Release Notes 2026

Authentication, Access Control & Account Security

• Password reset now requires username verification when multiple accounts share the same email address, ensuring the password update applies to the intended user and preventing unintended access from duplicate-email scenarios.

• Previously, users could remain logged in after an administrator set their account to Blocked or Inactive. Now, changing a user to either of these states ends any active sessions so they can’t continue accessing the platform.

• Blocked or inactive users can no longer reset their password through the Forgot Password, preventing locked accounts from regaining access until an admin unblocks them.

Record Lists & Screen Controls

• Rows no longer reappear after a refresh or when reopening the task because draft data was combined with existing rows instead of reflecting the user’s latest state. Draft restore now preserves row deletions for Record Lists, keeping the task data consistent with what the user last saved.

• The Select List inside a Nested Screen now loads its Collection values correctly when the screen is opened through a Web Entry URL, even when the Collection is only referenced inside the Nested Screen.

PM Blocks & Subprocesses

• The default interstitial screen no longer hangs when a parent task uses Display Next Assigned Task and the next step is a PM Block whose first task is Self Service for the user’s group. The user is now redirected into the PM Block and can claim the task as expected.

• After importing a process with PM Blocks (or subprocesses) via DevLink/Copy-Update, tasks no longer run the wrong PM Block at runtime. Each parent task now consistently launches the correct child request by keeping callActivity → subprocess IDs mapped correctly, preventing duplicate/incorrect subprocess sets that previously caused multiple tasks to execute the same PM Block.

• After rolling back and completing a Subprocess, the parent process no longer stays in a FAILING state. It detects the Subprocess completion and continues to the next parent task as expected.

• Importing PM Blocks and Subprocesses no longer clears Select List controls configured with a Data Connector. Select Lists now retain their configured connector and endpoint instead of displaying the message “A Data Connector must be selected” or appearing empty after import.

Tasks, Cases, and Requests Lists

• Clicking the Case Title from the Requests list now takes users to the process case view instead of opening the process request page, keeping navigation consistent across Tasks, Cases, and Requests.

Translations

• Auto-translate in Admin → Translations no longer gets stuck in an infinite loading state in environments where the translation job failed while saving its audit record.

Security & Permissions

• Analytics in the top menu now appears only when both conditions are met: PROCESS_INTELLIGENCE_ENABLED=true and the user or user group has the View Analytics permission. Users without View Analytics no longer see Analytics in the top navigation, even if Process Intelligence is enabled.

• Designer access via direct URL is now restricted so that users without the required permissions cannot open /designer, even if they manually paste the link in the browser.

Process Modeler & Designer UI

• RAG Collections in the PM Modeler now prevent duplicate records when users click Add Source multiple times—once the first RAG collection is being created, a loading state blocks additional clicks so only one record is created per action.

• Some sidebar icons in the PM Modeler and Admin now inherit the DynamicUI navigation text color, so Flow Genie in Designer and DevLink, SentryIo, and Translations in Admin match the configured UI color after saving Customize UI.

• Sessions now keep users connected more reliably while working across multiple tabs (Designer screens, scripts, modeler, and request pages). The session warning banner/modal behaves consistently across tabs, and choosing Stay Connected maintains the session so unsaved edits are less likely to be lost during longer editing sessions.

Processes, Project & Documentation

• Documentation now loads successfully for processes that use Signal Events, preventing the 500 error when opening the Documentation view after configuring a signal event in the modeler.

• When creating a new process from a default template, the process owner is now set to the authenticated user who created the process, instead of inheriting the template author.

• Project export now completes successfully even when the project includes assets tied to Data Connectors and Collections in environments with very large groups. The export workflow no longer attempts to include full group membership data during packaging, preventing timeouts/memory exhaustion and avoiding “canceled” or intermittent 404 failures seen in the UNCC dev environment.

Data Connectors

• Data Connectors now receive the correct per-iteration values when executed inside a sequential multi-instance loop. Each loop run sends the corresponding record’s id and name (for example, 1/hello, then 2/world) instead of missing or mismatched parameters, so the echoed results match the input array.

Task Routing & Automation

• Service tasks triggered by a boundary timer loop no longer execute more than once per cycle. In scenarios where a user task returns to a Send Email service task after the timer fires, ProcessMaker now prevents duplicate executions so only one email is sent per timer iteration, even after many repeated cycles.

• The web entry flow no longer gets stuck on the interstitial screen after clicking Continue. After completing the web entry step, the case now correctly advances to the next assigned task.

Notifications

• Email Notifications now validate the Email Address recipient field so it only accepts a single valid email address, showing an error when an invalid value or arbitrary string is entered.

Cases & Task Lists

• The Cases pagination no longer shows an incorrect 15 items per page label after navigating between pages when 50 per page is selected. The search now works correctly, and the counter updates properly when the Per Page value changes.

• Non-admin users no longer see “No data available” due to a failing self-service task filter — the task list now loads reliably even with tens of thousands of self-service tasks.

Screen Controls & UI Behavior

• Record List now keeps row selections visible when multiple records mode is used together with a PMQL filter. The list no longer refreshes in a way that clears the checkbox UI state, so the checkmarks stay in sync with the stored selection data.

Launchpad & Analytics UI

• Launchpad now refreshes Process Information counters correctly. After starting or completing cases, reopening Process Information shows the latest started/completed percentages and updates the pie chart, keeping the process counter and the header small pie charts aligned without showing stale counts.

• Reassignment user lists now include members of the group stored in Process Variable (Groups) assignment rules, ensuring the Reassign dropdown reflects both the Process Manager and eligible users from the configured group when the variable contains a valid group value (including in imported processes).

• Cases now redirect users from the interstitial screen to the next task they are actually assigned to when a process creates parallel tasks, preventing cases from getting stuck due to attempts to open an inaccessible parallel task.

• The Save as Template option no longer appears when editing a screen that is already a template (My Templates / Shared Templates), keeping the template editor options consistent and avoiding redundant actions.

• The Processes tab now displays the mobile-optimized process list when viewing ProcessMaker in a mobile viewport, instead of rendering the desktop-style layout.

• Web Entry flows now handle the Anonymous start → Authenticated next task scenario without showing an on-screen Unauthorized error when the next task has no assignee. Instead, the request stops the flow and presents an informational screen indicating the next task must be assigned before the request can continue.

• When moving between tasks using the Next button in the Task Preview panel, the reassignment option no longer remains visible for tasks where Allow Reassignment is disabled, preventing users from attempting reassignment on tasks that do not permit it.

• Display Screens no longer interpret alphanumeric strings (for example, a letter followed by numbers) as date values when rendered with moustache syntax. Values like A123 now display exactly as entered instead of being converted into an invalid date format on the Display Screen.