shreemaan-abhishek opened a new pull request, #14168:
URL: https://github.com/apache/apisix/pull/14168
### Description
Release 3.20.0.
This PR:
- Adds the `3.20.0` section to `CHANGELOG.md` (and its Table of Contents
entry), covering all 49 user-facing PRs merged since the `release/3.19` branch
was cut. Backward-incompatible changes are grouped under **Change** and marked
with :warning:.
- Bumps the version to `3.20.0` in `apisix/core/version.lua` and
`docs/{en,zh}/latest/config.json`.
- Bumps the `info.version` of the Admin API and Control API OpenAPI
documents to `3.20.0`: `docs/openapi/admin-api/openapi.yaml` (and its bundle
`docs/en/latest/admin-api.json`, regenerated with `make bundle-admin-api-spec`)
and `docs/en/latest/control-api.json`, including the `/v1/server_info` example.
These documents are new since 3.19.0 and still carried `3.19.0`.
- Bumps `APISIX_DASHBOARD_COMMIT` in `.requirements` to `e5e1457` (current
`apisix-dashboard` master). `APISIX_RUNTIME` is already at `1.4.2`, so it is
unchanged.
- Needs no `ci/check_changelog_prs.ts` `IGNORE_PRS` addition: every commit
in the range whose subject prefix dodges the docs/chore/test/ci type filter is
user-facing and has a changelog entry. `ci/check_changelog_prs.ts` reports
`3.20.0` clean.
### Breaking changes (see the `Change` section)
Only changes that break an existing configuration, stored state or
observable behavior on upgrade, with no adjustment made, are listed here.
- #14019 feat!: remove the deprecated `mcp-bridge` plugin
- #13929 refactor(wolf-rbac): move `header_prefix` to route configuration
- #14146 fix(oas-validator): verify the TLS certificate of the `spec_url`
host (`ssl_verify` now defaults to `true`)
- #14098 fix(authz-keycloak): require every requested permission to be
granted
- #14088 feat(openid-connect): upgrade `lua-resty-openidc` to 1.9.3
(introspection failures now map to 401/503/500)
- #13992 feat(prometheus): add `service` and `service_id` to the stream
metrics
- #14087 fix(cli): don't capture openresty stdout in `apisix start`
- #14013 fix: return 421 for SNI and Host mismatches on mTLS requests
- #14035 fix(router): forward the matched path when nginx normalizes the
request uri
- #14108 fix(ssl): match `skip_mtls_uri_regex` against the encoded-slash
route uri
- #14096 fix(jwe-decrypt, forward-auth): clear forwarded headers when
skipping
- #14073 fix(ai-prompt-guard): check embeddings string arrays before
forwarding
- #13959 / #14154 fix(openapi-to-mcp): filter tool arguments and confine a
path parameter to one path segment
- #14144 perf(forward-auth): send auth requests through
`ngx_http_ffi_client` (now the default client)
### Note on the branch flow
`release/3.20` is PR-protected, so this release commit lands on the release
branch through this PR. The `release/3.20` -> `master` release PR follows once
this is merged.
### Checklist
- [x] I have explained the need for this PR and the problem it solves
- [x] I have explained the changes or the new features added to this PR
- [ ] I have added tests corresponding to this change (N/A: release
bookkeeping only, no runtime code changes)
- [x] I have updated the documentation to reflect this change
- [x] I have verified that this change is backward compatible (this PR
itself only touches release metadata; the breaking changes it documents landed
in their own PRs and are listed in the `Change` section)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
