Release 25.4

Configuration changes

See configuration for more details.

Runtime server

• ACE_OPENAPI_TEMPLATE_FILE_NAME is added
• IVM_TIMEOUT is renamed to ACE_JS_EXECUTION_TIMEOUT and now affects also Deprecated code step

Release notes

See docker images below.

ACE 25.4.1

July 15, 2025

JWT Token headers

JWT now supports encoding and decoding token headers.

Features

• DIG2022-62654
  JWT header support

ACE 25.4.0

July 2, 2025

Isolated packages

ACE now supports isolated package (workspace) deployment, allowing you to deploy multiple workspaces independently. See more information about isolated workspaces here.

• DIG2022-58535
  Support multiple deployed workspaces
• DIG2022-58537
  Support scheduled jobs
• DIG2022-58536
  Runtime Swagger view - show all deployed workspace APIs
• DIG2022-58533
  Download workspace
• DIG2022-58531
  Delete workspace
• DIG2022-58530
  Deploy multiple packages
• DIG2022-58529
  List deployed workspaces API

Developer API portal

Developer API portal is preconfigured documentation portal for ACE APIs. It uses OpenAPI specification to generate documentation and provides a user-friendly interface for API consumers. See more information about Developer API portal.

• DIG2022-60986
  OpenAPI template

Other features

• DIG2022-50540
  User friendly message in case of network related errors
• DIG2022-61016
  Expose OpenAPI endpoint publicly if API docs is enabled
• DIG2022-59995
  Schema navigation in API editor
• DIG2022-58579
  Refactoring: Config hierarchy

Bug Fixes

• DIG2022-61469
  Security: CVE-2025-5889 (brace-expansion-2.0.1)
• DIG2022-60516
  Infinite loop not handled in code step
• DIG2022-59288
  Flows list should be shown while navigating between workspaces when creating a new flow leaving it unsaved
• DIG2022-60856
  Infinite loop not handled in deprecated code step
• DIG2022-61459
  Redis cache doesn't properly reconnect on lost connection
• DIG2022-61429
  Security: CVE-2025-48387 (tar-fs-2.1.2)
• DIG2022-61428
  Security: CVE-2025-48997 (multer-2.0.0)
• DIG2022-61250
  Designer settings doesn't close on initial save
• DIG2022-60966
  ACE Designer Desktop fails on big repository clone
• DIG2022-60908
  Non-existing entity queries bypass cache
• DIG2022-60808
  Security: CVE-2025-47935, CVE-2025-47944 (multer-1.4.5-lts.1)
• DIG2022-60714
  REST Step uploading binary file to external endpoint results in corrupted result
• DIG2022-60596
  Add request body to REST HTTP "DELETE" and "GET" methods
• DIG2022-60245
  HTTP step returns wrong content length for downloaded files
• DIG2022-59712
  Flow dropdown (in steps) doesn't show flow name if flow doesn't exist
• DIG2022-53018
  Adding virtual step to a flow is shown in red outline without any error notification
• DIG2022-61220
  Remove unused npm package from Docker images
• DIG2022-13498
  Consistent button style

Docker images

Designer Web

Hash: sha256:c0fe3e55ef7217bac91199f3a880bdd5f90c7a2fb6cbd16d8533dd735435618c

docker pull euadigportalcoredev02acr.azurecr.io/ace-designer:25.4.1

Runtime server

Hash: sha256:42b5b78ec7dcd993b8705b061fcec0be0523a1f5433d28840962a62947dd4add

docker pull euadigportalcoredev02acr.azurecr.io/ace-runtime-server:25.4.1

Deployment API server

Hash: sha256:60b88b6065690e81eaf8d3f533201a476d78126973b8f2a5cc8f4db241d0b6d4

docker pull euadigportalcoredev02acr.azurecr.io/ace-deployment-server:25.4.1

Scheduled job (BullMQ) administration

Hash: sha256:f23b4a91cdb91d3025e826b835a88fdd81bf5b415ae7b2264aec16cee0fb5942

docker pull euadigportalcoredev02acr.azurecr.io/bull-board:25.4.1

Developer API portal

Hash: sha256:50fd4b4f0c5d76d361a10b3dc6ec2b7fb41d6cb9cfec95b59decee06c8a3ed00

docker pull euadigportalcoredev02acr.azurecr.io/api-developer-portal:25.4.1

Designer Desktop

ACE Designer Desktop is available here