Audit follow-up: WorkflowAPIImpl.newActionlet swallows instantiation errors and returns null

Parent epic: #36004

Finding

WorkflowAPIImpl.newActionlet catches InstantiationException / IllegalAccessException, calls e.printStackTrace(), and returns null. That can defeat caller error handling in WorkflowActionClass.getActionlet().

Report reference: dotCMS/src/main/java/com/dotmarketing/portlets/workflows/business/WorkflowAPIImpl.java:448-461

Potential impact

Workflow execution may fail later with a downstream NPE instead of a clear WorkflowActionFailureException or similar actionable error.

Suggested validation

Force an actionlet instantiation/access failure and inspect the resulting workflow error path and logs.

Possible fix

Log through Logger and throw/wrap as DotDataException or another appropriate checked failure already declared by the method.

Caveat

This was AI-found by Claude from .scratch/audit/REPORT.md. Please perform secondary validation of correctness, severity, and value before actioning.

Start in dotCMS/src/main/java/com/dotmarketing/portlets/workflows/business/WorkflowAPIImpl.java:448-461 and trace WorkflowAPIImpl.newActionlet into WorkflowActionClass.getActionlet(). Force an InstantiationException or IllegalAccessException, then inspect the workflow error path and logs. Done means the failure is surfaced clearly instead of returning null and causing a downstream NPE.