We use cookies to try and give you a better experience in Freshdesk.
You can learn more about what kind of cookies we use, why, and how from our Privacy policy. If you hate cookies, or are just on a diet, you can disable them altogether too. Just note that the Freshdesk service is pretty big on some cookies (we love the choco-chip ones), and some portions of Freshdesk may not work properly if you disable cookies.
We’ll also assume you agree to the way we use cookies and are ok with it as described in our Privacy policy, unless you choose to disable them altogether through your browser.
(Note: you can download the Release Notes PDF in the Release Notes PDFs section in Help Center)
For this release, we anticipate the following introductions in your environments. Major features are documented in the Blend Knowledge Base accessible at help.blend.com. If that resource does not answer your question, please reach out to Blend Support.
Announcements (2)
SAML Key Encryption Update Required
We are deprecating support for RSA 1.5 (RSA_PKCS1_PADDING) key encryption for SAML assertions, which will be fully removed by October 1st, 2026. This change is driven by a Node.js 22+ security fix for the Marvin Attack vulnerability (CVE-2023-46809), which removes support for RSA 1.5 padding in the decryption path, meaning any SAML assertions still using this method will fail to decrypt. IdP administrators must update their SAML key encryption method from RSA 1.5 to RSA-OAEP (xmlenc#rsa-oaep-mgf1p) in their Identity Provider's SAML integration or Service Provider (SP) connection settings by October to avoid disruption to borrower SAML-based authentication. This update is typically carried out by your institution's IT team. If you have questions or need assistance, please reach out to your Blend representative or open a support ticket.
Note: Update steps may vary depending on your IdP (e.g., Okta, Azure AD, PingFederate, OneLogin, etc.). Refer to your IdP's documentation or contact their support team for specific instructions.
Encompass Lower Environment Migration
ICE is in the process of migrating customers’ Encompass lower environments over a period of time. If you are scheduled for migration, please be aware of the following important steps to ensure continued connectivity with Blend:
What You Need to Do:
Notify Blend Support at least 10 days in advance of your scheduled migration. This lead time is necessary for Blend to prepare and reestablish connectivity between your Encompass Beta and Blend Beta environments.
If you have received a migration notification from ICE and do not intend to delay the migration, please notify Blend Support immediately to ensure your systems remain connected.
For additional details, please refer to ICE's official documentation here:
R2T to UAT Migration Details
Maintenance Announcements (3)
(New) Configurable Products Database Maintenance
Blend will be performing a database resize for Configurable Products. The maintenance window is approximately 15 minutes, during which there will be a short write outage of 30-60 seconds while the system fails over.
Will there be downtime associated with this maintenance?
Yes, the downtime will impact features and services in both the borrower and lender app. Failed tasks will be retried automatically after the outage.
What services or products are affected?
Configurable Products borrower and lender apps may experience intermittent disruption for approximately 15 minutes, with a write outage of approximately 30-60 seconds.
How will this impact the borrower app?
Borrowers may experience brief errors when saving progress. Any failed saves will be retried automatically after the short outage.
How will this impact the lender app?
Lenders may experience brief errors when saving changes. Any failed saves will be retried automatically after the short outage.
Maintenance Windows
Beta: There will be no impact to beta.
Production: Thursday 9/24, 12:00 AM - 2:00 AM Pacific (approximately 15 minutes)
(New) Scheduled Network Maintenance: Cloudflare Migration
Blend is updating DNS for customer-facing application URLs so that traffic is served through Cloudflare's edge network. This is a DNS and TLS-termination change only. The systems serving your application are unchanged.
Will there be downtime associated with this maintenance?
No downtime is expected.
What services or products are affected?
The borrower app, lender app, admin console, inbound API and partner integrations calling your hostname, and branded or vanity URLs.
How will this impact the borrower app?
No user-visible change. No borrower data, in-progress application, or uploaded document will be affected.
How will this impact the lender app?
No user-visible change.
Maintenance Windows
Beta: Monday 9/28, 12:00 AM - 2:00 AM Pacific
Production: Monday 10/5, 12:00 AM - 2:00 AM Pacific
Please reach out to your Blend account representative if you have any questions.
DCS and Payment Database Upgrade
Blend will be upgrading our DCS and Payment infrastructure databases from version 14.15 to 15.10.
Will there be downtime associated with this maintenance?
Yes, the downtime will impact features and services in both the borrower and lender app.
What services or products are affected?
During the downtime period, DCS and Payment services will be unavailable.
How will this impact the borrower app?
Borrowers may experience errors or be unable to complete certain steps in the application. Payment collection (such as upfront credit fee payments or payment follow-ups) will not complete and may show an error or remain pending.
How will this impact the lender app?
Lenders may experience errors when loading certain workflows or viewing updated payment status. Lenders may be able to create or send a payment follow-up, but the card transaction cannot be submitted while the payment service is down.
Maintenance Windows
Beta: There will be no impact to beta.
Production: Thursday 9/17, 12:00 AM - 2:00 AM Pacific
Preview Environments (Test/Dev/Beta) (0)
No new beta releases.
Production Environments (Prod) (3)
Autopilot Release Notes (1)
0 Votes
0 Comments
Login to post a comment