Skip to content

Releases: camunda/camunda-platform

8.5+gen19

07 Apr 09:53
@vheinila vheinila
8.5+gen19
b244b53
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
8.5+gen19

Overview

Camunda application in this release generation:

  • Identity: 8.5.15
  • Operate: 8.5.13
  • Tasklist: 8.5.14
  • Zeebe: 8.5.17

Identity

💊 Bugfixes

  • upgrade Spring Boot to 3.3.9 (#3299) (#3301)
  • update dependency axios to v1.8.2 [security] (#3280)

🧹 Chore

  • upgrade software.amazon.awssdk:rds from 2.25.31 to 2.30.38 (#3272)
  • upgrade com.squareup.okio:okio from 3.9.0 to 3.10.0 (#3237)
  • upgrade org.springframework.security:spring-security-web from 6.2.7 to 6.3.8 (#3288)

Operate

What's Changed

Full Changelog: camunda/camunda@operate-8.5.11...operate-8.5.13

Tasklist

💊 Bugfixes

  • made JWT typ header property optional [Backport stable/8.5] (#5152)
  • CVE 2025 24813 (#5150)

🧹 Chore

  • bumping versions to release Tasklist 8.5.14 (#5156)
  • deps: upgrade springboot to 3.3.10 to resolve CVE-2025-22228 (#5155)
  • Update docker-compose.identity.yml
  • update CHANGELOG.md

Zeebe

version:8.5.17

Bug Fixes

Misc

  • Pollution of command cache breaks scheduled tasks (#29735)
  • Possible to deploy process for the default tenant without access (#29236)
  • Optimize UpdateIndexStepResumesReindexOperationsIT is failing for OpenSearch (#29004)
  • Banning escape hatch doesn't work as expected on termination for recursive process models (#16410)
  • Slow processing of large multi instance collection (#12946)

Merged Pull Requests

  • Small optimization in BufferUtil: do not allocate an empty string if buffer is empty (#30460)
  • Revert "ci: specify permissions for release workflow" (#30420)
  • ci: specify permissions for release workflow (#30411)
  • fix: do not throw a NullPointerException when the firstSegment is null in SegmentedJournal (#30234)
  • refactor: add git commit info to built artifact (#29870)
  • fix: don't pollute the command cache (#29769)
  • feature: Increase the default inbound message size to 5MB for clients (#29608)
  • Fix process instance batch events and convert to looping mechanism (#29310)
  • Require access to default tenant to use deprecated DeployProcess RPC (#29239)
  • Create meters once to avoid gauge re-registration (#29136)
  • Avoid warning when closing OS exporter if open was not called (#29133)
  • fix: don't try to write responses without request id (#29002)
  • ci: remove broken benchmark measurement support (#27911)
  • Reject pull request updates using merge commits (#23274)
  • Raise incident at specific called process depth (#22735)

Contributors

ThorbenLindhauer, renovate, and 3 other contributors
Loading

8.4+gen20

07 Apr 08:35
@vheinila vheinila
8.4+gen20
3446431
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
8.4+gen20

Overview

Camunda application in this release generation:

  • Identity: 8.4.20
  • Operate: 8.4.19
  • Tasklist: 8.4.19
  • Zeebe: 8.4.18

Identity

💊 Bugfixes

  • upgrade Spring Boot to 3.3.9 (#3299) (#3300)

🧹 Chore

  • upgrade org.springframework.security:spring-security-web from 6.2.7 to 6.3.8 (#3287)
  • upgrade software.amazon.awssdk:rds from 2.25.31 to 2.30.38 (#3271)

Operate

No changes

Tasklist

💊 Bugfixes

🧹 Chore

Zeebe

version:8.4.18

Bug Fixes

Misc

  • Pollution of command cache breaks scheduled tasks (#29735)
  • Possible to deploy process for the default tenant without access (#29236)
  • Tasklist OS importer logs "missing exporter index" as warning (#28591)
  • Incident creation has a routing problem to propagate child process to operate-list-view (#28468)
  • Banning escape hatch doesn't work as expected on termination for recursive process models (#16410)
  • Slow processing of large multi instance collection (#12946)

Merged Pull Requests

  • Small optimization in BufferUtil: do not allocate an empty string if buffer is empty (#30460)
  • fix: do not throw a NullPointerException when the firstSegment is null in SegmentedJournal (#30234)
  • refactor: add git commit info to built artifact (#29870)
  • fix: don't pollute the command cache (#29769)
  • feature: Increase the default inbound message size to 5MB for clients (#29608)
  • Fix process instance batch events and convert to looping mechanism (#29310)
  • Require access to default tenant to use deprecated DeployProcess RPC (#29239)
  • Avoid warning when closing OS exporter if open was not called (#29133)
  • fix: don't try to write responses without request id (#29002)
  • ci: remove broken benchmark measurement support (#27911)
  • Reject pull request updates using merge commits (#23274)
  • Raise incident at specific called process depth (#22735)
Loading

8.3+gen23

07 Apr 08:13
@vheinila vheinila
8.3+gen23
5321ff4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
8.3+gen23

Overview

Camunda application in this release generation:

  • Identity: 8.3.21
  • Operate: 8.3.22
  • Tasklist: 8.3.24
  • Zeebe: 8.3.22

Identity

🧹 Chore

  • upgrade org.springframework.security:spring-security-web from 6.2.7 to 6.3.8 (#3289)

Operate

No changes

Tasklist

💊 Bugfixes

  • CVE 2025 24813 stable/8.3 (#5151)

🧹 Chore

Zeebe

version:8.3.22

Bug Fixes

Misc

  • Pollution of command cache breaks scheduled tasks (#29735)
  • Possible to deploy process for the default tenant without access (#29236)
  • Slow processing of large multi instance collection (#12946)

Merged Pull Requests

  • Revert "ci: specify permissions for release workflow" (#30420)
  • ci: specify permissions for release workflow (#30411)
  • fix: don't pollute the command cache (#29769)
  • Fix process instance batch events and convert to looping mechanism (#29310)
  • Require access to default tenant to use deprecated DeployProcess RPC (#29239)
  • Avoid warning when closing OS exporter if open was not called (#29133)
  • fix: don't try to write responses without request id (#29002)
  • ci: remove broken benchmark measurement support (#27911)
  • Reject pull request updates using merge commits (#23274)
Loading

8.3+gen22

10 Mar 06:32
@vheinila vheinila
8.3+gen22
f439458
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
8.3+gen22

Overview

Camunda application in this release generation:

  • Identity: 8.3.20
  • Operate: 8.3.21
  • Tasklist: 8.3.23
  • Zeebe: 8.3.21

Identity

No changes

Operate

💊 Bugfixes

  • set correct routing value for post importer updates

🧹 Chore

  • test incorrect routing value for post importer
  • backport search client test helper
  • updated netty to version 4.1.118Final (#6854)
  • deps: upgrade Spring Boot to version 3.3.7 (#6837)

Tasklist

💊 Bugfixes

🧹 Chore

  • bumping versions to release Tasklist 8.3.23 (#5147)
  • bump form-js (#5144)

Zeebe

version:8.3.21

Bug Fixes

Misc

  • Incident creation has a routing problem to propagate child process to operate-list-view (#28468)
  • Message correlation on a non-interrupting message event is not idempotent (#26926)

Maintenance

  • [FEEL] Store duration values in a normalized format (#27098)

Merged Pull Requests

  • Assign original author to backport pull requests (#28671)
  • test: verify that passive director closes all exporters (#28310)
  • fix: always close exporter container and distribution service (#28243)
  • Idempotent message correlation retries (#27525)
  • [Backport stable/8.4] Fix zeebe-io references (#27357)
  • fix: Store duration values in a normalized format (#27161)
  • deps(github-tags): Update actions/upload-artifact action to v4 (main) (#15629)
Loading

8.5+gen17

13 Feb 09:37
@vheinila vheinila
8.5+gen17
dcdb47d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
8.5+gen17

Overview

Camunda application in this release generation:

  • Identity: 8.5.11
  • Operate: 8.5.11
  • Tasklist: 8.5.12
  • Zeebe: 8.5.14

Identity

💊 Bugfixes

  • upgrade Spring Boot to version 3.3.7 [Backport v8.5] (#3234)

Operate

What's Changed

Full Changelog: camunda/camunda@operate-8.5.10...operate-8.5.11

Tasklist

💊 Bugfixes

  • Failing to deserialize GetRepositoryResponse with AWS opensearch (#5129)
  • backport 26576 ProcessInstanceArchiverJobOpenSearch missing index name (#5119)
  • change opensearch to default port 9200 (#5099)

🧹 Chore

  • bumping versions to release Tasklist 8.5.12 (#5134)
  • deps-update-playwright (#5120)
  • update CHANGELOG.md

Zeebe

version:

Bug Fixes

Misc

  • Non-Prometheus Micrometer implementations only expose few C8 metrics (#26078)
  • UnsupportedOperationException: Incorrect usage of actor.call(...) cannot be called from current actor. (#25897)

Maintenance

  • [FEEL] Store duration values in a normalized format (#27098)
  • Replace @AutoCloseResources extension with new built-in Junit AutoClose extension (#26421)

Merged Pull Requests

  • migrate JournalMetrics to micrometer (#27929)
  • Ignore misconfigured execution listeners (#27904)
  • Migrate gateway/gRPC metrics to Micrometer (#27878)
  • Fix setting bounded cache size metric (#27875)
  • migrate RaftServiceMetrics & RaftStartupMetrics to micrometer (#27830)
  • Migrate process engine metrics to Micrometer (#27790)
  • migrate RaftRequestMetrics to micrometer (#27769)
  • Introduce a Map with 3 keys (Map3D) as a generic collection (#27759)
  • migrate MetaStoreMetrics/SnapshotReplicationMetrics to prometheus (#27754)
  • Migrate RaftReplicationMetrics to micrometer (#27732)
  • Migrate RaftRoleMetrics to micrometer (#27731)
  • migrate LeaderMetrics to micrometer (#27728)
  • Pass and store meter registry down to ProcessEngineMetrics (#27686)
  • feat: allocate a partition MeterRegistry in RaftPartition (#27684)
  • Migrate stream processor metrics to Micrometer (#27669)
  • Migrate ProcessingMetrics from stream platform to Micrometer (#27654)
  • Migrate replay metrics of stream platform to micrometer (#27650)
  • Migrate partition role metrics to Micrometer (#27644)
  • fix: allow unauthenticated api access by default (#27608)
  • Migrate stream processor metrics to Micrometer (#27564)
  • Migrate replay metrics of stream platform to micrometer (#27561)
  • Migrate broker health metrics to Micrometer (#27538)
  • Migrate bounded command cache metrics to Micrometer (#27536)
  • Migrate job stream metrics to Micrometer (#27534)
  • Migrate exporter director metrics to Micrometer (#27532)
  • fix: Store duration values in a normalized format (#27161)
  • fix: avoid actor call to unregister handlers when it is closing (#26759)
  • deps: Update dependency software.amazon.awssdk:bom to v2.29.48 (main) (#26708)
  • Resolve junit 5 maven dependency convergence (#26641)

Contributors

ThorbenLindhauer, renovate, and backport-action
Loading

8.5+gen18

10 Mar 06:37
@vheinila vheinila
8.5+gen18
eabd072
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
8.5+gen18

Overview

Camunda application in this release generation:

  • Identity: 8.5.5
  • Operate: 8.5.7
  • Tasklist: 8.5.7
  • Zeebe: 8.5.7

Identity

🚀 New Features

  • fallback to using token algorithm when the algorithm cannot be found via JWKS (#3002) (#3022)

💊 Bugfixes

  • update dependency axios to v1.7.4 [security] (#3003)

Operate

What's Changed

Full Changelog: camunda/camunda@operate-8.5.6...operate-8.5.7

Tasklist

💊 Bugfixes

  • Use dynamic viewport height for public start forms
  • Tasklist - OpenSearch AWS config can't be disabled (#5026)
  • Opensearch ilm - separate requests for indexes/templates polices (#5023)
  • Fix Tasklist on iOS (#5008)
  • add include global state to true on backup manager (#5018)

🧹 Chore

  • update CHANGELOG.md
  • Bump to form-js@1.10.0 (#5028)
  • update CHANGELOG.md

Zeebe

Bug Fixes

Broker

  • Exporter arguments are always converted to maps instead of list (#4552)

Misc

  • Multi instance body finishes with less inner activities than expected (#20958)
  • NPE in BpmnStateBehavior.getParentElementInstanceContext "parentElementInstance" is null (#20762)
  • Possible memory corruption leading to SIGSEGV (#20555)
  • Exporting decision evaluation records breaks with large evaluationFailureMessage values (#20248)
  • CI: Zeebe build fails due to SBE build errors (#16029)
  • NullPointerException in ActivateProcessInstanceBatchProcessor.createChildInstanceRecord (#12918)

Maintenance

  • Renovate updates project parent poms but shouldn't (#20856)
  • Refactor fold method argument order in Either interface (#20588)
  • Sequencer#isEntryValid is slow because it has to calculate the full record size (#19225)

Merged Pull Requests

  • build: fix fetching the last push commit (#21861)
  • Allow instantiating exporter configuration with list fields/members (#21847)
  • fix: make SBE code generation thread safe (#21801)
  • [Backport stable/8.4] build: replace protolock with buf CLI (#21773)
  • build: add buf configuration file (#21696)
  • build: replace protolock with buf CLI (#21616)
  • fix: prevent completing multi-instance body until the completion/termination of all its children (#21442)
  • bugfix: set a limit to evaluationFailureMessage size (#21320)
  • refactor: record value and metadata length is always non-zero (#21311)
  • Unlearn spotless to ratchet from main (#21200)
  • feat: allow dns resolution to fall back to TCP (#21066)
  • test: ensure that controlled actor scheduler starts idle (#21043)
  • refactor: Change order of fold method arguments in Either interface (#20889)
  • fix: resetting a reader does not invalidate returned entries (#20720)
  • fix: run scheduled tasks at a given timestamp (#18986)

Contributors

ThorbenLindhauer, renovate, and 3 other contributors
Loading

8.5+gen16

10 Feb 10:11
@vheinila vheinila
8.5+gen16
1eff0ec
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
8.5+gen16

Overview

Camunda application in this release generation:

  • Identity: 8.5.13
  • Operate: 8.5.11
  • Tasklist: 8.5.12
  • Zeebe: 8.5.13

Identity

💊 Bugfixes

  • upgrade only actions/download-artifact
  • update commons-io to 2.14.0 [Backport v8.5] (#3250)

Operate

What's Changed

Full Changelog: camunda/camunda@operate-8.5.10...operate-8.5.11

Tasklist

💊 Bugfixes

  • Failing to deserialize GetRepositoryResponse with AWS opensearch (#5129)
  • backport 26576 ProcessInstanceArchiverJobOpenSearch missing index name (#5119)
  • change opensearch to default port 9200 (#5099)

🧹 Chore

  • bumping versions to release Tasklist 8.5.12 (#5134)
  • deps-update-playwright (#5120)
  • update CHANGELOG.md

Zeebe

version:8.5.13

Dependency Updates

Contributors

ThorbenLindhauer, renovate, and backport-action
Loading

8.4+gen19

11 Mar 06:32
@vheinila vheinila
8.4+gen19
eabd072
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
8.4+gen19

Overview

Camunda application in this release generation:

  • Identity: 8.4.11
  • Operate: 8.4.10
  • Tasklist: 8.4.12
  • Zeebe: 8.4.11

Identity

💊 Bugfixes

  • update dependency axios to v1.7.4 [security] (#3004)

Operate

🚀 New Features

  • skip creating update requests for missing batch operations (#6771)

💊 Bugfixes

  • avoid blocking the threads in importer (#6768)
  • remove dry-run and reusable workflows (#6758)
  • add allowlist to SortValuesWrapper to prevent untrusted deserialization [Backport stable/8.4] (#6761)

🧹 Chore

  • disable CSRF for E2E tests (#6776)
  • update Zeebe and Identity till 8.4.8 (#6774)

Tasklist

💊 Bugfixes

  • Tasklist index prefixes are not correctly setup on OpenSearch (#4996)
  • include tenantId in variable record store (#4991)

🧹 Chore

  • bump zeebe and identity for 8.4 patch release (#5015)
  • add exception stacktrace into the debug logs [Backport stable/8.4] (#5012)
  • deps: update graphql-java to fix CVE-2024-40094 [Backport stable/8.4] (#5006)
  • deps: upgrade springboot to fix CVE-2024-22262 (#4985)

Zeebe

version:8.4.11

Bug Fixes

Broker

  • Exporter arguments are always converted to maps instead of list (#4552)

Misc

  • ILM does not work when previous archived indices were created (#21432)
  • Multi instance body finishes with less inner activities than expected (#20958)
  • NPE in BpmnStateBehavior.getParentElementInstanceContext "parentElementInstance" is null (#20762)
  • Possible memory corruption leading to SIGSEGV (#20555)
  • Exporting decision evaluation records breaks with large evaluationFailureMessage values (#20248)
  • Tasklist index prefixes are not correctly setup on OpenSearch (#19905)
  • CI: Zeebe build fails due to SBE build errors (#16029)
  • NullPointerException in ActivateProcessInstanceBatchProcessor.createChildInstanceRecord (#12918)

Maintenance

  • Refactor fold method argument order in Either interface (#20588)
  • Sequencer#isEntryValid is slow because it has to calculate the full record size (#19225)

Merged Pull Requests

  • [Backport stable/8.5] build: fix fetching the last push commit (#21867)
  • build: fix fetching the last push commit (#21861)
  • Allow instantiating exporter configuration with list fields/members (#21847)
  • fix: make SBE code generation thread safe (#21801)
  • build: add buf configuration file (#21696)
  • build: replace protolock with buf CLI (#21616)
  • fix: prevent completing multi-instance body until the completion/termination of all its children (#21442)
  • bugfix: set a limit to evaluationFailureMessage size (#21320)
  • refactor: record value and metadata length is always non-zero (#21311)
  • Unlearn spotless to ratchet from main (#21200)
  • feat: allow dns resolution to fall back to TCP (#21066)
  • test: ensure that controlled actor scheduler starts idle (#21043)
  • refactor: Change order of fold method arguments in Either interface (#20889)
  • Only activate/complete child process instance while call activity is active (#20835)
  • fix: resetting a reader does not invalidate returned entries (#20720)
  • fix: run scheduled tasks at a given timestamp (#18986)
Loading

8.4+gen18

10 Feb 10:02
@vheinila vheinila
8.4+gen18
46f2adc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
8.4+gen18

Overview

Camunda application in this release generation:

  • Identity: 8.4.18
  • Operate: 8.4.17
  • Tasklist: 8.4.17
  • Zeebe: 8.4.16

Identity

💊 Bugfixes

  • upgrade only actions/download-artifact
  • update commons-io to 2.14.0 [Backport v8.4] (#3249)

Operate

💊 Bugfixes

  • ignore MIGRATED variable records (#6844)
  • update login screenshot to correct year (#6840)

🧹 Chore

  • update visual regression snapshots
  • update playwright
  • deps: upgrade Spring Boot to version 3.3.7 (#6836)
  • remove 1.0.0 from migration test suite
  • run migration test suite on stable branch

Tasklist

💊 Bugfixes

  • Failing to deserialize GetRepositoryResponse with AWS opensearch [Backport stable/8.4] (#5130)
  • backport ProcessInstanceArchiverJobOpenSearch missing index name (#5121)
  • set default port for opensearch to 9200 [Backport stable/8.4] (#5118)

🧹 Chore

  • bumping version to release 8.4.17 (#5133)

Zeebe

version:8.4.16

Bug Fixes

Misc

  • Backpressure at 100% after backup & restore (#26104)
  • Zeebe 8.5 leaks backpressure in-flight spots (#24521)

Maintenance

  • [FEEL] Store duration values in a normalized format (#27098)

Merged Pull Requests

  • fix: Store duration values in a normalized format (#27161)
  • fix: @TestZeebe resources are closed even when constructed in a @beforeeach (#26737)
  • Replace usage of internal Junit 5 helper removed in Junit 5.11 (#26722)
  • Fixes Zeebe 8.5 Limiters inFlight concurrent access (#26408)
  • ci: update zeebe-performance-test link (#26128)

Contributors

beforeeach
Loading

8.3+gen21

10 Feb 09:52
@vheinila vheinila
8.3+gen21
21b4ce5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
8.3+gen21

Overview

Camunda application in this release generation:

  • Identity: 8.3.19
  • Operate: 8.3.20
  • Tasklist: 8.3.22
  • Zeebe: 8.3.20

Identity

💊 Bugfixes

  • upgrade only actions/upload-artifact
  • upgrade only actions/download-artifact

Operate

💊 Bugfixes

  • update login vr test to current reflect new year (#6841)

🧹 Chore

  • update visual regression snapshots
  • update upload-artifact to v4
  • run migration test suite on stable branch

Tasklist

🧹 Chore

  • bumping versions to release 8.3 (#5136)

Zeebe

version:8.3.20

Bug Fixes

Misc

  • Backpressure at 100% after backup & restore (#26104)
  • Zeebe 8.5 leaks backpressure in-flight spots (#24521)

Merged Pull Requests

  • fix: @TestZeebe resources are closed even when constructed in a @beforeeach (#26737)
  • Replace usage of internal Junit 5 helper removed in Junit 5.11 (#26722)
  • ci: use correct latest benchmark version (#26674)
  • Fixes Zeebe 8.5 Limiters inFlight concurrent access (#26408)
  • ci: update zeebe-performance-test link (#26128)

Contributors

beforeeach
Loading