version:8.8.42

Bug Fixes

Misc

• Terminate instruction in process instance modification accepts elements of other process instances (#65800)
• Call hierarchy endpoint returns process instances the caller is not authorized to read (#65685)
• Operate operations are executed multiple times when several orchestration nodes poll at the same time (#65599)
• gRPC Basic auth throws on a malformed Authorization header instead of returning UNAUTHENTICATED (#65515)
• Process definition search with isLatestVersion fetches full bpmnXml of every latest definition, risking OOM (#65144)
• REST job workers stop polling forever on HTTP/2 with httpclient5 5.6.1+ because the response timeout is not enforced (#65131)
• EnumMeterTest.shouldRegisterGaugeForAllValues is flaky: gauge value is NaN (#65064)
• PR benchmark compares a REST run with the gRPC daily reference (#65005)
• Fix 8.8 client compatibility tests failing against newer servers (#64904)
• Load tester: failed read benchmark queries are not recorded in metrics (#64677)
• RDBMS exporter keeps acknowledging replicated positions while the exporter is explicitly (hard) paused (#64635)
• Load tester: fail loudly on scheduler errors and out of memory (#64585)
• Load tester: limit in-flight requests in the Starter (#64584)
• Load tester: DataReadMeter query context is updated without synchronization (#64530)
• Load tester: DataReadMeter blocks its scheduler threads (#64529)
• Avoid Optimize onboarding rewrite all versions of the selected process definitions via update-by-query (#64448)
• RDBMS batch operation exporter double-counts operationsTotalCount on duplicate chunk export (#64377)
• Some endpoints don't fully validate authorization for secondary resource identifiers (#64062)
• Follower deletes committed entries it acknowledged when it installs a snapshot (#63953)
• operate-list-view/operate-incident index templates are recreated on every restart due to a broken settings-diff check (#63764)
• Load test: None-REST completion collapses to ~22% while None-gRPC stays healthy (recurring) (#62783)
• IncidentUpdateTask: notifications not resent on retry after partial bulk update failure (#59931)
• Archiver leaves duplicate incident documents (silent delete-by-query conflicts) (#57808)
• Batch operation exporter handlers not fully idempotent: duplicate event export can double-count aggregated values (#51122)
• Data availability increases to one minute on high load (#43121)

Task

• Load tester: distinguish sent, received, successful, failed and in-flight requests in Starter metrics (#64527)
• Delete empty Optimize PI indices (#63678)
• Implement Spring Boot Actuator-based liveness/readiness health indicators in the load-tester app (#62661)
• CI: PR-as-unit release-notes generator (extractable composite action) (#57713)
• CI: Release-range resolver — fork-point baselines + first-parent walk (#50968)

Merged Pull Requests

• fix: remove the old process instance archiver (#65163)
• ci: fail check-results and keep GCS objects on unseen cancelled jobs (#64878)
• ci: retry import secrets step when running setup-build (#64658)
• fix: stop the load tester Starter on fatal errors (#64648)
• fix: limit in-flight requests in the load tester Starter (#64646)
• fix: prevent lost updates to the DataReadMeter query context (#64563)
• fix: keep read benchmark queries from blocking each other (#64562)
• build: stop uploading distro ZIPs with SNAPSHOT artifacts (#64248)
• fix: serve swagger UI under physical-tenant prefixed paths (#58216)
• fix: publish ReadinessState in load-tester Starter (#53971)
• fix: exclude bpmnXml from V2 process-definitions search to prevent OOM (#50405)