Caideyipi opened a new pull request, #18431: URL: https://github.com/apache/iotdb/pull/18431
## Description ### Upgrade Eclipse Milo - Upgrade Eclipse Milo from 0.6.14 to 1.1.6 and migrate to the Milo 1.x artifact coordinates. - Migrate the OPC UA server, client, subscription, event, example, and integration-test code to the Milo 1.x APIs. - Update dependencies.json so packaged dependency metadata matches the resolved artifacts. ### Security hardening - Include the upstream UASC chunk-buffer release fix for CVE-2026-63252. - Explicitly use SessionSecurityDiagnosticsAccessMode.RESTRICTED for CVE-2026-63248. - Publish the anonymous user token policy only when anonymous access is enabled. - Validate X.509 user identity certificates against the server trust list instead of accepting every certificate. ### Transport behavior Milo 1.1.6 provides the OPC TCP server transport but no HTTPS server transport. The server therefore publishes only opc.tcp endpoints. The existing HTTPS port option remains accepted for configuration compatibility, conflict validation, and shared-server identity. ### Verification - Full reactor test compilation passed for both the default and Chinese locales (50 modules each). - Integration-test reactor test compilation passed (37 modules and 856 test sources). - Focused OPC UA unit tests passed: 13/13. - DataNode and OPC UA example dependency trees resolve only Milo 1.1.6 artifacts with the new coordinates. - Repository scans found no remaining old Milo coordinates or API imports. - git diff --check passed. <hr> This PR has: - [x] been self-reviewed. - [x] updated dependency version information. - [x] added or updated unit tests for the changed behavior. - [x] updated the OPC UA integration test for the Milo 1.x API. <hr> ##### Key changed classes - OpcUaServerBuilder - OpcUaNameSpace - IoTDBOpcUaClient and ClientRunner - OPC UA example client classes - IoTDBPipeOPCUAIT -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
