chore(deps): update minor-grouped (stable/8.7)

[renovate]

This PR contains the following updates:

Package	Update	Change
camunda-platform (source)	minor	12.7.6 → 12.8.0
camunda/camunda-platform-helm	minor	camunda-platform-8.7-12.7.6 → camunda-platform-8.7-12.8.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Before merging, always check with the release notes if any other changes need to be done.

---

Release Notes

camunda/camunda-platform-helm (camunda/camunda-platform-helm)

vcamunda-platform-8.7-12.8.0

Compare Source

The changelog is automatically generated and it follows Conventional Commits format.

camunda-platform-12.8.0 (2026-02-25)

Features

• Expose options in values.yaml for helm v4 support (#​4918)

Release Info

Supported versions:

• Camunda applications: 8.7
• Camunda version matrix: 8.7
• Helm values: 12.8.0
• Helm CLI: 3.20.0

Camunda images:

• docker.io/camunda/connectors-bundle:8.7.15
• docker.io/camunda/console:8.7.101
• docker.io/camunda/identity:8.7.15
• docker.io/camunda/keycloak:26.3.3
• docker.io/camunda/operate:8.7.23
• docker.io/camunda/optimize:8.7.17
• docker.io/camunda/tasklist:8.7.23
• docker.io/camunda/web-modeler-restapi:8.7.16
• docker.io/camunda/web-modeler-webapp:8.7.16
• docker.io/camunda/web-modeler-websockets:8.7.16
• docker.io/camunda/zeebe:8.7.23

Non-Camunda images:

• docker.io/bitnamilegacy/elasticsearch:8.17.4
• docker.io/bitnamilegacy/os-shell:12-debian-12-r43
• docker.io/bitnamilegacy/postgresql:14.18.0-debian-12-r0
• docker.io/bitnamilegacy/postgresql:15.10.0-debian-12-r2

Verification

For quick verification of the Helm chart integrity using Cosign:

cosign verify-blob camunda-platform-12.8.0.tgz \
  --bundle "camunda-platform-12.8.0-cosign-bundle.json" \
  --certificate-identity-regexp "https://github.com/camunda/camunda-platform-helm" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For detailed verification instructions, check the steps in the camunda-platform-12.8.0-cosign-verify.sh file.

---

Configuration

📅 Schedule: Branch creation - Only on Saturday ( * * * * 6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🔀 Skip Workflow Checklist

Check the boxes below to skip specific workflows for this PR.

Global options

• skip_all - Skip all workflows

Individual workflows

• skip_aws_common_procedure_s3_bucket
• skip_aws_eks_single_region_daily_cleanup
• skip_aws_kubernetes_eks_single_region_golden
• skip_aws_kubernetes_eks_single_region_tests
• skip_aws_modules_eks_rds_os_create_destruct_tests
• skip_aws_modules_eks_rds_os_daily_cleanup
• skip_aws_modules_eks_rds_os_tests
• skip_aws_openshift_rosa_hcp_dual_region_golden
• skip_aws_openshift_rosa_hcp_dual_region_tests
• skip_aws_openshift_rosa_hcp_single_region_golden
• skip_aws_openshift_rosa_hcp_single_region_tests
• skip_aws_rosa_hcp_dual_region_daily_cleanup
• skip_aws_rosa_hcp_single_region_daily_cleanup
• skip_azure_common_procedure_storageaccount_test
• skip_azure_kubernetes_aks_single_region_daily_cleanup
• skip_azure_kubernetes_aks_single_region_golden
• skip_azure_kubernetes_aks_single_region_tests

---

This checklist is automatically managed. Checked items will skip the corresponding workflow.

[github-actions]

🏷️ The label skip_azure_kubernetes_aks_single_region_tests has been applied because the tests passed successfully and Renovate is not expected to modify the test logic. This is to save resources. If you are making more significant changes, you should remove the label. 🔄

[github-actions]

🏷️ The label skip_aws_kubernetes_eks_single_region_tests has been applied because the tests passed successfully and Renovate is not expected to modify the test logic. This is to save resources. If you are making more significant changes, you should remove the label. 🔄

[github-actions]

🏷️ The label skip_aws_openshift_rosa_hcp_single_region_tests has been applied because the tests passed successfully and Renovate is not expected to modify the test logic. This is to save resources. If you are making more significant changes, you should remove the label. 🔄