Skip to main content
Version: ACE 5

Release 26.1

Deployment API URL changes

For testing deployment in mongo storage mode is not done by runtime server, but designer server instead.

This change affects only development setup.

In case of file storage setup need to add this setting to ace-designer environment variables.

ACE_WORKSPACE_STORAGE=file

In case of mongo storage setup need to move this setting from ace-runtime-server to ace-designer environment variables.

DEPLOYMENT_SERVICE_URL=<deployment server URL>

Configuration changes​

See configuration for more details.

Runtime server​

  • ACE_DISABLE_JSONATA_EXPRESSION_CACHE - Optionally disable JSONATA step performance optimization
  • DEPLOYMENT_SERVICE_URL - removed from runtime server, moved to designer server

Designer server​

  • DEPLOYMENT_SERVICE_URL - added to designer server, moved from runtime server
  • ACE_WORKSPACE_STORAGE - new variable for storage type, must match runtime server setting

Release notes​

See docker images below.

ACE 26.1.4​

May 16, 2026

Bug Fixes

  • DIG2022-82808
    JSONata step returns object instead of array when array has a single element after upgrade to v26.1.3

ACE 26.1.3​

March 10, 2026

Bug Fixes

  • DIG2022-79810
    Security: CVE-2026-29786(tar-7.5.9)
  • DIG2022-79603
    Security: CVE-2026-29063 (immutable-3.8.2)
  • DIG2022-79602
    Security: CVE-2026-2359 ,CVE-2026-3304 ,CVE-2026-3520 (multer-2.0.2)
  • DIG2022-79600
    Security: CVE-2026-0540 (dompurify-3.3.1)
  • DIG2022-79599
    Security: CVE-2026-27601 (underscore-1.13.6)
  • DIG2022-75577
    Security: CVE-2025-69873 (ajv-6.12.6)
  • DIG2022-75094
    Security: CVE-2026-1615 (jsonpath-1.2.1)
  • DIG2022-75722
    Security: CVE-2026-26280 , CVE-2026-26318 (systeminformation-5.27.14)
  • DIG2022-75721
    Security: CVE-2026-26960 (tar-7.5.7)
  • DIG2022-75720
    Security: CVE-2026-26996 (minimatch-3.1.2.tgz , minimatch-7.4.6.tgz , minimatch-5.1.0.tgz , minimatch-9.0.4.tgz)
  • DIG2022-75168
    Security: CVE-2026-2391 (qs-6.14.1)

ACE 26.1.1​

February 23, 2026

Bug Fixes

  • DIG2022-74934
    Request validation step doesn't validate arrays
  • DIG2022-75273
    Security: CVE-2025-69873 (ajv-8.17.1,ajv-8.12.0)

ACE 26.1.0​

February 13, 2026

Performance improvements​

This release includes performance improvements for Schema Validation and Jsonata steps. Improvement is mainly related to caching of compiled schemas and Jsonata expressions, and is most noticeable in case of large schemas or big Jsonata expressions.

  • DIG2022-60027
    Schema validation step optimization
  • DIG2022-60017
    Jsonata step performance optimization

Workspace validation​

This release contains beta implementation of workspace validation feature, which allows to validate workspace content for consistency and correctness.

  • DIG2022-14281
    Run validation from editor
  • DIG2022-12990
    Workspace Consistency Validation

Other features​

  • DIG2022-74620
    Remove runtime server to deployment server dependency
  • DIG2022-73274
    Update ACE community site URL in Designer

Bug Fixes

  • DIG2022-75049
    Security: CVE-2026-25639 (axios-1.13.2,axios-1.12.2)
  • DIG2022-74629
    Security: CVE-2025-61140 (jsonpath-1.1.1)
  • DIG2022-74610
    Security: CVE-2025-68470 (react-router-6.30.1)
  • DIG2022-74609
    Security: CVE-2026-22029 (router-1.23.0)
  • DIG2022-74608
    Security: CVE-2026-24842 , CVE-2026-23950, CVE-2026-23745 (tar-6.2.1)
  • DIG2022-74607
    Security: CVE-2026-24001 (diff-4.0.2)
  • DIG2022-74606
    Security: CVE-2025-13465 (lodash-es-4.17.21)
  • DIG2022-74605
    Security: CVE-2025-13465 (lodash-4.17.21)
  • DIG2022-73311
    Security: CVE-2025-15284 (qs-6.14.0)

Docker images​

Designer Web

Hash: sha256:dd360e7cd903c84fab3162f8f007166005518bc41fdcf647fedb0bd51180f5aa
docker pull euadigportalcoredev02acr.azurecr.io/ace-designer:26.1.4

Runtime server

Hash: sha256:5d10a894294932c3ff8b88670927963a09f320195c6892b0d3a1e17dceedd46e
docker pull euadigportalcoredev02acr.azurecr.io/ace-runtime-server:26.1.4

Deployment API server

Hash: sha256:51e014368384804d0f5084c475d697417be061e461d2027803184fcbc2030723
docker pull euadigportalcoredev02acr.azurecr.io/ace-deployment-server:26.1.4

Scheduled job (BullMQ) administration

Hash: sha256:187e4b68231f64034ca11602c12dc7740da88d191fbcee5bdb33e8969d0dc33b
docker pull euadigportalcoredev02acr.azurecr.io/bull-board:26.1.4

Developer API portal

Hash: sha256:55b7a0bc48f7dc27a35ec23a2626db1e9598accb3e6e22fd3abc1bc8e99d92a3
docker pull euadigportalcoredev02acr.azurecr.io/api-developer-portal:26.1.4

Designer Desktop​

ACE Designer Desktop is available here