Bugfix release for v.8.0.0

Fixes an issue with the UI and Spring handling trailing slashes

What's Changed

• Add Docker updates to dependabot config by @nicokempe in #2288
• Closes #2148 make the readme more appealing by @arolfes in #2208
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.2 to 3.6.3 by @dependabot in #2445
• Bump actions/setup-java from 3 to 4 by @dependabot in #2443
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.3 to 3.15.4 by @dependabot in #2442
• Bump com.tngtech.archunit:archunit from 1.2.0 to 1.2.1 by @dependabot in #2444
• Closes #2339 - sort classificationCategoriesByType according to type order by @SebastianRoseneck in #2340
• Bump com.puppycrawl.tools:checkstyle from 10.12.5 to 10.12.6 by @dependabot in #2448
• Bump org.codehaus.mojo:aspectj-maven-plugin from 1.14.0 to 1.15.0 by @dependabot in #2450
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.2 to 3.2.3 by @dependabot in #2452
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.12.0 by @dependabot in #2457
• Bump actions/setup-node from 4.0.0 to 4.0.1 by @dependabot in #2456
• TSK-1982 refactore QueryClassificationWithPaginationAccTest to use Test-API by @arolfes in #2070
• Bump version.aspectj from 1.9.20.1 to 1.9.21 by @dependabot in #2449
• Bump org.mybatis:mybatis from 3.5.14 to 3.5.15 by @dependabot in #2453
• Bump com.puppycrawl.tools:checkstyle from 10.12.6 to 10.12.7 by @dependabot in #2466
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.4 to 3.15.5 by @dependabot in #2465
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.12.0 to 3.12.1 by @dependabot in #2464
• Bump com.google.googlejavaformat:google-java-format from 1.18.1 to 1.19.1 by @dependabot in #2461
• Bump version.testcontainers from 1.19.2 to 1.19.3 by @dependabot in #2441
• Bump com.google.googlejavaformat:google-java-format from 1.19.1 to 1.19.2 by @dependabot in #2471
• Closes #2439: Update Github CI scripts to run on latest ubuntu by @jamesrdi in #2462
• Bump follow-redirects from 1.15.1 to 1.15.4 in /web by @dependabot in #2472
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.5 to 3.15.6 by @dependabot in #2475
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.3 to 3.2.5 by @dependabot in #2474
• Bump org.asciidoctor:asciidoctor-maven-plugin from 2.2.4 to 2.2.5 by @dependabot in #2476
• Bump actions/cache from 3 to 4 by @dependabot in #2477
• Bump org.assertj:assertj-core from 3.24.2 to 3.25.1 by @dependabot in #2473
• TSK-1984 Refactor TaskCommentAccTests to use Test-API by @jamesrdi in #2451
• Bump org.assertj:assertj-core from 3.25.1 to 3.25.2 by @dependabot in #2479
• Bump version.testcontainers from 1.19.3 to 1.19.4 by @dependabot in #2482
• Bump com.puppycrawl.tools:checkstyle from 10.12.7 to 10.13.0 by @dependabot in #2487
• Closes #2480: Update aspectj-maven-plugin configuration source to Jav… by @jamesrdi in #2481
• Bump andymckay/cancel-action from 0.3 to 0.4 by @dependabot in #2488
• Closes #2459: Fix Code Smells by @jamesrdi in #2460
• Bump org.assertj:assertj-core from 3.25.2 to 3.25.3 by @dependabot in #2489
• Bump actions/setup-node from 4.0.1 to 4.0.2 by @dependabot in #2492
• Closes #2483: Update actions/download and upload artifact from 3 to 4 by @jamesrdi in #2485
• Bump org.json:json from 20231013 to 20240205 by @dependabot in #2490
• Bump org.asciidoctor:asciidoctor-maven-plugin from 2.2.5 to 2.2.6 by @dependabot in #2494
• Closes #2469: Refactor HistoryCleanupJobAccTest to use test-API by @jamesrdi in #2470
• Bump org.asciidoctor:asciidoctor-maven-plugin from 2.2.6 to 3.0.0 by @dependabot in #2498
• Bump version.aspectj from 1.9.21 to 1.9.21.1 by @dependabot in #2497
• Bump ip from 1.1.8 to 1.1.9 in /web by @dependabot in #2500
• Bump com.google.googlejavaformat:google-java-format from 1.19.2 to 1.20.0 by @dependabot in #2501
• Bump version.testcontainers from 1.19.4 to 1.19.6 by @dependabot in #2502
• Close #2200 - fix the exception text for wrong classification categories by @ryzheboka in #2478
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.6 to 3.15.7 by @dependabot in #2503
• Bump org.docx4j:docx4j-JAXB-ReferenceImpl from 11.4.9 to 11.4.10 by @dependabot in #2504
• Bump com.puppycrawl.tools:checkstyle from 10.13.0 to 10.14.0 by @dependabot in #2508
• Bump jakarta.activation:jakarta.activation-api from 2.1.2 to 2.1.3 by @dependabot in #2509
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.7 to 3.15.8 by @dependabot in #2513
• Closes #2505 - Remove trailing slashes before query string by @SebastianRoseneck in #2512
• Bump org.json:json from 20240205 to 20240303 by @dependabot in #2514
• Bump Azure/login from 1 to 2 by @dependabot in #2518
• Closes #2505 - removed some more trailing slashes by @holgerhagen in #2515
• Bump org.docx4j:docx4j-JAXB-ReferenceImpl from 11.4.10 to 11.4.11 by @dependabot in #2517
• Bump version.testcontainers from 1.19.6 to 1.19.7 by @dependabot in #2524
• Closes #2510 - fixed csrf handling without disabling it by @holgerhagen in #2526

New Contributors

• @nicokempe made their first contribution in #2288

Full Changelog: v8.0.0...v8.0.1

Spring Boot 3.1.x

Breaking

• Move to Spring Boot 3.1.5
  • look for official migration guides of spring boot and spring security
    • Recommendations:
    • https://docs.spring.io/spring-security/reference/5.8/migration/index.html
    • https://docs.spring.io/spring-security/reference/migration/index.html
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-3.0-Migration-Guide
    • https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-3.1-Release-Notes
    • https://www.baeldung.com/spring-boot-3-migration (not office but really recommended :) )
  • during the migration of taskana we faced some additional migration steps which are not covered in the guides:
    • for details see : 5ec0422 -> go to file rest/taskana-rest-spring-example-boot/src/main/java/pro/taskana/example/boot/security/BootWebSecurityConfigurer.java
    • add the permittAll to the loginPage and logout Url
    • disable the request cache (maybe this is only needed for the example app)
      • http.requestCache(RequestCacheConfigurer::disable);
• Switch to jakarta instead of javax wherever there is a jakarta equivalent.
  • see taskana-cdi and taskana-cdi-example for possible changes
  • 3cf0f19
• Change to Wildfly 27.0.1
  • wildfly 25 does not support jakarta
  • wildfly 27 is oldest release with jakarta support
  • see changes in 3cf0f19 -> go to file rest/taskana-rest-spring-example-wildfly/src/test/resources/int-test-standalone.xml for new server settings
• New submodule dmn-xlsx-converter as a clone of https://github.com/camunda-community-hub/camunda-dmn-xlsx/tree/master/xlsx-dmn-converter
  • the camunda-dmn-xlsx is not migrated to jakarta
  • therefore we created a pull request to migrate this library
  • we cloned the need library module into taskana-routing

New

• Add DeleteHistoryEvent for Task

What's Changed

• Bump com.puppycrawl.tools:checkstyle from 10.12.3 to 10.12.4 by @dependabot in #2400
• Bump @babel/traverse from 7.18.11 to 7.23.2 in /web by @dependabot in #2410
• Closes #2412 - Fix flaky job tests by disabling scheduler in tests by @ryzheboka in #2413
• Bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 by @dependabot in #2409
• Bump com.sun.xml.bind:jaxb-core from 2.3.0.1 to 4.0.4 by @dependabot in #2415
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.1.2 to 3.2.1 by @dependabot in #2418
• Bump org.apache.maven.plugins:maven-dependency-plugin from 3.6.0 to 3.6.1 by @dependabot in #2417
• Bump actions/setup-node from 3.8.1 to 4.0.0 by @dependabot in #2416
• Closes #2378 - Add DeleteHistoryEvent for Task by @jamesrdi in #2380
• Bump version.spring.boot from 2.7.16 to 2.7.17 by @dependabot in #2411
• Bump org.apache.maven.plugins:maven-checkstyle-plugin from 3.3.0 to 3.3.1 by @dependabot in #2419
• Bump org.json:json from 20230618 to 20231013 by @dependabot in #2408
• Bump com.google.googlejavaformat:google-java-format from 1.16.0 to 1.18.1 by @dependabot in #2420
• Bump Azure/webapps-deploy from 2 to 3 by @dependabot in #2407
• Bump version.camunda.dmn from 7.19.0 to 7.20.0 by @dependabot in #2405
• Bump com.oracle.database.jdbc:ojdbc8 from 23.2.0.0 to 23.3.0.23.09 by @dependabot in #2402
• Bump version.testcontainers from 1.19.0 to 1.19.1 by @dependabot in #2401
• Bump org.sonarsource.scanner.maven:sonar-maven-plugin from 3.9.1.2184 to 3.10.0.2594 by @dependabot in #2379
• Bump org.mybatis:mybatis from 3.5.13 to 3.5.14 by @dependabot in #2423
• Bump nl.jqno.equalsverifier:equalsverifier from 3.15.2 to 3.15.3 by @dependabot in #2422
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.1 to 3.2.2 by @dependabot in #2427
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.0 to 3.6.2 by @dependabot in #2426
• Bump com.tngtech.archunit:archunit from 1.1.0 to 1.2.0 by @dependabot in #2425
• Closes #2404 - Upgrade to Spring Boot 3.1.5 by @arolfes in #2428
• Bump com.puppycrawl.tools:checkstyle from 10.12.4 to 10.12.5 by @dependabot in #2438
• Bump version.testcontainers from 1.19.1 to 1.19.2 by @dependabot in #2437

Full Changelog: v.7.0.0...v8.0.0

Java 17

Breaking

#2131 - Migrate to java17
-> This release requires an update to JDK17 in order to run
#2206 - Wildfly migration from 15 to 25

Database Schema Update

This release requires an update to the TASKANA database schema.

New

#2389 - Possibility to keep the Owner and OwnerLongName of a task when cancelClaiming
#2359 - Extend Custom Fields of Workbasket
#2302 - Adds Permissions to Users
->We created a new table "permission_info" for users which is filled from a configurable LDAP property. In addition to userId/groups it is now possible to configure these permissions in the taskana.properties for roles
#2366 - add TaskEndstatePreprocessor
#2348 - adds feature to request the current user via /users?currentUser
#2338 - Add query of tasks without owner
#2347 - Configuration to enable working day calculation instead of working time calculation
#2377 - add configuration for job lock expiration period
-> new properties in taskana.properties with example values:
taskana.jobs.lockExpirationPeriod=PT10M
taskana.jobs.cleanup.task.lockExpirationPeriod=PT40M
taskana.jobs.cleanup.workbasket.lockExpirationPeriod=PT30M
taskana.jobs.priority.task.lockExpirationPeriod=PT10M
taskana.jobs.refresh.user.lockExpirationPeriod=PT50M
taskana.jobs.cleanup.history.lockExpirationPeriod=PT20M

Improvements

#2375 - fix description of initial start delay
#2188 - adds checking whether attachment has a proper taskId set when creating/updating a task
#2223 - Fixes issue with monitoring page not loading directly in the web app
#2387 - add an index on TaskHistoryEvent table

Complete list of features and fixes

#2389 - Possibility to keep the Owner and OwnerLongName of a task when cancelClaiming
upgraded dependencies
#2131 - Migrate to java17
#2206 - Wildfly migration from 15 to 25
#2135 - replace thorntail with arquillian test in taskana-cdi
#2359 - Extend Custom Fields of Workbasket
#2375 - fix description of initial start delay
#2302 - Adds Permissions to Users
Bump version.spring.boot from 2.7.15 to 2.7.16
Bump nl.jqno.equalsverifier:equalsverifier from 3.15.1 to 3.15.2
#2188 - adds checking whether attachment has a proper taskId set when creating/updating a task.
Bump version.aspectj from 1.9.20 to 1.9.20.1
Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.4.1 to 3.6.0
Bump actions/checkout from 3 to 4
#2366 - add TaskEndstatePreprocessor
Bump version.aspectj from 1.9.19 to 1.9.20
Bump actions/setup-node from 3.7.0 to 3.8.1
Bump version.testcontainers from 1.18.3 to 1.19.0
Bump version.spring.boot from 2.7.14 to 2.7.15
Bump com.puppycrawl.tools:checkstyle from 10.12.2 to 10.12.3
#2289 - fix Sonarcloud vulnerabilities and bugs
#2348 - adds feature to request the current user via /users?currentUser
Bump com.tngtech.archunit:archunit from 1.0.1 to 1.1.0
#2338 - Add query of tasks without owner
#2350 - Fixes issue with monitoring page not loading directly in the web app
Bump nl.jqno.equalsverifier:equalsverifier from 3.15 to 3.15.1
Bump com.puppycrawl.tools:checkstyle from 10.12.1 to 10.12.2
#2347 - Configuration to enable working day calculation instead of working time calculation
#2377 - add configuration for job lock expiration period
Bump org.apache.maven.plugins:maven-war-plugin from 3.3.2 to 3.4.0

v6.3.2 - Configurable job lock duration

The default job lock duration was set to 1 minute and could not be configured before this release. This resulted in multiple executions of jobs that took longer than 1 minute to finish.

The default for all jobs is now set to a more conservative 30 minutes. In addition to that the lock duration is now configurable via these new properties:

taskana.jobs.lockExpirationPeriod
taskana.jobs.cleanup.task.lockExpirationPeriod
taskana.jobs.cleanup.workbasket.lockExpirationPeriod
taskana.jobs.cleanup.history.simple.lockExpirationPeriod
taskana.jobs.priority.task.lockExpirationPeriod
taskana.jobs.refresh.user.lockExpirationPeriod

What's Changed

Job lock expiration duration is now configurable by @gitgoodjhe in #2377
Job lock expiration duration default is now 30 minutes instead of 1 minute

v6.2.2 - Configurable job lock duration

The default job lock duration was set to 1 minute and could not be configured before this release. This resulted in multiple executions of jobs that took longer than 1 minute to finish.

The default for all jobs is now set to a more conservative 30 minutes. In addition to that the lock duration is now configurable via these new properties:

taskana.jobs.lockExpirationPeriod
taskana.jobs.cleanup.task.lockExpirationPeriod
taskana.jobs.cleanup.workbasket.lockExpirationPeriod
taskana.jobs.cleanup.history.simple.lockExpirationPeriod
taskana.jobs.priority.task.lockExpirationPeriod
taskana.jobs.refresh.user.lockExpirationPeriod

What's Changed

• Job lock expiration duration is now configurable by @gitgoodjhe in #2377
• Job lock expiration duration default is now 30 minutes instead of 1 minute

v6.3.1 - Configuration to enable working day calculation

Restore the old behaviour to calculate the planed and due date based on day and not based on milliseconds

To enable WorkingDayCalculatorImpl instead of WorkingTimeCalculatorImpl:

taskana.workingTime.useWorkingTimeCalculation=false # default value is true
taskana.workingTime.timezone=<YOUR TIMEZONE>

Bugfix in ServiceLevelHandler to recalculate the due date when the classification key has changed.

What's Changed

• Configuration to enable working day calculation instead of working time calculation by @arolfes in #2353

Full Changelog: v6.3.0...v6.3.1

v6.2.1 - Configuration to enable working day calculation

Restore the old behaviour to calculate the planed and due date based on day and not based on milliseconds

To enable WorkingDayCalculatorImpl instead of WorkingTimeCalculatorImpl:

taskana.workingTime.useWorkingTimeCalculation=false # default value is true
taskana.workingTime.timezone=<YOUR TIMEZONE>

Bugfix in ServiceLevelHandler to recalculate the due date when the classification key has changed.

What's Changed

• Configuration to enable working day calculation instead of working time calculation by @arolfes in #2352

Full Changelog: v6.2.0...v6.2.1

v6.1.1 - Configuration to enable working day calculation

Restore the old behaviour to calculate the planed and due date based on day and not based on milliseconds

To enable WorkingDayCalculatorImpl instead of WorkingTimeCalculatorImpl:

taskana.workingTime.useWorkingTimeCalculation=false # default value is true
taskana.workingTime.timezone=<YOUR TIMEZONE>

Bugfix in ServiceLevelHandler to recalculate the due date when the classification key has changed.

What's Changed

• Configuration to enable working day calculation instead of working time calculation by @arolfes in #2351

Full Changelog: v6.1.0...v6.1.1

v6.0.3 - Configuration to enable working day calculation

Restore the old behaviour to calculate the planed and due date based on day and not based on milliseconds

To enable WorkingDayCalculatorImpl instead of WorkingTimeCalculatorImpl:

taskana.workingTime.useWorkingTimeCalculation=false # default value is true
taskana.workingTime.timezone=<YOUR TIMEZONE>

Bugfix in ServiceLevelHandler to recalculate the due date when the classification key has changed.

What's Changed

• Configuration to enable working day calculation instead of working time calculation by @mustaphazorgati in #2342

Full Changelog: v6.0.2...v6.0.3

v6.3.0

Database Schema Update

• This release requires an update to the TASKANA database schema.

New

• #2242 - In order to have more flexibility and expressiveness in the workbasket permissions, two new permissiones have been introduced:
  ** READTASKS: the visibility of tasks is no longer attached to the READ permission of the workbasket. Instead there is a the READTASKS permission, which grants the right to view a task.
  ** EDITTASKS: in addition to READTASKS, EDITTASKS allows the editing of tasks in a workbasket. This allows the distinction between auditing (read-only) and working access.

IMPORTANT: to be compatible with earlier versions, this new permissions are granted to everyone who had READ permission so far.

Improvements

• Column 'AccessID' is now dynamically resizable in the Workbasket Access Items view

Complete list of features and fixes

• #2292 - removed erroneous read-only annotation from TaskCommentController

• #2246 - add grouping by sors and pors

• #2259 - Refactor UpdateTaskAccTest to use test-api

• Flaky Test in CreateTaskAccTest fixed

• #2334 - Make column width of AccessID dynamic under Workbasket Access Overview

• #2306 - extend Admin-UI by permissions READTASKS and EDITTASKS (#2318)

• #2295 - implement EDITTASKS Permission

• #2269 - Implement READTASKS Permission

• #2286 - adjust REST with READTASKS and EDITTASKS

• #2283 - Extend models and data for READTASKS AND EDITTASKS

• #2273 - write update scripts for adding EDITTASKS

• #2240 - write update scripts for adding READTASKS

• #2328 - fix smoketest by waiting for demployment

• #2326 - fixed documentation smoketest (azure)

• #2310 - Default TimeIntervalColumnHeader Ranges are incorrect

• #2322 - set ownerLongName to null during cancelClaim

• #2316 - refactor DmnTaskRouterAccTest to use test-api

• #2299 - remove lock from the query when unnecessary

• #2296 - add ownerLongName during update

• #2262 - Fixed Flaky Test in CreateTaskAccTest

• #2262 - Refactor GetWorkbasketAccTest to use test-api

• Bump json from 20230227 to 20230618

• Bump version.spring.boot from 2.7.13 to 2.7.14

• Bump word-wrap from 1.2.3 to 1.2.4 in /web

• Bump equalsverifier from 3.14.3 to 3.15

• Bump semver from 5.7.1 to 5.7.2 in /web

• Bump version.testcontainers from 1.18.2 to 1.18.3

• Bump version.spring.boot from 2.7.12 to 2.7.13

• Bump equalsverifier from 3.14.1 to 3.14.3

• Bump checkstyle from 10.12.0 to 10.12.1

• Bump actions/setup-node from 3.6.0 to 3.7.0