Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.514...7.21.0-rc.515

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.513...7.21.0-rc.514

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.512...7.21.0-rc.513

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.511...7.21.0-rc.512

• aa36b38: [grid] Forward file upload/download for Kubernetes, Docker and relay sessions (#17914) (Viet Nguyen Duc) #17914

• 5d5be8c: [build] Automated Browser Version Update (#17904) (Selenium CI Bot) #17904
• 83f0b26: [grid] stop forwarding se:remoteUrl past the Node that consumes it (#17908) (Titus Fortner) #17908

• #55116 - Tight loop for AbstractResteasyReactiveContext due to race condition
• #55169 - Changing how connection closure is handled to avoid a race condition
• #55269 - [Quarkus Continuous Test] - Nested class not picked when using with quarkus test -Dtest flag
• #55298 - Fix test selection for nested test classes
• #55554 - Bump to Vert.x 4.5.31
• #55560 - [3.x] maven native integration tests fail after #55461
• #55584 - Qute localization breaks with too many entries
• #55587 - Add presence checks on substituted Netty classes
• #55653 - Fix VerifyError for large Qute message bundles
• #55675 - Serialization issue in rest endpoints when class has empty constructor
• #55684 - Use most suitable constructor for deserialization in reflection-free Jackson serializers
• #55760 - Upgrade Yasson from 3.0.4 to 3.0.5
• #55771 - Bump org.bouncycastle:bctls-fips from 2.1.23 to 2.1.24
• #55809 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10
• #55818 - Quarkus REST sub-resource server exception mapper returning NPE for JSON object
• #55844 - Quarkus REST: fix NPE when serializing JSON entity from sub-resource server exception mapper
• #55848 - Combining multiple ReflectiveClassBuildItem might lose the publicConstructors element
• #55849 - Merge isPublicConstructors() when a reflective class is registered twice
• #55861 - Bump org.bouncycastle:bc-jdk18on-bom from 1.84 to 1.85
• #55864 - Bump org.junit:junit-bom from 6.1.1 to 6.1.2
• #55865 - Bump org.bouncycastle:bc-fips from 2.1.2 to 2.1.3
• #55866 - Bump commons-codec:commons-codec from 1.22.0 to 1.22.1
• #55867 - ArC: fix client proxy name collision for producers
• #55868 - Allow generation of reflection-free Jackson serializers for JPA entity not doing lazy loading
• #55872 - Fix Dev UI MCP Tools and Resources pages crashing when Dev MCP is disabled
• #55887 - OIDC: malformed bearer token (empty or dots-only) causes NoSuchElementException in OidcCommonUtils.getJwtContentPart -> HTTP 500 instead of 401
• #55905 - Guard against a JWT with no parts in OidcCommonUtils and OidcUtils
• #55906 - Use AbstractConnection to prevent input loss, upgrade aesh to 3.16.8
• #55908 - Fix PathTreeBuilder.getExcludes() returning the includes list
• #55912 - Tree Shaker breaks hibernate filters
• #55913 - [3.x] Bump to Vert.x 4.5.32 and Netty 4.1.137.Final
• #55927 - Make sure package-info.class isn't treated as a regular class during tree-shaking
• #55941 - Bump Keycloak version to 26.7.1 and Keycloak Client version to 26.0.12
• #55951 - [3.38] Fix native image regression caused by Netty 4.1.136 SslContext API change

• AAE-49637 Configure Mockito as a build agent to stop runtime self-attach by @mkrbr in https://github.com/Activiti/Activiti/pull/5502

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.510...7.21.0-rc.511

• #55629 - [3.x] Add post-quantum cryptography (PQC) support to TLS registry

• #47598 - Quarkus REST issue with UriInfo and matrix parameters
• #48889 - Introduce another Qute escape expression for built items
• #48940 - @RunOnVirtualThread is not working properly with use-separate-server=false
• #50123 - 3.26.2 with gradle doesn't see sources generated by quarkus-openapi-generator
• #51205 - Fine grained reactive/blocking property for specific persistence Units
• #52765 - Document how an extension can be marked as deprecated in quarkus-extension.yaml
• #53855 - Extension can be marked as deprecated in quarkus extension
• #54539 - Quarkus Data: order/sort tweaks
• #54610 - Quarkus data rename package and types
• #54694 - Move Order/Sort to PanacheQuery.sort() in quarkus-data-hibernate
• #54822 - Version Gradle file dependencies by content hash instead of lastModified
• #54826 - Startup regression SmallRyeOpenApiProcessor.prepareDocuments
• #55004 - Enable new inliner for native mode?
• #55041 - Fix gRPC @RunOnVirtualThread half-close race under load
• #55194 - Fix UriInfo matrix parameter handling in RESTEasy Reactive
• #55226 - container image deplolyment group - getEffectiveGroup does not account for a @ character
• #55242 - Bump kubernetes-client-bom from 7.7.0 to 7.8.0
• #55250 - Sanitize derived group name in container image build
• #55312 - [3.x] Upgrade pulsar client 4.2.3
• #55358 - Quickstarts compilation: test against 3.x branch instead
• #55382 - Allow per-persistence-unit control of blocking/reactive Hibernate ORM bootstrap
• #55390 - Add conditional test execution based on application properties
• #55398 - Upgrade sshd to 2.19.0
• #55435 - HibernateProcessorUtil: Add removed method to avoid API breakage
• #55439 - librariesOnly option to include only library components in generated SBOMs
• #55457 - Support build-time-only configuration to disable all runtime config source loading
• #55465 - Add quarkus.config.fixed-at-build-time to freeze all config at build time
• #55482 - Enable native mode SingleCallsiteInliner by default
• #55507 - Clear/reset integration-test boot failure state after class change and failed start
• #55511 - Correct test to tolerate containers being shut down at the end of a test
• #55532 - Fix Gradle compilation against code generated by custom providers
• #55538 - Skip building the OpenAPI document eagerly on startup
• #55541 - Fix typos and duplicated text in guide summaries
• #55563 - Bump MINIMUM GraalVM version to 25.0
• #55596 - Hibernate ORM entity enhancement fails for AdditionalPersistenceUnitBuildItem entities not on the augmentation classloader
• #55597 - Hibernate ORM: fallback to TCCL when loading entities from additional persistence units
• #55598 - [3.x] SmallRye GraphQL 2.18.4 + test for max query depth
• #55606 - Keyclok Admin link works only in the DevUI OIDC card
• #55607 - ArC: use thread-safe list for synthetic injection points
• #55612 - Add support for setting Agroal readOnly on pool config
• #55613 - Add JDBC read only config option
• #55619 - Gradle: local-projects in the serialized application model is nondeterministic across Gradle JVMs, busting the build cache
• #55626 - [3.x] Fix native image regression caused by Netty 4.1.136 SslContext API change
• #55629 - [3.x] Add post-quantum cryptography (PQC) support to TLS registry
• #55635 - DEV UI: fix sub-menu link from dynamic URL method
• #55645 - Hibernate ORM: allow to configure dialect for additional PUs
• #55647 - Serialize application model set-valued fields in a deterministic order
• #55656 - Harden aesh tests for Windows and slow CI environments
• #55663 - Optional access to application host ports from Keycloak Container
• #55667 - Update DB2 image from 12.1.0.0 to 12.1.5.0
• #55668 - Enhancements around build time dependencies in CycloneDX SBOMs
• #55704 - Enforce that only a single OIDC authentication mechanism is configured
• #55720 - Use dev services and implicit schema-management more broadly in h2-based tests
• #55725 - CI - Reuse build artifacts in PQC CI
• #55749 - Deprecate quarkus.hibernate-orm.blocking in favor of per-PU jdbc.enabled/reactive.enabled
• #55755 - Logging guide style review (3.40)
• #55791 - [3.x] Quarkus REST - Fix unbounded multipart part-header accumulation
• #55797 - [3.x] Fix path normalization
• #55877 - OIDC: KubernetesServiceClientAssertionProvider does not proactively refresh a Kubernetes client assertion
• #55885 - OIDC: fix periodic bearer token refresh from filesystem
• #55921 - Qute: support multi-pipe CDATA delimiters
• #55938 - [3.x] Bump smallrye-reactive-messaging.version from 4.36.0 to 4.37.0