Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Apr 11, 2022

Bumps pulsar-client from 2.6.1 to 2.10.0.

Release notes

Sourced from pulsar-client's releases.

v2.9.2

Security

  • Getting rid of CVEs in Solr connector #13822
  • Getting rid of CVEs in InfluxDB connector #13821
  • Getting rid of CVEs in batch-data-generator #13820
  • Getting rid of CVEs brought in with aerospike #13819
  • [owasp] Suppress false positive Avro CVE-2021-43045 #13764
  • [security] Upgrade protobuf to 3.16.1 to address CVE-2021-22569 #13695
  • [security] Upgrade Jackson to 2.12.6 #13694
  • [security] Upgrade Log4j to 2.17.1 to address CVE-2021-44832 #13552
  • [security] Upgrade to Log4J 2.17.0 to mitigate CVE-2021-45105 #13392
  • Cipher params not work in KeyStoreSSLContext #13322
  • Use JDK default security provider when Conscrypt isn't available #12938
  • [authorization] Return if namespace policies are read only #12514
  • [security] Upgrade Postgre driver to 42.2.25 to get rid of CVE-2022-21724 #14119
  • Bump slf4j from 1.7.25 to 1.7.32 #13595
  • [security] Upgrade Netty to 4.1.72 - CVE-2021-43797 #13328

Broker

  • Fix lost message issue due to ledger rollover. #14664
  • [tests] Fix thread leak in MLTransactionMetadataStore #14524
  • Fix npe in ManagedLedgerImpl #14481
  • [broker] Fix Future.join() causing deadlock. #14469
  • [broker] Fix Broker HealthCheck Endpoint Exposes Race Conditions #14367
  • Validate rack name #14336
  • [pulsar-broker] Fix avg-messagePerEntry metrics for consumer #14330
  • Fix the wrong parameter in the log. #14309
  • Fix batch ack count is a negative issue. #14288
  • Bug fix: IllegalArgumentException: Invalid period 0.0 to calculate rate #14280
  • Clean up individually deleted messages before the mark-delete position #14261
  • If mark-delete operation fails, mark the cursor as "dirty" #14256
  • Fixed detecting number of NICs in EC2 #14252
  • Remove log unacked msg. #14246
  • [broker] Change broker producer fence log level #14196
  • [issue 14105] Avoid creating any topics in NamespaceService#checkTopicExists during topic lookup. #14134
  • Fix NPE of cumulative ack mode and incorrect unack message count #14021
  • Fixes NPE - ReplicatedSubscriptionsController send marker message when enable deduplicated. #14017
  • KeyShared stickyHashRange subscription: prevent stuck subscription in case of consumer restart #14014
  • Add null check to workaround NPE in unit tests with Mockito/PowerMock #14006
  • Fixed handling of consumers with equal names on on key shared selector with consistent hashing #13991
  • Trim configuration value string which contains blank prefix or suffix #13984
  • [broker] WaitingCursors potential heap memory leak #13939
  • [broker] Fix read schema compatibility strategy priority #13938
  • [branch-2.9] Fix SystemTopicBasedTopicPoliciesService NPE issue. #13840
  • NPE when get isAllowAutoUploadSchema #13831
  • [broker] Fix topic produced through REST not support Authorization #13771
  • Fix call sync method in async rest API for internalGetSubscriptionsForNonPartitionedTopic #13745
  • Fix the deadlock while using zookeeper thread to create ledger #13744
  • [broker] Fix inefficient forEach loop #13742
  • [issuse 13640][broker] Fix non persistent topic subscription error. #13685

... (truncated)

Commits
  • 2318a18 [Broker] Fix NPE when subscription is already removed (#14363)
  • 766e5fe [refactor][proxy] Refactor Proxy code and fix connection stalling by switchin...
  • dae653f [Proxy] Log warning when opening connection to broker fails (#14710)
  • b5b8cb0 [C++] Fix segmentation fault when creating socket failed (#14834)
  • 8eefaff [C++] Fix the race condition of connect timeout task (#14823)
  • d8e843b [C++] Fix producer is never destructed until client is closed (#14797)
  • a1abf28 KCA: Option to sanitize topic name for the conenctors that cannot handle puls...
  • 5428a22 [fix][broker] Fixed duplicated delayed messages when all consumers disconnect...
  • 6d3fbbe [fix][txn]: fix transaction pending ack store managed ledger WriteFail state ...
  • a1be5e0 [Transaction] Fix transaction buffer recover BrokerMetadataException close to...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pulsar-client](https://github.com/apache/pulsar) from 2.6.1 to 2.10.0.
- [Release notes](https://github.com/apache/pulsar/releases)
- [Commits](apache/pulsar@v2.6.1...v2.10.0)

---
updated-dependencies:
- dependency-name: org.apache.pulsar:pulsar-client
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 11, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jul 4, 2022

Superseded by #1174.

@dependabot dependabot bot closed this Jul 4, 2022
@dependabot dependabot bot deleted the dependabot/gradle/modules/pulsar/org.apache.pulsar-pulsar-client-2.10.0 branch July 4, 2022 23:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant