Version 9.1.1

Version Highlights

Release Date: 10 August 2026
Editions: All Editions, Enterprise & Cloud Editions
Focus Areas: Bug fixes, security upgrades, dependency updates, performance improvements, and UI/UX enhancements

Release Summary

This release is focused on stability, correcting a number of regressions introduced in 9.1.0 along with several long-standing problems that only appeared under real production load: connection pool deadlocks, runaway memory use, and slow builder pages. Security is the second theme, with two batches of dependency updates addressing known vulnerabilities and hardening of permission handling, session management, and directory access. Customers upgrading from 9.0.x to 9.1, and anyone running Joget in a cluster or with heavy database and form-builder usage, benefit most immediately.

The changes apply to all editions (Community, Enterprise, Cloud) unless specified.

Core Enhancements

Improvements to Joget's core features, including Builders, APIs, and overall platform performance.

• Section Visibility Rule Summary and Migration Notice: Section properties in the Form Builder now show a summary of the visibility rules that apply to that section, which rules are legacy and which have been migrated, the conditions they use, and how many elements they affect with direct actions to open or edit each rule. A badge marks sections whose rules are still pending migration, and migration now happens when a rule is edited rather than when the form is merely opened, so opening a form no longer changes it. Leaving the section properties with unsaved changes now prompts before discarding them. The same change resolves a system error that broke forms carrying visibility rules built on 9.0.x: a section whose visibility rule referenced a field nested inside that same section caused an unrecoverable error on rendering, submission, and subform loading, which in turn broke the process inbox for the affected app.
• Transaction Rollback Diagnostics: When a database transaction is marked for rollback, the server log now records where that happened, together with the underlying cause where it can be determined. Previously, a rollback with no accompanying error left no trace of what triggered it, which made intermittent submission and import failures very difficult to diagnose. The detail is written at default log levels, so no configuration change is needed to capture it.
• Opening complex forms took too long (Form Builder): A form pointing at a table with a large number of columns could take around 37 seconds to open, almost all of it processor time rather than database waiting. The editable element list is now cached, and repeated locale, timezone, and session writes during the request have been removed. Repeat testing after the fix recorded no slow page traces at all, with average load time down by roughly a third on DX8.
• Field ID warning in English under non-English locale: The warning shown when a field ID begins with a digit was displayed in English even with the system locale set to Arabic.
• The Repeater property editor uses the available space: Repeater items were cramped, and the collapsed and expanded states did not read clearly. Items are now wider, scroll within the panel while compact, and no longer overflow their border, in both left-to-right and right-to-left layouts.

Theme-Specific Fixes

Updates and fixes related to themes, ensuring better UI consistency and user experience.

• Grid Action Button Styling and Custom Labels: The Add, Remove, and Delete buttons in Form Grid and List Grid now inherit the active theme's colours instead of keeping a fixed appearance that clashed with branded applications, and their labels can be renamed from the builder so a grid used for attachments can read "Attach File" rather than "Add". Theme Builder gains a dedicated Grid component for controlling grid button styling and alignment centrally. Previously, the only way to achieve either was custom CSS against internal selectors.
• Theme Builder Without an Existing UI: Theme Builder can now be used in an application that contains no UI component. It renders a stand-in preview that can be navigated, so a theme can be designed and reviewed before any pages exist. This allows branding and look-and-feel work to proceed in parallel with the team building the forms, lists, and UI.
• Low memory warning unreadable: The warning shown when a server is low on memory had unreadable gauge text in dark mode, a close button overlapping the title in right-to-left layouts under the Trimeda theme, and squared-off corners in the older themes. The corresponding panel in the Performance Analyzer was corrected as well.
• Raw CSS appearing after submitting process form: With "Remove Auto Title from Process/Assignment Form" enabled in the Progressive theme, the theme's stylesheet was printed as visible text on the confirmation page after submitting a start form. Also affected the Universal, Janux, and X-Admin themes.
• Admin Console notification banners are readable in dark mode: Information and warning banners used light backgrounds that clashed with the dark interface. They now use darker tones while keeping text contrast.
• List checkboxes and row selection issues in Simple/Column List: In the Simple List and Column List, the checkbox was blocked by a container in right-to-left and mobile layouts, long text overflowed on mobile, and in the classic table, selecting one row also selected other rows sharing the same value.
• Form inputs not filling width on small screens: In the DX9 Builder Theme with the field label positioned to the left, inputs stopped short of the available width at 768 pixels and below. The date picker's calendar icon separating from its field at the same widths is corrected by the same change.
• Dashboard list loading in fraction of screen width: When an icon was configured on the label of a list or CRUD menu inside a Dashboard menu using a child UI, the list rendered in about 20% of the available width, and scrolling behaved inconsistently when several menus were configured.
• Preview opening in new tab in Firefox: Clicking Preview in any builder opened a separate browser tab instead of loading the preview panel. Affects all builders, including the add-on builders.
• UI menu sidebar flickering on hover: With the Trimeda theme, hovering over the side menu made the sidebar and its scrollbar flicker continuously at browser zoom levels above 100%.
• Tooltips hidden behind admin bar (DX8 line): Tooltips in App Composer were partly or fully covered by the admin bar.
• X-Admin checkbox tick visibility and mobile view issues: Setting a font colour on a checkbox element made the tick mark visible while the box was unselected. A related change had left card content appearing blank in mobile view; that is corrected too.
• Calendar missing border in Janux theme: The calendar view was missing its left, right, and bottom borders, unlike every other theme.
• Reordering grid columns jumping properties panel to top: Clicking the up or down arrow on a grid row in the property editor scrolled the panel back to the first column, losing the user's position in a long grid.
• Select box list filter misplacement and UI issues: With many options, the filter dropdown appeared out of position, including off-screen in right-to-left mobile layouts, the checkboxes were difficult to use in the Janux theme, long option labels broke the layout, the field did not take the full width on mobile, and the option list could not be scrolled at mobile and tablet widths.
• Permission settings select box inconsistent across themes: The permission configuration popup picked up styling from the surrounding theme, leaving a misaligned help link, a mispositioned search icon in Trimeda, a missing background in the other DX8 themes, and a close button that was invisible in the Classic and dark themes.
• Date filter calendar opening off-screen on mobile: With a list filter open and the page scrolled to the bottom on a mobile-width screen, the date picker appeared at the very bottom of the screen where it was obstructed rather than under its field.
• File picker misdrawn in API Connector builder: The file icon overflowed the field border on hover in the Classic theme, and the close icon on an uploaded document had no hover feedback in the light and dark themes.
• Mapping properties broken in RTL mode (Process Builder): Configuring a tool's mapping in the Process Builder produced misplaced icons, overlapping delete buttons, and containers that shifted when clicked, in both right-to-left and left-to-right layouts, with no dark theme styling.

Plugin Improvements

Enhancements to plugins, plugin management, and plugin development for greater flexibility and stability.

• Lists backed by an external database could hang (JDBC DataList Binder): A list using the JDBC binder against a custom datasource borrowed two connections from the same pool for a single render, so under concurrent load the pool could deadlock permanently and hold request threads open. This was reproduced at the shipped default pool size of eight connections and did not require unusual tuning. A render now holds only one connection at a time.
• Plugin Hash Variables evaluation failure (Cloud Edition): Plugin-provided hash variables returned unresolved, most visibly in generated reports where the PDF came out with the variable text in place of the data.
• UI permission checks now fail closed: Permission evaluation defaulted to granting access when the configuration could not be read or the permission plugin could not be found, which could expose a restricted page. Access is now denied in those cases. If a page relies on a permission plugin that is not installed, it will now be blocked rather than shown.
• Read-only Form Menus becoming editable: The Write Permission setting introduced in 9.1 was not applied to the Form Menu, so a menu configured as read-only rendered as an editable form.
• Option and list binders using older numeric-sort syntax failing: Conditions written as sortNo + 0 for numeric sorting failed with a query validation error after the move to Hibernate 6, breaking existing applications. That syntax is now recognised and rewritten, restoring the previous behaviour.
• Exporting application with plugins leaving them out: When an application had been imported on a server that did not already have one of its plugins, the plugin was installed but never recorded against the application, so choosing to export with plugins produced an archive without them. Missing plugin folders are now recovered during export.
• Only one set of web filter plugins running per request: When two web filter plugins had overlapping URL patterns, only one pattern's filters executed and the rest were skipped silently, with which one won being unpredictable. All matching filters now run, in order and without duplication.
• Concurrent plugin reloads producing a burst of errors: Two concurrent plugin reloads raced each other and filled the log with errors, and the plugin list could not be retrieved. Reloads are now serialised, with a separate lock per tenant so one tenant's reload does not block another's.

Bug Fixes and Improvements

List of bugs resolved in this release, along with general performance and stability improvements.

• Process designs could be lost without any user action (Enterprise Edition): On clustered deployments using the distributed second-level cache, saving or deploying a process package could read stale package metadata, and a process migration running against a slow database commit could leave the workflow package missing, wiping the design. Cache eviction and migration are now correctly ordered, and the Process Builder keeps the committed design visible while a migration is in progress, disables saving until it completes, then merges the latest server definition back into the builder and asks for the result to be reviewed.
• Excel export failure with many different formats: Exports containing a large number of differently formatted text values, such as mixed reference or invoice numbers, aborted with a server error instead of producing a file, because the workbook's limit of 250 number formats was reached. Formats are now reused correctly; spacing between a prefix or suffix and the number is preserved so a value like RM 1,234 exports as shown, and a warning is logged if the format limit is ever approached.
• Report generation hanging indefinitely: Internal image fetches during PDF generation had no timeout, so a single report could occupy a request thread forever and degrade the whole system. Connect and read timeouts of ten seconds each are now applied.
• iOS keyboard missing decimal point for numeric fields: Tapping a Numeric Text field on an iOS device produced a digits-only keypad, so decimal values could not be entered.
• JSON API list showing empty when only one record: Endpoints returned a single result as a plain object rather than a list of one, so a list built on that response rendered empty in preview and at runtime. Affected endpoints now always return a list.
• Numeric field arrows failing on very large numbers: The up and down arrows had no effect once a value was long enough to be rendered in scientific notation, which also caused validation to fail.
• Application repositories grew without limit and starved disk: Because nothing ever reclaimed space in an application's internal Git repository, it grew with every save, and on large applications this reached the point of saturating disk I/O and slowing every part of App Composer. Repository maintenance now runs on a schedule with a randomised start delay, temporary working copies are only created when there is something to save, and the maintenance task is shut down cleanly with the server.
• Orphaned Form Data check exhausting server memory: On systems holding many applications and application versions, running the check could fail with an out-of-memory error. Scanning no longer loads whole application definitions into memory for each keyword, which also makes the check faster. The same scanning change benefits Usages in the builders, and the dependency check when deleting builder components.
• Activity staying open after form submission: When a form field was mapped to a workflow variable that had not been declared in the Process Builder, submission appeared to succeed in the UI but the activity remained running and the process never advanced.
• Read-only fields written back over newer data (DX9 line): With an edit form left open, values loaded into read-only fields were resubmitted on save, overwriting any newer value written in the meantime by an integration or another user. Fields in a grid set to the Disabled write mode are now excluded from the submitted data.
• Exporting form by email failing on Oracle: The generated report returned a system error whenever a spreadsheet cell was empty.
• Import menu failing when on same page with form: Using the Import menu and a Form component together on the same page produced an error and no import, because the form consumed the uploaded file first. File handling on submission now matches files to the fields that own them, so plugins that accept their own uploads keep working alongside a form.
• Grid columns named with reserved word losing values: A Form Grid using the multi-row binder failed to load, and then failed to save, values for any column whose ID was a reserved word such as class, name, true, or false, and for IDs beginning with a digit. Loading, editing in the popup form, and persistence all now handle these IDs.
• Hidden mandatory fields blocking submission: A field with both a mandatory validator and a visibility rule still triggered its validation error while hidden, so the form could not be submitted and the error pointed at a field the user could not see.
• One failing hash variable stopping others from resolving: An error while processing a hash variable abandoned every remaining variable in the same string, leaving raw variable text in the output. Each variable is now processed independently, and empty prefixes and unknown variables are handled without failing.
• Live log updates not reaching other cluster nodes: Viewing one node's log from another node's interface showed no new lines until a manual refresh, because the broadcast to peer nodes was sent to an invalid address and each failing peer was then permanently ignored for the life of the server.
• Unassigning a user leaving page loading forever: Unassigning a user from a department showed a spinner that never cleared and blocked the screen. The same missing step affected the organisation, users, department, grade, running process, and archived process views. Buttons in the department and grade views also now use the standard console styling.
• Saving process with large mapping payload never completing: After adding a script tool to a complex process, saving left the builder pulsing indefinitely even though the save itself had succeeded, because the large response could not be parsed.
• Dragging in Process Builder canvas glitching and not scrolling: Dragging an element towards the canvas edge produced a jumping effect instead of scrolling, and scrolling to the bottom by dragging did not work at all. The edge-scroll behaviour now applies consistently across all builders.
• Transition exception names reverting to 'Exception': A transition's exception name displayed correctly until the Process Builder was reloaded, after which the label showed the transition type instead of the name that had been saved.
• Overview tool details opening as blank popup: In App Composer, the More Details icon on an Overview finding hash variables, scripts, or SQL opened an empty popup instead of showing the code. The first opening also displayed a collapsed gutter and clipped content.
• App Messages locale list unusable: In App Composer, the Choose Locale list rendered all locales concatenated into a single entry instead of a selectable list.
• Usages showing raw HTML instead of buttons: In the builders' Usages view, the View Code and Check Usages buttons appeared as HTML text and did nothing whenever the search keyword happened to match text inside the button markup. Keyword highlighting is now limited to the matched text, and matches next to underscores such as a physical table name are still highlighted.
• Long lines in code editor disappearing behind properties panel: Text in the code editor did not wrap and instead ran underneath the Builder Properties panel, putting part of the content out of reach. Affects the Custom HTML, Custom CSS/JS, and script editors.
• JSON editor pasting and wrapping issues: Keyboard paste did not work in the JSON definition editor in any builder, and wrapped long values overlapped the lines beneath them.
• Undo/redo not updating Advanced Tools view: After undoing a change made in the Permissions or Visibility tool, the tool still showed the old state until the page was refreshed, the builder was saved, or views were switched. Undo also no longer reopens the property editor for an unrelated element.
• Browser stuttering after using x-ray mode: Once the Form Builder's x-ray mode had been used, opening Advanced Tools items, Builder Settings, or returning to the design view caused brief freezes that persisted until the tab was reloaded, and affected the other builders in the same tab. A colour picker cleanup routine was running without end.
• No confirmation message after form submission: With a Form Menu that had a "Message Show After Complete" value but no redirect URL configured, submission succeeded silently, and the message was never shown. Also affected Run Process and CRUD menus, in the Progressive, X-Admin, Janux, and Universal themes.
• Date picker not filling in today's date on iOS: Confirming the native picker with Done, without moving off the highlighted default, left the field empty. This affected Date Only, Date and Time, and Time Only modes.
• Uploaded videos playback failure on iOS: Both .mp4 and .mov files failed to play after submission on iOS devices and in the mobile app, because the server always sent the whole file rather than the partial ranges iOS requests before playing.
• Misleading visibility rules indicator icon: The eye icon on a section carrying visibility rules suggested the section's own visibility state. It is now a list icon, which reads as a set of rules.
• Theme Builder not reporting selected element: Retrieving the currently selected element through the builder API returned nothing in Theme Builder, in both Global and Component views, unlike every other builder. Chinese translations for Theme Builder were added at the same time.
• Rule editor unstyled in dark mode and overlapping in RTL: Nested condition groups in the section visibility and process route rule editors had no dark theme styling, and the reverse button overlapped the sort button in right-to-left layouts.
• Row actions not rendering in custom list template: A list template that placed row actions inside its column block rendered them in the builder but not at runtime.
• Console window remaining open after server shutdown (Community Edition): Stopping the server left non-daemon background threads running, so the process never exited and the log window remained open.
• Offline page remaining on screen after connection restored: Refreshing the offline page simply redisplayed it, and the page could also be reached by URL while online. The browser now detects the restored connection and returns to the previous page, and the check reuses the existing progressive web app connectivity mechanism rather than polling.
• Avoided unnecessary JTA transactions for cache-first message lookups and redundant locale/timezone session writes: Removed redundant operations to improve database and processor performance under concurrent load.
• Fixed an issue where plugin files were removed along with form files, causing NPEs in FormServiceImpl: Solved a bug in form-file handling that caused NullPointerExceptions when deleting form attachments.

Build & Dependencies

Updated components and dependencies within Joget, including third-party libraries and internal modules.

• Updated PostgreSQL JDBC driver to 42.7.13.
• Updated MariaDB Java Client to 2.7.14.
• Updated Log4j dependencies to 2.26.1.
• Updated Jackson dependencies to 2.21.5.
• Updated ECharts library to 6.1.0.
• Excluded servlet-api from jsp-api dependency to resolve IDE conflicts.

Security Updates

Critical patches and security-related improvements.

• Tomcat Upgrades: Upgraded Apache Tomcat to version 11.0.24 to address security vulnerabilities (CVEs) on DX9, and 9.0.120 on DX8. Maven dependencies were updated for data-binding, clustering, database driver, logging, and authentication libraries to address known vulnerabilities.
• Session identifiers replaced after multi-factor sign-in: When one-time password or authenticator-based multi-factor authentication was used, the session identifier issued before sign-in stayed valid afterwards, leaving the application open to session fixation. A new identifier is now issued once authentication completes. Applies to the DX8 line.
• Plugin uploaded by tenant replacing a platform plugin (Cloud Edition): On multi-tenant installations, a user-uploaded plugin sharing an identity with a platform-supplied plugin took over from it. Platform plugins are now protected, and an upload that collides with an already-installed plugin identity is rejected with a clear message.

Enterprise & Cloud Specific

Fixes and improvements specific to Enterprise and Cloud editions.

• Dependency Upgrades: Upgraded Apache Tomcat to 11.0.24, Apache Ignite dependencies to v2.18.0, and added withSkipReadThrough implementation, and Kubernetes dependencies to v27.0.0 (refactoring related API calls).
• Failing external query breaking subsequent pages (Enterprise JDBC Binder): When a JDBC binder query failed against Microsoft SQL Server, for example after a column was removed, the connection was returned to the shared default pool still carrying an open transaction. Every later request that borrowed it failed immediately, so any navigation after the bad query produced a system error page. The connection is now rolled back and discarded instead of being reused.
• Added HTTP connection methods to SET_PROPERTY_WHITELIST in Cloud MultiTenantSecurityManager: Restores connection options while keeping multi-tenant security hardened.
• Builder presence requests separated in the bundled profiler: Long-running presence requests from the builders were recorded alongside ordinary web transactions and dominated the slow-trace list as false positives. They now appear under their own category.
• Blank encrypted column discarding spreadsheet submission: Submitting a spreadsheet form failed with a system error, and lost the entered data whenever a column formatted as Encrypted Text was left empty.
• Spreadsheet uploads deleted even with file deletion turned off: With 'Delete Actual File During Overwrite or Removal' unchecked, uploading duplicate files through a spreadsheet removed not only the duplicates but other files as well, unlike the same fields used directly in a form. Duplicate images with identical names also shared one thumbnail, and removing one removed the other.
• Files uploaded through spreadsheet unreachable: After submitting a form containing a spreadsheet with a file or image column, the stored link was broken and viewing the record showed a file-not-found error, with image thumbnails missing. Files with the same name are also correctly renamed on submission now.
• Repeated security exceptions filling server log (Cloud Edition): A permission check misread the call stack and blocked a framework operation it should have allowed, producing a continuous stream of stack traces in one case over 14,000 lines. The check now recognises the framework caller correctly and guards against re-entering itself.
• Performance tab opening logging connection reset warning: Accessing the performance monitor for the first time, and then its response time, slow trace, query, and service call views, produced warnings in the server log. Connections to the profiler are now pooled and reused, with the pool size configurable.
• Live log broadcasting no longer degrades as nodes are added: The work done to push new log lines to peer nodes grew sharply with the size of the cluster, which was noticeable on deployments running many nodes.
• Avoided redundant session writes during nonce handling and cleanup in Nonce Generator: Improved session persistence and performance.

Known Issues

• The confirmation message does not appear on the Task Delegation menu. A "Message Show After Complete" value configured on a Task Delegation menu is still not displayed after submission. Other menus that offer the setting, including Form Menu, Run Process, and CRUD menus, show it correctly. This is long-standing behaviour and not a change in this release.
• Shutdown may still log memory-leak warnings. The log window now closes as expected when the server is stopped, but warnings about retained threads can still be written during shutdown. They do not prevent the server from stopping and can be ignored.

Full Changelogs

Bug Fixes and Improvements

All Editions

    [ FIXED ]       CORE      : wflow-core - JDBC - Fix JDBC binder poisoning the shared "default" connection pool  . 
    [ FIXED ]       CORE      : wflow-core, wflow-consoleweb - Process Builder - Fixed stale Ignite package definition cache during package save/deploy and missing workflow package after process migration cleanup.   
    [ FIXED ]       CORE      : wflow-consoleweb - UI - Fixed popup size issues.  
    [ FIXED ]       CORE      : wflow-consoleweb - UI - Fixed popup sizing to fit to content.  
    [ FIXED ]       CORE      : jw-community - Security - Upgraded Apache Tomcat to 11.0.24 to address CVEs.  
    [ MODIFIED ]    CORE      : wflow-jdbc - pom.xml - Updated postgresql to 42.7.13.  
    [ MODIFIED ]    CORE      : wflow-jdbc - pom.xml - Updated mariadb-java-client to 2.7.14.  
    [ MODIFIED ]    CORE      : wflow-commons - pom.xml - Updated log4j dependencies to 2.26.1.  
    [ MODIFIED ]    CORE      : jw-community - pom.xml - Updated jackson dependencies to 2.21.5.  
    [ FIXED ]       CORE      : wflow-consoleweb, wflow-core - Visibility Tool - Added Section visibility rule summary and hardened legacy migration and rule evaluation for grouped, serialized, duplicate, and malformed rules  
    [ FIXED ]       CORE      : wflow-consoleweb - Visibility Tool - added a notice with button to inform user of unmigrated rules, migration to happen on edits not on opening, added a pending migration badge  
    [ FIXED ]       CORE      : wflow-core - VisibilityControlUtil - Fixed StackOverflowError when a section's visibility rule references a control field nested inside that same section  
    [ FIXED ]       THEME     : wflow-consoleweb - Boxy Dialog - Low memory warning popup styling and fixed close button position in RTL.  
    [ FIXED ]       CORE      : wflow-consoleweb - Usages - Guarded against null regex match in viewFoundItem to prevent view-code button from breaking on non-value keyword highlights  
    [ FIXED ]       CORE      : wflow-consoleweb - Usages - Scoped keyword highlight regex to pre text to avoid corrupting view-code/view icon markup  
    [ MODIFIED ]    CORE      : wflow-core - AppUtil - Use ClassUtils.getUserClass for plugin prefix mapping.  
    [ FIXED ]       CORE      : wflow-commons - Resource Bundle Message DAO - Avoided unnecessary JTA transactions for cache-first message lookups.  
    [ FIXED ]       CORE      : wflow-core - Locale Resolver - Avoided redundant locale and timezone session writes.  
    [ FIXED ]       CORE      : wflow-consoleweb - PluginWebFilterChain only executes first matched filter pattern cause overlapping URL patterns to silently skip.  
    [ FIXED ]       CORE      : wflow-core - Locale Resolver - Avoided redundant locale and timezone session writes.  
    [ FIXED ]       CORE      : wflow-consoleweb - Form Builder - Cached the editable element list to improve page load performance.  
    [ FIXED ]       CORE      : wflow-consoleweb, wflow-core, wflow-commons - User Profile - Used a more robust method to validate  
    [ FIXED ]       CORE      : wflow-consoleweb - Profile - Fixed & issue in profile name, and html entities passing validation  
    [ FIXED ]       CORE      : wflow-plugin-base - Plugin Manager - Base plugin should not replaced by user upload plugin in multi tenants.  
    [ FIXED ]       THEME     : wflow-core - Userview - Fixed custom CSS rendering as visible text on the form menu alert/redirect page in progressive (non-ajax) themes   
    [ FIXED ]       THEME     : wflow-consoleweb - Property Editor - Fixed UI Issues related to Property Editor  
    [ MODIFIED ]    THEME     : wflow-consoleweb - Form/List Grid - Fixed UI Inconsistency  
    [ FIXED ]       THEME     : wflow-core - Userview - Fixed alert message not shown after Form Menu submission in Progressive theme when no Redirect URL is configured (Swal undefined due to deferred script timing)  
    [ MODIFIED ]    CORE      : wflow-core - Bitronix Aspect - Change the stack trace always print when happened.  
    [ FIXED ]       CORE      : wflow-core, wflow-commons - JDBC DataList Binder - Fixed JDBC DataList binder connection-pool deadlock under concurrent load / . 
    [ FIXED ]       CORE      : wflow-core - JDBC DataList Binder - Fixed JDBC DataList binder connection-pool deadlock under concurrent load / . 
    [ FIXED ]       CORE      : wflow-core - Git - Regression causing appDefinition.xml saved empty package to git.  
    [ FIXED ]       CORE      : wflow-core - Gov Health Check > Orphaned Form Data Check and Builder > Usages - High memory usages when doing scanning.  
    [ FIXED ]       CORE      : wflow-consoleweb - JSON - Fix overlapping lines in CodeMirror 6 editor when long values wrap . 9.1-SNAPSHOT
    [ FIXED ]       CORE      : wflow-core - Form - Fixed mandatory validation still enforcing on fields hidden by visibility rules  
    [ FIXED ]       CORE      : wflow-core - Excel - Fixed Excel export failure when exceeding the 250 data format limit in .xlsx workbooks . 
    [ FIXED ]       CORE      : wflow-wfengine - Regression of  causing assignment with invalid variable can't complete.   
    [ FIXED ]       THEME     : wflow-core - Datepicker Calander Popup - Fixed Calendar Popup on Datalist Filter Under Mobile Breakpoint Obstruction issue.  
    [ FIXED ]       CORE      : wflow-consoleweb - Builder - Fixed RangeError after a successful save.   
    [ FIXED ]       CORE      : wflow-consoleweb - Process Builder - Fixed exception name not showing after refreshing  
    [ FIXED ]       CORE      : wflow-core - CustomITexResourceLoaderUserAgent - added HTTP timeouts for internal image fetches during PDF generation to prevent indefinite hangs   
    [ FIXED ]       CORE      : wflow-core - textfield - Fixed missing decimal input in ios keyboard  
    [ FIXED ]       THEME     : wflow-consoleweb - Theme Builder - Added dummy preview when there is no UI component to preview in Theme Builder.  
    [ MODIFIED ]    THEME     : wflow-consoleweb - Custom Coloris - Fixed observer runs indefinitely that cause slow performance  
    [ FIXED ]       CORE      : wflow-consoleweb - Section Visibility - Fixed misleading rules indicator icon in Form Builder Visibility tool . 
    [ FIXED ]       CORE      : wflow-consoleweb - Console Views - Fixed the infinite loading screen because of missing unblockUI()  
    [ FIXED ]       CORE      : wflow-core, wflow-consoleweb - Form Menu - Fixed Disabled write permission regression and added support for the new persistable readonly value.  
    [ MODIFIED ]    CORE      : wflow-core, wflow-consoleweb - pom.xml - Excluded servlet-api from jsp-api dependency to resolve IDE conflicts.   
    [ FIXED ]       CORE      : wflow-core - MfaAuthenticator - Change session ID after user login to mitigate session fixation attacks.   
    [ FIXED ]       CORE      : wflow-consoleweb - JSON Endpoints - Normalized data field to always return an array regardless of result count.  
    [ FIXED ]       CORE      : wflow-consoleweb - Numeric Field - Fixed issue with calculation returning Scientific Notation  
    [ FIXED ]       CORE      : wflow-consoleweb - Process Builder - Dragging Participant is causing glitching effect  
    [ ADDED ]       CORE      : wflow-consoleweb - Form Builder - Added Arabic translation for the ID starting with number warning.  
    [ FIXED ]       CORE      : wflow-install - Remove Tomcat sample apps and redirect ROOT to /jw in installer bundle.  
    [ FIXED ]       CORE      : wflow-core - Form Data Dao - Handle custom sorting query backward compatible issue after upgrade to Hibernate 6.   
    [ ADDED ]       CORE      : wflow-consoleweb - Repeater property - Increased width and ability to scroll repeater item when in compact.  
    [ FIXED ]       THEME     : wflow-consoleweb - DX9 Builder Theme - Fixed RTL Simple List Issue not fixed in Builder Theme  
    [ FIXED ]       THEME     : wflow-consoleweb - Builder Theme - Fixed the button panel width issue.  
    [ FIXED ]       THEME     : wflow-consoleweb - DX8 Themes - Fixed checkbox misalignment issues in dx8 theme.  
    [ FIXED ]       THEME     : wflow-consoleweb - Datalist Filter - Fixed datalist select box filter ui issues  
    [ FIXED ]       CORE      : wflow-commons - PluginThread - Regression causing getLocalPort() returns 0.   
    [ FIXED ]       CORE      : wflow-consoleweb - Performance - LogViewerAppender.broadcast increased exponentially with increased node count.   
    [ FIXED ]       THEME     : wflow-consoleweb - DX9 App Center - Fixed redirection back to Admin page, when pagination is clicked.   
    [ FIXED ]       CORE      : wflow-core - DatePicker - Fixed iOS native date picker not populating today's date when confirmed without changing the highlighted default.  
    [ FIXED ]       CORE      : wflow-core - FormServiceImpl - Fixed plugin files got removed along with the form files causing NPE.   
    [ FIXED ]       CORE      : wflow-core - UserviewUtil - Updated permission handling logic to fail-closed when plugin is not found.  
    [ FIXED ]       THEME     : wflow-consoleweb - Spreadsheet - Fixed dropdown getting cut off in DX9 Builder Theme  
    [ FIXED ]       CORE      : wflow-core - AppUtil - Hardened processHashVariable against empty prefix/value, null plugin lookups, and per-iteration failures.  
    [ MODIFIED ]    THEME     : wflow-consoleweb - Update echarts library to 6.1.0  
    [ FIXED ]       CORE      : wflow-core - Form - fixed multi row form binder not loading values on edit when column ID uses reserved keywords  
    [ FIXED ]       THEME     : wflow-consoleweb - Alert/notification banner - Fixed alert/notification banner too bright in dark mode.  
    [ FIXED ]       THEME     : wflow-consoleweb - Theme Builder - Added theme builder translations for ZH_CN and ZH_TW.  
    [ FIXED ]       THEME     : wflow-consoleweb - Tooltip - Increased the z index of the tooltip  
    [ FIXED ]       THEME     : wflow-consoleweb - Builder - Fixed preview opening in another tab  
    [ FIXED ]       THEME     : wflow-consoleweb - Side menu scrollbar - Fixed scrollbar flicker when hover on trimeda theme.  
    [ FIXED ]       THEME     : wflow-consoleweb - DX9 Builder Theme - Fixed Input field does not take full width when screen width is 768px or lower.  
    [ FIXED ]       THEME     : wflow-core - Section Visibility - Fixed section visibility lack of dark theme styling and RTL issue.  
    [ FIXED ]       CORE      : wflow-consoleweb - Builder Advanced Tools Visibility - Fixed undo redo not correctly updating advanced tools visibility changes in 9.1.  
    [ MODIFIED ]    THEME     : wflow-core - Color Admin Theme - Changed the background color of the progress bar to a darker shade of gray  
    [ FIXED ]       THEME     : wflow-consoleweb - Simple & Column List - Fixed RTL UI & Mobile Breakpoint Issues  
    [ FIXED ]       CORE      : wflow-consoleweb - Directory - UI disabled feature is still accessible by URL.  
    [ FIXED ]       CORE      : wflow-core - List Template - Inconsistent template parsing between builder and runtime.  
    [ FIXED ]       CORE      : wflow-core - AppServiceImpl - Refactored app import logic to add cascading saveOrUpdate.   
    [ FIXED ]       CORE      : wflow-commons - Installer - stopping joget server not closing log terminal automatically  
    [ FIXED ]       THEME     : wflow-consoleweb - XAdmin Theme - Resolved an issue in mobile view where the card displayed a white background, causing the card’s content to appear blank.  
    [ FIXED ]       THEME     : wflow-consoleweb/wflow-core - XAdmin Theme - Fixed setting font color will apply the color to the checkbox icon.  
    [ FIXED ]       THEME     : wflow-consoleweb - PropertyEditor - Fixed clicking up arrow on grid triggers scrolling to top.  
    [ FIXED ]       THEME     : wflow-consoleweb - Permission Menu - Fixed the configure popup page is not following the system theme.  
    [ FIXED ]       THEME     : wflow-consoleweb - PopupHeader - Fixed wrong value set for userviewThemeCss.  
    [ FIXED ]       THEME     : wflow-consoleweb - Builder - Added a background color to the chosen container when no search results are found.  
    [ FIXED ]       THEME     : wflow-consoleweb - Permission Menu - Fixed permission menu configuration popup having inconsistent styling across themes.  @1059 
    [ FIXED ]       THEME     : wflow-consoleweb - Manage Permission - Fixed helplink misalignment issue when Trimeda theme is used.  
    [ FIXED ]       CORE      : wflow-consoleweb - AppWebController - added HTTP Range request support for ios video playback  
    [ MODIFIED ]    CORE      : wflow-consoleweb - Userview Offline Handler - Redirect user to previous page (or home page) when it is offline  
    [ FIXED ]       THEME     : wflow-consoleweb - Property Editor - Fixed UI Issues with choose file icon  

Enterprise & Cloud Editions

    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - JDBC Binder - Fixed MSSQL pool poisoning from bad connection.   
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Form/List Grid - Fixed disabledAdd blocking save on new records  
    [ FIXED ]       THEME     : wflow-enterprise-plugins - janux theme - Fixed popup dialog showing extra blank space on long content.  
    [ FIXED ]       THEME     : wflow-enterprise-plugins - Janux Theme - Fixed popup sizing to fit to content.  
    [ FIXED ]       CORE      : jw-enterprise - Security - Upgraded Apache Tomcat to 11.0.24 to address CVEs.  
    [ MODIFIED ]    CORE      : wflow-cache-ignite - pom.xml - Updated ignite-kubernetes to 2.18.0.  
    [ MODIFIED ]    CORE      : jw-enterprise - NOTICE.txt - Updated postgresql to 42.7.13.  
    [ MODIFIED ]    CORE      : jw-enterprise - NOTICE.txt - Updated mariadb-java-client to 2.7.14.  
    [ MODIFIED ]    CORE      : jw-enterprise - NOTICE.txt - Updated log4j dependencies to 2.26.1.  
    [ MODIFIED ]    CORE      : jw-enterprise - Ignite - Upgraded Apache Ignite dependencies to v2.18.0 and added withSkipReadThrough implementation.  
    [ MODIFIED ]    CORE      : jw-enterprise - pom.xml - Upgraded Apache Kerby ASN.1 library to v2.1.2.  
    [ MODIFIED ]    PLUGIN    : wflow-enterprise-plugins - pom.xml - Removed explicit jfreechart dependency.  
    [ MODIFIED ]    CORE      : jw-enterprise - Kubernetes - Updated Kubernetes dependencies to v27.0.0 and refactored related API calls.  
    [ MODIFIED ]    CORE      : jw-enterprise - pom.xml - Updated jackson dependencies to 2.21.5.  
    [ FIXED ]       CORE      : wflow-enterpriseweb - Performance Analyzer - Fixed low memory warning popup not appearing due to Boxy's top position never being restored after its fade-in animation, and styled the popup title.  
    [ FIXED ]       CORE      : cloud-wfengine - MultiTenantSecurityManager - Added HTTP connection methods to SET_PROPERTY_WHITELIST.  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Nonce Generator - Avoided redundant session writes during nonce handling and cleanup.  
    [ FIXED ]       CORE      : cloud-wfengine - Plugin Manager - Base plugin should not replaced by user upload plugin in multi tenants.  
    [ MODIFIED ]    PLUGIN    : wflow-enterprise-plugins, wflow-enterpriseweb - Form/List Grid - Fixed UI Inconsistencies & Added a new Grid Component to Theme Builder  
    [ FIXED ]       CORE      : joget-enterprise - Bitronix Aspect - Correction of bf629dbe.  
    [ MODIFIED ]    CORE      : joget-enterprise - Bitronix Aspect - In scope for BitronixRollbackAspect to make the stack trace always print when happened.  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - JDBC DataList Binder - Fixed JDBC DataList binder connection-pool deadlock under concurrent load / . 
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Spreadsheet - Fixed Spreadsheet duplicated image/file upload are deleted even option is unchecked.  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Spreadsheet - NPE in formatData when encrypted column value is missing from submitted row . 
    [ FIXED ]       CORE      : wflow-enterpriseweb - APM - Fixed connection reset warning when accessing performance tab  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Theme Builder - Added dummy preview when there is no UI component to preview in Theme Builder.  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - spreadsheetPDF - Fixed export spreadsheet form email return error on empty cell in Oracle   
    [ MODIFIED ]    CORE      : wflow-enterprise-extra, wflow-enterprise-plugins - pom.xml - Excluded servlet-api from jsp-api dependency to resolve IDE conflicts.   
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - SystemVariableConsolePage - Normalized "data" fields to consistently return arrays.  
    [ FIXED ]       CORE      : wflow-enterpriseweb - IdentityProviderController - Normalized "data" fields to consistently return arrays.  
    [ FIXED ]       CORE      : wflow-enterpriseweb - GovernanceWebController - Normalized data field to always return an array in retrieveClusterNode endpoint.  
    [ FIXED ]       CORE      : wflow-install/wflow-enterprise-install - Remove Tomcat sample apps and redirect ROOT to /jw in installer bundle.  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Form/List Grid - Fixed disable add new row is not working.  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - dashboard - Fixed dashboard ui does not load with set portlet width when label icon is present.   
    [ FIXED ]       CORE      : cloud-wfengine - MultiTenantSecurityManager - Resolved false-positive blocking of Felix framework and improved class name checking in isRestrictedReflectionPermission.  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Spreadsheet - Fixed File/Image upload is not retained and the file/image with same filename is not renamed after form submission  
    [ FIXED ]       THEME     : wflow-consoleweb - Datalist Filter - Fixed datalist select box filter ui issues  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Datalist Filter - Fixed issues regarding with datalist filter  
    [ FIXED ]       CORE      : cloud-consoleweb - Performance - LogViewerAppender.broadcast increased exponentially with increased node count.   
    [ FIXED ]       CORE      : wflow-enterpriseweb - apmviewer - Fixed regression after echart upgrade to 16.1.0  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Form Grid - fixed multi row form binder not loading values on edit when column ID uses reserved keywords  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Theme Builder - Support the use of CustomBuilder.Builder.selectedEl to retrieve current selected element.  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Simple & Column List - Fixed RTL UI & Mobile Breakpoint Issues  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Calendar Border- Fixed Calendar does not have border in Janux theme.  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Permission Menu - Fixed plugin config page is not show when refine control is enabled.  
    [ FIXED ]       PLUGIN    : wflow-enterprise-plugins - Permission Menu - Fixed permission menu configuration popup having inconsistent styling across themes.  
    [ ADDED ]       CORE      : wflow-enterprise-install - Glowroot - PresenceServlet instrumentation plugin to separate builder presence URLs.