1.0: Messages overhaul, editable ACLs

Project announcement: here

⚠️Noteworthy changes

• Messages API has been rewritten and all related frontend issues fixed @iliax @Mgrdich

⚙️Features

• Messages: Groovy smart filters are replaced with CEL @DementevNikita (#98)
• ACL: Implemented editing entries @Vixtir (#188)
• Metrics: Implemented messages polling metrics @iliax (#4069)

🪛Enhancements

• Wizard: Added an ability to delete clusters @Nilumilak (#154)
• Brokers: Configs: UX improvements @Leshe4ka (#179)
• RBAC: Implement roles by github teams @Haarolean (#4093)
• Serde: Implement Hex serde @iliax (#4074)
• API: Topic active producer's states retrieval @iliax (#4121)
• Broker: Config: Implement search by value @malavmevada (#3804)
• Audit: Implement audit log level @iliax (#4103)
• Serde: Add protobuf raw message deserializer @kostasdizas (#4041)
• Respect proxy settings in WebClient @Khrol (#4042)
• SR: Implement schema references support @iliax (#3747)

🔨Bug Fixes

• Brokers: Fixed online partition count being red @Leshe4ka (#137)
• Topics: Fixed fetching config for Azure EH @Haarolean (#105)
• KC: Fixed sorting connectors duplicates them @Nilumilak (#119)
• Brokers: Fixed broker not shown when disk usage is unknown @Vixtir (#97)
• RBAC: Fixed 404 for "Create connector" @Nilumilak (#136)
• Fixed cluster names are not being escaped @Nilumilak (#113)
• Fixed blocking gh release info call @Haarolean (#185)
• Audit: Fixed user mapping @Haarolean (#91)
• Auth: Consider context path in basic auth html @Haarolean (#4136)
• Auth: Use HTTP GET for basic auth @Haarolean (#4135)
• SR: Fix custom SR naming @iliax (#4116)
• RBAC: Fix cognito roles extractor regression @FreddyMcRay (#4171)
• UX: Fix active controller badge on invalid node @moremagic (#4085)
• Topics: Ignore params not defined explicitly @p-eye (#4097)
• Audit: Consider disabled RBAC @Haarolean (#4138)
• RBAC: Fix cluster config menu item is always enabled @Haarolean (#4130)
• RBAC: Skip checks in case of app config @Haarolean (#4078)
• UX: Logout button link is bound to a wrong div @Haarolean (#4045)
• RBAC: Fix unknown resource exception @Haarolean (#4033)
• ACL: Fix ACL enablement check @iliax (#4034)
• KC: Suppress unavailable connects @iliax (#4061)
• Messages: Fix "Keep contents" not re-generated @Haarolean (#4008)
• ODD: Skipping topic exporting if failed to load topic schema @iliax (#3980)

Security

• Bumped vulnerable transitive dependencies @Haarolean @alexeyzavyalov (#4003) (#174)
• Fixed CVE-2023-52251 via replacing Groovy filters with CEL (see features)
• Added robots.txt @Haarolean (#3995)

Contributors

@DementevNikita, @Vixtir, @Nilumilak, @Leshe4ka, @Haarolean, @Mgrdich, @iliax, @alexeyzavyalov

Special thanks to our folks who we rarely see in dev changelogs: @germanosin, @azatsafin, @Narekmat, @RustamGimadiev, @mrmoonl1ght94, @VladSenyuta, @agolosen, @snoorge

And everyone else who contributed to this release:

@FreddyMcRay, @HurSungYun, @Khrol, @MikeStrike101, @dshubhadeep, @freeformz, @kostasdizas, @malavmevada, @moremagic, @p-eye, @pradyumnad, @pvmsikrsna, @seono and @victoria-miltcheva