Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • FLEXDEPLOY-8873 - Pipeline security permissions can now be overridden at individual pipeline level to allow for finer-grained access to pipeline management when necessary. Additionally, Bulk Update Permissions is available to simplify the update of permissions on more than one pipeline.

  • Active Directory / LDAP Realm and Email passwords are now migrated to Local Credential Store.

    • FLEXDEPLOY-12038 - Encrypted fields on the Email Settings are now stored as credentials. Existing passwords have been converted into credentials with the naming format "Email Communication - <field name>" (e.g. Email Communication - IMAP Password).

  • FLEXDEPLOY_12040 - Updated Joda Time library to resolve vulnerability CVE-2024-23080.

  • FLEXDEPLOY-12138 - Updated Spring-Core library to resolve vulnerability CVE-2024-22233.

  • FLEXDEPLOY-11168 - Updated Pac4J version shipped with FlexDeploy is from 4.5.7 to 5.7.3. This is used when OpenID or SAML based SSO is configured. Resolves vulnerability SNYK-JAVA-COMNIMBUSDS-6247633.

...