3.4


Malware/threat certification

The CAST Imaging installation media was scanned using an up-to-date antivirus engine (Sentinel Agentexternal link). No malicious content, trojans, or executable threats were detected at the time of the scan. A SHA256 checksum of the installer is available on the CAST Extend websiteexternal link. For further information or verification, please contact CAST Supportexternal link.

  • Scan Date: 2025-07-21
  • Scan Engine: Sentinel Agent
  • Result: No malware or threats detected

3.4.0-funcrel

Note

  • An in-place update from previous 3.x releases is supported for Microsoft Windows - see the documentation
  • A direct migration from CAST Console/CAST Imaging 2.x is currently NOT supported for Microsoft Windows installations, however, it is possible to migrate to 3.2.x and then action an in-place update to 3.4.0-funcrel.
  • Critical security patches to address identified vulnerabilities.

New Features

Summary Details
Results > "What's this?" dialog A new object/node right click contextual menu option called "What's this?" has been added to the view providing a basic overview of the seleced object and how it "fits in" with the rest of the application. See What's this?.
Results > AI functional report It is now possible to export a top-level "AI functional report" to Microsoft Word format, containing basic information about the contents of your application. See Generating an AI functional report.
Installation/Deployment > Read-only Dashboards and Viewer for Microsoft Windows and Linux via Docker deployments It is now possible to deploy CAST Imaging without an "analysis-node" component for situations where you would like to provide a "read-only" CAST Imaging instance specifically so that end-users can consults results either in the CAST Dashboards (Engineering/Management/Security) or in the "Viewer". Analysis results are generated in another separate CAST Imaging instance and are exported/imported into the read-only instance. See the installation documentation and standalone deployment workflow for more information.

Feature Improvements

Summary Details
Results > Improved Graph Layout options for selected objects/nodes It is now possible to select a subset of objects/nodes in the view and then choose a specific Graph Layout option just for those items: in this way, specific parts of the application can be arranged in a custom way. See Graph layout tool.
Results > Improved workflow for accessing Saved views Improvements have been made to the way in which Saved views are accessed: when using the "Show saved views" menu option (available in the top left corner), a selection dialog is now displayed allowing users to select the view they require. Previously, the most recent Saved view would be automatically displayed when using this menu option.
Results > List/Graph View toggle moved The toggle button to switch between Graph view (default) and List view has been moved into the view toolbar, freeing up space in the view. See View - Action options.
Results > Investigate button improvements The "Investigate" button found across multiple features (Structural Flaws, Third-Party Components, Green Impacts, etc.) has been renamed to "Open in a new view" and now opens the target view in a new tab instead of the current one. The "Investigate" button found across multiple features (Structural Flaws, Third-Party Components, Green Impacts, etc.) has been renamed to "Open in a new view" and now opens the target view in a new tab instead of the current one. In addition, the current context is no longer retained in the new tab: scope will be set to "Pre-Defined" to match the current situation.
Results > Improved node categorization Some minor changes have been made in Level 4 and 5 with regard to node categorization: "Frameworks" has been renamed to "Programming Technologies" (Level 4) and "Technologies" has been renamed "Technology Object Types" (Level 5).
Results > Characteristics section (right panel) improved with table index information The Characteristics section located in the right panel has been improved to include information (for table database objects) about indexes and the columns they index. See Characteristics.
Results > Structural Flaws: link properties now available Link properties are now available when investigating structural flaws: clicking a link will show the familiar "Characteristics" section including link history and source code (where available). See Improving code quality and ISO-5055 compliance.
Results > Third-party components: License information now available License information for each component is now displays in the list of third-party components: licenses are categorised by colour according to compliance and clicking the icon will direct users to the external third-party license.
Results > Cypher query: improved query entry field The query entry field is now resizable instead of a fixed height of one line, allowing large queries to be displayed in their entirety. See Cypher search.
Results > Characteristics section (right panel) improved with info bubble The Characteristics section in the right panel has been improved to include an info bubble explaining abbreviations such as PK, FK and UQ, specifically for table columns and indexes.
Results > UI alignment for Green Deficiencies, Cloud Maturity and Third-Party Components insights The investigation UI for Green Deficiencies, Cloud Maturity, and Third-Party Components insights now matches the Structural Flaws UI for a more streamlined experience.
Results > Improved Graph Layout options The Graph Layout options previously available in the Viewer preferences have been removed: now Graph Layout is managed solely in the view. A default layout will be applied and then any changes will persist through the session per scope. See the documentation.
Results > Improved History feature The History feature is now available in Levels 1-5 and Custom Aggregations (previously only available at Object level). Additionally, a Global Context indicator has been added to improve usability and ensure consistency across tabs. See the documentation.
Results > Improved Compare feature The Compare feature is now available in Levels 1-5 and Custom Aggregations (previously only available at Object level). See the documentation.
Analysis Configuration > Transactions > View leaves A new option has been added called "View leaves" available in the Analysis Configuration > Transactions panel. This can help understand why a call graph is incomplete and where it is broken. In addition, an option has been added "Hide full graph leaves" to remove certain items from the list. See the documentation.
Analysis Configuration > Transactions > Check content results > Object ID It is now possible to view an object's ID in the results iof the Check Content functionality in the transaction rules section. IDs are hidden by default but can be displayed using a column picker. See the documentation.
Installation/Deployment > License strategy change via UI It is now possible to switch license strategy i.e. from "Named Application" to "Contributing Developers" and vice-versa via the UI. When switching to "Named Application", application specific licences will need to be applied after the strategy swap. See the documentation.
Results > Aggregated by scopes > Grouping on link drill down Drilling down into linked nodes has been enhanced across Aggregated by > Module, Service, Project Structure, and Architecture Model scopes. When you double-click a link between nodes, objects now follow a two-tier grouping system: first by object type (such as Java Method), then by parent node (module, service, project, or model). This hierarchical organization makes it easier to distinguish object types both within individual nodes and across multiple nodes, creating a clearer visual structure. Previously, drill-down results appeared ungrouped.
Installation > Improved Docker container start-up When CAST Imaging is installed on a single machine and the machine restarts, Docker containers now start up in the correct order, preventing situations where containers indefinitely wait for their dependencies to initialize.
Installation > Offline mode for Linux via Docker It is now possible to run the Linux via Docker installer in "offline mode" for installation of CAST Imaging in air gapped/secure environments without internet connections. All Docker images must be present on the relevant machine when running the installer. See the documentation.
Installation/Deployment > Named Application license bulk upload It is now possible to bulk upload one or more Named Application license keys via a .txt file. This can be actioned before an application is created, or post-creation in the case of a license strategy switch from Contributing Developers to Named Application. See the documentation.
Technical > Application analysis configuration download A new option has been added at application analysis configuration level called "Download configuration". This downloads the entire set of analysis configuration settings to a .json file, providing a way to compare settings to ensure consistency throughout successive analyses. See the documentation.

Other Updates

Internal Id Details
IMAGSYS-19426 Results > The "Clear Graph" option available in the left panel in some scopes has been removed from the UI.
IMAGSYS-19212 Results > Object IDs (numeric and UUIDs) have been removed from the results of all export features across the platform to improve usability. These have been replaced with a timestamp entry (YYYY-MM-DD).
IMAGSYS-20004 Results > Third-party components > Minor improvement to add a tooltip to the "Licenses" column to explain the various license risk profiles. See the documentation for more information on this feature.
IMAGKSL-3104 Installation > The "admin-center" Docker container has been renamed to "control-panel" to match this service's functionality.

Resolved Issues

Customer Ticket Id Details
52495 Results > Fixes an issue causing the full count of object links to fail to be included in a Saved View export action.
52750 Installation > Fixes an issue where the Linux via Docker installer fails to use images already present on the machine in a sandboxed secure enviroment with no internet connection: now the installer can be configured to function in "offline" mode. See the documentation.
52749 Results > Fixes an issue where the cypher query input field size is too small: the field is now multi-line.
53047 Results > Fixes an issue where the App-to-App dependency 'Export all objects and links' feature is displaying the Source and Target columns in reverse order, and the 'Link Type' column is missing from the results.
53168 Results > Fixes an issue where the custom aggregation "collaborate with" list is not sorted alphabetically.
53216 Results > Fixes an issue where the number of code lines appears twice erroneously.
53278 Results > Fixes an issue where the custom aggregation "aggregated by" list is not sorted alphabetically.
53500 Results > Fixes an issue occuring when searching for objects individually and adding them to the view: the associated links are not displayed.
53501 Results > Fixes an issue where the parent program object is not always displayed below the subroutine name.
53493 Results (Dashboards) > Fixes an issue where the a link to the documentation fails to resolve.
53438 Results (Dashboards) > Fixes an issue where the Management Dashboard displayed the technologies overview tile as N/A.
53397 Results (Dashboards) > Fixes an issue where dashboards not accessible after adding users/roles due to null values being created when assigning a role to multiple users.
52552 Results (Dashboards) > Fixes an issue where it is not possible to download a CWE report from the Engineering Dashboard.
52485 Results (Dashboards) > Fixes an issue where the REST API fails to function.
51572 Results (Dashboards) > Fixes an issue where the Health Factor report downloaded from the advanced search page shows empty module information for objects related to certain technologies.
53508 Results > Fixes an issue where the LOC (Lines of Code) count remains unchanged when an application is updated, even when the list of technologies involved has changed.
52947 Results > Fixes an issue where the "Generate AI summary" feature is failing for some .NET transactions.

Known Issues

Internal Id Details
IMAGKSL-3234 Analysis > The "Download analysis configuration" option is not available for the application whose status is 'require attention'. i.e deep analysis is failed. This will be fixed in a future release.
IMAGKSL-3259 Analysis > The number of duplicated files listed in an analysis alert may not match the reality.

Bug Fixes

Details
Analysis > Fixes an issue preventing the retention of exclusion patterns when running a new scan with analysis from the landing page.
Technical > Fixes an issue where when deleting an application the related LISA and LTSA folders are now correctly removed as well.
Analysis > Fixes an issue where content discovery was failing to recognise *.tsql files.
UI/Admin > Fixes a UI issue preventing the addition or removal of a source folder location path.
Technical > The Architecture Studio feature is now not available for users who do not have required permissions. Available for those with the admin, application creator, or application owner profiles.