You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@dubbo.apache.org by GitBox <gi...@apache.org> on 2020/12/14 07:15:02 UTC
[GitHub] [dubbo-go] dependabot[bot] opened a new pull request #934: build(deps): bump github.com/hashicorp/consul from 1.8.0 to 1.9.1
dependabot[bot] opened a new pull request #934:
URL: https://github.com/apache/dubbo-go/pull/934
Bumps [github.com/hashicorp/consul](https://github.com/hashicorp/consul) from 1.8.0 to 1.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/hashicorp/consul/releases">github.com/hashicorp/consul's releases</a>.</em></p>
<blockquote>
<h2>v1.9.1</h2>
<h2>1.9.1 (December 11, 2020)</h2>
<p>FEATURES:</p>
<ul>
<li>ui: add copyable IDs to the Role and Policy views [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9296">GH-9296</a>]</li>
</ul>
<p>IMPROVEMENTS:</p>
<ul>
<li>cli: <strong>(Enterprise only)</strong> A new <code>-read-replica</code> flag can now be used to enable running a server as a read only replica. Previously this was enabled with the now deprecated <code>-non-voting-server</code> flag. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9191">GH-9191</a>]</li>
<li>config: <strong>(Enterprise only)</strong> A new <code>read_replica</code> configuration setting can now be used to enable running a server as a read only replica. Previously this was enabled with the now deprecated <code>non_voting_server</code> setting. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9191">GH-9191</a>]</li>
</ul>
<p>DEPRECATIONS:</p>
<ul>
<li>cli: <strong>(Enterprise only)</strong> The <code>-non-voting-server</code> flag is deprecated in favor of the new <code>-read-replica</code> flag. The <code>-non-voting-server</code> flag is still present along side the new flag but it will be removed in a future release. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9191">GH-9191</a>]</li>
<li>config: <strong>(Enterprise only)</strong> The <code>non_voting_server</code> configuration setting is deprecated in favor of the new <code>read_replica</code> setting. The <code>non_voting_server</code> configuration setting is still present but will be removed in a future release. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9191">GH-9191</a>]</li>
<li>gossip: <strong>(Enterprise only)</strong> Read replicas now advertise themselves by setting the <code>read_replica</code> tag. The old <code>nonvoter</code> tag is still present but is deprecated and will be removed in a future release. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9191">GH-9191</a>]</li>
<li>server: <strong>(Enterprise only)</strong> Addition of the <code>nonvoter</code> tag to the service registration made for read replicas is deprecated in favor of the new tag name of <code>read_replica</code>. Both are present in the registration but the <code>nonvoter</code> tag will be completely removed in a future release. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9191">GH-9191</a>]</li>
</ul>
<p>BUG FIXES:</p>
<ul>
<li>agent: prevent duplicate services and check registrations from being synced to servers. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9284">GH-9284</a>]</li>
<li>connect: fixes a case when updating the CA config in a secondary datacenter to correctly trigger the creation of a new intermediate certificate [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9009">GH-9009</a>]</li>
<li>connect: only unset the active root in a secondary datacenter when a new one is replacing it [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9318">GH-9318</a>]</li>
<li>namespaces: <strong>(Enterprise only)</strong> Prevent stalling of replication in secondary datacenters due to conflicts between the namespace replicator and other replicators. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9271">GH-9271</a>]</li>
<li>streaming: ensure the order of results provided by /health/service/:serviceName is consistent with and without streaming enabled [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9247">GH-9247</a>]</li>
</ul>
<h2>v1.9.0</h2>
<h2>1.9.0 (November 24, 2020)</h2>
<p>BREAKING CHANGES:</p>
<ul>
<li>agent: The <code>enable_central_service_config</code> option now defaults to true. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8746">GH-8746</a>]</li>
<li>connect: Switch the default gateway port from 443 to 8443 to avoid assumption of Envoy running as root. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9113">GH-9113</a>]</li>
<li>connect: Update Envoy metrics names and labels for proxy listeners so that attributes like datacenter and namespace can be extracted. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9207">GH-9207</a>]</li>
<li>connect: intention destinations can no longer be reassigned [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8834">GH-8834</a>]</li>
<li>raft: Raft protocol v2 is no longer supported. If currently using protocol v2 then an intermediate upgrade to a version supporting both v2 and v3 protocols will be necessary (1.0.0 - 1.8.x). Note that the Raft protocol configured with the <code>raft_protocol</code> setting and the Consul RPC protocol configured with the <code>protocol</code> setting and output by the <code>consul version</code> command are distinct and supported Consul RPC protocol versions are not altered. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9103">GH-9103</a>]</li>
<li>sentinel: <strong>(Consul Enterprise only)</strong> update to v0.16.0, which replaces <code>whitelist</code> and <code>blacklist</code> with <code>allowlist</code> and <code>denylist</code></li>
<li>server: <strong>(Enterprise only)</strong> Pre-existing intentions defined with
non-existent destination namespaces were non-functional and are erased during
the upgrade process. This should not matter as these intentions had nothing to
enforce. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9186">GH-9186</a>]</li>
<li>server: <strong>(OSS only)</strong> Pre-existing intentions defined with either a source or
destination namespace value that is not "default" are rewritten or deleted
during the upgrade process. Wildcards first attempt to downgrade to "default"
unless an intention already exists, otherwise these non-functional intentions
are deleted. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9186">GH-9186</a>]</li>
<li>xds: Drop support for Envoy versions 1.12.0, 1.12.1, 1.12.2, and 1.13.0, due to a lack of support for url_path in RBAC. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8839">GH-8839</a>]</li>
</ul>
<p>SECURITY:</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/hashicorp/consul/blob/master/CHANGELOG.md">github.com/hashicorp/consul's changelog</a>.</em></p>
<blockquote>
<h2>UNRELEASED</h2>
<h2>1.9.0 (November 24, 2020)</h2>
<p>BREAKING CHANGES:</p>
<ul>
<li>agent: The <code>enable_central_service_config</code> option now defaults to true. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8746">GH-8746</a>]</li>
<li>connect: Switch the default gateway port from 443 to 8443 to avoid assumption of Envoy running as root. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9113">GH-9113</a>]</li>
<li>connect: Update Envoy metrics names and labels for proxy listeners so that attributes like datacenter and namespace can be extracted. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9207">GH-9207</a>]</li>
<li>connect: intention destinations can no longer be reassigned [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8834">GH-8834</a>]</li>
<li>raft: Raft protocol v2 is no longer supported. If currently using protocol v2 then an intermediate upgrade to a version supporting both v2 and v3 protocols will be necessary (1.0.0 - 1.8.x). Note that the Raft protocol configured with the <code>raft_protocol</code> setting and the Consul RPC protocol configured with the <code>protocol</code> setting and output by the <code>consul version</code> command are distinct and supported Consul RPC protocol versions are not altered. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9103">GH-9103</a>]</li>
<li>sentinel: <strong>(Consul Enterprise only)</strong> update to v0.16.0, which replaces <code>whitelist</code> and <code>blacklist</code> with <code>allowlist</code> and <code>denylist</code></li>
<li>server: <strong>(Enterprise only)</strong> Pre-existing intentions defined with
non-existent destination namespaces were non-functional and are erased during
the upgrade process. This should not matter as these intentions had nothing to
enforce. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9186">GH-9186</a>]</li>
<li>server: <strong>(OSS only)</strong> Pre-existing intentions defined with either a source or
destination namespace value that is not "default" are rewritten or deleted
during the upgrade process. Wildcards first attempt to downgrade to "default"
unless an intention already exists, otherwise these non-functional intentions
are deleted. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9186">GH-9186</a>]</li>
<li>xds: Drop support for Envoy versions 1.12.0, 1.12.1, 1.12.2, and 1.13.0, due to a lack of support for url_path in RBAC. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8839">GH-8839</a>]</li>
</ul>
<p>SECURITY:</p>
<ul>
<li>Fix Consul Enterprise Namespace Config Entry Replication DoS. Previously an operator with service:write ACL permissions in a Consul Enterprise cluster could write a malicious config entry that caused infinite raft writes due to issues with the namespace replication logic. [<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25201">CVE-2020-25201</a>] [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9024">GH-9024</a>]</li>
<li>Increase the permissions to read from the <code>/connect/ca/configuration</code> endpoint to <code>operator:write</code>. Previously Connect CA configuration, including the private key, set via this endpoint could be read back by an operator with <code>operator:read</code> privileges. <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28053">CVE-2020-28053</a> [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9240">GH-9240</a>]</li>
</ul>
<p>FEATURES:</p>
<ul>
<li>agent: Add a new RPC endpoint for streaming cluster state change events to clients.</li>
<li>agent: Allow client agents to be configured with an advertised reconnect timeout to control how long until the nodes are reaped by others in the cluster. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8781">GH-8781</a>]</li>
<li>agent: moved ui config options to a new <code>ui_config</code> stanza in agent configuration and added new options to display service metrics in the UI. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8694">GH-8694</a>]</li>
<li>agent: return the default ACL policy to callers as a header [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9101">GH-9101</a>]</li>
<li>autopilot: A new <code>/v1/operator/autopilot/state</code> HTTP API was created to give greater visibility into what autopilot is doing and how it has classified all the servers it is tracking. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9103">GH-9103</a>]</li>
<li>autopilot: Added a new <code>consul operator autopilot state</code> command to retrieve and view the Autopilot state from consul. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9142">GH-9142</a>]</li>
<li>cli: update <code>snapshot inspect</code> command to provide more detailed snapshot data [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8787">GH-8787</a>]</li>
<li>connect: support defining intentions using layer 7 criteria [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8839">GH-8839</a>]</li>
<li>telemetry: add initialization and definition for non-expiring key metrics in Prometheus [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9088">GH-9088</a>]</li>
<li>telemetry: track node and service counts and emit them as metrics [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8603">GH-8603</a>]</li>
<li>ui: If Prometheus is being used for monitoring the sidecars, the topology view can be configured to display overview metrics for the services. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8858">GH-8858</a>]</li>
<li>ui: Services using Connect with Envoy sidecars have a topology tab in the UI showing their upstream and downstream services. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8788">GH-8788</a>]</li>
<li>xds: use envoy's rbac filter to handle intentions entirely within envoy [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8569">GH-8569</a>]</li>
</ul>
<p>IMPROVEMENTS:</p>
<ul>
<li>agent: Return HTTP 429 when connections per clients limit (<code>limits.http_max_conns_per_client</code>) has been reached. [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8221">GH-8221</a>]</li>
<li>agent: add path_allowlist config option to restrict metrics proxy queries [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9059">GH-9059</a>]</li>
<li>agent: allow the /v1/connect/intentions/match endpoint to use the agent cache [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/8875">GH-8875</a>]</li>
<li>agent: protect the metrics proxy behind ACLs [<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9099">GH-9099</a>]</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/hashicorp/consul/commit/ca5c389431a8af9e1c16281042ce7459c7a655d9"><code>ca5c389</code></a> Release v1.9.1</li>
<li><a href="https://github.com/hashicorp/consul/commit/8b9b803589c4d25acbfb31ccee0f2207d629558c"><code>8b9b803</code></a> update bindata_assetfs.go</li>
<li><a href="https://github.com/hashicorp/consul/commit/2de43740c0e7cdaf55518802b7c965c396210520"><code>2de4374</code></a> deps: consul/api v1.8.1</li>
<li><a href="https://github.com/hashicorp/consul/commit/334a29e0f8c37d95352c55f1ed96a2214f97c5c2"><code>334a29e</code></a> changelog: add unreleased entries for v1.9.1</li>
<li><a href="https://github.com/hashicorp/consul/commit/a042b748f12d8b2c899f04056486665986a6182f"><code>a042b74</code></a> Filter API Docs (<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9202">#9202</a>)</li>
<li><a href="https://github.com/hashicorp/consul/commit/aa03e9979e592fbac12074896c9d80f9186c3fff"><code>aa03e99</code></a> acl: global tokens created by auth methods now correctly replicate to seconda...</li>
<li><a href="https://github.com/hashicorp/consul/commit/5511e6bbbe2b56c0c3ec6ea69db3e1714ce81c37"><code>5511e6b</code></a> [Website] Update alert banner (<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9361">#9361</a>)</li>
<li><a href="https://github.com/hashicorp/consul/commit/49741f021debb50d67098561f310103a85ada0af"><code>49741f0</code></a> ui: Use pill/badge components for intention filter options (<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9357">#9357</a>)</li>
<li><a href="https://github.com/hashicorp/consul/commit/e1d133aac2262abe44d8d6a3e6f885d6349704f6"><code>e1d133a</code></a> ui: Remove old style 'filterable' searching (<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9356">#9356</a>)</li>
<li><a href="https://github.com/hashicorp/consul/commit/8d2791523c6b9935e5b4341e701c89d61929c82b"><code>8d27915</code></a> ui: Update UI README (<a href="https://github-redirect.dependabot.com/hashicorp/consul/issues/9346">#9346</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/hashicorp/consul/compare/v1.8.0...v1.9.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo-go] dependabot[bot] commented on pull request #934: build(deps): bump github.com/hashicorp/consul from 1.8.0 to 1.9.1
Posted by GitBox <gi...@apache.org>.
dependabot[bot] commented on pull request #934:
URL: https://github.com/apache/dubbo-go/pull/934#issuecomment-749304431
OK, I won't notify you about github.com/hashicorp/consul again, unless you re-open this PR or update it yourself. 😢
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo-go] dependabot[bot] closed pull request #934: build(deps): bump github.com/hashicorp/consul from 1.8.0 to 1.9.1
Posted by GitBox <gi...@apache.org>.
dependabot[bot] closed pull request #934:
URL: https://github.com/apache/dubbo-go/pull/934
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo-go] zouyx commented on pull request #934: build(deps): bump github.com/hashicorp/consul from 1.8.0 to 1.9.1
Posted by GitBox <gi...@apache.org>.
zouyx commented on pull request #934:
URL: https://github.com/apache/dubbo-go/pull/934#issuecomment-749304424
@dependabot ignore this dependency
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org