Aias00 opened a new issue, #6725:
URL: https://github.com/apache/shenyu/issues/6725
- Severity: Medium-High
- Location:
`shenyu-web/src/main/java/org/apache/shenyu/web/loader/ShenyuExtPathPluginJarLoader.java:54-56`
(`if (pluginJarName.contains(absolutePath)) { continue; }`);
`shenyu-web/src/main/java/org/apache/shenyu/web/loader/ShenyuPluginClassLoader.java:212-219`
(`compareVersion` — zero call sites)
-
Description:
`loadExtendPlugins` keys only on the file's absolute path. If the path is
already known, the jar is silently skipped — content/version is never
re-examined. `ShenyuPluginClassLoader.compareVersion(...)` would detect a
version change but has zero call sites.
-
Impact:
Operator replaces `ext-lib/foo.jar` with a new build (same filename) and
expects hot reload. The scheduler rescans, sees the path known, silently
ignores. Gateway keeps running the old plugin indefinitely. Only
delete-then-re-add triggers reload.
-
Suggested fix:
Track `(path, version)` or `(path, lastModified/hash)`; when path exists but
version differs, `removePluginClassLoader(path)` and re-parse. Wire
`compareVersion` into this check.
-
Confidence: High
- Related existing: none
---
_Identified during the 2026-08-02 deep re-scan; full list in
[`docs/scan2-2026-08-02/06-medium-tiers.md`](docs/scan2-2026-08-02/06-medium-tiers.md)._
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
