kayx23 commented on code in PR #12647:
URL: https://github.com/apache/apisix/pull/12647#discussion_r2415392349


##########
CHANGELOG.md:
##########
@@ -80,6 +81,109 @@ title: Changelog
 - [0.7.0](#070)
 - [0.6.0](#060)
 
+## 3.14.0
+
+**The changes marked with :warning: are not backward compatible.**
+
+### Change
+
+- :warning: feat: admin api no longer populates default values when writing 
[#12603](https://github.com/apache/apisix/pull/12603)
+- :warning: change(jwt-auth): when algorithm is not RS256 or ES256, require 
the user to fill in secret [#12611](https://github.com/apache/apisix/pull/12611)
+- change(openid-connect): when bearer_only is false, require the user to fill 
in session.secret [#12609](https://github.com/apache/apisix/pull/12609)

Review Comment:
   For this change, the only case where it remains backward-compatible is if 
users already provided `session.secret` or are using `conf.bearer_only=true`. 
Otherwise they now need to manually fill in `session.secret` (not "backward 
compatible" - it's breaking).
   
   "Breaking change" means at least some existing configurations stop working 
or behave differently without user action.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to