fix(deps): update dependency io.camunda:zeebe-bom to v8.6.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
io.camunda:zeebe-bom (source)	8.5.8 -> 8.6.4

---

Release Notes

camunda/camunda (io.camunda:zeebe-bom)

v8.6.4

Compare Source

Enhancements

Misc

• I can migrate parallel and sequential multi instance elements (#​23878)
• I can migrate error boundary event and error event sub process (#​23804)
• I can migrate exclusive and event based gateways (#​23475)
• Remove the need for ES/OS monitor privileges in Tasklist (#​23094)
• Remove the need for monitor privileges (#​22918)

Bug Fixes

Misc

• PartitionInactiveException is not handled gracefully (#​23446)
• Swagger UI not working (#​23300)
• StackOverflow during process cancelation (#​21991)
• Operate does not allow changing Content Security Policy header in SM (#​21741)
• Error on retrieving write buffer from log stream (#​10141)

Maintenance

• Swagger UI not working (#​23300)
• Add context information to errors in the gateway (#​4526)
• Improve errors in Go client (#​2938)

Merged Pull Requests

• Removing recursion from process cancellation logic (#​24082)
• Map PartitionInactiveException and NoTopologyFoundException to UNAVAILABLE (#​23991)
• feat: allow mapping between multi instance types (#​23928)
• feat: support migration mapping for error event sub processes (#​23850)
• Remove the need for ES/OS cluster monitor privileges in Tasklist (#​23789)
• fix: externalFormReference on zeebe user tasks (#​23750)
• feat: add migration support for signal elements (#​23729)
• feat: add migration support for exclusive and event based gateways (#​23676)
• fix: Operate does not allow changing Content Security Policy header in SM (#​23608)
• fix: include stack trace on failed GRPC token verification (#​23600)
• fix: complete future with error when leadership change is cancelled (#​23371)
• feat: prevent cross process migration mapping (#​23357)
• fix: permit requests to swagger endpoint /v3/api-docs/** (#​23350)
• fix: Add Backoff Mechanism to Handle ElasticSearch Unavailability in Tasklist Importer (#​23222)
• feat: allow for disabling cluster health checks (#​23218)
• fix: Context-Path not taken into account for noPermission route (#​23214)
• feat: support migration mapping for timer start event sub processes (#​23144)
• feat: support migration of business rule, script and send task (#​22794)
• fix: merge concurrent resolves for up to 128 hostnames (#​22410)
• [Backport stable/1.2] Fixes flakiness with the ElasticsearchExporter integration tests (#​8203)

v8.6.3

Compare Source

Bug Fixes

Java Client

• spring-boot-starter-camunda-sdk will run into a NPE if legacy 8.5 properties are used (#​23183)

v8.6.2

Compare Source

Bug Fixes

Misc

• Unsafe command distribution acknowledgement (#​23361)

Merged Pull Requests

• Use new record to transmit acknowledgement (#​23363)

v8.6.1

Compare Source

Bug Fixes

Misc

• Password encoder change is not backward compatible (#​23213)
• Error when performing an upgrade from Optimize 3.13/8.5 to 8.6 (#​23168)
• ActivatedJob REST entity returns key instead of jobKey (#​23101)
• fix/Spring Boot SDK: do not ignore json field names from annotations (#​21962)

Maintenance

• Oauth2 Scope is not exposed in Zeebe SDK config (#​23071)

Merged Pull Requests

• Use overrides from @​JsonProperty when it's provided (#​23219)
• Backport CI Maven Setup fixes (#​23211)
• feat: expose oauth scope config in spring sdk (#​23072)
• ci: use infra github-managed runners for ci.yml/java-unit-tests workflow (#​22609)

v8.6.0

Compare Source

Enhancements

Broker

• Migrate intermediate message catch event (#​19716)
• Do not evaluate target boundary event correlation key expression on migration (#​19527)
• Migrate message event subprocess (#​17419)
• Migrate existing message boundary event subscription on process instance migration (#​16386)
• Migrate child process instances (#​15922)
• Migrate call activity instances (#​15921)
• Migrate timer boundary event subscriptions (#​15918)

Gateway

• Migrate the Delete Resource gRPC API to REST (#​21212)
• Migrate the Evaluate Decision gRPC API to REST (#​21211)
• Migrate the Signal broadcast gRPC API to REST (#​21210)
• Migrate the Cancel Process Instance gRPC API to REST (#​21209)
• Migrate the Migrate Process Instance gRPC API to REST (#​21208)
• Migrate the Modify Process Instance gRPC API to REST (#​21207)
• Migrate the Set Variables gRPC API to REST (#​21057)
• Migrate the Publish Message gRPC API to REST (#​21056)
• Migrate the Start Process instance gRPC API to REST (#​21055)
• Migrate the Deploy Resource gRPC API to REST (#​21054)
• Configure Query API availability (disabled by default) (#​20580)
• Migrate the Resolve incident gRPC API to REST (#​20085)
• Migrate the Update job retries and timeout gRPC API to REST (#​20083)
• Migrate the Throw error gRPC API to REST (#​20082)
• Migrate the Fail Job gRPC API to REST (#​20081)
• Migrate the Complete Job gRPC API to REST (#​20080)
• Add query API to see the status of exporters (#​19023)
• A long-polling REST API endpoint is available to activate jobs (#​17676)

Java Client

• Support the Set Variables API over REST (#​22194)
• Support the Publish Message API over REST (#​22193)
• Support the Start Process instance API over REST (#​22192)
• Support the Deploy Resource API over REST (#​22191)
• Support the Update job retries and timeout API over REST (#​21523)
• Support the Resolve incident API over REST (#​21430)
• Support the Throw error API over REST (#​21412)
• Support the Fail Job API over REST (#​21377)
• Support the Complete Job API over REST (#​21167)
• The Java client supports Job activation over REST (including long polling) (#​18256)

Misc

• Migrate sequential multi-instance element instances (#​22184)
• Migrate parallel multi-instance element instances (#​22129)
• Migrate error event subprocess (#​22032)
• Migrate error boundary events (#​21866)
• Migrate signal event subprocess (#​21864)
• Migrate intermediate signal catch events (#​21863)
• Migrate signal boundary event subscriptions (#​21862)
• Migrate script task instances (#​21671)
• Migrate event-based gateway instances (#​21593)
• Migrate business rule task instances (#​21588)
• Migrate exclusive gateway instances (#​21580)
• Migrate send task instances (#​21538)
• Add Priority field to Tasklist OOTB Front-End consuming from Tasklist v1 REST API (#​21516)
• Add version tag column to process instances list (#​21327)
• Migrate timer event subprocess (#​21218)
• Add version tag to process instances list header (#​21185)
• Improve Java client with REST API exceptional flow (#​21173)
• Add version tag to process instance details header (#​21170)
• Validate correct usage of bindingType and versionTag attributes (#​21161)
• Add new ZeebeVersionTag extension element to BPMN Model API (#​21124)
• Resolve linked forms to correct version for user tasks with binding type versionTag (#​21041)
• Resolve called decision to correct version for business rule tasks with binding type versionTag (#​21040)
• Resolve called process to correct version for call activities with binding type versionTag (#​21038)
• Store deployed forms by id and version tag (#​21037)
• Store deployed decisions by id and version tag (#​21036)
• Store deployed processes by id and version tag (#​21035)
• Add support for binding type versionTag to BPMN Model API (#​21034)
• Migrate receive task instances (#​20938)
• Migrate intermediate timer catch events (#​20911)
• Support migration of receive tasks, message event subprocess, timer event subprocess (#​20818)
• Support message and timer intermediate events migration (#​20817)
• Refactor internal exporter metrics to use Micrometer (#​20724)
• Store request data in state (#​20568)
• Add Correlate Message command to the client (#​20478)
• Add new CorrelateMessage REST endpoint (#​20477)
• Add Intermediate None Event to StraightThroughProcessingLoopValidator (#​20308)
• Static translations of tasklist UI (#​20287)
• Add integration tests for new command (#​20190)
• Add new message correlation record to CompactRecordLogger (#​20189)
• Add new fields to message record templates (#​20187)
• Create template for new message correlation record (#​20186)
• Send response in MessageSubscriptionRejectProcessor (#​20176)
• Send response in MessageSubscriptionCorrelateProcessor (#​20175)
• Store request data in message subscription (#​20174)
• Create MessageCorrelationCorrelateProcessor (#​20173)
• Extend MessageSubscriptionRecord to store request data (#​20167)
• Create message correlation record and intents (#​20164)
• Add validation rule to check for invalid bindingType values (#​20054)
• Support message and timer boundary events migration (#​19886)
• Create new version of every resource in multi-resource deployment if at least one has changed (#​19859)
• Resolve deployment-bound resource links within same deployment (#​19710)
• Store reference to deployment for deployed resources (#​19709)
• I can see highlighted associations related to executed compensation events (#​19567)
• I can toggle the execution count badges in process instance details view (#​19562)
• I can see the number of executions for each element in instance details diagram (#​19558)
• I can see which elements were executed/completed in the process instance diagram (#​19555)
• Add new bindingType attribute to BPMN Model API (#​19461)
• Guarantee generated requestId is unique within cluster. (#​19339)
• Provide a custom middleware mechanism for the Zeebe REST API in the Gateway (#​19291)
• [CPT] I can run process tests with Camunda connectors (#​19260)
• [CPT] I can trigger a BPMN timer event (#​19176)
• [CPT] Create a Spring integration for Process Testing (#​18999)
• [CPT] Create a JUnit 5 extension for Process Testing (#​18997)
• [CPT] Create a Testcontainer runtime for Process Testing (#​18994)
• Pre-select target proceess versions in instance migration mode (#​18761)
• Allow enabling an exporter via an API (#​18752)
• Support child instances in instance migration (#​18594)
• I can copy all variables from a process instance (#​18578)
• I can see the date of the last successful migration for a process instance (#​18576)
• I can confirm instance migration before starting the migrate operation (#​18574)
• I can filter for unmapped source flow nodes in instance migration mode (#​18573)
• I can see which flow nodes are not mapped in instance migration mode (#​18571)
• I can skip the instance migration modal (#​18541)
• I can see automapping for flow nodes in instance migration mode (#​18538)
• Support call activity mapping in instance migration mode (#​18492)
• Provide observation context to exporters (#​18467)
• Allow disabling an exporter via an API (#​18030)
• Provide dates of last successful operations (#​17704)
• Stop checking Elastic/Open Search healthiness in Tasklist health check (#​17544)
• Migrate Spring-zeebe test (#​17343)
• Review and address TODOs (#​17342)
• Remove leftovers from other components and unused code (#​17341)
• Review community-project latest changes (#​17340)
• Merge SpringBoot starter SDK and Spring Client (#​17339)
• go client jobWorkerBuilder can't set tenantIds (#​17167)
• Clients can provide a reference to a command that can be observed in the resulting event (#​16916)
• Incident records provide tree path properties that locate the incident in a hierarchy of process instances (#​16915)
• Support BPMN Converging Inclusive Gateway (#​10031)
• As a user I want to configure LongPollingActivateJobsHandler (#​8777)

Bug Fixes

Broker

• Limit the number of element in the process caches (#​15533)
• NPE "this.appenderFuture" is null when closing the partition (#​10227)
• Align deployment rejection message for DMN resources (#​8806)
• Replay test has not same state on terminating exclusive gateway (#​6652)
• ClassCastException: ExecutableFlowElementContainer cannot be cast to ExecutableMultiInstanceBody (#​6152)
• Exporter arguments are always converted to maps instead of list (#​4552)

Gateway

• Return a 502 for MessagingException$ConnectionClosed in the C8 REST API (#​22540)
• Endless errors on gateway because the writer is full (#​13018)
• Considerable amount of GRPC error details can trigger ingress response header limit (#​11284)

Go Client

• zbctl 8.4.0 can't send requests with authorization information (#​16015)

Misc

• Operate backup is not proceeding after taking the first snapshot (#​22871)
• Operate snapshot names are incorrect (#​22861)
• Tests are failing in CollectionRestServiceRoleIT (#​22515)
• ProcessOverviewUpdateIT tests are failing (#​22509)
• Duplicate resources refer to current deploymentKey instead of the one from initial deployment (#​22473)
• Optimize backup fails with ElasticsearchStatusException when retrieving snapshots (#​22430)
• Instance migration should not allow changing the event type of a mapped catch event (#​22146)
• Queued command distribution finishes too soon (#​22123)
• Operate: Bearer token with typ AT+JWT not supported (#​22119)
• Tasklist: Bearer token with typ AT+JWT not supported (#​22118)
• The importer doesn't cache the tree path of a container instance when a contained flow node instance is imported (#​22074)
• Fix and refactor handle catch event migrations (#​21924)
• Job Worker User Task with Custom Form Key not being handled properly (#​21811)
• Task Assignment Notification Displays "{{numTasks}}" Instead of Actual Number (#​21768)
• Zeebe's processing schedule service doesn't play well with past dates during tests (#​21738)
• Modeler accept Decimal Priority Values in XML Configuration (#​21434)
• Custom headers are not supported for Zeebe user tasks on openSearch (#​21296)
• Submit button in public forms is hidden under the nav bar ios phone (#​21052)
• Multi instance body finishes with less inner activities than expected (#​20958)
• Cancel active EL jobs on process termination (#​20775)
• NPE in BpmnStateBehavior.getParentElementInstanceContext "parentElementInstance" is null (#​20762)
• Old versions are retrieved when filtering process that require form input to start (#​20734)
• Process instance banned for timer trigger command with unknown process (#​20677)
• Disable graphql introspection in Tasklist (#​20672)
• ILM policy is added to all indices not only archived indices (#​20567)
• Possible memory corruption leading to SIGSEGV (#​20555)
• StackOverflowError during process instance modification (#​20307)
• Exporting decision evaluation records breaks with large evaluationFailureMessage values (#​20248)
• Issue when importing variables in a MT environment (#​20199)
• Flaky test shouldBeThreadSafe: io.camunda.zeebe.client.impl.oauth.OAuthCredentialsCacheTest (#​20136)
• Snapshot detected as corrupted because of incorrect checksum comparison (#​19984)
• Tasklist index prefixes are not correctly setup on OpenSearch (#​19905)
• RandomizedRaftTest.livenessTestWithSnapshot is unstable (#​19862)
• Concurrency mode check slows down import (#​19840)
• No executable process is found after transformation (#​19834)
• Native notifications inline message doesn't disappear after enabling notifications (#​19592)
• [Spring SDK] Fix unit tests to run into the unified CI (#​19520)
• Operate import slows down in case of data loss (#​19424)
• Invalid offset when reading record from an older version (#​19379)
• CI: fake status checks produced even if Zeebe CI is running (#​19289)
• Closing of StreamProcessor hangs indefinitely (#​19219)
• Instance migration subscribes element instance with incident to message event (#​19212)
• Instance migration is not triggered with pre-selected target process (#​19171)
• Cannot take backup to Azure when using managed identity (#​19104)
• Resource authorizations are not working without providing the deprecated CAMUNDA_TASKLIST_IDENTITY_BASEURL (#​19007)
• Default tenant id not picked up by Spring Zeebe SDK @​JobWorker annotation (#​18975)
• Saving a custom filter with all statuses excludes the competed tasks (#​18967)
• Tasklist cannot update ISM policy in AWS OpenSearch (#​18891)
• Filtering tasks by process retrieves only tasks from latest deployed process version (#​18813)
• on openSearch XML retrieved is Null when user has access to the process view (#​18772)
• ZEEBE_GATEWAY_SECURITY_AUTHENTICATION_MODE:none does not disable Identity-based authentication (#​18726)
• Missing Zeebe user task migration doc URL in REST API error message (#​18663)
• Remove client's secrets reference in logs (#​18656)
• When activating the identity-auth profile, the health and readiness probes fail with status code 401 (#​18568)
• Operate import does not work for Opensearch with UnsupportedOperationException (#​18452)
• Opensearch exporter fails with 400 on AWS Opensearch service (#​18251)
• Batch modification needs to handle requests containing values for both fromFlowNodeId and fromFlowNodeInstanceKey (#​18162)
• java.lang.IllegalArgumentException: type must not be empty (#​18139)
• Tasklist importer pod is crashlooping (#​18095)
• Operate can't complete backup snapshot (#​18049)
• [Spring Zeebe SDK] Token not refreshed (#​17799)
• Tasklist is retuning null as item in the permissions array (#​17688)
• Starting the Operate container with an unprivileged may fail to create the logs folder (#​17685)
• Import is blocked after some user task records are lost (#​17615)
• NPE in user task import (#​17611)
• AWS: Number of Opensearch requests are failing with wrong request signature (#​17552)
• Broken job stream aggregation (#​17513)
• Failed to close snapshot store (#​17452)
• Timestamp values in actuators are serialized as integers instead of date-time strings (#​17347)
• Partition stays in force configuration after force failover (#​17334)
• Potential duplicate PI creation across partitions in case of request timeouts (#​17333)
• Retrieving index settings in Opensearch returns null values for the settings (#​17272)
• Cannot update from a previous version to current snapshot (#​17229)
• Retention policy is not applied to existing indices when enabled (#​17147)
• Duplicate entries in decision output table (#​17024)
• Fix element processing flow for Intermediate Catch/Throw Events with Execution Listeners (#​16536)
• I can activate a job without retries after resolving the JOB_NO_RETRIES incident (#​16484)
• CI: Zeebe build fails due to SBE build errors (#​16029)
• SetVariables is not always retryable (#​15549)
• Oauth token refresh can trigger rate limiting and log errors (#​13832)
• Redundant logging of first commit index (#​13403)
• NullPointerException in ActivateProcessInstanceBatchProcessor.createChildInstanceRecord (#​12918)
• Race condition when closing the log stream and opening a writer (#​12870)
• NPE when receiving a log stream writer while shutting down (#​12254)

Maintenance

• QA and E2E workflows on main is failing (#​22353)
• Provide a way to register indices and index templates for expoirter (#​21980)
• Camunda exporter schema manager validator (#​21831)
• Updating of index and index templates can be handled by schema manager (#​21762)
• Add Elasticsearch implementation for indices and template creation. (#​21527)
• Stream platform clock modifications are consistent (#​21068)
• Stream platform time is controllable (#​21051)
• Retry open of exporter on failure (#​20728)
• Update the REST controller developer guide (#​20619)
• Mark Query API commands as experimental (#​20596)
• Refactor fold method argument order in Either interface (#​20588)
• Strange use of ObjectMapper in ES/OS DTO (#​20556)
• Exclude specific versions from rolling update test (#​20157)
• Remove references to unused combined checksum. (#​20100)
• Snyk scan for Zeebe is broken after moving modules around (#​20011)
• Simplify user task update data model (#​19986)
• Update RocksDB to 9.x (#​19981)
• Simplify REST test setup to improve test isolation (#​19977)
• Index outOfBounds while fetching next snapshot of removed member. (#​19642)
• Concurrent maven builds causing failures in CI process. (#​19619)
• Move brokerClient handling from REST controllers to service layer (#​19524)
• Sequencer#isEntryValid is slow because it has to calculate the full record size (#​19225)
• Set default job worker stream timeout (#​19188)
• Backward compatibility for zeebe.client SM properties (#​19161)
• startup.sh script overrides helm config (#​19114)
• Zeebe version compatibility test times out (#​19026)
• Zeebe source code refers to old repository name (#​18797)
• gRPC thread pool saturated by blocked Identity calls (#​18697)
• Do not log MessagingException$ConnectionClosed as an error in the gateway (#​18339)
• Relicense to Camunda License 1.0 (#​18104)
• Improve error mapping of REST API (#​17441)
• Run Spotbugs plugin on the Operate codebase and fix related issues (#​17331)
• Zeebe Grafana dashboard uses angular that has been deprecated (#​17097)
• Extend generalized command distribution for subsets of partitions (#​16385)
• Send rejection if partition's stream processor is not active (#​16180)
• Improve Interceptor management by the InterceptorRepository class (#​15695)
• Reject requests with a helpful error message when processing is paused (#​14330)
• Tests in ActivatableJobsPushTest class are slow (#​13606)
• Split files into smaller chunks when replicating snapshots (#​12795)
• Dead code in metrics exporter (#​9760)
• Reduce test pipeline time (#​6477)
• Consider making ASQN_IGNORE part of the JournalRecord interface (#​6356)
• JournalReader seek methods should return the next index (#​6354)

Documentation

• Mark Query API as alpha feature instead of experimental (#​22224)
• Update the REST controller developer guide (#​20619)
• Provide a REST controller implementation guide (#​20444)
• [CPT] I can see an extensive example of a process test (#​19268)

Merged Pull Requests

• docs: provide short summaries in OpenAPI (#​22755)
• Validate tenant id in REST process instance creation (#​22743)
• feat(spec): add example requests to endpoints with mutually-exclusive request fields (#​22711)
• Refactor REST field names (#​22701)
• Migrate sequential multi instance element instances (#​22635)
• Add deploy resource command REST support (#​22632)
• Return 502 in REST for closed broker connection (#​22542)
• Merge release/optimize 8.6.0 alpha5 back to main (#​21961)
• [Backport stable/8.4] build: replace protolock with buf CLI (#​21773)
• ci: use bigger runner for release workflow (#​21579)
• Only activate/complete child process instance while call activity is active (#​20835)
• feat: store deployment key for deployed processes (#​20498)
• Limit client request retries to three attempts (#​20088)
• Threadsafe oauth credentials cache (#​20065)
• Add root QA modul (#​19757)
• Not subscribe to new subscription if element is in ACTIVATING state (#​19256)
• Add empty Javadoc Jar for Operate/Tasklist (#​18921)
• Generate changelog for patch releases (#​18342)
• Migrate active call activity (#​18328)
• ci: remove parallelization in release arguments (#​18271)
• Observe status of Zeebe CI jobs (#​18224)
• Merge Tasklist code until hash 3f884eb (#​17493)
• Fix actuator serialization (#​17454)
• Merge spring-client and spring-zeebe-sdk (#​17387)
• test: increase await assertion timeout in OpensearchExporterIT IndexSettingsTest to overcome flaky test runs (#​17282)
• fix(transport): use unique schema ID (#​14174)
• fix(dist): remove Spring Boot warning around commons-logging (#​13300)
• [Backport stable/8.2] Prevent StackOverFlowError during termination of children (#​13275)
• deps(maven): bump swagger-annotations from 2.2.13 to 2.2.14 (#​13211)
• deps(maven): bump software.amazon.awssdk:bom from 2.20.86 to 2.20.87 (#​13170)
• [backport-8.1]: Refactor job processors (#​13081)
• [Backport stable/1.2] Fixes flakiness with the ElasticsearchExporter integration tests (#​8203)
• [BACKPORT 0.26] fix(broker): fix race condition in persisting snapshot (#​6428)
• chore(deps): update module zeebe-io/zeebe/clients/go to v0.26.0 (#​6077)
• docs(operate): update migration documentation (#​4725)
• fix(docs): fix links to config files in docs (#​4545)
• Migrate broker.engine.* sub test packages (#​2584)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.