← Back to all sparks
C

Camunda

PM
Velocity5.0

Process orchestration and workflow automation platform

Camunda opens the 8.11 cycle with job-worker fixes and variable metadata across gRPC, REST and MCP.

workflow orchestrationrelease candidatesjob workersmcpsecurity patches
◆Current state
Camunda's feed is mostly release plumbing: 8.10 patch candidates, Optimize CVE patches, and dry-run tags. Today's two 8.11.0-alpha1 candidates are the first real content in weeks. They fix job-worker streaming bugs that dropped or stalled work and a batch-cancel bug that could cancel every running root instance in a cluster.
◆Where it's heading
8.11 is leaning toward operational hardening for managed and multi-region setups: cluster secrets, an upgrade-completeness API, per-index shard config, and Oracle Data Guard lag monitoring. The variablesMetadata work lands on the MCP surface at the same time as gRPC and REST, so MCP is being treated as a first-class API rather than an add-on.
◆Prediction
Expect more 8.11 alpha candidates on a near-daily cadence, alongside continued 8.10.x patch tags. Whether 8.11 has a headline feature is not yet visible in these notes.

◆Recent moves

  1. 2d ago

    8.11 alpha1-rc2: variable metadata over gRPC, REST and MCP

    The second 8.11 alpha candidate lets clients attach variablesMetadata when creating process instances or setting variables, over gRPC, REST and MCP. It is a narrow API addition, but shipping it on MCP at the same time as the classic APIs shows where Camunda puts agent access.

    View source ↗
  2. 2d ago

    8.11 alpha1-rc1: job-worker streaming fixes, cluster secrets

    The first 8.11 alpha candidate is mostly reliability work: streaming job workers that stopped polling or over-activated jobs are fixed, and a batch cancel that could hit every running root instance is closed. Cluster secrets in managed mode and Oracle Data Guard lag monitoring point 8.11 at operators running Camunda at scale.

    View source ↗
  3. 2d ago

    Camunda 8.10.7 release candidate tagged, no notes

    A bare Maven tag for 8.10.7-rc1 with no listed changes. It shows the 8.10 patch line has moved several versions past the 8.10.3 candidate tracked earlier this month.

    View source ↗
  4. 3d ago

    Optimize 8.7.30: compromised eMudhra CAs removed

    An Optimize 8.7 patch whose one notable change removes compromised eMudhra CAs from the image trust stores. The rest is upgrade plans and a Jackson bump.

    View source ↗
  5. 8d ago

    Optimize 8.6.27: CVE fixes for Jetty, Netty, Spring

    Optimize 8.6 gets a batch of CVE fixes (Jetty, Netty, Alpine, Spring) brought up to parity with 8.7. It matters for security posture on the older line and changes nothing users see.

    View source ↗
  6. 13d ago

    Dry-run tag adds runbook for FOSSA SBOM report publishing

    A dry-run tag whose only change is an internal runbook for publishing FOSSA attribution and SBOM reports. It documents compliance plumbing for Camunda's own engineers and changes nothing users run.

    View source ↗