Version 8.2.12

Version Highlights

Release Date: 12 August 2026
Editions: All Editions, Enterprise & Cloud Editions
Focus Areas: Bug fixes, security upgrades, database/cache optimization, and RTL UI fixes

Release Summary

This release is focused on stability, correcting several long-standing problems that only appeared under real production load: connection pool deadlocks, runaway memory use, and slow builder pages. Security is the second theme, with two batches of dependency updates addressing known vulnerabilities and hardening of permission handling, session management, and directory access. Anyone running Joget in a cluster or with heavy database and form-builder usage benefits most immediately.

The changes apply to all editions (Community, Enterprise, Cloud) unless specified.

Core Enhancements

Improvements to Joget's core features, including Builders, APIs, and overall platform performance.

• Transaction Rollback Diagnostics: When a database transaction is marked for rollback, the server log now records where that happened, together with the underlying cause where it can be determined. Previously, a rollback with no accompanying error left no trace of what triggered it, which made intermittent submission and import failures very difficult to diagnose. The detail is written at default log levels, so no configuration change is needed to capture it.

Theme-Specific Fixes

Updates and fixes related to themes, ensuring better UI consistency and user experience.

• Resolved a rendering issue in RTL where badges with a max-width caused display problems across Progressive, Universal, and XAdmin themes.
• Fixed brand tooltip overflow on long names without spaces and resolved brand name visibility across all themes.
• Removed unnecessary padding on the login page in RTL view for DX8 Themes, and resolved login page UI issues and overlapping error messages.
• Fixed form error spacing in the Trimeda theme and incorrect bottom alignment on mobile devices.
• Fixed the subform position in Progressive and Universal themes.
• Fixed progress bar background color in the Color Admin Theme and resolved white background card issues in mobile view for the XAdmin Theme.

Bug Fixes and Improvements

List of bugs resolved in this release, along with general performance and stability improvements.

• Fixed an issue where icon HTML was not retained in the Icon Text Field when written inside the input.
• Resolved an encoding issue in the Icon TextField Property Editor.
• Addressed slow builder loading in multi-tenant environments.
• Fixed AppPluginUtil.getDefaultProperties improperly converting objects using toString().
• Application repositories grew without limit: Because nothing ever reclaimed space in an application's internal Git repository, it grew with every save, and on large applications this reached the point of saturating disk I/O and slowing every part of App Composer. Repository maintenance now runs on a schedule with a randomised start delay, temporary working copies are only created when there is something to save, and the maintenance task is shut down cleanly with the server.
• Prevented duplicate list or userview entries and JSON errors when titles contain quotes or apostrophes in Generate Apps.
• Converted ntext columns to nvarchar for the definition table in the database.
• Fixed the multi tools steps indicator remaining expanded when not configuring it.
• Fixed secure authentication health check failing to detect OpenID Connect.
• Fixed an issue where app redirection failed and displayed a "page not found" error after logging in with MFA.
• Fixed form builder element ordering issues caused by incorrect DOM-to-model index mapping.
• Fixed the image upload field on Chrome failing to show the camera option on Android devices.
• Enhanced process archiving logic with separate progress tracking and improved error handling.
• Resolved performance issues when a large number of workflow variables are used for non-routing purposes.
• Added an else block to fallback to the profile or system timezone if no timezone is provided for Date Hash Variables.
• Fixed the Form option binder retrieving all table records in Form Builder design mode.
• Fixed section visibility control not working when used with a subform repeater.
• Fixed workflow variables failing to save when calling certain workflow assignment APIs.
• Avoided dropping the existing form table when a schema probe fails due to transient DB errors.
• Resolved excessive JOIN queries caused by session.refresh() in AbstractVersionedObjectDao.
• Resolved an NPE during app cloning when the app contains tags or custom tables.
• Report generation could hang indefinitely: Internal image fetches during PDF generation had no timeout, so a single report could occupy a request thread forever and degrade the whole system. Connect and read timeouts of ten seconds each are now applied.

Build & Dependencies

Updated components and dependencies within Joget, including third-party libraries and internal modules.

• Maven dependencies updated to address known security vulnerabilities: Covers the data-binding, clustering, database driver, logging, and authentication libraries, including updates to
  • Bouncy Castle to 1.84
  • PostgreSQL to 42.7.11
  • log4j to 2.26.1
  • jackson to 2.21.5
  • mariadb-java-client to 2.7.14.

Security Updates

Critical patches and security-related improvements.

• Tomcat Upgraded to 9.0.120: Upgraded Apache Tomcat to version 9.0.120 to address known security vulnerabilities (CVEs).
• Allowed trusted session deserialization for the signed auth wrapper.
• Session identifiers are now replaced after multi-factor sign-in: When one-time password or authenticator-based multi-factor authentication was used, the session identifier issued before sign-in stayed valid afterwards, leaving the application open to session fixation. A new identifier is now issued once authentication completes. Applies to the DX8 line.

Enterprise & Cloud Specific

Fixes and improvements specific to Enterprise and Cloud editions.

• Tomcat Upgraded to 9.0.120: Upgraded Apache Tomcat to version 9.0.120 to address known security vulnerabilities (CVEs).
• Resolved performance issues caused by N+1 AJAX calls in the ProcessStatusDatalistFormatter.
• Added text-align:right and removed unnecessary badge float alignments under RTL view for the Janux Theme.
• Prevented duplicate list or userview entries and JSON errors in Enterprise Generate Apps.
• Transaction Rollback Diagnostics: Added the Bitronix Aspect to print the stack trace whenever BitronixTransaction setRollbackOnly() is called in wflow-enterpriseweb. When a database transaction is marked for rollback, the server log now records where that happened, together with the underlying cause where it can be determined.
• Fixed brand tooltip and brand name visibility issues within the Janux Theme.
• Fixed header blocking form error messages during login in DX8AngleTheme.
• Fixed subform position in the Janux Theme.
• Added AOP to improve performance in Shark when many workflow variables are used for non-routing purposes.
• Fixed the save button in Multi Paged Forms being enabled on the last page even in read-only mode.
• Updated Glowroot from version 0.14.2 to 0.14.6 in the Enterprise Installer.
• Resolved connection-pool deadlock in JDBC DataList Binder under concurrent load.
• Lists backed by an external database could hang until the server was restarted: Resolved a connection-pool deadlock in JDBC DataList Binder under concurrent load. A list using the JDBC binder against a custom datasource borrowed two connections from the same pool for a single render, so under concurrent load the pool could deadlock permanently and hold request threads open. A render now holds only one connection at a time.

Full Changelogs

Bug Fixes and Improvements

All Editions

    [ FIXED ]    CORE   : wflow-consoleweb - Icon Text Field - Fixed icon html not retaining when html code is written inside input
    [ FIXED ]    CORE   : wflow-core - ExpressionHashVariable - Used case-insensitive comparison to prevent bypass of getClass/getClassLoader access restrictions.
    [ FIXED ]    CORE   : wflow-consoleweb - Property Editor - fixed encoding issue in IconTextField
    [ FIXED ]    CORE   : wflow-plugin-base - Slow builder loading on multi tenant environment.
    [ FIXED ]    CORE   : wflow-core - AppPluginUtil - getDefaultProperties improperly converts objects using toString method.
    [ FIXED ]    CORE   : wflow-core - App Git - Performance issue with builder save.
    [ FIXED ]    THEME  : wflow-consoleweb – Progressive/Universal/XAdmin themes – Resolved a rendering issue in RTL where badges with a max-width caused display problems.
    [ FIXED ]    CORE   : wflow-core - Generate Apps - Prevent duplicate list or userview entries and JSON errors when app or form titles contain quotes or apostrophes.
    [ FIXED ]    CORE   : wflow-consoleweb - DB - Convert ntext columns for definition table to nvarchar.
    [ ADDED ]    CORE   : wflow-core - Bitronix Aspect - Added new aspect to print stack trace whenever BitronixTransaction setRollbackOnly() is called
    [ FIXED ]    CORE   : wflow-core - Governance - Fixed secure authentication health check does not detect OpenID Connect.
    [ FIXED ]    THEME  : wflow-consoleweb - Brand Tooltip - Fixed brand tool tip overflow on long name without space.
    [ FIXED ]    THEME  : wflow-core - Brand Name - Fixed long brand name not visible in every themes.
    [ FIXED ]    CORE   : wflow-consoleweb - Property Editor - Steps indicator of Multi Tools components remain expanded when not configuring it
    [ FIXED ]    THEME  : wflow-consoleweb - DX8 Themes - Remove unnecessary padding in the login page during RTL view.
    [ FIXED ]    THEME  : wflow-core/wflow-consoleweb - Login Page - Fixed Login page UI issues and overlapping login form with error message.
    [ FIXED ]    THEME  : wflow-consoleweb - Trimeda - Fixed extra spacings on form-errors
    [ FIXED ]    CORE   : wflow-core - MFA - Fixed an issue where app redirect to page not found after logging in with MFA.
    [ FIXED ]    THEME  : wflow-consoleweb - Trimeda theme - Fixed bottom bottom not align correctly in mobile
    [ FIXED ]    CORE   : wflow-consoleweb - Form Builder - Fixed form builder element ordering issue caused by incorrect DOM-to-model index mapping.
    [ FIXED ]    THEME  : wflow-consoleweb - Subform - Fixed subform position in Progressive and Universal Theme.
    [ FIXED ]    CORE   : wflow-core - FileUpload - img upload field on chrome not showing camera option on androids
    [ FIXED ]    CORE   : wflow-wfengine - WorkflowManagerImpl - Enhanced process archiving logic with separate progress tracking and improved error handling.
    [ FIXED ]    CORE   : wflow-wfengine - Shark - Performance issues when lot of workflow variables used for non routing purpose.
    [ FIXED ]    CORE   : wflow-core - Date Hash Variable - Added else block to fallback to the profile or system timezone if no timezone provided.
    [ FIXED ]    CORE   : wflow-core - Form Builder - Fixed form option binder retrieving all table records in Form Builder design mode.
    [ FIXED ]    CORE   : wflow-core - Section - Fixed section visibility control not working when used with subform repeater.
    [ FIXED ]    CORE   : wflow-wfengine - JSPClientUtilities - Fixed workflow variable does not save when calling a certain workflow assignment API.
    [ MODIFIED ] CORE   : wflow-core - pom.xml - Upgrade Bouncy Castle to 1.84
    [ MODIFIED ] CORE   : wflow-jdbc - pom.xml - Upgrade postgresql to 42.7.11
    [ FIXED ]    CORE   : jw-community - Security - Upgraded Apache Tomcat to 9.0.120 to address CVEs.
    [ FIXED ]    CORE   : wflow-core - Security - Allow trusted session deserialization for signed auth wrapper
    [ FIXED ]    CORE   : wflow-core - Form Data - Avoid dropping existing form table when schema probe fails on transient DB errors.
    [ FIXED ]    CORE   : wflow-core - AbstractVersionedObjectDao - Excessive JOIN queries caused by session.refresh().
    [ FIXED ]    CORE   : wflow-core - Clone App - Regression of clone callback caused cloning app containing tags or custom tables throw NPE.

Enterprise & Cloud Editions

    [ FIXED ]    PLUGIN : wflow-enterprise-plugins - ProcessStatusDatalistFormatter - performance issue due to n+1 ajax calls
    [ FIXED ]    THEME  : wflow-enterprise-plugins - Janux Theme - Added text-align:right for the th and td under RTL
    [ FIXED ]    THEME  : wflow-enterprise-plugins - Janux Theme - Removed an unnecessary float: left on the badge element in RTL view.
    [ FIXED ]    PLUGIN : wflow-enterprise-plugins - Generate Apps - Prevent duplicate list or userview entries and JSON errors when app or form titles contain quotes or apostrophes.
    [ ADDED ]    CORE   : wflow-enterpriseweb - Bitronix Aspect - Added aspect to print stack trace whenever BitronixTransaction setRollbackOnly() is called
    [ FIXED ]    THEME  : wflow-enterprise-plugins - Brand Tooltip - Fixed brand tool tip overflow on long name without space.
    [ FIXED ]    THEME  : wflow-enterprise-plugins - Brand Name - Fixed long brand name not visible in janux theme.
    [ FIXED ]    THEME  : wflow-enterprise-plugins - DX8AngleTheme - Fixed header is blocking the form error message during login
    [ FIXED ]    THEME  : wflow-consoleweb - Subform - Fixed subform position in Janux Theme.
    [ FIXED ]    CORE   : jw-enterprise - Shark - AOP for improve performance when lot of workflow variables used for non routing purpose.
    [ FIXED ]    PLUGIN : wflow-enterprise-plugins - Multi Paged Form - Fixed save button being only enabled on the last page even in read-only mode.
    [ MODIFIED ] CORE   : jw-enterprise - Installer - Updated Glowroot from version 0.14.2 to 0.14.6.
    [ FIXED ]    CORE   : jw-enterprise - Security - Upgraded Apache Tomcat to 9.0.120 to address CVEs.