·
5 commits
to main
since this release
New features
- You can now import an entire directory into Central Dogma programmatically in one go, making it much easier to bootstrap or bulk-migrate configuration trees. #1140
- System administrators can now rewrap all stored encryption keys with a new key-encryption key (KEK) through a dedicated API endpoint, simplifying KEK rotation across the whole cluster. #1212
Improvements:
- xDS endpoint registration commits are now batched by a scheduler, reducing churn and load when many endpoints are updated at once. #1151
- Session management has been refactored to use secure cookies together with CSRF tokens, aligning the web console with modern web security practices. #1179
- ZooKeeperCommandExecutor now records execution timings, making it easier to monitor ZooKeeper latency and diagnose slow operations. #1191
- ZooKeeper leadership release now waits up to 60 seconds before giving up, reducing the chance of spurious leadership changes under load. #1200
- Command executors also wait up to 60 seconds for graceful shutdown, giving in-flight commands time to finish cleanly. #1203
- ZooKeeper replication logs are now decompressed as part of the replication pipeline, improving inspectability and behavior when dealing with compressed logs. #1192
- Mirrors and credentials now accept uppercase characters in their IDs, making them more flexible and consistent with other identifier formats. #1201
- Repository data can be re-encrypted with a new data-encryption key (DEK), enabling DEK rotation for encrypted repositories without manual data migration. #1214
Bug fixes
- Fixed an issue where markdown files failed to render in the diff view of the web UI. #1202
- The server no longer redirects to the login page on a 403 Forbidden error, so clients now receive the proper error response instead of an HTML login redirect. #1207
DefaultChange.toString()now truncates large content, avoiding excessive log output and memory usage when logging big changes. #1208
Breaking Changes
- Session cookies have been changed to JWT-based encrypted cookies. Users may need to refresh their browsers and re-login upon deployment. #1190
Revision#minorhas been removed. #1205
Dependencies
- Armeria 1.33.4 → 1.34.1
- AssertJ 3.27.4 → 3.27.6
- Bouncy Castle 1.81 → 1.83
- Caffeine 3.2.2 → 3.2.3
- gRPC Java 1.74.0 → 1.77.0
- Guava 33.4.8-jre → 33.5.0-jre
- Jackson 2.19.2 → 2.20.1
- Kubernetes Client 7.3.1 → 7.4.0
- Micrometer 1.15.2 → 1.16.0
- Nimbus JOSE + JWT 10.5 → 10.6
- Protobuf Java 3.25.5 → 3.25.8
- Quartz 2.3.2 → 2.5.1
- RocksDB 10.2.1 → 10.4.2
- Spring Boot 3 3.5.4 → 3.5.8
- Zstd 1.5.7-4 → 1.5.7-6
Thank you
This release was possible thanks to the following contributors who shared their ideas and awesome pull requests:
Contributors
trustin, ikhoon, and 3 other contributors