dependabot[bot] opened a new pull request, #5172: URL: https://github.com/apache/eventmesh/pull/5172
Bumps [com.alibaba.nacos:nacos-client](https://github.com/alibaba/nacos) from 2.4.1 to 2.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/alibaba/nacos/releases">com.alibaba.nacos:nacos-client's releases</a>.</em></p> <blockquote> <h2>2.5.0 (Jan 21th, 2025)</h2> <p>This version mainly introduces the configuration gray history record feature and refactors and optimizes the configuration gray management to enable users to manage configuration releases and gray configurations more efficiently. It is important to note that this update may lead to certain changes in the database table structure used by Nacos, and the first startup after the upgrade may take some time for automatic data migration (this situation only applies to clusters that have used the beta gray feature in older versions).</p> <p>In addition to the above features, this version also includes significant optimizations and bug fixes for several other functions, including but not limited to the following:</p> <ul> <li>Unified client addressing logic and provision of custom extension interfaces.</li> <li>The client will automatically refresh the token when encountering a no-permission status during requests, without waiting for the token to expire.</li> </ul> <p>Please see the details of the changes below:</p> <h1>Change details</h1> <h2>Feature</h2> <p><a href="https://redirect.github.com/alibaba/nacos/issues/12217">#12217</a> Support beta config history. <a href="https://redirect.github.com/alibaba/nacos/issues/12257">#12257</a> client auth plugin support refreshing server list. <a href="https://redirect.github.com/alibaba/nacos/issues/12719">#12719</a> nacos client support refresh access token when request with 403.</p> <h2>Enhancement&Refactor</h2> <p><a href="https://redirect.github.com/alibaba/nacos/issues/11659">#11659</a> Refactor config query to chain of responsibility. <a href="https://redirect.github.com/alibaba/nacos/issues/12189">#12189</a> Unified Nacos Client address module code. <a href="https://redirect.github.com/alibaba/nacos/issues/12342">#12342</a> Improve the retrieval of ConfigInfoState to facilitate the extension and implementation of databases like Oracle. <a href="https://redirect.github.com/alibaba/nacos/issues/12644">#12644</a> Enhance to return cached instances when getAllInstance with subscribe exception. <a href="https://redirect.github.com/alibaba/nacos/issues/12748">#12748</a> Support custom client configuration timeout. <a href="https://redirect.github.com/alibaba/nacos/issues/12756">#12756</a> Enhance Disk operation for DiskUtils. <a href="https://redirect.github.com/alibaba/nacos/issues/12757">#12757</a> Refactor update password api auth check and add unit test. <a href="https://redirect.github.com/alibaba/nacos/issues/12773">#12773</a> Enhance hint message when adding duplicate permissions or binding relationship. <a href="https://redirect.github.com/alibaba/nacos/issues/12371">#12371</a> Refactor beta and gray config model. <a href="https://redirect.github.com/alibaba/nacos/issues/12851">#12851</a> Cluster grpc request add server identity info. <a href="https://redirect.github.com/alibaba/nacos/issues/12872">#12872</a> Refactor ConfigCache and related pathways, uniformly use UTF-8 encoding for md5 fields. <a href="https://redirect.github.com/alibaba/nacos/issues/12911">#12911</a> Use lambda to replace some for loop and add unit tests. <a href="https://redirect.github.com/alibaba/nacos/issues/12928">#12928</a> Replace document url in console ui and README. <a href="https://redirect.github.com/alibaba/nacos/issues/12950">#12950</a> Enhance nacos client destruction log and give better messages. <a href="https://redirect.github.com/alibaba/nacos/issues/12982">#12982</a> Enhance to support resolving JAVA_HOME from symbolic links when <code>which java</code> is used. <a href="https://redirect.github.com/alibaba/nacos/issues/13023">#13023</a> Optimize the logic for Config query API.</p> <h2>BugFix</h2> <p><a href="https://redirect.github.com/alibaba/nacos/issues/11153">#11153</a> Fix Hints error when access console index and redirect to login page. <a href="https://redirect.github.com/alibaba/nacos/issues/11930">#11930</a> Fix leak namespace description for default namespace problem. <a href="https://redirect.github.com/alibaba/nacos/issues/12769">#12769</a> Fix clean config history error for derby datasource. <a href="https://redirect.github.com/alibaba/nacos/issues/12871">#12871</a> Fix duplicate defined items in console ui. <a href="https://redirect.github.com/alibaba/nacos/issues/12875">#12875</a> Fix config search failed when using <code>type</code> for MySQL datasource. <a href="https://redirect.github.com/alibaba/nacos/issues/12940">#12940</a> Fix return empty when ip or port is null for API <code>/service/subscriber/list</code>. <a href="https://redirect.github.com/alibaba/nacos/issues/12960">#12960</a> Fix config rollback page error when use advanced options. <a href="https://redirect.github.com/alibaba/nacos/issues/12970">#12970</a> Fix NamingMetadataManager.removeInstanceMetadata() error. <a href="https://redirect.github.com/alibaba/nacos/issues/13003">#13003</a> Fix don't use derby default staring with standalone mode.</p> <h2>Dependency</h2> <p><a href="https://redirect.github.com/alibaba/nacos/issues/12686">#12686</a> Bump Spring Security version to 5.8.15. <a href="https://redirect.github.com/alibaba/nacos/issues/12735">#12735</a><a href="https://redirect.github.com/alibaba/nacos/issues/12965">#12965</a><a href="https://redirect.github.com/alibaba/nacos/issues/13035">#13035</a> Bump console ui dependencies by npm audit. <a href="https://redirect.github.com/alibaba/nacos/issues/12777">#12777</a> Bump maven-enforcer-plugin to 3.5.0.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/alibaba/nacos/commit/90d3469b040a5b2f55ea62612bccff0c9d8b59f1"><code>90d3469</code></a> fix config query notify delay (<a href="https://redirect.github.com/alibaba/nacos/issues/13050">#13050</a>)</li> <li><a href="https://github.com/alibaba/nacos/commit/2d78d1c7d948759791fd33928ae8c0ef53a893d6"><code>2d78d1c</code></a> Upgrade 2.5.0 and bump console-ui dependencies by npm audix. (<a href="https://redirect.github.com/alibaba/nacos/issues/13035">#13035</a>)</li> <li><a href="https://github.com/alibaba/nacos/commit/6da6cc9302990425a463fa5e96a3db967b934f71"><code>6da6cc9</code></a> Bump org.apache.tomcat.embed:tomcat-embed-core from 9.0.96 to 9.0.98 (<a href="https://redirect.github.com/alibaba/nacos/issues/13025">#13025</a>)</li> <li><a href="https://github.com/alibaba/nacos/commit/8c0682bfa3bddf9605c8ffa899bc8ca14a7d62a0"><code>8c0682b</code></a> [ISSUE#13021] fix comment typo on ServiceInfo(key) constructor (<a href="https://redirect.github.com/alibaba/nacos/issues/13022">#13022</a>)</li> <li><a href="https://github.com/alibaba/nacos/commit/8a136c209cddae0549933ae082415deac774e47c"><code>8a136c2</code></a> [ISSUE <a href="https://redirect.github.com/alibaba/nacos/issues/13023">#13023</a>]Add Unit Test for ConfigQueryHandlerChainn and optimize the log...</li> <li><a href="https://github.com/alibaba/nacos/commit/3796395687e9720cf3580d4b3bd4d79fe250582e"><code>3796395</code></a> Return all subscriber when ip or port is null. (<a href="https://redirect.github.com/alibaba/nacos/issues/13008">#13008</a>)</li> <li><a href="https://github.com/alibaba/nacos/commit/595bdc9037b89bea68d27b3815c8fdc8f7ae39c0"><code>595bdc9</code></a> update destruction log and give better messages (<a href="https://redirect.github.com/alibaba/nacos/issues/12950">#12950</a>)</li> <li><a href="https://github.com/alibaba/nacos/commit/14becb80bea6b5e548600a216f820d06e8e9e1b9"><code>14becb8</code></a> optimize: support resolving JAVA_HOME from symbolic links when <code>which java</code> i...</li> <li><a href="https://github.com/alibaba/nacos/commit/f0e64253cb5c31707fb9fe7d68941328df3c65aa"><code>f0e6425</code></a> [ISSUE <a href="https://redirect.github.com/alibaba/nacos/issues/13003">#13003</a>] 修复单机默认配置启动时,未使用derby数据库问题 (<a href="https://redirect.github.com/alibaba/nacos/issues/13004">#13004</a>)</li> <li><a href="https://github.com/alibaba/nacos/commit/762303b94617e4febcf00f79e1c67050ae6f832d"><code>762303b</code></a> [ISSUE <a href="https://redirect.github.com/alibaba/nacos/issues/12970">#12970</a>] Fix NamingMetadataManager.removeInstanceMetadata() error (<a href="https://redirect.github.com/alibaba/nacos/issues/12971">#12971</a>)</li> <li>Additional commits viewable in <a href="https://github.com/alibaba/nacos/compare/2.4.1...2.5.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@eventmesh.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@eventmesh.apache.org For additional commands, e-mail: dev-h...@eventmesh.apache.org