fix(deps): update dependency io.camunda:zeebe-bom to v8.8.0-rc3 (main)

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Change	Age	Confidence
io.camunda:zeebe-bom (source)	8.8.0-rc2 -> 8.8.0-rc3

---

Release Notes

camunda/camunda (io.camunda:zeebe-bom)

v8.8.0-rc3

Compare Source

version:8.8.0-rc3

Bug Fixes

Misc

• Identity Migration for SM uses user email instead of username for Role and Authorization assignment (#​39088)
• When using MS Entra, tokens are always treated as clients due to complete intersecting claims (#​39049)
• Required API response field 'tags' in process instance result should not be required (#​38988)
• Cannot take native filesystem backup in an empty state (#​38957)
• Gateway fails to load OpenAPI spec (#​38875)
• Camunda Client Process Definition Filter does not offer complex query for process definition name, but api does (#​38780)
• Orchestration Identity Connectors role not enough permissions to create process instances (#​38751)
• Snapshot can be taken at processed position 0 only if forced exception is thrown unexpectedly (#​38484)
• Camunda Client doesn't use default tenant id for correlating messages (#​38157)
• Prevent storing sessions when using OIDC for API calls (#​37983)
• Tasklist v1 task search: alwaysReturnFullValue ignored for variables >8 KB (value returned as null) (#​37767)
• restore primary storage fail due to missing BrokerBasedProperties (#​37544)
• A request matching both the configured user and the client claim should be treated as a client request (#​37473)
• Scaling is marked as completed before all partitions update their routing state (#​37004)
• Zeebe's backup fails if a new snapshot is created before the snapshot is reserved (#​33499)
• Failed to dispatch message due to class ProtocolRequest cannot be cast to class ProtocolReply (#​33127)

Merged Pull Requests

• pg/split-prefix-migration (#​39126)
• fix: do not log at error for known ClassCastException related to 8.7 heartbeats (#​39125)
• feat: implement preference configuration for username clientid claim (#​39068)
• feat: do not flood the logs with ClassCastException, but only log it once every 5 minutes (#​39042)
• fix: add rest-api.yaml to JAR for swagger (#​39023)
• feat: remove scaling_enabled feature flag (#​38969)
• Fix error when taking a backup with the native file system store (#​38959)
• fix: add missing default value for grpc address in unified configuration (#​38944)
• fix: second PVC Disk usage panel fixed with benchmark PVC name (#​38932)
• fix: send a request to all partitions before marking scaling as completed (#​38894)
• fix: expose advanced filters for ProcessDefinitionFilter (#​38891)
• fix: reserve latest snapshot as soon as possible (#​38882)
• fix: restore app can start successfully (#​38866)
• fix: add usage metric archiving partition ID handling (#​38863)
• Allow default connectors role to create process instances (#​38834)
• deps: update spring and spring-security (#​38811)
• fix: skip snapshot when nothing processed and not forced (#​38624)
• [Backport stable/8.8] fix: change session creation to never in security filter for api path in oidc (#​38483)
• Add the strong specification into the monorepo (#​38440)
• fix: apply default client config to all commands (#​38351)
• fix: change session creation to never in security filter for api path in oidc (#​38347)
• fix: handle >8KB vars with full value (#​37771)
• feat: Make command distribution retry intervals configurable (#​36790)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.