fix(deps): update dependency io.camunda:zeebe-bom to v8.9.0-alpha5 (release/8.8)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.camunda:zeebe-bom (source)	8.9.0-alpha5-rc2 → 8.9.0-alpha5

---

Release Notes

camunda/camunda (io.camunda:zeebe-bom)

v8.9.0-alpha5

Compare Source

version:8.9.0-alpha5

Enhancements

Misc

• Use the businessIdUniqueness config to toggle validation logic in the engine (#​45715)
• Expose configuration property for business Id uniqueness validation (#​45714)
• Engine: Propagate Business Id to child process instances (Call Activity: inherit-only for MVP) (#​44980)
• Gateway: Stable partition routing for Business Id uniqueness (#​44979)
• API: Support Business Id on process instance start (REST + gRPC) (#​44977)
• Optimize: support extraConfiguration via SPRING_CONFIG_IMPORT (parity with orchestration) (#​44820)
• [Spring SDK] Workflow for compatibility tests (#​41948)
• [Spring SDK] Add integration tests (#​41947)
• [Spring SDK] Configure revapi (#​41941)
• [CPT] Compatibility tests workflow (#​41917)
• [Camunda Client] Workflow for compatibility tests (#​41916)
• Restore to match RDBMS (#​40233)

Bug Fixes

Broker

• RoleChangeListener is not called after becoming Leader (#​4409)

Java Client

• [CPT] Slow test execution and test failures if the client prefers REST (#​45667)

Misc

• Add required and nullable to fields in getProcessInstance, deployResource, and license (#​46271)
• RootProcessInstanceKey incorrectly defined as domain type (#​46207)
• Tablist is scrollable in bottom right panel in Operate UI (#​45995)
• Learn more button is focused when opening input mappings tab (#​45994)
• Variables do not load for multi-instance elements with multiple instances (#​45765)
• Harden index prefix configuration to prevent ILM from deleting unified indices (Zeebe records vs secondary storage) (#​45705)
• Make history deletion use process instance key, not root process instance key (#​45635)
• Unable to log in without explicitly configuring the OIDC callback/redirect URI (#​45555)
• Wrong instances count on multi instance bodies in modification mode (#​45553)
• SM 8.8 → 8.9 alpha4 migration breaks login/OC access (#​45302)
• Operate UI allows applying modification with only variable changes, returns 'Modification failed' error (#​45268)
• Operate – Incorrect process instances count when selecting flow node without active token (#​45156)
• Processes with variables with a dot in the name are breaking when a variable that's a prefix of the exist in the same process instance (#​45136)
• incidentErrorHashCode filter param is ignored on process instances search endpoint (#​45129)
• [CPT] Wait until remote engine is ready (#​44995)
• Distribution Stuck in Pending State After 8.7 Upgrade (#​44908)
• RDBMS exporter does not handle BatchOperation.INITIALIZED event, causing state and startDate divergence from ES/OS handling (#​44899)
• Client with revoked authorization can keep access by keeping authorization cache alive (#​44844)
• CPT: User task response does not return customHeaders field (#​44731)
• I cannot delete history process definition data if the process definition is deleted from primary storage (#​44627)
• Operate modification dropdown shows flickering, until data is fetched (#​44554)
• Operate modification dropdown contains wrong entries (add, move, move all, etc.) (#​44553)
• Form from different tenant returned by Tasklist V1 (#​44493)
• hasFailedWithRetriesLeft not present on searchJobsResult when using RDBMS (#​44415)
• Process definitions "get process instance statistics" endpoints returns different data when sort param exists in request (#​44368)
• Update with script blocks exporter when target document doesn't exist (#​44356)
• Error message is returned after navigating to Tasklist and Operate for specific clusters (#​44302)
• Batch operation details page showing Delete Process Instance for single operation (#​44282)
• Pagination not working for Batch Operation Details page (#​44111)
• OC API: custom requestTimeout is ignored for create process instance with result (#​43991)
• Batch retry includes unselected instances (#​43728)
• An error occurred while attempting to decode the Jwt: I/O error on GET request (#​35925)
• Bulk metrics do not reset if exporting stops (#​33043)
• bpmnXML should not be requested when serving /v1/process-definitions/search endpoint (#​30372)

Maintenance

• OpenAPI Spec misses type for some enums (#​30674)
• Update opensearch-java client to include the fix for eager_global_ordinals (#​26085)

Task

• Filter audit log variable operations by the source of the request (#​46701)
• Track job complete operations in the audit log (#​46657)
• Make all arrays in responses required (#​46391)
• Implement engine-level Business ID length validation (#​46328)
• Incorporate identified nullable fields from QA report (#​46306)
• Add MCP server to c8run start output (#​46292)
• Add additional validation pass for openapi-lint in ci.yml (#​46274)
• Fix schema errors - existing defects not detected by CI (#​46273)
• Spectral rule: verify that elements in required array exist in schema (#​46272)
• Gateway strict mode (#​46269)
• Configure Gateway to send explicit null when field is missing at runtime (#​46175)
• Harden OpenAPI response contract for 8.9 (#​46165)
• Support multi-tenancy for all MCP tools (#​46133)
• Enforce business ID uniqueness only at root instance level (#​46112)
• Add dedicated Audit Log archiver job (#​45981)
• Ensure deleted entities related audit logs are cleaned up after the retention period in ES/OS (#​45979)
• Ensure deleted entities related audit logs are cleaned up after the retention period in RDBMS (#​45977)
• RP Initiated Logout: Accessibility Improvements (#​45976)
• Remove Elasticsearch from Getting Started bundle (#​45755)
• Truncate related entity fields in RDBMS (#​45665)
• Remove obsolete element-selection related stores and code (#​45659)
• Revisit unwrapped parameters on MCP gateway tool signatures (#​45542)
• Migrate FE Operate tests: various PI details (#​45539)
• Clean up businessId when process instance is completed, terminated, or banned (#​45532)
• Metrics: Create test (JobStreamLifecycleIT) to validate active streams using tenantFilter (#​45358)
• UI: Add a modal to the Add Tenant flow that reminds users of assigning members (#​45328)
• Port missing BatchOperationCfg properties to the unified configs (#​45292)
• feat(exporter): export rootProcessInstanceKey for batch operation items (#​45267)
• Prepare Broker API for multiple Raft partition groups (#​45262)
• Prepare Exporter Distribution State Server for multiple Raft partition groups (#​45261)
• Prepare Inter-Partition Communication for multiple Raft partition groups (#​45260)
• Prepare Raft Server for multiple Raft partition groups (#​45259)
• Enforce business Id uniqueness per process definition on instance start (#​45179)
• Business Id propagation during process instance creation (#​45178)
• Add pagination to TestHelper for large @MultiDbTest integration tests (#​45155)
• Handle MCP metrics on dedicated Grafana dashboard views (#​45015)
• Add pagination to processes by definition name list on operate dashboard (#​44939)
• Improve/configure MCP tool schema generation (#​44926)
• Refactor window.clientConfig usage to rely on getClientConfig util (#​44740)
• Add pagination to incident error message list on Operate dashboard (#​44728)
• C8 Run supports other RDBMS (other than H2) (#​44636)
• C8Run: Switch H2 from in-memory to file-based storage (#​44631)
• Add acceptance tests for search filters AuditLogSearchClientIT class (#​44527)
• Update logout handler to provide redirect URL and return correct response (#​44485)
• Support setting request timeout on createProcessInstance MCP tool (#​44474)
• Provide MCP tool parameters from a wrapper object (#​44473)
• Add test suites for hooks/processDefinitions.ts and hooks/decisionDefinition.ts (#​44468)
• Migrate Operate FE tests: TopPanel / MetadataPopover (#​44452)
• Migrate Operate FE tests: modification dropdown (#​44451)
• Add acceptance tests covering authorizations are properly checked for MCP tools (#​44435)
• Update Identity FE to rename "Identity to OC Admin" (#​44428)
• Merge dashboard v2 code back into the main folder (#​44424)
• RP Initiated Logout - Frontend Part (#​44286)
• Align process definition statistics APIs to use mandatory request-body filters instead of path parameters (#​44263)
• Add Mixpanel event tracking for batch operations UI (#​44241)
• Integrate incident error statistics into dashboard panel (#​44232)
• Flaky test: CamundaProcessTestExtensionMultiTenancyIT / CamundaSpringProcessMultiTenancyTestListenerIT (#​44168)
• Use alternative approach to size estimation using kyro serialisation when exporting (#​44131)
• Expose MCP tool execution metrics (#​43932)
• Enhance process instance-related Zeebe events with elementInstanceKey (#​43760)
• Enhance process instance-related Zeebe events with bpmnProcessId (#​43757)
• Ensure audit log data is covered by RDMBS TTL audit log cleanup (#​43585)
• Expose rootProcessInstanceKey via API (#​43395)
• Add visual regression test for Batch Operations UI (#​43263)
• Create a separate load test config file that includes Optimize (#​42873)
• Delete decision requirements scheduled for deletion in RDBMS (#​42477)
• Delete decision definitions scheduled for deletion in ES/OS (#​42476)
• Create a batch operation to delete historic decision instances when processing ResourceDeletion.DELETE command (#​42474)
• Delete decision instance data from RDBMS (#​42403)
• Delete decision instance data from OpenSearch (#​42402)
• Delete decision instance data from Elasticsearch (#​42401)
• Retrieve decision instances from secondary storage for deletion batch operation (#​42400)
• Add decision instance deletion endpoint (#​42397)
• Add decision instance deletion batch endpoint (#​42396)
• Upgrade the Orchestration Cluster application to Spring-Boot 4.0 (8.9) (#​42079)
• App Integrations Exporter (#​41956)
• [FE] Update operate move modification to make use of the v2 API for auto selecting target ancestor scope (#​41859)
• Cleanup after migrating to useElementInstanceSelection hook (#​41832)
• feat(rdbms): hierarchy-aware history cleanup by rootProcessInstanceKey (#​41683)
• Enforce user task read permission check in Search layer for user task APIs (#​41682)
• Align design for Instance Selection Guidance in Multi-Instance Subprocess Modification (#​41611)
• Ensure we cover the multi-exporter scenario in our test suite (#​41432)
• Migrate Operate single instance modification to V2 API (#​41143)
• Replace OpenSearch Rest High Level Client in Optimize (#​40609)
• Upgrade OS Java Client to v3.2.0 in Optimize (#​40602)
• Upgrade OS Java Client to v3.2.0 in Operate/Tasklist/Zeebe (#​40597)
• Post-migration cleanup for Process instances list (#​40485)
• Migrate FlowNodeMetadata store (#​40425)
• Enable property-based authorization checks in search layer (#​40128)
• Use delete resource C8 API endpoint for decision definition deletion (#​33052)
• bpmnXML should not be requested when serving /v1/process-definitions/search endpoint (#​30372)
• Update opensearch-java client to include the fix for eager_global_ordinals (#​26085)

Documentation

• Clarify FAILED state in V2 Task API as legacy/job-worker-based only (#​42698)

Merged Pull Requests

• fix: workaround to avoid the FOSSA circular-dependency bug (#​47120)
• Enhance variable record with an operation source property (#​46849)
• ci: extend zeebe testbench job execution time to 20 mins (#​46816)
• feat: avoid duplicated sorting columns (#​46772)
• refactor: update operate nullable fields (#​46695)
• refactor: update operate null checks (#​46666)
• Track job completed operations in the audit log (#​46658)
• fix: decided optimize docker tag via generate-snapshot-docker-tag-and-concurrency-group.yml (#​46572)
• feat: route process instance requests with business ID to a stable partition (#​46554)
• 43190 add global listeners to camunda client (#​46531)
• fix: use empty object to represent empty payload (#​46528)
• Validate business ID length during process instance creation (#​46502)
• feat: store created markers, confirmed backups and ranges in runtime state (#​46457)
• feat: parameter resolver for root process instance key (#​46448)
• fix: job worker change sets reset tenant filter as well (#​46446)
• feat: add reverse iteration support to ColumnFamily abstraction (#​46441)
• feat: clean up audit log cleanup after retention period es os (#​46430)
• fix: add missing type to incident enum schemas (#​46426)
• ci: use database name for the test report artifact (#​46421)
• Add validation for processDefinitionId in document upload (#​46408)
• test: fix test to work with RDBMS (#​46403)
• 45176 align date time picker between identity operate (#​46394)
• refactor: make arrays required. fixes #​46391 (#​46392)
• fix: fix Operate nullable fields (#​46370)
• feat: add translations for logout notification (#​46362)
• refactor: avoid using zeebe-util Tuple in camunda-search-client (#​46360)
• 43069 client layer (#​46351)
• fix: correctly pass and validate the gatewayId for the TestStandaloneGateway (#​46342)
• feat: mark optional fields as nullable (#​46339)
• fix: updated e2e api response assertions (#​46331)
• feat/rdbms limit total count (#​46330)
• feat: introduce audit log cleanup ES/OS export handler (#​46326)
• feat: add audit log smaller design changes (#​46325)
• feat: support tenant filter in streaming commands metrics (#​46324)
• Add missing history deletion ITs (#​46322)
• Load extra optimize configs (#​46304)
• feat(c8run): add a link to the OC MCP server on startup (#​46302)
• feat: add optional response validation against API spec (#​46279)
• Only root process instances track business id uniqueness (#​46257)
• Inherit business id from parent process instance (#​46256)
• perf: support paginated incident statistics by erorr (#​46252)
• feat: schedule audit log deletion on resource deletion in RDBMS (#​46250)
• fix: show total count on multi instance body selection (#​46242)
• Remove unnecessary MCP model overrides (#​46236)
• fix: handle 404 in e2e zeebeClient cleanup (#​46235)
• API support for business id on process instance creation (#​46221)
• Add entry point for batch operations and operations log in the top navigation as submenu items (#​46212)
• 45688 limit cluster variable name size (#​46206)
• feat: remove validation for start instructions in adhoc subprocess (#​46187)
• feat: Add Proxy for Zeebe OpenSearch Exporter (#​46151)
• Feat/validate task worker type length (#​46123)
• JobType statistics RDBMS layer (#​46119)
• feat: add member assign reminder to the Add Tenant flow (#​46103)
• Add global listeners to identity UI (#​46099)
• feat: validate the length of a form-id #​45683 (#​46090)
• Implement global listeners search API (#​46088)
• feat: Introduce PROCESS_DEFINITION[CLAIM_USER_TASK, COMPLETE_USER_TASK] permissions (#​45975)
• Feat/check dmn id length in engine (#​45973)
• fix: load content for multi-instance selections with multiple instances (#​45940)
• test: allow lazy containers to be reused (#​45831)
• feat: Rename Identity UI to Admin UI (#​45814)
• fix: use extra underscore to differentiate Zeebe exporter indexes from Camunda exporter indexes (#​45805)
• Write businessId in compact record log (#​45645)
• feat: spring boot starter deployment only from own jar (#​45205)
• fix: prevent dot variable names from crashing (#​45137)
• test: skip all tests failing after enabling element-selection v2 (#​45132)
• Search correlated message subscriptions api test (#​44975)
• Add migration to fix broken distributions that are not in the queue or retriable column families. (#​44968)
• fix: Importer runs before schema initialization (#​44966)
• feat: audit: add extra DB indexes (#​44810)
• Ensure forms from the correct tenant are retrieved (#​44660)
• fix: describe current processing state without race condition (#​42728)
• feat: simplify batch operation chunks creation and align commands with state (#​42285)
• 34032/34036 verify instance history (#​42007)
• fix: remove backpressure statement on 500 for job activation (#​40157)

v8.9.0-alpha5-rc4

Compare Source

version:8.9.0-alpha5-rc4

Task

• Filter audit log variable operations by the source of the request (#​46701)
• Track job complete operations in the audit log (#​46657)

Merged Pull Requests

• fix: workaround to avoid the FOSSA circular-dependency bug (#​47120)
• Enhance variable record with an operation source property (#​46849)
• Track job completed operations in the audit log (#​46658)

v8.9.0-alpha5-rc3

Compare Source

version:8.9.0-alpha5-rc3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.