8.4+gen12

Overview

Camunda application in this release generation:

• Identity: 8.4.10
• Operate: 8.4.11
• Tasklist: 8.4.11
• Zeebe: 8.4.10

Identity

🧹 Chore

• upgrade org.springframework.boot:spring-boot-starter-web from 3.2.5 to 3.2.7 (#2985)

Operate

🚀 New Features

• Updates to fix CVE (#6786)

💊 Bugfixes

• set unique keys for output variable rows [8.4 backport] (#6791)
• use endDate as indicator for a finished operation (#6792)

🧹 Chore

• update zeebe, identity, operate and tasklist versions (#6795)
• preview-env: add dockerhub pull secret (#6777) (#6782)

Tasklist

💊 Bugfixes

• Tasklist index prefixes are not correctly setup on OpenSearch (#4996)
• include tenantId in variable record store (#4991)

🧹 Chore

• bump zeebe and identity for 8.4 patch release (#5015)
• add exception stacktrace into the debug logs [Backport stable/8.4] (#5012)
• deps: update graphql-java to fix CVE-2024-40094 [Backport stable/8.4] (#5006)
• deps: upgrade springboot to fix CVE-2024-22262 (#4985)

Zeebe

version:8.4.10

Enhancements

Misc

• Add Intermediate None Event to StraightThroughProcessingLoopValidator (#20308)

Bug Fixes

Broker

• Limit the number of element in the process caches (#15533)

Gateway

• Considerable amount of GRPC error details can trigger ingress response header limit (#11284)

Java Client

• Job worker should apply backoff on job polling in case of service unavailable (#4443)

Go Client

• Job worker should apply backoff on job polling in case of service unavailable (#4443)

Misc

• StackOverflowError during process instance modification (#20307)
• Issue when importing variables in a MT environment (#20199)
• Flaky test shouldBeThreadSafe: io.camunda.zeebe.client.impl.oauth.OAuthCredentialsCacheTest (#20136)
• Snapshot detected as corrupted because of incorrect checksum comparison (#19984)
• No executable process is found after transformation (#19834)
• Oauth token refresh can trigger rate limiting and log errors (#13832)

Maintenance

• Strange use of ObjectMapper in ES/OS DTO (#20556)
• gRPC thread pool saturated by blocked Identity calls (#18697)

Merged Pull Requests

• Remove grpc thread config (#20591)
• Dont use object mapper in DTO to ES / OS (#20560)
• Reset RecordingExporter before each ZeebeIntegration test setup (#20524)
• [Backport stable/8.5] Fix OauthCredentialsCache concurrency issues (#20439)
• Fix OauthCredentialsCache concurrency issues (#20429)
• Terminate elements iteratively instead of recursively during PI modification (#20425)
• Test for snapshot corruption when restoring from backup. (#20415)
• Add logging to setup commands (#20389)
• test: fix potential race condition (#20334)
• Add intermediate throw event StraightThroughProcessingLoopValidator (#20316)
• fix: ensure controlled actor scheduler is closed after tests (#20296)
• test: prevent db transaction corruption by test (#20288)
• Fix flaky MessageStreamProcessorTest (#20286)
• Limit client request retries to three attempts (#20088)
• test: fix flaky raft heartbeat test (#20079)
• Threadsafe oauth credentials cache (#20065)
• test: snapshot false negative corruption unit test (#20040)
• fix: Allow single deployment of multiple BPMN processes with the same resource name (#20026)
• feat: allow overriding default maxInboundMetadataSize through config and change default to 16KB (#20002)
• fix: do not use combined checksum for snapshot integrity (#19988)
• deps: Update dependency io.grpc:grpc-bom to v1.65.0 (main) (#19858)
• Backport build-platform-docker GHA (#19740)
• fix: limit validation result output to a certain size and print the number of remaining errors (#19600)
• change grpc executor to virtual threads (#19005)
• feat: implementing bounded cache (#17581)