8.8.16

🐛 Bug Fixes

• b7b7f45 - add package.json and package-lock.json to CODEOWNERS Renovate exclusions (PR #7719 by @ztefanie)
• 79503bd - bump tomcat-embed-core to 10.1.56 (PR #7773 by @johnBgood)
• 29e6705 - csv: validate headers for object-based CSV write input (#7846) (PR #7849 by @team-connectors-int-automation[bot])
• f3b1d45 - bump parsson to 1.1.9 to address CVE-2026-9563 (PR #7841 by @ztefanie)
• 3a38b2c - override lz4-java to 1.11.1 to address transitive vulnerability (#8114) (PR #8124 by @team-connectors-int-automation[bot])
• 9eb5efe - update release workflow to import secrets and create Maven settings.xml (PR #8127 by @mathias-vandaele)
• 0dad81e - release: update Artifactory credentials and adjust mirror configurations in settings.xml (#8141) (PR #8144 by @team-connectors-int-automation[bot])
• b295bde - search: filter out deleted process definitions in query (#8045) (PR #8086 by @mathias-vandaele)

🔧 Chores

• db251ee - backport AlwaysGreen failure feedback to stable/8.8 (PR #7731 by @slolatte)
• a83298c - add GCP and AWS registry URLs to PR Docker image comment (#7792) (PR #7795 by @johnBgood)