8.5.4

Release date

• May 27th, 2026

Download links

• ⇩ formcycle (master server)
• ⇩ Frontend server
• ⇩ Checksums

Version 8.5.1 includes security-related improvements and updates.
We recommend all customers to update to this or a later version as soon as possible.

Also see the release notes of version 8.5.0, 8.5.1, 8.5.2, and 8.5.3

Changes

Web form

• Support WebP image format for the image preview feature of an upload element.

Workflow

• Add new option to BPMN exporter to include the description of an action or event visually in the BPM diagram.
• Workflow execution does not fail anymore when the workflow contains actions that are both unavailable and disabled.

Form designer

• Include user groups in the generated form overview PDF document.
• Show warning in form designer when the form contains elements that have deprecated datatypes selected. If possible, use an alternative non-deprecated datatype.

Prompts

• Show resulting endpoint URL for the chat completions prompt type.
• Increase the length restriction of prompt connection API keys from 300 to 2000.
• Show error message when the available models could not be read for a prompt connection.

Certificate management

• Allow importing private keys via the menu "my profile".
• A user's private keys cannot be selected directly anymore in workflow actions. Instead, you can choose to use the private keys of the current user who submitted the form.

Login services

• Allow configuring the redirection target for login services.

Backend

• Save configured form stores (system -> general) in the database. This ensures that configured stores are the same on all master servers and do not need to be configured individually for each master server.
• Improve resource management when resetting and cutting frontend server connections.

Fixes

Web form

• Fix missing types in the JavaScript documentation.
• Ensure the temporary directory for automatic uploads gets deleted.
• Do not show the bot detection HTML template when submission fails due to insufficient disk space on formcycle's temporary folder.

Form designer

• Improve performance when changing the editing language in the form designer.
• Preserve a form element's type for widgets from plugins when the plugin is temporarily unavailable.
• Upload fields have an option to convert uploaded files to PDF documents. When the user uploads a PDF document, the system cleans and flattens such documents. PDF document can contain JavaScript, such scripts are now removed more reliably.

Workflow

• Improve protocol entries when triggers for time-based events could not be created.
• Ensure temporary directory used during a workflow execution gets deleted, even when actions of type Renew process ID are used.
• Fix an error when sending emails in the old V6 workflow that could occur when the setting for sending separate emails was missing.

Inbox

• Fix an error when resending the double opt-in email from within the inbox.

User portal

• The REST API documentation can now be viewed again.
• Ensure all available pages are show in the form overview.
• Fix an issue where the portal logo was not shown in the Safari browser. 

Appointment management

• Fix validation for global closing days upon submitting a form. When a global closing day was disabled for an appointment configuration and an appointment on that day was selected, the form could not be submitted.

Certificate management

• Fix an error when creating a keystore cache.
• Fix an error when creating a certificate cache.
• Reset the certificate cache after the configuration was changed.
• Allow the import of TLS server authentication certificates without SAN entries.
• Fix error when importing database server certificates via the certificate assistant.
• Properly apply timeout when checking for TLS. Avoids long loading times on the UI.
• Fix error when creating certificates with emails addresses that are longer than 32 characters. Such certificates now contain the correct owner / issuer. Broken certificates are fixed when the export dialog is opened.

Login services

• The login service Open ID connect now allows the prefix for the header value with the JWT to be left empty.

Backend

• Minor UI improvements and fixed.
• Improve the stability of the frontend / master server connection.
• Improvements in handling ports related to frontend server connections. 
• Ensure errors related to system database drivers are included in the log files.
• Fix performance issues in the client settings menu when many users are assigned to the client.
• Improve execution of system update changesets that remove foreign keys in dynamically created database tables.  May have resulted in errors during the system update.
• Create temporary files in formcycle's temporary directory as configured, not in the operating system's temporary directory. Also improve handling and ensure such files get deleted eventually.

For plugin developers

• Add new utility methods to the services of the certificate management module.
• Update third party ibraries to their latest patch versions. Should be compatible, but you may want to rebuild plugins against this formcycle version.
• Add new setting includeDescriptionVisually to IWorkflowBpmnLayoutSettings. Workflow trigger or action plugins with a custom BPMN modeler implementation (ITriggerHandler#getBpmnModeler / INodeHandler#getBpmnModeler) should be updated accordingly.
• Validation rule plugins (IPluginValidationRule) can now mark rules as deprecated, see IPluginValidationRule#isDeprecated
• Validation rule plugins (IPluginValidationRule) can now implement custom server validation logic. This logic gets executed when server validation was enabled for a form element. Useful for plugins that implement custom, JavaScript-based validation logic on the client. See the method IPluginValidationRule#validate.
• Form resources plugin now get access to the information how the form was opened where resource are to be included.See IPluginFormResources#findResources(IPluginFormResourcesFindParam) and IPluginFormResourcesFindPArams#getRequestType().
• Use the new form of resource URLs for JavaScript and CSS resources of form widget plugins. These URLs make it easier to refer to other resources via relative links. The URLs have changes as follows: 
  • old: http://localhost:8080/xima-formcycle/form/includes/ressource?name=XWidget.css&plguuid=<WidgetName>&pid=<ProjektID>
  • new: http://localhost:8080/xima-formcycle/form/includes/ressource/<MandantID>/<ProjektID>/plugin/form-element-widget/<PluginKey>/<WidgetName>/XWidget.css