米舟开源
What's Changed
🔨 Other Changes
- #4255 - Support rollback at engine level (#4256) by @jesty in https://github.com/Activiti/Activiti/pull/4284
Full Changelog: https://github.com/Activiti/Activiti/compare/7.9.0-rc.40...7.9.1-rc.1
This is a security bugfix release containing only one PR: #3139
This adds a limit to the depth of grammar rules, to prevent stack overflow.
Full details can be found here: #3112
What's Changed
- Backported deep DOS parse attack into 17.x branch by @bbakerman in https://github.com/graphql-java/graphql-java/pull/3139
Full Changelog: https://github.com/graphql-java/graphql-java/compare/v17.4...v17.5
This is a security bugfix release containing only one PR: #3144
This adds a limit to the depth of grammar rules, to prevent stack overflow.
Full details can be found here: #3112
What's Changed
- Add backport of rule depth rule to 18.x by @dondonz in https://github.com/graphql-java/graphql-java/pull/3144
Full Changelog: https://github.com/graphql-java/graphql-java/compare/v18.3...v18.4
⭐ New Features
- Introduce Utility Method to Replace Default Table Name #2256
🔨 Dependency Upgrades
- Update to testcontainers-bom:1.17.6 #2277
- Update to spring-security-bom:6.0.2 #2276
- Update to spring-data-bom:2022.0.4 #2275
- Update to org.springframework:spring-framework-bom:6.0.7 #2274
- Update to jackson-bom:2.14.2 #2273
- Update to reactor-bom:2022.0.5 #2272
❤️ Contributors
Thank you to all the contributors who worked on this release:
@marcusdacoregio
🐞 Bug Fixes
- Update Redis example documentation #2229
- 3.0.0 is not showing on reference documentation #2223
- In 3.0.0 HeaderHttpSessionIdResolver resolveSessionIds method have System.out.println #2215
🔨 Dependency Upgrades
- Update org.mongodb to 4.8.2 #2271
- Update to spring-security-bom:6.0.2 #2270
- Update to spring-data-bom:2022.0.3 #2269
- Update to spring-framework-bom:6.0.6 #2268
- Update to junit-bom:5.9.2 #2267
- Update to jackson-bom:2.14.2 #2266
- Update reactor-bom to 2022.0.5 #2265
❤️ Contributors
Thank you to all the contributors who worked on this release:
@marcel-wollschlaeger
⭐ New Features
- Polish related to testcontainers #2081
🐞 Bug Fixes
🔨 Dependency Upgrades
- Update spring-security-bom to 5.7.7 #2264
- Update spring-data-bom to 2021.2.9 #2263
- Update spring-framework-bom to 5.3.26 #2262
- Update to reactor-bom 2020.0.3 #2260
- Update to mariadb-java-client 2.7.8 #2255
- Update to org.postgresql:postgresql:42.3.8 #2250
- Update to MongoDB 4.6.1 #2249
- Update to Mockito 4.5.1 #2248
- Update to mariadb-java-client 3.0.10 #2247
- Update to mysql-connector-java 8.0.32 #2246
- Update to lettuce 6.1.10.RELEASE #2245
- Update to HikariCP:4.0.3 #2244
- Update to com.ibm.db2:jcc:11.5.8.0 #2243
- Update to testcontainers 1.17.6 #2242
- Update to Spring Security 5.7.6 #2241
- Update to Spring Data 20201.2.7 #2240
- Update to Spring Framework 5.3.25 #2239
- Update to Jackson 2.13.4.20221013 #2238
- Update to Reactor 2020.0.27 #2237
- Update to Spring Boot 2.7.8 #2236
❤️ Contributors
Thank you to all the contributors who worked on this release:
@KaoruMuta, @bkakadiya, and @eddumelendez
Fixes
- fix log feign response stream close bug. commit log
- remove the secondary report. commit log
- optimize instance circuit beaker. commit log
Contributors
Thanks to the contributors who participated in this release!
@ShanyouYu-Sean
@SkyeBeFreeman
How to upgrade
1.10.2-2022.0.1 is compatible version from the previous corresponding version, so just upgrade spring-cloud-tencent-dependencies version to it. If you need to change the Spring Cloud version, please refer to the documentation Version Management to modify other related dependent versions synchronously.
Fixes
- fix log feign response stream close bug. commit log
- remove the secondary report. commit log
- optimize instance circuit beaker. commit log
Contributors
Thanks to the contributors who participated in this release!
@ShanyouYu-Sean
@SkyeBeFreeman
How to upgrade
1.10.2-2021.0.6 is compatible version from the previous corresponding version, so just upgrade spring-cloud-tencent-dependencies version to it. If you need to change the Spring Cloud version, please refer to the documentation Version Management to modify other related dependent versions synchronously.
Fixes
- fix log feign response stream close bug. commit log
- remove the secondary report. commit log
- optimize instance circuit beaker. commit log
Contributors
Thanks to the contributors who participated in this release!
@ShanyouYu-Sean
@SkyeBeFreeman
How to upgrade
1.10.2-2020.0.5 is compatible version from the previous corresponding version, so just upgrade spring-cloud-tencent-dependencies version to it. If you need to change the Spring Cloud version, please refer to the documentation Version Management to modify other related dependent versions synchronously.
This is a feature and bugfix release. There are no breaking changes in this release. This release continues to use Java 8.
Thanks to everyone in the community for helping us with this release. Thanks for your PRs, issues, and discussions!
Security fix
This release includes a security fix #3112 which adds a limit to the depth of grammar rules, to prevent stack overflow.
Highlights
#3095 improves resiliency to class loader problems with LambdaMetafactory.
#3049 adds an extensions builder and merger.
Release policy
We have formalised our release schedule to give the community a better idea of when to expect releases, what will be contained within them, and when important fixes will be backported. See the full details at https://www.graphql-java.com/blog/release-policy
What's Changed
- docs: update badges for v20 release by @setchy in https://github.com/graphql-java/graphql-java/pull/3047
- Update FieldValidationInstrumentation.java by @kfwerf in https://github.com/graphql-java/graphql-java/pull/3066
- Update vulnerability reporting instructions by @dondonz in https://github.com/graphql-java/graphql-java/pull/3070
- Fix extend schema directives ANTLR rule by @dondonz in https://github.com/graphql-java/graphql-java/pull/3071
- Allow users to disable MultiSourceReader trackData through ParserOptions by @AntaresS in https://github.com/graphql-java/graphql-java/pull/3062
- Add missing getter and fix name consistency by @gnawf in https://github.com/graphql-java/graphql-java/pull/3073
- use toolchain to specify the java version by @andimarek in https://github.com/graphql-java/graphql-java/pull/3075
- Fix isNameChanged by @gnawf in https://github.com/graphql-java/graphql-java/pull/3076
- Update instrumentation example in documentation by @dondonz in https://github.com/graphql-java/graphql-java/pull/3078
- Reuse ExecutionStrategyInstrumentationContext.NOOP in DataLoaderDispatcherInstrumentation by @dfa1 in https://github.com/graphql-java/graphql-java/pull/3068
- Add missing this keyword for readability by @cookieMr in https://github.com/graphql-java/graphql-java/pull/3067
- defaulting the deprecated methods in Coercing by @bbakerman in https://github.com/graphql-java/graphql-java/pull/3063
- Add missing detail by @gnawf in https://github.com/graphql-java/graphql-java/pull/3079
- Updating the JavaDoc http links by @bbakerman in https://github.com/graphql-java/graphql-java/pull/3083
- An Extensions Builder by @bbakerman in https://github.com/graphql-java/graphql-java/pull/3049
- Use ImmutableList.builderWithExpectedSize in ImmutableKit.mapAndDropNulls too by @dfa1 in https://github.com/graphql-java/graphql-java/pull/3081
- Resolve TypeReferences in schema applied directives by @kaqqao in https://github.com/graphql-java/graphql-java/pull/3054
- Remove sun.misc.* from MANIFEST.MF by @dondonz in https://github.com/graphql-java/graphql-java/pull/3091
- Replace javax nullable annotations with JetBrains equivalent by @dondonz in https://github.com/graphql-java/graphql-java/pull/3093
- Ensured that the MANIFEST.MF files is the first entry in the JAR File by @schaefa in https://github.com/graphql-java/graphql-java/pull/3097
- Fix type change and directive deletion problems in schema diffing by @gnawf in https://github.com/graphql-java/graphql-java/pull/3102
- Handle enum value rename by @gnawf in https://github.com/graphql-java/graphql-java/pull/3103
- Bugfix: do not use default operation name types if not included in schema definition block by @dondonz in https://github.com/graphql-java/graphql-java/pull/3088
- Adding ExtensionsBuilder in the graphql context by default by @bbakerman in https://github.com/graphql-java/graphql-java/pull/3085
- Meta Lambda failures - make the code more resilient to class loader challenges by @bbakerman in https://github.com/graphql-java/graphql-java/pull/3095
- Gracefully returning null in cases of UnresolvedTypeException by @ahmadizm in https://github.com/graphql-java/graphql-java/pull/3122
- Add dependabot configuration by @yeikel in https://github.com/graphql-java/graphql-java/pull/3115
- Bump org.jetbrains:annotations from 23.0.0 to 24.0.1 by @dependabot in https://github.com/graphql-java/graphql-java/pull/3125
- Remove unused dependencies by @dondonz in https://github.com/graphql-java/graphql-java/pull/3132
- Bump actions/checkout from 1 to 3 by @dependabot in https://github.com/graphql-java/graphql-java/pull/3126
- Bump google-github-actions/auth from 0.4.0 to 1.0.0 by @dependabot in https://github.com/graphql-java/graphql-java/pull/3129
- Bump org.codehaus.groovy:groovy from 3.0.9 to 3.0.16 by @dependabot in https://github.com/graphql-java/graphql-java/pull/3131
- Add manual stop on schema diffing algorithm by @gnawf in https://github.com/graphql-java/graphql-java/pull/3119
- Preventing stack overflow exceptions via limiting the depth of the parser rules by @bbakerman in https://github.com/graphql-java/graphql-java/pull/3112
- UniqueObjectFieldName validation rule (#1806) by @ashatch in https://github.com/graphql-java/graphql-java/pull/3094
New Contributors
- @kfwerf made their first contribution in https://github.com/graphql-java/graphql-java/pull/3066
- @AntaresS made their first contribution in https://github.com/graphql-java/graphql-java/pull/3062
- @ahmadizm made their first contribution in https://github.com/graphql-java/graphql-java/pull/3122
- @yeikel made their first contribution in https://github.com/graphql-java/graphql-java/pull/3115
- @dependabot made their first contribution in https://github.com/graphql-java/graphql-java/pull/3125
- @ashatch made their first contribution in https://github.com/graphql-java/graphql-java/pull/3094
Full Changelog: https://github.com/graphql-java/graphql-java/compare/v20.0...v20.1