Flow Release Notes for January 2026
-
Introduced state locking for authenticated users, enabling secure access control and preventing unauthorized state access. When a state is created by an authenticated user, it becomes locked to that user, preventing other authenticated users from accessing or modifying it. (FLOW-8841)
Refer to State locking.
-
Enhanced Flow's validation capabilities by allowing page validation values to be set as Flow state variables, enabling dynamic and flexible validation rules based on external data sources. (FLOW-7745)
Refer to Input component Validation steps.
-
Added a variable picker to supported connector config fields, enabling users to dynamically reference variables in configuration values. (FLOW-8847)
Refer to Installing the Boomi Integration Service connector steps.
-
Added support for using environment variables for users and groups on Flow Properties IDP settings, enabling customers to configure different user groups per environment (Dev, Test, Prod) without manual intervention. (FLOW-8749)
Refer to Flow Properties Authentication section.
-
Updated the runtime authentication token expiry to align with the Identity Provider's session logic. For SAML integrations, the token expiry is now determined by the configured active session timeout, whereas for OAuth2 and OIDC, it explicitly inherits the expiry timestamp from the IDP's access token. (FLOW-8850)
Refer to Session and token expiration.
-
Added a Masked Input component with customizable mask options, enabling users to securely input sensitive data in various formats. (FLOW-8702)
Refer to Masked Input component.
-
Added a Date Input component that allows users to select a date, with appropriate input type and validation. (FLOW-8706)
Refer to Date Input component.
-
Added a Date/Time Input component that allows users to select both date and time values with proper input type and validation. (FLOW-8705)
Refer to Date/Time Input component.
-
Renamed the Import/Export screen to Translations to reflect that the page now contains options only to Export and Import Flow for Translation. We removed the redundant import/export options for Flows and Themes since users can now access them directly from their respective pages. (FLOW-8906)
Refer to Importing and exporting translations.
-
Implemented a
cache-control: no-cache, no-storeresponse header toapi/runendpoints, preventing browser caching of unique API responses. (FLOW-8909) -
Updated flow runtime assets to be served from the platform URL instead of an S3 bucket to improve performance and security. (FLOW-8930)
-
Added environment variable support for the Email Connector, enabling users to dynamically configure email settings based on their deployment environment. (FLOW-8895)
-
Resolved an instability issue where custom page components would temporarily disappear when page conditions were executed, preventing page flickering and providing a smoother user experience. (FLOW-8874)
-
Fixed sorting behavior for null values, ensuring proper handling of null column values when sorting on table and datagrid components. (FLOW-8896)