dependabot[bot] opened a new pull request, #2152: URL: https://github.com/apache/stormcrawler/pull/2152
Bumps `storm-client.version` from 3.0.0 to 3.1.0. Updates `org.apache.storm:storm-client` from 3.0.0 to 3.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/storm/releases";>org.apache.storm:storm-client's releases</a>.</em></p> <blockquote> <h2>Apache Storm 3.1.0</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>🚀 New Features</h3> <ul> <li>Add ui.enable.jsonp to control JSONP callback wrapping in UI and Logviewer API responses by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8977";>apache/storm#8977</a></li> <li>Add storm-iceberg module: an Apache Iceberg sink bolt by <a href="https://github.com/GGraziadei";><code>@GGraziadei</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8950";>apache/storm#8950</a></li> <li>Sync checkstyle config with upstream google_checks.xml by <a href="https://github.com/sercuzz8";><code>@sercuzz8</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8969";>apache/storm#8969</a></li> </ul> <h3>🐛 Bug Fixes</h3> <ul> <li>Return only the log files the requesting user may access from the log file listing by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8974";>apache/storm#8974</a></li> <li>Change the worker log file permission only for download requests that are served by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8978";>apache/storm#8978</a></li> <li>Reject image tags that are neither mapped nor valid image hashes before building the manifest path by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8983";>apache/storm#8983</a></li> <li>Update StormSubmitter logging behavior by <a href="https://github.com/GGraziadei";><code>@GGraziadei</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8992";>apache/storm#8992</a></li> <li>Reject blobstore map local names that resolve outside the topology and worker directories by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8981";>apache/storm#8981</a></li> <li>Stop echoing the request Origin with allow-credentials in logviewer JSON responses by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8975";>apache/storm#8975</a></li> <li>Reject submitted jar locations that are not inside the Nimbus inbox by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8980";>apache/storm#8980</a></li> <li>Verify the peer identity of the Netty TLS server the worker client connects to by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8987";>apache/storm#8987</a></li> <li>Give each uploaded dependency artifact its own blob key instead of reusing a pre-existing blob by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8982";>apache/storm#8982</a></li> <li>Require Kryo class registration in the state serializer by <a href="https://github.com/GGraziadei";><code>@GGraziadei</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8990";>apache/storm#8990</a></li> <li>Return a normalized copy of the topology conf from Nimbus by <a href="https://github.com/GGraziadei";><code>@GGraziadei</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8991";>apache/storm#8991</a></li> <li>Add to instead of replace Jetty's default TLS exclusions on HTTPS connectors by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8979";>apache/storm#8979</a></li> <li>Pass only the required Kafka consumer properties to the spout lag monitor by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8988";>apache/storm#8988</a></li> <li>Restrict topology scheduler strategies to the shipped strategies when no allowlist is configured by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8986";>apache/storm#8986</a></li> <li>Decode netty server frames only after the handshake completes by <a href="https://github.com/GGraziadei";><code>@GGraziadei</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8993";>apache/storm#8993</a></li> <li>Set the CORS filter credentials parameter explicitly instead of a header name the filter ignores by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8976";>apache/storm#8976</a></li> <li>BugFix Utils.java by <a href="https://github.com/ZBaldi";><code>@ZBaldi</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8972";>apache/storm#8972</a></li> <li>Apply the configured log user and group lists to daemon log requests by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8973";>apache/storm#8973</a></li> <li>Generate tuple tree ids from a key stream instead of a recoverable linear congruential generator by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8989";>apache/storm#8989</a></li> <li>Remove DRPC per-function request queues once they are empty by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8985";>apache/storm#8985</a></li> <li>Validate topology.blobstore.map in rebalance conf overrides against the calling user by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8999";>apache/storm#8999</a></li> <li>Evaluate nimbus.groups when nimbus.users is empty by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/8998";>apache/storm#8998</a></li> <li>Evaluate authorization for requests that carry no principal by <a href="https://github.com/GGraziadei";><code>@GGraziadei</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9005";>apache/storm#9005</a></li> <li>Apply the nimbus ACLs to listBlobs so callers only see blobs they may read by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9000";>apache/storm#9000</a></li> <li>Read and check the docker command file before changing worker directory ownership by <a href="https://github.com/reiabreu";><code>@reiabreu</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9007";>apache/storm#9007</a></li> <li>Authorize createStateInZookeeper requests like the other blob operations by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9002";>apache/storm#9002</a></li> <li>Filter the topology history by the authenticated caller rather than the requested user name by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9003";>apache/storm#9003</a></li> <li>Check the calling principal against the topology owner in uploadNewCredentials by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9001";>apache/storm#9001</a></li> <li>STORM-3871: remove a topology's dependency artifact blobs when it is cleaned up by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9011";>apache/storm#9011</a></li> <li>Reject a topology submission that lists a blob key which is not a dependency blob key by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9012";>apache/storm#9012</a></li> <li>Validate the container id and invoke runc without a shell in reap-oci-container by <a href="https://github.com/reiabreu";><code>@reiabreu</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9008";>apache/storm#9008</a></li> <li>Apply worker file ownership and mode via an open descriptor by <a href="https://github.com/reiabreu";><code>@reiabreu</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9006";>apache/storm#9006</a></li> <li>Return independently owned value arrays from get_values by <a href="https://github.com/reiabreu";><code>@reiabreu</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9013";>apache/storm#9013</a></li> <li>Restrict OCI bind-mount sources to configured directories and check the launch command username by <a href="https://github.com/reiabreu";><code>@reiabreu</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9010";>apache/storm#9010</a></li> <li>Test the OCI launch-command username and mount-source enforcement by <a href="https://github.com/reiabreu";><code>@reiabreu</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9014";>apache/storm#9014</a></li> <li>Require every UI API endpoint to declare its authorization by <a href="https://github.com/GGraziadei";><code>@GGraziadei</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9004";>apache/storm#9004</a></li> <li>Apply one redaction rule to configuration served and logged by Storm by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9069";>apache/storm#9069</a></li> <li>Drop malformed tuple payloads instead of killing the receiving worker by <a href="https://github.com/L1nq0";><code>@L1nq0</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9076";>apache/storm#9076</a></li> <li>Harden the java serialization fallback bridge with a JEP-290 serial filter by <a href="https://github.com/L1nq0";><code>@L1nq0</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9075";>apache/storm#9075</a></li> <li>STORM-3871: sweep dependency blobs that outlive their topology's cleanup by <a href="https://github.com/rzo1";><code>@rzo1</code></a> in <a href="https://redirect.github.com/apache/storm/pull/9082";>apache/storm#9082</a></li> </ul> <h3>📦 Dependency Upgrades</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/storm/commit/11d40328b918ee89327b99ae9f5df14ef67155d7";><code>11d4032</code></a> [maven-release-plugin] prepare release v3.1.0</li> <li><a href="https://github.com/apache/storm/commit/d8ba1d5890fd212122776ebf70f129f1ef026817";><code>d8ba1d5</code></a> Merge pull request <a href="https://redirect.github.com/apache/storm/issues/9082";>#9082</a> from apache/STORM-3871-sweep-orphaned-dependency-blobs</li> <li><a href="https://github.com/apache/storm/commit/8c1fdc19dd734399fd61734d2c8d74ca39838437";><code>8c1fdc1</code></a> STORM-3871: stop a non-leader nimbus from registering a deleted blob again</li> <li><a href="https://github.com/apache/storm/commit/a9fb80480d60210d4a6e4503b5b6d3296ca98380";><code>a9fb804</code></a> STORM-3871: sweep dependency blobs that outlive their topology's cleanup</li> <li><a href="https://github.com/apache/storm/commit/f96065c5f022e69a83ae722288b9f2a769ffde64";><code>f96065c</code></a> Merge pull request <a href="https://redirect.github.com/apache/storm/issues/9080";>#9080</a> from apache/dependabot/npm_and_yarn/storm-webapp/svg...</li> <li><a href="https://github.com/apache/storm/commit/15531325afdc03aa0fd56db549bf50b684d37da1";><code>1553132</code></a> build(deps-dev): bump svgo from 4.0.2 to 4.1.0 in /storm-webapp</li> <li><a href="https://github.com/apache/storm/commit/d9dae3f6491725df5c393b97247a389d24cc35d0";><code>d9dae3f</code></a> Fix DeserializingConnectionCallbackTest negative-length assertion (<a href="https://redirect.github.com/apache/storm/issues/9081";>#9081</a>)</li> <li><a href="https://github.com/apache/storm/commit/415212892e73b1b63d3909b48027932668f4694a";><code>4152128</code></a> Harden the java serialization fallback bridge with a JEP-290 serial filter (#...</li> <li><a href="https://github.com/apache/storm/commit/cccc23303d8d9ad3e2eaa530f1ee816ca336ff78";><code>cccc233</code></a> Drop malformed tuple payloads instead of killing the receiving worker (<a href="https://redirect.github.com/apache/storm/issues/9076";>#9076</a>)</li> <li><a href="https://github.com/apache/storm/commit/c030b1b7a0e42d38ac3ac6fcb1532a545ac76db4";><code>c030b1b</code></a> Apply one redaction rule to configuration served and logged by Storm (<a href="https://redirect.github.com/apache/storm/issues/9069";>#9069</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apache/storm/compare/v3.0.0...v3.1.0";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.storm:storm-hdfs` from 3.0.0 to 3.1.0 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
