v3.33.0

The schema registry is now part of OSS, Jev joins the supported agents, and expression evaluation and indexing get a broad security-hardening pass -- alongside new Cassandra and Redis-Sentinel authentication options.

What's Changed

Features

• Schema registry in OSS (#1592) -- the schema registry and its /api/schema endpoints are now available in OSS Conductor, so task and workflow input/output schemas can be registered and validated without the enterprise build. Thanks @ambiorix2099.
• Jev agent support (#1664) -- adds Jev as a supported agent in the AI/agent stack. Thanks @NicholasDCole.
• Cassandra username/password auth (#1623) -- the Cassandra persistence layer can now authenticate with credentials instead of assuming an open cluster. Thanks @nthmost-orkes.
• Redis-Sentinel password (#1578) -- adds conductor.redis.sentinelPassword; Conductor no longer sends AUTH to sentinels by default, so secured Sentinel deployments work out of the box. Thanks @jerrynieRe.

Security

• Linear-scan expression evaluation (#1654) -- replaces the backtracking regex in ParametersUtils with a linear scanner, removing a ReDoS exposure on ${...} parsing. Thanks @Naman-Gururani. (Fixes [#1638])
• Expression nesting depth cap (#1693) -- caps how deeply ${...} expressions can nest so a crafted payload can't exhaust the evaluator. Thanks @jhaabhijeet864. (Fixes [#1688])
• ReDoS fix in index query builder (#1648) -- hoists the compiled Pattern and removes backtracking in IndexQueryBuilder. Thanks @jhaabhijeet864. (Fixes [#1640])
• Path-traversal fix in DummyPayloadStorage (#1651) -- rejects paths that escape the storage root. Thanks @Denimworld12.
• ws bumped to CVE-2024-37890 patched versions (#1672) -- clears the DoS advisory in the UI dependency tree. Thanks @nthmost-orkes. (Fixes [#643])
• UTF-8 webhook body in the status notifier (#1473) -- encodes the POST body as UTF-8 so a multibyte payload no longer produces a Content-Length mismatch. Thanks @shaileshpadave.
• Escape non-ASCII in workflow save body (#1540) -- prevents a WAF from corrupting definitions that contain non-ASCII characters. Thanks @shaileshpadave.

Reliability

• Retry a stranded SUB_WORKFLOW (#1655) -- a sub-workflow whose parent reference was lost is now retried instead of silently timing out after an hour. Thanks @manan164. (Fixes [#1615])
• JOIN propagates CANCELED, not FAILED (#1425) -- when a forked branch is canceled, the JOIN now reports CANCELED so downstream handling sees the real outcome. Thanks @nikhiln64.

Fixes

• Honor OLLAMA_BASE_URL (#1624) -- a remote Ollama server set via OLLAMA_BASE_URL is actually used instead of defaulting to localhost. Thanks @nthmost-orkes.
• Guardrail normalization respects worker result (#1646) -- custom guardrails keep the result the worker returned during normalization. Thanks @jhaabhijeet864. (Fixes [#1564])
• Accept any 2XX from webhooks (#1157) -- webhook responses with any 2XX status are treated as success, not just 200. Thanks @mtalhasid. (Fixes [#966])

Dependencies

• netty 4.1.136.Final, micrometer 1.15.12 (#1598), amqp-client 5.35.0, httpcore5 5.4.3 (#1609), springdoc 2.8.6 for Spring Framework 6.2 (#1537), and the micrometer OTLP registry aligned with Spring Boot 3.5 (#1653).

Support and security

3.33 is the final minor on the current stack (Spring Boot 3 / Jackson 2). We will keep shipping patch releases on the 3.33 line until :latest moves to 3.34.0 (#1755), after which continued 3.x patches are at our discretion.

The ES7 PKI-realm auth-bypass (CVE-2025-37731) and the OS-level base-image CVEs are remediated in 3.34.0, which defaults to Elasticsearch 8 and rebases the server image. To clear the ES7 CVE on 3.33.0, run the server with -PindexingBackend=es8.

Full Changelog: https://github.com/conductor-oss/conductor/compare/v3.32.5...v3.33.0