v1.3.21

Changelog

📘 Subtasks

deps

• 3d13aa7 Upgrade Pebble to 4.1.2, closes #15048 #16407

version

• 2541c53 update to version '1.3.21'

🐛 Bug Fixes

auth

• 2475839 potential authentication bypass in the authentication filter

core

• ac101e2 remove properties that are not available in 1.3
• b5d75ff failing tests
• 66c239f add missing @Valid annotation

execution

• 5aabaf7 clean all ancestor states in loop untils, closes #14811
• 368dd43 markAs should also mark the taskrun attempt, closes #15622
• 0004059 update taskrun parent attempt when killing an execution flowable, closes #14870
• 7cd7275 potential path traversal issues in namespace files
• 92ad7b6 preview was not checking if any validation response error happended

executions

• 818df5c handle purged output files (backport #16480) (#16486), closes #16480 #16486

flow

• 2125def Use the tenant from the URL when updating a concurrency limit

flows

• a2f1843 register pebble filter autocompletion in YAML flow editor (#16296) (#16301), closes #16296 #16301

logs

• f1b0d2e drop global SLF4J MDC piggy-back
• 8d08946 restore MDC fields

scheduler

• 86a4f46 restrict JdbcCleaner to executor component to prevent deadlocks (#16380), closes #16380

storage

• c0a7e27 reject backslash path traversal in LocalStorage (GHSA-qw4v-6w32-xx9h)

tasks

• 482fdcf honor explicit taskRunner over deprecated runner PluginDefault (#16274), closes #16274

Contributors

We'd like to thank the following people for their contributions: GitHub, Loïc Mathieu, Nicolas K., Roman Acevedo, Rémi Barthe, brian-mulier-p, github-actionsbot, nKwiatkowski