---
title: "8.2.0 Platform Release Notes"
slug: "8-2-0-platform-release-notes"
status: "update"
updated: 2026-11-02T16:26:39Z
published: 2026-11-02T16:26:39Z
canonical: "docs.unqork.io/8-2-0-platform-release-notes"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.unqork.io/llms.txt
> Use this file to discover all available pages before exploring further.

# 8.2.0 Platform Release Notes

| Environment | Release Date |
| --- | --- |
| Staging | May 5, 2026 |
| UAT | May 19, 2026 |
| Production | Jun 2, 2026 |

This release expands administrator control over file upload limits, strengthens access security through multi-factor authentication and SAML improvements, and continues the platform's migration from GraphQL to REST endpoints. The release also includes an extensive set of stability fixes across components, applications, and the Module Builder.

## New Features

- **Access Provisioning**: Email is now available as a multi-factor authentication (MFA) method, providing an alternative to SMS and mobile app options. See [Multi-Factor Authentication](/unqorkai/docs/multi-factor-authentication-mfa).
- **Access Provisioning**: **SAML IdP Signing Certificates** now supports multiple signing certificates. Creators can add multiple comma-separated certificate values in the **IdP Metadata XML** field, enabling seamless certificate rotation without reconfiguring SSO. Values are parsed and displayed as comma-separated entries in the **SAML IdP X.509 Certificate** field, ordered as they appear in the XML file.
- **Access Provisioning**: The new **SAML IdP Metadata Refresh URL** setting lets administrators automatically refresh SAML IdP metadata and signing certificates hourly. This is useful for identity providers that rotate certificates frequently.
- **Administration**: Environment administrators can now configure file upload limits directly in [Environment Administration](/unqorkai/docs/environment-administration), without requiring support from Unqork. Two new sections are available:
  - **Attachment Upload Limits**: Sets the maximum file size end-users can upload. Default: 100 MB. Configurable up to 2,048 MB. Files above 100 MB are not automatically virus scanned; a warning displays in the UI when the limit is set above this threshold.
  - **Execution Upload Limits**: Sets the maximum file size and number of files per upload for Service Execute and Execute via API channels. Defaults are 500 MB per file and 25 files. Configurable up to 2,048 MB per file and 10,000 files per execution. A hard aggregate cap of 10 GB per execution applies. Anonymous calls are capped at 500 MB aggregate.
- **APIs**: Added a new `GET /records` REST endpoint, providing REST API parity for the Data Models' `getRecords` resolver. The endpoint supports `resourceType` and `resourceId` query parameters and respects existing access controls.

## Improvements

- **Access Provisioning**: Authentication feedback is now standardized across all login and password reset attempts. End-users see a uniform **Invalid Credentials** message and a `401 Unauthorized` status code for any unsuccessful attempt, regardless of the specific reason for failure.
- **Administration**: The maximum timeout for the Plug-In component increases to 300 seconds (current default limit is 120 seconds). This lets longer-running service calls complete without timing out. Creators can increase the timeout up to 300 seconds in the Plug-In component settings.
- **Administration**: The following limits increase automatically for all environments without any administrator action:
  - Service Execute default file count: 20 files → 25 files
  - Execute via API default file size: 100 MB → 500 MB
- **Module Builder**: The Advanced Datagrid component's **Hide Table When Empty** setting is replaced by **Show Table When Empty** in the same location. The original setting was non-functional; the new setting inverts the behavior and works as expected. Existing Advanced Datagrid configurations are unaffected.
- **Module Builder**: Plug-In component binary mode now automatically sets the `content-length` header during file transfers, resolving compatibility issues with external services that do not support chunked transfer encoding.
- **Module Builder (UDesigner)**: The `htmlReadOnly` output type is now available in Logic component output configurations.
- **Module Builder (UDesigner)**: The Plug-In component timeout field now enforces a maximum of 120,000 milliseconds (2 minutes). Clearing the field resets it to the 120,000 millisecond default.
- **Workspaces**: Workspace list pagination now matches the Application Details page behavior, providing a consistent navigation experience.

## Bug Fixes

- **Applications**: Fixed an issue where Application Versioning displayed an empty login screen instead of the expected redirect on platform version 7.30 and above.
- **Applications**: Fixed an issue where Creators could not enable Application Versioning for applications in certain environments.
- **Applications**: Fixed an issue where multi-level dynamic imports failed to load grandchild dependencies automatically. Versioned applications now correctly chain imports through parent links, removing the need for manual dependency configuration in the top-level application.
- **Applications**: Fixed an issue where application names and version numbers were not displayed in the **Promotion Dependency Manager** when Application Versioning was enabled.
- **Applications**: Resolved an issue where submission revisions could not be retrieved in versioned applications. Submission API endpoints now require a valid module ID, and submissions from versioned applications must include application context to ensure compatibility with versioned modules and workflows.

> [!WARNING]
> This release introduces two API validation changes that might affect existing integrations:
> 
> - All calls to submission endpoints now require a valid module ID in the . Integrations that previously passed an arbitrary or placeholder module ID must be updated to use a valid module ID.
> - Submissions from versioned applications must include application context. Calls that omit app context might fail for versioned modules and workflows.
> - The `POST /fbu/uapi/modules/{module_id}/submissions/attachments` endpoint now validates that the module ID in the path corresponds to an existing module.
- **Applications**: Fixed an issue where versioned applications with unversioned dependencies incorrectly resolved to outdated module versions. The platform now correctly detects whether a dependency is versioned and always uses the latest module state for unversioned dependencies.
- **Applications (Beta)**: Fixed an issue where a module not found error occurred when loading modules in an application branch.
- **Data Workflow Component**: Fixed an issue where Data Workflow performance optimizations were not applied correctly. The correct optimizations are now in effect.
- **Module Builder**: Fixed an issue where the Chart component displayed the total value twice when the **Stack Series** option was enabled with a single data point.
- **Module Builder**: Fixed an issue where removing a row in the Data Grid component incorrectly cleared values in other text field rows.
- **Module Builder**: Fixed an issue where updating the month in the Date component using the keyboard displayed an incorrect date.
- **Module Builder**: Fixed an issue where, after saving a Dynamic Grid component with only one Editable column, reopening the component's settings set all columns to **Editable** due to the **Mark All Fields Editable** option being enabled incorrectly.
- **Module Builder**: Fixed a 500 error that occurred when uploading files in a module previewed in Express View using the module path.
- **Module Builder**: Fixed an issue where the Number component could not be set to **Read-Only - Accessible** from its settings or using logic. The settings panel now includes the **Input Behavior** drop-down with the correct options, and **Read-Only - Accessible** can also be set using logic.
- **Module Builder**: Fixed an issue where saving a Panel component's settings was incorrectly identified as a Vega Panel component even though it was configured in Centauri.
- **Module Builder**: Fixed an issue where the Rich Text Editor component did not correctly clear its value when triggered by a Data Workflow component.
- **Module Builder**: Fixed an issue where the Rich Text Editor component retained data from a previously added row when opening a new entry form inside an Advanced Datagrid component.
- **Module Builder**: Fixed an issue where validation did not function correctly for rows added by a Data Workflow component in Uniform Grid components, specifically for Text Field and Date Input components.
- **Module Builder**: Fixed an issue where the **Disable User Input** setting was incorrectly displayed in the Uniform Grid component's settings panel. This setting has been removed from the component.
- **Module Builder (UDesigner)**: Fixed an issue where the anonymous user role did not display in the component permissions table when **Allow Access to Anonymous Users** was enabled in **Module Settings**.
- **Module Builder (UDesigner)**: Fixed an issue where the Decisions component executed validation against a component with an empty mapped value.
- **Module Builder (UDesigner)**: Fixed an issue where Plug-In component outputs returned `null` instead of an empty string when a `null` value was retrieved from an execute call.
- **Module Builder (UDesigner)**: Fixed an issue where an imported module could not be removed from a Panel component after being added.
- **Number component**: Resolved an issue where trailing zeros did not display when **Decimal Places** was specified (for example, `100.00` displayed as `100`). Trailing zeros now always display when **Decimal Places** is specified.
- **Platform Architecture**: Fixed an issue where default database indexes were missing on platform startup, which could cause instability during upgrades.

## Security

This release includes scheduled security patches. No action is required.

## Sunsetted

- **APIs**: The GenAI Connector, a UDesigner template that provided a setup wizard for connecting Unqork applications to a customer-managed LLM service, is sunset in this release and removed from the UDesigner UI. Unqork is sunsetting this feature as part of its ongoing investment in native AI capabilities. Any connectivity previously configured through the connector continues to work and can be managed in [Services Administration](/unqorkai/docs/services-administration).
- **APIs**: The following API endpoints are officially sunset with this release, as announced in the [8.0.0 Platform Release Notes](/unqorkai/docs/8-0-0-platform-release-notes):
  - `/fbu/uapi/pdfbar/combine-flatten`
  - `/fbu/uapi/image/parsePDF`

## Patches

| Version | Type | Production | Notes |
| --- | --- | --- | --- |
| [8.2.12.0](/docs/8-2-12-0-platform-patch-release-notes) | Scheduled | Nov 5, 2026 | Bug fix for Login and security updates |
| [8.2.11.0](/docs/8-2-11-0-platform-patch-release-notes) | Scheduled | Oct 29, 2026 | Bug fix for Service Logs and security updates |
| [8.2.10.0](/docs/8-2-10-0-platform-patch-release-notes) | Scheduled | Oct 1, 2026 | Bug fix for Date Input component and security updates |
| [8.2.9.0](/docs/8-2-9-0-platform-patch-release-notes) | Scheduled | Sep 10, 2026 | Audit log improvements, bug fixes, and security updates |
| [8.2.8.0](/docs/8-2-8-0-platform-patch-release-notes) | Scheduled | Aug 13, 2026 | Bug fixes, accessibility, and security updates |
| [8.2.7.0](/docs/8-2-7-0-platform-patch-release-notes) | Scheduled | Jul 16, 2026 | Bug fixes and security updates |
| [8.2.5.0](/docs/8-2-5-0-platform-patch-release-notes) | Scheduled | Jun 16, 2026 | Bug fixes and stability improvements |
| [8.2.3.0](/docs/8-2-3-0-platform-patch-release-notes) | Scheduled | May 26, 2026 | Bug fixes and security updates |
| [8.2.2.0](/docs/8-2-2-0-platform-patch-release-notes) | Scheduled | May 19, 2026 | Rolled back — see patch notes |
| [8.2.1.0](/docs/8-2-1-0-platform-patch-release-notes) | Scheduled | May 12, 2026 | Bug fixes and security updates |

---

**Changelog**

| Date | Change |
| --- | --- |
| 2026-11-02 | Added 8.2.12.0 patch row. |
| 2026-10-28 | Added 8.2.11.0 patch row. |
| 2026-10-21 | Added Number component bug fix for trailing zeros. |
| 2026-05-01 | Added three bug fixes: Application Versioning login redirect, Data Workflow performance optimizations, platform startup indexes. |
| 2026-06-10 | Added Important callout to Applications bug fix — POST /attachments now requires a valid module ID. |
| 2026-04-27 | Expanded SAML IdP Signing Certificates entry with field usage details. Expanded Configurable File Upload Limits entry with Attachment and Execution Upload Limits detail. |
| 2026-09-30 | Added 8.2.9.0 and 8.2.10.0 patch rows. |
| 2026-08-31 | Added Patches table; removed HR separators; fixed broken 8.0.0 link. |
| 2026-04-24 | Initial publication. |

The Staging environment is the first level of application building in Unqork. Use it to build, test, and style your applications.

Use the UAT (user acceptance testing) environment to realistically test and navigate your applications as end-users would use them.

The Production environment is the final stage of the development process. Use this environment to promote tested and functioning application so your end-user can interact with it.

Security Assertion Markup Language (SAML) is a protocol that allows an identity provider (IdP) to send a user's credentials to a service provider (SP) to verify their identity and grant them access to a service.

The REST (representational state transfer) API is a set of architectural constraints used to exchange information securely over the internet.

An API endpoint is the location where an API receives requests for a specific resource on its server. It's the point of contact between an API client and an API server, and is usually a uniform resource locator (URL) that provides the location of the resource.

Multi-factor authentication (MFA) is a security measure that requires users to provide multiple pieces of verification to access an account. Adding an extra layer of protection to prevent unauthorized access even if one credential is compromised. MFA is also known as two-step verification.

Also known as Unqork Users, or Designer Users; is anyone who is inside the Unqork platform.

Single Sign-On is an authentication scheme that enables users to use one set of login credentials across multiple services.

End-users, also known as Express Users, are the individuals accessing an application through Express View. In most cases, end-users are the customers using the product.

The UI (user interface) is a device's end-user interaction and communication point. It can include display screens, keyboards, and mouse. It is also how a user interacts with your application.

APIs (application programming interfaces) are a set of protocols and definitions developers use to build and integrate application software. APIs act as the connective tissue between products and services.

A definition

An API endpoint is the location where an API receives requests for a specific resource on its server. It's the point of contact between an API client and an API server, and is usually a uniform resource locator (URL) that provides the location of the resource.

GraphQL resolvers let define how you want to populate data, likefetching data from a database or a third-party API.

A query lets you retrieve, access, manipulate, and delete data in a database.

Pagination is the process of separating content into individual pages.

In Unqork an application is a program used to perform specific tasks. An application can be one of two types: workflow or module.

Express View is how your end-user views your application. Express View also lets you preview your applications to test your configuration and view the styling. This is also the view your end-users will see when interacting with your application. After configuring a module, click Preview in the Module Builder to interact with the module in Express View.

The Number data type accepts integer or floating point values. The number data type does not use quotes around numerical values.

The Vega (v 2.0.0) runtime is the next-generation engine of the UDesigner platform. Vega uses cutting-edge technologies to improve the Creator and end-user experience.

The Centauri (v 1.0.0) runtime is the first-generation foundation of the Unqork Designer Platform. Centauri provides Creators a codeless experience for developing applications.

A string is an object that represents a sequence of characters. Strings typically hold data represented in text form.

If you allow decimal places, use this setting to limit the number of decimal places the end-user can enter.

Generative AI (GenAI) is a type of artificial intelligence (AI) that can create new content in response to written prompts.

Large Language Models (LLM) are artificial intelligence (AI) programs that use deep learning algorithms to analyze and generate text and other content based on large amounts of data.

A functionality of a software. For example, Copy and Paste is a feature of a computer's operating system.

The HTTP POST method is used to send data to a server to create or update a resource, typically including the data in the body of the request.