July 2026
The Continuous Compliance 2026.4.0.0 release introduces support for Azure Service Principal authentication for Azure Blob Storage connectors. This release also includes performance improvements, enhanced logging, security updates, and multiple stability fixes across mapping imports, Microsoft SQL Server support, and user management.
New features
Service principal authentication for Azure blob storage
This release adds support for Azure Service Principal authentication for Azure Blob Storage file and mainframe dataset connectors. You can now authenticate using a Tenant ID, Client ID, and Client Secret in addition to the existing authentication methods. For more details, see Azure Blob Storage connector for files.
Plugin and JDBC driver JAR export with role-based Export permission
The API now supports exporting customer-installed plugin JARs and uploaded JDBC driver JARs by using dedicated export endpoints and the existing file-download endpoint. On upgrade, migration automatically enables Export for roles that already had View on Plugin or JDBC Driver; administrators can disable Export afterward if needed. For more information, refer to Managing plugins using the API client and Users and roles pages.
Fixed issues
Release 2026.4.0.1
| Bug number | Description |
|---|---|
| DLPX-97460 | Fixed an issue where the Monitor screen displayed 0% progress throughout a masking job run because the record count was not returned during execution. Progress now updates correctly as the job runs. |
| DLPX-98221 | Fixed an issue with OAuth PKCE and Refresh Token Rotation support for Salesforce. |
Release 2026.4.0.0
| Bug number | Description |
|---|---|
| DLPX-91300 | Fixed an issue where SQL queries for drop, disable, enable, and recreate operations on DB2 and Microsoft SQL Server were not logged in Enabled Task job logs. |
| DLPX-95151 | Fixed an issue where Mapping Algorithm v2 imports of large mapping value sets experienced poor performance because import times scaled quadratically with dataset size. The fix is enabled by default through the MappingBulkImportEnabled application setting. Setting this option to false disables the new import behavior and restores the previous implementation. |
| DLPX-96512 | Fixed a security vulnerability (CVE-2025-0725) in Masking Proxy builds. |
| DLPX-96908 | Fixed an issue where the Microsoft SQL Server Driver Support Plugin threw a NullPointerException during index re-creation when both the filegroup and partition scheme were NULL. |
| DLPX-97496 | Fixed an issue where users assigned to more than 100 environments had assignments beyond the first 100 silently removed when their profile was saved. |
Known issues
|
Key |
Summary |
Workaround |
|---|---|---|
| DLPX-80640 | Masking drop Indexes task does not find and remove indexes on SQL Server partitioned tables in both on-the-fly and in-place masking jobs. | Manually script the drop and recreate indexes. |
| DLPX-93701 | On the fly masking job fails when using different source and target connector types (mixed Cloud and On-premise connectors) for JSON, XML, and Parquet files. | None |
| DLPX-95510 | Parquet masking jobs fail in GCP interoperability mode when the GCP bucket name contains underscores. This occurs because the Hadoop S3A client enforces AWS bucket-naming rules before the request reaches GCS. | None |