⬆️ Update emqx/emqx to v5.7.2 #108
Conversation
WalkthroughThe primary change involves updating the Changes
Poem
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configuration File (
|
There was a problem hiding this comment.
Actionable comments posted: 0
Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Files selected for processing (1)
- emqx/Dockerfile (1 hunks)
Additional comments not posted (1)
emqx/Dockerfile (1)
10-10: LGTM! Ensure the new version is available.The version update from
v5.7.1tov5.7.2is approved.However, verify that the new version
v5.7.2is available for download and does not introduce any breaking changes.
This PR contains the following updates:
v5.7.1->v5.7.2Release Notes
emqx/emqx (emqx/emqx)
v5.7.2: EMQX v5.7.2Compare Source
Enhancements
#13317 Added a new per-authorization source metric type:
ignore. This metric increments when an authorization source attempts to authorize a request but encounters scenarios where the authorizer is not applicable or encounters an error, resulting in an undecidable outcome.#13336 Added functionality to initialize authentication data in the built-in database of an empty EMQX node or cluster using a bootstrap file in CSV or JSON format. This feature introduces new configuration entries,
bootstrap_fileandbootstrap_type.#13348 Added a new field
payload_encodein the log configuration to determine the format of the payload in the log data.#13436 Added the option to add custom request headers to JWKS requests.
#13507 Introduced a new built-in function
getenvin the rule engine and variform expression to facilitate access to environment variables. This function adheres to the following constraints:EMQXVAR_is added before reading from OS environment variables. For example,getenv('FOO_BAR')is to readEMQXVAR_FOO_BAR.#13521 Resolved an issue where LDAP query timeouts could cause the underlying connection to become unusable, potentially causing subsequent queries to return outdated results. The fix ensures the system reconnects automatically in case of a timeout.
#13528 Applied log throttling for the event of unrecoverable errors in data integrations.
#13548 EMQX now can optionally invoke the
on_config_changed/2callback function when the plugin configuration is updated via the REST API. This callback function is assumed to be exported by the<PluginName>_appmodule.For example, if the plugin name and version are
my_plugin-1.0.0, then the callback function is assumed to bemy_plugin_app:on_config_changed/2.#13386 Added support for initializing a list of banned clients on an empty EMQX node or cluster with a bootstrap file in CSV format. The corresponding config entry to specify the file path is
banned.bootstrap_file. This file is a CSV file with,as its delimiter. The first line of this file must be a header line. All valid headers are listed here:See the Configuration Manual for details on each field.
Each row in the rest of this file must contain the same number of columns as the header line, and the column can be omitted then its value is
undefined.Bug Fixes
#13222 Resolved issues with flags checking and error handling associated with the Will message in the
CONNECTpacket.For detailed specifications, refer to:
#13307 Updated
ekkalibrary to version 0.19.5. This version ofekkautilizesmria0.8.8, enhancing auto-heal functionality. Previously, the auto-heal worked only when all core nodes were reachable. This update allows to apply auto-heal once the majority of core nodes are alive. For details, refer to the Mria PR.#13334 Implemented strict mode checking for the
PasswordFlagin the MQTT v3.1.1 CONNECT packet to align with protocol specifications.Note: To ensure bug-to-bug compatibility, this check is performed only in strict mode.
#13344 Resolved an issue where the
POST /clients/:clientid/subscribe/bulkAPI would not function correctly if the node receiving the API request did not maintain the connection to the specifiedclientid.#13358 Fixed an issue when the
reasonin theauthn_complete_eventevent was incorrectly displayed.#13375 The value
infinityhas been added as default value to the listener configuration fieldsmax_conn_rate,messages_rate, andbytes_rate.#13382 Updated the
emqttlibrary to version 0.4.14, which resolves an issue preventingemqtt_pools from reusing pools that are in an inconsistent state.#13389 Fixed an issue where the
Derived Key Lengthforpbkdf2could be set to a negative integer.#13389 Fixed an issue where topics in the authorization rules might be parsed incorrectly.
#13393 Fixed an issue where plugin applications failed to restart after a node joined a cluster, resulting in hooks not being properly installed and causing inconsistent states.
#13398 Fixed an issue where ACL rules were incorrectly cleared when reloading the built-in database for authorization using the command line.
#13403 Addressed a security issue where environment variable configuration overrides were inadvertently logging passwords. This fix ensures that passwords present in environment variables are not logged.
#13408 Resolved a
function_clausecrash triggered by authentication attempts with invalid salt or password types. This fix enhances error handling to better manage authentication failures involving incorrect salt or password types.#13419 Resolved an issue where crash log messages from the
/configsAPI were displaying garbled hints. This fix ensures that log messages related to API calls are clear and understandable.#13422 Fixed an issue where the option
force_shutdown.max_heap_sizecould not be set to 0 to disable this tuning.#13442 Fixed an issue where the health check interval configuration for actions/sources was not being respected. Previously, EMQX ignored the specified health check interval for actions and used the connector's interval instead. The fix ensures that EMQX now correctly uses the health check interval configured for actions/sources, allowing for independent and accurate health monitoring frequencies.
#13503 Fixed an issue where connectors did not adhere to the configured health check interval upon initial startup, requiring an update or restart to apply the correct interval.
#13515 Fixed an issue where the same client could not subscribe to the same exclusive topic when the node was down for some reason.
#13527 Fixed an issue in the Rule Engine where executing a SQL test for the Message Publish event would consistently return no results when a
$bridges/...source was included in theFROMclause.#13541 Fixed an issue where disabling CRL checks for a listener required a listener restart to take effect.
#13552 Added a startup timeout limit for EMQX plugins with a default timeout of 10 seconds. Before this update, problematic plugins could cause runtime errors during startup, leading to potential issues where the main startup process might hang when EMQX is stopped and restarted.
Breaking Changes
#12947 For JWT authentication, a new boolean option
disconnect_after_expirehas been added with default value set totrue. When enabled, the client will be disconnected after the JWT token expires.Previously, the clients with actual JWTs could connect to the broker and stay connected even after the JWT token expired. Now, the client will be disconnected after the JWT token expires. To preserve the previous behavior, set
disconnect_after_expiretofalse.Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.
Summary by CodeRabbit