Automator Version 17.1.1

Released on July 27, 2026

Improvements

• The keeper-automator.jar file is now minimized — unused classes have been removed, resulting in a smaller deployment footprint and faster startup time.

• Windows build hardened: ensures the build\wix directory exists before running heat, and the automator_heat.bat script is more robust against edge-case failures.

Security Updates

• Addressed Bugcrowd reported vulnerabilities.

• Upgraded transitive Netty dependency to remediate a flagged CVE.

• Mitigated multiple library-related CVEs through updated dependencies and Dockerfile hardening.

• Fixed additional vulnerabilities identified by Manifest security scanning.

• Eliminated MavenGate supply-chain exposure by building exclusively from libraries hosted in Keeper Central.

• Automator now rejects setup_crypto step 1 requests when the service is already in a RUNNING state, preventing potential misconfiguration during active operation.

Bug Fixes

• Fixed an issue where team approvals were sending incorrect information, causing users not to be added to Teams after Automator approved the operation.

Update Instructions

• For container deployments, simply update the container and restart the service

• For other deployment methods, see the Automator documentation to update

Advanced Features

See this page for all of the new and advanced features / settings for the Automator service.