What's New in Zephyr Enterprise Release 8.8.0
August 05, 2026
Introducing Zephyr Enterprise 8.8.0. This release includes new capabilities, reporting enhancements, and usability improvements. It also resolves multiple issues to improve stability, performance, and user experience. Upgrade to Zephyr Enterprise 8.8.0 to take full advantage of these benefits.
Important Announcements
Starting release 8.8, Zephyr Enterprise now supports:
MySQL version 8.4.9
Important
A full Elasticsearch reindex is required after the upgrade for test case import, test case search, and ZQL search functionality.
New Features
The following updates bring significant enhancements, security improvements, and fixes:
2D Report Enhancements
The following are the enhancements for the 2D report:
Introduced Timeframe Report for Test Case entity to analyze data across defined time periods.
Added two-dimensional reporting for Test Execution. Cross-reference test execution data by criteria such as requirements, projects, team members, and creation date.
Added two-dimensional reporting for Requirements. Cross-reference requirement data by criteria such as projects, test cases, coverage status, and creation date.
Added drill-down capability to two-dimensional reports to view detailed underlying information.
Refer to 2D Report for more details.
Improvements
The following updates bring significant improvements and fixes:
Enhanced Audit Logging for Test Case Sharing
The Project Setup page now logs audit events when you share or unshare test cases, providing visibility into test case sharing operations.
Attachment Deletion in Built-in Issue Tracking System
Added the ability to delete attachments from Zephyr Enterprise's built-in issue tracking system. This feature provides consistent experience across the application and gives you full control over defect attachments.
Created On and Last Modified on Columns in Internal Defect Tracking Grid
Added the Created On and Last Modified On columns to the Internal Defect Tracking grid to track defect activity. Both columns display dates in Zephyr Enterprise's standard format and support sorting. The Created On appears by default after the Severity column.
Configurable Custom Field Validation for Automation APIs
Added the skipMandatoryCustomFieldValidation flag to Automation APIs, allowing you to bypass mandatory custom field validation when creating and executing automation jobs. The flag defaults to false, preserving existing validation behavior.
The following are the impacted APIs:
Create Job Detail API
Create and Execute Job API
Create and Execute Job with Attachments API
Update Execute Job API
Database Query Performance Optimization
Improved query performance for Test Planning and Test Execution pages by adding database indexes on the release_test_schedule(tcr_catalog_id) and teststep_fc_value_version(entity_id) tables. The indexes reduce query execution time and memory consumption for complex operations.
Bug Fixes
The following table lists the bug IDs, fixed issues, and error resolution.
Bug ID | Resolution |
ZEPHYR-45355 | Fixed an issue where the audit log did not correctly capture Execution Step details when test cases with steps were executed in bulk. |
ZEPHYR-45134 | Fixed an issue where exporting test cases from Test Planning and Test Execution failed when test cases contained more than 35,000 characters. |
ZEPHYR-45214 | Fixed an issue where images pasted into test step fields were stored as Base64 data. Images are now saved as attachments. |
ZEPHYR-45096 | Fixed an issue in the Create and Execute Job API where test case creation failed when multiple custom fields shared the same display name across different entities. |
ZEPHYR-45093 | Fixed an issue where the Test Case Execution Progress report loaded slowly by optimizing the query to filter execution data by release ID. |
ZEPHYR-44969 | Fixed an issue where Jira traceability links for test cases and executions failed to navigate after logout and login. Links now open in Jira Server and Jira Cloud. |
ZEPHYR-44574 | Fixed an issue where renaming test folders validated names against all folders in the release instead of only folders at the same hierarchy level. |
ZEPHYR-44526 | Fixed an issue where API tokens became inaccessible during daylight saving time transitions and time zone changes. |
ZEPHYR-44521 | Fixed an issue where original Jira sync errors were hidden by secondary exceptions during error handling. Error messages in the Jira integration now display accurately. |
ZEPHYR-44520 | Fixed an issue where multiple duplicate defects were created in Jira when creating a defect from a failed test execution in Zephyr Enterprise. Only one defect is now created per action, even with rapid or repeated requests. |
ZEPHYR-44404 | Fixed an issue where test case searches by last modified date returned incorrect results after bulk edits. |
ZEPHYR-44369 | Fixed an issue where editing and saving test steps in the Global Test Repository unexpectedly redirected users to a different test case. |
ZEPHYR-44343 | Fixed an issue where the Release Execution Progress count displayed zero instead of actual values on first login or after clearing the browser cache. |
ZEPHYR-44336 | Fixed an issue where the |
ZEPHYR-44283 | Fixed an issue where custom field mappings were removed when omitted from field map configuration updates. |
ZEPHYR-44272 | Fixed an issue where defect descriptions exported to Excel (.xls) contained HTML tags instead of plain text. |
ZEPHYR-44256 | Fixed an issue where Jira comments with formatted text (bold, italic) displayed incorrectly on the Defect Tracking page. |
ZEPHYR-44228 | Fixed an issue where rich text-enabled test case steps allowed typing without explicitly focusing on the input field. |
ZEPHYR-44176 | Fixed an issue where downloading support.zip failed when Cloud Jira was integrated with OAuth2 and Manual Webhook configuration. |
ZEPHYR-44164 | Fixed an issue in User Setup where username tooltips displayed incorrect names after sorting the user list by any column. |
ZEPHYR-44161 | Fixed an issue during test case import where Excel converted numeric usernames to decimal format, causing user lookup failures. |
ZEPHYR-44110 | Fixed an issue in the Defect Admin Projects page where pagination and page size changes returned 404 errors. |
ZEPHYR-44085 | Fixed an issue where ZQL searches for test cases using the "createdOn" field returned incorrect results due to misalignment between search and display fields. |
ZEPHYR-43973 | Fixed an issue in Defect Tracking where exporting defects without explicit selection failed to export any defects. |
ZEPHYR-43969 | Fixed an issue in Jira Cloud integration where incorrect project mappings occurred due to Cloud ID mismatches when using both OAuth and OAuth2 authentication methods. |
ZEPHYR-43947 | Fixed an issue where the test case execution status showed WIP instead of Pass when test steps were updated with Pass. |
ZEPHYR-43864 | Fixed an issue in the Test Repository where the Test Steps panel automatically regenerated and left empty data blocks after an update. |
ZEPHYR-43781 | Fixed an issue in Defect Tracking where selected values disappeared from search fields when switching between Advanced Search and Basic Search. |
ZEPHYR-43759 | Resolved the issue where the manager-Global Repository role was not removed even after deletion when the user held another Global Repository App role. |
ZEPHYR-43758 | Fixed an issue in the in-built issue tracking system, where the Assigned drop-down list displayed all active users in the system instead of only project team members. |
ZEPHYR-43751 | Fixed an issue where the Defect Tracking export only exported the current page instead of all records. |
ZEPHYR-43717 | Fixed an issue where Jira defect descriptions were displayed and updated as raw Atlassian Document Format (ADF) JSON instead of plain text. |
ZEPHYR-43692 | Fixed an issue where test case import from corrupted Excel files with malformed XML structure failed or produced incorrect results. |
ZEPHYR-43596 | Fixed an issue where mapping requirements to test cases from the Test Repository Search page overwrote existing mappings instead of appending to them. |
ZEPHYR-43114 | Fixed an issue where daily backups were not running, and multiple backup jobs were stuck in progress for extended periods due to time zone handling issues. |
ZEPHYR-42883 | Resolved the issue where excessive logs collected in the database caused performance issues. |
ZEPHYR-42688 | Fixed an issue in Zephyr Administration where adding a new execution status failed with a ConstraintViolationException error due to stale IDs in the database. NoteAny existing corrupted data (if any) must be manually corrected using SQL queries; this fix prevents the issue from recurring. |
ZEPHYR-42587 | Fixed an issue where test cases could not be added to the Test Repository. |
ZEPHYR-42529 | Fixed an issue in the Test Execution tree where copying and pasting the URL of a deeply nested child node (more than one level deep) redirected to the root folder instead of the intended node. |
ZEPHYR-36582 | Fixed an issue where cycle phase deletion was slow due to synchronous file removal of attached test execution files. Attachment deletion now runs asynchronously in the background. |
ZEPHYR-36008 | Fixed an issue where cloning a release from a different project displayed test cases in the planning section in an incorrect order for freeform phases. |
ZEPHYR-34999 | Fixed an issue where custom fields from other projects appeared in the export field selection dialog for requirements, test cases, and test executions. |
ZEPHYR-30594 | Fixed an issue in the built-in issue tracking system where sorting by Custom Field 1 and Custom Field 2 columns did not work in the defects grid. |
Security Updates
The following security vulnerabilities have been resolved in this release.
Bug ID | Resolution |
ZEPHYR-44967 | Resolved the Bouncy Castle vulnerability (BDSA-2025-8573/BDSA-2018-5235/BDSA-2025-8507/BDSA-2024-2378/CVE-2023-3876/CVE-2023-33202/CVE-2020-15522/BDSA-2024-1960/BDSA-2024-1961) by upgrading from version 1.8.0 to 1.8.4. |
ZEPHYR-44966 | Resolved the tomcat-native vulnerability by migrating from version 2.0.9 to 2.0.14. |
ZEPHYR-44965 | Resolved the plexus-utils vulnerability by migrating from version 3.5.0 to 4.0.3. |
ZEPHYR-44561 | Resolved the net.sf.jasperreports vulnerability by upgrading the JasperReports library to version 7.0.6. |
ZEPHYR-44560 | Resolved the security vulnerability in Apache Tomcat by upgrading to version 11.0.22 to address vulnerabilities in tomcat-embed-websocket. |
ZEPHYR-44559 | Resolved the security vulnerability in Jakarta Mail (com.sun.mail jakarta.mail ) by upgrading to version 2.0.2. |
ZEPHYR-44558 | Resolved the security vulnerability in Apache HttpClient5 (org.apache.httpcomponents.client5) (CVE-2020-13956 / BDSA-2025-3540) by upgrading to version 5.6.1. |
ZEPHYR-44557 | Resolved the commons-fileupload vulnerability. |
ZEPHYR-44556 | Resolved the commons-beanutils vulnerability (CVE-2014-0114, CVE-2019-10086). |
ZEPHYR-44555 | Resolved the security vulnerability in Jakarta Mail (org.eclipse.angus jakarta.mail ) by upgrading to version 2.0.5. |
ZEPHYR-44554 | Fixed a security vulnerability (BDSA-2026-3355) in Apache ActiveMQ Artemis by upgrading artemis-commons to version 2.53.0 (the latest available version). |
ZEPHYR-44550 | Fixed Apache Tomcat vulnerabilities CVE-2025-66614 and CVE-2026-24733 by upgrading Apache Tomcat to version 11.0.22. |
ZEPHYR-44549 | Resolved the security vulnerability in Apache Log4j by upgrading to version 2.26.0. |
ZEPHYR-44548 | Resolved the Denial of Service (DoS) vulnerability (BDSA-2025-5248 / CVE-2025-48976) in Apache Commons FileUpload by upgrading to version 2.0.0-M4. |
ZEPHYR-44547 | Resolved the sensitive information disclosure vulnerability (CVE-2025-37731) in Elasticsearch by upgrading to version 8.19.13. |
ZEPHYR-44200 | Resolved the security vulnerability (CVE-2025-48976) in commons-fileupload by upgrading the dependency to version 1.6. |
ZEPHYR-43576 | Resolved the security vulnerability (BDSA-2025-6849) in Nimbus JOSE + JWT library by upgrading to version 10.9.1. |
ZEPHYR-43575 | Resolved the security vulnerability (BDSA-2025-3217) in MySQL Connector/J by upgrading to version 9.7.0. |
ZEPHYR-43574 | Resolved security vulnerabilities (BDSA-2024-0980 and BDSA-2024-1238) in JFreeChart library by upgrading to version 1.5.6. |
ZEPHYR-43538 | Resolved the security concerns in the Not Yet Commons SSL library (CVE-2014-3604) by upgrading from version 0.3.11 to version 0.3.17. |
ZEPHYR-43529 | Resolved the esapi-java-legacy vulnerability (BDSA-2025-9990) by upgrading the earlier version of ESAPI Java 2.5.4.0 to 2.7.0.0. |
ZEPHYR-43527 | Resolved the Apache Commons FileUpload vulnerability by upgrading to version 1.6.0. |
ZEPHYR-43526 | Resolved the security vulnerability in Apache Commons BeanUtils (BDSA-2025-4668) by upgrading from version 1.9.4 to version 1.11.0. |
ZEPHYR-43514 | Resolved the Apache Commons Codec vulnerability (BDSA-2008-0002) by upgrading from version 1.3 to version 20041127.091804. |
ZEPHYR-43509 | Resolved the Apache Commons Configuration vulnerability by upgrading to version 2.10.1. |