fix(deps): update version.camunda to v8.9.1 (main)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.camunda:camunda-process-test-spring (source)	8.9.0 → 8.9.1
io.camunda:camunda-spring-boot-starter (source)	8.9.0 → 8.9.1
io.camunda:camunda-bom (source)	8.9.0 → 8.9.1

---

Release Notes

camunda/camunda (io.camunda:camunda-process-test-spring)

v8.9.1

Compare Source

version:8.9.1

Enhancements

Java Client

• Missing Exponential Backoff for OIDC Token Requests in Camunda Java Client (#​44815)

Bug Fixes

Broker

• Fail to throw/catch error if the job is based by a message throw event (#​8662)

Java Client

• [CPT] Slow test execution and test failures if the client prefers REST (#​45667)

Misc

• Uncaught error incidents not visible in Operate process diagram view (#​51400)
• Process instance migration falsely rejects mapped catch events on multi-instance subprocesses (#​51295)
• Partition blocked by endless RocksDB retry loop Caught recoverable exception (#​50958)
• fix: MCP tool schemas emit Swagger sentinel ##default as default value (#​50934)
• Millions of logs in load tests that subscription can't be found (#​50655)
• Actor Icon Same for User and Client in Admin Operations Log (#​50598)
• ZeebeDbInconsistentException on GLOBAL_LISTENER_PINNED_CONFIG (#​50518)
• Tasklist pod OOM crash when opening advanced filter modal with 1000+ process definitions (#​50396)
• SUSPEND audit log entityKey does not match batchOperationKey (#​50311)
• Operate Operations Log filters show Identity-related entities (#​50305)
• Optimize user task import spams logs for missing due date (#​50145)
• Evaluate an expression API response schema expects result to be unknown, not null (#​50091)
• io.camunda.zeebe.engine.processing.processinstance.ProcessInstanceMigrationMigrateProcessor$SafetyCheckFailedException: Expected to migrate a job for user task but could not find job with key '0' (#​50023)
• Usage metrics don't track RPIs started via message (#​50010)
• Incident panel remains visible (shows 0 incidents) when navigating to a task without incidents (#​50002)
• Failure to deserialise DbCheckpointState (#​49812)
• Standalone Decision Instance Archiver job fails constantly (#​49761)
• Incidents do not get handled correctly on job worker to Camunda user task migration (#​49714)
• Task is not highlighted after navigating to History tab (#​49707)
• Audit Log API: Sentinel Values Returned Instead of null (#​49564)
• Bug: Operate Listeners tab shows all jobs instead of only execution/task listeners (#​49525)
• RESUME audit log entityKey does not match batchOperationKey (#​49513)
• Inconsistent display: Identity name shows as 'Identity' in dashboard/app switcher but as 'Admin' in cluster details (Helm Chart, 8.9 snapshot) (#​49512)
• Batch Operation Lifecycle Audit Log Entries Are Not Deduplicated (#​49428)
• Missing Navigation to Root Decision Instance in DMN Incidents (#​49425)
• Batch Operation Details page cannot be scrolled (#​49410)
• Operations Log table. 'Version' filter resumes other filters (#​49391)
• Make incidents tab incident counter respond to current user selection (#​49161)
• 'Assign to me' spinner blocks assignment when switching tasks quickly (#​49133)
• Failed to start with Spring AOT cache on (#​49131)
• Assigning roles to groups during initialization doesn't work (#​48856)
• UI: No margin in Input/Output Mappings panel list (#​48801)
• Schema Manager can fail reads and deletes with long requests (#​47023)
• [8.9.0-alpha4+] Legacy Operate OpensearchConnector ignores awsEnabled — crashes on IRSA deployments (#​45761)
• Optimize cannot output JSON logs with Stackdriver (#​45223)
• Cannot assign user/group/tenant/etc. with slashes in the name (#​45215)
• [CPT] Allow setting preferRestOverGrpc=true in CamundaSpringCamundaProcessTest (#​45177)
• Leftover service worker rewrites URLs of new Identity UI (#​44867)
• Operate V1 decision instance search fails for standalone evaluated decisions (#​44592)
• Scrolling gets stuck in Tasklist v1 with large process list and search returns 500 error (#​44583)
• Tasklist filter resets after selecting completed task (#​43889)
• Elasticsearch unreachable during Zeebe startup and shutdown: exporter retries, timeouts, and thread interruption errors (#​43266)
• Call hierarchy is not correct on modified process instance (#​42729)
• Stop the OC when port 26502 is already in use (#​42581)
• Batch Operations show 'Completed' state even when operationsCompletedCount !== operationsTotalCount (#​42478)
• Bug: Tenant cluster variable creation responds 200 OK for invalid tenant instead of 404/400 (#​42049)
• Handle WebSessionRepository exception when failing to save session (#​39705)
• Make archiver bypass delayBetweenRuns when backlog exists; reschedule next run immediately (#​39196)
• No error message is returned in UI when a user without Batch Operation Authorization try to migrate process instance on SM env (#​39075)
• Unassign User Task with wrong error description on 404 (#​38880)
• Sort by Version fails after applying Process Instance filter (#​38103)
• When user has no access to update userTask no message is displayed in the UI (#​37230)
• All values in a nested variable are merged to parent scope when one value from the variable is listed as an output mapping (#​35251)
• Release: Maven Release Plugin commits fail spotless check due to XML formatting inconsistency (#​35247)
• Incident metrics are greater than the actual number of incidents (#​34328)
• java.lang.IllegalStateException: Expected to find element instance for given key, but didn't exist. (#​26755)
• Scheduled commands cache uses the wrong intent for caching message expiry (#​15574)
• Error on ProcessInstanceCreation with large variable size (#​13016)
• When submitting a payload lower than the configured maxMessageSize, the request fails with EXCEEDED_BATCH_RECORD_SIZE (#​12873)
• Create process instance with start instructions exceeding record batch size leads to errors (#​10336)

Maintenance

• CI: move all repository secrets to Vault (#​18211)

Task

• Optimize load test Docker image builds (#​50881)
• Ensure all release load tests run on single AZ with stable VMs (#​50877)
• Fix Camunda Exporter nightly tests on AWS (#​50755)
• Fix flaky ElasticsearchPayloadSizeIT.shouldAcceptOrRejectBasedOnPayloadSize (#​50739)
• [CPT] Flaky test io.camunda.ConnectorProcessTest.shouldInvokeConnectors (#​50530)
• Passing correct tags for components in release load test (#​50323)
• Schedule load tests in a single availability zone (#​50028)
• Add missing unit test for flush timer (#​50003)
• Better handle nested incidents on the new incidents tab (#​49165)
• Fix and reenable Operate E2E tests skipped due to process instance page redesign (#​49095)
• In daily stress tests use both REST and gRPC for comparison (#​48977)
• Run with REST API by default in long-running load tests (#​48976)
• C8Run 8.9 – Remove bundled Elasticsearch (#​48957)
• Make it easier to run Playwright tests in Operate (#​48944)
• Benchmark actorId audit log query filter (#​48525)
• Change startup url for C8Run back to Operate (#​48285)
• Process instance archiving reindexes already archived process instances (#​48200)
• Only store task data when a user task is present (#​47843)
• Rename camunda-process-test-spring-4 to camunda-process-test-spring-boot-4 (#​47483)
• OAuth2AuthenticationException are logged at ERROR in gateway (#​46234)
• Implement Conditional Scenario API for Non-Deterministic Process Testing (#​46126)
• Ensure all API responses are asserted on in ITs (#​45124)
• (stretch goal) Ensure cases when end_session_endpoint is not present are handled correctly (#​44486)
• Refactor archive date tracking logic in Elasticsearch and Opensearch archiver repositories (#​43931)
• Include Identity links from UI to docs in docs CI (#​40382)
• (P1) Re-enable and validate accessibility color-contrast checks (#​40261)
• [Improvement] Automate creating the upgrade plan for Optimize release (#​40258)
• Handle WebSessionRepository exception when failing to save session (#​39705)
• Improve event applier golden files experience (#​36434)
• [CPT] Optimize integration tests (#​36201)

Merged Pull Requests

• test: use controllable clock for shouldScheduleInitialFlushAtConfiguredDelay (#​50954)
• fix: handle legacy ZeebeWorkerValueCustomizer without dynamic bean registration (#​50920)
• test: Make io.camunda.ConnectorProcessTest.shouldInvokeConnectors reliable (#​50548)
• fix: detect vendor-specific DB IN-clause errors and return HTTP 400 (#​50547)
• fix: keep migration view open when request fails (#​50508)
• fix: resolve flaky UsageMetricRpiTest by waiting for state commit before assertions (#​50467)
• fix: operate limit entity type filter options excluding identity values (#​50465)
• fix: align OpenSearch load test config with Elasticsearch settings (#​50463)
• fix: add exponential backoff retry to OAuth token fetch in Java client (#​50437)
• fix: gracefully handle ES/OS failures in health indicators (#​50432)
• refactor: remove unnecessary CompletableFuture wrapping in archiver batch methods (#​50429)
• refactor: replace use-official-docker-images with orchestration-tag and add per-component image tags (#​50417)
• ci: show load tests inputs in the job summary (#​50393)
• fix: Global job metrics API documentation (#​50392)
• fix: preserve call hierarchy when modifying child process instances (#​50366)
• feat: migrate SLACK_WEBHOOK_URL to Vault in Zeebe CI workflows (#​50358)
• fix: rework message batch expiry to avoid scheduled command cache (#​50346)
• fix: replace load test secret placeholder on redeploy (#​50338)
• feat: replace BACKPORT_ACTION_PAT with Monorepo DevOps Automation GitHub App (#​50333)
• fix: fix inconsistent batch operation key behaviour for audit logs (#​50324)
• feat: migrate Slack webhook secrets to Vault in camunda8-getting-started-bundle.yaml (#​50281)
• When port is not available complete exceptionally, and log error. (#​50280)
• feat: migrate AUTOMERGE_TOKEN to Monorepo Release GitHub App via Vault (#​50266)
• feat: limit history cleanup time with maxHistoryCleanupUsage (#​50259)
• feat: migrate SLACK_CAMUNDA_EX_CI_WEBHOOK from repo secret to Vault (#​50257)
• fix(tasklist): preserve filter search params when navigating away from cancelled task (#​50256)
• fix: make the liquibase setup retryable for specific exception messages (#​50232)
• fix backup compatibility (#​50221)
• test: reenable decision navigation tests after Operate UI update (#​50220)
• feat: Update job runner (#​50217)
• fix: use --reset-then-reuse-values in install-load-test Makefile targets (#​50205)
• fix: fix camunda user response shape (#​50194)
• fix: bootstrap full reactor to resolve unpublished SNAPSHOTs (#​50179)
• test: reenable contrast tests (#​50171)
• fix: validate official docker images require explicit reuse-tag (#​50162)
• fix: remove pretty-print JSON serialization in UserTaskCompletionVariableHandler (#​50161)
• test: migrate process-instance-migration QA tests after Operate redesign (#​50158)
• fix: make result as nullable as it can be null when an expression failed to execute (#​50157)
• fix: incorrect docs link (#​50154)
• fix: silence log spam for user tasks without due date (#​50153)
• Use same ratio for cache to total memory as in 8.7. (#​50141)
• perf: batch RocksDB transactions in ExportersState.setExporterState (#​50138)
• Fix/rdbms flaky sorting (#​50126)
• fix: add grace period to OAuth token validity and synchronize retry refresh (#​50124)
• fix: use batch operation key when resuming batch operations (#​50104)
• feat: configure minimumReleaseAge for renovate (#​50101)
• test: remove axios dependency (#​50100)
• fix: use conservative memory tracking for exporter flush (#​50054)
• Expression api test (#​50033)
• perf: add archiver load-test scenario (#​50029)
• fix: provide default value for old checkpoint infos (#​50026)
• fix: hide incidents tab when selected element has no incidents (#​50024)
• fix: handle non-numeric formKey in FlowNodeInstanceMetadataBuilder (#​50017)
• fix: track RPI usage metrics for process instances started via message, timer, and signal (#​50012)
• perf: add actor_id index in audit_log (#​50009)
• feat: add trace logging for entity size in ES bulk request payloads (#​49964)
• test: add IT for standalone decision instance history cleanup (#​49961)
• fix: handle assignment/unassignment/completion notification for lack of permissions (#​49872)
• Use G3-M cluster in e2e tests instead of Production M (#​49843)
• ci: CPT use empty connectors secret prefix as it's now mandatory (#​49842)
• fix: add decision dependant filter and update archiver logic (#​49840)
• feat: handle nested incidents in the incidents tab (#​49833)
• fix(cpt): Use gRPC for client connection and enable long-polling (#​49831)
• fix: clarify NOT_FOUND error when correlating blocked message start events with active instances (#​49804)
• Decision instance delete api test (#​49770)
• fix: add audit log cleanup entity for standalone decisions & remove decision dependent (#​49769)
• ci: split GH release into 2 parts + create changelog file + fisrt update assests (#​49768)
• Meg 45177 rest long poll yield on response failure (#​49760)
• fix: disable system proxy in REST client WireMock tests to prevent flaky HTML 404s (#​49747)
• fix: display root cause decision in incidents table (#​49743)
• test(cpt): Morph judge configuration integration into unit tests (#​49740)
• fix: keep selected task on history tab (#​49734)
• test: skip failing operate test (#​49715)
• fix: when entry cannot be processed in time we should mark it as dropped (#​49712)
• fix: remove all registered meters when closing exporter metrics (#​49711)
• fix: return null instead of sentinel values (#​49708)
• test(cpt): Merge integration tests (#​49687)
• ci: trigger helm integration workflow on parent/pom.xml changes (#​49686)
• test: Fix flaky test (#​49668)
• fix: Loadtest Container Names (#​49568)
• ci: add nodeSelector and tolerations for identity, optimize, and keycloak (#​49554)
• ci: pin load tests to a single availability zone (#​49541)
• test: improve Playwright DX for all Tasklist tests (#​49540)
• fix: update listener type filter to include both execution and task listeners (#​49534)
• feat: support configurable rate unit and fractional rates in load tester (#​49531)
• test: fix process instance table sorting e2e (#​49516)
• build: add skip-fe-build variable, overridable from command line (#​49515)
• fix: normalize "identity" component name to "admin" in authorized components and c8Links (#​49514)
• feat: Secure xml formatting during maven release (#​49508)
• ci: make maven surefire problem matcher more robust (#​49498)
• ci: use auto-versioned Teleport in all load test workflows (#​49497)
• fix: whitelist JobIntent.TIME_OUT (#​49489)
• fix: remove duplicate default TenantFilterEnum value (#​49462)
• fix: fix scrollable table container layout (#​49451)
• fix: deduplicate batch lifecycle audit logs (#​49444)
• fix: add registry label to cloud load test namespace setup (#​49443)
• ci: fix pagination in case of many jobs with errors (#​49438)
• refactor: link bug ticket to skipped test (#​49431)
• fix: handle chunking empty batches correctly (#​49411)
• fix: add processDefinitionId filtering to InstancesTable and update audit-log schema (#​49408)
• Enable call activities test (#​49406)
• refactor: remove Carbon standard styles overwrite on input/output mappings tabs (#​49402)
• test: Fix flaky test (#​49400)
• feat: display filtered incident count based on element selection (#​49395)
• fix: Attempt to fix job activation test flakiness (#​49393)
• Fix/re enable multi instance selection tests (#​49381)
• test: start pi after snapshot (#​49380)
• fix: fix Stackdriver not being able to output JSON for Optimize (#​49375)
• fix: re-enable process instance audit log tests after UI updates (#​49373)
• test: relax assertion on processed positions (#​49363)
• fix: clear variables from ProcessInstanceCreation CREATED follow-up event (#​49319)
• Fix: update process instance history and process Instance Incidents tests to match new UI updates (#​49282)
• ci: add missing checkout step in calculate-scenario-config (#​49276)
• test: stabilize operate listeners assertions for new UI (#​49256)
• test: Fix skipped Operate E2E tests in migrations.spec.ts (#​49251)
• test: fix Operate modification locator and re-enable specs (#​49221)
• test(qa): stabilize Operate process instance key lookup (#​49218)
• ci: skip full CI for load-test workflow changes (#​49114)
• test: improve Playwright DX for all Operate tests (#​49084)
• feat: skip variable write to tasklist-task if no user task (#​49074)
• 48200 archive bulk get batches (#​49073)
• fix: assigning roles to groups in initialization (#​48969)
• fix: graceful schema initialization and add readiness check (#​48939)
• ci: add scheduled release load test workflow with smoke verification (#​48904)
• Audit log api tests (#​48832)
• fix: remove leftover service worker (#​48805)
• Tenant role api tests (#​48794)
• build: simplify archiver repository logic for ES and OS (#​48762)
• test: mapping rule tenant api tests (#​48717)
• fix: handle Integer to Long conversion in DecisionInstance setters for standalone decisions (#​48678)
• fix: support forward slashes in entity IDs from OIDC providers (#​48668)
• fix: handle Oracle empty-string-to-NULL for required RDBMS fields (#​47902)
• fix: allow custom configs and scenario (#​47585)
• fix: Operate OpensearchConnector ignores awsEnabled (#​47230)
• feat: Add message sending to C8 cluster (#​47164)
• fix: batch getMappings requests to avoid exceeding URL limit (#​47024)
• chore: disable actor metrics by default (#​46463)
• refactor: emit violating value to assist debugging (#​46412)
• Ensure complete API response field assertions in MultiDB integration tests for all entities (#​45388)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.