Font Size:
Ask Joget AI

Version 9.1.0.1

Version Highlights

Release Date: 8 July 2026
Editions: All Editions, Enterprise & Cloud Editions
Focus Areas: Bug fixes, security upgrades, dependency updates, UI/theme consistency, and performance improvements

Core Enhancements

Improvements to Joget's core features, including Builders, APIs, and overall platform performance.

  • Added a new aspect to print the stack trace whenever BitronixTransaction setRollbackOnly() is called.
  • Enhanced process archiving logic with separate progress tracking and improved error handling.
  • Added an icon position option to place the icon in the label for Form Fields to maintain backward compatibility with Joget DX 8.

Theme-Specific Fixes

Updates and fixes related to themes, ensuring better UI consistency and user experience.

  • Added an option to enable/disable the inherit behavior for default custom styling.
  • Fixed mispositioning of numeric fields, subform positions, and added borders to the Progressive and Universal Themes.
  • Standardized the Datalist Mobile CSS and reverted the mobile design for other themes.
  • Resolved a rendering issue in RTL where badges with a max-width caused display problems in Progressive, Universal, and XAdmin themes.
  • Fixed brand tooltip and brand name visibility issues across various themes, including the Joget DX 9 App Center and DX 9 Builder Theme.
  • Fixed login page UI issues, extra spacing on form errors, and overlapping login forms with error messages across themes like Trimeda and Joget DX 8 Themes.
  • Added a select element to the input-group margin reset rule and scoped the password field margin-bottom, fixing label and icon alignment issues.
  • Addressed inconsistent margin bottom issues when field icons are used in Progressive, Universal, and XAdmin themes.
  • Fixed border regressions in Form Sections where always-visible sections incorrectly showed borders. Borders now only apply to collapsible sections.
  • Adjusted the Right-to-Left (RTL) toggle icon in Form Sections to match the 18px inset used in Left-to-Right (LTR) layouts.

Plugin Improvements

Enhancements to plugins, plugin management, and plugin development for greater flexibility and stability.

  • Added icon support with an icon position option consistent with other form fields in the Time Picker plugin.

Bug Fixes and Improvements

List of bugs resolved in this release, along with general performance and stability improvements.

  • Fixed an issue where icon HTML was not retained when HTML code was written inside the input in the Icon Text Field.
  • Fixed encoding issues in the Icon TextField Property Editor.
  • Addressed slow builder loading on multi-tenant environments.
  • Fixed an issue where AppPluginUtil.getDefaultProperties improperly converts objects using the toString method.
  • Resolved performance issues with builder saving for App Git.
  • Fixed multiple separators appearing in Breadcrumbs.
  • Prevented duplicate list or userview entries and JSON errors when app or form titles contain quotes or apostrophes in Generate Apps.
  • Converted ntext columns for the definition table to nvarchar in the Database.
  • Prevented the jQuery UI dropdown from appearing after the native date picker closes on mobile devices.
  • Fixed the steps indicator of Multi Tools components remaining expanded when not configuring it.
  • Fixed an issue where app redirection failed and displayed a "page not found" error after logging in with IDP or MFA.
  • Fixed form builder element ordering issues caused by incorrect DOM-to-model index mapping.
  • Fixed the image upload field on Chrome failing to show the camera option on Android devices.
  • Resolved performance issues when a large number of workflow variables are used for non-routing purposes.
  • Added an else block to fallback to the profile or system timezone if no timezone is provided for Date Hash Variables.
  • Fixed the Form option binder retrieving all table records in Form Builder design mode.
  • Fixed section visibility control not working when used with a subform repeater.
  • Fixed workflow variables failing to save when calling certain workflow assignment APIs.
  • Fixed an issue in the UI Builder where the second prompt does not pop up when the user chooses "remove" in the first prompt, and custom messages not appearing when both custom JS and CSS exist.
  • Avoided dropping the existing form table when a schema probe fails due to transient DB errors.
  • Fixed excessive JOIN queries caused by session.refresh() in AbstractVersionedObjectDao.
  • Resolved an NPE when cloning apps containing tags or custom tables.
  • Added handling to skip YAML file saving when JSON is encrypted in protected apps.

Build & Dependencies

Updated components and dependencies within Joget, including third-party libraries and internal modules.

  • Updated the CodeMirror instances to the newest version.
  • Upgraded PostgreSQL to 42.7.11.
  • Upgraded Bouncy Castle to 1.84.
  • Upgraded Spring Security to 6.5.10.
  • Upgraded Spring Framework to 6.2.19.

Security Updates

Critical patches and security-related improvements.

  • Used case-insensitive comparison in ExpressionHashVariable to prevent bypass of getClass/getClassLoader access restrictions.
  • Fixed the secure authentication health check failing to detect OpenID Connect.
  • Allowed trusted session deserialization for the signed auth wrapper.
  • Disallowed changing values with Capabilities.setAccessibility for enhanced security.
  • Upgraded Apache Tomcat to version 11.0.22 to address multiple CVEs.

Enterprise & Cloud Specific

Fixes and improvements specific to Enterprise and Cloud editions.

Note
All Community edition updates are automatically included in Enterprise and Cloud.
  • Added a debug logger for BitronixRollbackAspect and included BitronixTransaction into woven classes.
  • Resolved performance issues caused by N+1 AJAX calls in the ProcessStatusDatalistFormatter.
  • Fixed a test failure caused by the Directory plugin name returning null.
  • Fixed broken date ranges on desktop and mobile in the Calendar Menu plugin.
  • Reverted the mobile design for other themes and added RTL alignments for the Janux Theme.
  • Prevented duplicate list or userview entries and JSON errors in Enterprise Generate Apps.
  • Fixed brand tooltip and brand name visibility issues within the Janux Theme and DX 8 Angle Theme.
  • Fixed the subform position in the Janux Theme.
  • Added AOP to improve performance in Shark when many workflow variables are used for non-routing purposes.
  • Fixed the save button in Multi Paged Forms being enabled on the last page, even in read-only and disabled modes.
  • Updated Glowroot from version 0.14.2 to 0.14.6 in the Enterprise Installer.
  • Fixed inconsistent margin bottoms and label alignment issues in the Janux Theme.
  • Upgraded Apache Neethi to 3.2.2, Bouncy Castle to 1.84, Spring Security to 6.5.10, Spring Framework to 6.2.19, and Spring Kafka to 3.3.16.
  • Upgraded Apache Tomcat to 11.0.22 in the Enterprise edition to address CVEs.
  • Resolved regressions of security hardening that caused the Beanshell class to stop working and the server to fail to start up in Cloud workflows.
  • Fixed a security exception thrown by the clean temp file scheduler task in the Cloud environment.

Upgrade notes

Due to Glowroot APM being upgraded to version 0.14.6, the following needs to be taken into consideration when upgrading to Joget DX 9.1:

  • wflow/glowroot/ folder: This must be replaced; otherwise, the Glowroot UI will not be accessible.
  • wflow/wflow-cluster.jar: This file must also be replaced.

Refer to Upgrading to Joget DX 9 for more information.

Known Issues

Full Changelogs

Bug Fixes and Improvements

All Editions

[ FIXED ]       CORE      : Used case-insensitive comparison to prevent bypass of getClass/getClassLoader access restrictions. 
[ FIXED ]       CORE      : Icon Text Field - Fixed icon html not retaining when html code is written inside input 
[ FIXED ]       CORE      : Property Editor - fixed encoding issue in IconTextField 
[ FIXED ]       CORE      : Slow builder loading on multi tenant environment. 
[ FIXED ]       CORE      : Calendar Menu - Added border to Progressive and Universal CORE 
[ FIXED ]       CORE      : Progressive/Universal - Fixed mispositioning of numeric fields 
[ ADDED ]      CORE      : Added an option to enable/disable the inherit behavior for the default styling.
[ FIXED ]       CORE      : AppPluginUtil - getDefaultProperties improperly converts objects using toString method. 
[ FIXED ]       CORE      : App Git - Performance issue with builder save. 
[ FIXED ]       CORE      : DataList - Reverted the mobile design for other COREs 
[ FIXED ]       CORE      : Datalist Mobile - Standardized the CSS across different COREs. 
[ FIXED ]       CORE  : Progressive/Universal/XAdmin COREs - Resolved a rendering issue in RTL where badges with a max-width caused display problems.
[ FIXED ]       CORE      : Breadcrumb - Fixed multiple separator appearing in Breadcrumb 
[ FIXED ]       CORE      : Generate Apps - Prevent duplicate list or userview entries and JSON errors when app or form titles contain quotes or apostrophes .
[ FIXED ]       CORE      : DB - Convert ntext columns for definition table to nvarchar .
[ ADDED ]      CORE      : Bitronix Aspect - Added new aspect to print stack trace whenever BitronixTransaction setRollbackOnly() is called
[ FIXED ]       CORE      : Governance - Fixed secure authentication health check does not detect OpenID Connect.
[ FIXED ]       CORE      : DatePicker - Prevent jQuery UI dropdown from appearing after native date picker closes on mobile. 
[ FIXED ]       CORE      : Brand Tooltip - Fixed brand name's padding left causing issue in Joget DX 9 App Center.
[ FIXED ]       CORE      : Brand Tooltip - Fixed brand tool tip overflow on long name without space. 
[ FIXED ]       CORE      : Brand Tooltip - Added CSS styling for brand tooltip in Joget DX 9 builder CORE.
[ FIXED ]       CORE      : Brand Name - Fixed long brand name not visible in every COREs. 
[ FIXED ]       CORE      : Property Editor - Steps indicator of Multi Tools components remain expanded when not configuring it 
[ FIXED ]       CORE      : DX 8 COREs - Remove unnecessary padding in the login page during RTL view.
[ FIXED ]       CORE      : Login Page - Fixed Login page UI issues and overlapping login form with error message. 
[ FIXED ]       CORE      : Fixed Login page UI issues and overlapping login form with error message. 
[ FIXED ]       CORE      : Trimeda - Fixed extra spacings on form-errors 
[ MODIFIED] CORE      : Updated the CodeMirror instances to the newest version
[ FIXED ]       CORE      : IDP - Fixed app redirect to page not found after login using IDP. 
[ FIXED ]       CORE      : MFA - Fixed an issue where app redirect to page not found after logging in with MFA. 
[ FIXED ]       CORE      : Trimeda CORE - Fixed bottom bottom not align correctly in mobile 
[ FIXED ]       CORE      : Form Builder - Fixed form builder element ordering issue caused by incorrect DOM-to-model index mapping .
[ FIXED ]       CORE      : Subform - Fixed subform position in Progressive and Universal CORE. 
[ FIXED ]       CORE      : FileUpload - img upload field on chrome not showing camera option on androids
[ FIXED ]       CORE      : WorkflowManagerImpl - Enhanced process archiving logic with separate progress tracking and improved error handling. 
[ FIXED ]       CORE      : Shark - Performance issues when lot of workflow variables used for non routing purpose. 
[ FIXED ]       CORE      : Date Hash Variable - Added else block to fallback to the profile or system timezone if no timezone provided.
[ FIXED ]       CORE      : Form Builder - Fixed form option binder retrieving all table records in Form Builder design mode.
[ FIXED ]       CORE      : Section - Fixed section visibility control not working when used with subform repeater. 
[ FIXED ]       CORE      : wflow-shark - Workflow Manager - Fixed workflow variable does not save when calling a certain workflow assignment API. 
[ FIXED ]       CORE      : JSPClientUtilities - Fixed workflow variable does not save when calling a certain workflow assignment API. 
[ FIXED ]       CORE      : UI Builder - Fixed the second prompt does not popup when user chosen "remove" in first prompt 
[ FIXED ]       CORE      : UI Builder - Fixed custom message not appear when BOTH custom js and custom css exist 
[ MODIFIED] CORE      : UI Builder - Fixed the existing custom CSS/JS not functioning as expected
[ FIXED ]       CORE      : wflow-consoleweb, Form Input - Added select element to input-group margin reset rule and scoped password field margin-bottom to only apply when password meter is present, fixing label and icon alignment issues. 
[ FIXED ]       CORE      : Progressive/Universal/XAdmin - Fixed inconsistent margin bottom when field icon is used. 
[ FIXED ]       CORE      : XAdmin CORE - Add padding bottom to form and subform section. 
[ ADDED ]     CORE      : wflow-core, Form Fields - Added icon position option to place icon in label for backward compatibility with DX 8.
[ MODIFIED] CORE      : wflow-jdbc - pom.xml - Upgrade postgresql to 42.7.11
[ MODIFIED] CORE      : pom.xml - Upgrade Bouncy Castle to 1.84
[ MODIFIED] CORE      : pom.xml - Upgrade spring security to 6.5.10
[ MODIFIED] CORE      : pom.xml - Upgraded Spring Framework to 6.2.19.
[ FIXED ]       CORE      : Security - Upgraded Apache Tomcat to 11.0.22 to address CVEs. 
[ FIXED ]       CORE      : Security - Allow trusted session deserialization for signed auth wrapper
[ FIXED ]       CORE      : Form Data - Avoid dropping existing form table when schema probe fails on transient DB errors
[ FIXED ]       CORE      : AbstractVersionedObjectDao - Excessive JOIN queries caused by session.refresh(). 
[ FIXED ]       CORE      : Form Section - RTL toggle icon now uses left: 18px to match the 18px inset used in LTR, preventing the icon from sitting flush against the edge in right-to-left layouts. 
[ FIXED ]       CORE      : Form Section - Fixed border regression where always-visible sections incorrectly showed borders, borders now only apply to collapsible sections. 
[ FIXED ]       CORE      : Clone App - Regression of  caused cloning app containing tags or custom tables throw NPE. 
[ FIXED ]       CORE      : FormDefinitionDaoImpl - Added handling to skip YAML file saving when JSON is encrypted in protected apps. 
[ FIXED ]       CORE      : Security - Disallow changing value with Capabilities.setAccessibility. 

Enterprise & Cloud Editions

[ FIXED ]       CORE      : File Manager - Clean temp file scheduler task is throwing security exception in cloud. 
[ FIXED ]      PLUGIN    : ProcessStatusDatalistFormatter - performance issue due to n+1 ajax calls
[ FIXED ]      PLUGIN   : Directory - Plugin name return null causing test failure.
[ FIXED ]      PLUGIN   : Calendar Menu - Fixed broken date range on Desktop and Mobile
[ FIXED ]       CORE      : DataList - Reverted the mobile design for other COREs 
[ FIXED ]       CORE      : Janux theme - Added text-align:right for the th and td under RTL 
[ FIXED ]       CORE      : Janux theme - Removed an unnecessary float: left on the badge element in RTL view. 
[ FIXED ]       CORE      : Generate Apps - Prevent duplicate list or userview entries and JSON errors when app or form titles contain quotes or apostrophes .
[ MODIFIED] CORE      : log4j2.xml - Added debug logger for BitronixRollbackAspect.
[ MODIFIED] CORE      : cloud-consoleweb - aop.xml - Added BitronixTransaction into woven classes.
[ ADDED ]     CORE      : Bitronix Aspect - Added aspect to print stack trace whenever BitronixTransaction setRollbackOnly() is called
[ FIXED ]       CORE      : Brand Tooltip - Fixed brand tool tip overflow on long name without space. 
[ FIXED ]       CORE      : Brand Name - Fixed long brand name not visible in Janux theme. 
[ FIXED ]       CORE      : DX 8AngleCORE - Fixed header is blocking the form error message during login
[ FIXED ]       CORE      : Subform - Fixed subform position in Janux theme. 
[ FIXED ]       CORE      : Shark - AOP for improve performance when lot of workflow variables used for non routing purpose. 
[ FIXED ]      PLUGIN   : Multi Paged Form - Fixed save button being only enabled on the last page even in read-only and disabled mode in DX 9.1.
[ FIXED ]      PLUGIN    : Multi Paged Form - Fixed save button being only enabled on the last page even in read-only mode.
[ MODIFIED] CORE      : Installer - Updated Glowroot from version 0.14.2 to 0.14.6.
[ FIXED ]       CORE      : Form Input - Added select element to input-group margin reset rule in Janux theme, fixing label and icon alignment issues. 
[ FIXED ]       CORE      : Janux - Fixed inconsistent margin bottom when field icon is used. 
[ ADDED ]    PLUGIN  : Time Picker - Added icon support with icon position option consistent with other form fields.
[ MODIFIED]    CORE  : NOTICE.txt - Upgrade apache neethi to 3.2.2, bouncy castle to 1.84 and spring security to 6.5.10
[ MODIFIED]   PLUGIN : pom.xml - Upgrade apache neethi to 3.2.2
[ MODIFIED]    CORE   : NOTICE.txt - Upgrade apache neethi to 3.2.2 and bouncy castle to 1.84
[ MODIFIED]   PLUGIN : pom.xml - Upgrade apache neethi to 3.2.2
[ FIXED ]       CORE    : cloud-wfengine - Security - Regression of security hardening causing beanshell class not working.
[ FIXED ]       CORE      : cloud-wfengine - Security - Regression of 7be7b6c6 causing server can't startup. 
[ MODIFIED] CORE  : pom.xml - Upgraded Spring Framework to 6.2.19 and Spring Kafka to 3.3.16.
[ FIXED ]       CORE      : Security - Upgraded Apache Tomcat to 11.0.22 to address CVEs. 
[ FIXED ]       CORE      : Form Section - Fixed border regression where always-visible sections incorrectly showed borders, borders now only apply to collapsible sections.
Created by Debanraj Ravindran Last modified by Debanraj Ravindran on Aug 05, 2026