Repository navigation

Issues

Postgres indexing: starting a workflow fails when the correlation id is longer than 128 characters
conductor-oss/conductor#1780 · opened on Oct 30, 2026
Workflow-level timeout does not fire while blocked on a signal-wait WAIT task
conductor-oss/conductor#1779 · opened on Oct 29, 2026
workflow_running metric under-counts (misses sync-started and definition-less running workflows)
conductor-oss/conductor#1778 · opened on Oct 29, 2026
1
MySQLQueueDAO does not reset popped on re-push (MySQL parallel of #1667)
conductor-oss/conductor#1777 · opened on Oct 29, 2026
A queue can hand one waiting task to two workers
conductor-oss/conductor#1771 · opened on Oct 28, 2026
Harden GraalJS inline evaluator: replace HostAccess.ALL denylist with an allowlist
conductor-oss/conductor#1767 · opened on Oct 26, 2026
[FEATURE]: Enforce workflow idempotency keys with explicit scope and lifecycle
conductor-oss/conductor#1766 · opened on Oct 26, 2026
2
Expand the e2e matrix: run es8 (and os3) against the SQL persistence backends
conductor-oss/conductor#1760 · opened on Oct 24, 2026 · 3.34.0
3
Remove the es6-persistence module entirely in 3.34.0
conductor-oss/conductor#1758 · opened on Oct 23, 2026 · 3.34.0
Deprecate the ES7 persistence backend in 3.34.0 (3.33 is the last series to default to ES7)
conductor-oss/conductor#1757 · opened on Oct 23, 2026 · 3.34.0
Make ES8 the default indexing backend in 3.34.0 (removes the CVE-2025-37731 ES7 core jar)
conductor-oss/conductor#1756 · opened on Oct 23, 2026 · 3.34.0
Epic: Conductor 3.34.0 — Spring Boot 4.1 / Jackson 3 / Jakarta EE 11 + ES8 default
conductor-oss/conductor#1755 · opened on Oct 23, 2026 · 3.34.0
Write the 3.34.0 upgrade / migration guide (Spring Boot 3→4, Jackson 2→3, Jakarta EE 11, ES7→ES8)
conductor-oss/conductor#1754 · opened on Oct 23, 2026 · 3.34.0
redis-concurrency-limit: resolve ambiguous ConcurrentExecutionLimitDAO bean
conductor-oss/conductor#1753 · opened on Oct 23, 2026 · 3.34.0
Confirm Hibernate Validator 9 @Valid cascading did not tighten metadata-save validation
conductor-oss/conductor#1752 · opened on Oct 23, 2026 · 3.34.0
2
Restore the SDK-driven test-harness suites excluded during the Jackson 3 migration
conductor-oss/conductor#1751 · opened on Oct 23, 2026 · 3.34.0
jackson-jq: move off 2.0.0-alpha1 before 3.34.0 GA
conductor-oss/conductor#1750 · opened on Oct 23, 2026 · 3.34.0
Sunset ES7 (Phase 3): remove ES7 from the server build
conductor-oss/conductor#1727 · opened on Oct 9, 2026
Sunset ES7 (Phase 2): deprecate in place with a removal date
conductor-oss/conductor#1726 · opened on Oct 9, 2026
Epic: Sunset the Elasticsearch 7 (ES7) indexing backend
conductor-oss/conductor#1725 · opened on Oct 9, 2026
Bump spring-webmvc for CVE-2026-47884 — deferred to Spring Boot 4 track
conductor-oss/conductor#1722 · opened on Oct 8, 2026
Security: dependency CVEs from 2026-10-07 scan (10 critical server CVEs)
conductor-oss/conductor#1721 · opened on Oct 8, 2026
Critical CVEs in conductor/ui: 6 build-time deps pinned by react-scripts (CRA)
conductor-oss/conductor#1719 · opened on Oct 8, 2026
2
LLM Prompt Concatenation + Over-Privileged Tools Allow Injection to SSRF / SQL-Write / Exfiltration
conductor-oss/conductor#1718 · opened on Oct 8, 2026
1
Unsafe SnakeYAML new Yaml() in SkillNormalizer Enables Tag-Injection
conductor-oss/conductor#1717 · opened on Oct 8, 2026
2