You are viewing the documentation for Blueriq 15. Documentation for other versions is available in our documentation directory.

1.  New

1.1. Blueriq Encore

In each minor release, Blueriq Encore becomes more and more feature complete with respect to Blueriq Studio. An overview of the progress can be found here. In this minor we've added:

  • Export project
  • Image editor
    • It is now possible to download the original images that have been uploaded earlier by right clicking the image in the editor. 
    • We now show a preview of svg images in the editor as well. 
  • Mask editor (global)
  • Mask type editor (global)

1.2.  AQ_InstanceLinker sort order

The sort order in the AQ_InstanceLinker is improved. Now you have the option (equal to other model elements) to explicitly model a sorting attribute. Whereas previously the sorting in container was done implicitly on the attribute(s) stated in the attribute selection. With this new addition you get more flexibility in the way the instances are sorted and what you get to show on the screen. The new option gets preference over the old options, but we remain backwards compatible on the fuctionality. You can find the new sort order option in Encore ánd in Studio.


2. Upgrade Instructions

There are no specific upgrade instructions for this release.

As a best practice

  • backup your repository
  • backup your database before running scripts
  • backup your spring.config.additional-location directory ([Blueriq installation directory]\Runtime)
  • backup any config files you have altered under [Blueriq installation directory]\Services

before you start the upgrade.

3. Artifacts

The Blueriq artifacts are available under name: 15.1.0.164

This release includes these versions of Blueriq components with a separate life cycle:

Component

Version

Customer Data Service 4.0.2
DCM Lists Service 2.1.4
Material Theme 1.0.46
Development tools 1.1.3

4. Aquima Libraries

The DCM Library has been updated (used in the new DCM architecture beta only). The DCM_ExecuteTask, DCM_GetTaskInfo and DCM_GetCaseInfo demand a required parameter "process id". Please upgrade to the latest studio version, with the latest DCM library distribution when using the beta architecture for DCM (you might have to recreate the DCM_GetTaskInfo service to get the right screen containing the process id).

No other libraries have not been changed in this release.

5. Libraries

In this release, the set of third party libraries that is used by Blueriq was updated. When your installation of Blueriq includes custom components (artifacts that do not ship with Blueriq, such as proprietary plugins), those components should be tested for compatibility with these changes.

ArtifactId

GroupId

License

Version in 15.0.1

Version in 15.1.0

hibernate-core

org.hibernate

LGPL 2.1

5.6.8.Final

5.6.9.Final

hibernate-entitymanager

org.hibernate

LGPL 2.1

5.6.8.Final

5.6.9.Final

jackson-annotations

com.fasterxml.jackson.core

Apache License 2.0

2.13.2

2.13.3

jackson-core

com.fasterxml.jackson.core

Apache License 2.0

2.13.2

2.13.3

jackson-databind

com.fasterxml.jackson.core

Apache License 2.0

2.13.2.1

2.13.3

jackson-dataformat-xml

com.fasterxml.jackson.dataformat

Apache License 2.0

2.13.2

2.13.3

jackson-dataformat-yaml

com.fasterxml.jackson.dataformat

Apache License 2.0

2.13.2

2.13.3

jackson-datatype-jsr310

com.fasterxml.jackson.datatype

Apache License 2.0

2.13.2

2.13.3

micrometer-core

io.micrometer

Apache License 2.0

1.8.5

1.8.6

netty-buffer

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-codec

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-codec-dns

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-codec-http

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-codec-http2

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-codec-socks

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-common

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-handler

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-handler-proxy

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-resolver

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-resolver-dns

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-resolver-dns-classes-macos

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-resolver-dns-native-macos

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-transport

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-transport-classes-epoll

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-transport-native-epoll

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

netty-transport-native-unix-common

io.netty

Apache License 2.0

4.1.76.Final

4.1.77.Final

reactor-core

io.projectreactor

Apache License 2.0

3.4.17

3.4.18

reactor-netty

io.projectreactor.netty

Apache License 2.0

1.0.18

1.0.19

reactor-netty-core

io.projectreactor.netty

Apache License 2.0

1.0.18

1.0.19

reactor-netty-http

io.projectreactor.netty

Apache License 2.0

1.0.18

1.0.19

reactor-netty-http-brave

io.projectreactor.netty

Apache License 2.0

1.0.18

1.0.19

reactor-netty-incubator-quic

io.projectreactor.netty.incubator

Apache License 2.0

0.0.7

0.0.8

spring-amqp

org.springframework.amqp

Apache License 2.0

2.4.4

2.4.5

spring-aop

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-beans

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-boot

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-actuator

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-actuator-autoconfigure

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-autoconfigure

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-configuration-processor

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-aop

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-data-mongodb

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-logging

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-validation

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-context

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-context-support

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-core

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-expression

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-hateoas

org.springframework.hateoas

Apache License 2.0

1.4.2

1.4.3

spring-jcl

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-jdbc

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-ldap-core

org.springframework.ldap

Apache License 2.0

2.3.7.RELEASE

2.3.8.RELEASE

spring-messaging

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-orm

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-oxm

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-rabbit

org.springframework.amqp

Apache License 2.0

2.4.4

2.4.5

spring-security-config

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-core

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-crypto

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-ldap

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-oauth2-client

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-oauth2-core

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-web

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-tx

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-web

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-webflux

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-webmvc

org.springframework

Apache License 2.0

5.3.19

5.3.20

ArtifactId

GroupId

License

Version in 2.1.3

Version in 2.1.4

jackson-annotations

com.fasterxml.jackson.core

Apache License 2.0

2.13.2

2.13.3

jackson-core

com.fasterxml.jackson.core

Apache License 2.0

2.13.2

2.13.3

jackson-databind

com.fasterxml.jackson.core

Apache License 2.0

2.13.2.1

2.13.3

reactor-core

io.projectreactor

Apache License 2.0

3.4.17

3.4.18

spring-amqp

org.springframework.amqp

Apache License 2.0

2.4.4

2.4.5

spring-aop

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-beans

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-boot

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-autoconfigure

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-aop

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-data-mongodb-reactive

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-logging

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-security

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-cloud-commons

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-config-client

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-context

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-sleuth-api

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-sleuth-autoconfigure

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-sleuth-brave

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-sleuth-instrumentation

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-starter

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-starter-bootstrap

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-starter-config

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-starter-sleuth

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-context

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-core

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-expression

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-jcl

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-messaging

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-rabbit

org.springframework.amqp

Apache License 2.0

2.4.4

2.4.5

spring-security-config

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-core

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-crypto

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-web

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-tx

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-web

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-webmvc

org.springframework

Apache License 2.0

5.3.19

5.3.20

ArtifactId

GroupId

License

Version in 4.0.1

Version in 4.0.2

jackson-annotations

com.fasterxml.jackson.core

Apache License 2.0

2.13.2

2.13.3

jackson-core

com.fasterxml.jackson.core

Apache License 2.0

2.13.2

2.13.3

jackson-databind

com.fasterxml.jackson.core

Apache License 2.0

2.13.2.1

2.13.3

jackson-datatype-jdk8

com.fasterxml.jackson.datatype

Apache License 2.0

2.13.2

2.13.3

jackson-datatype-jsr310

com.fasterxml.jackson.datatype

Apache License 2.0

2.13.2

2.13.3

jackson-module-parameter-names

com.fasterxml.jackson.module

Apache License 2.0

2.13.2

2.13.3

spring-amqp

org.springframework.amqp

Apache License 2.0

2.4.4

2.4.5

spring-aop

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-beans

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-boot

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-autoconfigure

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-aop

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-json

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-logging

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-security

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-boot-starter-web

org.springframework.boot

Apache License 2.0

2.6.7

2.6.8

spring-cloud-commons

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-config-client

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-context

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-sleuth-api

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-sleuth-autoconfigure

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-sleuth-brave

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-sleuth-instrumentation

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-starter

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-starter-bootstrap

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-starter-config

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-cloud-starter-sleuth

org.springframework.cloud

Apache License 2.0

3.1.1

3.1.2

spring-context

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-core

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-expression

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-jcl

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-jdbc

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-messaging

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-orm

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-rabbit

org.springframework.amqp

Apache License 2.0

2.4.4

2.4.5

spring-security-config

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-core

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-crypto

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-security-web

org.springframework.security

Apache License 2.0

5.6.3

5.6.5

spring-tx

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-web

org.springframework

Apache License 2.0

5.3.19

5.3.20

spring-webmvc

org.springframework

Apache License 2.0

5.3.19

5.3.20

6. Retirement announcement

There are no specific retirement announcements.

For a full list of deprecated features, go to Deprecated features.

7. Bug fixes

Identifier

Component

Issue

Solution

BQ-16097

Runtime

CVE-2022-22976 and CVE-2022-2298 have been detected on the Runtime. While we don't use RegexRequestMatcher, we are not vulnerable to CVE-2022-22978. We are however vulnerable to CVE-2022-22976 but only if BCrypt password encryption is used with 31 rounds.

We've updated the Spring libraries for Blueriq version 15, 14 and 13. If your project uses BCrypt encryption with 31 rounds (blueriq.security.bcrypt-strength) please follow the instructions on this page. We have also removed the option to use 31 rounds to mitigate the CVE for Blueriq version 12.

BQ-16096

Runtime

CVE-2022-22970 and CVE-2022-22971 have been detected on the Runtime. While we don't use STOMP over Web Socket, we are not vulnerable to CVE-2022-22971. We are however vulnerable to CVE-2022-22970 due to the usage of MultipartFile in the file upload component endpoint.

We have updated the spring-boot version to 2.6.8 (spring-framework 5.3.20) for version 15 and 14. For version 13 we have updated the spring-framework version to 5.2.22.

BQ-16092

Runtime

CVE-2022-24823 was reported for netty-transport-http.

Netty has been upgraded to version 4.1.77.Final, which doesn't have the vulnerability.

CSD-4123

Runtime

Function calls from a flow would not preserve the test path.
Function calls via Rest would not take test paths into account at all.

The test path is preserved in function calls from a flow.
You can now specify test paths in function shortcuts and the function call via Rest will take the specified test path to select the project version.

BQ-15966

Studio

The Keycloak account console could fail to initialize

The Keycloak configuration has been adjusted to resolve the failure.

CSD-3947

Runtime

A test path passed to an external flow would not be propagated to services that would be called before the first page in a flow.

This has been fixed.

CSD-4101

Runtime

In a BAAS, the test path would not be stored to propagate it to other services.

This has been fixed.

BQ-15883 Runtime Currently the runtime expects RabbitMQ configuration for handling automatic tasks, otherwise it will not start To be able to have a runtime dedicated for user interaction, without handling automatic tasks, we introduced a property to disable executing automatic tasks. When this is the case, the runtime can start without the rabbitmq configuration required for automatic tasks.
BQ-15355 Runtime Request parameters on the url are not passed on to the Blueriq Runtime Request Parameters on URL are added as a default feature in the Blueriq Material theme. When customers base their new custom theme on the Material theme they will have this feature enabled by default.

8. Known issues

For an overview of known issue please refer to: Known issues