Release 26.6

Release notes

See docker images below.

ACE 26.6.0

October 1, 2026

ACE Proxy catch-all routing

ACE Proxy can now forward an entire family of incoming paths to a single flow using a catch-all path parameter ({...name}), instead of requiring every sub-path to be declared as its own API operation. The flow can read the full unmatched tail of the path and, with the new $request global variable, the incoming request's query, path parameters and body - useful when building generic passthrough proxies or forwarding to a downstream API.

• DIG2022-90856
  Implement catch-all path routing for proxy
• DIG2022-90853
  Add request variable in context

Cryptography and binary data in the JS Code step

The JS Code step now exposes the native Node.js crypto and Buffer modules as $crypto and $Buffer globals, so flows can generate UUIDs, hash and sign data, encrypt/decrypt payloads, and encode/decode base64 or hex directly in a Code step without an external service.

• DIG2022-90865
  Inject crypto and buffer modules into ivm step

Performance improvements

This release reduces per-step overhead in the ACE runtime by removing redundant deep-clone operations from hot paths in the Evaluator, JS Code, Map, Jsonata and Mixed Flow steps, without changing step behavior.

• DIG2022-89927
  Optimize ACE runtime step executors by eliminating redundant deep clones on hot paths

ACE Designer Desktop for Mac

ACE Designer Desktop for macOS is now distributed as a signed DMG installer.

• DIG2022-91310
  Package ACE Designer Mac as DMG

Security

• DIG2022-90323
  Vulnerability fixes IP Week
• DIG2022-89859
  Vulnerability fixes 36.3

Package	CVEs
adm-zip-0.5.18	CVE-2026-39244
adm-zip-0.6.0	CVE-2026-92000
axios-1.16.0	CVE-2026-67320
compression-1.7.4	CVE-2026-87776
extract-zip-2.0.1	CVE-2026-56876
isomorphic-git-1.34.2	CVE-2026-89011
json-schema-ref-parser-14.0.1	CVE-2026-15195
nanoid-3.3.11	CVE-2026-73086
nanoid-5.1.5	CVE-2026-67214
proxy-addr-2.0.7	CVE-2026-90711

Docker images

Designer Web

Hash: sha256:eb47fd04630c3d044f25ebad059347f4caae88a51e86d311fb926498993f0a36

docker pull euadigportalcoredev02acr.azurecr.io/ace-designer:26.6.0

Runtime server

Hash: sha256:312c40312f77b3f90e36e8870ed84dcb294d2124b66c054bb0c5c76b484e2531

docker pull euadigportalcoredev02acr.azurecr.io/ace-runtime-server:26.6.0

Deployment API server

Hash: sha256:13b19486a83b3d6ae774a39806227dadc8c79b9fe8263998e938a94020677695

docker pull euadigportalcoredev02acr.azurecr.io/ace-deployment-server:26.6.0

Scheduled job (BullMQ) administration

Hash: sha256:f2228ccb597097e19993ce5d8933be2f06287731a9ed1e6df4fa4abd91973c31

docker pull euadigportalcoredev02acr.azurecr.io/bull-board:26.6.0

Developer API portal

Hash: sha256:b145bd738123cb716248f269691010a867f88893a0f1fff9c0c39b4bd187d7b7

docker pull euadigportalcoredev02acr.azurecr.io/api-developer-portal:26.6.0

Designer Desktop

ACE Designer Desktop is available here