Release 25.8

Release notes

See docker images below.

ACE 25.8.3

February 23, 2026

Bug Fixes

• DIG2022-74934
  Request validation step doesn't validate arrays
• DIG2022-75273
  Security: CVE-2025-69873 (ajv-8.17.1,ajv-8.12.0)

ACE 25.8.2

February 2, 2026

Bug Fixes

• DIG2022-74610
  Security: CVE-2025-68470 (react-router-6.30.1)
• DIG2022-74609
  Security: CVE-2026-22029 (router-1.23.0)
• DIG2022-74608
  Security: CVE-2026-24842, CVE-2026-23950, CVE-2026-23745 (tar-6.2.1)
• DIG2022-74607
  Security: CVE-2026-24001 (diff-4.0.2)
• DIG2022-74606
  Security: CVE-2025-13465 (lodash-es-4.17.21)
• DIG2022-74605
  Security: CVE-2025-13465 (lodash-4.17.21)

ACE 25.8.1

January 8, 2026

Bug Fixes

• DIG2022-73311
  Security: CVE-2025-15284 (qs-6.14.0)

ACE 25.8.0

January 5, 2026

Features

• DIG2022-60016
  Global expression variable optimizing
• DIG2022-71101
  Flow step list UI - handle flow step list UI
• DIG2022-71098
  Flow saving - handle flow saving
• DIG2022-71063
  Flow editor - empty step name by default
• DIG2022-67257
  Migrate bullboard to ESM
• DIG2022-67256
  Migrate runtime module to ESM
• DIG2022-67249
  Migrate runtime server to ESM

Bug Fixes

• DIG2022-72391
  Security: CVE-2025-68154 (systeminformation)
• DIG2022-71944
  Security: CVE-2025-64756 (glob-10.3.10)
• DIG2022-71659
  Security: CVE-2025-65945 (jws-3.2.2)
• DIG2022-71658
  Security: CVE-2025-66400 (mdast-util-to-hast-13.2.0)
• DIG2022-71657
  Security: CVE-2025-64718 (js-yaml-3.14.1, js-yaml-4.1.0)
• DIG2022-71656
  Security: CVE-2025-13466 (body-parser-2.2.0)
• DIG2022-71946
  Unable to Execute the JS Code Step flow in ACE
• DIG2022-70754
  REST step - Basic authorization support - missing field handling
• DIG2022-64005
  Path parameters with dash doesn't work

Docker images

Designer Web

Hash: sha256:84b3fa0e3ecbf69cde56c07f036bc328a95fb7fc5295941e4dfd97bd448e2baa

docker pull euadigportalcoredev02acr.azurecr.io/ace-designer:25.8.3

Runtime server

Hash: sha256:c5c8c16f7245683a8f33b0bc6496b4b9e13563389c316d298a6c45ba432ac6ad

docker pull euadigportalcoredev02acr.azurecr.io/ace-runtime-server:25.8.3

Deployment API server

Hash: sha256:0d274f55dc35d648382d7607b3c437a976135ec54f86868158eefd58874ddc42

docker pull euadigportalcoredev02acr.azurecr.io/ace-deployment-server:25.8.3

Scheduled job (BullMQ) administration

Hash: sha256:6a18017b80c00c4d6fa886c9623628a1952d4f335a731eff9c7857b2c90b981e

docker pull euadigportalcoredev02acr.azurecr.io/bull-board:25.8.3

Developer API portal

Hash: sha256:7e35398ad8446cc31fead0dfa8a714bac69935c298dcf3eef12430a892bdd5b2

docker pull euadigportalcoredev02acr.azurecr.io/api-developer-portal:25.8.3

Designer Desktop

ACE Designer Desktop is available here