groovy code editor for these providers.
• FLEXDEPLOY-14128 - The display name of Account Providers has been changed to a longer format in the Create / Edit Account popup.

​

Groovy Functions

• FLEXDEPLOY-14152 - Introduced new function ensureWorkItem (FLEXDEPLOY variable) to seamlessly link external work items, such as Jira tickets. This method creates work items for a specified project by verifying their existence within the project’s configured Issue Tracking System instances. It validates the provided work item numbers and populates metadata for successfully matched work items into the FlexDeploy database, enabling links to build, release, and other processes.

​

OAuth Applications

• FLEXDEPLOY-14222 - OAuth applications for Microsoft will now display the Microsoft email address as the “Authorized By” user in the authorized tooltip and application popup.

​

Reports

• FLEXDEPLOY-14221 - Improved the performance of the Environment State Report when using PostgreSQL database.

​

FlexDeploy Browser Extension

• The extension manifest version has been upgraded from v2 to v3.
• Due to stricter security requirements in manifest v3, Javascript default values for action properties will no longer work.
• Added support for a security token sent as a request header, which can be verified from your FlexDeploy incoming webhook provider.
• The extension now automatically loads an action for each technology when the extension is opened for the first time (OIC, OBIEE, OTBI, OAC, APEX, ORDS, and Salesforce).
• FLEXDEPLOY-10567 - Oracle Integration Cloud Action - Resolved an issue where sometimes, the list of integrations weren’t showing up in the dropdown until the page was refreshed.
  • If the extension isn’t correctly identifying items on the page, a new action may need to be created.

​

Plugin Updates

• Oracle Integration Cloud Plugin
  • Prior to FlexDeploy 9.0.0.4, OAuthJWTAssertion required using a Java KeyStore for the Private Key and Certificate. When upgrading from FlexDeploy 9.0.0.3 or earlier, the OIC cloud account will automatically migrate to use Private Key and Certificate credentials from the configured KeyStore, eliminating the need to maintain the KeyStore on the file system. As a result, the KeyStore Path, KeyStore Password, Private Key Alias, Private Key Password, and Certificate Algorithm properties are now replaced with the Private Key and Certificate properties.
• Oracle SaaS FSM Plugin
  • Prior to FlexDeploy 9.0.0.4, OAuthJWTAssertion required using a Java KeyStore for the Private Key and Certificate. When upgrading from FlexDeploy 9.0.0.3 or earlier, the Oracle SaaS cloud account will automatically migrate to use Private Key and Certificate credentials from the configured KeyStore, eliminating the need to maintain the KeyStore on the file system. As a result, the KeyStore Path, KeyStore Password, Private Key Alias, Private Key Password, and Certificate Algorithm properties are now replaced with the Private Key and Certificate properties. Additionally, the cloud account provider for the FSM plugin has been renamed to Oracle SaaS Applications & Transactional BI.
  • FLEXDEPLOY-14050 - Introduced a new project property, Stop on Deployment Error, to control whether execution continues or stops in the import operation upon encountering an error.
• Oracle Transactional BI Plugin
  • FLEXDEPLOY-13737 - Plugin target properties like URL, Username, Password are migrated to Oracle SaaS and Transactional BI cloud account which can be configured by customer to use OAuth as necessary. Oracle Transactional BI and Oracle SaaS FSM Plugin share same cloud account.
• Oracle Visual Builder Plugin
  • Prior to FlexDeploy 9.0.0.4, OAuthJWTAssertion required using a Java KeyStore for the Private Key and Certificate. When upgrading from FlexDeploy 9.0.0.3 or earlier, the Oracle Visual Builder cloud account will automatically migrate to use Private Key and Certificate credentials from the configured KeyStore, eliminating the need to maintain the KeyStore on the file system. As a result, the KeyStore Path, KeyStore Password, Private Key Alias, Private Key Password, and Certificate Algorithm properties are now replaced with the Private Key and Certificate properties.
• Oracle EPM Plugin
  • Prior to FlexDeploy 9.0.0.4, OAuthJWTAssertion required using a Java KeyStore for the Private Key and Certificate. When upgrading from FlexDeploy 9.0.0.3 or earlier, the Oracle EPM cloud account will automatically migrate to use Private Key and Certificate credentials from the configured KeyStore, eliminating the need to maintain the KeyStore on the file system. As a result, the KeyStore Path, KeyStore Password, Private Key Alias, Private Key Password, and Certificate Algorithm properties are now replaced with the Private Key and Certificate properties.
  • The Rollback File attribute has been inactivated, as this option is not supported for EPM Plugin.
• Oracle BI, Oracle Transactional BI and Oracle Analytics Cloud
  • Introduced a new target property to set the number of concurrent threads used when discovering and downloading the web catalog, with the default set to 3. You can increase this value if needed, but be cautious—setting it too high may result in hitting rate limits. In that case, lower the value.
• PMD Plugin
  • FLEXDEPLOY-13916 - Updated the PMD version bundled with plugin to 7.10.0, while maintaining support for external 6.X.X versions.
• File Plugin
  • FLEXDEPLOY-14089 - Enhanced the File plugin to properly handle file paths that contain special characters.

​

Resolved Issues

• FLEXDEPLOY-14105 - Resolved a rare issue where executing an “Order By” clause in certain queries could lead to a database error.
• FLEXDEPLOY-14174 - Resolved an issue when using multiple spaces in table or list search filters.
• Projects
  • FLEXDEPLOY-11948 - The “Deployments” and “Commits” sections are no longer shown under the insights tab for utility projects.
  • FLEXDEPLOY-13272 - Resolved an issue where line additions and deletions were not captured for certain Git commits, even though line changes were present.
  • FLEXDEPLOY-13904 - Resolved an issue where the TEST instance remained mapped to the Project workflow even after all Deploy instances were removed.
  • FLEXDEPLOY-14251 - Resolved a regression introduced in 9.0.0.0 that caused the Re-Build button to not be displayed when viewing the Workflow Execution Details page.
• Workflow Request Form
  • FLEXDEPLOY-13704 - Resolved an issue where the “Hide When” and “Disable When” rules were not working in some cases where the target workflow input was a multiselect list.
• Release and Pipeline Management
  • FLEXDEPLOY-14099 - Resolved an issue causing the Release Dashboard Step details popup to close when changing tabs between Projects, Work Items, and Commits. This only applies to Classic View and the Approval and Schedule Gates.
• Workflows
  • FLEXDEPLOY-12405 – When attempting to delete a workflow mapped to an inactive project, a clear error message is now shown, replacing the previous “Internal Error - Constraint Violation” message.
  • FLEXDEPLOY-14121 - Resolved an issue causing Groovy Library suggestions to not be displayed in the Run Groovy step inside Utility Workflows.
• Topology
  • FLEXDEPLOY-13964 - When attempting to delete a Target Group with execution data, a clear message is now shown.
• Work Items
  • FLEXDEPLOY-14086 - Resolved two Work Item regressions caused in 9.0.0.2
    • Checking the “Open After Create” checkbox in the Create Work Item Popup would not consistently open the Work Item after creation.
    • Deleting a Work Item on the list page would not refresh the list
• Salesforce
  • FLEXDEPLOY-14039 - Resolved an issue where dynamic package content was not updated with files that were newly committed and added from the Salesforce compare screen.
  • FLEXDEPLOY-14145 - Resolved an issue where the MatchingRule subcomponent was not being committed and deployed, despite showing successful messages. The subcomponent is now properly committing to the SCM and deploying to the target org.
• Security
  • FLEXDEPLOY-14059 - Resolved a caching issue causing unique username validation to not always accurately reflect if a username was used or not.
• Groovy Libraries
  • FLEXDEPLOY-14101 - Resolved an issue where deleted Groovy Libraries would still show up in script suggestions.
• Groovy Functions
  • FLEXDEPLOY-12550 - Resolved an issue causing Groovy scripts to sometimes throw an error “FDML-99001: Internal Error - wrong number of arguments.” despite the number of arguments being correct.
  • FLEXDEPLOY-14028 - Resolved an issue where certain Groovy scripts could print credentials in clear text.
• Code Editor
  • FLEXDEPLOY-14160 - Resolved an issue causing some imports to not have quick import suggestions. Also resolved imports being suggested when not necessary.
• Integrations
  • FLEXDEPLOY-13927 - Resolved an issue where CMS Provider audit columns were not updated when changing API Text and Field details.
• Integration Settings
  • FLEXDEPLOY-14006 - Resolved an issue regarding OAuth applications not authorizing properly if multiple applications existed with the same client id.
• Outgoing Email
  • FLEXEPLOY-14104 - Resolved an issue with Microsoft Graph Integration where emails sent were placed in the sent folder of the authorizer instead of the “Send As” user. Additionally, improved documentation for Microsoft OAuth and Microsoft OAuth Graph integrations to clarify the process of using shared mailboxes.
• Oracle Integration Cloud
  • FLEXDEPLOY-14219 - Resolved an issue in Discover from Oracle Integration Cloud where the discovery process would fail if no objects (Library, Connection, Integration, or Lookup) were found.
  • FLEXDEPLOY-14080 - Resolved an issue where the test connection failed with an UnrecoverableKeyException when the private key passphrase was blank. It now defaults to the keystore password if no passphrase is provided.
• Oracle SQLcl Plugin
  • FLEXDEPLOY-14009 - The SQLcl plugin now captures execution logs in error message, providing users with better visibility during failure situations.

​

Incompatible Changes

• PMD plugin now require Java 8. Please ensure Java is updated on your endpoints as needed.

​

FlexDeploy 9.0.0.3 (2-17-2025)

​

Application Updates

​

General

• FLEXDEPLOY-13792 – Improved the performance of background processes responsible for automatically managing the mapping of target group property sets.
• FLEXDEPLOY-13838 – Improved performance for build request submissions when a large number of change logs are detected.

​

Security

• FLEXDEPLOY-12301 - Introduced several password security features for FlexDeploy local users:
  • Passwords now have an expiry date, configurable in system settings.
  • A limit is now set on the number of previous passwords that cannot be repeated, also configurable in system settings.
  • A “Forgot Password” link has been added to the login form, allowing users to reset their passwords independently.
• FLEXDEPLOY-13519 - FlexDeploy now supports Private Key type credentials, enabling the upload of OpenSSL private keys with an optional passphrase, and eliminating the need for a Java KeyStore. However, the Java KeyStore is still required for certain integration instance properties until the underlying plugins are updated to support the new credential type.
  • FlexDeploy now offers the ability to select specific credential types for designated fields. For instance, only “Private Key” credentials are now accepted for some properties of OAuth applications and Integration Instance.
  • Additionally, the Certificate type credential no longer includes a password input, as it is no longer necessary.

​

Compliance & Audit

• FLEXDEPLOY-13825 - Activation and inactivation of Group is now captured in the Change History report.

​

Release and Pipeline Management

• FLEXDEPLOY-10128 - The Approval and Schedule Gate details now display the Work Items and Commits that will be deployed.
• FLEXDEPLOY-13720 - Updated the logic of the “Update Work Items” pipeline step when the work item selector is set to “Stage”. The step will now only include work items where the related release content is either set to deploy or has already been deployed from the current stage.

​

Code Editor

• FLEXDEPLOY-13854 - The Code Editor now supports multiline expressions and suggestions for lambda functions and arguments.
• FLEXDEPLOY-13864 - Imports for java Stream classes can now be suggested by the groovy editor.

​

REST API

• FLEXDEPLOY-10701 - Added a V2 API for Release Snapshot, including GET, SEARCH, and CREATE methods, along with a Promote project versions to Release method.

​

Groovy Functions

• FLEXDEPLOY-13625 - Introduced new functions createProjectPackage, updateProjectPackage, and patchProjectPackage to create, update, and patch project packages. Introduced getProjectPackageByName and getProjectPackageById to retrieve project package details.

​

New Plugins

• Opkey Plugin
  • Added a new plugin to execute Opkey test suites. See Opkey Plugin Guide for more details.

​

Plugin Updates

• Oracle EPM Plugin
  • FLEXDEPLOY-12930 - Translations, Consolidations, and various Data Management types (including Import Formats, Locations, Data Load Rules, Data Load Mappings, Logic Groups, Check Rule Groups, and Check Entity Groups) will now be discovered, built, and deployed individually, removing the need to deploy all files of a given type as a group.
• Azure Power BI Plugin
  • FLEXDEPLOY-13577 - Added support for exporting and importing PBIP (.Report, .SemanticModel, and .Dataset) files.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-4292 - The activateIntegration, importIntegration, and packageDeploy operations now support two additional input options: “Allow to Run Again” for re-executing integration instances, and “Enable Payload Validation” for JSON syntax validation during activation. These features are applicable exclusively to OIC Gen3.
• Oracle Analytics Cloud
  • FLEXDEPLOY-11705 - Plugin now supports OAuth (Resource Owner & JWT Assertion) in addition to Basic Auth. As part of this, target properties like URL, Username, Password are migrated to Cloud Account which can be configured by customer to use OAuth as necessary.
• Oracle Transactional BI and Oracle Analytics Cloud
  • FLEXDEPLOY-13865 - Updated the sorting logic for Oracle Transactional BI (OTBI) and Oracle Analytics Cloud files. The package files are now sorted in the following order: Folders first, followed by Dashboard Groups, and then all other files.
• Oracle BI, Oracle Transactional BI and Oracle Analytics Cloud
  • FLEXDEPLOY-14013 - Achieved a significant performance improvement in the Discover process for Oracle BI, Oracle Transactional BI, and Oracle Analytics Cloud.
  • FLEXDEPLOY-11705 - WebCatalog files in Oracle BI, Oracle Transactional BI, and Oracle Analytics Cloud projects now support the Override Catalog Path attribute. This feature allows deploying web catalog items to an alternate location and is intended as a workaround for special characters in the file path, if necessary.
• Boomi Plugin
  • FLEXDEPLOY-13533 - The Boomi plugin now supports the deployment of several additional object types, including Process Route, Processing Group, Custom Library, Flow Service, API Service, and API Proxy.
• MuleSoft Plugin
  • FLEXDEPLOY-13748 - The Mule Plugin now supports both Basic Auth and OAuth connections to Anypoint. When upgrading to version 9.0.0.3+ or higher, any existing Mule properties related to Basic Auth connections will be migrated to cloud accounts.
• SQL*Plus Plugin
  • FLEXDEPLOY-13757 - The SQL*Plus plugin now captures execution logs in error message, providing users with better visibility during failure situations.

​

Resolved Issues

• UI
  • FLEXDEPLOY-13687 - Resolved an issue where inactive branches still appear in the branch selection drop-down if they were recently used.
  • FLEXDEPLOY-13903 - Resolved an issue where required multi-select inputs were prematurely validated when opening the submit workflow request popup, causing the input box to be highlighted in red before the user had a chance to select a value.
  • FLEXDEPLOY-13910 - Resolved an issue that would cause an invalid date filter value to be used when changing from filter types of “After”, “Before” or “Between” to “Relative”.
• Project
  • FLEXDEPLOY-13778 - Resolved an issue that caused a “groovy.lang.GroovyRuntimeException: Ambiguous method overloading for method java.io.File#<init>.” error when navigating to the Files tab of a Project Package.
• Release and Pipeline Management
  • FLEXDEPLOY-13907 - A Duplicate File warning icon will now be shown on individual package rows when viewing snapshot content. Previously this was only indicated on the entire snapshot.
  • FLEXDEPLOY-14056 - Resolved a regression introduced in version 9.0.0.2 that would prevent spaces from being entered in the Project Group name when creating directly on a step.
• Workflows
  • FLEXDEPLOY-13952 - Resolved a regression in 9.0.0.2 that would sometimes cause workflow steps to disappear or duplicate when moving a step in the Workflow Editor.
• Topology
  • FLEXDEPLOY-13933 - Automatically applied Workflow and Plugin Property Sets now show as disabled on the Map Workflows and Plugins popup on the Target Group. These Property Sets are added automatically based on which Projects are using the Target Group and cannot be removed.
• Dashboards
  • FLEXDEPLOY-14068 - Resolved an issue regarding selected releases not being used for the Deployment Success Rate (Gauge) panel.
• Automated Rollback
  • FLEXDEPLOY-13852 - Rollback Request Form - Resolved an issue where no feedback was given when a required field wasn’t filled in on submit. The Files tab now displays an error.
• REST API
  • FLEXDEPLOY-13932 - Resolved an issue where the packageName was ignored during the POST request to v1/project/{id}/deploy, even when it was included. The latest version of that package will be deployed.
• Groovy Functions
  • FLEXDEPLOY-13874 - Resolved an issue with the FLEXDEPLOY.updatePackage method when using the Git Change Logs (PollingResult) parameter. The error “FDML-27023: Package file #[…] is a duplicate” no longer occurs for projects like FSM, OIC, and others.
  • FLEXDEPLOY-13917 - Resolved an issue that could result in an “Execution timed out after 600000 milliseconds” error when using TimedInterrupt in Groovy scripts for Pipeline, Flexfield, and Credential Store.
• Groovy Libraries
  • FLEXDEPLOY-13945 - Secured values are now masked in the Try It response.
  • FLEXDEPLOY-13987 - Resolved an issue in the Groovy Library Try It window that would sometimes cause the response to not be displayed.
• Blackout Windows
  • FLEXDEPLOY-14004 - Resolved an issue causing Start Time and End Time to both display error messages that were meant to only be displayed on End Time.
• Salesforce Integration
  • FLEXDEPLOY-13195 - Resolved an issue on the Salesforce Org Management screen where removed files would sometimes reappear when removing all files in the compare list.
  • FLEXDEPLOY-14055 - Resolved an issue where the directory locations for multiple Data Cloud components were incorrect and some were showing an incorrect File Type. All components are now correctly reflected.
• Change Management System Integration
  • FLEXDEPLOY-13942 - Resolved a 9.0.0.2 regression where CMS instances would not save if the Additional Info Script was referencing the TICKET or IS_APPROVED variables for ServiceNow and JiraITSM.
• Git Integration
  • FLEXDEPLOY-14010 - Resolved an issue where links to view the source or commits in the repository did not work for files containing special characters in certain Git providers.
  • FLEXDEPLOY-14029 - FlexDeploy now generates valid View File Content and View Commit URLs for Azure DevOps Projects that are not associated with an account or organization.
  • FLEXDEPLOY-13957 - Resolved issues with exporting project sources in package-based projects when file names contained special characters such as single-quote, asterisk, greater-than, less-than, or double-quote.
• Integration Settings
  • FLEXDEPLOY-13922 - The user that authorized the OAuth application will now be shown in the edit application popup and in a tooltip when hovering the Authorized status in the table view.
• Display Settings
  • FLEXDEPLOY-13886 - Resolved a regression in 9.0.0.2 causing custom branding images to not display at the proper resolution.
• Email Settings
  • FLEXDEPLOY-13989 - Updated the Incoming Email settings descriptions to better clarify the process for using a shared mailbox. Additionally, resolved an issue with Microsoft Graph integration where the system failed to function correctly when the Username and Approval Reply Address were the same.
  • FLEXDEPLOY-13920 - Resolved an issue where the Test Connection for Microsoft Graph Email settings incorrectly showed a successful result, even when the test had failed.
• Blueprints
  • FLEXDEPLOY-13977 - Resolved an issue with the Mule Blueprint where the project creation failed due to a property validation error about Worker Size.
• Migrations / Upgrade
  • FLEXDEPLOY-13902 - Resolved a migration issue that could happen if an FSM project was linked to a build environment in which the FSM Account Code target property was not set.
  • FLEXDEPLOY-13936 - Resolved a migration issue with migrateWorkflowEncryptedProperties that could fail when a custom property has an empty string as its default value.
  • FLEXDEPLOY-13937 - Resolved a migration issue with Postgres databases where the property_key_sub_datatype was null. Postgres database users are advised to upgrade directly to version 9.0.0.3+ from earlier versions. If you encounter an issue such as FDML-99001: Internal Error - Cannot invoke "flexagon.fd.model.enums.FieldDataTypeEnum.getDataType()" because the return value of "flexagon.fd.model.enums.FieldDataTypeEnum.getInstance(String)" is null, please contact Support for assistance.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-13919 - Resolved an issue in Discover from Oracle Integration Cloud, which was previously limited to retrieving only 100 items.
• Oracle SaaS FSM Plugin
  • FLEXDEPLOY-13897 - Resolved a regression issue in FlexDeploy 9.0.0.1 where the export criteria were missing for the PER_MANAGE_EXTRACT_DEFINITION (Manage HCM Extract Definitions) setup task.
• Oracle BI, Oracle Transactional BI and Oracle Analytics Cloud
  • FLEXDEPLOY-13630, FLEXDEPLOY-13857 - Resolved issues with discovering the WebCatalog from the backend when folders contained unusual characters such as / \ * ?.
    • Starting with FlexDeploy version 9.0.0.3, a new escape sequence is now used. This means that if your files contain certain characters, you will need to rediscover them with the “Inactivate Missing Files” checkbox checked. After doing so, a new file will appear, with a name that is similar but percent-encoded.
    • Previously, files containing backslashes (\) didn’t work with FlexDeploy. Also, any files with colons in their names will be rediscovered with escape sequence and not have any history. Packages containing these files will need to be updated to reflect their new location, and builds will need to be executed again.
  • FLEXDEPLOY-13994 - Resolved an issue where the Discover process on the File Catalog failed if the project property for the WebCatalog Object Path was suffixed with a forward slash.
• Oracle BI Plugin
  • FLEXDEPLOY-13935 - OBI V1 projects now allow folders that have periods in their names. Previously folders with periods in the names did not populate subitems.
• Oracle Visual Builder Plugin
  • FLEXDEPLOY-14034 - Resolved an issue with export and deployment where only 10 applications were being retrieved, causing failures to find applications when many were present on the target VBCS instance.
• Surround SCM Plugin
  • FLEXDEPLOY-8969 - Resolved the error: “get error: -v option cannot be used for multiple files” in the Surround SCM Integration.

​

Incompatible Changes

• The Oracle BI, Oracle Transactional BI, and Oracle Analytics Cloud plugins now require Java 8. Please ensure Java is updated on your endpoints as needed. Starting with FlexDeploy version 9.0.0.3, a new escape sequence has been introduced. As a result, if your files contain certain characters, you’ll need to rediscover them with the “Inactivate Missing Files” checkbox selected. Once this is done, a new file will appear with a similar name, but percent-encoded. Previously, files containing backslashes (\) were incompatible with FlexDeploy. Files with colons in their names will not retain any previous history, and packages containing such files must be updated to reflect their new locations, and builds will need to be executed again.
• Oracle SaaS FSM Plugin now require Java 17. Please ensure Java is updated on your endpoints as needed.

​

FlexDeploy 9.0.0.2 (1-18-2025)

​

Application Updates

​

General

• FLEXDEPLOY-13548 - The Cron Expression input now includes Time Zone along with execution time hint, helping users understand the execution time relative to their own Time Zone.
• FLEXDEPLOY-13549 - Enhanced the performance of certain database queries, resulting in faster page load times for pages with larger amounts of data.

​

Security

• FLEXDEPLOY-10871 - sshd-core library upgraded to resolve vulnerability CVE-2023-35887.
• FLEXDEPLOY-13547 - commons-io upgraded to resolve vulnerability CVE-2024-47554.
• FLEXDEPLOY-13833 - Admin groups will no longer be available for the “New User Role” system setting.
• Thycotic Secret Server Integration
  • FLEXDEPLOY-13679 - The system now retrieves user-defined custom fields if provided; otherwise, it will default to fetching the password field.
• Delinea Secret Server Integration
  • FLEXDEPLOY-13744 - The system now retrieves user-defined custom fields if provided; otherwise, it will default to fetching the password field.

​

HTTPS Agent

• FLEXDEPLOY-13773 - Upgraded Tomcat to 9.0.98.
• FLEXDEPLOY-13773 - commons-compress and commons-configuration2 libraries upgraded to resolve vulnerabilities CVE-2024-56337, CVE-2024-50379, CVE-2024-29131, and CVE-2024-29133.

​

Project Replacements

• FLEXDEPLOY-12695 – Introduced a new feature to the FlexDeploy Replacement Engine, allowing replacements to be performed only on specific columns of a CSV file.

​

Workflow Execution

• FLEXDEPLOY-13489 - During plugin installation on endpoints, the filetypes and properties folders are no longer transferred, as they are not used. This change improves the speed of plugin installations on endpoints and will also enhance the performance of future FlexDeploy backups and upgrades.

​

Release and Pipeline Management

• FLEXDEPLOY-12008 - A new Pipeline Step, Update Change Tickets, has been added. This step allows adding comments and attachments to any Change Management tickets associated to the pipeline execution.

​

Compliance and Audit

• FLEXDEPLOY-13626 - The Additional Info Script for change management instances now support returning the user(s) and the time of approval or rejection. This information will be displayed for External Approval tasks on Dashboard as well as various Reports.

​

Notifications

• FLEXDEPLOY-13804 - Updated labels and descriptions on the Email Settings page to clarify support for Microsoft Graph API in both incoming and outgoing email notifications.

​

Groovy Libraries

• FLEXDEPLOY-13340 - Custom Groovy Libraries can now import and use other custom Groovy Libraries.
• FLEXDEPLOY-13660 - Upgraded to the Groovy Parrot Parser with type checking enabled, replacing the previous antlr2 parser. This enhancement allows users to utilize lambdas, method references, and other Java 8+ code patterns in their Groovy code. It also reduces compile-time Groovy errors. To revert to the previous parser, set the system property “groovy.antlr4” to false in your setenvoverride.(sh/bat) script.

​

Groovy Functions

• FLEXDEPLOY-212 - Calls to “TimeZone.setDefault” are prohibited in Groovy scripts, as they modify the server’s time zone.

​

Code Editor

• FLEXDEPLOY-13232 - Enums will now show suggestions when imported in the Code Editor.
• FLEXDEPLOY-13683 - The shortcut for suggesting imports has changed from ctrl+. to alt+enter. Imports will also be suggested at more opportune times.

​

Plugin Updates

• Oracle EBS Plugin
  • FLEXDEPLOY-13634 - Added a new attribute, “Lint Options,” for Oracle Application Framework (OAF) JAVA objects, which defaults to “none.” This attribute is used with the javac deploy command for Java files.
  • FLEXDEPLOY-775 - Added a new input for Additional Arguments to the start, stop, and abort Concurrent Manager operations in the EBS plugin.
• Oracle SaaS FSM Plugin
  • FLEXDEPLOY-13620 - Fast Formulas are now compiled using the SOAP service by default, eliminating the need for the SOAP compilation input. In case of failure, the system will automatically fall back to REST, and if that fails, it will revert to Selenium compilation if configured.
• Oracle APEX Plugin
  • FLEXDEPLOY-11933 - Introduced a new project property to enable backing up all files in the package from the target prior to deployment. Please note that a Backup Repository must be configured for this feature to work.
• Oracle Database Plugin
  • FLEXDEPLOY-12530 - DBMS_CLOUD COPY$% tables will no longer be discovered in the file catalog.
• JDBC Plugin
  • FLEXDEPLOY-10661 - The default rollback settings for DB Objects in JDBC project have been updated. The Rollback File option will now apply to files with the following extensions: seq, tbl, idx, trg, prc, pls, typ, plb, pck, and fnc. The rollback file will be generated using the original file name, prefixed with ‘R_’.

​

Resolved Issues

• FLEXDEPLOY-13745 - Resolved a rare migration issue where CMS Ticket migrations could fail if no instance was associated with the change ticket.
• FLEXDEPLOY-13746 - Resolved “Value is required for [SSH Key].” when upgrading to 9.0+. This can happen if Endpoint private key is a file with no content.
• FLEXDEPLOY-13749 - Resolved an issue where newer JDKs were unable to decrypt properties data encrypted with older JDK versions. This caused migration failures for email and realm settings.
• FLEXDEPLOY-13672 - Added retry logic to handle cases where FlexDeploy fails to check the local revision of a Git repository.
• UI
  • FLEXDEPLOY-13721 - Selects will now display text of “Loading” instead of “No data available” while data is being fetched.
  • FLEXDEPLOY-13739 - Resolved an issue where select menus may become detached while scrolling inside a popup.
• Security
  • FLEXDEPLOY-13847 - Resolved issue where clearing the filter on the deployment permissions page required a page refresh to load the data again.
• Automated Rollback
  • FLEXDEPLOY-13723 - Improved the efficiency of selecting file revisions when creating a rollback package. The screen is now much faster when choosing a version from the list.
  • FLEXDEPLOY-13740 - Performance has been improved for the Rollback File dropdown on the rollback request form for FlexDeploy instances using PostgreSQL.
  • FLEXDEPLOY-13724 - Change tickets are now validated when a rollback request is submitted similar to a deploy request.
  • FLEXDEPLOY-13726 - Resolved an issue where rollback requests were not distinguishing between active and inactive files. Now, only active project files are shown in the request form.
  • FLEXDEPLOY-13730 - Resolved an issue where destructive files could be submitted for deployment without force deploying when they were already deleted.
• Project Package
  • FLEXDEPLOY-13807 - The Add to Favorites option when creating and copying a package now works.
• Test Automation
  • FLEXDEPLOY-13831 - Resolved a regression issue from 9.0.0.1 where same test may run multiple times when using both SCM and Project YAML test configurations.
• Project Replacements
  • FLEXDEPLOY-13696 – Resolved an issue where the regexFileName field in Replacement Config did not accept regular expressions.
• Workflow Execution
  • FLEXDEPLOY-13861 - Resolved a regression in 9.0.0.1 where it was possible to get a null pointer while parsing change logs.
• Release and Pipeline Management
  • FLEXDEPLOY-13803 - Resolved an issue where the Pending Content displayed on the Approval or Schedule gate was inaccurate.
  • FLEXDEPLOY-12581 – Resolved an issue where empty strings in change tickets triggered the error: “[TicketNumber] is required for [CmsTicketDBRow].”
  • FLEXDEPLOY-13465 - Resolved an issue in the Test Gate where the “Average Response Time (milliseconds) Less than or equal to” condition did not function correctly when the test tool failed to capture response times.
  • FLEXDEPLOY-13742 - Resolved an issue causing “Hide When” and “Disable When” rules to not apply properly on Workflow Inputs inside the Upload Stage Execution Info popup.
  • FLEXDEPLOY-13781 - Resolved an issue where multi-select input fields were functioning as single-select.
• Topology
  • FLEXDEPLOY-13824 - When creating or editing a target group, toggling the active button to inactive no longer deactivates the save button.
• Post Refresh Process
  • FLEXDEPLOY-13846 - Resolved an issue with filtering data on the post refresh screen by target group.
• Tasks
  • FLEXDEPLOY-13860 - Resolved a UI discrepancy with the allowed length of the task notes field when approving tasks. The UI now correctly limits at 500 characters
• Groovy Functions
  • FLEXDEPLOY-13750 - Resolved an issue where updatePackageStatus() failed to update the status of dynamic packages.
• OAuth
  • FLEXDEPLOY-13766 - Resolved an OAuth error “attempted merging values..”. This was caused when two OAuth applications of different providers had the same Client ID when upgrading to 9.0.0.0 or 9.0.0.1, usually when the incoming and outgoing oauth providers were the same, but the incoming was set up as a duplicate instead of being left blank.
  • FLEXDEPLOY-13799 - Resolved a unique constraint error regarding OAuth email settings that may occur when upgrading to 9.0+ if using the same oauth credentials for both SMTP and IMAP
  • FLEXDEPLOY-13822 - Added a helpful error message when trying to create an Integration Application instance with a duplicate client id.
• Microsoft TFVC Integration
  • FLEXDEPLOY-13774 - The workspace name is now unique between production and non-production servers, allowing them to share a single service account. Previously, conflicts could arise if both servers had the same source control settings, potentially causing one server to hold a workspace lock while the other attempted to use it.
• Single Sign-On and LDAP Integration
  • FLEXDEPLOY-13830 - Resolved an issue with incorrect redirection after new external users completed their initial FlexDeploy profile setup.
• Change Management System Integration
  • FLEXDEPLOY-13868 - Resolved an issue when uploading attachments to Service Now causing form-data boundaries to appear in the attachment content. This would also result in zip attachments not being valid.
• Issue Tacking System Integration
  • FLEXDEPLOY-13856 - Resolved an issue where work item numbers with prefixes containing periods were not matched correctly when further prefixed with a ”#” sign.
• System Settings
  • FLEXDEPLOY-13844 - Resolved issues with sorting and filtering on the System Settings -> Integrations page.
• Oracle Transactional BI Plugin
  • FLEXDEPLOY-13835 - The OTBI Plugin deploy operation now fails when the API call returns an error with a bad job code during the upload process.
• Oracle Integration Cloud Plugin
  • FLEXDEPLOY-13665 - Resolved the ‘Unsupported Media Type’ issue in the pause schedule and resume schedule operations. Both operations now function as expected.
• Windows Plugin
  • FLEXDEPLOY-13784 - Resolved an issue where characters such as &, <, >, ^, and | were being omitted from the environment variable value.

​

Incompatible Changes

• FLEXDEPLOY-13676 - The startDate and endDate attributes in the Release-related event payload are now String instead of Date. This matches other date attributes in other payloads.
• Method signature was changed for getAdditionalTicketInfo() method of the ChangeManagementSystem class. If you have implemented custom change management system using Groovy or Java then update signature as shown below.

Map<String, Serializable> getAdditionalTicketInfo(CMSObject pTicket, String pEnvironmentCode, boolean pIsApproved) throws ApiException

​

FlexDeploy 9.0.0.1 (12-14-2024)

​

Application Updates

​

General

• FLEXDEPLOY-13455 - Reduced the memory usage of configuration import/export, Git, Project Replacements, FlexDeploy startup, plugin executions, and the EBS plugin.

​

Platform Update

• FLEXDEPLOY-13712 - Upgraded Tomcat to 9.0.98.

​

Security

• FLEXDEPLOY-13642 - Updated BouncyCastle libraries for Power BI plugin to resolve vulnerabilities CVE-2024-29857 and CVE-2024-34447.

​

Project

• FLEXDEPLOY-13565 – Improved the efficiency of file catalog and discovery operations, leading to significantly faster performance for package-based projects with large number of files.
• FLEXDEPLOY-13352 - The Extract Package Files step done to initialize package-based builds now includes a log file with details on where each file was extracted from (SCM, Artifacts, or Backups).
• FLEXDEPLOY-13501 - Project replacements now stream through file lines to perform replacements, instead of loading the entire file into memory. This reduces memory usage, but introduces the limitation that all replacements must operate within the context of a single line. Previously, it was possible to use a regex to replace multiple lines of text as a unit. However, multiple matches across any number of lines are still supported.
• FLEXDEPLOY-13574 - Improved initial load times of the folder tree and other larger folder API calls.
• FLEXDEPLOY-13588 - Improved performance for V1 Project search API.

​

Release and Pipeline Management

• FLEXDEPLOY-12009 - A new pipeline step, Update Work Items has been added. This step enables adding attachments, adding comments, and changing the statuses of all relevant work items in the release.
• FLEXDEPLOY-13444 - The Work Item Validation Gate has a new field “Work Item Selector” that allows control over which Work Items are candidates for the validation logic. The input consists of 3 options: “Snapshot”, “Stage”, and “Release”, with the default being “Stage”. For customers migrating from 9.0.0.0 the default has been changed, if you want the same behavior as the 9.0.0.0 gate then you should use the “Snapshot” selector.
• FLEXDEPLOY-13153 - Long project paths are now left truncated on the release content page. Additionally, the width of the right info panels on the release and package pages is now adjustable.

​

Salesforce

• FLEXDEPLOY-13654 - Enhanced performance for Salesforce screen when the org contains a large number of files.
• FLEXDEPLOY-13385 - Removed Rollback File source type option for all Salesforce files when requesting rollback, as this option wouldn’t apply. Additionally, Data type files now only show Project Version source type option for rollback.
• FLEXDEPLOY-13502 - Upgraded to Salesforce API Version 62.0 (Winter ’25). The following new Metadata Types are supported: ChoiceList, ContextDefinition, ConversationVendorInfo, EnblProgramTaskSubCategory, ExpressionSetMessageToken, ExternalAuthIdentityProvider, ExternalClientApplication, GenAiPlugin, GenAiPluginInstructionDef, LearningItemType, MobileSecurityAssignment, MobileSecurityPolicy, MobSecurityCertPinConfig, PublicKeyCertificate, PublicKeyCertificateSet, UiFormatSpecificationSet, WaveAnalyticAssetCollection.

​

GIT Integration

• FLEXDEPLOY-13689 - Improved the performance of the Git integration when handling builds with a large number of commits and files.

​

Outgoing Webhooks

• FLEXDEPLOY-13193 - Release related outgoing webhook event changes:
  • Added a new event type, Release Content Changed, which triggers when projects and/or work items are added or removed from release.
  • Added a new event type, Release Updated, which triggers when a release is modified.
  • Included a schedule to the Release Started and Release Ended events.
• FLEXDEPLOY-13714 - Folder Id has been added to the Release Event payloads for Outgoing Webhooks.

​

OAuth Applications

• FLEXDEPLOY-13395 - Improved instructions for configuring Microsoft OAuth Applications.

​

Notification

• FLEXDEPLOY-10899 - FlexDeploy now supports the use of client certificates for Microsoft Email OAuth, Microsoft GCC OAuth, and Microsoft Graph OAuth.

​

Dashboards

• FLEXDEPLOY-13627 - Added an index to improve performance of “Current Activities” dashboard panel.

​

Groovy Functions

• FLEXDEPLOY-13187 - Introduced new functions, findProjectPackagesForFilesByProjectId and findProjectPackagesForFilesByProjectType, to find project packages based on project ID or project type. These functions also support additional package search options, including SCM type, package status, package type, and include/exclude paths.
• FLEXDEPLOY-13600 - Introduced a new overloaded function findPackagesForChange, with additional package search options to filter packages by status, type, and include/exclude paths.

​

Groovy Libraries

• FLEXDEPLOY-13343 - Any log messages logged via the LOG variable will be displayed in the output of the Try It window.

​

GraphQL API

• FLEXDEPLOY-13175 - Schema introspection has been disabled by default. It can be enabled by setting the following java startup parameter -Dflexagon.fd.graphql.introspection=true.

​

Plugin Updates

• Oracle Integration Cloud
  • FLEXDEPLOY-13462 - Libraries are now supported in an OIC Package-based Project. Libraries can be discovered from your Oracle Integration Cloud instance or stored in source control.
• Oracle SaaS FSM Plugin
  • FLEXDEPLOY-13458 - Updated to include new Setup Tasks and Business Objects.
• Oracle BI, Oracle Analytics Cloud and Oracle Transactional BI Plugin
  • FLEXDEPLOY-13592 - Added Include/Exclude properties for Export WebCatalog operations.
• Oracle APEX Plugin
  • FLEXDEPLOY-13492 - Oracle APEX Plugin now allows using original ids when using the buildAPEX and exportAPEXApplications operations.

​

Resolved Issues

• FLEXDEPLOY-13709 - FlexDeploy REST invocations now correctly resolve wildcard-matched proxy exceptions from the http.nonProxyHosts system property. Previously, complete subdomains had to be specified.
• Project
  • FLEXDEPLOY-13330 - Create Project from CSV - Resolved an issue where some properties from the uploaded CSV file weren’t showing up when custom properties were used without hide when/disabled when fields defined.
  • FLEXDEPLOY-13684 - Reduced the cap of SCM revisions checked when looking for the latest revision of the files in a package during a first-build scenario from 2000 to 100. This reduces memory impact and increases the speed of the first build in package-based projects.
  • FLEXDEPLOY-11195 - The project file catalog discover from SCM or backend process now runs asynchronously, resolving the 503 error that occurred on SaaS installations after 10 minutes of discovery.
  • FLEXDEPLOY-13386 - Change detection now works for Package-based project files that were previously deleted.
  • FLEXDEPLOY-13416 - Resolved an issue where changes to the list data or default value scripts on the Project Types screen were not reflecting on Project files until the page was refreshed.
  • FLEXDEPLOY-13429 - The Project Commits tab will no longer show up if no source control is selected on the Project.
  • FLEXDEPLOY-13491 - Resolved an issue where additional files which generally get auto-extracted as part of project builds (e.g. Salesforce meta files, APEX install.sql file) were not being extracted when initiating Rollback or Post Refresh builds.
  • FLEXDEPLOY-13493 - Execution backups will no longer be shown on the build execution artifacts page.
  • FLEXDEPLOY-13551 - Resolved a rare issue that would sometimes cause a 404 page to be displayed when clicking the File Catalog button rapidly.
  • FLEXDEPLOY-13552 Resolved an issue where attribute values were not saving sometimes when value was being cleared from project file popup.
  • FLEXDEPLOY-13621 - Resolved an issue where Project Test Automation Configuration tests were not appended to tests configured via YAML file in SCM.
  • FLEXDEPLOY-13641 - Resolved a regression issue with 9.0.0.0 which resulted in “Failed to get Files from Artifact Repository for Version” error when selecting SCM revision in build request form for package.
  • FLEXDEPLOY-13694 - Resolved an issue on the rollback request form where folders could be checked for deletion in the target environment, even though folder deletion is not supported. This effects OTBI, OBIEE V2, and OAC project types only.
• Package
  • FLEXDEPLOY-13172 - Inactive files are no longer matched when adding files to a package by revision.
  • FLEXDEPLOY-13487 – Resolved performance issues in the application related to Git revision searches in the “Add Files from Revision” popup.
• Workflow
  • FLEXDEPLOY-13324 - Resolved a few edge cases that were not handled by the Update Usages popup in the Workflow Editor.
• Release and Pipeline Management
  • FLEXDEPLOY-13638 - Resolved an issue on the Release Dashboard Approval Gate details where package files were not displayed in the sort order defined in the package.
  • FLEXDEPLOY-13452 - The Release Dashboard no longer displays a 403 error when viewing a Promote Step that promoted to a release the user does not have access to.
  • FLEXDEPLOY-13454 - Resolved a potential “Release row not found” error when viewing the step definition of a Promote Step.
  • FLEXDEPLOY-13503 - Resolved a regression issue in FlexDeploy 9.0.0.0 that prevented non-admin users from creating a Standalone Release from the Build Request popup.
  • FLEXDEPLOY-13505 - Resolved an issue where the release setting for default pipeline was not being auto-selected when creating a release.
• Project Replacements
  • FLEXDEPLOY-13677 - Resolved an issue where secure values could be inadvertently printed in logs during replacement.
• Salesforce
  • FLEXDEPLOY-13589 - Resolved an issue that caused failures during Pre-deploy/Deploy executions for packages containing both package.xml and destructiveChanges.xml files.
  • FLEXDEPLOY-13525 - Resolved an issue where the provided Salesforce CLI path was being ignored.
• Rollback
  • FLEXDEPLOY-13423 - Resolved an issue where defaulting to a Rollback File which didn’t exist wasn’t throwing an error on the rollback request form.
• Change Management Systems
  • FLEXDEPLOY-13192 – Resolved a “java.lang.NullPointerException” occurring when adding Ticket Fields to the out-of-the-box Change Management System provider.
• Git Integration
  • FLEXDEPLOY-13690 - File rename parsing from change logs has been enhanced for greater robustness, ensuring better handling of various situations.
• Jira Integration
  • FLEXDEPLOY-13657 - Resolved NullPointerException on the Work Items page when using a JIRA project without labels.
• ServiceNow Integration
  • FLEXDEPLOY-13544 - Resolved a regression issue in FlexDeploy versions 8.0.0.6 to 9.0.0.0, where the ServiceNow integration failed to use the custom ServiceNow Navigation Request URL when multiple change tickets were being checked simultaneously.
• CyberArk Integration
  • FLEXDEPLOY-13715 - Enhanced error handling to better manage cases of improper user input or incorrect permissions.
• Incoming / Outgoing Webhook
  • FLEXDEPLOY-13675 - Resolved an issue where the release end date was always null in the release-ended payload. It is now properly populated.
  • FLEXDEPLOY-13636 - Resolved an issue when filtering by id on the webhook messages page.
• Dashboards
  • FLEXDEPLOY-13582 - Resolved a sporadic InvocationTargetException that would sometimes occur if the Recent Issues panel is present in the dashboard.
• Reports
  • FLEXDEPLOY-13650 - Resolved an issue where datetimes were not displayed correctly in report CSV or PDF exports.
  • FLEXDEPLOY-13598 - The Change Ticket column on the Approval Tasks report now correctly accepts text filters.
• OAuth Applications
  • FLEXDEPLOY-13418 - Applications using an invalid credential will no longer generate an error dialog when the UI is initially loaded.
  • FLEXDEPLOY-13556 - Resolved a NullPointerException that could happen if data wasn’t filled in correctly on an oauth application.
• Admin Operations
  • FLEXDEPLOY-13396 - Resolved an issue where downloading 24-hour logs on Windows would fail if a .lck file was encountered. The process now ignores .lck files, allowing the download to complete successfully.
• Groovy Editor
  • FLEXDEPLOY-13702 - Resolved an issue causing variable completion to not work inside a literally defined list. For example suggestions for project would not be shown inside the list in the below snippet:

def project = FLEXDEPLOY.getProject(12L)
def myProjectNames = [project.]

• Groovy Libraries
  • FLEXDEPLOY-13594 - Groovy Libraries were mistakenly shown as suggestions to the Groovy Plugin script. Groovy Libraries are available to all scripts that run on the FlexDeploy server, however since plugins run on another endpoint and process they are not available in plugins. If you need to use a Groovy Library you can use the Run Groovy Workflow Step.
  • FLEXDEPLOY-13619 - Resolved an issue that would sometimes throw an error while saving the Groovy script if it contained import statements without a semicolon.
• Oracle EBS Plugin
  • FLEXDEPLOY-12834 - The concurrent manager operations no longer depend on monitoring processes directly on the system. Instead, SQL queries are now used to verify the status of the manager processes. This enhancement improves compatibility with different operating systems and multi-node configurations.
• Oracle SaaS FSM Plugin
  • FLEXDEPLOY-13485 - Resolved an issue where Fast Formula compilation failed with SOAP when the Legislative Data Group of the formula was null. This method is now highly reliable and has become the default for new workflows created after this update. Existing customers experiencing Fast Formula compilation issues should review the plugin input to ensure compatibility with SOAP.
• Oracle BI, Oracle Analytics Cloud and Oracle Transactional BI Plugin
  • FLEXDEPLOY-13509 - Sub-Items for Dashboard Group are now always discovered. This release also resolves an issue where the discovery process would fail if a WebCatalog Item of type “Group” was found while the “Dashboard Group” option was selected for the “Discover Sub-Items” project property.
• Oracle SOA Plugin
  • FLEXDEPLOY-13663 - When the SOA plugin is configured to use the server revision, and it has never been deployed or is not set to increment the version, the deployment revision number will default to version 1.0.
• PeopleSoft Plugin
  • FLEXDEPLOY-13666 - Updated the PeopleSoft Object Types property list of values to include additional values, ranging from 99 to 256.
• Docker Plugin
  • FLEXDEPLOY-13323 - Quotation marks are now applied to handle spaces within project names.
• JMeter Plugin
  • FLEXDEPLOY-13513 - The JMeter plugin released with version 9.0.0.0 was missing some essential jars. This issue has been resolved.
• JUnit Plugin
  • FLEXDEPLOY-13508 - Skipped JUnit tests now show as SKIPPED instead of PASSED.

​

Incompatible Changes

​

Groovy Libraries - SuggestionMethodMeta annotation

• The import location for the SuggestionMethodMeta annotation, which provides method and parameter hints in the code editor, has been changed from flexagon.fd.model2.suggestions.SuggestionMethodMeta to flexagon.ff.common.core.suggestions.SuggestionMethodMeta.

​

Microsoft Teams Integration

• Microsoft Teams Plugin
  • The teamSendNotification and userSendNotification operations have been removed.
  • The JSON Input to send message cards has changed and now uses the Adaptive Card schema. More information can be found at Configuring FlexDeploy for Teams Webhook Operations - Authoring Adaptive Cards.
• MICROSOFTTEAMS Groovy Function
  • sendTeamsMessage and sendUserTeamsMessage have been removed.

​

FD_PROJECT_ID workflow variable

​

FlexDeploy 9.0.0.0 (11-02-2024)

​

Application Updates

• FLEXDEPLOY-11471 - Several more tables and lists are now multiselect and can perform actions on multiple rows.
• FLEXDEPLOY-13009 - A new Admin Operation has been added to view currently active user sessions in real time.
• FLEXDEPLOY-13223 - Postgres - Added some indexes to improve dashboard and project execution screen performance.

​

Platform Update

• Amazon Corretto - Amazon’s build of OpenJDK with security updates 
• OpenJDK - Adoptium - OpenJDK
• Oracle JDK - Oracle’s build for those who meet their license restrictions - https://www.oracle.com/java/technologies/downloads/#java21

​

Automated Rollback

• Support for rolling back deployments has been added for Standard and and Package-based project level deployments.
• Standard project rollback will deploy a previous build version to a given environment. User can override version to be deployed if necessary.
• Package-based project rollback will build rollback package and deploy each file from the chosen Rollback Source Type:
  • Project Version - Source from a previous project version artifact.
  • SCM Revision - Retrieve from the project’s configured source control system.
  • Rollback Project File - Select a different project file to build and deploy to roll back. Rollback file is retrieved from project’s source control system. This is project file attribute and can be defaulted as necessary by providing groovy scripts. For example, if file is Fil1.sql then Rollback file can be R_File1.sql. Customers can implement as necessary.
  • Backup Repository - Restore from a previous backup version. Backup repository must be enabled for this option. See plugin guides to see which plugins support taking backups automatically.
  • Rollback Source Type is a project file attribute which can be defaulted from a Groovy script entered on the Project Types screen.
• Rollback execution history, including linked executions and files, can be easily viewed from the Project Execution page, as well as globally from reports.

​

GIT Integrations

• Advanced Git Integration via OAuth applications.
  • Mass create integration instances by inspecting available git repositories for the user.
    • Automatically create repository webhooks and FlexDeploy webhook configuration for building projects and syncing branches
  • Automatically create and delete remote branches when performing actions in FlexDeploy.
  • Inspect repository contents when providing Sparse Folder Checkout script.
• New Projects Commits page
  • View a list of commits on the project and see the highest environment they have been deployed to.
  • A commit details page to show
    • Pull requests for a commit
    • Commit changes (including code changes)
    • Commit timeline
• FLEXDEPLOY-12153 - GIT Source Control Integration Instances can now use SSH Type credentials to connect via SSH protocol.
• FLEXDEPLOY-8800 - When GIT Integration Instance URLs starts with “git@”, then the username and password fields will be hidden. This is similar behavior in the case of using SSH when the URL starts with “ssh://”.
• FLEXDEPLOY-10061 - Git change logs now include line addition/deletion counts.

​

Credentials

• Secret Text
  • Has an input for text that will be encrypted. These are commonly associated with passwords and is the standard credential type we have supported in the past.
• SSH Key
  • Supports a private key file upload and an optional input for a passphrase.
  • These type of Credentials are generally associated with connecting to endpoints and authenticating with GIT.
  • Endpoints configured with Private Key and optional Passphrase prior to FlexDeploy 9.0 will be migrated to store Private Key with optional Passphrase in Local Credential Store.
  • SSH Key credentials are now also supported with Git source control instances.
• Certificate credentials will support a certificate file upload and an optional password.

​

Configuration Export Import

• FlexDeploy Configuration Export/Import allows Projects and Workflows to be seamlessly migrated between 2 separate FlexDeploy servers.
• This is available to FlexDeploy Administrators only and is accessible from Admin Operations page.
• Projects and / or workflows can be exported from the source FlexDeploy server as a zip file. This zip file can then be imported in the target FlexDeploy server to migrate these projects and workflows over.
• This feature allows projects and workflows to be migrated repeatedly. The import process will create or update objects as needed.

​

WebSocket

• Project Execution List
• Execution Workflow Steps
• Execution Plugin Logs
• Release Dashboard

​

Projects

• Project Security options are separated from Folder for clarity. Security can still be overridden at Folder, Project and Release level, if no overrides are done permissions are inherited from parent folder. Additionally, Folder Security tab will show all groups that inherit READ permissions from other permissions as disabled so it is clear that they cannot be deleted.
• FLEXDEPLOY-3964 - A new checkbox labeled “All Tasks Required” has been added to the Edit Folder Approval popup. When this box is checked, every group will be required to approve the task. If unchecked, only one group will need to provide approval, maintaining the previous behavior before this checkbox was introduced.
• FLEXDEPLOY-9148: The packages list now includes headers for the latest version and environments. The “Latest Version” column will show the most recent successful build for each package, while the environment-specific columns will display the latest successful deployment for each package in its respective environment. Quick access links to the execution pages are also provided for convenience.
• FLEXDEPLOY-12191 - A notes field has been added for users to provide on all workflow execution requests, which can be referenced from project executions and reports. Notes are required for rollback requests and optional for all other request types.
• FLEXDEPLOY-13033 - Test configuration stored as YAML in Source Control can now be overridden by Project level Configuration. Override is applied using the same testName value.
• FLEXDEPLOY-13180 - The commit chip card on the Project Execution tab will now disable the View Change Logs button if the user does not have access.

​

Release and Pipeline Management

• FLEXDEPLOY-12418 - Pipeline Approval Gates now include a new option to require all groups defined on the role to approve the gate before it can continue.
• FLEXDEPLOY-12484 - A new Pipeline Gate has been added - “Work Item Validation”. This gate has multiple options to validate that each work item in the release meets certain standards before the Pipeline continues.
• FLEXDEPLOY-10643 - Release Snapshot Inputs are now available to be specified in 3 new locations: Build Request Form, Promote to Release Popup, and the Promote To Release Pipeline Step. The Promote Pipeline Step supports literal or Groovy expressions.
• FLEXDEPLOY-1933 - A new release permission, Manage Roles, has been added. This permission will decide who has access to override the Role members for the Release. Previously, the Configure Pipeline permission was required.
• FLEXDEPLOY-12793 - The release permission Configure Content List has been separated into two permissions to manage Projects/Packages and Work Items separately. The respective permissions are now Configure Content List and Configure Work Item List.
• FLEXDEPLOY-13075 - Snapshot inputs are now displayed in the order they were created when shown in the UI.
• FLEXDEPLOY-12707 - An information message and link has been added on the Release Dashboard when the current snapshot is waiting for another snapshot to finish running steps before it starts processing.
• FLEXDEPLOY-13070 - The Edit Stage popup now includes a search filter for the Gates and Steps.

​

Integrations

• FLEXDEPLOY-12475 - Integration provider properties now use the Field Data Type (Text Field, Date Time etc.) that is used on other custom property definitions.

​

Security

• FLEXDEPLOY-8873 - Pipeline security permissions can now be overridden at individual pipeline level to allow for finer-grained access to pipeline management when necessary. Additionally, Bulk Update Permissions is available to simplify the update of permissions on more than one pipeline.
• Active Directory / LDAP Realm and Email passwords are now migrated to Local Credential Store.
  • FLEXDEPLOY-12038 - Encrypted fields on the Email Settings are now stored as credentials. Existing passwords have been converted into credentials with the naming format “Email Communication - <field name>” (e.g. Email Communication - IMAP Password).
• FLEXDEPLOY_12040 - Updated Joda Time library to resolve vulnerability CVE-2024-23080.
• FLEXDEPLOY-12138 - Updated Spring-Core library to resolve vulnerability CVE-2024-22233.
• FLEXDEPLOY-11168 - Updated Pac4J version shipped with FlexDeploy is from 4.5.7 to 5.7.3. This update is relevant for configurations using OpenID or SAML-based SSO and resolves vulnerability SNYK-JAVA-COMNIMBUSDS-6247633.

​

Dashboards

• FLEXDEPLOY-12107 - A new Dashboard panel has been added: Application Errors. This panel is only available to FlexDeploy Administrators.

​

System Settings

• Email OAuth Settings have been migrated to System Settings -> Integrations where individual OAuth applications are defined.

​

Groovy Libraries

• Users can now create their own Groovy Libraries that can be shared across all Groovy scripts. A new Groovy Libraries page has been added under the Administration heading for users to create, edit and maintain their custom libraries. Each library is then made available in each Groovy script via a Library Key, for example LIB_MATH_HELPERS, just like our FLEXDEPLOY, EMAIL and other helper libraries.
• The Groovy Library editor also includes a Try It window to test your library in real time as you are developing it!

​

Groovy Functions

• FLEXDEPLOY-12452 - FLEXDEPLOY function now includes methods for getting the plain text values for Credentials.

​

Code Editor

• FLEXDEPLOY-12722 - Classes not found in a groovy script can now be auto imported via “Quick Actions”. Quick Actions are available when hovering an error or by hitting `ctrl+.` while the cursor is in the error range (red squiggles).
• FLEXDEPLOY-13040 - The Code Editor now supports suggestions for wildcard imports in Groovy scripts.

​

Purge

• FLEXDEPLOY-12790 - Introduced new Purge Setting Keep Production Count, which must be 1 or higher. Additionally, Keep Count setting can be lowered to 0. Keep Success Count and Keep Failed Count are removed. Customer should use other available Keep Count settings.
• FLEXDEPLOY-12145 - Purge settings now allow selection on hour of day when purge would be executed. Additionally, if workflow execution threads are overwhelmed then purge will wait for 5 minutes interval till workflow execution threads free up indicating less load on system. Purge execution either Success or Failed is also recorded on Change History report.
• FLEXDEPLOY-12870 - Added a new purge setting to control how many days to keep Webhook and Event messages and logs.

​

Plugin Updates

• Oracle BI Plugin
  • FLEXDEPLOY-11724 - Package Files context menu, now allows to mark WebCatalog object to be deleted during deployment. Objects with ”.Folder” extension is not allowed to delete.
  • downloadWebCatalog operation now supports download of more than one folder.
• Oracle Transactional BI Plugin
  • FLEXDEPLOY-11724 - Package Files context menu, now allows to mark WebCatalog object to be deleted during deployment. Objects with ”.Folder” extension is not allowed to delete.
  • downloadWebCatalog operation now supports download of more than one folder.
• Oracle Analytics Cloud Plugin
  • FLEXDEPLOY-11724 - Package Files context menu, now allows to mark WebCatalog object to be deleted during deployment. Objects with ”.Folder” extension is not allowed to delete.
  • downloadWebCatalog operation now supports download of more than one folder.

​

Resolved Issues

• Projects
  • FLEXDEPLOY-13036 - Resolved an issue where project properties page shows underlying groovy script instead of showing List of Values.
  • FLEXDEPLOY-13087 - Resolved an issue where Success Rate and Duration metrics did not update when filtering by execution status for deployment executions on the Project Insights tab.
  • FLEXDEPLOY-13171 - SCM Defaults will now correctly set the default instance should one be present in the defaults.
  • FLEXDEPLOY-13209 - The Package select dropdown will now properly render the package description as markdown. If the description contains multiple lines, only the first line will be shown in the drop down.
  • FLEXDEPLOY-13366 - Resolved an issue that would sometimes display a permission error if hovering execution links on the project execution page.
• Release and Pipeline Management
  • FLEXDEPLOY-12406 - Allow removing projects and packages from completed releases.
  • FLEXDEPLOY-13072 - Encrypted snapshot inputs will now display a mask value ****** instead of the encrypted value.
  • FLEXDEPLOY-13288 - The Force Execute option on the Pre-deploy Pipeline step has been renamed to just “Force”
• Realms
  • FLEXDEPLOY-13379 - Resolved an issue causing new LDAP users to not be redirected back to the home page properly after creating their account.
• GIT
  • FLEXDEPLOY-3377 - Resolved an issue where update of GIT URL on source control integration instance may cause issues with build activity. URL update may include just protocol change from https to ssh or vice versa.
  • FLEXDEPLOY-7839 - Resolved an issue where multiple line commit message may get interpreted as changed file for commit.
• Workflow Execution
  • FLEXDEPLOY-12662 - Resolved an issue to show files in the Execution Reports folder when a file name exists in multiple sub folders.
• Work Items
  • FLEXDEPLOY-13196 - Corrected the documentation links for all Work Item Administration screens to point to the Administration documentation
• Security
  • FLEXDEPLOY-13262 - Resolved an issue where User can unlock their own account.
• Credentials
  • FLEXDEPLOY-13274 - Resolved an issue that caused testing credentials for custom providers to fail every time when using the encrypted value stored in the database.
• User Profile
  • FLEXDEPLOY-13353 - Added missing documentation links to the user profile pages
• Purge
  • FLEXDEPLOY-12989 - Resolved an issue where project versions of Package-based projects were not purged correctly if the workflow execution couldn’t be started due to errors such as no endpoint available.
  • FLEXDEPLOY-12955 - Resolved an issue where project versions of Package-based projects were not purged if they were never deployed.
  • FLEXDEPLOY-12954 - Resolved an issue where the purge status display would not show the “RUNNING” status in certain cases.

​

Incompatible Changes

• FlexDeploy 9.0 now requires Java 17 and 21 and FlexDeploy Installer 1.0.23 or later should be used with FlexDeploy 9 upgrades.
• FLEXDEPLOY-11843 - FlexDeploy no longer uses Apache Commons Lang. Instead Apache Commons Lang3 is used. This is a potentially breaking change to groovy scripts with custom imports. Use the lang3 import instead if you were importing commons lang.
• FLEXDEPLOY-12990 - Deprecated constructor ReleaseProjectsPojo(Long pProjectId, String pPackageName, Boolean pRequestAllFiles) and added ReleaseProjectsPojo(Long pProjectId, String pPackageName)

​

URL Changes

• The FlexDeploy Patches screen URL has been moved from /flexdeploy/next/#/administration/patches to /flexdeploy/next/#/administration/admin-operations/view-patches

​

Git Accounts

• Git Accounts has been removed and Connected Apps has taken its place. Git connected applications will offer the same feature list as Git Accounts and more! However, because Git Accounts were stored only on the users device and not the FlexDeploy server, we are not able to port over existing Git Accounts into Connected Applications. We apologize for this inconvenience.

​

Topology

• FLEXDEPLOY-13170 - Removed the ability to set the PrivateKey default value for new Endpoints. This is due to Private Keys now being stored as SSH Key credentials.

​

Notification

• FLEXDEPLOY-11552: The internal email notification system has transitioned from javax.mail to jakarta.mail. This is for informational purposes; if you have custom Groovy scripts utilizing javax.mail packages, please adjust them accordingly.