ArangoDB version 3.12.8 released

[vadim]

We are happy to announce the release of ArangoDB version 3.12.8!

This patch version is ready for production deployment and is a recommended upgrade for all 3.12 users.

Apart from some basic cleanup and code improvements related to found issues, the following notable things have been added to the 3.12.7.2 version of ArangoDB:

• Updated minimatch to 10.2.3.
• Accept `null` as valid value for the `roles` attribute in JWT tokens.
• Serve OpenAPI spec on /_arango/vX/openapi.json .
• Add new API GET /_admin/options-public for new platform UI.
• Rebuilt included rclone v1.65.2 with go1.24.13 and non-vulnerable dependencies.
• Add support to access the JWT token and the list of roles in the ExecContext.
• Add switch `--server.external-rbac-service` to enable role-based access control.
• Updated ArangoDB Starter to v0.19.17.
• Added activities API which shows currently on-going high-level processes in the database and their possible dependencies on each other.
• COR-8: Added new coordinator-level metrics for shard replication state.
• Add flag `supportsRBAC` to collections. This is in preparation for RBAC support.
• Added functionality for the ES256 signature scheme for JWT tokens.
• Upgraded OpenSSL to 3.5.5.
• COR-22: Improved crash dumps with additional diagnostic data.
• Improve the output of fields `dbStats` for every column family when calling `db._engineStats()` or calling the API `_api/engine/stats`.
• COR-8: Improved the accuracy of shard metrics on DBservers by updating only metrics for databases with changes, rather than recalculating all metrics.
• FE-929, BTS-2289: bump qs from 6.11.2 to 6.14.1 for node_modules and core UI.
• Make cluster traversal executor with DFS receive neighbours in batches to be able to stop the retrieval early in case a limit has been reached.
• Make single-server traversal executor with DFS receive neighbours in batches to be able to stop the retrieval early in case a limit has been reached.
• Licenses with "managed=true" in their grant are not "expiring".
• FE-914: Add UI support for `storedValues` in vector index.
• FE-636: bump rollup from 2.79.1 to 2.79.2.
• Replace arangodb.com with arango.ai in URLs.

Full changelog can be found here: https://github.com/arangodb/arangodb/blob/v3.12.8/CHANGELOG.
 
Version 3.12.8 distributives can be obtained at https://www.arango.ai/downloads/.