Zeebe Files

What's Changed

• feat: optimize upgrade plan 8.7.26 by @konstantinos-mylosis in https://github.com/camunda/camunda/pull/57031
• [Backport stable/optimize-8.7] deps: Update version.parsson to v1.1.9 (main) by @monorepo-devops-automation[bot] in https://github.com/camunda/camunda/pull/57151
• deps: optimize update parsson version to 1.1.9 by @konstantinos-mylosis in https://github.com/camunda/camunda/pull/57267
• [Backport stable/optimize-8.7] fix: use stricter iframe rules by @monorepo-devops-automation[bot] in https://github.com/camunda/camunda/pull/57263
• deps: bump jackson versions for stable/optimize-8.7 by @tanjinyi in https://github.com/camunda/camunda/pull/58057
• [Backport stable/optimize-8.7] fix: force Docker manifest-list media type for multi-arch image pushes by @monorepo-devops-automation[bot] in https://github.com/camunda/camunda/pull/58072
• deps: bump netty to 4.1.136.Final to resolve CVE-2026-55831 by @danielkelemen in https://github.com/camunda/camunda/pull/58617
• deps: bump Optimize jetty to 12.0.36 to resolve CVE-2026-10050 by @ajanoni-camunda in https://github.com/camunda/camunda/pull/58807
• Merge the optimize 8.7.26 release branch back to optimize 8.7 stable branch by @OmranAbazid in https://github.com/camunda/camunda/pull/59374
• [Backport stable/optimize-8.7] deps: Update version.bouncycastle to v1.85 (main) by @monorepo-devops-automation[bot] in https://github.com/camunda/camunda/pull/59464
• [Backport stable/optimize-8.7] fix: reject over-long entity names before they reach the index by @monorepo-devops-automation[bot] in https://github.com/camunda/camunda/pull/59746
• deps: bump hardened and public base image digests (stable/optimize-8.7) by @kristinkomschow in https://github.com/camunda/camunda/pull/60143
• Fix Optimize's Netty version pin being silently overridden by @korthout in https://github.com/camunda/camunda/pull/60170
• fix: upgrade httpclient5 to 5.6.4 to resolve CVE-2026-64607 by @shay-matasaro-camunda in https://github.com/camunda/camunda/pull/60534
• fix: upgrade netty to 4.1.137.Final to resolve CVE-2026-59903 by @shay-matasaro-camunda in https://github.com/camunda/camunda/pull/60647
• deps: bump openjre-base-compat:21-dev to JDK 21.0.12.1 (stable/optimize-8.7) by @kristinkomschow in https://github.com/camunda/camunda/pull/61021
• fix: upgrade micrometer to 1.16.7 to remediate CVE-2026-59295 and CVE-2026-59296 (stable/optimize-8.7) by @ajanoni-camunda in https://github.com/camunda/camunda/pull/61317
• revert: upgrade micrometer to 1.16.7 to remediate CVE-2026-59295 and CVE-2026-59296 (stable/optimize-8.7) by @ajanoni-camunda in https://github.com/camunda/camunda/pull/61495
• fix: move optimize 8.7 off Spring Framework 6.2.19 to clear CVE-2026-47884 by @ajanoni-camunda in https://github.com/camunda/camunda/pull/61476
• [Backport stable/optimize-8.7] deps: Update dependency org.springframework.security:spring-security-bom to v6.5.11-spring-security-6.5.13 (stable/8.7) by @monorepo-devops-automation[bot] in https://github.com/camunda/camunda/pull/61417
• deps: update zeebe and identity versions, optimize 8.7.27 release by @tsedekey in https://github.com/camunda/camunda/pull/61731

Full Changelog: https://github.com/camunda/camunda/compare/8.7.25-optimize...8.7.27-optimize