Sign In   Register

We are pleased to announce our latest 25.04 release of Journey Manager is ready for you to download! It includes new and enhanced features, security improvements, updated libraries, and bug fixes. Read on to find out more.

Version Date Released New Features Improvements Fixes Security CVE
25.04.0 05 Jun 2025 Changelog New Changelog Improved Changelog Fixes Changelog Security 3rd Party Libraries

Highlights

Code Libraries

A new 'Code Library' Service Definition is introduced, providing a centralized repository for custom classes that can be updated once and used across all services in JM, with only a single bytecode copy in memory. This feature eliminates code duplication, removes the need for 'fileIncludes' and large groovy script deployments, simplifies development and maintenance, reduces memory footprint, improves compilation speed, and removes serialization/deserialization requirements of objects between services.

Functionally, Code Libraries can be called by any service, passed by reference between services whilst retaining state, securely access the Fluent API, instantiate and share instances with other Code Libraries, and be used with composition, ultimately enabling developers to build reusable, robust solutions with industry-standard coding practices and offering a better programming experience, while access is restricted to the secure Fluent Services.

Form html injection service

A new fluent service that provides functionality for injecting html content into the form render HTML returned to the browser by TJM. 

Configuration service export

We have introduced the ability to export TJM configuration via the Configuration Service. This can be used to move solution configuration across servers. 

Job Event Wait

Added new Job Wait type to collaborations jobs. The Event Job wait provides a job action wait that is configured to wait on a specific Event pushed to TJM. This feature helps bring the Eventing Framework into TJMs workflow.

Log Improvements

We have introduced a few changes to TJM logging. You can now set categories on Event and Error logs, this allows users to manage logs in TJM based on business or solution specific requirements. Internal TJM logs, including event, error, groovy etc, now also write out to system log files to allow for more integrations. 

Dynamic Tasks for Job

Collaboration Jobs now support the creation of Tasks dynamically. Being able to define tasks during active workflow drastically increases the flexibility and complexity of solution workflows.

Service Tags

Tags can now be added to Services to allow for customized management.

Change log

The change log is a list of all new features, enhancements, and fixes for this release.

Changelog New New Features

The following new features are introduced in this release.

Manager
  • Fluent HTML injector service
  • Code Libraries
  • Service Tags
  • Log Categories
  • Log File Improvements
  • Job Event Wait
  • Dynamic Tasks
  • Configuration Service Export

Changelog Improved  Improvements

The following improvements are included in this release.

Manager

  • Payment transaction auto abandonment
  • Improve handling for importing form and application packages with formDataObfuscationStatus setting
  • Added support for OpenPDF as alternative to iText
  • Add options to include/exclude formdatamap or properties from the txn included in service invoke params
  • Upgrade WildFly to latest version 36.0.0.Final
Workspaces API
  • Allow Workspaces API to direct Job workflow

Fluent API

  • Whitelist net.glxn.qrgen

Exchange

  • Update Import process for TPacs to handle the Javax Jakarta transformation

Changelog Fixed Fixes

This release fixes the following known issues.

Manager

  • Status Title setting not taking effect in the space pages
  • Template Version Status Missing in Export Forms & Applications
  • Undertow causing broken and incomplete responses returned from JM when value is too large
  • Block receipt render option for Submissions with no xml Data causing NPE
  • Incorrect Content-Type in HTTP response header when requesting Form Space hosted SVG resources
  • Form Space not handling webm format files correctly
  • Redirect not working on space pages
  • Date field widget not working in Services Parameters Edit
  • Strict Header Security userAgent check doesn't accommodate increased size > 200 check
  • JobQuery is currently unable to handle the unencrypted job properties, encrypt all Job Properties on JM startup

Workspaces API

  • HTTP 500 when querying for transactions that have job properties purged

Changelog Security Security

This release addresses the following security issues.

Manager
  • Add Mime type check to portal resources page.
  • Added HTTP Headers portal property with default values for Referrer-Policy and Permissions-Policy.
  • Groovy Console now set to fluent API only by default, configurable via Standalone.xml
  • Fixed an issue where users made inactive with an active session could still navigate the admin UI

3rd Party Libraries 3rd Party Libraries

The following third-party libraries have been upgraded to meet CVE requirements.

CVE Library Version

jQuery(Click)

3.5.0 to 3.7.1

CVE-2025-31672

poi-ooxml

5.2.2 to 5.4.1

CVE-2024-56128

kafka-clients

3.7.1 to 3.9.0

jsch -> mwiede

0.1.55 to 0.2.23

CVE-2024-47554

commons-io

2.16.1 to 2.18.0

CVE-2024-57699

json-smart

2.5.1 to 2.5.2

CVE-2025-22228

spring-security-crypto

6.3.4 to 6.4.4