✨ New Features
2ffe797- runtime: extend secret filtering to inbound connectors (PR #8600 by @mathias-vandaele)
🐛 Bug Fixes
20df14d- bump httpclient5 to 5.6.4 (PR #8449 by @chillleader)f2f7925- bump micrometer to 1.17.1 (PR #8420 by @chillleader)cb1a80b- pin dd-plist transitive dependency to 1.30 (PR #8463 by @chillleader)974270e- bump spring-boot to 4.1.1 (PR #8485 by @mathias-vandaele)321ddce- default outbound secret filter mode to STRICT (#8506) (PR #8521 by @johnBgood)5ac036b- include AdHocSubProcess, IntermediateThrowEvent, and EndEvent in outbound secret key extraction (PR #8524 by @johnBgood)b3a77b4- don't admit a bare prefix of a bracketed secret name into the allow-list (PR #8539 by @johnBgood)5f0e200- stop logging the raw exception; make comment self-contained; add missing handler-level test (PR #8558 by @johnBgood)d2a2416- deepen the STRICT/LAX cause unwrap and fix a second chain-resolution gap (8.9) (PR #8592 by @johnBgood)f5473a9- http: surface TLS handshake failures and include root cause in connection-aborted errors (PR #8516 by @ztefanie)6304119- retry and report an unreadable outbound secret allow-list (PR #8647 by @mathias-vandaele)642c3e6- read every secret reference in a single scan (#8641) (PR #8657 by @mathias-vandaele)
Contributors
johnBgood, ztefanie, and 2 other contributors