Platform Server - 11.9.0

Compatibility

• Compatible with Development Environment 11, versions 11.0.109.0 or later.
• Can be managed by LifeTime 11, Release Sep.2019 or later

Additional Resources

• System Requirements
• Side Effects and Breaking Changes
• Documentation
• OutSystems product releases

For further information on any issues, use the Support Portal.

NOTICE: OutSystems does not give support to any undesirable behavior you may experience due to the use or manipulation of undocumented components of the OutSystems platform, such as, internal JavaScript, RuntimePlatform library, database system meta-model, components in installation directories, etc.

New in Platform Server 11.9.0

• Improved locking on IndexedDB allowing operations that use different entities to execute simultaneously. (RAR-142)
• This version of Platform Server brings the early access feature "Configure mobile apps updates distribution" to manage how mobile apps update on user devices. After you activate the feature for all environments in LifeTime, control which of your apps receive updates only through the app store, and which apps receive hybrid updates. Look for the new DEPLOYMENT tab in the "Mobile app update preferences" step of a deployment plan. (RNMT-4223)
• Added an option to only automatically refresh references during solution publish operations when there are broken references, instead of on any differences. Configurable using Factory Configuration. (RPC-1177)
• Applications created with OutSystems now correctly identify and load all third-party library versions to prevent inconsistent runtime behaviors. (RRCT-2687)
• Upgraded Microsoft.AspNetCore and Microsoft.Extension libraries to the latest 2.1 LTS (Long-Term Support) versions. (RRCT-2896)
• Moved SAML-related actions from the Authentication extension to the new SAMLAuthentication extension. If you're using any SAML actions outside the Users module, we recommend that you add the SAMLAuthentication extension as a dependency and update all references to the Authentication extension. (RSAT-2104)
• Added an option in SAML configuration to only accept signed login responses from the Identity Provider server. (RSBO-1535)
• Progressive Web Apps (PWAs) are now generally available (GA), after a period of early access (EA). Create a mobile app, and then turn on the toggle "Distribute as PWA" in the Distribute tab. To create a mobile app, select either Phone or Tablet App in the dialog for a new app. (RTAFB-2977)

Bug Fixing

• Fixed an issue that was preventing the Dropdown widget to be in dark mode. (RAR-145)
• Fixed an issue where widgets with property values defined by an expanded record were re-rendered with every change to the screen data. (RAR-154)
• Fixed a bug where the functions to execute the UI Block Aggregates over indexedDB could be generated with different names on their definition and usage, leading to a runtime error. (RAR-161)
• Fixed an issue that was preventing the Daily Activity Report to be generated. (RLIT-3417)
• Fixed a bug where sometimes extensions wouldn't sync. (RLIT-3669)
• Fixed an issue that caused lost configuration to mobile application on LifeTime when publishing an extensibility configuration. (RLIT-3820)
• Fixed an issue that caused an infinite loop when trying to logout using integrated authentication. (RLIT-3846)
• Fixed vulnerability in PreviewInDevices regarding URL manipulation and Base64 encoding. (ROU-1116)
• Upgraded Erlang to version 22.3 and RabbitMQ to version 3.8.3. Fixes occasional connection hangs on TLS connections. The Configuration Tool performs the upgrade when you click the "Create/Upgrade Service" button. (RPC-1131)
• Fixed an issue that caused compilation errors when using long strings in Assign elements. (RPC-1132)
• Fixed error "Object reference not set to an instance of an object." when attempting to delete an entity from a deleted Module using the DbCleaner API. (RPC-1156)
• Fixed the Solution Upload in ServiceCenter to use less database connections. Previously it needed at least 2 connections for each application in the solution being uploaded. (RPC-1166)
• We fixed Editable Table so it reverts the checkbox (boolean) values after users click Cancel. (RPD-3238)
• Dropdown with custom property selected now automatically scrolls into selected item. (RPD-3459)
• Fixed an issue that caused the incorrect render of List widgets items when the position of the list item changed. (RPD-3585)
• Fixed an issue that prevented modules with lengthy names from being deletable. (RPD-3802)
• Fixed an issue where sometimes when listing users in a role associated with an app the second page would show no users. (RPD-4987)
• Fixed "ID" attribute from being placed on the container element instead of element the select on Dropdown widget. (RPD-5019)
• OutSystems no longer generates three-part names in object definitions for SQL Azure. For more information check Windows Azure Import/Export Service and External References in Microsoft documentation. (RPD-5024)
• Fixed NullReferenceException when deploying a Module using 'Run As' configuration. (RPD-5093)
• Fixed an issue that would allow changing the Deployment Zone of an application consisting of extensions. (RPD-5113)
• Fixed issue where pages were generated with meta tag Strict-Transport-Security displaying warnings in browsers console. (RPD-5124)
• Fixed setup issue caused by compilation path not being node aware (RPD-5132)
• Fixed an issue that logged false positive warnings in the server's Event Viewer and Service Center General Logs. (RPM-1719)
• Fixed a compilation error when a local storage Aggregate had a Group By with a field of the Binary Data type. (RPM-317)
• Fixed an issue that could cause Applications not to startup. (RPM-345)
• Fixed an issue where the RabbitMQ client's automatic recovery would fail due to locked queue names. (RPM-379)
• Improvements to the GetUserApplications query in the ApplicationSwitcher from RichWidgets in order to reduce the timeout or slow load time on Oracle stacks. (RPM-483)
• Fixed a crash in the publishing step that was caused by invalid Theme names. (RPM-550)
• Fixed an issue that caused System modules to not be visible in Manage Dependencies by users with List Applications permission assigned as default role. (RRCT-2890)
• Fixed Scheduler Service becomes unstoppable when it starts with Deployment Controller down. (RRCT-2892)
• Fixed a crash in the extension publishing process when attempting to delete temporary files used for validating the extension. (RRCT-2897)
• Fixed assembly exclusion rules in extensions to allow discontinued platform assemblies to be included as resources. (RRCT-2915)
• Fixed a situation where the Deploy Service could get stuck for 20 minute periods when failing to deploy applications to IIS. (RRCT-2936)
• Fixed an issue in the Authentication extension that allowed customers to inadvertently call unsupported APIs. (RSAT-2173)
• Fixed an issue that prevented using special characters such as ";" (semicolon) in database passwords. (RSAT-2239)
• Fixed an error in External Authentication after a platform upgrade due to a change in the encryption mechanism. (RSBO-1437)
• Fixed an issue in the timer that cleans SAML authentication logs due to a syntax error in Oracle Databases. (RSBO-1481)
• Fixed a solution publish error that occurred when compiling outdated dependencies to a structure having new attributes with complex data types. (RSBO-1521)
• We improved the robustness of the IDE to better understand occasional crashes due to invalid object referencing. (RTAFB-2880)
• Fixed the data replacement crash when Entity that was supposed to be replaced had been deleted. (RTAFB-2968)
• Resolving this issue fixed opening the Distribute panel in cases when PWA was activated. The error occurred because the PWA assets for the native mobile apps were generated, which caused Service Worker requests issues and related errors. (RTAFB-3050)
• Fixed an error in the Preview in Devices component that was preventing the PWA panel with the QR code to show correctly. (RTAFB-3087)
• Fixed a security vulnerability. CVSSv3.1 score 9.6 (Critical). (RPM-329)
• The session is now logged out when there's a session fixation mismatch error. CVSSv3.1 score 3.7 (Low). (RRCT-2893)
• Fixed a security vulnerability. CVSSv3.1 score 7.4 (High). (RTAFB-2226)

Breaking Changes

• The platform now gives preference to usage of specific versions of third-party assemblies that are included in extensions. As a consequence, extensions that incorrectly include .NET Framework assemblies can prevent applications from working correctly due to conflicts between the included assemblies and the assemblies of the .NET Framework installed in the machine. In particular, including the extensions System.Net.Http.dll or System.Runtime.InteropServices.RuntimeInformation.dll causes issues in logging, login, and JSON serialization. (RPM-383) (RPM-386)
  Check how you can determine the affected extensions and how to adapt them to the new assembly loading behavior in OutSystems 11 side effects and breaking changes.
• The KeyStore and SAML actions were moved from the Authentication extension, Authentication.xif, to the SAMLAuthentication extension, SAMLAuthentication.xif. This can cause some broken references when using methods from Authentication.xif that moved to the new module. (RSAT-2104)
  To fix this behavior, replace dependencies to KeyStore and SAML actions from Authentication to the corresponding actions from SAMLAuthentication.

Known Issues

• Deploying a Mobile App from an environment where you enabled the toggle "Distribute as PWA" doesn't automatically enable the same toggle in the target environment. The toggle in the target environment keeps its pre-deployment value. The runtime behavior of these apps may also be affected if the apps are opened in a browser, using PWA or Preview in Devices. You must manually activate the toggle "Distribute as PWA" for the Mobile App in the target environment.

Disclaimer: QR CODE is a registered trademark of Denso Wave Incorporated.