The GitHub Actions job "CI" on 
rocketmq-dashboard.git/feature/studio-backend-optimizations has succeeded.
Run started by GitHub user zhaohai666 (triggered by zhaohai666).

Head commit for run:
ada28d123099f4cf8cf36f6e8b436db4d29e1af9 / zhaohaihzb <[email protected]>
refactor(server): bound topic-consumer N+1, fail-closed SSRF, minor cleanups

- B1: getTopicConsumers no longer requests Integer.MAX_VALUE groups from the
  broker (one examineConsumeStats + one examineConsumerConnectionInfo RPC per
  group = unbounded N+1). Cap the non-paginated scan at 
TOPIC_CONSUMER_SCAN_LIMIT
  (1000); topics with more consumer groups should use the paginated
  /consumers/page endpoint instead.
- B2: SettingsService.isAllowedDataSourceHost now fails closed on
  UnknownHostException (returns false) instead of true, matching
  UrlHostGuard.check and removing a blind reachability oracle for unresolvable
  hosts. Loopback/private rejection policy is unchanged, so existing tests
  (including the direct areAllowedDataSourceAddresses tests) keep passing.
- B12: the two catch (Exception ignored) blocks in getTopicConsumersPage now
  log the skipped group at debug level instead of swallowing silently.
- B11: LlmConfigService.getConfig dropped a redundant double negation
  (!!StringUtils.hasText) in favor of StringUtils.hasText.

Note: TencentClientFactory @PreDestroy (originally planned) was NOT added —
the Tencent SDK AbstractClient exposes no close/shutdown, so there is nothing
to release at shutdown.

Report URL: 
https://github.com/apache/rocketmq-dashboard/actions/runs/32213320625

With regards,
GitHub Actions via GitBox

Reply via email to