Skip to content

8.4+gen7

Compare
Choose a tag to compare
@aabouzaid aabouzaid released this 14 May 13:48
· 216 commits to main since this release
c99d49f

Overview

Camunda application in this release generation:

  • Identity: 8.4.7
  • Operate: 8.4.8
  • Tasklist: 8.4.7
  • Zeebe: 8.4.7

Identity

💊 Bugfixes

  • added audience parameter to generic oidc login uri (#2784) (#2852)
  • upgrade alpine to 3.19.1 (#2822) (#2826)

🧹 Chore

  • revert include package.json and yarn.lock in docker image (#2846) (#2850)
  • centralize spring boot version (#2839)
  • update spring boot to 3.2.5 (#2829)

Operate

🚀 New Features

  • add CSRF protection (#6733)
  • change claim for clusterId (#6736)

💊 Bugfixes

  • AWS Opensearch requests are failing (#6742)
  • remove external domains from CSP in self-managed (#6740)

🧹 Chore

  • pom: update Zeebe and Identity to 8.4.7 (#6746)
  • disable CSRF for e2e tests (#6737)

Tasklist

🚀 New Features

  • adapting tasklist to Auth0 claim changes [Backport stable/8.4] (#4906)

💊 Bugfixes

  • remove ES and OS healthcheck [Backport 8.5] [Backport stable/8.4] (#4909)
  • Add ilm and ism support [Backport 8.4] (#4896)
  • Tasklist importer does not import new Zeebe records when import-position points to old sequence (#4877)

🧹 Chore

  • Bump to 8.4.7 (#4929)
  • make IT test extension Prototype scope beans (#4911) [Backport stable/8.4] (#4915)
  • git ignore build files under tasklist subfolder when switching between master and stable branches [Backport stable/8.4] (#4843)

Zeebe

Bug Fixes

Broker

  • Align deployment rejection message for DMN resources (#8806)

Go Client

  • zbctl 8.4.0 can't send requests with authorization information (#16015)

Misc

  • Opensearch exporter fails with 400 on AWS Opensearch service (#18251)
  • Broken job stream aggregation (#17513)
  • Potential duplicate PI creation across partitions in case of request timeouts (#17333)
  • SetVariables is not always retryable (#15549)

Maintenance

  • Setup a nightly integration workflow with a AWS Opensearch instance (#18252)
  • Make Snapshot Store IO bounded instead of CPU (#17717)

Merged Pull Requests

  • fix: do not retry create instance on closed connection (#18264)
  • fix: add leading slash to opensearch endpoints (#18253)
  • refactor: migrate test to new infrastructure (#18223)
  • test: disable flake BackupUploadIT.shouldSaveBackupWithManyFiles (#18205)
  • fix: retry SetVariable on for UNAVAILABLE and RESOURCE_EXHAUSTED (#18180)
  • fix: go client omit optional scope param if not set (#18154)
  • test: fix flaky test by buffering possibly chunked content (#17923)
  • fix: Make SnapshotStore IO bounded. (#17718)
  • Fix broken job stream aggregation across stream restarts (#17545)
  • fix: fix broken job lifetime metric (#17499)
  • Align deployment rejection message for DMN resources (#17475)
  • deps: Update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.8.4.0 (main) (#17395)
  • fix: delete existing ISM policy when retention is disabled (#17386)
  • ci: cancel outdated ci runs (#17315)
  • ci: rely on automatic setup of CodeQL (#17313)
  • test: increase await assertion timeout in OpensearchExporterIT IndexSettingsTest to overcome flaky test runs (#17282)
  • ci: never time out during release jobs (#17271)
  • Exporter can soft pause and resume (#16345)

Optimize

🚀 New Features

  • email: allow check server identity to be skipped in start/tls (#12468)

💊 Bugfixes

  • apply running instance filter to currently running instance adoption report (#12868)
  • e2e: increase ES disk watermark to stabilize tests (#12730)
  • notifications: update C3 props
  • select: handle disabled state properly (#12591)
  • download button: take user as a prop
  • release: use correct app actor for release job

🧹 Chore

  • deps: update patch dependencies (maintenance/3.12) (patch) (#12944)
  • deps: update bitnami/keycloak:24.0.3 docker digest to a6ef846 (#12748)
  • deps: update patch dependencies (maintenance/3.12) (patch) (#12819)
  • deps: update actions/checkout digest to 0ad4b8f (#12663)
  • deps: update eclipse-temurin:21 docker digest to 17f4e7f (#12825)
  • deps: update patch dependencies (maintenance/3.12) (patch) (#12734)
  • keycloak: Change to a working version of keycloak (#12706)
  • deps: update patch dependencies (maintenance/3.12) (patch) (#12653)
  • deps: update eclipse-temurin:21 docker digest to dd90127 (#12718)
  • deps: update eclipse-temurin:21 docker digest to 9e7cdd2 (#12711)
  • deps: update eclipse-temurin:21 docker digest to 9c8f5e2 (#12672)
  • deps: update patch dependencies (maintenance/3.12) (patch) (#12647)
  • deps: update actions/upload-artifact digest to 6546280 (#12628)
  • deps: update actions/checkout digest to 1d96c77 (#12626)
  • deps: update actions/upload-artifact digest to 1746f4a (#12596)
  • deps: update patch dependencies (#12525)
  • deps: update hashicorp/vault-action digest to 47dbc64 (#12531)
  • deps: update eclipse-temurin:21 docker digest to fe90fc9 (#12534)
  • deps: update patch dependencies
  • release workflow: fix changelog generation (#12501)
  • identityService: return all users in saas when searchterm empty
  • deps: update eclipse-temurin:21 docker digest to 3e7d577 (#12460)
  • config: send slack webhooks to optimize status channel (#12457)
  • ci: update slack status channel usage to new name (#12453)
  • release: use the actor id in gha github email
  • deps: update korthout/backport-action digest to ef20d86 (#12391)
  • deps: update patch dependencies (#12423)
  • release: add new upgrade plan
  • deps: update patch dependencies to v18.2.73
  • release workflow: generate changelog before pushing new tag (#12051)
  • release workflow: fix branches checkouts