Skip to content

dubbo-2.7.8
Compare
Choose a tag to compare
@mercyblitz mercyblitz released this 28 Jul 02:18
dubbo-2.7.8
0be2a1b
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Features

  • Upgrading the Nacos Registry to support the dynamic properties #6417
  • REST Protocol Enhancement to support Tomcat 9.x #6402 #6418
  • Hessian2 supports Whitelist #6378 #6415
  • Save memory usage in TagRouter #6083 #6082
  • Deleting useless logic from Configurator #6395
  • Adding the validating for the RPC invocation method parameters #6374
  • Registering the common beans for Spring XML meta-configuration #6175 #6288
  • Supporting TypeBuilder sorting #6365 #6307 #6306
  • Service Introspection Enhancement #6366
    • Refatoring MetadataServiceExporter #6356
    • Introducing the composite implementation of MetadataService #6171
    • Merging all subscribied URLs from the multiple services #6346
    • Introducing the method of supporting the config-center for the Registry interface #6319
    • Refactoring MetadataReport's methods #6310
    • Adding the "services" attribute into <dubbo:reference> element #6173
    • Adding the "services" attribute methods into @DubboReference #6172
    • Introducing the composite ServiceNameMapping #6342
    • Introducing the externalized configuration for ServiceNameMapping #6170
    • org.apache.dubbo.metadata.ServiceNameMapping #6336
    • Using mandatory implementation of Service Instance registration instead of the event #6333
    • Refactoring the implememtation of MetadataReport based on The Config-Center infrastructure #6315
    • Adding the implementation of MetadataReport's new methods for Nacos #6309
    • ServiceConfig and ReferenceConfig publish the ServiceDefinition based on the Dubbo Event #6305
    • Adding the new methods into MetadataReport to manipulate the exported URLs for service introspection #6296
    • Changing the behavior of RegistryConfig#getUseAsConfigCenter to be optional #6247
  • Adding visual-studio-code ignore #6221 #6287
  • Put default version&group from provider and consumer into service metadata #6111
  • Reduce memory allocation during address change notification #5613
  • check invoker available status after proxy created. #6435
  • Introducing default behavior of the properties "useAsConfigCenter" and "useAsMetadataCenter" in RegistryConfig #6459

Bugfixes

  • Resolving the issue about Spring Beans Initializing eagerly #6419
  • Fix callback throw "Not found exported service" when serviceUrl has bind.port paramater. #6223
  • Resolving the issue on ConsulServiceDiscovery#getServices() returning null #6389
  • Fix ClassCastException in PojoUtils #6106
  • Fix NPE when check=false is set and provider is empty #6376
  • Fix the priority of ListenableRouter were not effective #4822 #6148
  • Changing the log level to be info when the url is generic #6241#6363
  • Resolving the issue about @DubboReference‘s Filter Chain not working on Spring local beans #6224
  • Fixing NacosDynamicConfiguration#publishConfig bug #6198
  • dubbo-compatible @SPI interface compatible not work #6428
  • The duplicated path in Tree-Path config-center #6442
  • The missing protocol of MetadataReportConfig when the proeprty "useAsMetadataCenter" of RegistryConfig is enabled #6476
  • Resolving the issue of duplicated registration for DubboBootstrapApplicationListener #6231#6253

Dependency Upgrades

  • Upgrading the artifact com.alibaba.spring:spring-context-support:1.0.7 #6425
  • Upgrading the artifact com.alibaba.spring:spring-context-support:1.0.8 #6457
  • Upgrading the artifact com.alibaba:dubbo-hessian-lite:3.2.8 #6262
  • Upgrading the artifact com.alibaba:fastjson:1.2.70 #6254
  • Upgrading the artfcat com.alibaba.nacos:nacos-client:1.3.1 #6465

Vulnerability

https://lists.apache.org/thread.html/r5b2df4ef479209dc4ced457b3d58a887763b60b9354c3dc148b2eb5b%40%3Cdev.dubbo.apache.org%3E

This vulnerability can affect all Dubbo users using 2.5.x, 2.6.x and 2.7.x, please upgrade to 2.6.9 or 2.7.8 to solve this issue. Check here for how to enable Hessian2 whitelist/blacklist: #6378

Contributors

Thanks for the following contributors for this release:

Assets 2
Loading