fix(deps): update dependency io.camunda:zeebe-bom to v8.8.0-alpha7-rc1 (main)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.camunda:zeebe-bom (source)	8.8.0-alpha5 -> 8.8.0-alpha7-rc1

---

Release Notes

camunda/camunda (io.camunda:zeebe-bom)

v8.8.0-alpha7-rc1

Compare Source

version:8.8.0-alpha7-rc1

Enhancements

Misc

• Support advanced state filtering in search user tasks API (#​32717)
• Cover the entire user task lifecycle in secondary storage (#​32562)
• Respond job kind and listener event type when activating jobs (#​31905)
• Support advanced filtering in process definitions search endpoint (#​31831)
• Extend process definition search endpoint to include start form key in the item response (#​31048)
• Pass task headers to Execution Listeners (#​29460)
• Improve Tasklist UX when listener blocks operation (#​25421)

Bug Fixes

Java Client

• [JavaClient] The Camunda cloud client builder sets the wrong REST address (#​32759)
• Unauthorized REST requests are retried forever when OAuth is used (#​26012)

Misc

• Initialize RoutingInfo when desired state is not present (#​36219)
• Flaky test: UnassignUserTaskMigrationIT#shouldUnAssign88JobWorkerV1 (#​36139)
• Identity OIDC UI is not displayed in non-root context path deployments (e.g. SaaS) (#​36130)
• Align RESOURCE ValueType enum between 8.7 and 8.8 (#​36057)
• Mapping errors on flow node instance APIs involving ad-hoc sub-processes (#​36049)
• [Authorizations] Enum value is not updated for the mapping rule (#​35981)
• Role membership entityType isn't resolved correctly (#​35980)
• Batch Resource Authorizations are not created in the SaaS migration (#​35749)
• Avoid recursion when building the element tree path to prevent StackOverflowException (#​35661)
• Usage Metrics getActiveBucket NPE (#​35642)
• When deploying forms with the same formId across different tenants, a wrong start form is returned (#​35608)
• When a user is not authorized to get an entity by id/key, the response codes are not aligned (#​35595)
• CSRF token is not set on login response (#​35482)
• No Explicit Error Mapping for Document Handling Endpoint: ${credentials.zeebeUrl}/v2/documents/${documentId}?contentHash (#​35464)
• Identity Migration for keycloak is failing when resource based authorizations are disabled (#​35451)
• Identity Migration App fails on Console and Web Modeler Client Migration (#​35431)
• When deleting a user, the user is not deleted from the column family storing users by key (#​35404)
• When not being a member of any tenant, users can query all tenant-owned without any tenant check (#​35403)
• [Tenants UI] Hide Tenants tab and references in SaaS (#​35326)
• [Tenants UI] Inconsistent error handling (#​35289)
• WebApplicationAuthorizationCheckFilter registered too often (#​35059)
• Zeebe dashboard API panels only support global-view as data source (#​34953)
• Error message not shown on first form submission of creating initial admin user (#​34496)
• [Tenants UI] Missing error banner on create request failure (#​34479)
• /v2/deployments endpoint fails with >10 files in multipart request (#​34322)
• [Tenants UI] Missing input field validation for the Tenant ID (#​34152)
• ExporterDirectorTransitionStep does not shut down gracefully when startup process is interrupted (#​34142)
• Remove text-overflow: ellipsis from users table under roles in Identity (#​33772)
• Extra Backslashes Escaping Variable Values in Operate (Regression from 8.8) (#​32439)
• Identity index IDs are not unique enough (#​32252)
• Multi-Instance body does not complete if the amount of items in the input collection is changed dynamically (#​31837)
• Canceling process instance via CamundaClient(REST) doesn't propagate operationReference to Zeebe (#​31758)
• App visible to all users regardless of roles (starting from 8.8) (#​31600)
• [C8 API] PI search & PD statistics incidentErrorHashCode is not working with $or filters (#​31180)
• Rolling update can result in a temporarily DEAD partition (#​30727)
• User Task Restrictions Not Working as Expected (#​28976)
• RuntimeException: Expected to activate jobs of type '..', but no jobs available and at least one broker returned 'RESOURCE_EXHAUSTED' (#​25806)

Maintenance

• [After 8.7 Release] Enable Update Tests (#​27333)
• Unknown channel option 'SO_SNDBUF' (#​26396)
• Display REST API server metrics in Zeebe dashboard (#​17442)

Documentation

• Document intellij workaround for large GatewayOuterClass file size (#​36041)
• Metrics : getting started guide for dev handbook (#​34027)

Merged Pull Requests

• fix: update exporter position when skipping records (#​36259)
• fix: reverse condition (#​36248)
• fix: initialize routing info when desired key is not present (#​36216)
• fix: supply a timeout for process migration (#​36200)
• ci: increase helm upgarde timeout to 35m (#​36177)
• fix: add RuntimeInstruction value type to TestSupport classes (#​36151)
• fix: convert key to lowercase (#​36145)
• test: fix flakiness in user task migration tests by awaiting CREATED state (#​36141)
• fix: load Identity client config from relative path (#​36136)
• fix: apply roleValidator to SaaS and not SM (#​36108)
• test: exclude MULTI_INSTANCE record from being exportable (#​36074)
• User task listeners state indicators on UI (#​35788)
• [Backport stable/optimize-8.6] deps: upgrade spring version to fix CVE-2025-41234 (#​35672)
• feat: Rename batchOperationId to batchOperationKey (#​34772)
• [Backport stable/1.2] Fixes flakiness with the ElasticsearchExporter integration tests (#​8203)

v8.8.0-alpha6

Compare Source

version:8.8.0-alpha6

Enhancements

Misc

• Implement cursor pagination for V2 API (#​33975)
• Create and execute Benchmarking tests for Zeebe Batch operations (#​29942)
• Enrich BatchOperation creation, scheduling and execution with necessary metrics (#​29940)

Bug Fixes

Misc

• Index validation wrongly applied to dynamic properties (#​34478)
• Concurrency problem in CommandRedistributor (#​34083)
• Operate v1 API is not returning result field in search responses (#​34069)
• Missing Routing Column family in bootstrapped snapshot (#​33978)
• Distributed commands are not distributed once a partition becomes active (#​33960)
• S3 Backup store does not limit the number of concurrent downloads (#​33957)
• Missing RepositorySettings.location error in Optimize backups (#​33905)
• Leader does not replicate the snapshot to follower (#​33889)
• Identity Group Users Response does not contain email addresses (#​33860)
• Thread starvation risk when taking backup on S3 (#​33726)
• Include all states in PI stats OR filter (#​33700)
• Operate cannot deserialize IN_PROGRESS snapshot state in Opensearch (#​33516)
• Cannot re-add variable with the same name after failed ADD_VARIABLE operation using Operate UI/REST-API (#​33337)
• Process execution listener jobs are not cleaned up correctly (#​33237)
• User owner type hidden incorrectly in authorization creation modal (OIDC mode) (#​33211)
• CommandDistributionIdempotencyTest results in a segmentation fault (#​33186)
• BpmnProcessingException on activating boundary event of ad-hoc sub-process (#​33146)
• Canceling user task during transition does not reject ongoing request, leading to timeout exception on a client side (#​33024)
• Optimize variable importer only parsing dates nested in objects (#​32714)
• [Tenants] Cannot assign users to default Tenant due to illegal character in tenantId (#​32421)
• [Tenants] Demo user cannot delete tenant (#​32340)
• Process cancel operations in Operate remain in "SENT" state when user task has "canceling" listeners (#​31701)
• [Authorizations] Incorrect error message on deploy (#​31620)
• Failed to install partition: partitionCount <= 0 in RoutingInfo.MessageCorrelation (#​31534)
• NPE in ProcessInstanceBatchActivateProcessor.createChildInstanceRecord (#​31511)
• Command batching issue - Error handling mechanism doesn't work when used in follow-up commands (#​31335)
• Variables add/update operations in Operate remain in "SENT" state when user task has "updating" listeners (#​30686)
• Access to tenant is hardcoded for all users and mappings (#​29518)

Maintenance

• Display REST API server metrics in Zeebe dashboard (#​17442)

Merged Pull Requests

• Enable tag globbing in Optimize Docker builds (#​34760)
• fix: Avoid pushing Optimize artifacts to Maven Central when releasing single app (#​34714)
• fix: add scalingPosition to declaredProperties (#​34642)
• fix: skip dynamic property mappings in Index validation (#​34490)
• fix: add the command position to the SCALING_UP event (#​34382)
• fix: added result to Operate v1 DecisionInstance response (#​34076)
• fix: skip deserialize when verifyRepositoryExists (#​33906)
• fix: Operate cannot deserialize IN_PROGRESS snapshot state in Opensearch (#​33520)
• [Backport stable/1.2] Fixes flakiness with the ElasticsearchExporter integration tests (#​8203)

v8.8.0-alpha6-rc3

Compare Source

version:8.8.0-alpha6-rc3

Merged Pull Requests

• fix: Avoid pushing Optimize artifacts to Maven Central when releasing single app (#​34714)

v8.8.0-alpha6-rc2

Compare Source

version:8.8.0-alpha6-rc2

v8.8.0-alpha6-rc1

Compare Source

version:8.8.0-alpha6-rc1

Enhancements

Misc

• Implement cursor pagination for V2 API (#​33975)
• Create and execute Benchmarking tests for Zeebe Batch operations (#​29942)
• Enrich BatchOperation creation, scheduling and execution with necessary metrics (#​29940)

Bug Fixes

Misc

• Concurrency problem in CommandRedistributor (#​34083)
• Operate v1 API is not returning result field in search responses (#​34069)
• Missing Routing Column family in bootstrapped snapshot (#​33978)
• Distributed commands are not distributed once a partition becomes active (#​33960)
• S3 Backup store does not limit the number of concurrent downloads (#​33957)
• Missing RepositorySettings.location error in Optimize backups (#​33905)
• Leader does not replicate the snapshot to follower (#​33889)
• Identity Group Users Response does not contain email addresses (#​33860)
• Thread starvation risk when taking backup on S3 (#​33726)
• Include all states in PI stats OR filter (#​33700)
• Operate cannot deserialize IN_PROGRESS snapshot state in Opensearch (#​33516)
• Cannot re-add variable with the same name after failed ADD_VARIABLE operation using Operate UI/REST-API (#​33337)
• Process execution listener jobs are not cleaned up correctly (#​33237)
• CommandDistributionIdempotencyTest results in a segmentation fault (#​33186)
• BpmnProcessingException on activating boundary event of ad-hoc sub-process (#​33146)
• Canceling user task during transition does not reject ongoing request, leading to timeout exception on a client side (#​33024)
• Optimize variable importer only parsing dates nested in objects (#​32714)
• [Tenants] Cannot assign users to default Tenant due to illegal character in tenantId (#​32421)
• [Tenants] Demo user cannot delete tenant (#​32340)
• Process cancel operations in Operate remain in "SENT" state when user task has "canceling" listeners (#​31701)
• [Authorizations] Incorrect error message on deploy (#​31620)
• Failed to install partition: partitionCount <= 0 in RoutingInfo.MessageCorrelation (#​31534)
• NPE in ProcessInstanceBatchActivateProcessor.createChildInstanceRecord (#​31511)
• Command batching issue - Error handling mechanism doesn't work when used in follow-up commands (#​31335)
• Variables add/update operations in Operate remain in "SENT" state when user task has "updating" listeners (#​30686)
• Access to tenant is hardcoded for all users and mappings (#​29518)

Maintenance

• Display REST API server metrics in Zeebe dashboard (#​17442)

Merged Pull Requests

• fix: added result to Operate v1 DecisionInstance response (#​34076)
• fix: skip deserialize when verifyRepositoryExists (#​33906)
• fix: Operate cannot deserialize IN_PROGRESS snapshot state in Opensearch (#​33520)
• [Backport stable/1.2] Fixes flakiness with the ElasticsearchExporter integration tests (#​8203)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.