Oktul release notes

Oktul Work Item Selector for Jira 3.19.0

2026-11-04T00:00:00Z

A maintenance release: internal clean-up and documentation. Nothing changes in how the app behaves, and no permission changed.

Oktul SignPlus for Confluence 12.19.0

2026-11-04T00:00:00Z

A maintenance release: internal clean-up and documentation. Nothing changes in how the app behaves, and no permission changed.

Oktul Work Item Macro for Confluence 2.15.0

2026-11-04T00:00:00Z

A maintenance release: internal clean-up and documentation. Nothing changes in how the app behaves, and no permission changed.

Oktul Work Item Selector for Jira 3.18.0

2026-11-03T00:00:00Z

Fixes from our penetration test of 03.11.2026. - The app runs only for edits to its own fields. Its filter on work item updates used a method Jira expressions lack, so every edit called the app since 17.10.2026. Nothing was lost, and the extra calls stop. - The validator's settings list only this app's fields. A field of another app with a similar key could appear there.

Oktul SignPlus for Confluence 12.18.0

2026-11-03T00:00:00Z

Fixes from our penetration test of 03.11.2026. - An external signer's email address stays out of the browser. The page shows a placeholder. The REST API still returns the address. - Cancelling a pending signing keeps one that has finished in the meantime. - A page that does not exist is refused like a page you cannot see. - A signer's role reads Signer or Viewer in the English signing details.

Oktul Work Item Macro for Confluence 2.14.0

2026-11-03T00:00:00Z

The macro browser describes the macro in the same words as the Marketplace listing.

Oktul Work Item Selector for Jira 3.15.0

2026-10-31T00:00:00Z

- Clearer Estonian for eight interface strings, and muutuja for a JQL placeholder. - Dependency security updates. No permission changed.

Oktul SignPlus for Confluence 12.15.0

2026-10-31T00:00:00Z

- A group is added by name through Confluence's group picker, since Confluence removed the old lookup by name. - Clearer Estonian: the byline and the download button. - Dependency security updates. No permission changed.

Oktul Work Item Macro for Confluence 2.12.0

2026-10-31T00:00:00Z

Dependency security updates. Every REST call the app makes is checked against Atlassian's current specifications. Nothing changes in how the app behaves, and no permission changed.

Oktul Work Item Selector for Jira 3.14.0

2026-10-21T00:00:00Z

A security update. markdown-it, a library the app's screens load through Atlassian's @forge/bridge, moves to 14.3.3, which closes two published vulnerabilities in it. Released the same day the fix was made. Nothing changes in how the app behaves, and no permission changed.

Oktul SignPlus for Confluence 12.14.0

2026-10-21T00:00:00Z

Oktul Work Item Macro for Confluence 2.11.0

2026-10-21T00:00:00Z

Oktul Work Item Selector for Jira 3.13.0

2026-10-18T00:00:00Z

Fixes from a security review, and the app's icon in Jira's field type list. - A work item outside the field's JQL scope is shown as Not available in a field that reads work items as the app. A key written into the field by the REST API or an import could show a work item the person could not otherwise see. - Work item links and the reverse index are written only for work items inside the field's scope. - Search suggestions in advanced search match work item keys only, and a field that reads work items as the person suggests nothing, since a suggestion is made as the app. - The field type list shows the Oktul Work Item Selector icon beside both field types. - Less storage and compute: an upgrade rebuilds the index only when its format changed, and each function runs in less memory.

Oktul SignPlus for Confluence 12.13.0

2026-10-18T00:00:00Z

Security fixes from a review of the whole app, and Assets objects in exported tables. - An automation rule can export or sign a page only in the spaces a Confluence administrator chooses, under Spaces automation rules can use in the global settings. With none chosen, a rule that uses a SignPlus action stops with a message saying why. Before, a Jira rule could act on any page the app could reach. - An Assets field in an Oktul Work Item Macro table prints as the page shows it, as a chip with the object's label and key. It printed as the object's id when the macro could not look the object up during the export. - A Confluence account added as a signer gets the address and name Confluence holds for it, never the ones in the request. - A group added through the REST API is limited to the groups the token's account belongs to, as it already was in the page. - A completed signing is confirmed with Dokobit before the signed document is downloaded. - A signing is recorded as soon as Dokobit holds it, so one cut short by the platform's time limit can still be found and cancelled. A signing of thousands is cancelled in the background. - Cancelling needs view access to the page. Refused REST API calls no longer push older entries out of the activity log, and error text written to the app's logs has addresses, links and tokens removed.

Oktul Work Item Macro for Confluence 2.10.0

2026-10-18T00:00:00Z

Faster, sturdier exports, and fixes from a security review. - A PDF or Word export finishes inside the platform's time limit. With many rows or Assets objects it leaves out what there was no time for, fewer rows or a chip as a plain reference, where the macro could fail in the export before. - Assets objects are looked up a hundred at a time, on the page and in exports. - A notification email shows the first 25 rows and points the reader to the page for the rest. - A reader who is not signed in sees no edit controls. - The configuration dialog asks Jira for nothing on an unlicensed site. - The macro has the new Oktul Work Item Macro icon.

Oktul SignPlus for Confluence 12.9.0

2026-10-15T00:00:00Z

Fixes to exported PDFs and to how SignPlus reads space permissions. - A picture taller than a page no longer squeezes the page. A portrait screenshot printed at a third of its height, and the paragraphs above it printed on top of each other. Such a picture is now drawn narrower, at its own proportions, so its whole height fits on one page. - Download PDF names the file after the Document name field. It attached page--.pdf whatever the field said. With the field empty, the file takes the page title, numbered when the page already has a file of that name. - A space administrator granted through a role is recognised, and so is a person who can view a space through one. Confluence leaves role grants out of the permission list SignPlus read, so an administrator of a colleague's personal space was told they could not view it. - A whiteboard's address is written into the signed document as text. An address containing a quote could add markup to the PDF. Only an http or https address becomes a link. The signed document changes for a page with a picture taller than a page, and for a whiteboard whose address contains ", < or >.

Oktul Work Item Selector for Jira 3.10.0

2026-10-10T00:00:00Z

A security update. The app deletes only the work item links it created. - A field that mirrors its selection as work item links now keeps a record of each link it creates, in the app's own Forge storage: the link id and the keys of the two work items. It deletes a link only when that record matches, or when the link is of the type and direction the field is set to keep. Before, a link id written into the work item property by someone who could edit the work item could have had the app remove a link that person had no permission to remove. - Links made before this release are still removed while the field keeps its link type. After a type change, or with linking switched off, they stay for a person to remove. - Dependencies on their newest supported versions, on Node 24. A dependency audit of this release reports nothing.

Oktul SignPlus for Confluence 12.6.0

2026-10-10T00:00:00Z

Support for Oktul Regex Field for Jira. A paragraph field of that app in a Jira work items table or a Work Item Macro table now prints in the signed document as the text it holds, one paragraph per line, instead of its stored value. The single-line field already printed as its text. Nothing else changes in how SignPlus signs a page.

Oktul SignPlus for Confluence 12.5.0

2026-10-10T00:00:00Z

A minor update that prepares SignPlus for Oktul Regex Field for Jira, so that its paragraph field will print in a signed document as the text it holds. Until that app is published nothing changes in how SignPlus signs a page, what the signed document contains or how it is set up.

Oktul Work Item Macro for Confluence 2.8.0

2026-10-10T00:00:00Z

Support for Oktul Regex Field for Jira. Both of its fields show in the table: the single line as its text, the paragraph as its text or, with the column's Rich text option, as rich text. In the Advanced edition both can be edited in the cell, the paragraph in the rich text editor. The field's rules are that app's own, so Jira checks them when the value is saved and a refused value shows that app's message in the cell. Exports carry both as text.

Oktul Work Item Macro for Confluence 2.7.0

2026-10-10T00:00:00Z

A minor update that prepares the macro for Oktul Regex Field for Jira, so that its fields will show in the table and, in the Advanced edition, can be edited there. Until that app is published nothing changes in the table, its columns, exports or inline editing.

Oktul Work Item Macro for Confluence 2.6.0

2026-10-08T00:00:00Z

The first Marketplace release. A Confluence macro that lists Jira work items for a JQL query, with the columns the page needs. - Any Jira field as a column, with display options per field type and the same field allowed in several columns. See [columns and display options](../columns/). - Jira Service Management Assets objects as chips, with the object type's icon, label and key, and Oktul Work Item Selector fields as work item cards, as in Jira. See [Assets and Work Item Selector fields](../assets-and-work-item-selector/). - Sorting from the column headings, through Jira's ORDER BY, for that reader only, and not saved. See [sort by a column](../add-the-macro/#sort-by-a-column). - Paging with Previous and Next, up to 100 work items a page, a total from Jira's approximate count, and Refresh to run the search again from page 1. - Dates in Confluence's style, in each reader's profile language and time zone. - PDF and Word exports, page history and notification emails carry the list as a Confluence table of up to 300 rows. See [export, page history and email](../export/). - Inline editing in the Advanced edition, as the reader and within their Jira permissions, for text, numbers, dates, selects, labels, people, parent, estimates, status, Assets objects, Work Item Selector fields and rich text. The Work Item Selector editor does not apply the selector field's JQL scope or permission mode. See [inline editing](../inline-editing/). - Two editions. Standard has the table, every column and display option, sorting, paging and exports. Advanced adds inline editing. The edition follows your Marketplace subscription, and nothing is installed or configured differently for either. See [editions](../#editions). - When the licence lapses, the table, the configuration dialog and exports show App license is not active in place of the work items, and Confluence keeps working. The macros' configuration is kept. See [licensing](../install/#licensing-and-what-happens-when-it-lapses). It requests four scopes: read:jira-work, write:jira-work, read:cmdb-object:jira and read:cmdb-icon:jira. Each is explained in the [privacy notice](../privacy/#6-permissions). It declares no external permission, and no data leaves Atlassian.

Oktul SignPlus for Confluence 12.4.0

2026-10-07T00:00:00Z

The first Marketplace release, listed on 09.10.2026. ### What changed in this build since these pages were first written, 26.09.2026 Signing - A Confluence group can be added as signers or viewers. Every member is invited when the signing is sent, and a signing reaches up to 25,000 people, where it reached 100. - A signing started from the page is sent in the background, so closing the page does not stop it. A signing goes to everybody or to nobody. - The signing details filter the list to who has signed, who has not and who declined. - Deleting a finished signing is a Confluence administrator's by default, with a site setting to allow space administrators, page editors or the person who started it. - SignPlus checks with Dokobit itself, once an hour, about up to 1,000 pending signings it has not checked for an hour, so a lost notice no longer leaves a signing open. - There are two signing modes, Test and Your own token. Real signing is always on your own Dokobit account. - SignPlus asks Dokobit about a token before storing it, and does not save one Dokobit refuses. The document - Jira work items tables, Oktul Work Item Selector fields and Oktul Work Item Macro for Confluence tables print as the page draws them, with Work Item Selector values as work item cards. - Confluence's three kinds of table keep their own looks: tables an author drew, work items and Assets tables, and listings such as the meeting notes index and the user list. - Merged cells print merged, with the cell's fill and no line across it. - Animated GIFs print as one still picture, in place: the frame the animation rests on longest. - A picture the page already draws is no longer appended again as an attachment. - An image laid out at zero size no longer fails the whole export. Export styling - An uploaded font can have a bold face of its own, used for headings and bold text. - The header, the footer and each area of the first page take a colour of their own. - The first page can have a background picture, drawn edge to edge. - The preview of the first page, the header or the footer sits beside the settings while that section is open. Automation - The two Jira actions pick the page from a space and a title search, add signers without leaving the step, take a deadline from date pickers or a smart value, and list the smart values they return, written out whole. - Both actions' forms are laid out in sections like the settings screen, one open at a time. Signers added on the form stay on it, and every field is kept with the rule when it is saved. - Export a page as PDF names the attached file after the document name, or the page title. Security - Every value SignPlus receives is checked before it is used: identifiers such as page ids and signing references must have their shape, and names, messages and other text lose control characters and the Unicode controls that reorder text on screen, and are held to a length. [Security](../privacy/#11-security) covers it. - A webhook address must be a public https host, and a header may not contain a line break or replace a header SignPlus sets. Both are checked when saved and again before every delivery. - REST API replies tell caches not to keep them. - SignPlus takes part in Atlassian's personal data reporting. Each week it reports the Confluence accounts it holds names and email addresses for, erases them for an account that was closed and refreshes them for one that changed. [Retention](../privacy/#8-retention) covers it. Byline and settings - The byline under the page title reads Sign this page with a signature icon, and uses Confluence's own status icons once a page has a signing. - Every screen is available in Estonian. The byline's signing state and the sentences SignPlus shows when it refuses a request stay in English. ### Approval Compared with the build these pages first described, this one adds four read scopes (read:content-details:confluence, read:confluence-groups, read:jira-work and search:confluence) and one new host, dam-cdn.atl.orangelogic.com, Atlassian's image library hosted by Orange Logic, which receives only the request for a picture. A site running the earlier build approves them once, on upgrade. Each is explained in [privacy and data handling](../privacy/#5-recipients-and-transfers).

Oktul Work Item Selector for Jira 3.9.0

2026-10-06T00:00:00Z

In a multi select field, each chosen work item is a full-width card while editing. - Each chosen work item is the same card the work item view draws, the width of the field, with a cross to remove it. The chips the picker drew before took their width from their text, so a selection read as a row of small tags. Remove all appears under two or more. - The search box stays open after a pick, so several work items can be added in a row, and it stops offering what is already chosen. - Single select is unchanged. - The manifest declares Jira as a required product. - Security updates to test and build tooling, and an override for prosemirror-view (GHSA-c8x8-7fp4-3x9w), which the app imports for type definitions only. A dependency audit of this release reports nothing.

Oktul Work Item Selector for Jira 3.7.0

2026-10-02T00:00:00Z

Security updates to four third-party packages. The app behaves exactly as before. The updated packages are fast-uri, undici, markdown-it and brace-expansion, which between them carried 17 published advisories, the most serious rated high: host confusion in URI parsing, and denial of service in WebSocket decompression. None of the four runs inside the app. They arrive through Atlassian's Forge packages, which reference them for type definitions only, and through the lint tools that check the app's source code. The code deployed to your site and the workflow validator's configuration screen contain none of them. They were updated anyway, so that a dependency audit of this release reports nothing.

Oktul Work Item Selector for Jira 3.6.0

2026-09-25T00:00:00Z

The picker is shorter: no Load more button, and each column cut to 40 characters. - The Load more work items button is gone. The picker opens on the first 25 work items in scope, and typing narrows the list. The button paged through the rest of the scope 25 at a time. - Each column in a picker option is cut to 40 characters, spaces included, and ends in an ellipsis where it was cut. A long summary or description used to stretch the edit box. The cards on the work item are unchanged.

Oktul Work Item Selector for Jira 3.5.0

2026-09-23T00:00:00Z

The app follows each person's Atlassian profile language, in English or Estonian. Every screen is translated: the picker, the work item view, the field configuration screen and its knowledge base, the Automation action's form and the workflow validator's configuration. So are the field type names and descriptions Jira lists, and the message Jira shows when a typed value is rejected. Any other profile language shows English. Three kinds of text stay in English: error messages from the app's backend, messages in the Automation audit log, and the workflow validator's default block messages. An administrator can replace each block message with their own wording, in any language. - Field settings open one section at a time. Work item scope opens first, and opening another section closes the one that was open. The knowledge base and the help card stay open. - Save checks the configuration instead of staying disabled. An invalid scope used to disable it, and with the sections folded away the reason could be out of sight. Save now checks the scope again, and a rejected scope, column set or link type opens the section it concerns. - The cursor stays where you put it. Editing the middle of the JQL scope, the picker's placeholder text, the Automation action's work items or a validator message moved the cursor to the end after every keystroke. - The JQL scope box no longer takes focus by itself. - Clear keeps the work items box on screen. With Clear the selection chosen, the Automation action hid the box while the keys still in it stopped the rule from running. The box now stays visible until it is empty. - Shorter wording throughout the app, with one term per concept: work item in English, pilet in Estonian.

Oktul Work Item Selector for Jira 3.4.0

2026-09-21T00:00:00Z

First release: work item picker custom fields, scoped by JQL per field context. Two custom field types, Oktul Work Item Selector (Single Select) and Oktul Work Item Selector (Multi select), holding up to 100 work items, the Forge platform limit. - JQL scope per field context, validated live as it is typed. Placeholders read the current work item and user, so one configuration behaves differently on every work item: parent = {{issue.key}}, assignee = {{user.accountId}}. - Permission mode: search as the viewer, or as the app. - One to seven columns on each card, drawn the way Jira draws them. - Four JQL functions and eight aliases covering both directions of a relationship, plus Automation smart values and JQL autocomplete. - A "Set work item selection" Automation action: replace, add to, remove from, clear. - A workflow validator: require a selection, require statuses, restrict projects, prevent circular dependencies. - Optional native Jira links, created and removed with the selection. No data leaves Atlassian. The app declares no external permissions. The version here is the Marketplace version, which is what you compare against the version installed on your site. It runs independently of the source repository's own numbering.