dependabot[bot] opened a new pull request, #28227: URL: https://github.com/apache/camel/pull/28227
Bumps [io.camunda:camunda-client-java](https://github.com/camunda/camunda) from 8.10.2 to 8.10.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/camunda/camunda/releases";>io.camunda:camunda-client-java's releases</a>.</em></p> <blockquote> <h2>8.10.4</h2> <h1>version:8.10.4</h1> <h2>Bug Fixes</h2> <h3>Misc</h3> <ul> <li>Browser login uses the default tenant's OIDC claim and ID-token settings for physical tenants (<a href="https://redirect.github.com/camunda/camunda/issues/65607";>#65607</a>)</li> <li>gRPC uses the default physical tenant's security config for broker request claims (<a href="https://redirect.github.com/camunda/camunda/issues/65582";>#65582</a>)</li> <li>gRPC Basic auth throws on a malformed Authorization header instead of returning UNAUTHENTICATED (<a href="https://redirect.github.com/camunda/camunda/issues/65515";>#65515</a>)</li> <li>Physical tenants: gRPC ignores the claim settings of a tenant's assigned OIDC provider (<a href="https://redirect.github.com/camunda/camunda/issues/65501";>#65501</a>)</li> <li>Process definition search with isLatestVersion fetches full bpmnXml of every latest definition, risking OOM (<a href="https://redirect.github.com/camunda/camunda/issues/65144";>#65144</a>)</li> <li>REST job workers stop polling forever on HTTP/2 with httpclient5 5.6.1+ because the response timeout is not enforced (<a href="https://redirect.github.com/camunda/camunda/issues/65131";>#65131</a>)</li> <li>c8run: wrapper name rewriting corrupts names containing <code>$</code> and dynamic paths (<a href="https://redirect.github.com/camunda/camunda/issues/64958";>#64958</a>)</li> <li>Load tester: failed read benchmark queries are not recorded in metrics (<a href="https://redirect.github.com/camunda/camunda/issues/64677";>#64677</a>)</li> <li>Process definition can get permanently stuck in draining (<a href="https://redirect.github.com/camunda/camunda/issues/64586";>#64586</a>)</li> <li>Load tester: fail loudly on scheduler errors and out of memory (<a href="https://redirect.github.com/camunda/camunda/issues/64585";>#64585</a>)</li> <li>Load tester: limit in-flight requests in the Starter (<a href="https://redirect.github.com/camunda/camunda/issues/64584";>#64584</a>)</li> <li>Load tester: DataReadMeter query context is updated without synchronization (<a href="https://redirect.github.com/camunda/camunda/issues/64530";>#64530</a>)</li> <li>Load tester: DataReadMeter blocks its scheduler threads (<a href="https://redirect.github.com/camunda/camunda/issues/64529";>#64529</a>)</li> <li>Load test: None-REST completion collapses to ~22% while None-gRPC stays healthy (recurring) (<a href="https://redirect.github.com/camunda/camunda/issues/62783";>#62783</a>)</li> <li>ConditionalBehaviorEngine retries a throwing behavior with no backoff, crashing the JVM with OutOfMemoryError (<a href="https://redirect.github.com/camunda/camunda/issues/60883";>#60883</a>)</li> <li>Archiver leaves duplicate incident documents (silent delete-by-query conflicts) (<a href="https://redirect.github.com/camunda/camunda/issues/57808";>#57808</a>)</li> <li>Data availability increases to one minute on high load (<a href="https://redirect.github.com/camunda/camunda/issues/43121";>#43121</a>)</li> </ul> <h2>Task</h2> <ul> <li>c8run: use physical-tenant terminology consistently (<a href="https://redirect.github.com/camunda/camunda/issues/65358";>#65358</a>)</li> <li>Prepare the Orchestration Cluster E2E suite for distributed ownership: owner routing, health monitoring, readiness evidence (<a href="https://redirect.github.com/camunda/camunda/issues/65305";>#65305</a>)</li> <li>[Operate DS] Migrate shared notifications host (<a href="https://redirect.github.com/camunda/camunda/issues/65113";>#65113</a>)</li> <li>Load tester: distinguish sent, received, successful, failed and in-flight requests in Starter metrics (<a href="https://redirect.github.com/camunda/camunda/issues/64527";>#64527</a>)</li> <li>Implement Spring Boot Actuator-based liveness/readiness health indicators in the load-tester app (<a href="https://redirect.github.com/camunda/camunda/issues/62661";>#62661</a>)</li> <li>Derive routing state from backup metadata (<a href="https://redirect.github.com/camunda/camunda/issues/58402";>#58402</a>)</li> <li>CI: PR-as-unit release-notes generator (extractable composite action) (<a href="https://redirect.github.com/camunda/camunda/issues/57713";>#57713</a>)</li> <li>Evaluate improvements to Optimize metrics (<a href="https://redirect.github.com/camunda/camunda/issues/54907";>#54907</a>)</li> </ul> <h2>Merged Pull Requests</h2> <ul> <li>test: wait for the history purge before asserting a start subscription is gone (<a href="https://redirect.github.com/camunda/camunda/pull/65514";>#65514</a>)</li> <li>test: stop global task listener specs from blocking other API tests (<a href="https://redirect.github.com/camunda/camunda/pull/65513";>#65513</a>)</li> <li>fix: remove the old process instance archiver (<a href="https://redirect.github.com/camunda/camunda/pull/65163";>#65163</a>)</li> <li>feat: add Optimize import percentiles and dashboard (<a href="https://redirect.github.com/camunda/camunda/pull/64937";>#64937</a>)</li> <li>feat: expose Optimize import capacity and misconfiguration metrics (<a href="https://redirect.github.com/camunda/camunda/pull/64936";>#64936</a>)</li> <li>feat: report Optimize import lag that keeps growing during a stall (<a href="https://redirect.github.com/camunda/camunda/pull/64935";>#64935</a>)</li> <li>feat: count failed Optimize import writes (<a href="https://redirect.github.com/camunda/camunda/pull/64934";>#64934</a>)</li> <li>fix: stop the load tester Starter on fatal errors (<a href="https://redirect.github.com/camunda/camunda/pull/64648";>#64648</a>)</li> <li>fix: limit in-flight requests in the load tester Starter (<a href="https://redirect.github.com/camunda/camunda/pull/64646";>#64646</a>)</li> <li>fix: prevent lost updates to the DataReadMeter query context (<a href="https://redirect.github.com/camunda/camunda/pull/64563";>#64563</a>)</li> <li>fix: keep read benchmark queries from blocking each other (<a href="https://redirect.github.com/camunda/camunda/pull/64562";>#64562</a>)</li> <li>fix: add backoff to ConditionalBehaviorEngine action retries (<a href="https://redirect.github.com/camunda/camunda/pull/64466";>#64466</a>)</li> <li>build: stop uploading distro ZIPs with SNAPSHOT artifacts (<a href="https://redirect.github.com/camunda/camunda/pull/64248";>#64248</a>)</li> <li>fix: publish ReadinessState in load-tester Starter (<a href="https://redirect.github.com/camunda/camunda/pull/53971";>#53971</a>)</li> <li>fix: exclude bpmnXml from V2 process-definitions search to prevent OOM (<a href="https://redirect.github.com/camunda/camunda/pull/50405";>#50405</a>)</li> </ul> <h2>8.10.3</h2> <h1>version:8.10.3</h1> <h2>Bug Fixes</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/camunda/camunda/commit/978dd9bfbc73e3691a6ccb4b128ad71f75c515b5";><code>978dd9b</code></a> [maven-release-plugin] prepare release 8.10.4</li> <li><a href="https://github.com/camunda/camunda/commit/41bcbd50a1f1b2c7756e74971edb1c5659b420e6";><code>41bcbd5</code></a> deps(identity): update identity to 8.10.1</li> <li><a href="https://github.com/camunda/camunda/commit/36174a7ae142a400a482c8e1604354f7e32d48f6";><code>36174a7</code></a> [Backport stable/8.10] fix: return UNAUTHENTICATED for malformed gRPC basic a...</li> <li><a href="https://github.com/camunda/camunda/commit/8e037210f28a2725829b44c4366d482af8c8ddb9";><code>8e03721</code></a> fix: return UNAUTHENTICATED for malformed gRPC basic auth headers</li> <li><a href="https://github.com/camunda/camunda/commit/5806770d42b5f8436558a1a63aadb97e055c9f4a";><code>5806770</code></a> [Backport stable/8.10] fix: add backoff to ConditionalBehaviorEngine action r...</li> <li><a href="https://github.com/camunda/camunda/commit/42e2836adca5b2a938da628083e3e5164e0f6a4f";><code>42e2836</code></a> fix: add backoff to ConditionalBehaviorEngine action retries on exception</li> <li><a href="https://github.com/camunda/camunda/commit/029fb625e3a87fb30425892a2df31c54323c1c99";><code>029fb62</code></a> [Backport stable/8.10] fix: let named OIDC providers use the global username,...</li> <li><a href="https://github.com/camunda/camunda/commit/be07cee5058e310ac1e932a8dae7ab0afd36b5a0";><code>be07cee</code></a> [Backport stable/8.10] fix: align management API specs with the actuator endp...</li> <li><a href="https://github.com/camunda/camunda/commit/1512636e20a0e511d972cfbc0be9d10bc33a58fa";><code>1512636</code></a> [Backport stable/8.10] test: stop the gRPC claims test from lowering the vari...</li> <li><a href="https://github.com/camunda/camunda/commit/02ed8c5a01daa2191dd579fac4a858b0c640523e";><code>02ed8c5</code></a> test: deploy without the main-only tenant helper in the backported IT</li> <li>Additional commits viewable in <a href="https://github.com/camunda/camunda/compare/8.10.2...8.10.4";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
