Version 3.260821.0

Enhancements:

• #7502 fix(chaining): scope - Variable - Duplicate scope variable (same key + type) shows raw DB constraint error instead of a form validation message
• #7402 feat(rbac): add tenant users, groups and roles capability triad
• #7401 test(rbac): add end-to-end coverage for the tenant users/groups/roles capability split
• #7400 feat(rbac): gate tenant users, groups and roles UI on the new capability triad
• #7399 feat(rbac): migrate existing tenant roles to the new users/groups/roles capability triad
• #7196 feat(scope): US.1 — Extract tenant "users, groups & roles" management as an independent capability triad
• #6410 feat(multitenancy): API isolation v2 injector GCatalog

Bug Fixes:

• #7532 fix(user): NPE evicting tenant-membership cache when creating a user with tenants
• #7526 fix(security): amqp-client pin is overridden by the Spring Boot BOM
• #7497 fix(ci): nightly container vulnerability scan fails on unused pebble binary
• #7483 fix(autonomous): validate reused event roots at the append service boundary
• #7341 fix(security_coverage): ConstraintViolationException for security_coverage_external_id

Pull Requests:

• fix(deps): update dependency @hookform/resolvers to v5.9.0 by renovate[bot] in #7508
• fix(security): pin patched dependency versions (#7497) by Romuald Lemesle (@RomuDeuxfois) in #7498
• feat(multitenancy): re-land api v2 injectors/connector_instances (#6410) by Laurent Giovannoni (@laugiov) in #7434
• fix(session): block access to sessions api (#314) by antoinemzs in #7518
• fix(deps): update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6.4 by renovate[bot] in #7524
• fix(security): align amqp-client version across modules (#7526) by Romuald Lemesle (@RomuDeuxfois) in #7527
• fix(injectors): API v2 regressions (#6410) by corinnekrych (@corinnekrych) in #7523
• fix(user): avoid NPE when cerating user with tenant by corinnekrych (@corinnekrych) in #7533
• fix(api): fix platform sessions api (#314) by antoinemzs in #7531
• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v3.10.0 by renovate[bot] in #7545
• fix(deps): update dependency software.amazon.awssdk:bom to v2.53.2 by renovate[bot] in #7544
• fix(deps): update dependency @hookform/resolvers to v5.9.1 by renovate[bot] in #7543
• fix(deps): update dependency com.google.guava:guava to v33.7.0-jre by renovate[bot] in #7546
• fix(security_coverage): add tenant id for security coverage (#7341) by damgouj (@damgouj) in #7367
• fix(users): close the administrative account-takeover paths (#315) by Romuald Lemesle (@RomuDeuxfois) in #7534

Full Changelog: 3.260818.1...3.260821.0