CIB seven 2.1.0 CE - Release Notes

Release Notes

Release Date: November 7, 2025

Highlights

  • Multi-engine support enabling management of multiple process engines from a single interface
  • Enhanced incidents management with pagination, filtering, and comprehensive data display
  • Variable management improvements with type conversion capabilities
  • Comprehensive Apache HTTP Client 5.x migration across the platform
  • OAuth2 access token forwarding with caching mechanism
  • Improved user preferences with customizable date/time formats and start page options
  • WildFly 37 and WildFly 28 support with HTTP5 adaptation
  • External task query extensions for process variables and definitions
  • Spring Boot updates to 3.5.6 with Spring Framework 6.2.10

New Features

Multi-Engine Support

  • Implement multi-engine dashboard functionality
  • Engine selection and switching with proper user authentication per engine
  • Engine-specific embedded forms handling
  • Multi-engine support for SSO authentication
  • Engine context preservation across sessions
  • Logout functionality on engine change for security

Incidents Management

  • Pagination support for incidents tables in process definitions (configurable, default 50 per page)
  • Filter incidents by message (incidentMessageLike) and failed activity
  • Display business key in incidents tab
  • Fetch incidents from both runtime and history tables based on history level
  • Resizable and show/hide columns in incidents table
  • Enhanced incident state visualization with proper state display
  • Activity-based incident filtering with BPMN diagram integration (failedActivityId)
  • Improved incident timestamp display with execution details
  • Support for runtime incidents table for ‘audit’ history level
  • Annotation button clickable only if incident is not resolved
  • Enhanced incident type, activity ID, and annotation cells display

Variable Management

  • Change variable type functionality (convert between String, Integer, Double, Boolean, JSON, Object, etc.)
  • Enhanced display of JSON and object variables in tables
  • Support for null-value variables with proper handling
  • Checkbox input for boolean variables
  • File variable handling improvements with proper download support for FileValueDataSource
  • Dynamic actions component for variable table items
  • Correct handling of serialized objects with org.camunda namespace
  • Edit null-typed variables with proper validation
  • Value conversion logic for type changes (string to number, JSON to object, etc.)
  • Enhanced error handling for variable operations with user-friendly messages

User Preferences

  • User options/preferences page accessible from profile
  • Configurable start page (dashboard, tasklist, processes, cockpit)
  • Date and time format customization with multiple format options
  • Task notification settings with assignment help popover option
  • Preferences accessible across different user providers
  • Extension point (ProfilePreferencesPlugin) for custom preferences
  • General settings section with intuitive UI

Deployment Management

  • Enhanced deployment view UI with improved layout and modal design
  • Create and redeploy deployments functionality with file handling
  • DMN display from deployments view
  • Deployment refresh capabilities after creation/deletion
  • Delete deployment performance improvements
  • Service to create deployment with proper error handling
  • Models list properly cleared when deployment is deleted

Job Management

  • Change and recalculate job due dates
  • Enhanced job definitions display with proper start/end events
  • Query for all executing jobs (withExecuting filter)

External Task Enhancements

  • Filter external tasks by process variables
  • Filter external tasks by process definition key
  • Filter external tasks by process definition name
  • Support for variable queries in external task queries
  • Add createTime property to external task REST endpoint and OpenAPI
  • Expose extensionProperties in external task data

Query Enhancements

  • Variable creation time support for variable queries
  • Decision instance ordering by ID
  • Task definition keys “Not In” query support
  • Historic process instance orQuery support for multiple statuses with incidents
  • Filter process instances by rootProcessInstanceId
  • Process definition data added to history events
  • afterId filter support for historic variable instance queries
  • Historic variable instance ordering by variable ID

OAuth2 & Security

  • Forward OAuth2 access token to engine REST API
  • Token caching mechanism for multiple users with expiration tracking
  • Concurrent request handling with proper locking
  • Scheduled cleanup of expired tokens
  • Proper permissions handling for OAuth2-authenticated users
  • JWT token security improvements (avoid exposure in iframe URLs via post message)
  • JWT secret validation on startup
  • Support for cibseven.webclient.sso.accessTokenToEngineRest configuration

User Experience Improvements

User Interface

  • Consistent button styling according to UX/UI guidelines (primary, secondary, cancel buttons)
  • Enhanced deployments view with improved visual hierarchy
  • Improved batches view and tables with proper status filtering
  • Better decision lists structure and search functionality
  • Optimized scrollable tabs with better usability
  • Running instances badge on service tasks in BPMN diagrams
  • Improved table usability to prevent unintended clicks
  • Enhanced “Called process instances” tab with better field display
  • Improved modal content height in deployments view
  • Better visualization of process instance states (suspended, active with proper icons)
  • Flow table styles for display more columns dropdown
  • Stack trace modal UI improvements with adjusted padding
  • Badge visibility improvements in sidebars

Navigation & Usability

  • Automatic scroll to opened task on tasklist startup
  • Proper navigation to called process definitions with correct URLs
  • BPMN viewer back navigation support for linked processes
  • Improved navigation shortcuts (resolved conflicts with cursor/selection shortcuts)
  • Deployment ID in URL properly utilized
  • Instances tab selected by default when switching process definition versions
  • Navbar brand link points to start page without redirects
  • Proper handling of candidate users when refreshing tasklist pages

Forms & Input

  • Full support for Generated Forms
  • Dynamic input support for Generated Forms
  • File upload/download functionality in Generated Forms with proper file picker support
  • DocumentPreview component support for Generated Forms
  • Embedded forms properly working when deployed via modeler
  • Generated Forms referenced as embedded (formKey) now working correctly
  • Type conversion for form data (preventing all data from being stored as strings)
  • Consistent null variable submission across tasklist and start process
  • Unified header configuration for embedded forms using bpm-sdk
  • Prevent passing authorization headers for external form URLs

Performance

  • Optimized findTasksCountByFilter to avoid duplicate calls
  • Faster deployment date/title grouping switching
  • Reduced duplicate requests when accessing tasklist and instances tab
  • Improved process search performance
  • Optimized filter counts display in tasklist
  • Show number of tasks for selected task filter
  • Configurable task count intervals (selectedFilterTasksNumber with 60000ms default)
  • Better loading state handling for candidate group tasks

Localization & Translations

  • Complete translations finalized across all files
  • Task time-ago dates properly updating with language changes
  • History versions translations
  • Enhanced tooltip translations for date/time with seconds/milliseconds
  • API for translations retrieval for Selenium test automation
  • Translation for instance suspended state
  • Russian language capitalization corrections
  • German language improvements for date format handling
  • Notifications section translations in preferences

BPMN Viewer

  • Resizable BPMN viewer with improved toggle button functionality
  • Optimized default viewer height for small displays
  • Viewer overlays slot for extensions
  • Better display of start/end events in Job Definitions tab
  • Proper handling of collapsed sub-processes with back navigation
  • Activity instance history handling based on history level

Process & Decision Management

  • Title updates in header to show “Processes”/“Process Definition”/“Process Instance”
  • Title for pages in decisions sub section
  • Decision requirements definition column slot
  • Improved decision instance search with proper date handling
  • Extension points for EE resource actions
  • Process definition actions plugin with incident and active filtering props

Bug Fixes

Forms & Variables

  • Fixed embedded forms not working when deployed via modeler
  • Fixed JSON-Object variable values not displaying correctly in table
  • Fixed inability to change JSON-Object variables in cockpit
  • Fixed variable handling based on instance state (runtime vs historic)
  • Fixed file download for FileValueDataSource cases
  • Fixed null variable submission inconsistencies between tasklist and start process
  • Fixed object display in variables table with proper value rendering
  • Fixed deletion of runtime variables affecting historic variables
  • Fixed variable name handling for file variables using deserialized value

Incidents

  • Fixed incidents crashing with console errors
  • Fixed historic incidents not being fetched properly
  • Fixed sorting incidents by state or end date
  • Fixed incident display in parent processes with complete error messages
  • Fixed “Open Incident” action not working on diagram click
  • Fixed “Process Instance” column showing incorrectly in single instance incident tab
  • Fixed incident overflow scrolling behavior
  • Fixed URL parameter encoding for incident queries

UI & Display

  • Fixed duplicated CSS imports from cib-common-components
  • Fixed icon display problems across the application
  • Fixed models list not clearing when deployment deleted
  • Fixed process favorites not appearing after page refresh
  • Fixed scrolling issues in deployments view
  • Fixed infinite scroll in instances table
  • Fixed layout issues causing horizontal scrollbar
  • Fixed management view table CSS impurities
  • Fixed whitescreen/cache issues
  • Fixed wrong tooltip on suspended process instance icon
  • Fixed copyable action handling with new-tab feature and baseUrl

Navigation & Routing

  • Fixed navigation to called process definition with wrong URL
  • Fixed BPMN diagram reference to “Called Process Definition”
  • Fixed back navigation from collapsed sub-processes
  • Fixed process search errors when starting process from tasklist with errors
  • Fixed called process instances showing wrong status
  • Fixed instance state calculation based on suspended and ended conditions

Authentication & Permissions

  • Fixed login issues for various deployment scenarios (Atos, DigitalFabrix, ITZ-Bund)
  • Fixed authorization permissions not checked when opened for edit
  • Fixed user options access for non-SevenUserProvider users
  • Fixed recovery email sending from profile settings
  • Fixed candidate user handling when refreshing tasklist pages with unassigned tasks
  • Fixed bean initialization for security components
  • Fixed user ID/group ID population for authorization table sorting

Process & Task Management

  • Fixed task assignment not updating in top bar
  • Fixed new processes not visible without page reload
  • Fixed tasklist reminder setting errors
  • Fixed decision display errors on processes view
  • Fixed decision instances search with dates
  • Fixed task service method spelling (findHistoryTasksCount)
  • Fixed retry modal option selection using label

Platform & Container Issues

  • Fixed Wildfly 28 jackson errors when loading engine-rest and webclient
  • Fixed Wildfly domain configuration issues
  • Fixed JBoss 7.4 compatibility issues
  • Fixed bean initialization in Spring Boot context
  • Fixed server.servlet.context.path issues in Spring Boot
  • Fixed conflicts when running in other web containers
  • Fixed Spring Boot dependencies in webapp

Other

  • Fixed version display showing as “n/a” in About section
  • Fixed deployment deletion timeout issues
  • Fixed resize toggle button in BpmnViewer
  • Fixed modal content height in deployments view
  • Fixed package URLs to use HTTPS instead of HTTP
  • Fixed notifications data management errors
  • Fixed historic batches fetch logic (use ‘completed’ instead of ‘finished’)
  • Fixed resource path formatting in test deployments

Technical Updates

Framework & Dependencies - Frontend

  • Updated Spring Boot to 3.5.6
  • Updated Spring Framework to 6.2.10
  • Updated commons-lang3 to 3.18.0
  • Updated openapi-starter-webmvc-ui to 2.8.13
  • Updated Swagger version in release-parent
  • Updated Vite from 6.3.5 to 6.4.1
  • Updated bpm-sdk, cib-common-components, and cibseven-components libraries to 2.1.0
  • Updated Nimbus DS to 9.37.4 for security
  • Resolved dependency convergence issues with maven-enforcer-plugin
  • Excluded transitive dependencies from springdoc-openapi-starter-webmvc-ui

Framework & Dependencies - Backend

  • Comprehensive migration from Apache HTTP Client 4.x to 5.x (httpclient5 5.4.3, httpcore5 5.3.4)
  • Upgraded Jackson to 2.19.2 (with support for 2.15.2 for JDK17)
  • Updated json-smart to 2.5.2 for security
  • Updated feel-scala to 1.19.3
  • Updated Mockito core version
  • Upgraded commons-fileupload via Renovate
  • Support for Quarkus 3.27.0 LTS
  • Migration to modern pagination for DB2
  • Support for cron-utils in CycleBusinessCalendar (replacing CronExpression)

HTTP Client Migration

  • Complete codebase migration from Apache HTTP Client 4.x to 5.x
  • Updated package structure from org.apache.http.* to org.apache.hc.*
  • Replaced CloseableHttpResponse with ClassicHttpResponse
  • Replaced HttpRequestBase with BasicClassicHttpRequest
  • Updated timeout configuration to use new Timeout API
  • Modernized entity handling with ContentType.parse()
  • Updated WildFly module definitions for HttpClient 5.x
  • Added SLF4J dependencies for new logging requirements
  • Migrated integration tests from Jersey Apache Client 4 to Unirest HTTP client
  • Updated Connect module with new RequestConfigOption enum
  • Removed commons-logging and commons-codec dependencies

Platform Support

  • Comprehensive WildFly 37 support
  • WildFly 28.0.1 support with Jakarta integration
  • WildFly 28 HTTP5 adaptation
  • WildFly domain configuration support
  • Tomcat 9 QA integration tests (Java 11 requirement)
  • JBoss 7.4 compatibility improvements
  • Support for various web containers (removed Spring Boot annotation conflicts)
  • Removed support for WildFly 26, WebSphere Application Server, and Tomcat 9 environments
  • Jackson StreamReadConstraints support for Jackson 2.15.0+
  • Removed jackson exclusions from jboss-deployment-structure.xml

Code Quality & Testing

  • Added unit tests for critical components (bpm-sdk, stores, utilities, shortcuts, TaskStore)
  • Recovered and enhanced QA integration tests for Tomcat and WildFly
  • Added license header verification for all Vue and JS files
  • Improved test coverage with proper exclusions for Cobertura
  • Matrix unit tests execution in CI/CD
  • Enhanced Java code warnings resolution
  • Fixed flaky tests with proper job execution isolation
  • Common test utilities for Vuex store testing
  • Config.json consistency validation tests
  • Migrated test fixtures to org.cibseven namespace
  • Archiving of test reports in Jenkins

REST API & Backend

  • Return correct HTTP status codes from backend
  • Refactored findProcessesWithInfo to use process definition statistics
  • Implemented checkCockpitRights on HistoryProcessService methods
  • History endpoints support with HistoryLevel: None
  • Proper handling when historyLevel is set to ’none’ (use runtime tables)
  • Replace deprecated UriComponentsBuilder.fromHttpUrl() with fromUriString()
  • Task serialization refactored to use ObjectMapper
  • Removed obsolete HISTORY enum and fixed resource type references
  • Enhanced OpenAPI documentation with missing properties
  • Fixed deleteProcessDefinition description in REST API docs
  • URL parameter encoding fixes (do not encode twice)
  • Fixed resourcesFromLastDeploymentWithName functionality

Configuration & Deployment

  • Support for camunda.bpm.authorization.enabled configuration check (default: false)
  • Support for webclient.engineRest.path configuration
  • Fixed basePath default value issues
  • Support for server.servlet.context path
  • Conditional REST API enable/disable support
  • CI/CD improvements with proper branch handling (main instead of master)
  • Jenkins pipeline optimizations and build pod resource configurations
  • DevOps improvements for npm error handling
  • FetchAndLockHandler configurations exposed (queue-capacity, unique-worker-request)
  • Jenkinsfile parameter renamed from PACKAGE to VERIFY

Security

  • JWT token not exposed in iframe URLs via post message mechanism
  • Enhanced JWT secret validation on startup
  • Proper bean initialization for security components
  • Access token forwarding with caching and expiration handling
  • Spring Security integration for CIB seven Run
  • Security updates for CVE-2025-53506 (Tomcat and Spring framework)
  • JSON-smart vulnerability mitigation (SEC-1515)

Documentation

  • Updated documentation for 2.1.0 release
  • Documentation for webclient.engineRest.path
  • Spring Boot Get Started guide improvements
  • Authorization filters setup documentation
  • Added workarounds section to bug report template
  • Updated issue templates to remove tasklists

Architecture & Structure

  • Improved project code structure and organization
  • Cleaned up duplicated compiled files
  • Improved notifications data management
  • Enhanced extension points for EE functionality
  • Refactored code for better maintainability
  • Externalized preferences component
  • Added slots for custom columns in flow tables
  • Profile and account tabs restructuring with ContentBlock component
  • Version info extracted into bean
  • Package namespace migration to org.cibseven across test files
  • Removed obsolete test classes (JobDeclarationRetriesTest, LegacyJobDeclarationRetriesTest)

Migration & Compatibility

  • Migration of serialized objects handling
  • BPMN namespace migration from embedded Javascript
  • Correct handling of JSON and XML serialized objects with org.camunda namespace
  • Tomcat catalina maven coordinates migration
  • Simple-jndi added in QA tests
  • Preparation for 7.24 development cycle

Engine Enhancements

  • Initial retry counter fix for job declarations
  • CandidateGroupLike NULL handling with OR queries
  • Fetch task variables functionality
  • SubProcessInstanceId support in TransitionInstanceImpl
  • URL resolver initialization with null base URL fix
  • Process definition data in history events

On this Page: