The platform’s Node.js runtime has been updated to v24.22.1 LTS, incorporating the latest security fixes and dependency updates. This update addresses multiple vulnerabilities, including issues affecting Brotli decoding, DNS resolution and TLS certificate validation.
Two-factor authentication (2FA) is now required for all users on app.elastic.io. Previously, it was optional and enabled at the user’s discretion. To improve platform security, it can no longer be skipped.
We ask all users to set up two-factor authentication. You can do it in your user profile - see User Profile Information for step-by-step instructions.
A default workspace is now created automatically when a new user registers. The workspace uses the workspace type configured for the tenant and is named after the user’s email prefix. Its resource usage is included in quota calculations.
The Notes section in Flow Designer now saves automatically, so your changes are kept without a manual save.
per_contract_user_count_limit), so granting support access no longer increases the consumed user quota or prevents adding regular contract members when the user limit is reached.Server error during request: "timeout of 20000ms exceeded".1.1.0SMTP URI (smtpUri) field in credentialsMandrill API Key (key) credentials field to optional (at least one of Mandrill API Key or SMTP URI must be configured)test.yml, publish_release.yml)24.x@elastic.io/component-commons-library version from 4.0.0 to 4.0.3axios version from 1.16.0 to 1.20.0elasticio-sailor-nodejs version from 2.7.8 to 2.7.9nodemailer version 10.0.92.10.0elasticio-sailor-nodejs version from 2.7.8 to 2.7.9@elastic.io/component-commons-library version from 4.0.0 to 4.0.3@grpc/grpc-js version from 1.9.13 to 1.14.6axios version from 1.13.5 to 1.20.0