Camunda Platform 8.1.9

Zeebe

Enhancements

Misc

• Docker: Allow running zeebe with a read-only root filesystem (#11876)
• Docker: Running the zeebe process with an unprivileged user by default (#11784)
• Introduce a less pessimistic backpressure algorithm (#8298)

Bug Fixes

Broker

• MessageTimeToLiveChecker clogs the log stream with commands (#11762)

Misc

• MessageTTLChecker isn't idle for configured interval (#11958)
• Zeebe java client didn't get the region from the configuration (#11846)
• ZeebeCallCredentials#applyRequestMetadata should not block a thread (#11816)
• Two raft nodes caught in an election loop (#11665)

Maintenance

• Allow configuring the MessageTimeToLiveChecker (#11922)

Merged Pull Requests

• feat(db): convenient fallback behavior when no startAt is provided (#11937)
• feat(docker): read only root filesystem support (#11877)
• added region property to client properties (#11870)
• Disable flaky shouldRunAsyncSchedulingEvenIfProcessingIsBlocked test (#11851)
• Add warning for even replication factor (#11831)
• fix(clients/java): make a ZeebeCallCredentials#applyRequestMetadatacall non-blocking (#11817)
• fix(docker): data and logs mount for unprivileged user (#11800)
• feat: run message TTL checker concurrently to processing (#11792)
• chore(release): use new 8 core runner (#11791)
• fix(journal): check for null while closing (#11781)
• Make resource deployments atomic (#11776)
• Candidate steps down if election timesout with out success or failure (#11743)
• chore(ci): resolve non camunda artifacts via central (#11656)
• build: docker image can be built from sources (#11495)

Operate

🧹 Chore

• backend: update Zeebe and Identity to 8.1.9 (#4229)
• update CHANGELOG.md

Tasklist

💊 Bugfixes

• cherry-picking invalid token issues
• invalid operate token (#2571)
• upgrade-insecure-requests (#2542)

🧹 Chore

• backend: update Zeebe and Identity to 8.1.9 (#2604)
• pom: fix Maven filtering (#2577)
• update CHANGELOG.md

Identity

🚀 New Features

• support GCP logging format (#1593)

💊 Bugfixes

• frontend/package.json & frontend/yarn.lock to reduce vulnerabilities (#1653)
• set content security policy header (#1620) (#1643)
• set + as post logout redirect uri for clients (#1618) (#1635)
• management-api/pom.xml to reduce vulnerabilities (#1616)
• set secure attribute for cookies [Backport v8.1] (#1619)
• set HSTS header with recommended params (#1610)
• security - upgrade alpine base image to fix CVEs (#1599)
• define max size for string properties (#1594) (#1600)
• upgrade action versions to remove deprecation warnings (#1580)