Skip to main content
Version: ACE 5

Release 26.1

Deployment API URL changes

For testing deployment in mongo storage mode is not done by runtime server, but designer server instead.

This change affects only development setup.

In case of file storage setup need to add this setting to ace-designer environment variables.

ACE_WORKSPACE_STORAGE=file

In case of mongo storage setup need to move this setting from ace-runtime-server to ace-designer environment variables.

DEPLOYMENT_SERVICE_URL=<deployment server URL>

Configuration changes​

See configuration for more details.

Runtime server​

  • ACE_DISABLE_JSONATA_EXPRESSION_CACHE - Optionally disable JSONATA step performance optimization
  • DEPLOYMENT_SERVICE_URL - removed from runtime server, moved to designer server

Designer server​

  • DEPLOYMENT_SERVICE_URL - added to designer server, moved from runtime server
  • ACE_WORKSPACE_STORAGE - new variable for storage type, must match runtime server setting

Release notes​

See docker images below.

ACE 26.1.3​

March 10, 2026

Bug Fixes

  • DIG2022-79810
    Security: CVE-2026-29786(tar-7.5.9)
  • DIG2022-79603
    Security: CVE-2026-29063 (immutable-3.8.2)
  • DIG2022-79602
    Security: CVE-2026-2359 ,CVE-2026-3304 ,CVE-2026-3520 (multer-2.0.2)
  • DIG2022-79600
    Security: CVE-2026-0540 (dompurify-3.3.1)
  • DIG2022-79599
    Security: CVE-2026-27601 (underscore-1.13.6)
  • DIG2022-75577
    Security: CVE-2025-69873 (ajv-6.12.6)
  • DIG2022-75094
    Security: CVE-2026-1615 (jsonpath-1.2.1)
  • DIG2022-75722
    Security: CVE-2026-26280 , CVE-2026-26318 (systeminformation-5.27.14)
  • DIG2022-75721
    Security: CVE-2026-26960 (tar-7.5.7)
  • DIG2022-75720
    Security: CVE-2026-26996 (minimatch-3.1.2.tgz , minimatch-7.4.6.tgz , minimatch-5.1.0.tgz , minimatch-9.0.4.tgz)
  • DIG2022-75168
    Security: CVE-2026-2391 (qs-6.14.1)

ACE 26.1.1​

February 23, 2026

Bug Fixes

  • DIG2022-74934
    Request validation step doesn't validate arrays
  • DIG2022-75273
    Security: CVE-2025-69873 (ajv-8.17.1,ajv-8.12.0)

ACE 26.1.0​

February 13, 2026

Performance improvements​

This release includes performance improvements for Schema Validation and Jsonata steps. Improvement is mainly related to caching of compiled schemas and Jsonata expressions, and is most noticeable in case of large schemas or big Jsonata expressions.

  • DIG2022-60027
    Schema validation step optimization
  • DIG2022-60017
    Jsonata step performance optimization

Workspace validation​

This release contains beta implementation of workspace validation feature, which allows to validate workspace content for consistency and correctness.

  • DIG2022-14281
    Run validation from editor
  • DIG2022-12990
    Workspace Consistency Validation

Other features​

  • DIG2022-74620
    Remove runtime server to deployment server dependency
  • DIG2022-73274
    Update ACE community site URL in Designer

Bug Fixes

  • DIG2022-75049
    Security: CVE-2026-25639 (axios-1.13.2,axios-1.12.2)
  • DIG2022-74629
    Security: CVE-2025-61140 (jsonpath-1.1.1)
  • DIG2022-74610
    Security: CVE-2025-68470 (react-router-6.30.1)
  • DIG2022-74609
    Security: CVE-2026-22029 (router-1.23.0)
  • DIG2022-74608
    Security: CVE-2026-24842 , CVE-2026-23950, CVE-2026-23745 (tar-6.2.1)
  • DIG2022-74607
    Security: CVE-2026-24001 (diff-4.0.2)
  • DIG2022-74606
    Security: CVE-2025-13465 (lodash-es-4.17.21)
  • DIG2022-74605
    Security: CVE-2025-13465 (lodash-4.17.21)
  • DIG2022-73311
    Security: CVE-2025-15284 (qs-6.14.0)

Docker images​

Designer Web

Hash: sha256:038521520e1c9f71562b3f882e84e96a688b985ce277de7018df79558aa1d765
docker pull euadigportalcoredev02acr.azurecr.io/ace-designer:26.1.3

Runtime server

Hash: sha256:39ee653f018e3a946515134daf710f7dc3135b24f38d0bd1b90369dd09e1670b
docker pull euadigportalcoredev02acr.azurecr.io/ace-runtime-server:26.1.3

Deployment API server

Hash: sha256:ef6f45593e8d64d2c5670f7157a7aec30cc44d086361ee7ed611683cb2130150
docker pull euadigportalcoredev02acr.azurecr.io/ace-deployment-server:26.1.3

Scheduled job (BullMQ) administration

Hash: sha256:50fbecf39156df4945ad93d81dfec68ec352418b876639d40f5d8fd8f797d79f
docker pull euadigportalcoredev02acr.azurecr.io/bull-board:26.1.3

Developer API portal

Hash: sha256:7cc761a02ad231476589e0c9d56889ef82b78dfa4fdb9a983760b97b0092c3ce
docker pull euadigportalcoredev02acr.azurecr.io/api-developer-portal:26.1.3

Designer Desktop​

ACE Designer Desktop is available here