79.8.0

What's Changed

🛠️ Stability & Fixes

• Don't bootstrap a dummy LDAP identity provider when unconfigured by @egorpak528 in #4061
• Allow per-IdP caCertificates entries to hold a full certificate chain by @duanemay in #4064
• Add users/groups zone+created indices (validated subset of #3347) by @duanemay in #4063
• Return a minimal response for inactive tokens in /introspect by @duanemay in #4066
• Pass through unrecognized claims in check_token and introspect responses by @duanemay in #4065
• Preserve caCertificates on PUT when omitted by @duanemay in #4073
• Fix cors allowed origin pattern matching by @joemahady-comm in #4068
• Add an extra subject_token verification to protect token extensions by @fhanik in #3954
• introduce @value wiring for allowPublicClients in ClientAdminBootstrap by @robl-sap in #4080

⬆️ Dependency Bumps

• build(deps): bump github/codeql-action from 4.37.8 to 4.37.9 by @dependabot[bot] in #4060
• build(deps): bump the selenium group with 3 updates by @dependabot[bot] in #4059
• build(deps): bump org.sonarqube from 7.4.0.8496 to 7.5.0.8588 by @dependabot[bot] in #4067
• build(deps): bump org.springdoc:springdoc-openapi-starter-webmvc-ui from 3.1.0 to 3.1.1 by @dependabot[bot] in #4069
• build(deps): bump org.eclipse.jgit:org.eclipse.jgit from 7.7.1.202607240634-r to 7.8.0.202609011348-r by @dependabot[bot] in #4070
• build(deps): bump the selenium group with 3 updates by @dependabot[bot] in #4071
• build(deps): bump github/codeql-action from 4.37.9 to 4.38.0 by @dependabot[bot] in #4072
• Bump Tomcat to 11.0.26 by @strehle in #4074
• build(deps): bump com.nimbusds:nimbus-jose-jwt from 10.9.1 to 10.10 by @dependabot[bot] in #4078
• build(deps): bump github/codeql-action from 4.38.0 to 4.38.1 by @dependabot[bot] in #4079
• build(deps): bump com.icegreen:greenmail from 2.1.13 to 2.1.14 by @dependabot[bot] in #4082
• Update BC-FIPS versions by @strehle in #4083

Full Changelog: v79.7.0...v79.8.0