👮 Alpha Platform Trinity Asset (1.0.16) Release Notes - 26.06.1.0.16

Release Date: June 25, 2026
Release Channel: Current
Version: 26.06.1.0.16
Trinity Asset Version: 1.0.16


:warning: Breaking Changes

No breaking changes were documented for this release.


:sos_button: Support Requests Resolved

  • NPFRBT-1532: Case Manager users can retrieve only their own user record. Administrators retain full access. This closes a penetration-test finding in the Case Manager proxy.
  • NPFRBT-1633: The chart now renders one NODE_ENV entry for marketplace-headless. The duplicate previously caused Kubernetes server-side apply to reject the manifest and block the full Alpha upgrade. If the live Deployment still contains both entries, run kubectl -n <namespace> delete deploy marketplace-headless once before the next upgrade.

:wrench: Enhancements

Configurable pod labels and annotations

The Helm chart can add labels and annotations to every Alpha service pod template. New Relic’s k8s-agents-operator, for example, can select pods through a newrelic-language label.

  • Global base: global.podLabels / global.podAnnotations apply to all Alpha service pods.
  • Per-service override: A service’s podLabels and podAnnotations merge with the global maps. The service value wins on a conflict. For example, alpha-jbpm-service can replace the global newrelic-language: "nodejs" with "java".
  • Rolling updates: The chart writes them to spec.template.metadata, not the immutable spec.selector.matchLabels.
  • Value types: values.schema.json requires strings. Quote numbers, booleans, and timestamps.
global:
    podLabels:
        newrelic-language: 'nodejs' # applies to every pod by default
    podAnnotations:
        example.com/owner: 'platform'

services:
    adapters:
        alpha-jbpm-service:
            podLabels:
                newrelic-language: 'java' # this Java pod wins over the global nodejs

[!NOTE]
The chart ignores app in podLabels and always renders app: <service-name>. Configure the RabbitMQ subchart separately through rabbitmq.podLabels and rabbitmq.podAnnotations.


:locked: Security

Project export

  • Plugin usage detection: Project export resolves global custom-code usage through the configuration node’s project. This prevents missing or misattributed plugin references. (This fix was also delivered as a customer hotfix.)

:bug: Bug Fixes

This release changes access control and base images:

  • Access control on user APIs: Authorization is now enforced on the user fetch endpoint, so non-admin users can no longer retrieve other users’ data (see NPFRBT-1532 above).
  • OS packages: Admin UI, Workflow Studio, Delta UI, and Identity Server use updated base images and Alpine packages that address high- and medium-severity findings.

:counterclockwise_arrows_button: Migrations

Database migrations

DB schema migrations are automated for all Trinity Asset releases. Migration service version 1.0.16 contains no incremental schema, entity, or constraint changes.

API migrations

NA


:package: Docker Images

Category Service Name Image Repository Image Version
backends neutrinos-cm-bpm neutrinos.azurecr.io/alpha/neutrinos-cm-bpm 1.0.0
backends alpha-case-service neutrinos.azurecr.io/alpha/alpha-case-service 26.06.1.0.16-78096939b890
backends alpha-request-service neutrinos.azurecr.io/alpha/alpha-request-service 26.06.1.0.16-78096939b890
backends alpha-delta-service neutrinos.azurecr.io/alpha/alpha-delta-service 26.06.1.0.16-78096939b890
backends admin neutrinos.azurecr.io/alpha/admin 26.06.1.0.16-78096939b890
backends alpha-auth-service neutrinos.azurecr.io/alpha/alpha-auth-service 26.06.1.0.16-78096939b890
backends alpha-config-service neutrinos.azurecr.io/alpha/alpha-config-service 26.06.1.0.16-78096939b890
backends alpha-module-service neutrinos.azurecr.io/alpha/alpha-module-service 26.06.1.0.16-78096939b890
backends alpha-dashboard-service neutrinos.azurecr.io/alpha/alpha-dashboard-service 26.06.1.0.16-78096939b890
backends marketplace-headless neutrinos.azurecr.io/alpha/marketplace-headless 26.06.0.0.27-0922e2b61ea0-security
backends alpha-archival neutrinos.azurecr.io/alpha/alpha-archival 26.06.1.0.16-78096939b890
frontends alpha-admin-ui neutrinos.azurecr.io/alpha/alpha-admin-ui 26.06.1.0.16-78096939b890
frontends alpha-case-manager-ui neutrinos.azurecr.io/alpha/alpha-case-manager-ui 26.06.1.0.16-78096939b890
frontends alpha-workflow-studio neutrinos.azurecr.io/alpha/alpha-workflow-studio 26.06.1.0.16-78096939b890
frontends alpha-delta-ui neutrinos.azurecr.io/alpha/alpha-delta-ui 26.06.1.0.16-78096939b890
adapters alpha-jbpm-service neutrinos.azurecr.io/alpha/alpha-jbpm-service 26.06.1.0.16-78096939b890
cron alpha-task-distributor neutrinos.azurecr.io/alpha/alpha-task-distributor 26.06.1.0.16-78096939b890
cron gts neutrinos.azurecr.io/alpha/gts 26.06.1.0.16-78096939b890

:telephone_receiver: Support & Resources