Release 26.4

Configuration changes

See configuration for more details.

Designer Web

• ACE_ANALYTICS_ENABLED - enables anonymous Google Analytics data collection (default: true)
• ACE_ANALYTICS_MEASUREMENT_ID - Google Analytics measurement ID

Runtime server

• ACE_ANALYTICS_ENABLED - enables anonymous Google Analytics data collection (default: true)
• ACE_ANALYTICS_MEASUREMENT_ID - Google Analytics measurement ID
• ACE_ANALYTICS_API_SECRET - API secret for server-side Google Analytics Measurement Protocol events

Release notes

See docker images below.

ACE 26.4.3

July 29, 2026

Content Search in ACE Designer

Introduced Content Search in ACE Designer, allowing users to quickly find relevant content through a search popup without leaving their current workflow. The feature includes query validation, a searchable results list, and comprehensive handling of loading, empty, and error states to provide a smooth and reliable search experience.

• DIG2022-69625
  Content Search in ACE Designer

Build tooling improvements

The update introduces standardized TypeScript references and import conventions, improves IDE navigation and find-usages support, aligns production and development configurations more closely, and modernizes the build tooling with faster and optimized workflows. Additionally, new ESLint rules enforce consistent imports with automatic fixes, helping maintain a cleaner and more predictable codebase across the repository.

• DIG2022-85894
  Improve ACE build tooling

Claude-powered ACE Skill

Added a Claude-powered ACE Skill and packaged it as a reusable Git patch, enabling teams to easily integrate the capability across repositories and streamline ACE development workflows.

ACE 26.4.2

July 15, 2026

Performance improvements

Reduced the cost of schema resolution and expression evaluation for expression-heavy objects (such as header mappings):

• Resolved ACE schemas are now cached in the same way as other entities, so reference resolution work is no longer repeated on every use.
• A single IVM context is now reused when evaluating all expressions within a single object.

• DIG2022-87403
  Cache resolved ACE schemas
• DIG2022-87353
  Reuse ivm context in object evaluation

Schema validation consistency

ACE schema validation now behaves consistently between the Designer UI and server-side API request validation.

• DIG2022-84858
  ACE Schema validation difference in UI and Server

Security

• DIG2022-87101
  Mend vulnerability fixes 35.1

Package	CVEs
brace-expansion-1.1.13, brace-expansion-2.0.3, brace-expansion-5.0.6	CVE-2026-13149
tar-7.5.16	CVE-2026-59873, CVE-2026-59874
js-yaml-4.2.0	CVE-2026-59869
immutable-3.8.3	CVE-2026-59879, CVE-2026-59880
propagator-jaeger-2.7.1	CVE-2026-59892
adm-zip-0.5.16	CVE-2026-39244

ACE 26.4.1

July 6, 2026

REST step cURL support

Added support for importing REST step configuration from a cURL command, and exporting a REST step's debug request as a cURL command.

• DIG2022-85677
  Rest step from cURL
• DIG2022-85676
  Rest step debug - Copy as cURL

Usage analytics

ACE now collects anonymous usage analytics to help improve the product, including API consumption, flow executions, step usage, and feature flag tracking. Analytics collection is enabled by default and can be controlled via the ACE_ANALYTICS_ENABLED configuration option.

• DIG2022-84051
  Designer usage metrics
• DIG2022-83186
  Track API consumption
• DIG2022-83187
  Track flow executions
• DIG2022-83188
  Track flow maintenance impact
• DIG2022-83641
  Track step usage
• DIG2022-83642
  Track feature flags

Base flow and extended flow in the same workspace

It is now possible to explicitly reference a base flow when an extended version exists in the same workspace. Previously, any reference to a base flow would automatically resolve to its extended version. Multiple extensions of the same base flow are also supported.

• DIG2022-69567
  Ability to use both base flow and extended flow in ACE

Other features

• DIG2022-84705
  Method filter for APIs
• DIG2022-84495
  Update the ACE tool with the new brand
• DIG2022-76203
  Upgrade to Node 24
• DIG2022-85823
  Debug window - improve empty input document error message
• DIG2022-64607
  WSL specific Docker Desktop runtime instructions

Bug Fixes

• DIG2022-85815
  Fix variable expansion
• DIG2022-83640
  Unable to Upload CSV file into Azure

Security

• DIG2022-83960
  Security: CVE-2026-44724 systeminformation-5.31.1
• DIG2022-85869
  Mend vulnerability fixes 34.3
• DIG2022-86234
  Mend vulnerability fixes IP week

Package	CVEs
systeminformation-5.31.1	CVE-2026-44724
protobufjs-7.5.8	CVE-2026-48712, CVE-2026-54269
ws-7.5.10	CVE-2026-48779
form-data-4.0.4, form-data-4.0.5	CVE-2026-12143
grpc-js-1.14.3	CVE-2026-48068, CVE-2026-48069
react-router-6.30.3	CVE-2026-40181
js-yaml-3.14.2, js-yaml-4.1.1	CVE-2026-53550
core-1.0.0, core-2.0.1, core-2.7.1	CVE-2026-54285
jsonata-2.0.4	CVE-2026-12208
tar-7.5.11	CVE-2026-53655
dompurify-3.4.1	CVE-2026-49458, CVE-2026-49459, CVE-2026-49978
brace-expansion-5.0.5	CVE-2026-45149
joi-17.11.0	CVE-2026-48038
qs-6.15.0	CVE-2026-8723
fast-uri-3.1.2	CVE-2026-13676

Docker images

Designer Web

Hash: sha256:f2939b6dc2beee01035dc9095e51d285c7842914d6e474c21b637eb296d3cc8e

docker pull euadigportalcoredev02acr.azurecr.io/ace-designer:26.4.3

Runtime server

Hash: sha256:4bcca6549b86f9f3c138356cac082269225e8561d4555a1d19e958e98116526d

docker pull euadigportalcoredev02acr.azurecr.io/ace-runtime-server:26.4.3

Deployment API server

Hash: sha256:eda54e0f944389977afb6a1aeba3a6eea24be6afc214ef897a02db1aadd7e523

docker pull euadigportalcoredev02acr.azurecr.io/ace-deployment-server:26.4.3

Scheduled job (BullMQ) administration

Hash: sha256:035c48854c8d635f484ea706bc3a552e8ca9b7ba91960f2a1d7f203a414ad01d

docker pull euadigportalcoredev02acr.azurecr.io/bull-board:26.4.3

Developer API portal

Hash: sha256:270c629d5709c896adf912098eb029ccca7a8cb0b5ebdf23f0dcebd9c47ccabd

docker pull euadigportalcoredev02acr.azurecr.io/api-developer-portal:26.4.3

Designer Desktop

ACE Designer Desktop is available here