OpenSSL 4.1.0 is a feature release adding significant new functionality to OpenSSL.

This release incorporates the following potentially significant or incompatible changes:

• Added VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets to provide internal functions for bridging the gaps in C99 standard support that are present in MSVC 2013.

• Added optimized ML-DSA and ML-KEM NTT operations on ppc64le; optimized ML-DSA operations on x86_64; AVX-512-optimized SHAKE x4 operations for ML-DSA on x86_64; AVX-512 and VAES optimizations for AES-CBC decryption on x86_64.

• Changed tsget utility to use Net::Curl::Easy (from the Net-Curl CPAN distribution) instead of the abandoned WWW::Curl::Easy. Users who rely on tsget should install Net::Curl::Easy before upgrading.

• Dropped Windows-on-Itanium (VC-WIN64I) and Windows CE (VC-CE) targets from Configurations.

• Dropped no-ecdsa and no-ecdh options from Configure, as these options did not really disable the implementations. Use no-ec to disable the elliptic curve support.

This release adds the following new features:

• Support for DTLS 1.3 (RFC 9147). Refer to the ossl-guide-dtlsv13(7) manual page for details.

• Support for RFC 8701 GREASE (Generate Random Extensions And Sustain Extensibility).

• DTLS support in the SSL listener API.

• Support for IKEV2 KDF.

• Initial support for the Elbrus2000 (e2k) architecture.

Known issues in 4.1.0

• https://github.com/openssl/openssl/issues/32878 When a DTLS 1.3 KeyUpdate is received, all other outstanding post-handshake records are dropped from the retransmission buffer. This means post-handshake records still awaiting an ACK (such as a NewSessionTicket) will no longer be retransmitted if the original transmission is lost. A fix is in progress and planned for a future release.

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.8.3-pre.1/turso_cli-installer.sh | sh

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.8.3-pre.1/turso_cli-installer.ps1 | iex"

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

📦 Download Binaries from https://openobserve.ai/downloads

• test(autoe2e): generated E2E tests for #14742 (otable-select-cell) by @Shrinath-O2 in https://github.com/openobserve/openobserve/pull/14793
• refactor(promql): carry the scan source in ScanContext by @haohuaijin in https://github.com/openobserve/openobserve/pull/14988
• feat: typed sample-block encoding for MIDX by @hengfeiyang in https://github.com/openobserve/openobserve/pull/14986
• test: deflake 20 flaky E2E tests across Logs, Dashboards, Metrics, Traces, Reports, GeneralTests by @vamsikarthikr in https://github.com/openobserve/openobserve/pull/14968
• chore(deps): bump image-size, react-native and @react-native/metro-config in /tests/mobile-testing/apps/o2-rum-tester by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/14891
• test(autoe2e): generated E2E tests for #14805 (date-time-custom-range) by @Shrinath-O2 in https://github.com/openobserve/openobserve/pull/14840
• fix(alerts): refuse an invalid id in bulk delete before deleting anything by @ameyypawar in https://github.com/openobserve/openobserve/pull/14914
• fix: scale dashboards while on printmode by @ktx-abhay in https://github.com/openobserve/openobserve/pull/14991
• fix(dashboards): keep zero in the panel's own unit by @ameyypawar in https://github.com/openobserve/openobserve/pull/14985
• fix(rum): resolve relative stylesheet links in session replay against the recorded page by @MinaKaramApex in https://github.com/openobserve/openobserve/pull/14981
• refactor(promql): register only the table the scan source reads by @haohuaijin in https://github.com/openobserve/openobserve/pull/14998
• fix: remove beta badge from synthetics page headers by @omkarK06 in https://github.com/openobserve/openobserve/pull/14999
• test(regression): cover 11 closed logs, streams, pipeline and enrichment bugs by @neha00290 in https://github.com/openobserve/openobserve/pull/14978
• refactor(promql): stream the scan source without falling back by @haohuaijin in https://github.com/openobserve/openobserve/pull/14941
• chore(service-graph): let operators choose when to stop v1 and which engine to read by @hengfeiyang in https://github.com/openobserve/openobserve/pull/15007
• fix(promql): keep series apart when an operator runs inside a by() aggregation by @haohuaijin in https://github.com/openobserve/openobserve/pull/15004
• chore(deps): bump moment from 2.30.1 to 2.31.0 in /web by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/14993
• chore(config): raise default metrics block metadata cache to 5% of memory, max 4 GB by @hengfeiyang in https://github.com/openobserve/openobserve/pull/15010
• test: add E2E tests for metrics explorer stream list cache by @ktx-akshay in https://github.com/openobserve/openobserve/pull/15006
• fix(prompts): folder-scoped RBAC for prompts by @uddhavdave in https://github.com/openobserve/openobserve/pull/15008
• fix(login): link the OpenObserve logo to the website by @bjp232004 in https://github.com/openobserve/openobserve/pull/15024
• perf(rum): progressive session replay loading, load states and live sessions by @omkarK06 in https://github.com/openobserve/openobserve/pull/14956
• fix: ai observabilty issues by @nikhilsaikethe in https://github.com/openobserve/openobserve/pull/14994
• test(iam): click the rail's Role Overview, not the summary module by @neha00290 in https://github.com/openobserve/openobserve/pull/15021
• feat: import and export for functions by @neha00290 in https://github.com/openobserve/openobserve/pull/14713
• fix(traces): quote service-graph filters before they reach SQL by @DHRUV6029 in https://github.com/openobserve/openobserve/pull/14909
• fix(oncall): stretch schedule tab panel to fill available height by @bjp232004 in https://github.com/openobserve/openobserve/pull/15012
• fix(functions): stop AI bar from auto-opening in function editor by @bjp232004 in https://github.com/openobserve/openobserve/pull/15019
• fix(oncall): fit the on-call pages on phones and tablets by @ktx-vaidehi in https://github.com/openobserve/openobserve/pull/15033
• fix(logs): stop histogram from losing data mid-stream and on mixed breakdown responses by @bjp232004 in https://github.com/openobserve/openobserve/pull/15005
• test(dashboards): cover the panel editor unsaved-changes guard by @ktx-akshay in https://github.com/openobserve/openobserve/pull/14966
• fix(alerts): pre-fill stream type and name when cloning an alert by @bjp232004 in https://github.com/openobserve/openobserve/pull/15020
• test(iam): cover the Edit Role flows the first wave could not reach by @neha00290 in https://github.com/openobserve/openobserve/pull/15031
• fix(table): one consistent table footer with a selected count by @ktx-vaidehi in https://github.com/openobserve/openobserve/pull/15034
• fix(ai): route o2-ai requests through NATS in HA mode by @007harshmahajan in https://github.com/openobserve/openobserve/pull/15036
• fix(dashboards): show the latest value on PromQL gauge panels by @ktx-vaidehi in https://github.com/openobserve/openobserve/pull/14996
• feat(web): product analytics through the OpenObserve RUM SDK by @prabhatsharma in https://github.com/openobserve/openobserve/pull/15046
• fix(stream): make a stream settings write visible to the next read on the same node by @chaitanya-sistla in https://github.com/openobserve/openobserve/pull/15051
• fix(functions): repair an import fix-up that could not write, with E2E + API coverage by @neha00290 in https://github.com/openobserve/openobserve/pull/15043
• fix(web): RUM error triage — billing TypeError, null getAttribute, 401/400/403 handling, and cancellation noise by @bjp232004 in https://github.com/openobserve/openobserve/pull/15057
• fix(iam,login): clearer invite and sign-up flow, bind dex login state to the browser by @oasisk in https://github.com/openobserve/openobserve/pull/15053
• feat(alerts): anomaly value band on the Charts tab, with direction, window-share and band-width settings by @prabhatsharma in https://github.com/openobserve/openobserve/pull/15052
• perf(compactor): batch file_list deletes across hours when deleting stream data by @hengfeiyang in https://github.com/openobserve/openobserve/pull/15066
• fix(traces): keep CSV export columns aligned when values hold JSON by @omkarK06 in https://github.com/openobserve/openobserve/pull/15040
• feat(rum): product analytics with named events and saved funnels by @oasisk in https://github.com/openobserve/openobserve/pull/15070
• fix(short-url): open shared links under ZO_BASE_URI instead of a 404 by @DHRUV6029 in https://github.com/openobserve/openobserve/pull/15074
• fix(ai): show evaluator reasoning in annotation queues and full scorer version history by @nikhilsaikethe in https://github.com/openobserve/openobserve/pull/15055
• fix: block workflow HTTP destinations from following redirects to private addresses by @Vaibhav701161 in https://github.com/openobserve/openobserve/pull/14911
• fix(web): focus odrawer content on open by @Iflaqbhat in https://github.com/openobserve/openobserve/pull/15032
• fix(workflows): reject a non-JavaScript function at save and at run time by @ameyypawar in https://github.com/openobserve/openobserve/pull/14867
• chore(deps-dev): bump brace-expansion from 1.1.18 to 1.1.21 in /web by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/14992
• chore: secure statefulset.yaml (CWE-732) by @anupamme in https://github.com/openobserve/openobserve/pull/15063
• fix(functions): stop offering a body fix-up for failures it cannot fix by @neha00290 in https://github.com/openobserve/openobserve/pull/15069
• test(dashboards): e2e coverage for the per-panel and per-column Locale Format unit by @ktx-akshay in https://github.com/openobserve/openobserve/pull/15103
• fix(rum): search a session's traces by server arrival time when it has no replay by @omkarK06 in https://github.com/openobserve/openobserve/pull/15106
• feat: traces critical path, RED insights, span percentiles, request-scoped catalog, span→profile link and saved views by @prabhatsharma in https://github.com/openobserve/openobserve/pull/15073
• feat(logs): default-on logs features, Drill down mode, full search-term highlighting, multi-stream search-around, fail-closed redaction, trace View Logs by @prabhatsharma in https://github.com/openobserve/openobserve/pull/15086
• feat(metrics): metric detail view with breakdown, time shift, saved views and query history by @prabhatsharma in https://github.com/openobserve/openobserve/pull/15088
• fix(rum): gate optional _rumdata fields in Product Analytics and the Sessions list by @bjp232004 in https://github.com/openobserve/openobserve/pull/15107
• chore(deps): bump anthropics/claude-code-action from 1.0.235 to 1.0.240 by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/15110
• chore(deps): bump taiki-e/install-action from 2.87.21 to 2.87.22 by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/15108
• chore(deps): bump gradle/actions/setup-gradle from 6.3.0 to 6.4.0 by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/15109
• fix(pipelines): start each scheduled window where the previous one ended by @ameyypawar in https://github.com/openobserve/openobserve/pull/15042
• fix(search): refuse malformed multi-stream requests instead of panicking by @ameyypawar in https://github.com/openobserve/openobserve/pull/15030
• fix(search): fail open, not closed, when the SDR pattern manager can't initialise by @bjp232004 in https://github.com/openobserve/openobserve/pull/15125
• chore(deps): bump dompurify from 3.4.13 to 3.4.16 in /web by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/15050
• fix(migration): stop on a lost migration history; make failing migrations safe to re-run by @ameyypawar in https://github.com/openobserve/openobserve/pull/15087
• feat(rum): tag Product Analytics as Beta by @bjp232004 in https://github.com/openobserve/openobserve/pull/15126
• chore(deps): bump dtolnay/rust-toolchain from 02cb101ec7c40f2c49e1d9714d64511d8e1b74de to 7e38f4b43b4db5c8dd498af069a4f6196df1d067 by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/15111
• fix(metrics): store an OTLP sum that can go down as a gauge by @ameyypawar in https://github.com/openobserve/openobserve/pull/15113
• fix(ingest): parse RFC3339 timestamps with a 2- or 5-digit fraction and a zone by @ameyypawar in https://github.com/openobserve/openobserve/pull/15059
• test(logs): UI and API coverage for the #15086 logs changes by @neha00290 in https://github.com/openobserve/openobserve/pull/15116
• fix(compaction): keep hours outside the range when deleting by time range on local disk by @ameyypawar in https://github.com/openobserve/openobserve/pull/15045
• fix(traces): keep charts on the searched window and align the error state with Logs by @omkarK06 in https://github.com/openobserve/openobserve/pull/15130
• fix(metrics): correct OTLP sums that can go down still stored as counters by @hengfeiyang in https://github.com/openobserve/openobserve/pull/15134
• fix(rum): resync the date picker after mount and exclude synthetic sessions from the Sessions KPI by @bjp232004 in https://github.com/openobserve/openobserve/pull/15132
• fix(rum): Product Analytics time-picker label and Paths anchor-under-Clicks fix by @bjp232004 in https://github.com/openobserve/openobserve/pull/15141
• fix(ui): give toolbar menu triggers room for their dropdown caret by @omkarK06 in https://github.com/openobserve/openobserve/pull/15137
• chore(deps): bump @vue/server-renderer and vue in /web by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/15118
• chore(deps): bump compression from 1.8.1 to 1.8.2 in /web by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/15119
• chore(deps-dev): bump joi from 18.2.8 to 18.2.9 in /web by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/15120
• chore(deps): bump proxy-addr from 2.0.7 to 2.0.8 in /web by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/15117
• docs: document external contributor pull request limit to 2 by @hengfeiyang in https://github.com/openobserve/openobserve/pull/15149
• chore(deps): bump source-map-js from 1.2.1 to 1.2.2 in /web by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/15121
• fix(alerts): clear stored anomaly budget when switching to band sensitivity by @bjp232004 in https://github.com/openobserve/openobserve/pull/15151
• fix(anomaly): treat a rejected webhook send as undelivered, not delivered by @bjp232004 in https://github.com/openobserve/openobserve/pull/15154
• fix: bind gRPC ingest org, redact audited request bodies, record search redaction skips by @oasisk in https://github.com/openobserve/openobserve/pull/15157
• feat(stream): refuse non-widening type changes in update_fields by @ameyypawar in https://github.com/openobserve/openobserve/pull/15047
• chore(deps): bump shell-quote from 1.10.0 to 1.12.0 in /tests/mobile-testing/apps/o2-rum-tester by @dependabot[bot] in https://github.com/openobserve/openobserve/pull/15153
• test(traces): regression coverage for the search window and error state fixes in #15130 by @vamsikarthikr in https://github.com/openobserve/openobserve/pull/15136
• fix(search): clamp _around page size so small or invalid sizes stop expanding to the default limit by @gwself in https://github.com/openobserve/openobserve/pull/15143
• test(logs): fix the false-green paths in the #15086 coverage, and move it onto logsPage by @neha00290 in https://github.com/openobserve/openobserve/pull/15138
• fix(anomaly): pass the rejected destination's status into alert history by @Loaki07 in https://github.com/openobserve/openobserve/pull/15158
• feat(ingestion): add GPU → NVIDIA DCGM Exporter recommended data source by @chaitanya-sistla in https://github.com/openobserve/openobserve/pull/14903
• fix(alerts): keep destination preview buttons readable in dark mode by @nikhilsaikethe in https://github.com/openobserve/openobserve/pull/15094
• fix(promql): quantile interpolation keeps infinite bounds like Prometheus by @gwself in https://github.com/openobserve/openobserve/pull/15142
• test: E2E regression coverage for variables sharing a name prefix (#14479) by @ktx-akshay in https://github.com/openobserve/openobserve/pull/15165
• fix(metrics): expose index cache misses and partial hits by @hengfeiyang in https://github.com/openobserve/openobserve/pull/15164
• test(rum): end-to-end coverage for Product Analytics and its schema-state fixes by @vamsikarthikr in https://github.com/openobserve/openobserve/pull/15131
• chore: remove internal README files from source directories by @hengfeiyang in https://github.com/openobserve/openobserve/pull/15167
• fix(alerts): float selected destinations and workflows to the top by @nikhilsaikethe in https://github.com/openobserve/openobserve/pull/15095
• fix: install the cipher master key at startup and ack undecodable on-call queue messages by @Subhra264 in https://github.com/openobserve/openobserve/pull/15160
• fix(alerts): hide creates incident toggle when incidents is off by @nikhilsaikethe in https://github.com/openobserve/openobserve/pull/15101
• fix(dashboard): put the saved VRL function picker in a toolbar under the editor by @ktx-akshay in https://github.com/openobserve/openobserve/pull/14578
• fix(alerts): add preview and test for custom web hook destinations by @nikhilsaikethe in https://github.com/openobserve/openobserve/pull/15102
• fix(alerts): keep alert grouping batches per org and stop the inline flush from deadlocking by @hengfeiyang in https://github.com/openobserve/openobserve/pull/15161
• fix: reject malformed OTLP profile dictionaries by @hengfeiyang in https://github.com/openobserve/openobserve/pull/15173
• fix(traces): quote stream name and trace id in trace SQL by @prabhatsharma in https://github.com/openobserve/openobserve/pull/15155
• feat: add Infra Kubernetes 2 cluster browser and map by @prabhatsharma in https://github.com/openobserve/openobserve/pull/15175
• fix(ai): route AI chat to the RCA agent only past the RCA endpoint checks by @prabhatsharma in https://github.com/openobserve/openobserve/pull/15156
• fix: tighten input validation, auth and outbound request checks by @oasisk in https://github.com/openobserve/openobserve/pull/15054
• feat(traces): latency heatmap triage loop with Drill down by @prabhatsharma in https://github.com/openobserve/openobserve/pull/15176
• fix(traces): fit the waterfall axis to the trace, not to its RUM view by @MinaKaramApex in https://github.com/openobserve/openobserve/pull/15041

• @Iflaqbhat made their first contribution in https://github.com/openobserve/openobserve/pull/15032
• @anupamme made their first contribution in https://github.com/openobserve/openobserve/pull/15063
• @gwself made their first contribution in https://github.com/openobserve/openobserve/pull/15143

Full Changelog: https://github.com/openobserve/openobserve/compare/v1.1.0-rc1...v1.1.0-rc2

• [2dc4638e85] - Revert "build: toggle doc-kit verbosity based on V" (Antoine du Hamel)
• [3febbc54ec] - Revert "build, doc: move to redesign" (Antoine du Hamel)
• [173250e2e7] - Revert "tools: bump the doc group in /tools/doc with 4 updates" (Antoine du Hamel)