You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@skywalking.apache.org by GitBox <gi...@apache.org> on 2022/11/21 22:40:08 UTC
[GitHub] [skywalking-java] dependabot[bot] opened a new pull request, #393: Bump xxl-job-core from 2.2.0 to 2.3.1 in /test/plugin/scenarios/xxl-job-2.2.0-scenario
dependabot[bot] opened a new pull request, #393:
URL: https://github.com/apache/skywalking-java/pull/393
Bumps [xxl-job-core](https://github.com/xuxueli/xxl-job) from 2.2.0 to 2.3.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/xuxueli/xxl-job/releases">xxl-job-core's releases</a>.</em></p>
<blockquote>
<h2>XXL-JOB v2.3.1，分布式任务调度平台</h2>
<ul>
<li>1、【修复】修复风险漏洞，升级问题低版本项目依赖：CVE-2021-2471、CVE-2022-22965等。</li>
<li>2、【修复】修复故障告警逻辑，邮箱校验逻辑下放至EmailJobAlarm中，避免对其他告警方式的干扰。</li>
<li>3、【优化】调度通讯默认启用accessToken，提升系统安全性（建议生产环境自定义accessToken）。</li>
<li>4、【优化】合并多项PR，项目代码结构、健壮性优化：PR-2833、PR-2812、PR-2541、PR-2537、PR-2514、PR-2509、PR-2591。</li>
<li>5、【优化】任务线程名优化，提升可读性与问题定位效率(ISSUE-2527)。</li>
</ul>
<h2>XXL-JOB v2.3.0，分布式任务调度平台</h2>
<h3>Release Notes</h3>
<ul>
<li>1、【新增】调度过期策略：调度中心错过调度时间的补偿处理策略，包括：忽略、立即补偿触发一次等；</li>
<li>2、【新增】触发策略：除了常规Cron、API、父子任务触发方式外，新增提供 "固定间隔触发、（固定延时触发，实验中）" 新触发方式；</li>
<li>3、【新增】新增任务辅助工具 "XxlJobHelper"：提供统一任务辅助能力，包括：任务上下文信息维护获取（任务参数、任务ID、分片参数）、日志输出、任务结果设置……等；
<ul>
<li>3.1、"ShardingUtil" 组件废弃：改用 "XxlJobHelper.getShardIndex()/getShardTotal();" 获取分片参数；</li>
<li>3.2、"XxlJobLogger" 组件废弃：改用 "XxlJobHelper.log" 进行日志输出；</li>
</ul>
</li>
<li>4、【优化】任务核心类 "IJobHandler" 的 "execute" 方法取消出入参设计。改为通过 "XxlJobHelper.getJobParam" 获取任务参数并替代方法入参，通过 "XxlJobHelper.handleSuccess/handleFail" 设置任务结果并替代方法出参，示例代码如下；</li>
</ul>
<pre><code>@XxlJob("demoJobHandler")
public void execute() {
String param = XxlJobHelper.getJobParam(); // 获取参数
XxlJobHelper.handleSuccess(); // 设置任务结果
}
</code></pre>
<ul>
<li>5、【优化】Cron编辑器增强：Cron编辑器修改cron时可实时查看最近运行时间;</li>
<li>6、【优化】执行器示例项目规范整理；</li>
<li>7、【优化】任务调度生命周期重构：调度（schedule）、触发(trigger)、执行（handle）、回调(callback)、结束（complete）；</li>
<li>8、【优化】执行器注册组件优化：注册逻辑调整为异步方式，提高注册性能；</li>
<li>9、【优化】执行器鉴权校验：执行器启动时主动校验accessToken，为空则主动Warn告警；（已规划安全强化：AccessToken动态生成、动态启停等）</li>
<li>10、【优化】邮箱告警配置优化：将"spring.mail.from"与"spring.mail.username"属性拆分开，更加灵活的支持一些无密码邮箱服务；</li>
<li>11、【优化】多个项目依赖升级至较新稳定版本，如netty、groovy、spring、springboot、mybatis等；</li>
<li>12、【优化】UI组件常规升级，提升组件稳定性；</li>
<li>13、【优化】调度中心页面交互优化：用户管理模块密码列取消；多处表达autocomplete取消；执行器管理模块XSS拦截校验等；</li>
<li>14、【优化】调度中心任务状态探测慢SQL问题优化；</li>
<li>15、【修复】GLUE-Java模式任务，init/destroy无法执行问题修复；</li>
<li>16、【修复】Cron编辑器问题修复：修复小概率情况下cron单个字段修改时导致其他字段被重置问题；</li>
<li>17、【修复】通用HTTP任务Handler（httpJobHandler）优化：修复 "setDoOutput(true)" 导致任务请求GetMethod失效问题；</li>
<li>18、【修复】执行器Commandhandler示例任务优化，修复极端情况下脚本进程挂起问题；</li>
<li>19、【修复】调度通讯组件优化，修复RestFul方式调用 DotNet 版本执行器时心跳检测失败问题；</li>
<li>20、【修复】调度中心远程执行日志查询乱码问题修复；</li>
<li>21、【修复】调度中心组件加载顺序优化，修复极端情况下调度组件初始慢导致的调度失败问题；</li>
<li>22、【修复】执行器注册线程优化，修复极端情况下初始化失败时导致NPE问题；</li>
<li>23、【修复】调度线程连接池优化，修复连接有效性校验超时问题；</li>
<li>24、【修复】执行器注册表字段优化，解决执行器注册节点过多导致注册信息存储和更新失败的问题；</li>
<li>25、【修复】轮训路由策略优化，修复小概率下并发问题；</li>
<li>26、【修复】页面redirect跳转后https变为http问题修复；</li>
<li>27、【修复】执行器日志清理优化，修复小概率下日志文件为空导致清理异常问题；</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/xuxueli/xxl-job/commit/76ab3f2cadb288df22a962af93caa54b1565fdac"><code>76ab3f2</code></a> update document</li>
<li><a href="https://github.com/xuxueli/xxl-job/commit/c668dfa9e0da6b885a899496ec3cf4767dbde815"><code>c668dfa</code></a> Merge branch 'master' of <a href="https://github.com/xuxueli/xxl-job">https://github.com/xuxueli/xxl-job</a></li>
<li><a href="https://github.com/xuxueli/xxl-job/commit/7e6b3b732c784e15c2f5976a2c187f4d178064cf"><code>7e6b3b7</code></a> upgrade version</li>
<li><a href="https://github.com/xuxueli/xxl-job/commit/cc79b67cd991346125438933ce77b1f22e3130d0"><code>cc79b67</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/xuxueli/xxl-job/issues/2591">#2591</a> from lzwcyd/master</li>
<li><a href="https://github.com/xuxueli/xxl-job/commit/390165d733ccaf14096bfb259863b9bdb2c58f86"><code>390165d</code></a> 调度通讯默认启用accessToken，提升系统安全性（建议生产环境自定义accessToken）。</li>
<li><a href="https://github.com/xuxueli/xxl-job/commit/a4db25db6154b2d21913523f4f9db3259fa9ed2a"><code>a4db25d</code></a> Merge branch 'master' of <a href="https://github.com/xuxueli/xxl-job">https://github.com/xuxueli/xxl-job</a></li>
<li><a href="https://github.com/xuxueli/xxl-job/commit/fa2dfc97497fd3a9911dec83c4143f15ba71c362"><code>fa2dfc9</code></a> upgrade</li>
<li><a href="https://github.com/xuxueli/xxl-job/commit/a466a6cf330167b2d33b8e740e05a534a68d1efd"><code>a466a6c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/xuxueli/xxl-job/issues/2833">#2833</a> from cszxyang/polish_20220419</li>
<li><a href="https://github.com/xuxueli/xxl-job/commit/fbc02e57195ebfb3bb3240d4b1ba455b06e3f594"><code>fbc02e5</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/xuxueli/xxl-job/issues/2812">#2812</a> from DoolinMa/master</li>
<li><a href="https://github.com/xuxueli/xxl-job/commit/0931df7153c21204278e4352c536e1896ca1f13a"><code>0931df7</code></a> code optimize</li>
<li>Additional commits viewable in <a href="https://github.com/xuxueli/xxl-job/compare/v2.2.0...2.3.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/skywalking-java/network/alerts).
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@skywalking.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [skywalking-java] wu-sheng closed pull request #393: Bump xxl-job-core from 2.2.0 to 2.3.1 in /test/plugin/scenarios/xxl-job-2.2.0-scenario
Posted by GitBox <gi...@apache.org>.
wu-sheng closed pull request #393: Bump xxl-job-core from 2.2.0 to 2.3.1 in /test/plugin/scenarios/xxl-job-2.2.0-scenario
URL: https://github.com/apache/skywalking-java/pull/393
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@skywalking.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [skywalking-java] dependabot[bot] commented on pull request #393: Bump xxl-job-core from 2.2.0 to 2.3.1 in /test/plugin/scenarios/xxl-job-2.2.0-scenario
Posted by GitBox <gi...@apache.org>.
dependabot[bot] commented on PR #393:
URL: https://github.com/apache/skywalking-java/pull/393#issuecomment-1322852239
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@skywalking.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org