8.5+gen20

Overview

Camunda application in this release generation:

• Identity: 8.5.16
• Operate: 8.5.14
• Tasklist: 8.5.15
• Zeebe: 8.5.18

Identity

💊 Bugfixes

• change dependency management to upgrade spring-security-crypto [Backport v8.5] (#3348)

🧹 Chore

• upgrade alpine to 3.20.6 (#3355) (#3357)
• replace tomakehurst.wiremock-jre8.version with org.wiremock:wiremock-standalone (#3298)
• upgrade org.springframework.boot:spring-boot-starter-actuator from 3.3.9 to 3.3.11 (#3343)

Operate

What's Changed

• Release/operate 8.5.13 by @pedesen in camunda/camunda#30576
• fix: update Spring Boot to 3.3.10 by @ThorbenLindhauer in camunda/camunda#30437
• refactor: remove CDN font-path by @pedesen in camunda/camunda#21363
• deps: Update all non-major dependencies (stable/operate-8.5) by @renovate in camunda/camunda#30904
• deps: Update version.swagger-annotations to v2.2.30 (stable/operate-8.5) by @renovate in camunda/camunda#30907
• fix: Operate variable values are null when MIGRATED and CREATED by @mihail-ca in camunda/camunda#29623
• deps: Update dependency http-proxy-middleware to v3 [SECURITY] (stable/operate-8.5) by @renovate in camunda/camunda#31149
• deps: update identity and operate versions by @vitorwtavares in camunda/camunda#31682
• fix: correct zeebe and identity version in pom file for operate 8.5.14 release by @vitorwtavares in camunda/camunda#31811
• chore: upgrade springboot to 3.3.11 to resolve CVE-2025-31650 by @georgios-goulos in camunda/camunda#31810

Full Changelog: camunda/camunda@operate-8.5.13...operate-8.5.14

Tasklist

💊 Bugfixes

• minor improvements over variable search (#5160)

🧹 Chore

• bump dependencies 8.5 release (#5167)
• upgrade springboot to 3.3.11 to resolve CVE-2025-31650 (#5168)
• fix visual regression mock data (#5161)
• update CHANGELOG.md

Zeebe

version:8.5.18

Bug Fixes

Misc

• Exception message on unexpected instance migration error displays the wrong key (#31541)
• Warnings related to bean is not eligible for getting processed by all BeanPostProcessors and MeterFilter is being configured after a Meter has been registered to this registry. (#30812)
• Do not use KeyGenerator in scheduled task (#30536)
• Inter-partition message correlation failing when the partition count is changed in the configuration (#29612)
• Output mappings applied before updating multi instance body output collection (#23658)

Merged Pull Requests

• [stable/8.6] fix: removal of meter registry workaround (#31168)
• [Backport stable/8.7] fix: when there is a leader transition client requests were never completed (#31141)
• Backport to stable/8.5: do not reconfigure default ObjectMapper instance (#31071)
• fix: Quote changelog variable (#28426) (#31043)
• fix: when there is a leader transition client requests were never completed (#31033)
• test: assert that correlationKey is not associated to partition 1 (#30967)
• fix: Use vault-based token in Maven Release job (#28522) (#30605)
• fix: StagedCache should only cache configured intents (#30560)
• deps: upgrade springboot to 3.4.4 for stable/8.6 (#30533)
• feat: initialize BrokerInfo from config so that they are used before bootstrapping (#30377)
• [Backport stable/8.7] fix: do not initialize BrokerInfo from config (#30337)
• ci: new github workflow for license analysis with FOSSA (#30246)
• fix: do not initialize BrokerInfo from config (#30217)
• fix: persisted partition count is used in EngineProcessors (#30110)
• fix: (8.6) bean post processor produced warn logs (#28547)
• Output mappings applied before updating multi instance body output collection (#25106)