You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@couchdb.apache.org by Jan Lehnardt <ja...@apache.org> on 2024/09/27 09:34:23 UTC
[ANNOUNCE] Apache CouchDB 3.4.1 released
Dear community,
Apache CouchDB® 3.4.1 has been released and is available for download. It is a
feature and bugfix release, and was originally published on 2024-09-27.
3.4.1? — What happened to 3.4.0?! Great question!
-------------------------------------------------
We had 3.4.0 _almost_ ready to be released and mere hours before making it
official, we realised that a new feature could lead to an unsatisfactory
scenario for some users. Namely: the automatic upgrading of password hashes to a
stronger algorithm could lead to folks upgrading to 3.4.0 and them not being
able to roll back to the previous version without locking out users that have
had their password hashes automatically upgrade.
The CouchDB team aims to make every release _safe to upgrade_, aside from major
releases with well-documented breaking changes. So 3.4.0 would not be safe to
upgrade and we decided to not announce its availability, even though everything
was ready to go.
Instead we immediately fast-tracked version 3.4.1 that disabled the feature by
default and this is instead the release that is safe to upgrade to. Please
note that the new hashing algorithm is still enabled by default. User accounts
created after the upgrade will not be able to downgrade.
The CouchDB team recommends enabling the feature once you are safely running
3.4.1 and have no longer a need to downgrade.
Release Notes highlights:
-------------------------
* Add Nouveau (beta) a modern, from-the-ground-up implementation of
Lucene-based full-text search for CouchDB.
* Add QuickJS as a JavaScript engine option. Advantages over SpiderMonkey:
* Preliminary test results show multiple performance improvements.
* 4x faster than SpiderMonkey 1.8.5.
* 5x faster than SpiderMonkey 91.
* 6x reduced memory usage per `couchjs` process (5MB vs 30MB).
* Optionally replace md5 with xxHash for data integrity checksums. 30% speed
up on larger (128k) docs, no difference for smaller docs.
* Require auth for `_replicate` endpoint. This continues the 3.x
closed-by-default design goal.
* Introduce PBKDF2-SHA256 for password hashing. The existing PBKDF2-SHA1 variant
is now deprecated.
* Many small and medium performance improvements
(https://docs.couchdb.org/en/latest/whatsnew/3.4.html#performance).
* Many, many bug fixes and improvements to our test suite.
See the official release notes document for an exhaustive list of all changes:
https://docs.couchdb.org/en/stable/whatsnew/3.4.html
Pre-built packages for Windows, macOS, Debian/Ubuntu and RHEL/CentOS as well as
Docker images for CouchDB and Nouveau are available alongside the source code
distribution:
https://couchdb.apache.org/#download
Apache CouchDB® lets you access your data where you need it. The Couch
Replication Protocol is implemented in a variety of projects and products that
span every imaginable computing environment from globally distributed
server-clusters, over mobile phones to web browsers.
Store your data safely, on your own servers, or with any leading cloud
provider. Your web- and native applications love CouchDB, because it speaks JSON
natively and supports binary data for all your data storage needs.
The Couch Replication Protocol lets your data flow seamlessly between server
clusters to mobile phones and web browsers, enabling a compelling offline-first
user-experience while maintaining high performance and strong reliability.
CouchDB comes with a developer-friendly query language, and optionally MapReduce
for simple, efficient, and comprehensive data retrieval.
The community would like to thank all contributors for their part in making
this release, from the smallest bug report or patch to major contributions in
code, design, or marketing, we couldn’t have done it without you!
On behalf of the CouchDB PMC,
Jan Lehnardt
—
AW: [ANNOUNCE] Apache CouchDB 3.4.1 released
Posted by "Krueger, Olaf" <OK...@edscha.com>.
Hi,
many thanks to everyone for the new release and your consistently excellent work!!
Best wishes,
Olaf
________________________________
Von: Jan Lehnardt <ja...@apache.org>
Gesendet: Freitag, 27. September 2024 11:34
An: announce@apache.org <an...@apache.org>; announce@couchdb.apache.org <an...@couchdb.apache.org>; user@couchdb.apache.org <us...@couchdb.apache.org>; developers CouchDB <de...@couchdb.apache.org>; marketing@couchdb.apache.org <ma...@couchdb.apache.org>
Betreff: [ANNOUNCE] Apache CouchDB 3.4.1 released
This Message Is From an External Sender
This message came from outside your organization.
Dear community,
Apache CouchDB® 3.4.1 has been released and is available for download. It is a
feature and bugfix release, and was originally published on 2024-09-27.
3.4.1? — What happened to 3.4.0?! Great question!
-------------------------------------------------
We had 3.4.0 _almost_ ready to be released and mere hours before making it
official, we realised that a new feature could lead to an unsatisfactory
scenario for some users. Namely: the automatic upgrading of password hashes to a
stronger algorithm could lead to folks upgrading to 3.4.0 and them not being
able to roll back to the previous version without locking out users that have
had their password hashes automatically upgrade.
The CouchDB team aims to make every release _safe to upgrade_, aside from major
releases with well-documented breaking changes. So 3.4.0 would not be safe to
upgrade and we decided to not announce its availability, even though everything
was ready to go.
Instead we immediately fast-tracked version 3.4.1 that disabled the feature by
default and this is instead the release that is safe to upgrade to. Please
note that the new hashing algorithm is still enabled by default. User accounts
created after the upgrade will not be able to downgrade.
The CouchDB team recommends enabling the feature once you are safely running
3.4.1 and have no longer a need to downgrade.
Release Notes highlights:
-------------------------
* Add Nouveau (beta) a modern, from-the-ground-up implementation of
Lucene-based full-text search for CouchDB.
* Add QuickJS as a JavaScript engine option. Advantages over SpiderMonkey:
* Preliminary test results show multiple performance improvements.
* 4x faster than SpiderMonkey 1.8.5.
* 5x faster than SpiderMonkey 91.
* 6x reduced memory usage per `couchjs` process (5MB vs 30MB).
* Optionally replace md5 with xxHash for data integrity checksums. 30% speed
up on larger (128k) docs, no difference for smaller docs.
* Require auth for `_replicate` endpoint. This continues the 3.x
closed-by-default design goal.
* Introduce PBKDF2-SHA256 for password hashing. The existing PBKDF2-SHA1 variant
is now deprecated.
* Many small and medium performance improvements
(https://urldefense.com/v3/__https://docs.couchdb.org/en/latest/whatsnew/3.4.html*performance__;Iw!!Lfr5fGetHw!sR8bnA0p3M4YDf0ujw7JFxqnEOMNdkF6TWNvCw678TITPHgzdKeLOQYuE3KMXU2D5g01QwF6IQ$).
* Many, many bug fixes and improvements to our test suite.
See the official release notes document for an exhaustive list of all changes:
https://urldefense.com/v3/__https://docs.couchdb.org/en/stable/whatsnew/3.4.html__;!!Lfr5fGetHw!sR8bnA0p3M4YDf0ujw7JFxqnEOMNdkF6TWNvCw678TITPHgzdKeLOQYuE3KMXU2D5g3I9PgfJA$
Pre-built packages for Windows, macOS, Debian/Ubuntu and RHEL/CentOS as well as
Docker images for CouchDB and Nouveau are available alongside the source code
distribution:
https://urldefense.com/v3/__https://couchdb.apache.org/*download__;Iw!!Lfr5fGetHw!sR8bnA0p3M4YDf0ujw7JFxqnEOMNdkF6TWNvCw678TITPHgzdKeLOQYuE3KMXU2D5g2uTNeYnw$
Apache CouchDB® lets you access your data where you need it. The Couch
Replication Protocol is implemented in a variety of projects and products that
span every imaginable computing environment from globally distributed
server-clusters, over mobile phones to web browsers.
Store your data safely, on your own servers, or with any leading cloud
provider. Your web- and native applications love CouchDB, because it speaks JSON
natively and supports binary data for all your data storage needs.
The Couch Replication Protocol lets your data flow seamlessly between server
clusters to mobile phones and web browsers, enabling a compelling offline-first
user-experience while maintaining high performance and strong reliability.
CouchDB comes with a developer-friendly query language, and optionally MapReduce
for simple, efficient, and comprehensive data retrieval.
The community would like to thank all contributors for their part in making
this release, from the smallest bug report or patch to major contributions in
code, design, or marketing, we couldn’t have done it without you!
On behalf of the CouchDB PMC,
Jan Lehnardt
—
________________________________
Edscha Holding GmbH
Sitz der Gesellschaft: Remscheid
Registergericht: Wuppertal, HRB 22889
Geschäftsführung: Francisco J. Riberas Mera, David Vázquez Pascual, César Pontvianne de la Maza, Roberto Aristi Ansorena, Ervin Jahic und Volker Weiss
Vertretungsberechtigt sind nur Geschäftsführer und schriftlich Bevollmächtigte.
Solely Managing Directors or employees with a written proxy have got power of representation.
Edscha Holding GmbH ist ein Unternehmen der Gestamp Gruppe.
Diese E-Mail, die darin enthaltenen Informationen und/oder etwaige Anhänge (nachstehend die „Nachricht“), ist nur für die Person(en) zu lesen bestimmt, an die sie gerichtet ist. Sollten Sie nicht der beabsichtigte Empfänger sein, werden Sie hiermit darauf hingewiesen, dass das unbefugte Lesen, Verwenden, Offenlegen und/oder Kopieren der Nachricht nach geltendem Recht verboten sein kann. Sollten Sie diese Nachricht irrtümlich erhalten haben, informieren Sie uns bitte umgehend, indem Sie auf diese Nachricht antworten und vernichten diese anschließend. Die Nachricht kann private und vertrauliche Informationen enthalten. Jegliche Bearbeitung oder Verwendung dieser Informationen muss mit der größtmöglichen Sorgfalt in Bezug auf die Vertraulichkeit erfolgen, da ihre Weitergabe zu anderen Zwecken als den in der Nachricht genannten oder aus ihr abgeleiteten verboten ist. Außerdem kann die Nachricht personenbezogene Daten enthalten. Wir informieren Sie, dass Gestamp die Datenschutzbestimmungen einhält. Für weitere Informationen empfehlen wir Ihnen, die auf der Website von Gestamp veröffentlichte Datenschutzgrundsätze<https://gestamp.com/Data-protection-policy> <https://gestamp.com/Data-protection-policy> zu lesen.
Edscha Holding GmbH is a company of the Gestamp group.
This e-mail, the information contained therein and/or any attachments (hereinafter the "message"), is intended to be read only by the person(s) to whom it is addressed. If you are not the intended recipient, you are hereby notified that unauthorized reading, use, disclosure and/or copying of the message may be prohibited under applicable law. If you have received this message by mistake, please inform us immediately by replying to this message and proceed to its destruction. The message may contain private and confidential information. Any treatment or use thereof, must be carried out with the highest possible degree of diligence in terms of confidentiality, being prohibited its disclosure for purposes other than the matter detailed in the message or inferred from it. Furthermore, the message may contain personal data. We inform you that Gestamp complies with Data Protection regulations. For more information, we recommend that you read the Data Protection Policy<https://gestamp.com/Data-protection-policy> published on the Gestamp website.