You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-commits@jackrabbit.apache.org by mi...@apache.org on 2022/01/05 19:30:57 UTC
[jackrabbit-oak] branch release_1.42.0 created (now 9e9f1bb)
This is an automated email from the ASF dual-hosted git repository.
miroslav pushed a change to branch release_1.42.0
in repository https://gitbox.apache.org/repos/asf/jackrabbit-oak.git.
at 9e9f1bb [maven-release-plugin] prepare release jackrabbit-oak-1.42.0
This branch includes the following new commits:
new 86f939b OAK-9655 updated release notes
new 9e9f1bb [maven-release-plugin] prepare release jackrabbit-oak-1.42.0
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
[jackrabbit-oak] 02/02: [maven-release-plugin] prepare release jackrabbit-oak-1.42.0
Posted by mi...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
miroslav pushed a commit to branch release_1.42.0
in repository https://gitbox.apache.org/repos/asf/jackrabbit-oak.git
commit 9e9f1bb9b4e3efe7a3ff314d9d96892312c9a279
Author: smiroslav <mi...@apache.org>
AuthorDate: Wed Jan 5 20:30:52 2022 +0100
[maven-release-plugin] prepare release jackrabbit-oak-1.42.0
---
pom.xml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index beba235..18f1afc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -23,7 +23,7 @@
<parent>
<groupId>org.apache.jackrabbit</groupId>
<artifactId>oak-parent</artifactId>
- <version>1.41-SNAPSHOT</version>
+ <version>1.42.0</version>
<relativePath>oak-parent/pom.xml</relativePath>
</parent>
@@ -88,7 +88,7 @@
<connection>scm:git:https://gitbox.apache.org/repos/asf/jackrabbit-oak.git</connection>
<developerConnection>scm:git:https://gitbox.apache.org/repos/asf/jackrabbit-oak.git</developerConnection>
<url>https://github.com/apache/jackrabbit-oak/tree/${project.scm.tag}</url>
- <tag>HEAD</tag>
+ <tag>jackrabbit-oak-1.42.0</tag>
</scm>
<build>
[jackrabbit-oak] 01/02: OAK-9655 updated release notes
Posted by mi...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
miroslav pushed a commit to branch release_1.42.0
in repository https://gitbox.apache.org/repos/asf/jackrabbit-oak.git
commit 86f939bf40ea98773fcba377d28fbfd1f8470ec5
Author: smiroslav <mi...@apache.org>
AuthorDate: Wed Jan 5 18:03:21 2022 +0100
OAK-9655 updated release notes
---
RELEASE-NOTES.txt | 232 ++++++++++++++++++++++++++++++++++--------------------
1 file changed, 146 insertions(+), 86 deletions(-)
diff --git a/RELEASE-NOTES.txt b/RELEASE-NOTES.txt
index f5e6385..c49aea9 100644
--- a/RELEASE-NOTES.txt
+++ b/RELEASE-NOTES.txt
@@ -1,4 +1,4 @@
-Release Notes -- Apache Jackrabbit Oak -- Version 1.40.0
+Release Notes -- Apache Jackrabbit Oak -- Version 1.42.0
Introduction
------------
@@ -7,116 +7,176 @@ Jackrabbit Oak is a scalable, high-performance hierarchical content
repository designed for use as the foundation of modern world-class
web sites and other demanding content applications.
-Apache Jackrabbit Oak 1.40.0 is an incremental feature release based
+Apache Jackrabbit Oak 1.42.0 is an incremental feature release based
on and compatible with earlier stable Jackrabbit Oak 1.x
releases. This release is considered stable and targeted for
production use.
-While Oak 1.40.0 compiles and tests successfully on Java 15, Javadocs
+While Oak 1.42.0 compiles and tests successfully on Java 15, Javadocs
generation fails on Java 15 (but works as expected on Java 8).
The Oak effort is a part of the Apache Jackrabbit project.
Apache Jackrabbit is a project of the Apache Software Foundation.
-Changes in Oak 1.40.0
+Changes in Oak 1.42.0
---------------------
-Bug
+Technical task
- [OAK-8582] - Failing test in MongoDB 4.2.0: BasicDocumentStoreTest.testLongId
- [OAK-9158] - Performance issue due to AbstractDocumentNodeState#equals
- [OAK-9300] - DocumentNodeStore should refuse checkpoint calls after disposal
- [OAK-9338] - RemotePersistentCacheService throws if both redis and disk cache are disabled
- [OAK-9344] - JcrLastModifiedConflictHandler prone to NPE
- [OAK-9346] - oak-search: rectify Elastic failing common tests
- [OAK-9358] - DocumentNodeStore may accumulate split candidates
- [OAK-9373] - LucenePropertyIndex#createLikeQuery() ingnores escaping
- [OAK-9375] - Remote elastic index deletion job incorrectly deletes indices
- [OAK-9377] - AbstractLoginModule.getUserManager should use computed SecurityProvider
- [OAK-9384] - AzureBlobStoreBackend may return incorrect download URI
- [OAK-9394] - VisibleChangesTest uses internal JDK class
- [OAK-9397] - AbstractJcrTest does not shut down Repository
- [OAK-9401] - Breaking recovery lock issue
- [OAK-9408] - OakStreamingIndexFile negative file length
- [OAK-9413] - Improve PrivilegeBitsProvider
- [OAK-9417] - ClassCastException in ConsolidatedListenerMBeanImpl
- [OAK-9424] - AccessControlManagerImpl ignores importBehavior when retrieving policies by principal(s)
- [OAK-9428] - Travis build fails to pull azurite intermittently
- [OAK-9429] - oak-search-elastic: use dynamic boost in must query
- [OAK-9442] - LDAPIdentityProvider: avoid usage of week SSL/TLS protocol
-
-Epic
-
- [OAK-9364] - metrics for oak security
+ [OAK-9470] - Move AutoMembershipPrincipals from ExternalGroupPrincipalProvider to top level
+ [OAK-9475] - Document DynamicMembershipProvider
+ [OAK-9574] - Update Mockito dependency to 3.12.4
+ [OAK-9577] - Update Tomcat dependency to 8.5.71
+ [OAK-9579] - standalone: upgrade spring fwk to 2.5.5
-New Feature
+Bug
- [OAK-9339] - Image Similarity: LSH based search
- [OAK-9415] - Allow access to all principals bound to the current session
+ [OAK-8440] - Test failure: SegmentWriteQueueTest.testFlush()
+ [OAK-9141] - Test failure: ElasticFullTextAsyncTest.testNoStoredIndexDefinition
+ [OAK-9262] - Incorrect session counter metric on concurrent logout
+ [OAK-9449] - Any new (elastic) index def added after Out of the band reindexing will trigger reindexing when the async cycle will run the first index update
+ [OAK-9453] - Segment copy test failures after Azure compaction changes
+ [OAK-9454] - Improve nodeScopeIndex related documentation to mention a larger index size in case of using this property
+ [OAK-9456] - Exclude all possible PSD mime types in default tika config
+ [OAK-9457] - Lucene index is always used over ES index when the cost is minimal
+ [OAK-9464] - Suggestion Results are not deduplicated when ES indexes are used
+ [OAK-9465] - [Index Management] Versioned elastic index will get ignored during query execution
+ [OAK-9469] - Unsuccessful lease refresh in AzureRepositoryLock can cause two processes using Oak to have write access
+ [OAK-9471] - Query for split documents by Revision GC times out
+ [OAK-9476] - Clock difference check performed too late
+ [OAK-9477] - Time difference warning too sensitive
+ [OAK-9483] - UpgradeIT fails when noexec is set on temp folder
+ [OAK-9484] - PersistentRedisCacheTest fails when noexec is set on temp folder
+ [OAK-9487] - WarnLogStringPropertySizeTest may fail with multiple fixtures
+ [OAK-9496] - oak-solr-osgi embeds vulnerable Apache ZooKeeper
+ [OAK-9497] - LargeLdapProviderTest: InvocationTargetException: LDAP connection has been closed
+ [OAK-9502] - ElasticSimilarQueryTest.vectorSimilarityLargeData fails intermittently on ASF Jenkins
+ [OAK-9512] - PrefixPattern.matches(String) always returns false
+ [OAK-9513] - PrefixPattern ignores empty namespace perfix
+ [OAK-9519] - TlsGuardingConnection doesn't do a TLS handshake on reused connections
+ [OAK-9520] - CVE-2021-29262 in oak-solr-osgi
+ [OAK-9529] - Log message "Another copy of the index update is already running" should be info
+ [OAK-9535] - Support recovery of large branch merge
+ [OAK-9537] - Security vulnerability in org/apache/lucene/queryparser/xml/CoreParser.java
+ [OAK-9541] - ItemExistsException: "Node with the same UUID exists" thrown during SysView import with existing different UUID
+ [OAK-9555] - javadoc error due to bracket mismatch
+ [OAK-9560] - Javadoc build fails if using Java11
+ [OAK-9562] - Missing _bin when node is recreated after revision GC
+ [OAK-9563] - LastRevSingleNodeRecoveryTest fails in setUp()
+ [OAK-9565] - NullPointerException on Session.logout()
+ [OAK-9576] - Multithreaded download synchronization issues
+ [OAK-9582] - oak-examples/standalone: misleading documentation
+ [OAK-9591] - Implement hashcode() and equals() method in ItemDefinitionImpl
+ [OAK-9592] - Log exceptions when retrying find
+ [OAK-9603] - oak-search-elastic: index name does not adhere to ES requirements
+ [OAK-9616] - Node.setPrimaryType() does not always support expanded names
+ [OAK-9617] - VersionGCSplitDocTest does not clean up after test
+ [OAK-9623] - EnforceDynamicMembershipTest fails sporadically
+ [OAK-9636] - FileWriter not closed in LocalManifestFile
+ [OAK-9638] - Travis Build fails with "/usr/bin/python: No module named venv"
+ [OAK-9644] - Flaky test due to HashSet
+ [OAK-9648] - Jenkins build fails with timeout
-Story
+New Feature
- [OAK-9365] - Add additional metrics to LoginModuleMonitor
- [OAK-9366] - Monitoring for user management implementation
- [OAK-9367] - Monitoring for default authorization module
- [OAK-9368] - Monitoring for external authentication
+ [OAK-9536] - Add support in oak run for incremental indexing
+ [OAK-9587] - Add an attribute to enforce a strict index tag check
+ [OAK-9602] - Script to check for inconsistent version nodes and generate a report
Improvement
- [OAK-6911] - Provide a way to tune inline size while storing binaries
- [OAK-9305] - Create checkpoint with given revision
- [OAK-9325] - Tool to compare and manually merge index definitions
- [OAK-9335] - AuthorizableAction doesn't allow to monitor and respond to system user creation
- [OAK-9336] - Add nullable/notnull annotations to AuthorizableAction(s)
- [OAK-9342] - JournalDiffLoader should ignore linked invalidation entries
- [OAK-9343] - Missing NotNull annotations with implementations of ThreeWayConflictHandler
- [OAK-9350] - Index update: release the correct checkpoint
- [OAK-9352] - move SystemPropertySupplier from document to commons
- [OAK-9356] - DocumentNodeStore: in dispose(), improve lease update diagnostics
- [OAK-9357] - Update to MongoDB Java driver 3.12
- [OAK-9359] - Use SystemPropertySupplier to ease backport
- [OAK-9369] - UserImporter should obtain UserManager from configuration
- [OAK-9370] - Deprecate LoginModuleStats
- [OAK-9371] - SegmentStoreMigrator ability to not copy the journal
- [OAK-9379] - Disable ElasticIndexProviderService via a system property
- [OAK-9382] - Add binariesInlineThreshold to FileStoreBuilder.toString()
- [OAK-9383] - Add nullability annotations with GroupAction and implementations
- [OAK-9390] - Log the repositoryIds during DSGC and on datastore init
- [OAK-9392] - Improve resilience when primary becomes unavailable
- [OAK-9400] - oak-search-elastic: avoid to index non-trimmed values in full-text fields
- [OAK-9403] - Missing nullability annotations with jackrabbit.oak.spi.xml
- [OAK-9404] - Missing nullability annotations in org.apache.jackrabbit.oak.plugins.tree
- [OAK-9405] - Reduce complexity of TreeUtil
- [OAK-9406] - Minor improvements to oak-auth-external
- [OAK-9407] - Reduce complexity in ExternalLoginModule
- [OAK-9409] - Improve Readability of ConfigurationParameters
- [OAK-9410] - Missing tests in security-spi
- [OAK-9411] - Missing nullability annotations in RestrictionProvider (and implementations)
- [OAK-9414] - Missing nullability annotations in package org.apache.jackrabbit.oak.security.authorization.accesscontrol
- [OAK-9420] - slightly misleading debug message in JournalEntry
- [OAK-9426] - Drop usage of log.isDebugEnabled
- [OAK-9430] - ExternalIdentityMonitorImplTest incomplete tests for number of retries
- [OAK-9431] - Improvements to o.a.j.o.security.user package
- [OAK-9432] - oak-run checkpoints command should use invisible clusterId
- [OAK-9433] - TokenAuthentication.authenticate: throw specific exception for expired credentials
- [OAK-9435] - Speed up oak-run datastore --dump-ref
- [OAK-9438] - Add tests for LdapIdentityProvider with useSSL configuration option set
- [OAK-9439] - improvements to tests in oak-auth-ldap
- [OAK-9441] - Duplicate code wrt everyone handling in PrincipalProvider implementations
- [OAK-9444] - Duplications in LdapIdentityProvider
+ [OAK-2437] - 'shallow' access to a node and it's properties
+ [OAK-9418] - Improve oak-run compact to better support Azure compaction
+ [OAK-9434] - MongoDB indexing: implement parallel chunk download
+ [OAK-9451] - Cold Standby SSL certificates should be configurable
+ [OAK-9452] - minor improvements to privilege management
+ [OAK-9462] - Extensible DynamicMembershipProvider
+ [OAK-9463] - Allow for conditional auto-membership
+ [OAK-9468] - Define mechanism to prevent cross-IDP membership
+ [OAK-9473] - [Cold Standby] Add configuration option for SSL key decryption password
+ [OAK-9474] - Use Filter for SyncConfigTracker to limit respected references
+ [OAK-9480] - Log a warning for improper usage of an index with valueRegex set
+ [OAK-9481] - avoid range queries on like conditions
+ [OAK-9488] - Extra logging in org.apache.jackrabbit.oak.run.DataStoreCommand
+ [OAK-9492] - UserInitializer: info property of 'principalName' index not accurate
+ [OAK-9494] - Check if a privilege name is included in a set/array of Privileges obtained from AccessControlManager.getPrivileges
+ [OAK-9501] - Don't trim stack traces during unit tests and ITs
+ [OAK-9508] - Duplicate code blocks in authorization modules
+ [OAK-9509] - Enable minimum line and branch test coverage for oak-jcr
+ [OAK-9511] - Improvements to security related Delegators in org.apache.jackrabbit.oak.jcr.delegate
+ [OAK-9514] - Add RestrictionPattern.matches(@NotNull String path, boolean isProperty)
+ [OAK-9516] - minor improvement to oak-authorization-principalbased
+ [OAK-9517] - Incorrect time difference warning
+ [OAK-9522] - Index cost estimation: prefer union query with path restriction
+ [OAK-9523] - Remove warning "Missing provider for nrt/sync" for disabled indexes
+ [OAK-9524] - Retry failed data download (resuming from the point it stopped) during indexing
+ [OAK-9525] - Minor improvements to oak-authorization-cug
+ [OAK-9527] - Typos in security related API
+ [OAK-9528] - missing nullability annotations in security related code
+ [OAK-9530] - Minor improvements to ACE.java
+ [OAK-9531] - Improvements to oak.spi.security.authorization.permission
+ [OAK-9532] - Add tests for DynamicMembershipProvider.EMPTY
+ [OAK-9540] - SegmentNotFoundException in IndexDefinition.hasMatchingNodeTypeReg
+ [OAK-9543] - AbstractServiceTracker: add protected constructor with filter properties
+ [OAK-9544] - Refactor SyncConfigTrackerTest to use osgi mocks
+ [OAK-9545] - fix potential NPE in CugAccessControlManager
+ [OAK-9547] - oak-core-spi : adjust minimum.line.coverage and minimum.branch.coverage
+ [OAK-9552] - Don't index except if it's oak:QueryIndexDefinition
+ [OAK-9556] - remove unused constructor in SyncRuntimeException
+ [OAK-9557] - improve tests in oak-auth-external modules
+ [OAK-9558] - JMXUtil: add utility to create "jmx.objectname" map for service registration
+ [OAK-9559] - Migrate previously synced users/groups to dynamic membership
+ [OAK-9567] - Avoid NullPointerException in ReadWriteVersionManager.removeVersion
+ [OAK-9568] - Support custom osgi LeaseFailureHandler
+ [OAK-9572] - oak-search aggregations should ignore hidden properties
+ [OAK-9588] - Bump and align testcontainers dependency to v1.16.0
+ [OAK-9598] - oak-search-elastic: reduce server load on reindex operations
+ [OAK-9599] - Enforce dynamic membership upon user login
+ [OAK-9604] - Minor improvements in o.a.j.oak.spi.security.authentication.external.impl.jmx
+ [OAK-9609] - Override persistentCacheIncludes with framework property
+ [OAK-9610] - Have a jmx to explicitly expire indexing lease in mongo mk
+ [OAK-9613] - Define API to retrieve parent or null for a given Item
+ [OAK-9618] - Use s.apache.org redirects for JCR specs/javadocs
+ [OAK-9625] - Support ordered index for first value of a multi-valued property, node name, and path
+ [OAK-9634] - CacheLIRS: test failure with ARM processor
+ [OAK-9637] - Additional API to retrieve PrivilegeCollection to avoid manual resolution of privilege aggregation
+ [OAK-9651] - Protection against very large queries
Task
- [OAK-9372] - Upgrade to Elasticsearch 7.10.2
- [OAK-9378] - Refactor Oak-run-elastic to make it not depend on oak-run
- [OAK-9395] - Make MongoDockerRule.isDockerAvailable() static
- [OAK-9396] - Promote SimpleRecoveryHandler test utility to top level class
- [OAK-9419] - Lower the minimum cost for elastic index
+ [OAK-9458] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.3
+ [OAK-9461] - Dynamic boost lite
+ [OAK-9479] - oak-search-elastic: upgrade jackson-databind to 2.10.5.1
+ [OAK-9482] - upgrade httpclient to v 4.5.13
+ [OAK-9486] - Build all modules on GitHub PR
+ [OAK-9495] - Adjust release vote template after migration to Git
+ [OAK-9539] - Bump netty dependency from 4.1.52.Final to 4.1.66.Final
+ [OAK-9550] - Modify oak-run-elastic pom top replace the default oak-run-elastic with the one created in assembly
+ [OAK-9566] - Improve index stats
+ [OAK-9573] - Make TraverseWithSort strategy the default while indexing
+ [OAK-9580] - Fix Azure secret keys leaked in logs
+ [OAK-9581] - oak-examples/standalone: update spring boot dependency to 1.5.22 and cleanup POM
+ [OAK-9600] - Make "standby.secure" configurable
+ [OAK-9601] - Refine logging to help detect dangling previous document pointers
+ [OAK-9611] - Bump netty dependency from 4.1.66.Final to 4.1.68.Final
+ [OAK-9615] - Update Oak trunk and Oak 1.22 to Jackrabbit 2.20.4
+ [OAK-9626] - Elasticsearch: support setAllowLeadingWildcard
+ [OAK-9627] - oak-search-elastic: disable index cleaner job by default
+ [OAK-9633] - oak-search-elastic: reliability tests
+ [OAK-9639] - oak-segment-aws - avoid transitive log4j test dependency
+ [OAK-9641] - Update Logback version to 1.2.8
+ [OAK-9643] - Update slf4j dependency to 1.7.32
+ [OAK-9645] - oak-solr-core - avoid transitive log4j test dependency
+ [OAK-9652] - Update Logback version to 1.2.10
Documentation
- [OAK-9332] - Document best practices and anti-patterns in repository tree traversal
- [OAK-9425] - Improve javadoc and doc of ClearMembershipAction
+ [OAK-9460] - Small documentation improvements for oak-segment-tar
+ [OAK-9506] - Oak Security Documentation : links to Jackrabbit-API point to svn
+ [OAK-9507] - link to PrincipalProvider points to wrong resource
+ [OAK-9526] - Incomplete sentence in principalbased_evaluation.md
+ [OAK-9595] - XPath queries don't support bind variables
+ [OAK-9624] - Queries: Add logging to determine the caller
In addition to the above-mentioned changes, this release contains all
changes up to the previous release.