12.38.0

Security

• Spring Boot upgraded from 3.5.14 to 3.5.15 to address reported CVEs.

• Netty upgraded from 4.1.134.Final to 4.1.135.Final to address reported CVEs.

New Features

• Load a zaak in a form flow

  A new zakenFormFlow bean lets form flows load a zaak from the Zaken API by its identificatie through a getZaak method that can be used in SpEL expressions (for example onOpen or onComplete). The full zaak is returned, so any of its fields can be used in subsequent steps or conditions. Access is secured with PBAC: a new Zaak resource type with a view action ensures only users authorized for the matching zaaktype can load a zaak. See Load a zaak in a form flow for details.