Blueriq 15.0.1 Bug Fixes

BQ-16019

JAVA Runtime

CVE-2022-24891 was reported on the esapi third party library.

We updated the esapi library to version 2.4.0.0, which doesn't contain the vulnerability.

BQ-15973

JAVA Runtime

CVE-2022-23457 was reported on the esapi third party library.

We updated the esapi library to version 2.4.0.0, which doesn't contain the vulnerability.

CSD-4098

JAVA Runtime

In certain circumstances, where the process engine was called directly from custom code, unlocking a case would lead to an exception.
Additionally, the legacy toggle blueriq.legacy.use-legacy-case-unlocking did not properly revert the behavior case unlocking in the process engine to the previous implementation.

A method regarding case unlocking now runs in a database transaction.
The legacy toggle was passed improperly to one location where it was used. We now consider the legacy toggle properly.

CSD-4092

Studio

The name of a repository and branch was inadvertently limited to 50 characters, which should have been 100 characters instead.

Repository and branch names can now be 100 characters again, aligning with the validation that is done by the Studio client.

BQ-15691

JAVA Runtime

Since the spring boot upgrade to version 2.6 a circular dependency error would be raised if the case-engine-client profile is active.

Moved ILicenseProvider bean into own config file to make the AquimaConfig not dependent on it and thus breaking the cycle.

CSD-4007

JAVA Runtime

When the system's hostname could not be determined during startup, the runtime would not start.

The runtime will now continue, even if it cannot determine the hostname. In this case, it will use an empty hostname and domain for the license check.