This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch
dependabot/github_actions/actions/checkout-6.0.3
in repository https://gitbox.apache.org/repos/asf/apisix.git
omit 67e389f99 chore(deps): bump actions/checkout from 6.0.2 to 6.0.3
add 2330c09ab fix(jwe-decrypt): reject tokens that fail to decrypt (#13404)
add 0048226a4 feat: add proxy-buffering plugin (#13446)
add 6d320c09f fix(cas-auth): return 400 instead of 500 for SLO POST with
empty body (#13471)
add fbf510669 fix: harden cors, multi-auth and body-transformer plugins
against malformed requests (#13469)
add 4cc1eaf3f feat(openid-connect): make client_secret optional for local
JWT verification modes (#13472)
add c730a745c feat(jwe-decrypt): remove server-side token generation
endpoint (#13464)
add 6e877eb44 fix(limit): atomic redis commits and resolved-var validation
(#13467)
add 11a9dd1b3 fix test numbering and spacing in jwe-decrypt.t (#13485)
add e99fb63fe fix(ai-proxy): map upstream LLM timeouts to 504 instead of
500 (#13481)
add 7f2eaa7c1 feat(hmac-auth): add max_req_body_size to bound request body
during validation (#13478)
add b6f80f5d4 change(auth): require configured jwt claims, harden empty
claims_to_verify and key-auth anonymous fallback (#13468)
add b9c0c076e feat(openid-connect): update session config to support
lua-resty-session, fixes deprecated session.cookie.lifetime (#13178)
add 100736686 feat(ai-proxy-multi): add max_retries and
retry_on_failure_within_ms for fallback (#13495)
add 7f2953e96 feat: add max_req_body_size to bound client request body in
forward-auth and ai-proxy (#13466)
add 39eda840f test(openid-connect): cover session cookie_name and
absolute_timeout end-to-end (#13496)
add 75bb63148 fix(proxy-mirror): keep the original method path when
mirroring gRPC requests (#13499)
add dc4d52b5d feat(batch-requests): bound pipeline item count, timeout,
and request schema (#13492)
add bf91696cc fix(xrpc): bound redis command-line preallocation size
(#13483)
add e2671c49b fix(dingtalk-auth): clear client-supplied X-Userinfo before
authentication (#13491)
add 418a8c697 feat(prometheus): add built-in LLM histograms for TTFT and
token distribution (#13487)
add bf9091acd feat(ai-proxy): add built-in nginx variables for LLM
observability (#13477)
add 9d3c66d24 fix(upstream): use `cert` and `key` instead of stale `ok` in
mTLS error checks (#13442)
add 993ca77d7 fix(authz-casdoor): expire the session when the Casdoor
token expires (#13500)
add f27d6f900 fix(request-id): generate nanoid with CSPRNG to avoid
duplicate and malformed ids (#13508)
add 9995d4c81 test(xrpc): fix first-run failures in redis.t and
prometheus.t (#13507)
add 5270be15e fix(ai-proxy-multi): refresh cached server picker once
health checkers are created (#13505)
add cb72d0eb6 fix(ai-proxy-multi): keep existing query string in health
check path; cover construct_upstream mutation contract (#13506)
add b50930158 feat(ai-plugins): add fail_mode for Consumer-bound protocol
handling (#13489)
add eb1af76f8 fix: avoid 503 error after dns service temporary fail
(#13137)
add e4ace03c8 feat(limit-count): add Redis Sentinel backend, sliding
window and delayed sync support (#13443)
add 4cd2dc2ac fix: remove credential-leaking debug logs in logger plugins
(#13502)
add b86a273f4 fix(cli): simple add IPv6 listen support for PROXY Protocol
(#12859)
add 8a5e11344 fix(body-transformer): rebuild table in remove_namespace
instead of mutating during traversal (#13522)
add 86ac31202 fix(kafka-logger): support api_version so brokers can store
message timestamps (#13521)
add 80b94960c fix(aws-lambda): build SigV4 canonical query string per spec
(#13520)
add b1d91f194 fix(consul): one invalid node should not discard the
remaining nodes of the service (#13513)
add a76f9c43a fix(workflow): tolerate missing _workflow_cache in log phase
(#13512)
add 0cf8b6ace fix(plugin): ignore plugin_metadata of disabled or unknown
plugins (#13514)
add 46646a2d7 test(log-rotate): deflake the disable-via-hot-reload case
(#13536)
add e0c879b58 fix(xrpc): stream routes with xRPC protocols fail
check_schema in HTTP workers when admin is disabled (#13515)
add 8df43e22e fix(admin): encrypt_fields get double-encrypted on every
PATCH (#13525)
add 5750d4fdd fix(secret): aws secret manager fails when the secret name
contains a slash (#13519)
add 4d13c0f50 fix(core.request): set_header must update the cached headers
with normalized key (#13517)
add 85e1e4d0e fix: redis connections with different database/credentials
must not share a keepalive pool (#13516)
add 779948893 fix(graphql-proxy-cache): clear all Vary variants on PURGE
(#13523)
add 73bc3a436 fix: use description instead of title for field-level schema
doc strings (#13547)
add 6749048b0 fix(limit-count): isolate redis-sentinel keepalive pools by
database and credentials (#13553)
add 5a0e8cb4b fix: reduce vulnerable test dependencies (#13554)
add d07f5364e fix(brotli): don't log expected non-standard ETag at error
level (#13545)
add f60432417 fix(ai-proxy): forward client method and query string for
passthrough (#13546)
add d5004d1fa docs(ai-proxy): restore max_stream_duration_ms and
max_response_bytes (#13539)
add 6fb2f0947 fix(elasticsearch-logger): guard os.date against invalid
index template (#13542)
add 1c81e5ed0 fix(nacos): declare nacos-stream shared dict in the stream
subsystem (#13541)
add 638a87929 fix(jwt-auth): reject malformed JWT signature instead of
erroring (#13518)
add d0929e92d feat(prometheus): support disabling labels via plugin
metadata to reduce cardinality (#13202)
add ab8db465c fix(ci): verify LuaRocks tarball checksum before install
(#13526)
add 3584284c3 fix(acl): correctly evaluate multi-match JSONPath labels
(#13527)
add 0180ccbcd docs(ai-proxy): document client request header forwarding
behavior (#13422)
add 533dc2e61 docs: fix mocking config note and invalid JSON in
elasticsearch-logger examples (#13543)
add 24511776e chore: release 3.17.0 (#13503)
add 6054e4154 chore(deps): bump actions/checkout from 6.0.2 to 6.0.3
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (67e389f99)
\
N -- N -- N
refs/heads/dependabot/github_actions/actions/checkout-6.0.3 (6054e4154)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/workflows/check-changelog.yml | 8 +-
.ignore_words | 1 +
.requirements | 2 +-
CHANGELOG.md | 130 +
Makefile | 6 +
apisix-master-0.rockspec | 2 +-
apisix/admin/resource.lua | 14 +-
apisix/cli/config.lua | 2 +
apisix/cli/ngx_tpl.lua | 58 +
apisix/core/ctx.lua | 9 +
apisix/core/request.lua | 22 +-
apisix/core/version.lua | 2 +-
apisix/discovery/consul/client.lua | 5 +-
apisix/init.lua | 10 +
apisix/plugin.lua | 20 +-
apisix/plugins/acl.lua | 41 +-
apisix/plugins/ai-aliyun-content-moderation.lua | 34 +-
apisix/plugins/ai-aws-content-moderation.lua | 21 +-
apisix/plugins/ai-prompt-guard.lua | 29 +-
apisix/plugins/ai-protocols/anthropic-messages.lua | 41 +
apisix/plugins/ai-protocols/binding.lua | 94 +
apisix/plugins/ai-protocols/openai-chat.lua | 68 +-
apisix/plugins/ai-protocols/openai-responses.lua | 69 +-
apisix/plugins/ai-providers/base.lua | 46 +-
apisix/plugins/ai-proxy-multi.lua | 79 +-
apisix/plugins/ai-proxy.lua | 12 +-
apisix/plugins/ai-proxy/base.lua | 46 +-
apisix/plugins/ai-proxy/schema.lua | 37 +
apisix/plugins/ai-transport/http.lua | 4 +-
apisix/plugins/authz-casdoor.lua | 17 +-
apisix/plugins/aws-lambda.lua | 51 +-
apisix/plugins/batch-requests.lua | 30 +-
apisix/plugins/body-transformer.lua | 52 +-
apisix/plugins/brotli.lua | 11 +-
apisix/plugins/cas-auth.lua | 2 +-
apisix/plugins/cors.lua | 4 +
apisix/plugins/dingtalk-auth.lua | 3 +
apisix/plugins/elasticsearch-logger.lua | 12 +-
apisix/plugins/forward-auth.lua | 15 +-
apisix/plugins/graphql-proxy-cache.lua | 6 +-
apisix/plugins/hmac-auth.lua | 30 +-
apisix/plugins/jwe-decrypt.lua | 79 +-
apisix/plugins/jwt-auth/parser.lua | 69 +-
apisix/plugins/kafka-logger.lua | 10 +-
apisix/plugins/key-auth.lua | 15 +
apisix/plugins/limit-conn/init.lua | 33 +-
apisix/plugins/limit-count/delayed-syncer.lua | 474 ++++
apisix/plugins/limit-count/init.lua | 221 +-
apisix/plugins/limit-count/limit-count-local.lua | 56 +-
.../limit-count/limit-count-redis-cluster.lua | 114 +-
.../limit-count/limit-count-redis-sentinel.lua | 130 +
apisix/plugins/limit-count/limit-count-redis.lua | 128 +-
.../limit-count/sliding-window/sliding-window.lua | 244 ++
.../limit-count/sliding-window/store/redis.lua | 72 +
.../sliding-window/store/shared-dict.lua | 64 +
apisix/plugins/limit-count/util.lua | 193 ++
apisix/plugins/limit-req/util.lua | 120 +-
apisix/plugins/multi-auth.lua | 2 +-
apisix/plugins/openid-connect.lua | 109 +-
apisix/plugins/opentelemetry.lua | 10 +-
apisix/plugins/prometheus.lua | 53 +-
apisix/plugins/prometheus/exporter.lua | 268 +-
.../prometheus.lua => plugins/proxy-buffering.lua} | 23 +-
apisix/plugins/proxy-cache/memory_handler.lua | 6 +
apisix/plugins/proxy-mirror.lua | 15 +
apisix/plugins/request-id.lua | 24 +-
apisix/plugins/rocketmq-logger.lua | 1 -
apisix/plugins/sls-logger.lua | 1 -
apisix/plugins/syslog/init.lua | 2 -
apisix/plugins/workflow.lua | 8 +
apisix/secret/aws.lua | 63 +-
apisix/stream/xrpc.lua | 7 +-
apisix/stream/xrpc/protocols/redis/init.lua | 28 +-
apisix/upstream.lua | 4 +-
apisix/utils/redis.lua | 20 +-
apisix/utils/upstream.lua | 10 +-
ci/check_changelog_prs.ts | 10 +-
ci/init-common-test-service.sh | 2 +
ci/linux_apisix_current_luarocks_runner.sh | 2 +-
ci/pod/docker-compose.plugin.yml | 75 +
.../function-example/test-body/cmd/main.go | 14 +-
.../openfunction/function-example/test-body/go.mod | 30 +-
.../openfunction/function-example/test-body/go.sum | 1760 -------------
.../function-example/test-body/hello.go | 6 -
.../test-body/{hello.go => hello_test.go} | 22 +-
.../function-example/test-uri/cmd/main.go | 14 +-
.../openfunction/function-example/test-uri/go.mod | 31 +-
.../openfunction/function-example/test-uri/go.sum | 2615 --------------------
.../function-example/test-uri/hello.go | 17 +-
.../test-uri/{hello.go => hello_test.go} | 30 +-
conf/config.yaml.example | 10 +
docs/en/latest/config.json | 3 +-
.../latest/plugins/ai-aliyun-content-moderation.md | 1 +
.../en/latest/plugins/ai-aws-content-moderation.md | 1 +
docs/en/latest/plugins/ai-prompt-guard.md | 1 +
docs/en/latest/plugins/ai-proxy-multi.md | 9 +
docs/en/latest/plugins/ai-proxy.md | 11 +-
docs/en/latest/plugins/batch-requests.md | 7 +-
docs/en/latest/plugins/elasticsearch-logger.md | 4 +-
docs/en/latest/plugins/forward-auth.md | 1 +
docs/en/latest/plugins/hmac-auth.md | 1 +
docs/en/latest/plugins/jwe-decrypt.md | 92 +-
docs/en/latest/plugins/kafka-logger.md | 1 +
docs/en/latest/plugins/limit-count.md | 207 +-
docs/en/latest/plugins/mocking.md | 4 +-
docs/en/latest/plugins/openid-connect.md | 12 +-
docs/en/latest/plugins/prometheus.md | 104 +
docs/en/latest/plugins/proxy-buffering.md | 109 +
docs/en/latest/terminology/secret.md | 2 +
docs/zh/latest/config.json | 3 +-
.../latest/plugins/ai-aliyun-content-moderation.md | 1 +
.../zh/latest/plugins/ai-aws-content-moderation.md | 1 +
docs/zh/latest/plugins/ai-prompt-guard.md | 1 +
docs/zh/latest/plugins/ai-proxy-multi.md | 8 +
docs/zh/latest/plugins/ai-proxy.md | 10 +-
docs/zh/latest/plugins/batch-requests.md | 7 +-
docs/zh/latest/plugins/elasticsearch-logger.md | 4 +-
docs/zh/latest/plugins/jwe-decrypt.md | 92 +-
docs/zh/latest/plugins/kafka-logger.md | 1 +
docs/zh/latest/plugins/limit-count.md | 189 +-
docs/zh/latest/plugins/mocking.md | 6 +-
docs/zh/latest/plugins/openid-connect.md | 26 +-
docs/zh/latest/plugins/prometheus.md | 104 +
docs/zh/latest/plugins/proxy-buffering.md | 117 +
docs/zh/latest/terminology/secret.md | 2 +
t/APISIX.pm | 51 +-
t/admin/plugins.t | 1 +
t/admin/routes4.t | 150 ++
t/certs/server.crt | 18 +
t/certs/server.key | 28 +
t/certs/sse_server.crt | 19 +
t/certs/sse_server.key | 28 +
t/chaos/delayetcd/delayetcd.go | 37 +-
.../{e2e_test.go => delayetcd/delayetcd_test.go} | 23 +-
t/chaos/go.mod | 25 +-
t/chaos/go.sum | 518 ----
t/chaos/killetcd/killetcd.go | 34 +-
t/chaos/utils/kube_utils.go | 2 -
t/cli/test_discovery_nacos_stream.sh | 62 +
t/cli/test_main.sh | 61 +
t/cli/test_proxy_buffering.sh | 94 +
t/cli/test_sse.py | 84 +
t/config-center-yaml/plugin-metadata.t | 102 +
t/config-center-yaml/stream-route.t | 85 +-
t/control/services.t | 2 +-
t/core/request.t | 35 +
t/discovery/consul-malformed-node.t | 157 ++
.../messages-streaming-with-tool-use.sse} | 10 +-
t/fixtures/openai/chat-streaming-with-cache.sse | 6 +
.../openai/chat-streaming-with-tool-calls.sse | 7 +
.../openai/responses-streaming-with-cache.sse | 6 +
.../openai/responses-streaming-with-tool-call.sse | 3 +
t/fixtures/openai/responses-with-cache.json | 22 +
t/lib/server.lua | 16 +
t/lib/test_redis.lua | 4 +-
t/node/upstream-mtls.t | 100 +
t/node/upstream-node-dns.t | 131 +
t/plugin/acl.t | 80 +-
t/plugin/ai-aliyun-content-moderation.t | 56 +-
t/plugin/ai-aws-content-moderation.t | 103 +
t/plugin/ai-prompt-guard.t | 150 ++
t/plugin/ai-proxy-anthropic.t | 89 +
t/plugin/ai-proxy-kafka-log.t | 35 +
t/plugin/ai-proxy-multi-construct-upstream.t | 166 ++
t/plugin/ai-proxy-multi-healthcheck-stale-picker.t | 211 ++
t/plugin/ai-proxy-multi-retry.t | 216 ++
t/plugin/ai-proxy-multi.balancer.t | 11 +-
t/plugin/ai-proxy-passthrough.t | 208 ++
t/plugin/ai-proxy-stream-limits.t | 53 +
t/plugin/ai-proxy3.t | 219 +-
t/plugin/ai-transport-http.t | 65 +
t/plugin/authz-casdoor.t | 108 +
t/plugin/aws-lambda.t | 138 ++
t/plugin/batch-requests.t | 177 +-
t/plugin/body-transformer.t | 354 +++
t/plugin/brotli.t | 23 +-
t/plugin/cas-auth.t | 81 +
t/plugin/cors.t | 54 +
t/plugin/dingtalk-auth.t | 139 ++
t/plugin/elasticsearch-logger.t | 22 +
t/plugin/elasticsearch-logger2.t | 46 +
t/plugin/forward-auth.t | 77 +
t/plugin/graphql-proxy-cache/memory.t | 104 +
t/plugin/grpc-web/go.mod | 14 +-
t/plugin/grpc-web/go.sum | 52 +-
t/plugin/hmac-auth2.t | 2 +-
t/plugin/hmac-auth3.t | 179 ++
t/plugin/jwe-decrypt.t | 256 +-
t/plugin/jwt-auth-more-algo.t | 38 +-
t/plugin/jwt-auth.t | 189 ++
t/plugin/kafka-logger-large-body.t | 35 +
t/plugin/kafka-logger-log-format.t | 35 +
t/plugin/kafka-logger.t | 146 ++
t/plugin/kafka-logger2.t | 35 +
t/plugin/kafka-logger4.t | 35 +
t/plugin/key-auth-anonymous-consumer.t | 74 +
t/plugin/limit-conn-variable.t | 117 +
t/plugin/limit-count-redis-delayed-sync.t | 243 ++
t/plugin/limit-count-redis-delayed-sync2.t | 273 ++
t/plugin/limit-count-redis-sentinel.t | 624 +++++
.../{limit-count-redis3.t => limit-count-redis5.t} | 329 +--
t/plugin/limit-count-rules.t | 79 +-
t/plugin/limit-count-sliding.t | 294 +++
t/plugin/limit-count-variable.t | 143 ++
t/plugin/limit-req-redis.t | 272 ++
t/plugin/log-rotate.t | 49 +-
t/plugin/multi-auth.t | 44 +
t/plugin/openid-connect.t | 419 ++++
t/plugin/openid-connect10.t | 364 +++
t/plugin/openid-connect9.t | 62 +
t/plugin/prometheus-ai-proxy.t | 163 ++
t/plugin/prometheus-label-filter.t | 172 ++
t/plugin/proxy-mirror3.t | 58 +-
t/plugin/request-id.t | 66 +
t/plugin/rocketmq-logger-log-format.t | 35 +
t/plugin/rocketmq-logger.t | 35 +
t/plugin/rocketmq-logger2.t | 35 +
t/plugin/syslog.t | 36 +
t/plugin/workflow3.t | 104 +
t/secret/aws.t | 91 +-
t/xrpc/prometheus.t | 9 +
t/xrpc/redis.t | 159 +-
utils/linux-install-luarocks.sh | 11 +-
223 files changed, 13655 insertions(+), 6228 deletions(-)
create mode 100644 apisix/plugins/ai-protocols/binding.lua
create mode 100644 apisix/plugins/limit-count/delayed-syncer.lua
create mode 100644 apisix/plugins/limit-count/limit-count-redis-sentinel.lua
create mode 100644 apisix/plugins/limit-count/sliding-window/sliding-window.lua
create mode 100644 apisix/plugins/limit-count/sliding-window/store/redis.lua
create mode 100644
apisix/plugins/limit-count/sliding-window/store/shared-dict.lua
create mode 100644 apisix/plugins/limit-count/util.lua
copy apisix/{stream/plugins/prometheus.lua => plugins/proxy-buffering.lua}
(74%)
delete mode 100644 ci/pod/openfunction/function-example/test-body/go.sum
copy ci/pod/openfunction/function-example/test-body/{hello.go =>
hello_test.go} (71%)
delete mode 100644 ci/pod/openfunction/function-example/test-uri/go.sum
copy ci/pod/openfunction/function-example/test-uri/{hello.go => hello_test.go}
(58%)
create mode 100644 docs/en/latest/plugins/proxy-buffering.md
create mode 100644 docs/zh/latest/plugins/proxy-buffering.md
create mode 100644 t/certs/server.crt
create mode 100644 t/certs/server.key
create mode 100644 t/certs/sse_server.crt
create mode 100644 t/certs/sse_server.key
copy t/chaos/{e2e_test.go => delayetcd/delayetcd_test.go} (58%)
create mode 100755 t/cli/test_discovery_nacos_stream.sh
create mode 100755 t/cli/test_proxy_buffering.sh
create mode 100644 t/cli/test_sse.py
create mode 100644 t/discovery/consul-malformed-node.t
copy t/fixtures/{protocol-conversion/anthropic-mismatch.sse =>
anthropic/messages-streaming-with-tool-use.sse} (50%)
create mode 100644 t/fixtures/openai/chat-streaming-with-cache.sse
create mode 100644 t/fixtures/openai/chat-streaming-with-tool-calls.sse
create mode 100644 t/fixtures/openai/responses-streaming-with-cache.sse
create mode 100644 t/fixtures/openai/responses-streaming-with-tool-call.sse
create mode 100644 t/fixtures/openai/responses-with-cache.json
create mode 100644 t/plugin/ai-proxy-multi-construct-upstream.t
create mode 100644 t/plugin/ai-proxy-multi-healthcheck-stale-picker.t
create mode 100644 t/plugin/ai-proxy-multi-retry.t
create mode 100644 t/plugin/limit-count-redis-delayed-sync.t
create mode 100644 t/plugin/limit-count-redis-delayed-sync2.t
create mode 100644 t/plugin/limit-count-redis-sentinel.t
copy t/plugin/{limit-count-redis3.t => limit-count-redis5.t} (50%)
create mode 100644 t/plugin/limit-count-sliding.t
create mode 100644 t/plugin/openid-connect10.t
create mode 100644 t/plugin/prometheus-label-filter.t
