giantswarm / kyverno-policy-operator

Apache License 2.0
0 stars 0 forks source link

Update misc modules - autoclosed #16

Closed renovate[bot] closed 11 months ago

renovate[bot] commented 11 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
github.com/gofiber/fiber/v2 replace minor v2.49.2 -> v2.50.0
github.com/nats-io/jwt replace patch v2.5.0+incompatible -> v2.5.2
github.com/nats-io/nats-server/v2 replace minor v2.9.22 -> v2.10.3
golang stage minor 1.20 -> 1.21

Release Notes

gofiber/fiber (github.com/gofiber/fiber/v2) ### [`v2.50.0`](https://togithub.com/gofiber/fiber/releases/tag/v2.50.0) [Compare Source](https://togithub.com/gofiber/fiber/compare/v2.49.2...v2.50.0) #### ❗ Breaking Changes - Change signatures of GetReqHeaders and GetRespHeaders ([#​2650](https://togithub.com/gofiber/fiber/issues/2650)) > To allow single and list values under headers according to the [rfc standard](https://datatracker.ietf.org/doc/html/rfc9110#section-5.2) ```diff - func (c *Ctx) GetReqHeaders() map[string]string + func (c *Ctx) GetReqHeaders() map[string][]string ``` ```diff - func (c *Ctx) GetRespHeaders() map[string]string + func (c *Ctx) GetRespHeaders() map[string][]string ``` #### 👮 Security
Middleware/csrf: Token Vulnerability (GHSA-mv73-f69x-444p, GHSA-94w9-97p3-p368) https://docs.gofiber.io/api/middleware/csrf 🚀 Improvements to the CSRF middleware: - Added support for single-use tokens through the `SingleUseToken` configuration option. - Optional integration with GoFiber session middleware through the `Session` and `SessionKey` configuration options. - Introduction of origin checks for HTTPS connections to verify referer headers. - Implementation of a Double Submit Cookie approach for CSRF token generation and validation when used without `Session`. - Enhancement of error handling with more descriptive error messages. - The documentation for the CSRF middleware has been enhanced with the addition of the new options and best practices to improve security. Thank you [@​sixcolors](https://togithub.com/sixcolors)
#### 🚀 New - Cookie parser ([#​2656](https://togithub.com/gofiber/fiber/issues/2656)) https://docs.gofiber.io/api/ctx#cookieparser ```go // Field names should start with an uppercase letter type Person struct { Name string `cookie:"name"` Age int `cookie:"age"` Job bool `cookie:"job"` } // Example route app.Get("/", func(c *fiber.Ctx) error { p := new(Person) // This method is similar to BodyParser, but for cookie parameters if err := c.CookieParser(p); err != nil { return err } log.Println(p.Name) // Joseph log.Println(p.Age) // 23 log.Println(p.Job) // true }) ``` - Middleware/cors: Allow disabling caching in preflight requests ([#​2649](https://togithub.com/gofiber/fiber/issues/2649)) https://docs.gofiber.io/api/middleware/cors#config ```go // To disable caching completely, pass MaxAge value negative. It will set the Access-Control-Max-Age header 0. app.Use(cors.New(cors.Config{MaxAge: -1})) ``` - Middleware/session: Add Reset method to Session struct in session middleware ([#​2654](https://togithub.com/gofiber/fiber/issues/2654)) https://docs.gofiber.io/api/middleware/session#signatures ```go // Provide more flexibility in session management, especially in scenarios like repeated user logins func (s *Session) Reset() error ``` Example usage: ```go // Initialize default config // This stores all of your app's sessions store := session.New() app.Post("/login", func(c *fiber.Ctx) error { // Get session from storage sess, err := store.Get(c) if err != nil { panic(err) } // ... validate login ... // Check if the session is fresh if !sess.Fresh() { // If the session is not fresh, reset it if err := sess.Reset(); err != nil { panic(err) } } // Set new session data sess.Set("user_id", user.ID) // Save session if err := sess.Save(); err != nil { panic(err) } return c.SendString(fmt.Sprintf("Welcome %v", user.ID)) }) ``` - Middleware/session: Add Delete method to Store struct in session middleware ([#​2655](https://togithub.com/gofiber/fiber/issues/2655)) https://docs.gofiber.io/api/middleware/session#signatures ```go // Provide more control over individual session management, especially in scenarios // like administrator-enforced user logout or user-initiated logout from a specific device session func (s *Store) Delete(id string) error ``` Example usage: ```go app.Post("/admin/session/:id/logout", func(c *fiber.Ctx) error { // Get session id from request sessionID := c.Params("id") // Delete the session if err := store.Delete(sessionID); err != nil { return c.Status(500).SendString(err.Error()) } return c.SendString("Logout successful") }) ``` #### 🧹 Updates - Middleware/filesystem: Improve status for SendFile ([#​2664](https://togithub.com/gofiber/fiber/issues/2664)) - Middleware/filesystem: Set response code ([#​2632](https://togithub.com/gofiber/fiber/issues/2632)) - Refactor Ctx.Method func to improve code readability ([#​2647](https://togithub.com/gofiber/fiber/issues/2647)) #### 🛠️ Maintenance - Fix loop variable captured by func literal ([#​2660](https://togithub.com/gofiber/fiber/issues/2660)) - Run gofumpt and goimports ([#​2662](https://togithub.com/gofiber/fiber/issues/2662)) - Use utils.AssertEqual instead of t.Fatal on some tests ([#​2653](https://togithub.com/gofiber/fiber/issues/2653)) - Apply go fix ./... with latest version of go in repository ([#​2661](https://togithub.com/gofiber/fiber/issues/2661)) - Bump github.com/valyala/fasthttp from 1.49.0 to 1.50.0 ([#​2634](https://togithub.com/gofiber/fiber/issues/2634)) - Bump golang.org/x/sys from 0.12.0 to 0.13.0 ([#​2665](https://togithub.com/gofiber/fiber/issues/2665)) #### 🐛 Fixes - Path checking on route naming ([#​2676](https://togithub.com/gofiber/fiber/issues/2676)) - Incorrect log depth when use log.WithContext ([#​2666](https://togithub.com/gofiber/fiber/issues/2666)) - Jsonp ignoring custom json encoder ([#​2658](https://togithub.com/gofiber/fiber/issues/2658)) - PassLocalsToView when bind parameter is nil ([#​2651](https://togithub.com/gofiber/fiber/issues/2651)) - Parse ips return invalid in abnormal case ([#​2642](https://togithub.com/gofiber/fiber/issues/2642)) - Bug parse custom header ([#​2638](https://togithub.com/gofiber/fiber/issues/2638)) - Middleware/adaptor: Reduce memory usage by replacing io.ReadAll() with io.Copy() ([#​2637](https://togithub.com/gofiber/fiber/issues/2637)) - Middleware/idempotency: Nil pointer dereference issue on idempotency middleware ([#​2668](https://togithub.com/gofiber/fiber/issues/2668)) #### 📚 Documentation - Incorrect status code source ([#​2667](https://togithub.com/gofiber/fiber/issues/2667)) - Middleware/requestid: Typo in requestid.md ([#​2675](https://togithub.com/gofiber/fiber/issues/2675)) - Middleware/cors: Update docs to better explain AllowOriginsFunc ([#​2652](https://togithub.com/gofiber/fiber/issues/2652)) **Full Changelog**: https://github.com/gofiber/fiber/compare/v2.49.2...v2.50.0 Thank you [@​KaptinLin](https://togithub.com/KaptinLin), [@​Skyenought](https://togithub.com/Skyenought), [@​cuipeiyu](https://togithub.com/cuipeiyu), [@​dairlair](https://togithub.com/dairlair), [@​efectn](https://togithub.com/efectn), [@​gaby](https://togithub.com/gaby), [@​geerew](https://togithub.com/geerew), [@​huykn](https://togithub.com/huykn), [@​jimmyl02](https://togithub.com/jimmyl02), [@​joey1123455](https://togithub.com/joey1123455), [@​joshlarsen](https://togithub.com/joshlarsen), [@​jscappini](https://togithub.com/jscappini), [@​peczenyj](https://togithub.com/peczenyj) and [@​sixcolors](https://togithub.com/sixcolors) for making this update possible.
nats-io/jwt (github.com/nats-io/jwt) ### [`v2.5.2`](https://togithub.com/nats-io/jwt/releases/tag/v2.5.2) [Compare Source](https://togithub.com/nats-io/jwt/compare/v2.5.2...v2.5.2) #### What's Changed - \[FEAT] added convenience API GetTags() to Account/Operator/UserClaims by [@​aricart](https://togithub.com/aricart) in [https://github.com/nats-io/jwt/pull/208](https://togithub.com/nats-io/jwt/pull/208) **Full Changelog**: https://github.com/nats-io/jwt/compare/v2.5.1...v2.5.2 ### [`v2.5.2+incompatible`](https://togithub.com/nats-io/jwt/compare/v2.5.1...v2.5.2) [Compare Source](https://togithub.com/nats-io/jwt/compare/v2.5.1...v2.5.2) ### [`v2.5.1`](https://togithub.com/nats-io/jwt/releases/tag/v2.5.1) [Compare Source](https://togithub.com/nats-io/jwt/compare/v2.5.0...v2.5.1) #### What's Changed - Sort Signing Keys on Marshal by [@​sethjback](https://togithub.com/sethjback) in [https://github.com/nats-io/jwt/pull/203](https://togithub.com/nats-io/jwt/pull/203) - Add issue forms by [@​bruth](https://togithub.com/bruth) in [https://github.com/nats-io/jwt/pull/204](https://togithub.com/nats-io/jwt/pull/204) - Fix issue config discussions link by [@​bruth](https://togithub.com/bruth) in [https://github.com/nats-io/jwt/pull/205](https://togithub.com/nats-io/jwt/pull/205) #### New Contributors - [@​sethjback](https://togithub.com/sethjback) made their first contribution in [https://github.com/nats-io/jwt/pull/203](https://togithub.com/nats-io/jwt/pull/203) - [@​bruth](https://togithub.com/bruth) made their first contribution in [https://github.com/nats-io/jwt/pull/204](https://togithub.com/nats-io/jwt/pull/204) **Full Changelog**: https://github.com/nats-io/jwt/compare/v2.5.0...v2.5.1
nats-io/nats-server (github.com/nats-io/nats-server/v2) ### [`v2.10.3`](https://togithub.com/nats-io/nats-server/releases/tag/v2.10.3) [Compare Source](https://togithub.com/nats-io/nats-server/compare/v2.10.2...v2.10.3) #### Changelog Refer to the [2.10 Upgrade Guide](https://docs.nats.io/release-notes/whats_new/whats_new\_210) for backwards compatibility notes with 2.9.x. ##### Go Version - 1.21.3 ##### Fixed JetStream - Reclaim more space with streams having many interior deletes during compaction with compression enabled ([#​4645](https://togithub.com/nats-io/nats-server/issues/4645)) - Fixed updating a non unique consumer on workqueue stream not returning an error. Thanks to [@​mdawar](https://togithub.com/mdawar) for the contribution ([#​4654](https://togithub.com/nats-io/nats-server/issues/4654)) - Stream / KV lookups fail after decreasing history size ([#​4656](https://togithub.com/nats-io/nats-server/issues/4656)) - Only mark fs as dirty vs full write on mb compaction ([#​4657](https://togithub.com/nats-io/nats-server/issues/4657)) MQTT - Fix crash in MQTT layer with outgoing PUBREL header ([#​4646](https://togithub.com/nats-io/nats-server/issues/4646)) ##### Complete Changes ### [`v2.10.2`](https://togithub.com/nats-io/nats-server/releases/tag/v2.10.2) [Compare Source](https://togithub.com/nats-io/nats-server/compare/v2.10.1...v2.10.2) #### Changelog ##### Downgrade compatibility note 2.10.x brings on-disk storage changes which bring significant performance improvements. Upgrade existing server versions will handle the new storage format transparently. However, if a downgrade from 2.10.x occurs, the old version will not understand the format on disk with the exception 2.9.22 and any subsequent patch releases for 2.9. So if you upgrade from 2.9.x to 2.10.0 and then need to downgrade for some reason, it must be back to 2.9.22+ to ensure the stream data can be read correctly. ##### Go Version - 1.21.2 ##### Dependencies - github.com/nats-io/nats.go v1.30.2 ##### Added Profiling - Add `prof_block_rate` config option for configuring the block profile ([#​4587](https://togithub.com/nats-io/nats-server/issues/4587)) - Add more pprof labels to consumers, sources, and mirrors ([#​4609](https://togithub.com/nats-io/nats-server/issues/4609)) ##### Improved Core - Reduce contention when pattern matching subjects when the sublist cache is disabled ([#​4586](https://togithub.com/nats-io/nats-server/issues/4586)) - Various service import reply optimizations ([#​4591](https://togithub.com/nats-io/nats-server/issues/4591)) - Remove unnecessary lock on subscription list if cache is disabled ([#​4594](https://togithub.com/nats-io/nats-server/issues/4594)) Docs - Fix links in various repo markdown files ([#​4590](https://togithub.com/nats-io/nats-server/issues/4590)) Thanks to [@​jdhenke](https://togithub.com/jdhenke) for the contribution! Leafnodes - Set S2 writer concurrency to 1 rather than the default of GOMAXPROCS to improve performance ([#​4570](https://togithub.com/nats-io/nats-server/issues/4570)) JetStream - Make install snapshot errors rate limited when catching up ([#​4574](https://togithub.com/nats-io/nats-server/issues/4574)) - Log a warning on reset if bad stream state is detected ([#​4583](https://togithub.com/nats-io/nats-server/issues/4583)) - Change some contended locks to atomic swap operations ([#​4585](https://togithub.com/nats-io/nats-server/issues/4585)) - Log a warning if filestore recovery fails on the happy path ([#​4599](https://togithub.com/nats-io/nats-server/issues/4599)) - Ensure concurrent stream of the same stream does not return not found ([#​4600](https://togithub.com/nats-io/nats-server/issues/4600)) - Add additional markers for indicating unflushed state ([#​4601](https://togithub.com/nats-io/nats-server/issues/4601)) - Log a warning when subject skew is detected in the filestore ([#​4606](https://togithub.com/nats-io/nats-server/issues/4606)) - Reduce contention for a high number of connections in JetStream enabled account ([#​4613](https://togithub.com/nats-io/nats-server/issues/4613)) - Reduce contention in the consumer info API ([#​4615](https://togithub.com/nats-io/nats-server/issues/4615)) - Reduce contention and increase throughput of replica synchronization ([#​4621](https://togithub.com/nats-io/nats-server/issues/4621)) Systemd - Update systemd scripts to use SIGUSR2 (lame duck model) for shutdown ([#​4603](https://togithub.com/nats-io/nats-server/issues/4603)) WebSocket - Minimize memory growth for compressed WebSocket connections ([#​4620](https://togithub.com/nats-io/nats-server/issues/4620)) - Significantly reduce allocations in WebSocket interface ([#​4623](https://togithub.com/nats-io/nats-server/issues/4623)) ##### Fixed Accounts - Fix inversion of lock on startup when setting up the account resolver ([#​4588](https://togithub.com/nats-io/nats-server/issues/4588)) - Prevent bypassing authorization block when enabling system account access in accounts block ([#​4605](https://togithub.com/nats-io/nats-server/issues/4605)) Thanks to [@​alexherington](https://togithub.com/alexherington) for the report! Leafnodes - Prevent a leafnode cluster from receiving a message multiple times in a queue subscription ([#​4578](https://togithub.com/nats-io/nats-server/issues/4578)) Thanks to [@​pcsegal](https://togithub.com/pcsegal) for the report! JetStream - Fix possible panic due to message block unlock occurring prematurely ([#​4571](https://togithub.com/nats-io/nats-server/issues/4571)) - Guard against an accounting error resulting in a negative message count ([#​4575](https://togithub.com/nats-io/nats-server/issues/4575)) - Skip enabling direct gets if no commits ([#​4576](https://togithub.com/nats-io/nats-server/issues/4576)) - In lame duck mode, shutdown JetStream at the start to signal transfer of leadership if the leader ([#​4579](https://togithub.com/nats-io/nats-server/issues/4579)) - Fix possible stream assignment race condition ([#​4589](https://togithub.com/nats-io/nats-server/issues/4589)) - Fix race condition during leader failover scenarios resulting in potential duplicate messages being sourced ([#​4592](https://togithub.com/nats-io/nats-server/issues/4592)) - Respond with “not found” for consumer info if consumer is closed ([#​4610](https://togithub.com/nats-io/nats-server/issues/4610)) - Prevent processing of consumer assignments after JetStream shutdown occurs ([#​4625](https://togithub.com/nats-io/nats-server/issues/4625)) - Fix possibly lookup misses when MaxMsgsPerSubject=1 leading to excess messages in stream ([#​4631](https://togithub.com/nats-io/nats-server/issues/4631)) MQTT - Fix PUBREL header incompatibility ([#​4616](https://togithub.com/nats-io/nats-server/issues/4616)) Routes - Fix potential of pinned accounts not establishing a route on connect ([#​4602](https://togithub.com/nats-io/nats-server/issues/4602)) ##### Complete Changes ### [`v2.10.1`](https://togithub.com/nats-io/nats-server/releases/tag/v2.10.1) [Compare Source](https://togithub.com/nats-io/nats-server/compare/v2.10.0...v2.10.1) #### Changelog ##### Downgrade compatibility note 2.10.x brings on-disk storage changes which bring significant performance improvements. Upgrade existing server versions will handle the new storage format transparently. However, if a downgrade from 2.10.x occurs, the old version will not understand the format on disk with the exception 2.9.22 and any subsequent patch releases for 2.9. So if you upgrade from 2.9.x to 2.10.0 and then need to downgrade for some reason, it must be back to 2.9.22+ to ensure the stream data can be read correctly. ##### Go Version - 1.21.1 ##### Fixed Leafnode - Fix TLS handshake being prevented if remote (leaf) does not have a TLS block configured ([#​4565](https://togithub.com/nats-io/nats-server/issues/4565)) JetStream - Ensure a single filter in new consumer SubjectFilters or stream SubjectTransforms block uses the extended consumer subject format as it did with SubjectFilter ([#​4564](https://togithub.com/nats-io/nats-server/issues/4564)) - Ensure stream-specified consumer limits are correctly applied in combination with the explicit ack policy ([#​4567](https://togithub.com/nats-io/nats-server/issues/4567)) ##### Complete Changes ### [`v2.10.0`](https://togithub.com/nats-io/nats-server/releases/tag/v2.10.0) [Compare Source](https://togithub.com/nats-io/nats-server/compare/v2.9.23...v2.10.0) #### Changelog ##### Downgrade compatibility note 2.10.0 brings on-disk storage changes which bring significant performance improvements. Upgrade existing server versions will handle the new storage format transparently. However, if a downgrade from 2.10.0 occurs, the old version will not understand the format on disk with the exception 2.9.22 and any subsequent patch releases for 2.9. So if you upgrade from 2.9.x to 2.10.0 and then need to downgrade for some reason, it must be back to 2.9.22+ to ensure the stream data can be read correctly. ##### Go Version - 1.21.1 ##### Dependencies - github.com/nats-io/nats.go v1.29.0 - github.com/nats-io/jwt/v2 v2.5.2 - github.com/nats-io/nkeys v0.4.5 - github.com/klauspost/compress v1.17.0 - golang.org/x/crypto v0.13.0 ##### Added Accounts - Add `$SYS.REQ.USER.INFO` NATS endpoint for user info ([#​3671](https://togithub.com/nats-io/nats-server/issues/3671)) Auth - Authorization callout extension for delegating to external auth providers ([#​3719](https://togithub.com/nats-io/nats-server/issues/3719), [#​3784](https://togithub.com/nats-io/nats-server/issues/3784), [#​3799](https://togithub.com/nats-io/nats-server/issues/3799), [#​3864](https://togithub.com/nats-io/nats-server/issues/3864), [#​3987](https://togithub.com/nats-io/nats-server/issues/3987), [#​4501](https://togithub.com/nats-io/nats-server/issues/4501), [#​4544](https://togithub.com/nats-io/nats-server/issues/4544)) Builds - Add early build support for NetBSD ([#​3526](https://togithub.com/nats-io/nats-server/issues/3526)) Thanks to [@​MatthiasPetermann](https://togithub.com/MatthiasPetermann) for the contribution! - Add early build support for IBM z/OS ([#​4209](https://togithub.com/nats-io/nats-server/issues/4209)) Thanks to [@​v1gnesh](https://togithub.com/v1gnesh) for the contribution! Cluster - Multiple routes and ability to have per-account routes to reduce head-of-line blocking in clustered setups ([#​4001](https://togithub.com/nats-io/nats-server/issues/4001), [#​4183](https://togithub.com/nats-io/nats-server/issues/4183), [#​4414](https://togithub.com/nats-io/nats-server/issues/4414)) - Support for S2 compression of traffic over route connections ([#​4115](https://togithub.com/nats-io/nats-server/issues/4115), [#​4137](https://togithub.com/nats-io/nats-server/issues/4137)) Config - Reload server config by sending a message in the system account to `$SYS.REQ.SERVER.{server-id}.RELOAD` ([#​4307](https://togithub.com/nats-io/nats-server/issues/4307)) Embedded - Add `ConnectionDeadline` field to `User` to force server disconnect after deadline ([#​3580](https://togithub.com/nats-io/nats-server/issues/3580), [#​3674](https://togithub.com/nats-io/nats-server/issues/3674)) Leafnode - Add TLSHandshakeFirst option to perform a TLS handshake before sending connection info ([#​4119](https://togithub.com/nats-io/nats-server/issues/4119)) - Support S2 compression of traffic over leafnode connections where the default now is `s2_auto` to compress relative to the RTT of the hub ([#​4167](https://togithub.com/nats-io/nats-server/issues/4167), [#​4230](https://togithub.com/nats-io/nats-server/issues/4230)) - Allow remotes from same server binding to same hub account ([#​4259](https://togithub.com/nats-io/nats-server/issues/4259)) Logging - Add `logfile_max_num` server config field to auto-rotate files ([#​4548](https://togithub.com/nats-io/nats-server/issues/4548)) JetStream - Add stream subject transforms ([#​3814](https://togithub.com/nats-io/nats-server/issues/3814), [#​3823](https://togithub.com/nats-io/nats-server/issues/3823), [#​3827](https://togithub.com/nats-io/nats-server/issues/3827), [#​4035](https://togithub.com/nats-io/nats-server/issues/4035), [#​4354](https://togithub.com/nats-io/nats-server/issues/4354), [#​4400](https://togithub.com/nats-io/nats-server/issues/4400), [#​4403](https://togithub.com/nats-io/nats-server/issues/4403), [#​4512](https://togithub.com/nats-io/nats-server/issues/4512)) - Add freeform `metadata` field to stream and consumer configs ([#​3797](https://togithub.com/nats-io/nats-server/issues/3797)) - Add support for consumers filtering on multiple subjects ([#​3500](https://togithub.com/nats-io/nats-server/issues/3500), [#​3865](https://togithub.com/nats-io/nats-server/issues/3865), [#​4008](https://togithub.com/nats-io/nats-server/issues/4008), [#​4129](https://togithub.com/nats-io/nats-server/issues/4129), [#​4188](https://togithub.com/nats-io/nats-server/issues/4188)) - Add original timestamp as header to republished message ([#​3933](https://togithub.com/nats-io/nats-server/issues/3933)) Thanks to [@​amorey](https://togithub.com/amorey) for the contribution! - Allow republish for mirroring/sourcing streams ([#​4010](https://togithub.com/nats-io/nats-server/issues/4010)) - Add optional S2 stream compression for file store-backed streams ([#​4004](https://togithub.com/nats-io/nats-server/issues/4004), [#​4072](https://togithub.com/nats-io/nats-server/issues/4072)) - Add file store ability to re-encrypt with new encryption keys ([#​4296](https://togithub.com/nats-io/nats-server/issues/4296)) - Add embedded option to disable JetStream ASCII art at startup ([#​4261](https://togithub.com/nats-io/nats-server/issues/4261)) Thanks to [@​renevo](https://togithub.com/renevo) for the contribution! - Add ability to configure `first_seq` when creating streams ([#​4322](https://togithub.com/nats-io/nats-server/issues/4322), [#​4345](https://togithub.com/nats-io/nats-server/issues/4345)) - Add `sync_internal` option to JetStream config ([#​4483](https://togithub.com/nats-io/nats-server/issues/4483)) Monitoring - Add `unique_tag` field in `/jsz` and `/varz` endpoints ([#​3617](https://togithub.com/nats-io/nats-server/issues/3617)) - Add `$SYS.REQ.SERVER.PING.IDZ` NATS endpoint for basic server info ([#​3663](https://togithub.com/nats-io/nats-server/issues/3663)) - Add `$SYS.REQ.SERVER..PROFILEZ` NATS endpoint for requesting debugging profiles ([#​3774](https://togithub.com/nats-io/nats-server/issues/3774)) - Add subscription count to `/statz` endpoint ([#​3875](https://togithub.com/nats-io/nats-server/issues/3875)) - Add Raft query parameter to `/jsz` to include Raft group info ([#​3914](https://togithub.com/nats-io/nats-server/issues/3914)) - Add `slow_consumer_stats` to the `/varz` endpoint ([#​4330](https://togithub.com/nats-io/nats-server/issues/4330)) MQTT - Add support for QoS2 exactly-once delivery ([#​4349](https://togithub.com/nats-io/nats-server/issues/4349), [#​4440](https://togithub.com/nats-io/nats-server/issues/4440)) Reload - Match `--signal` PIDs with globular-style expression ([#​4370](https://togithub.com/nats-io/nats-server/issues/4370)) Thanks to [@​jevolk](https://togithub.com/jevolk) for the contribution! Subject Mapping - Add ability to remove wildcard tokens in subject transforms ([#​4152](https://togithub.com/nats-io/nats-server/issues/4152)) - Allows cluster filtering in account subject mapping ([#​4175](https://togithub.com/nats-io/nats-server/issues/4175)) System Services - Add `$SYS.REQ.SERVER..KICK` NATS endpoint to disconnect a client by `id` or by `name` from the target server ([#​4298](https://togithub.com/nats-io/nats-server/issues/4298)) - Add `$SYS.REQ.SERVER..LDM` NATS endpoint that sends a “lame duck mode” message to a client by `id` or `name` on the target server ([#​4298](https://togithub.com/nats-io/nats-server/issues/4298)) Windows - Add NATS_STARTUP_DELAY env for configurable startup time ([#​3743](https://togithub.com/nats-io/nats-server/issues/3743)) Thanks to [@​Alberic-Hardis](https://togithub.com/Alberic-Hardis) for the contribution! ##### Improved Leafnodes - Add jitter to leafnode reconnections ([#​4398](https://togithub.com/nats-io/nats-server/issues/4398)) Logging - Add account, stream and consumer name to consumer alignment cleanup warning ([#​3666](https://togithub.com/nats-io/nats-server/issues/3666)) Thanks to [@​ch629](https://togithub.com/ch629) for the contribution! JetStream - Significant optimisations and reduced memory impact for replicated streams with a large number of interior deletes (common in large KVs), considerably reducing the amount of CPU and memory required to create stream snapshots and smoothing out publish latencies ([#​4070](https://togithub.com/nats-io/nats-server/issues/4070), [#​4071](https://togithub.com/nats-io/nats-server/issues/4071), [#​4075](https://togithub.com/nats-io/nats-server/issues/4075), [#​4284](https://togithub.com/nats-io/nats-server/issues/4284), [#​4520](https://togithub.com/nats-io/nats-server/issues/4520), [#​4553](https://togithub.com/nats-io/nats-server/issues/4553)) - Improve signaling mechanism for consumers to improve performance and reduce latency ([#​3706](https://togithub.com/nats-io/nats-server/issues/3706)) - Allow edit of Stream RePublish ([#​3811](https://togithub.com/nats-io/nats-server/issues/3811)) - Add batch completed status to pull consumers ([#​3822](https://togithub.com/nats-io/nats-server/issues/3822)) - Improve behavior of stream source consumer creation or config updates on leadership change ([#​4009](https://togithub.com/nats-io/nats-server/issues/4009)) - Record the stream and consumer info timestamps ([#​4133](https://togithub.com/nats-io/nats-server/issues/4133)) - Allow switching between limits and interest retention policies ([#​4361](https://togithub.com/nats-io/nats-server/issues/4361)) - Improve performance of deleting blocks ([#​4371](https://togithub.com/nats-io/nats-server/issues/4371)) - Update the way meta indexing is handled for filestore, significantly reducing time to recover streams at startup ([#​4450](https://togithub.com/nats-io/nats-server/issues/4450), [#​4481](https://togithub.com/nats-io/nats-server/issues/4481)) - Add self-healing mechanism to detect and delete orphaned Raft groups ([#​4510](https://togithub.com/nats-io/nats-server/issues/4510)) - Improve monitoring of consumers that need to be cleaned up ([#​4536](https://togithub.com/nats-io/nats-server/issues/4536)) MQTT - Optimize retained messages by using KV semantics instead of holding retained messages in memory ([#​4199](https://togithub.com/nats-io/nats-server/issues/4199), [#​4228](https://togithub.com/nats-io/nats-server/issues/4228)) - Support for topics with `.` character ([#​4243](https://togithub.com/nats-io/nats-server/issues/4243)) Thanks to [@​petedavis](https://togithub.com/petedavis) and [@​telemac](https://togithub.com/telemac) for the reports! - Set the `RETAIN` flag when delivering to new subscriptions and clear the flag in all other conditions ([#​4443](https://togithub.com/nats-io/nats-server/issues/4443)) Profiling - Annotate CPU and goroutine profiles with additional asset information to assist with debugging ([#​4204](https://togithub.com/nats-io/nats-server/issues/4204)) - Remove unused block profile rate ([#​4402](https://togithub.com/nats-io/nats-server/issues/4402)) Subject Mapping - Subject transform validation and error reporting ([#​4202](https://togithub.com/nats-io/nats-server/issues/4202)) ##### Fixed Accounts - Fix data race when updating accounts ([#​4435](https://togithub.com/nats-io/nats-server/issues/4435), [#​4550](https://togithub.com/nats-io/nats-server/issues/4550), [#​4561](https://togithub.com/nats-io/nats-server/issues/4561)) Thanks to [@​hspaay](https://togithub.com/hspaay) for the report! Clients - Check if client connection name was already set when storing it ([#​3824](https://togithub.com/nats-io/nats-server/issues/3824)) Leafnode - Data race during validation and setup ([#​4194](https://togithub.com/nats-io/nats-server/issues/4194)) JetStream - Check for invalid stream name in sources ([#​4222](https://togithub.com/nats-io/nats-server/issues/4222)) - Stream config update idempotency ([#​4292](https://togithub.com/nats-io/nats-server/issues/4292)) - Seqset encode bug that could cause bad stream state snapshots ([#​4348](https://togithub.com/nats-io/nats-server/issues/4348)) - Ensure stream assignment is set when checking replica count and updating retention ([#​4391](https://togithub.com/nats-io/nats-server/issues/4391)) - Hold lock when enforcing message limit on startup ([#​4469](https://togithub.com/nats-io/nats-server/issues/4469)) - Fix filestore data race on hash during snapshots ([#​4470](https://togithub.com/nats-io/nats-server/issues/4470)) - Use write lock for memory store filtered state ([#​4498](https://togithub.com/nats-io/nats-server/issues/4498)) - Fix data race on stream’s clustered filestore sequence ([#​4508](https://togithub.com/nats-io/nats-server/issues/4508)) - Fix possible panic when recalculating the first sequence of a subject ([#​4530](https://togithub.com/nats-io/nats-server/issues/4530)) Thanks to [@​aldiesel](https://togithub.com/aldiesel) for the report! - Fix leaking timers in stream sources resulting in runaway CPU usage ([#​4532](https://togithub.com/nats-io/nats-server/issues/4532)) - Fix possible panic when consumer is not closed ([#​4541](https://togithub.com/nats-io/nats-server/issues/4541)) - Fix data race when accessing consumer assignment ([#​4547](https://togithub.com/nats-io/nats-server/issues/4547)) - Fix data race when changing stream retention policy ([#​4551](https://togithub.com/nats-io/nats-server/issues/4551)) - Fix data race when loading the next message in memory-based streams ([#​4552](https://togithub.com/nats-io/nats-server/issues/4552)) - Prevent forward proposals in consumers after scaling down a stream ([#​4556](https://togithub.com/nats-io/nats-server/issues/4556)) OSCP - Fixed local issuer determination for OCSP Staple ([#​4355](https://togithub.com/nats-io/nats-server/issues/4355)) Routes - Update LastActivity on connect for routes ([#​4415](https://togithub.com/nats-io/nats-server/issues/4415)) ##### Complete Changes ### [`v2.9.23`](https://togithub.com/nats-io/nats-server/releases/tag/v2.9.23) [Compare Source](https://togithub.com/nats-io/nats-server/compare/v2.9.22...v2.9.23) #### Changelog ##### Go Version - 1.20.10 ##### Fixed Accounts - Prevent bypassing authorization block when enabling system account access in accounts block ([#​4605](https://togithub.com/nats-io/nats-server/issues/4605)). Backport from v2.10.2 Leafnodes - Prevent a leafnode cluster from receiving a message multiple times in a queue subscription ([#​4578](https://togithub.com/nats-io/nats-server/issues/4578)). Backport from v2.10.2 JetStream - Hold lock when calculating the first message for subject in a message block ([#​4531](https://togithub.com/nats-io/nats-server/issues/4531)). Backport from v2.10.0 - Add self-healing mechanism to detect and delete orphaned Raft groups ([#​4647](https://togithub.com/nats-io/nats-server/issues/4647)). Backport from v2.10.0 - Prevent forward proposals in consumers after scaling down a stream ([#​4647](https://togithub.com/nats-io/nats-server/issues/4647)). Backport from v2.10.0 - Fix race condition during leader failover scenarios resulting in potential duplicate messages being sourced ([#​4592](https://togithub.com/nats-io/nats-server/issues/4592)). Backport from v2.10.2 ##### Complete Changes

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by Mend Renovate. View repository job log here.