8.2.0 Platform Release Notes

This release expands administrator control over file upload limits, strengthens access security through multi-factor authentication and SAML improvements, and continues the platform's migration from GraphQL to REST endpoints. The release also includes an extensive set of stability fixes across components, applications, and the Module Builder.

New Features

• Access Provisioning: Email is now available as a multi-factor authentication (MFA) method, providing an alternative to SMS and mobile app options. See Multi-Factor Authentication.

• Access Provisioning: SAML IdP Signing Certificates now supports multiple signing certificates. Creators can add multiple comma-separated certificate values in the IdP Metadata XML field, enabling seamless certificate rotation without reconfiguring SSO. Values are parsed and displayed as comma-separated entries in the SAML IdP X.509 Certificate field, ordered as they appear in the XML file.

• Access Provisioning: The new SAML IdP Metadata Refresh URL setting lets administrators automatically refresh SAML IdP metadata and signing certificates hourly. This is useful for identity providers that rotate certificates frequently.

• Administration: Environment administrators can now configure file upload limits directly in Environment Administration, without requiring support from Unqork. Two new sections are available:

  • Attachment Upload Limits: Sets the maximum file size end-users can upload. Default: 100 MB. Configurable up to 2,048 MB. Files above 100 MB are not automatically virus scanned; a warning displays in the UI when the limit is set above this threshold.

  • Execution Upload Limits: Sets the maximum file size and number of files per upload for Service Execute and Execute via API channels. Defaults are 500 MB per file and 25 files. Configurable up to 2,048 MB per file and 10,000 files per execution. A hard aggregate cap of 10 GB per execution applies. Anonymous calls are capped at 500 MB aggregate.

• APIs: Added a new GET /records REST endpoint, providing REST API parity for the Data Models' getRecords resolver. The endpoint supports resourceType and resourceId query parameters and respects existing access controls.

Improvements

• Access Provisioning: Authentication feedback is now standardized across all login and password reset attempts. End-users see a uniform Invalid Credentials message and a 401 Unauthorized status code for any unsuccessful attempt, regardless of the specific reason for failure.

• Administration: The maximum timeout for the Plug-In component increases to 300 seconds (current default limit is 120 seconds). This lets longer-running service calls complete without timing out. Creators can increase the timeout up to 300 seconds in the Plug-In component settings.

• Administration: The following limits increase automatically for all environments without any administrator action:

  • Service Execute default file count: 20 files → 25 files

  • Execute via API default file size: 100 MB → 500 MB

• Module Builder: The Advanced Datagrid component's Hide Table When Empty setting is replaced by Show Table When Empty in the same location. The original setting was non-functional; the new setting inverts the behavior and works as expected. Existing Advanced Datagrid configurations are unaffected.

• Module Builder: Plug-In component binary mode now automatically sets the content-length header during file transfers, resolving compatibility issues with external services that do not support chunked transfer encoding.

• Module Builder (UDesigner): The htmlReadOnly output type is now available in Logic component output configurations.

• Module Builder (UDesigner): The Plug-In component timeout field now enforces a maximum of 120,000 milliseconds (2 minutes). Clearing the field resets it to the 120,000 millisecond default.

• Workspaces: Workspace list pagination now matches the Application Details page behavior, providing a consistent navigation experience.

Bug Fixes

• Applications: Fixed an issue where Application Versioning displayed an empty login screen instead of the expected redirect on platform version 7.30 and above.

• Applications: Fixed an issue where Creators could not enable Application Versioning for applications in certain environments.

• Applications: Fixed an issue where multi-level dynamic imports failed to load grandchild dependencies automatically. Versioned applications now correctly chain imports through parent links, removing the need for manual dependency configuration in the top-level application.

• Applications: Fixed an issue where application names and version numbers were not displayed in the Promotion Dependency Manager when Application Versioning was enabled.

• Applications: Resolved an issue where submission revisions could not be retrieved in versioned applications. Submission API endpoints now require a valid module ID, and submissions from versioned applications must include application context to ensure compatibility with versioned modules and workflows.

  This release introduces two API validation changes that might affect existing integrations:

  • All calls to submission endpoints now require a valid module ID in the . Integrations that previously passed an arbitrary or placeholder module ID must be updated to use a valid module ID.

  • Submissions from versioned applications must include application context. Calls that omit app context might fail for versioned modules and workflows.

  • The POST /fbu/uapi/modules/{module_id}/submissions/attachments endpoint now validates that the module ID in the path corresponds to an existing module.

• Applications: Fixed an issue where versioned applications with unversioned dependencies incorrectly resolved to outdated module versions. The platform now correctly detects whether a dependency is versioned and always uses the latest module state for unversioned dependencies.

• Applications (Beta): Fixed an issue where a module not found error occurred when loading modules in an application branch.

• Data Workflow Component: Fixed an issue where Data Workflow performance optimizations were not applied correctly. The correct optimizations are now in effect.

• Module Builder: Fixed an issue where the Chart component displayed the total value twice when the Stack Series option was enabled with a single data point.

• Module Builder: Fixed an issue where removing a row in the Data Grid component incorrectly cleared values in other text field rows.

• Module Builder: Fixed an issue where updating the month in the Date  component using the keyboard displayed an incorrect date.

• Module Builder: Fixed an issue where, after saving a Dynamic Grid component with only one Editable column, reopening the component's settings set all columns to Editable due to the Mark All Fields Editable option being enabled incorrectly.

• Module Builder: Fixed a 500 error that occurred when uploading files in a module previewed in Express View using the module path.

• Module Builder: Fixed an issue where the Number component could not be set to Read-Only - Accessible from its settings or using logic. The settings panel now includes the Input Behavior drop-down with the correct options, and Read-Only - Accessible can also be set using logic.

• Module Builder: Fixed an issue where saving a Panel component's settings was incorrectly identified as a Vega Panel component even though it was configured in Centauri.

• Module Builder: Fixed an issue where the Rich Text Editor component did not correctly clear its value when triggered by a Data Workflow component.

• Module Builder: Fixed an issue where the Rich Text Editor component retained data from a previously added row when opening a new entry form inside an Advanced Datagrid component.

• Module Builder: Fixed an issue where validation did not function correctly for rows added by a Data Workflow component in Uniform Grid components, specifically for Text Field and Date Input components.

• Module Builder: Fixed an issue where the Disable User Input setting was incorrectly displayed in the Uniform Grid component's settings panel. This setting has been removed from the component.

• Module Builder (UDesigner): Fixed an issue where the anonymous user role did not display in the component permissions table when Allow Access to Anonymous Users was enabled in Module Settings.

• Module Builder (UDesigner): Fixed an issue where the Decisions component executed validation against a component with an empty mapped value.

• Module Builder (UDesigner): Fixed an issue where Plug-In component outputs returned null instead of an empty string when a null value was retrieved from an execute call.

• Module Builder (UDesigner): Fixed an issue where an imported module could not be removed from a Panel component after being added.

• Platform Architecture: Fixed an issue where default database indexes were missing on platform startup, which could cause instability during upgrades.

Security

This release includes scheduled security patches. No action is required.

Sunsetted

• APIs: The GenAI Connector, a UDesigner template that provided a setup wizard for connecting Unqork applications to a customer-managed LLM service, is sunset in this release and removed from the UDesigner UI. Unqork is sunsetting this feature as part of its ongoing investment in native AI capabilities. Any connectivity previously configured through the connector continues to work and can be managed in Services Administration.

• APIs: The following API endpoints are officially sunset with this release, as announced in the 8.0.0 Platform Release Notes:

  • /fbu/uapi/pdfbar/combine-flatten

  • /fbu/uapi/image/parsePDF

Patches