fix(deps): update dependency io.camunda:zeebe-bom to v8.8.0-alpha7 (main)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.camunda:zeebe-bom (source)	8.8.0-alpha7-rc2 -> 8.8.0-alpha7

---

Release Notes

camunda/camunda (io.camunda:zeebe-bom)

v8.8.0-alpha7

Compare Source

version:8.8.0-alpha7

Enhancements

Misc

• Support advanced state filtering in search user tasks API (#​32717)
• Cover the entire user task lifecycle in secondary storage (#​32562)
• Respond job kind and listener event type when activating jobs (#​31905)
• Support advanced filtering in process definitions search endpoint (#​31831)
• Extend process definition search endpoint to include start form key in the item response (#​31048)
• Pass task headers to Execution Listeners (#​29460)
• Improve Tasklist UX when listener blocks operation (#​25421)

Bug Fixes

Java Client

• [JavaClient] The Camunda cloud client builder sets the wrong REST address (#​32759)
• Unauthorized REST requests are retried forever when OAuth is used (#​26012)

Misc

• Initialize RoutingInfo when desired state is not present (#​36219)
• Flaky test: UnassignUserTaskMigrationIT#shouldUnAssign88JobWorkerV1 (#​36139)
• Identity OIDC UI is not displayed in non-root context path deployments (e.g. SaaS) (#​36130)
• Align RESOURCE ValueType enum between 8.7 and 8.8 (#​36057)
• Mapping errors on flow node instance APIs involving ad-hoc sub-processes (#​36049)
• [Authorizations] Enum value is not updated for the mapping rule (#​35981)
• Role membership entityType isn't resolved correctly (#​35980)
• Batch Resource Authorizations are not created in the SaaS migration (#​35749)
• Avoid recursion when building the element tree path to prevent StackOverflowException (#​35661)
• Usage Metrics getActiveBucket NPE (#​35642)
• When deploying forms with the same formId across different tenants, a wrong start form is returned (#​35608)
• When a user is not authorized to get an entity by id/key, the response codes are not aligned (#​35595)
• CSRF token is not set on login response (#​35482)
• No Explicit Error Mapping for Document Handling Endpoint: ${credentials.zeebeUrl}/v2/documents/${documentId}?contentHash (#​35464)
• Identity Migration for keycloak is failing when resource based authorizations are disabled (#​35451)
• Identity Migration App fails on Console and Web Modeler Client Migration (#​35431)
• When deleting a user, the user is not deleted from the column family storing users by key (#​35404)
• When not being a member of any tenant, users can query all tenant-owned without any tenant check (#​35403)
• [Tenants UI] Hide Tenants tab and references in SaaS (#​35326)
• [Tenants UI] Inconsistent error handling (#​35289)
• WebApplicationAuthorizationCheckFilter registered too often (#​35059)
• Zeebe dashboard API panels only support global-view as data source (#​34953)
• Error message not shown on first form submission of creating initial admin user (#​34496)
• [Tenants UI] Missing error banner on create request failure (#​34479)
• Operate tries to re-escape JSON stringified values on the BE (#​34448)
• /v2/deployments endpoint fails with >10 files in multipart request (#​34322)
• RandomizedRaftTest.livenessTestWithSnapshotAndSingleRestart failure (#​34209)
• [Tenants UI] Missing input field validation for the Tenant ID (#​34152)
• ExporterDirectorTransitionStep does not shut down gracefully when startup process is interrupted (#​34142)
• Remove text-overflow: ellipsis from users table under roles in Identity (#​33772)
• Extra Backslashes Escaping Variable Values in Operate (Regression from 8.8) (#​32439)
• Identity index IDs are not unique enough (#​32252)
• Multi-Instance body does not complete if the amount of items in the input collection is changed dynamically (#​31837)
• Canceling process instance via CamundaClient(REST) doesn't propagate operationReference to Zeebe (#​31758)
• App visible to all users regardless of roles (starting from 8.8) (#​31600)
• [C8 API] PI search & PD statistics incidentErrorHashCode is not working with $or filters (#​31180)
• Rolling update can result in a temporarily DEAD partition (#​30727)
• User Task Restrictions Not Working as Expected (#​28976)
• RuntimeException: Expected to activate jobs of type '..', but no jobs available and at least one broker returned 'RESOURCE_EXHAUSTED' (#​25806)

Maintenance

• [After 8.7 Release] Enable Update Tests (#​27333)
• Unknown channel option 'SO_SNDBUF' (#​26396)
• Display REST API server metrics in Zeebe dashboard (#​17442)

Documentation

• Document intellij workaround for large GatewayOuterClass file size (#​36041)
• Metrics : getting started guide for dev handbook (#​34027)

Merged Pull Requests

• fix: Bump identity version to last released (#​36339)
• fix: include members ready check after restart on replication loop (#​36275)
• fix: update exporter position when skipping records (#​36259)
• fix: reverse condition (#​36248)
• fix: initialize routing info when desired key is not present (#​36216)
• fix: supply a timeout for process migration (#​36200)
• deps: bump c3 and Carbon on Tasklist (#​36178)
• ci: increase helm upgarde timeout to 35m (#​36177)
• fix: add RuntimeInstruction value type to TestSupport classes (#​36151)
• fix: convert key to lowercase (#​36145)
• test: fix flakiness in user task migration tests by awaiting CREATED state (#​36141)
• fix: load Identity client config from relative path (#​36136)
• fix: apply roleValidator to SaaS and not SM (#​36108)
• test: exclude MULTI_INSTANCE record from being exportable (#​36074)
• User task listeners state indicators on UI (#​35788)
• [Backport stable/optimize-8.6] deps: upgrade spring version to fix CVE-2025-41234 (#​35672)
• feat: Rename batchOperationId to batchOperationKey (#​34772)
• [Backport stable/1.2] Fixes flakiness with the ElasticsearchExporter integration tests (#​8203)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.