Skip to main content
Feedback

Boomi Cloud API Management April 2025 Release Notes

April 22, 2025

We added these features:

  • Boomi Platform users can now view the audit history of logged-in users. This functionality was enabled by activating the audit history feature in Cloud API Management. Audit history can be viewed on the Analyze > Audit History > Users page. (WA-14459)

We fixed these issues:

  • On the Manage>Content page, the File Manager button did not have any proper validation check to verify the type of file being uploaded by the users. This may lead to security issues: (WA-13705)

To mitigate security risks, the File Manager button now includes validation checks. These checks ensure that only files with allowed extensions are uploaded and all other file types are rejected. To learn more on allowed and restricted file types, see Using File Manager page.

April 01, 2025

We added these features:

  • Cloud API Management administrators can now customize the EAV field on the Application Settings page to align with specific user requirements. This enhanced customization capability lets administrators hide the EAV field while still retaining its existing functionality. Users can request that administrators designate the EAV field as mandatory or optional based on their requirements. For any requests, contact the Boomi Support team. (WA-14497) (WA-14465)

  • The Application Name field on the Manage your Application>New Application window currently permits special characters, leaving the application vulnerable to future input-based attacks. To mitigate this risk, input validation checks have been implemented to ensure only supported standard special characters are allowed when defining an application name. (WA-13761) For example, '/^[\w-\. ():]*$/D' - . ( ) :

We fixed these issues:

  • Boomi Platform (or SSO) users could not sign in to the Developer Portal through the Boomi Enterprise Platform>Cloud API Management dashboard. This was due to a JWT expiration error, which has now been resolved. Users will now be redirected to sign in to the Developer Portal after 5 minutes. (WA-14414)

  • The redundant delete key confirmation message has been removed from the Delete Your Key page in the Developer Portal. (WA-14186)

On this Page