commits  

Messages by Thread

• (storm) branch master updated: Sync checkstyle config with upstream google_checks.xml (#8969) rzo1
  • (storm) branch master updated: Sync checkstyle config with upstream google_checks.xml (#8969) rzo1
• (storm) branch dependabot/github_actions/actions/setup-java-6.0.0 deleted (was f66a51e2a) github-bot
• (storm) branch master updated (313daccd8 -> 75b8c1f85) rabreu
  • (storm) 01/01: Merge pull request #9015 from apache/dependabot/github_actions/actions/setup-java-6.0.0 rabreu
• (storm) branch dependabot/github_actions/actions/setup-java-6.0.0 created (now f66a51e2a) github-bot
• [PR] build(deps): bump actions/setup-java from 5.7.0 to 6.0.0 (storm) via GitHub
• (storm) branch master updated: Require every UI API endpoint to declare its authorization (#9004) rzo1
• (storm) branch master updated: Test the OCI launch-command username and mount-source enforcement (#9014) rzo1
• (storm) branch worker-launcher-oci-launch-cmd-tests created (now 87793d507) rabreu
  • (storm) 01/01: Test the OCI launch-command username and mount-source enforcement rabreu
• (storm) branch master updated: Return independently owned value arrays from get_values (#9013) rzo1
• (storm) branch master updated: Restrict OCI bind-mount sources to configured directories and check the launch command username (#9010) rzo1
• (storm) branch master updated: Reject a topology submission that lists a blob key which is not a dependency blob key (#9012) rzo1
• (storm) branch worker-launcher-oci-mount-sources updated (4a71be092 -> 25c09eee5) rabreu
• (storm) branch fix/validate-dependency-blob-keys deleted (was abafd632b) rzo1
• (storm) branch worker-launcher-fd-permissions deleted (was 9f5b41ac1) rzo1
• (storm) branch master updated: Apply worker file ownership and mode via an open descriptor (#9006) rzo1
• (storm) branch master updated: Validate the container id and invoke runc without a shell in reap-oci-container (#9008) rzo1
• (storm) branch worker-launcher-reap-oci-container deleted (was 84b51fa81) rzo1
• (storm) branch master updated: STORM-3871: remove a topology's dependency artifact blobs when it is cleaned up (#9011) rzo1
• (storm) branch fix/blobstore-dependency-cleanup deleted (was 7b190a615) rzo1
• (storm) branch worker-launcher-config-value-arrays created (now ac255189a) rabreu
  • (storm) 01/01: Return independently owned value arrays from get_values rabreu
• (storm) branch worker-launcher-oci-mount-sources updated (acac7d6b5 -> 4a71be092) rabreu
• (storm) branch worker-launcher-reap-oci-container updated (31b8cbe13 -> 84b51fa81) rabreu
• (storm) branch worker-launcher-fd-permissions updated (a64a544e4 -> 9f5b41ac1) rabreu
• (storm) branch fix/validate-dependency-blob-keys updated (3bbf1ac97 -> abafd632b) rzo1
• (storm) branch fix/blobstore-dependency-cleanup updated (5819a2b70 -> 7b190a615) rzo1
• (storm) branch master updated: Check the calling principal against the topology owner in uploadNewCredentials (#9001) rzo1
• (storm) branch fix/nimbus-credentials-owner-check deleted (was 67a36d306) rzo1
• (storm) branch fix/nimbus-topology-history-identity deleted (was 52a45b995) rzo1
• (storm) branch fix/validate-dependency-blob-keys updated (317b35f2e -> 3bbf1ac97) rzo1
• (storm) branch fix/blobstore-dependency-cleanup updated (1ea0dc047 -> 5819a2b70) rzo1
• (storm) branch fix/nimbus-credentials-owner-check updated (14896795d -> 67a36d306) rzo1
• (storm) branch fix/nimbus-credentials-owner-check updated (23fdf7e1f -> 14896795d) rzo1
• (storm) branch master updated: Filter the topology history by the authenticated caller rather than the requested user name (#9003) rzo1
• (storm) branch fix/nimbus-topology-history-identity updated (086916938 -> 52a45b995) rzo1
• (storm) branch fix/nimbus-createstate-authorization deleted (was 3371d2b65) rzo1
• (storm) branch master updated: Authorize createStateInZookeeper requests like the other blob operations rzo1
• (storm-site) branch asf-site updated: publishing 2026-08-23T20:15:47+00:00 github-bot
• (storm-site) branch main updated: Retro fitting https://github.com/apache/storm/pull/8984 rabreu
• (storm) branch master updated: Apply the nimbus ACLs to listBlobs so callers only see blobs they may read (#9000) rzo1
• (storm) branch worker-launcher-reap-oci-container updated (0c7e2461a -> 31b8cbe13) rzo1
• (storm) branch fix/validate-dependency-blob-keys created (now 317b35f2e) rzo1
  • (storm) 01/01: Reject a topology submission that lists a blob key which is not a dependency blob key rzo1
• (storm) branch master updated: Read and check the docker command file before changing worker directory ownership rzo1
• (storm) branch worker-launcher-oci-mount-sources updated (bc02b570d -> acac7d6b5) rabreu
• (storm) branch master updated: Evaluate authorization for requests that carry no principal (#9005) rzo1
• (storm) branch fix/blobstore-dependency-cleanup created (now 1ea0dc047) rzo1
  • (storm) 01/01: STORM-3871: remove a topology's dependency artifact blobs when it is cleaned up rzo1
• (storm) branch worker-launcher-oci-mount-sources created (now bc02b570d) rabreu
• (storm) branch worker-launcher-profile-docker-container created (now d9bdeba95) rabreu
• (storm) branch worker-launcher-reap-oci-container created (now 0c7e2461a) rabreu
• (storm) branch worker-launcher-docker-command-file created (now 54f6ce97f) rabreu
• (storm) branch worker-launcher-fd-permissions created (now a64a544e4) rabreu
  • (storm) 01/01: Apply worker file ownership and mode via an open descriptor rabreu
• (storm) branch fix/nimbus-listblobs-authorization updated (67030409e -> 4748889a0) rzo1
• (storm) branch master updated: Evaluate nimbus.groups when nimbus.users is empty (#8998) rzo1
• (storm) branch fix/rebalance-blobstore-map-validation deleted (was e597fd90c) rzo1
• (storm) branch master updated: Validate topology.blobstore.map in rebalance conf overrides against the calling user (#8999) rzo1
• (storm) branch fix/nimbus-topology-history-identity created (now 086916938) rzo1
  • (storm) 01/01: Filter the topology history by the authenticated caller rather than the requested user name rzo1
• (storm) branch fix/nimbus-createstate-authorization created (now 3371d2b65) rzo1
  • (storm) 01/01: Authorize createStateInZookeeper requests like the other blob operations rzo1
• (storm) branch fix/nimbus-listblobs-authorization created (now 67030409e) rzo1
  • (storm) 01/01: Apply the nimbus ACLs to listBlobs so callers only see blobs they may read rzo1
• (storm) branch fix/nimbus-credentials-owner-check created (now 23fdf7e1f) rzo1
  • (storm) 01/01: Check the calling principal against the topology owner in uploadNewCredentials rzo1
• (storm) branch fix/nimbus-acl-groups-without-users created (now a45df27c1) rzo1
  • (storm) 01/01: Evaluate nimbus.groups when nimbus.users is empty rzo1
• (storm) branch fix/rebalance-blobstore-map-validation created (now e597fd90c) rzo1
  • (storm) 01/01: Validate topology.blobstore.map in rebalance conf overrides against the calling user rzo1
• (storm) branch update-license-files created (now 6a48e725d) github-bot
• (storm) branch fix/ui-jsonp-callback-option deleted (was a6cf4f6dd) rzo1
• (storm) branch master updated: Apply the configured log user and group lists to daemon log requests (#8973) rzo1
• (storm) branch fix/drpc-function-queue-eviction deleted (was 65c36aa71) rzo1
• (storm) branch master updated: Remove DRPC per-function request queues once they are empty (#8985) rzo1
• (storm) branch fix/drpc-function-queue-eviction updated (962a595d0 -> 65c36aa71) rzo1
• (storm) branch master updated: Add ui.enable.jsonp to control JSONP callback wrapping in UI and Logviewer API responses (#8977) rzo1
• (storm) branch update-license-files updated (390cd5581 -> d77982d71) github-bot
• (storm) branch master updated: Generate tuple tree ids from a key stream instead of a recoverable linear congruential generator (#8989) rzo1
• (storm) branch fix/message-id-random-source deleted (was 2a41a038a) rzo1
• (storm) branch update-license-files deleted (was d77982d71) github-bot
• (storm) branch update-license-files deleted (was b7865e47a) github-bot
• (storm) branch update-license-files updated (6a48e725d -> b7865e47a) github-bot
• (storm) branch fix/logviewer-daemon-log-file-access deleted (was 63e31ce9b) rzo1
• (storm) branch fix/logviewer-daemon-log-file-access updated (471f3e267 -> 63e31ce9b) rzo1
• (storm) branch master updated: Regenerate license files after dependency changes (#8996) rzo1
• (storm) branch master updated: BugFix Utils.java (#8972) rzo1
• (storm) branch fix/webapp-tls-cipher-exclusions deleted (was 36d674b02) rzo1
• (storm) branch update-license-files created (now 390cd5581) github-bot
• (storm) branch master updated: Set the CORS filter credentials parameter explicitly instead of a header name that the filter ignores rzo1
• (storm) branch fix/webapp-cors-filter-defaults deleted (was ad0811deb) rzo1
• (storm) branch fix/scheduler-strategy-allowlist-default deleted (was 8e2710cdb) rzo1
• (storm) branch master updated: Pass only the required Kafka consumer properties to the spout lag monitor rzo1
• (storm) branch fix/webapp-cors-filter-defaults updated (e7794095a -> ad0811deb) rzo1
• (storm) branch docs/scheduler-strategy-whitelist-note deleted (was efbf2f38e) rzo1
• (storm) branch master updated: Document that an unset scheduler strategy whitelist no longer allows every strategy class rzo1
• (storm) branch docs/scheduler-strategy-whitelist-note created (now efbf2f38e) rzo1
  • (storm) 01/01: Document that an unset scheduler strategy whitelist no longer allows every strategy class rzo1
• (storm) branch master updated: Add to instead of replace Jetty's default TLS exclusions on HTTPS connectors rzo1
• (storm) branch master updated: Decode netty server frames only after the handshake completes rzo1
• (storm) branch master updated: Restrict topology scheduler strategies to the shipped strategies when no allowlist is configured rzo1
• (storm) branch fix/spout-lag-consumer-property-filter deleted (was a0ee4ff10) rzo1
• (storm) branch fix/drpc-function-queue-eviction updated (12f324a36 -> 962a595d0) rzo1
• (storm) branch fix/logviewer-daemon-log-file-access updated (3748f59c6 -> 471f3e267) rzo1
• (storm) branch fix/webapp-tls-cipher-exclusions updated (a369da716 -> 36d674b02) rzo1
• (storm) branch fix/spout-lag-consumer-property-filter updated (fe2b3f4be -> a0ee4ff10) rzo1
• (storm) branch fix/webapp-cors-filter-defaults updated (e4d7bd4c4 -> e7794095a) rzo1
• (storm) branch fix/message-id-random-source updated (db1ab8f43 -> 2a41a038a) rzo1
• (storm) branch master updated: Reject blobstore map local names that resolve outside the topology and worker directories rzo1
• (storm) branch fix/scheduler-strategy-allowlist-default updated (0bd6458d1 -> 8e2710cdb) rzo1
• (storm) branch master updated: Require Kryo class registration in the state serializer rzo1
• (storm) branch master updated: Return a normalized copy of the topology conf from Nimbus rzo1
• (storm) branch fix/dependency-blob-key-namespacing deleted (was a1034b0e9) rzo1
• (storm) branch master updated: Give each uploaded dependency artifact its own blob key instead of reusing a pre-existing blob rzo1
• (storm) branch master updated: Reject image tags that are neither mapped nor valid image hashes before building the manifest path (#8983) rzo1
• (storm) branch fix/netty-client-endpoint-identification deleted (was 1ef4431aa) rzo1
• (storm) branch master updated: Verify the peer identity of the Netty TLS server the worker client connects to rzo1
• (storm) branch fix/supervisor-blobstore-localname-paths deleted (was af6bbf975) rzo1
• (storm) branch master updated: Update logging behavior rzo1
• (storm) branch master updated: Stop echoing the request Origin with allow-credentials in logviewer JSON responses rzo1
• (storm) branch fix/nimbus-submitted-jar-location-check deleted (was 06f6d631d) rzo1
• (storm) branch master updated (2d972caa3 -> 22bd22a6a) rzo1
• (storm) branch fix/logviewer-cors-response-headers deleted (was fa6772210) rzo1
• (storm) branch fix/oci-image-tag-manifest-lookup deleted (was 2cbb82c56) rzo1
• (storm) branch fix/logviewer-download-permission-order deleted (was 285801c36) rzo1
• (storm) branch master updated: Change the worker log file permission only for download requests that are served (#8978) rzo1
• (storm) branch master updated: Return only the log files the requesting user may access from the log file listing (#8974) rzo1
• (storm) branch fix/logviewer-log-listing-user-filter deleted (was 32585b542) rzo1
• (storm) branch fix/message-id-random-source created (now 60766b153) rzo1
  • (storm) 01/01: Generate tuple tree ids from a key stream instead of a recoverable linear congruential generator rzo1
• (storm) branch fix/spout-lag-consumer-property-filter created (now fe2b3f4be) rzo1
  • (storm) 01/01: Pass only the required Kafka consumer properties to the spout lag monitor rzo1
• (storm) branch fix/message-id-random-source updated (60766b153 -> db1ab8f43) rzo1
  • (storm) 01/01: Generate tuple tree ids from a key stream instead of a recoverable linear congruential generator rzo1
• (storm) branch fix/scheduler-strategy-allowlist-default created (now 0bd6458d1) rzo1
  • (storm) 01/01: Restrict topology scheduler strategies to the shipped strategies when no allowlist is configured rzo1
• (storm) branch fix/drpc-function-queue-eviction created (now 12f324a36) rzo1
  • (storm) 01/01: Remove DRPC per-function request queues once they are empty rzo1
• (storm) branch fix/netty-client-endpoint-identification created (now 1ef4431aa) rzo1
  • (storm) 01/01: Verify the peer identity of the Netty TLS server the worker client connects to rzo1
• (storm) branch docs/heartbeat-clarify-deprecate-supervisor-timeout deleted (was 251a6ca18) rzo1
• (storm) branch master updated: Clarify worker/supervisor heartbeat docs and deprecate unused nimbus.supervisor.timeout.secs (#8984) rzo1
• (storm) branch fix/oci-image-tag-manifest-lookup updated (9a41e23be -> 2cbb82c56) rzo1
• (storm) branch docs/heartbeat-clarify-deprecate-supervisor-timeout updated (c15858d8d -> 251a6ca18) rabreu
• (storm) branch docs/heartbeat-clarify-deprecate-supervisor-timeout updated (39d6d90cd -> c15858d8d) rabreu
• (storm) branch docs/heartbeat-clarify-deprecate-supervisor-timeout updated (4f1b4ecd5 -> 39d6d90cd) rabreu
• (storm) branch docs/heartbeat-clarify-deprecate-supervisor-timeout created (now 4f1b4ecd5) rabreu
  • (storm) 01/01: Clarify worker/supervisor heartbeat docs and deprecate unused nimbus.supervisor.timeout.secs rabreu
• (storm) branch fix/nimbus-submitted-jar-location-check created (now 06f6d631d) rzo1
  • (storm) 01/01: Reject submitted jar locations that are not inside the Nimbus inbox rzo1
• (storm) branch fix/supervisor-blobstore-localname-paths created (now af6bbf975) rzo1
  • (storm) 01/01: Reject blobstore map local names that resolve outside the topology and worker directories rzo1
• (storm) branch fix/oci-image-tag-manifest-lookup created (now 9a41e23be) rzo1
  • (storm) 01/01: Reject image tags that are neither mapped nor valid image hashes before building the manifest path rzo1
• (storm) branch fix/dependency-blob-key-namespacing created (now a1034b0e9) rzo1
  • (storm) 01/01: Give each uploaded dependency artifact its own blob key instead of reusing a pre-existing blob rzo1
• (storm) branch fix/logviewer-download-permission-order updated (b003ad586 -> 285801c36) rzo1
  • (storm) 01/01: Change the worker log file permission only for download requests that are served rzo1
• (storm) branch fix/webapp-tls-cipher-exclusions updated (fd893af2e -> a369da716) rzo1
  • (storm) 01/01: Add to instead of replace Jetty's default TLS exclusions on HTTPS connectors rzo1
• (storm) branch fix/logviewer-daemon-log-file-access updated (30a6df6c5 -> 3748f59c6) rzo1
  • (storm) 01/01: Apply the configured log user and group lists to daemon log requests rzo1
• (storm) branch fix/logviewer-log-listing-user-filter updated (a67cc4772 -> 32585b542) rzo1
  • (storm) 01/01: Return only the log files the requesting user may access from the log file listing rzo1
• (storm) branch fix/ui-jsonp-callback-option updated (12060408d -> a6cf4f6dd) rzo1
  • (storm) 01/01: Add ui.enable.jsonp to control JSONP callback wrapping in UI and Logviewer API responses rzo1
• (storm) branch fix/webapp-cors-filter-defaults updated (cd4750d34 -> e4d7bd4c4) rzo1
  • (storm) 01/01: Set the CORS filter credentials parameter explicitly instead of a header name that the filter ignores rzo1
• (storm) branch fix/logviewer-cors-response-headers updated (9452499b6 -> fa6772210) rzo1
  • (storm) 01/01: Stop echoing the request Origin with allow-credentials in logviewer JSON responses rzo1
• (storm) branch fix/ui-jsonp-callback-option created (now 12060408d) rzo1
  • (storm) 01/01: Add ui.enable.jsonp to control JSONP callback wrapping in UI and Logviewer API responses rzo1
• (storm) branch fix/logviewer-download-permission-order created (now b003ad586) rzo1
  • (storm) 01/01: Change the worker log file permission only for download requests that are served rzo1
• (storm) branch fix/logviewer-daemon-log-file-access created (now 30a6df6c5) rzo1
  • (storm) 01/01: Apply the configured log user and group lists to daemon log requests rzo1
• (storm) branch fix/webapp-cors-filter-defaults created (now cd4750d34) rzo1
  • (storm) 01/01: Set the CORS filter credentials parameter explicitly instead of a header name that the filter ignores rzo1
• (storm) branch fix/webapp-tls-cipher-exclusions created (now fd893af2e) rzo1
  • (storm) 01/01: Add to instead of replace Jetty's default TLS exclusions on HTTPS connectors rzo1
• (storm) branch fix/logviewer-cors-response-headers created (now 9452499b6) rzo1
  • (storm) 01/01: Stop echoing the request Origin with allow-credentials in logviewer JSON responses rzo1
• (storm) branch fix/logviewer-log-listing-user-filter created (now a67cc4772) rzo1
  • (storm) 01/01: Return only the log files the requesting user may access from the log file listing rzo1
• (storm) branch rel-3.0.0-rc1 deleted (was c17c6fdc2) rzo1
• (storm) branch rel-3.0.0-rc2 deleted (was 10e1f7db7) rzo1
• (storm) branch improve-release-notes-script-v2 deleted (was af1cb1e70) rzo1
• (storm) branch rel-2.8.9-rc1 deleted (was 751c916d3) rzo1
• (storm) branch storm2-eol deleted (was 7fa6608bf) rzo1
• (storm) branch docs/3.0.0-new-features deleted (was 957d3a906) rzo1
• (storm) branch fix-flux-jsyaml-v5-empty-doc deleted (was 34663d165) rzo1
• (storm) branch master updated: Reinstate ordering of arguments in `bin/storm.py` (#8971) ggraziadei
• (storm) branch dependabot/npm_and_yarn/storm-webapp/fast-uri-3.1.5 deleted (was 9256517a5) github-bot
• (storm) branch master updated (9e8dedf7e -> 093f9d077) rabreu
  • (storm) 01/01: Merge pull request #8970 from apache/dependabot/npm_and_yarn/storm-webapp/fast-uri-3.1.5 rabreu
• (storm) branch dependabot/npm_and_yarn/storm-webapp/fast-uri-3.1.5 created (now 9256517a5) github-bot
• [PR] build(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 in /storm-webapp (storm) via GitHub

• Earlier messages