September 2026
This release improves security and reliability for masking jobs by updating the host JDK, tightening credential handling, and fixing issues that affected connector validation, password-vault sync, and Parquet job execution. It also resolves several critical defects so job progress, logs, and file processing behave more predictably and reduce the risk of failed or insecure runs.
New features
Upgrade to JDK 17
The Java Development Kit (JDK) toolkit running on the host has been upgraded from JDK 8 to JDK 17. This update provides improved performance, security enhancements, and long-term support aligned with modern Java standards.
Before upgrading, verify that your custom algorithm plugins and custom JDBC drivers are Java 17 compatible, as this release runs on Java 17; incompatible extensions may fail to load after the upgrade. We recommend recompiling and testing them against Java 17 in a non-production environment, and engaging Delphix Professional Services if you need help.
Independent source and target vault credentials for On-The-Fly jobs
On-The-Fly masking jobs can now use different password-vault credentials for the source and target database connectors.
Fixed issues
Release 2026.5.0.2
| Bug number | Description |
|---|---|
| DLPX-99175 | Connection restored with Azure Blob Storage file type connectors using managed identity auth type for all type of API operations failure including test connection, file metadata fetch, masking and profiling for that specific connector type. |
Release 2026.5.0.0
| Bug number | Description |
|---|---|
| DLPX-92108 | Leading or trailing spaces in a connector JDBC URL or database name no longer pass the connection test while still causing masking jobs to fail during pre-script or identity creation. |
| DLPX-94292 | Parquet job execution metrics now report accurate values for data processed, progress, bytes remaining, and elapsed time without overflow-related errors. |
| DLPX-97360 | Free Text Redaction now catches matches on lines after the first in multi-line text fields. |
| DLPX-97470 | SSO-enabled engines: admin accounts no longer get local API access by default. If you rely on an admin account's local login for scripts/integrations under SSO, you'll need to explicitly enable it going forward. Existing accounts are unaffected. |
| DLPX-97682 | Masking Parquet files on S3 storage should no longer fail with a NoClassDefFound error |
| DLPX-97907 | Aligned the connector password length validation with the actual supported maximum, preventing a data insertion error when entering longer passwords. |
| DLPX-97908 | Masking and profiling job logs now redact DB connector credentials automatically on connection failure, reducing the risk of exposing sensitive values in plain text. |
| DLPX-97953 | Environment imports with force_overwrite now handle older source engines correctly when overwriting profiling jobs, without requiring manual cleanup. |
| DLPX-97977 | Support NULL SL algorithm for parquet file masking. |
| DLPX-98011 | Connector passwords now support longer values, allowing Personal Access Tokens (PATs) and JWT-based credentials - such as those required for Snowflake JDBC connections - to be used when configuring masking connectors. |
| DLPX-98152 | Engine sync after certain upgrades no longer overwrites or permanently removes existing password-vault secrets. |
| DLPX-98186 | Multiple masking and profiling jobs now share the same billing period record safely, preventing failures caused by simultaneous job activity. |
| DLPX-98224 | Azure Blob Storage masking jobs now avoid the "part size too large" failure for large-memory jobs by enforcing a safe block-size limit when the job output exceeds the supported threshold. |
| DLPX-98269 | Adding multiple files to a ruleset in a single save now works correctly: all the selected files are saved and appear when you reopen the ruleset, instead of the ruleset showing up empty. |
| DLPX-98533 | The JDBC URL field for EXTENDED connectors is now visible and editable by default, and updated values are saved correctly when editing the connector. |
| DLPX-98591 | When a job briefly fails to log its progress, the system now cleans up properly afterward. Later, unrelated jobs no longer get blocked by a leftover record from that earlier failure. |
Known issues
|
Key |
Summary |
Workaround |
|---|---|---|
| DLPX-80640 | Masking Drop Indexes task does not find and drop indexes on SQL Server partitioned tables (OTF and IP) | Manually Script the Drop and Recreate Indexes. |
| DLPX-93701 | OTF masking job fails when using different source and target connector types (Cloud and On-premise connectors) for JSON, XML, and Parquet files. | No workaround |
| DLPX-95510 | Unable to mask S3 Parquet files on GCP when the bucket name contains an underscore ("_"). | No workaround. |