dependabot[bot] opened a new pull request, #7: URL: https://github.com/apache/casbin-pulsar-authz/pull/7
Bumps [org.apache.pulsar:pulsar-broker](https://github.com/apache/pulsar) from 2.10.0 to 3.0.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/pulsar/releases">org.apache.pulsar:pulsar-broker's releases</a>.</em></p> <blockquote> <h2>v3.0.4</h2> <h2>What's Changed</h2> <h3>Broker</h3> <ul> <li>[fix][broker] Avoid execute prepareInitPoliciesCacheAsync if namespace is deleted (<a href="https://redirect.github.com/apache/pulsar/pull/22268">#22268</a>)</li> <li>[fix][broker] Avoid expired unclosed ledgers when checking expired messages by ledger closure time (<a href="https://redirect.github.com/apache/pulsar/pull/22335">#22335</a>)</li> <li>[fix][broker] Check cursor state before adding it to the <code>waitingCursors</code> (<a href="https://redirect.github.com/apache/pulsar/pull/22191">#22191</a>)</li> <li>[fix][broker] Close dispatchers stuck due to mismatch between dispatcher.consumerList and dispatcher.consumerSet (<a href="https://redirect.github.com/apache/pulsar/pull/22270">#22270</a>)</li> <li>[fix][broker] Fix OpReadEntry.skipCondition NPE issue (<a href="https://redirect.github.com/apache/pulsar/pull/22367">#22367</a>)</li> <li>[fix][broker] Fix ResourceGroup report local usage (<a href="https://redirect.github.com/apache/pulsar/pull/22340">#22340</a>)</li> <li>[fix][broker] Fix ResourceGroups loading (<a href="https://redirect.github.com/apache/pulsar/pull/21781">#21781</a>)</li> <li>[fix][broker] Fix issue of field 'topic' is not set when handle GetSchema request (<a href="https://redirect.github.com/apache/pulsar/pull/22377">#22377</a>)</li> <li>[fix][broker] Fix wrong double-checked locking for readOnActiveConsumerTask in dispatcher (<a href="https://redirect.github.com/apache/pulsar/pull/22279">#22279</a>)</li> <li>[fix][broker] fix mismatch between dispatcher.consumerList and dispatcher.consumerSet (<a href="https://redirect.github.com/apache/pulsar/pull/22283">#22283</a>)</li> <li>[fix][ml]Expose ledger timestamp (<a href="https://redirect.github.com/apache/pulsar/pull/22338">#22338</a>)</li> <li>[improve][admin] Fix the <code>createMissingPartitions</code> doesn't response correctly (<a href="https://redirect.github.com/apache/pulsar/pull/22311">#22311</a>)</li> <li>[improve][broker] Add createTopicIfDoesNotExist option to RawReader constructor (<a href="https://redirect.github.com/apache/pulsar/pull/22264">#22264</a>)</li> <li>[improve][broker] Add fine-grain authorization to ns/topic management endpoints (<a href="https://redirect.github.com/apache/pulsar/pull/22309">#22309</a>)</li> <li>[improve][broker] Add missing configuration keys for caching catch-up reads (<a href="https://redirect.github.com/apache/pulsar/pull/22295">#22295</a>)</li> <li>[improve][broker] Change log level to reduce duplicated logs (<a href="https://redirect.github.com/apache/pulsar/pull/22147">#22147</a>)</li> </ul> <h3>Client</h3> <ul> <li>[fix][client] Consumer lost message ack due to race condition in acknowledge with batch message (<a href="https://redirect.github.com/apache/pulsar/pull/22353">#22353</a>)</li> <li>[fix][client] Fix wrong results of hasMessageAvailable and readNext after seeking by timestamp (<a href="https://redirect.github.com/apache/pulsar/pull/22363">#22363</a>)</li> <li>[fix][client] GenericProtobufNativeSchema not implement getNativeSchema method. (<a href="https://redirect.github.com/apache/pulsar/pull/22204">#22204</a>)</li> <li>[fix][client] Unclear error message when creating a consumer with two same topics (<a href="https://redirect.github.com/apache/pulsar/pull/22255">#22255</a>)</li> <li>[fix][client] fix Reader.hasMessageAvailable might return true after seeking to latest (<a href="https://redirect.github.com/apache/pulsar/pull/22201">#22201</a>)</li> <li>[fix][client]Fixed getting an incorrect <code>maxMessageSize</code> value when accessing multiple clusters in the same process (<a href="https://redirect.github.com/apache/pulsar/pull/22306">#22306</a>)</li> <li>[improve][client] Add backoff for <code>seek</code> (<a href="https://redirect.github.com/apache/pulsar/pull/20963">#20963</a>)</li> </ul> <h3>Pulsar IO and Pulsar Functions</h3> <ul> <li>[fix][fn] enable Go function token auth and TLS (<a href="https://redirect.github.com/apache/pulsar/pull/20468">#20468</a>)</li> </ul> <h3>Others</h3> <ul> <li>[improve][misc] Remove the call to sun InetAddressCachePolicy (<a href="https://redirect.github.com/apache/pulsar/pull/22329">#22329</a>)</li> <li>[fix][misc] Make ConcurrentBitSet thread safe (<a href="https://redirect.github.com/apache/pulsar/pull/22361">#22361</a>)</li> <li>[fix][ws] Check the validity of config before start websocket service (<a href="https://redirect.github.com/apache/pulsar/pull/22231">#22231</a>)</li> </ul> <h3>Library updates</h3> <ul> <li>[fix][sec] Upgrade jose4j to 0.9.4 (<a href="https://redirect.github.com/apache/pulsar/pull/22273">#22273</a>)</li> <li>[fix][sec] Bump google.golang.org/grpc from 1.38.0 to 1.56.3 in /pulsar-function-go (<a href="https://redirect.github.com/apache/pulsar/pull/21444">#21444</a>)</li> <li>[fix][sec] Go Functions security updates (<a href="https://redirect.github.com/apache/pulsar/pull/21844">#21844</a>)</li> <li>[fix][sec] Upgrade Zookeeper to 3.9.2 to address CVE-2024-23944 (<a href="https://redirect.github.com/apache/pulsar/pull/22275">#22275</a>)</li> <li>[fix][sec] Upgrade prometheus client_golang to v1.12.2 to fix CVE-2022-21698 (<a href="https://redirect.github.com/apache/pulsar/pull/20579">#20579</a>)</li> <li>[fix][build] Upgrade alluxio version to 2.9.3 to fix CVE-2023-38889 (<a href="https://redirect.github.com/apache/pulsar/pull/21715">#21715</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/pulsar/commit/5a1fa0c5c6709bdb7b003ce12d00abf52da293e1"><code>5a1fa0c</code></a> [fix][broker] Fix issue of field 'topic' is not set when handle GetSchema req...</li> <li><a href="https://github.com/apache/pulsar/commit/2e13fba3ee6b4eba5de4d36b0f00200184bd1145"><code>2e13fba</code></a> Release 3.0.4</li> <li><a href="https://github.com/apache/pulsar/commit/8f17446355095d9d24d781446bd9d60ca4a275ef"><code>8f17446</code></a> [improve][test][branch-3.0] Improve ManagedLedgerTest.testGetNumberOfEntriesI...</li> <li><a href="https://github.com/apache/pulsar/commit/d3f0a4b3280142fe990280eff0f2c1c00379ba38"><code>d3f0a4b</code></a> [improve][misc] Pin Netty version in pulsar-io/alluxio (<a href="https://redirect.github.com/apache/pulsar/issues/21728">#21728</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/31f0ae44b7f34eceb4f06b42601f8eaba3f0c16e"><code>31f0ae4</code></a> [fix][build] Upgrade alluxio version to 2.9.3 to fix CVE-2023-38889 (<a href="https://redirect.github.com/apache/pulsar/issues/21715">#21715</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/c74eec7f087b90797a0e4ddfc527d92c68363519"><code>c74eec7</code></a> [fix][test] Fix flaky test BrokerServiceAutoSubscriptionCreationTest (<a href="https://redirect.github.com/apache/pulsar/issues/22190">#22190</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/e3531e808c172ff588e36499c41746835d06904a"><code>e3531e8</code></a> [fix][test][branch-3.0] Fix broken ManagedLedgerTest.testGetNumberOfEntriesIn...</li> <li><a href="https://github.com/apache/pulsar/commit/1b9ae2e8cb90478d03c581250e28b633aa960957"><code>1b9ae2e</code></a> [improve][misc] Remove the call to sun InetAddressCachePolicy (<a href="https://redirect.github.com/apache/pulsar/issues/22329">#22329</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/ba8ff27d25200b371904161e9162d7c112848066"><code>ba8ff27</code></a> [fix][broker] Check cursor state before adding it to the <code>waitingCursors</code> (<a href="https://redirect.github.com/apache/pulsar/issues/2">#2</a>...</li> <li><a href="https://github.com/apache/pulsar/commit/1045f8be626981c818c6eddf30f5732d25dbac66"><code>1045f8b</code></a> [fix][client] Fix wrong results of hasMessageAvailable and readNext after see...</li> <li>Additional commits viewable in <a href="https://github.com/apache/pulsar/compare/v2.10.0...v3.0.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/casbin-pulsar-authz/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
