Caideyipi opened a new pull request, #18431:
URL: https://github.com/apache/iotdb/pull/18431

   ## Description
   
   ### Upgrade Eclipse Milo
   
   - Upgrade Eclipse Milo from 0.6.14 to 1.1.6 and migrate to the Milo 1.x 
artifact coordinates.
   - Migrate the OPC UA server, client, subscription, event, example, and 
integration-test code to the Milo 1.x APIs.
   - Update dependencies.json so packaged dependency metadata matches the 
resolved artifacts.
   
   ### Security hardening
   
   - Include the upstream UASC chunk-buffer release fix for CVE-2026-63252.
   - Explicitly use SessionSecurityDiagnosticsAccessMode.RESTRICTED for 
CVE-2026-63248.
   - Publish the anonymous user token policy only when anonymous access is 
enabled.
   - Validate X.509 user identity certificates against the server trust list 
instead of accepting every certificate.
   
   ### Transport behavior
   
   Milo 1.1.6 provides the OPC TCP server transport but no HTTPS server 
transport. The server therefore publishes only opc.tcp endpoints. The existing 
HTTPS port option remains accepted for configuration compatibility, conflict 
validation, and shared-server identity.
   
   ### Verification
   
   - Full reactor test compilation passed for both the default and Chinese 
locales (50 modules each).
   - Integration-test reactor test compilation passed (37 modules and 856 test 
sources).
   - Focused OPC UA unit tests passed: 13/13.
   - DataNode and OPC UA example dependency trees resolve only Milo 1.1.6 
artifacts with the new coordinates.
   - Repository scans found no remaining old Milo coordinates or API imports.
   - git diff --check passed.
   
   <hr>
   
   This PR has:
   - [x] been self-reviewed.
   - [x] updated dependency version information.
   - [x] added or updated unit tests for the changed behavior.
   - [x] updated the OPC UA integration test for the Milo 1.x API.
   
   <hr>
   
   ##### Key changed classes
   
   - OpcUaServerBuilder
   - OpcUaNameSpace
   - IoTDBOpcUaClient and ClientRunner
   - OPC UA example client classes
   - IoTDBPipeOPCUAIT


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to