AireFlow Release Notes

Version: 2.39.0
Release Date: 6th May 2026

Summary of Changes

✨ New Features

• Task-Level Input Context (FLOW-1289)

🐞 Bug Fixes

• Upgraded Unsupported GraphQL Framework (FLOW-1316)
• GraphQL Alias Overloading Protection (FLOW-1317)

---

Detailed Changes

✨ New Features

---

Task-Level Input Context (FLOW-1289)

Description

It is now possible to define example input context at the task level, in addition to the existing workflow-level setting. Task-level context takes precedence when set, enabling more accurate and relevant previews for individual tasks within a workflow.

What this means for you

You can now configure example data specific to each task, so previews reflect the real context of that task rather than relying on a single shared workflow example. This makes it much easier to design and test tasks that depend on particular input values.

---

🐞 Bug Fixes

---

Upgraded Unsupported GraphQL Framework (FLOW-1316)

Description

The GraphQL framework (Chilli Cream Hot Chocolate) running on the AireFlow API was found to be on an end-of-life version that no longer receives security patches, as identified during penetration testing. The framework has been upgraded to a current supported version.

---

GraphQL Alias Overloading Protection (FLOW-1317)

Description

The AireFlow GraphQL API was found to be vulnerable to alias overloading, where repeated aliases in a single query could be used to overwhelm server resources. Server-side restrictions on the number of aliases permitted per query have been applied to address this.