This is an automated email from the ASF dual-hosted git repository. dsmiley pushed a commit to branch branch_9_11 in repository https://gitbox.apache.org/repos/asf/solr.git
commit 1f034e1375b1a9a198f05fbc47f2b69027d115ec Author: David Smiley <[email protected]> AuthorDate: Wed Sep 30 02:02:42 2026 -0400 Regenerate CHANGELOG.md for v9.11.0 --- CHANGELOG.md | 14 +++++++------- changelog/v9.11.0/version-summary.md | 14 +++++++------- 2 files changed, 14 insertions(+), 14 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 177114d8123..e9fa504afa3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -13,12 +13,6 @@ This file lists Solr's raw release notes with details of every change to Solr. M [9.11.0] -------- -### Important notes - -- Per-core `/solr/{core}/replication` commands are authorized individually. `backup`, `restore`, `deletebackup`, `disablereplication`, `enablereplication`, `abortfetch`, `disablepoll`, `enablepoll`, and `fetchindex` require the `update` permission; `indexversion`, `filelist`, `filecontent`, `details`, `commits`, and `restorestatus` require `read`. A command not listed here requires `update`. Grant `update` (or `all`) to roles that invoke the state-changing commands. -- A `filecontent` request to `/solr/{core}/replication` with `dirType=cf` or `dirType=tlogFile` must name a file that resolves inside the core's config or tlog directory; otherwise it is rejected. -- In SolrCloud, a request served by a core on the receiving node is authorized against that core's collection, regardless of the `collection` request parameter. Requests the core sends on to other collections, such as a distributed search over several collections or an alias, are authorized by the nodes that receive them, against their own collections. For example, a search sent to a core of collection `A` with `collection=B` needs read permission on both `A` and `B`. - ### Added (29 changes) - New SolrJ CollectionScopedSolrClient [PR#4418](https://github.com/apache/solr/pull/4418) (David Smiley) @@ -84,7 +78,7 @@ This file lists Solr's raw release notes with details of every change to Solr. M - PKIAuthenticationPlugin now rejects a SolrAuthV2 header with a malformed signature using a 401 response, instead of returning a 500 [PR#4553](https://github.com/apache/solr/pull/4553) (Jan Høydahl) - Fixed HttpJdkSolrClient leaking an executor thread when an async request's connection failed while its body was still being written; enough such failures could exhaust the client's thread pool. [SOLR-17707](https://issues.apache.org/jira/browse/SOLR-17707) (Serhiy Bzhezytskyy) - SpellCheckCollator now returns the partial (mutable) list of collations it had gathered so far, instead of throwing an UnsupportedOperationException, when the query time limit is exceeded while collating results. [SOLR-17870](https://issues.apache.org/jira/browse/SOLR-17870) (Puneet Sharma) -- SOLR-17973: Fix `shards.preference` not respected for cross-collection join queries [SOLR-17973](https://issues.apache.org/jira/browse/SOLR-17973) (khushjain) +- Fix `shards.preference` not respected for cross-collection join queries [SOLR-17973](https://issues.apache.org/jira/browse/SOLR-17973) (khushjain) - Improve HttpJettySolrClient.requestAsync (used in sharded/distributed-search and more) to increase throughput and prevent a rare deadlock. [SOLR-18051](https://issues.apache.org/jira/browse/SOLR-18051) (James Vanneman) - JWT Authentication plugin now supports matching non-string claims such as boolean [SOLR-18073](https://issues.apache.org/jira/browse/SOLR-18073) ([Jan Høydahl](https://home.apache.org/phonebook.html?uid=janhoy)) (Tony Panza) - Fix replication failure for files with exact MB sizes [SOLR-18098](https://issues.apache.org/jira/browse/SOLR-18098) (Shubham Ranjan) @@ -128,6 +122,12 @@ This file lists Solr's raw release notes with details of every change to Solr. M - Remove gosu from the Docker image. The Solr Docker image no longer installs the gosu binary. [SOLR-17353](https://issues.apache.org/jira/browse/SOLR-17353) (Jan Høydahl) - Removed LocalTikaExtractionBackend from the extraction module (SolrCell). Extraction using a remote Tika Server is now the only and default option. Tika-core is upgraded to v3.2.3 and still used for some SAX parsing [SOLR-18037](https://issues.apache.org/jira/browse/SOLR-18037) (Jan Høydahl) +### Dependency Upgrades (3 changes) + +- Third-party dependencies added since 9.10.1: apache5-client, utils-lite 2.53.1; google-api-services-storage-v1-rev20260204 2.0.0; grpc-opentelemetry 1.82.1; jackson-dataformat-xml, jackson-datatype-jsr310 2.22.2; joou-java-6 0.9.5; opentelemetry-semconv 1.29.0-alpha; prometheus-metrics-config, prometheus-metrics-exposition-textformats 1.8.0; tika-langdetect-tika 3.3.2 [solr/licenses](https://github.com/apache/solr/tree/releases/solr/9.11.0/solr/licenses) (various contributors) +- Third-party dependencies upgraded since 9.10.1: apache-client, arns, auth, aws-core, aws-query-protocol, aws-xml-protocol, checksums, checksums-spi, crt-core, endpoints-spi, http-auth, http-auth-aws, http-auth-aws-eventstream, http-auth-spi, http-client-spi, identity-spi, json-utils, metrics-spi, profiles, protocol-core, regions, retries, retries-spi, s3, sdk-core, sts, third-party-jackson-core, utils 2.31.77 → 2.53.1; api-common 2.33.0 → 2.64.0; auto-value-annotations 1.10.4 → 1.11.0; [...] +- Third-party dependencies removed since 9.10.1: apache-mime4j-core, apache-mime4j-dom 0.8.4; bcmail-jdk15on, bcpkix-jdk15on, bcprov-jdk15on, bcutil-jdk15on 1.70; boilerpipe, jhighlight, prometheus-metrics-exposition-formats 1.1.0; bzip2 0.9.1; c3p0 0.9.5.5; cdm, grib, httpservices, netcdf4, udunits 4.5.5; commons-csv 1.9.0; dd-plist 1.24; dec 0.1.2; ehcache-core 2.6.2; fontbox, pdfbox, pdfbox-tools, preflight, xmpbox 2.0.26; geoapi 3.0.1; google-api-services-storage-v1-rev20240621 2.0.0 [...] + ### Other (4 changes) - Centralize Maven repository declarations for the build. Can customize with SOLR_MAVEN_REPO_URL. [PR#4677](https://github.com/apache/solr/pull/4677) (David Smiley) diff --git a/changelog/v9.11.0/version-summary.md b/changelog/v9.11.0/version-summary.md index 71c74c4e37a..2b341a305d0 100644 --- a/changelog/v9.11.0/version-summary.md +++ b/changelog/v9.11.0/version-summary.md @@ -10,12 +10,6 @@ [9.11.0] -------- -### Important notes - -- Per-core `/solr/{core}/replication` commands are authorized individually. `backup`, `restore`, `deletebackup`, `disablereplication`, `enablereplication`, `abortfetch`, `disablepoll`, `enablepoll`, and `fetchindex` require the `update` permission; `indexversion`, `filelist`, `filecontent`, `details`, `commits`, and `restorestatus` require `read`. A command not listed here requires `update`. Grant `update` (or `all`) to roles that invoke the state-changing commands. -- A `filecontent` request to `/solr/{core}/replication` with `dirType=cf` or `dirType=tlogFile` must name a file that resolves inside the core's config or tlog directory; otherwise it is rejected. -- In SolrCloud, a request served by a core on the receiving node is authorized against that core's collection, regardless of the `collection` request parameter. Requests the core sends on to other collections, such as a distributed search over several collections or an alias, are authorized by the nodes that receive them, against their own collections. For example, a search sent to a core of collection `A` with `collection=B` needs read permission on both `A` and `B`. - ### Added (29 changes) - New SolrJ CollectionScopedSolrClient [PR#4418](https://github.com/apache/solr/pull/4418) (David Smiley) @@ -81,7 +75,7 @@ - PKIAuthenticationPlugin now rejects a SolrAuthV2 header with a malformed signature using a 401 response, instead of returning a 500 [PR#4553](https://github.com/apache/solr/pull/4553) (Jan Høydahl) - Fixed HttpJdkSolrClient leaking an executor thread when an async request's connection failed while its body was still being written; enough such failures could exhaust the client's thread pool. [SOLR-17707](https://issues.apache.org/jira/browse/SOLR-17707) (Serhiy Bzhezytskyy) - SpellCheckCollator now returns the partial (mutable) list of collations it had gathered so far, instead of throwing an UnsupportedOperationException, when the query time limit is exceeded while collating results. [SOLR-17870](https://issues.apache.org/jira/browse/SOLR-17870) (Puneet Sharma) -- SOLR-17973: Fix `shards.preference` not respected for cross-collection join queries [SOLR-17973](https://issues.apache.org/jira/browse/SOLR-17973) (khushjain) +- Fix `shards.preference` not respected for cross-collection join queries [SOLR-17973](https://issues.apache.org/jira/browse/SOLR-17973) (khushjain) - Improve HttpJettySolrClient.requestAsync (used in sharded/distributed-search and more) to increase throughput and prevent a rare deadlock. [SOLR-18051](https://issues.apache.org/jira/browse/SOLR-18051) (James Vanneman) - JWT Authentication plugin now supports matching non-string claims such as boolean [SOLR-18073](https://issues.apache.org/jira/browse/SOLR-18073) ([Jan Høydahl](https://home.apache.org/phonebook.html?uid=janhoy)) (Tony Panza) - Fix replication failure for files with exact MB sizes [SOLR-18098](https://issues.apache.org/jira/browse/SOLR-18098) (Shubham Ranjan) @@ -125,6 +119,12 @@ - Remove gosu from the Docker image. The Solr Docker image no longer installs the gosu binary. [SOLR-17353](https://issues.apache.org/jira/browse/SOLR-17353) (Jan Høydahl) - Removed LocalTikaExtractionBackend from the extraction module (SolrCell). Extraction using a remote Tika Server is now the only and default option. Tika-core is upgraded to v3.2.3 and still used for some SAX parsing [SOLR-18037](https://issues.apache.org/jira/browse/SOLR-18037) (Jan Høydahl) +### Dependency Upgrades (3 changes) + +- Third-party dependencies added since 9.10.1: apache5-client, utils-lite 2.53.1; google-api-services-storage-v1-rev20260204 2.0.0; grpc-opentelemetry 1.82.1; jackson-dataformat-xml, jackson-datatype-jsr310 2.22.2; joou-java-6 0.9.5; opentelemetry-semconv 1.29.0-alpha; prometheus-metrics-config, prometheus-metrics-exposition-textformats 1.8.0; tika-langdetect-tika 3.3.2 [solr/licenses](https://github.com/apache/solr/tree/releases/solr/9.11.0/solr/licenses) (various contributors) +- Third-party dependencies upgraded since 9.10.1: apache-client, arns, auth, aws-core, aws-query-protocol, aws-xml-protocol, checksums, checksums-spi, crt-core, endpoints-spi, http-auth, http-auth-aws, http-auth-aws-eventstream, http-auth-spi, http-client-spi, identity-spi, json-utils, metrics-spi, profiles, protocol-core, regions, retries, retries-spi, s3, sdk-core, sts, third-party-jackson-core, utils 2.31.77 → 2.53.1; api-common 2.33.0 → 2.64.0; auto-value-annotations 1.10.4 → 1.11.0; [...] +- Third-party dependencies removed since 9.10.1: apache-mime4j-core, apache-mime4j-dom 0.8.4; bcmail-jdk15on, bcpkix-jdk15on, bcprov-jdk15on, bcutil-jdk15on 1.70; boilerpipe, jhighlight, prometheus-metrics-exposition-formats 1.1.0; bzip2 0.9.1; c3p0 0.9.5.5; cdm, grib, httpservices, netcdf4, udunits 4.5.5; commons-csv 1.9.0; dd-plist 1.24; dec 0.1.2; ehcache-core 2.6.2; fontbox, pdfbox, pdfbox-tools, preflight, xmpbox 2.0.26; geoapi 3.0.1; google-api-services-storage-v1-rev20240621 2.0.0 [...] + ### Other (4 changes) - Centralize Maven repository declarations for the build. Can customize with SOLR_MAVEN_REPO_URL. [PR#4677](https://github.com/apache/solr/pull/4677) (David Smiley)
