Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump github.com/nats-io/nats-server/v2 from 2.7.3 to 2.7.4 #171

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 20, 2023

Bumps github.com/nats-io/nats-server/v2 from 2.7.3 to 2.7.4.

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.7.4

Changelog

Note about .deb/.rpm packages

We use Goreleaser to build our assets, and it seems that it changed the default install from /usr/local/bin to /usr/bin. See Goreleaser's change here. We are sorry for the inconvenience this may cause.

Go Version

  • 1.17.8: Both release executables and Docker images are built with this Go release.

Improved

  • JetStream:
    • Better startup logging to help debug RAFT log directories to streams/consumers (#2897)

Fixed

  • JetStream:
    • The consumers count when getting stream information could be wrong in clustered mode (#2896)
    • Never used clustered and filtered consumers consume storage under $SYS. Thanks to @​nayanparegi and @​aksdb for the reports (#2899, #2914)
    • Stream not recovered on restart with "deleted message", "checksum" or "no message cache" errors (#2900)
    • Schema violations in the NATS CLI tool caused by large number overflow when "active" field for Sources and Mirrors was computed and there had been no contact yet (#2903)
    • Some Stream advisories were missing (#2887)
    • Inconsistent durable consumer state after stream peer removal (#2904)
    • Scaling up and down for streams and consumers (#2905)
    • Validate files' path when restoring stream from a snapshot/backup (CVE-2022-26652). Thanks to Yiming Xiang for the report (#2917)
  • Monitoring:
    • Panic on non 64-bit platforms due to an unaligned 64-bit atomic operation. Thanks to @​mlorenz-tug for the report (#2915)
  • LeafNode:
    • Queue subscription interest could be suppressed in complex situations causing messages to not flow from a LeafNode server to the rest of the (super)cluster (#2901)
  • Fixed some lock inversions (#2911)

Complete Changes

nats-io/nats-server@v2.7.3...v2.7.4

Commits
  • a86b84a Merge pull request #2918 from nats-io/release_2_7_4
  • 773636c Release v2.7.4
  • 818c2c7 Merge pull request #2917 from nats-io/file_path
  • b412869 Ensure file path is correct during stream restore
  • 0cb0f6d Merge pull request #2914 from nats-io/fix_2913
  • 9a2da9e Adding denies $KV.>/$OBJ.> along leaf connections on differing domain (#2916)
  • 5a97ee6 Merge pull request #2911 from nats-io/fix_lock_inversions
  • 3538aea Merge pull request #2915 from nats-io/fix_atomic_unaligned
  • 0fae806 [FIXED] Some lock inversions
  • dde235a [FIXED] Panic when monitoring enabled on non 64bit architectures
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 20, 2023
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/nats-io/nats-server/v2-2.7.4 branch from 337bf11 to 2b105e0 Compare February 20, 2023 09:52
Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.7.3 to 2.7.4.
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/.goreleaser.yml)
- [Commits](nats-io/nats-server@v2.7.3...v2.7.4)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/nats-io/nats-server/v2-2.7.4 branch from 2b105e0 to 5d806ea Compare March 21, 2023 12:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants