Bump Akka from 1.4.33 to 1.5.24

[dependabot[bot]]

Bumps Akka from 1.4.33 to 1.5.24.

Release notes

Sourced from Akka's releases.

Akka.NET v1.5.24

1.5.24 June 7th 2024

Akka.NET v1.5.24 is a patch release for Akka.NET that addresses CVE-2018-8292 and also adds a quality of life improvement to IActorRef serialization.

• Fix invalid serializer was being used when serialize-message is set to true
• Add Serialization.DeserializeActorRef() QoL method
• Resolve CVE-2018-8292 in this PR and this PR

COMMITS	LOC+	LOC-	AUTHOR
3	35	22	Gregorius Soedharmo
1	26	51	Mike Perrin
1	15	2	Aaron Stannard

You can see the full set of changes for Akka.NET v1.5.24 here.

• 052277953a80ef8fb529af9f5ae94e19cc466dd8 Update RELEASE_NOTES.md for 1.5.24 release (#7239)
• 525a282227b721d3c47fc6c3c6ecfa3301b184e0 Partial fix on CVE-2018-8292 (#7238)
• e144c5dd2019319e2055b3976191048c85669ab0 Added Serialization.DeserializeActorRef method (#7237)
• 79f9bc64ece88199781d1f9b0fe11be078c9c678 Fix serialize-messages=on DeadLetter inside DeadLetter bug (#7236)
• 3c61f462906e8e4ab31a6f11ec734aa85b9d6caa Partial fix for CVE-2018-8292 (#7235)
• 64a71b85bfc30ee9aff0613a86b466a618908e37 Tidied up the language on Fault Tolerance page (#7232)

This list of changes was auto generated.

Akka.NET v1.5.23

1.5.23 June 4th 2024

• Fix missing HandOverDone handler in ClusterSingletonManager
• Add push mode to ShardedDaemonProcess

COMMITS	LOC+	LOC-	AUTHOR
2	299	44	Aaron Stannard
1	47	49	Gregorius Soedharmo
1	1	1	Hassan Abu Bakar

You can see the full set of changes for Akka.NET v1.5.23 here.

Changes:

• 2dfbecfcde5bea24020aecf8207354e93083f2f9 Update RELEASE_NOTES.md for 1.5.23 (#7233)
• efaea2df269a63776d8aff1c61335590addb7f4a ShardedDaemonProcess push mode (#7229) [ #7195 ]
• 356c91145dc353a002663d0ec479db8dc3adbc3e Change from Gitter to Discord (#7231)
• 5a2818f44b811dbfd20d3a093ce757c2db53930d Fix missing HandOverDone handler in ClusterSingletonManager (#7230)
• 7747a68303c7455e0e3b103aba572e66e802356b Added v1.5.23 placeholder (#7227)

This list of changes was auto generated.

... (truncated)

Changelog

Sourced from Akka's changelog.

1.5.24 June 7th 2024

Akka.NET v1.5.24 is a patch release for Akka.NET that addresses CVE-2018-8292 and also adds a quality of life improvement to IActorRef serialization.

• Fix invalid serializer was being used when serialize-message is set to true
• Add Serialization.DeserializeActorRef() QoL method
• Resolve CVE-2018-8292 in this PR and this PR

COMMITS	LOC+	LOC-	AUTHOR
3	35	22	Gregorius Soedharmo
1	26	51	Mike Perrin
1	15	2	Aaron Stannard

You can see the full set of changes for Akka.NET v1.5.24 here.

1.5.23 June 4th 2024

• Fix missing HandOverDone handler in ClusterSingletonManager
• Add push mode to ShardedDaemonProcess

COMMITS	LOC+	LOC-	AUTHOR
2	299	44	Aaron Stannard
1	47	49	Gregorius Soedharmo
1	1	1	Hassan Abu Bakar

You can see the full set of changes for Akka.NET v1.5.23 here.

1.5.22 June 4th 2024

Akka.NET v1.5.22 is a patch release for Akka.NET with a few bug fixes and logging improvement.

• Streams: Bump Reactive.Streams to 1.0.4
• Remote: Bump DotNetty.Handlers to 0.7.6
• Core: Resolve CVE-2018-8292 for Akka.Streams and Akka.Remote
• Core: Expose BusLogging EventStream as public API
• Remote: Add cross-platform support to the exception serializer

On Resolving CVE-2018-8292

In order to resolve this CVE, we had to update DotNetty.Handlers to the latest version and unfortunately, this comes with about 10% network throughput performance hit. We are looking into possible replacement for DotNetty to improve this performance lost in the future (see [#7225](https://github.com/akkadotnet/akka.net/issues/7225) for updates).

Before

Num clients, Total [msg], Msgs/sec, Total [ms], Start Threads, End Threads  
         1,  200000,    125000,    1600.62,            46,              76  
         5, 1000000,    494072,    2024.04,            84,              95  
        10, 2000000,    713013,    2805.73,           103,             107  
</tr></table> 

... (truncated)

Commits

• 0522779 Update RELEASE_NOTES.md for 1.5.24 release (#7239)
• 525a282 Partial fix on CVE-2018-8292 (#7238)
• e144c5d Added Serialization.DeserializeActorRef method (#7237)
• 79f9bc6 Fix serialize-messages=on DeadLetter inside DeadLetter bug (#7236)
• 3c61f46 Partial fix for CVE-2018-8292 (#7235)
• 64a71b8 Tidied up the language on Fault Tolerance page (#7232)
• 2dfbecf Update RELEASE_NOTES.md for 1.5.23 (#7233)
• efaea2d ShardedDaemonProcess push mode (#7229)
• 356c911 Change from Gitter to Discord (#7231)
• 5a2818f Fix missing HandOverDone handler in ClusterSingletonManager (#7230)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

:white_check_mark: Aaronontheweb
:x: dependabot[bot]
_{You have signed the CLA already but the status is still pending? Let us recheck it.}