Skip to content

Releases: apache/storm

Release list

Apache Storm 3.0.0

Apache Storm 3.0.0 Latest
Latest

Choose a tag to compare

View all tags
@reiabreu reiabreu released this 22 Jul 22:27
v3.0.0
d17de0c

What's Changed

🚀 New Features

  • Removed all uses of Clojure, version 3.0.0-SNAPSHOT by @jnioche in #8537
  • build: introduce aggregator modules and unify pom display names by @rzo1 in #8541
  • storm-submit-tools: modernize Java code, no API surface changes by @rzo1 in #8582
  • Bump Java to 21, update docs for Storm 3.x and javadoc.io migration by @rzo1 in #8594
  • Introduce jitter metric based on RFC 1889 Appendix A by @GGraziadei in #8586
  • Zstd compression for thrift serialization (storm cluster state) by @GGraziadei in #8653
  • Make storm more windows friendly by @sigee in #8699
  • Fix checkstyle violations (#8585 - Phase 3 - Part 1) by @sigee in #8702
  • Docker compose local (dev) distributed Storm cluster with full observability and network simulation by @GGraziadei in #8706
  • Add tuple compression for inter-worker communication by @GGraziadei in #8707
  • Optimize ZooKeeper read requests and remove redundant checks by @GGraziadei in #8714
  • EvenScheduler: opt-in round-robin rebalance onto returning idle supervisors by @mwkang in #8778
  • Skip stale worker heartbeats from orphaned worker directories by @mwkang in #8789
  • Isolation Scheduler Hosts Sorting | Add secondary sort (No of free slots) and tertiary sort (Hostname) by @meetjain74 in #8709
  • Add AIMD based dynamic producer batch sizing to JCQueue by @GGraziadei in #8796
  • scheduler: replace reflection with @VisibleForTesting in IsolationSchedulerTest by @reiabreu in #8811
  • Improve RELEASING.md accuracy and completeness by @reiabreu in #8813
  • Add jitter control loop and JitterAwareStreamGrouping by @GGraziadei in #8593
  • ci: add ASF allowlist check for GitHub Actions (Dependabot guard) by @rzo1 in #8817
  • build: run ASF allowlist check on every PR so the required check reports by @rzo1 in #8887
  • Bump Java baseline to 25 on master by @reiabreu in #8893
  • Decouple the control plane from the data plane on receive queues by @GGraziadei in #8892
  • Reduce binary distribution size: unbundle optional Hadoop/Kafka deps + de-duplicate shared jars by @rzo1 in #8819

🐛 Bug Fixes

  • fix(topology_lag): Kafka Topology Lag breaking when no offsets are commited for topic/partition by @DiogoP98 in #8589
  • Remove shuffle post sorting assignable hosts in Isolation Scheduler by @meetjain74 in #8705
  • Fix Y2038 worker heartbeat overflow by migrating timestamps to i64 by @dpol1 in #8788
  • Fix late tuple stream serialization in windowed bolts by @dpol1 in #8790
  • Fix double max.free.per.topology cap in EvenScheduler idle rebalance by @mwkang in #8798
  • Filter worker heartbeats by per-topology timeout by @mwkang in #8800
  • Fix NPE in WorkerState.transferLocalBatch causing worker crashes by @dpol1 in #8896
  • Fix worker launch: add lib-common to the supervisor's worker classpath and restore the lib-worker drop-in directory by @reiabreu in #8905

📦 Dependency Upgrades

  • build: replace storm-maven-plugins with git-commit-id-maven-plugin by @rzo1 in #8540
  • Bump cytoscape from 3.33.2 to 3.33.3 in /storm-webapp by @dependabot[bot] in #8578
  • Bump terser-webpack-plugin from 5.4.0 to 5.5.0 in /storm-webapp by @dependabot[bot] in #8577
  • Bump cypress from 15.13.0 to 15.14.2 in /storm-webapp by @dependabot[bot] in #8576
  • Bump datatables.net from 2.3.7 to 2.3.8 in /storm-webapp by @dependabot[bot] in #8575
  • Bump mockito.version from 5.14.2 to 5.23.0 in /examples by @dependabot[bot] in #8569
  • Bump io.github.git-commit-id:git-commit-id-maven-plugin from 9.0.1 to 10.0.0 in /examples by @dependabot[bot] in #8567
  • Bump activemq.version from 6.2.4 to 6.2.5 by @dependabot[bot] in #8543
  • Bump com.fasterxml.jackson:jackson-bom from 2.21.2 to 2.21.3 by @dependabot[bot] in #8548
  • Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 by @dependabot[bot] in #8549
  • Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 by @dependabot[bot] in #8551
  • Bump org.yaml:snakeyaml from 2.2 to 2.6 in /examples by @dependabot[bot] in #8560
  • Bump spring.version from 7.0.6 to 7.0.7 by @dependabot[bot] in #8550
  • Bump joda-time:joda-time from 2.14.1 to 2.14.2 by @dependabot[bot] in #8546
  • Bump activemq.version from 6.2.4 to 6.2.5 in /examples by @dependabot[bot] in #8557
  • Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 in /examples by @dependabot[bot] in #8556
  • Bump netty-tcnative.version from 2.0.75.Final to 2.0.77.Final by @dependabot[bot] in #8554
  • Bump prometheus.client.version from 1.5.1 to 1.6.1 by @dependabot[bot] in #8544
  • Bump com.google.code.gson:gson from 2.13.2 to 2.14.0 by @dependabot[bot] in #8547
  • Bump commons-io:commons-io from 2.21.0 to 2.22.0 by @dependabot[bot] in #8545
  • Bump com.fasterxml.jackson:jackson-bom from 2.21.2 to 2.21.3 in /examples by @dependabot[bot] in #8559
  • Bump commons-io:commons-io from 2.21.0 to 2.22.0 in /examples by @dependabot[bot] in #8564
  • Bump spring.version from 7.0.6 to 7.0.7 in /examples by @dependabot[bot] in #8558
  • Bump io.github.git-commit-id:git-commit-id-maven-plugin from 9.0.1 to 10.0.0 by @dependabot[bot] in #8555
  • Bump com.fasterxml.jackson.core:jackson-databind from 2.21.2 to 2.21.3 by @dependabot[bot] in #8552
  • Bump com.google.code.gson:gson from 2.13.2 to 2.14.0 in /examples by @dependabot[bot] in #8566
  • Bump datatables.net-bs5 from 2.3.7 to 2.3.8 in /storm-webapp by @dependabot[bot] in #8574
  • Bump datatables.net-dt from 2.3.7 to 2.3.8 in /storm-webapp by @dependabot[bot] in #8572
  • Bump start-server-and-test from 3.0.0 to 3.0.2 in /storm-webapp by @dependabot[bot] in #8571
  • Bump redis.clients:jedis from 7.4.1 to 7.5.0 by @dependabot[bot] in #8553
  • Bump webpack from 5.105.4 to 5.106.2 in /storm-webapp by @dependabot[bot] in #8573
  • Remove dead dependencyManagement entries and unused version properties by @rzo1 in #8580
  • Bump fast-uri from 3.1.0 to 3.1.2 in /storm-webapp by @dependabot[bot] in #8592
  • Bump org.apache.thrift:libthrift from 0.22.0 to 0.23.0 by @dependabot[bot] in #8638
  • Bump org.apache.logging.log4j:log4j-bom from 2.25.4 to 2.26.0 by @dependabot[bot] in #8634
  • Bump io.netty:netty-bom from 4.2.12.Final to 4.2.13.Final in /examples by @dependabot[bot] in #8633
  • Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4 by @dependabot[bot] in #8629
  • Bump org.apache:apache from 37 to 38 by @dependabot[bot] in #8625
  • Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4 in /examples by @dependabot[bot] in #8623
  • Bump org.apache:apache from 37 to 38 in /examples by @dependabot[bot] in #8618
  • Bump io.netty:netty-bom from 4.2.12.Final to 4.2.13.Final by @dependabot[bot] in #8616
  • Bump com.puppycrawl.tools:checkstyle from 8.2 to 13.4.2 in /examples by @dependabot[bot] in #8615
  • Bump terser-webpack-plugin from 5.5.0 to 5.6.0 in /storm-webapp by @dependabot[bot] in #8612
  • Bump jetty.version from 12.1.8 to 12.1.9 in /examples by @dependabot[bot] in #8611
  • Bump vis-data from 8.0.3 to 8.0.4 in /storm-webapp by @dependabot[bot] in #8608
  • Bump org.apache.thrift:libthrift from 0.22.0 to 0.23.0 in /examples by @dependabot[bot] in #8597
  • Bump start-server-and-test from 3.0.2 to 3.0.4 in /...
Read more

Contributors

jnioche, reiabreu, and 10 other contributors
Assets 2
Loading

Apache Storm 2.8.9

Apache Storm 2.8.9

Choose a tag to compare

View all tags
@reiabreu reiabreu released this 22 Jul 22:24
v2.8.9
bfc02e4

What's Changed

🚀 New Features

  • fix(webapp): guard Flux viewer against js-yaml 5.x empty-input throw (2.x) by @rzo1 in #8890

📦 Dependency Upgrades

  • Bump org.apache.thrift:libthrift from 0.22.0 to 0.23.0 by @dependabot[bot] in #8686
  • Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16 by @dependabot[bot] in #8670
  • Bump org.apache.logging.log4j:log4j-bom from 2.25.4 to 2.26.0 by @dependabot[bot] in #8685
  • Bump org.apache.commons:commons-configuration2 from 2.14.0 to 2.15.0 by @dependabot[bot] in #8684
  • Bump jakarta.ws.rs:jakarta.ws.rs-api from 3.1.0 to 4.0.0 by @dependabot[bot] in #8682
  • Bump io.netty:netty-bom from 4.2.12.Final to 4.2.13.Final by @dependabot[bot] in #8675
  • Bump asm.version from 9.9.1 to 9.10 by @dependabot[bot] in #8681
  • Bump cypress from 15.14.2 to 15.15.0 in /storm-webapp by @dependabot[bot] in #8660
  • Bump vis-network from 10.0.3 to 10.1.0 in /storm-webapp by @dependabot[bot] in #8662
  • Bump js-cookie from 3.0.5 to 3.0.7 in /storm-webapp by @dependabot[bot] in #8663
  • Bump start-server-and-test from 3.0.4 to 3.0.5 in /storm-webapp by @dependabot[bot] in #8665
  • Bump cytoscape-dagre from 2.5.0 to 3.0.0 in /storm-webapp by @dependabot[bot] in #8666
  • Bump org.clojure:clojure from 1.12.4 to 1.12.5 by @dependabot[bot] in #8677
  • Bump com.fasterxml.jackson:jackson-bom from 2.21.2 to 2.21.3 by @dependabot[bot] in #8679
  • Bump org.mockito:mockito-core from 4.11.0 to 5.23.0 by @dependabot[bot] in #8683
  • build(deps): bump jakarta-activation-version from 1.2.1 to 2.0.1 by @dependabot[bot] in #8680
  • build(deps): bump slf4j.version from 2.0.17 to 2.0.18 by @dependabot[bot] in #8673
  • Bump com.fasterxml.jackson.core:jackson-databind from 2.21.3 to 2.22.0 by @dependabot[bot] in #8774
  • Bump redis.clients:jedis from 7.5.0 to 7.5.2 by @dependabot[bot] in #8772
  • Bump org.apache.commons:commons-configuration2 from 2.15.0 to 2.15.1 by @dependabot[bot] in #8771
  • Bump io.netty:netty-bom from 4.2.13.Final to 4.2.14.Final by @dependabot[bot] in #8770
  • Bump surefire.version from 3.5.5 to 3.5.6 by @dependabot[bot] in #8769
  • Bump org.apache.maven.plugins:maven-surefire-report-plugin from 3.5.5 to 3.5.6 by @dependabot[bot] in #8767
  • Bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0 by @dependabot[bot] in #8765
  • Bump asm.version from 9.10 to 9.10.1 by @dependabot[bot] in #8763
  • Bump metrics.version from 4.2.38 to 4.2.39 by @dependabot[bot] in #8761
  • Bump js-cookie from 3.0.7 to 3.0.8 in /storm-webapp by @dependabot[bot] in #8760
  • Bump terser-webpack-plugin from 5.6.0 to 5.6.1 in /storm-webapp by @dependabot[bot] in #8759
  • Bump webpack-cli from 7.0.2 to 7.0.3 in /storm-webapp by @dependabot[bot] in #8758
  • Bump cytoscape from 3.33.3 to 3.33.4 in /storm-webapp by @dependabot[bot] in #8757
  • Bump dropwizard.version from 5.0.1 to 5.0.2 by @dependabot[bot] in #8752
  • Bump storm.kafka.client.version from 4.2.0 to 4.3.0 by @dependabot[bot] in #8768
  • Bump org.junit:junit-bom from 6.0.3 to 6.1.0 by @dependabot[bot] in #8766
  • Bump activemq.version from 6.2.5 to 6.2.6 by @dependabot[bot] in #8764
  • Bump js-yaml from 4.1.1 to 4.2.0 in /storm-webapp by @dependabot[bot] in #8755
  • Bump cypress from 15.15.0 to 15.16.0 in /storm-webapp by @dependabot[bot] in #8753
  • Bump webpack from 5.106.2 to 5.107.2 in /storm-webapp by @dependabot[bot] in #8754
  • Bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.0 by @dependabot[bot] in #8756
  • Bump actions/setup-java from 5.2.0 to 5.3.0 by @dependabot[bot] in #8792
  • build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #8795
  • build(deps): bump actions/cache from 5.0.5 to 6.0.0 by @dependabot[bot] in #8805
  • build(deps): bump actions/setup-python from 6.2.0 to 6.3.0 by @dependabot[bot] in #8804
  • build(deps): bump actions/setup-java from 5.3.0 to 5.4.0 by @dependabot[bot] in #8809
  • build(deps): bump actions/cache from 6.0.0 to 6.1.0 by @dependabot[bot] in #8815
  • build(deps-dev): bump webpack from 5.107.2 to 5.108.3 in /storm-webapp by @dependabot[bot] in #8864
  • build(deps): bump activemq.version from 6.2.6 to 6.2.7 by @dependabot[bot] in #8867
  • build(deps): bump byte-buddy.version from 1.18.8 to 1.18.10 by @dependabot[bot] in #8884
  • build(deps): bump io.netty:netty-bom from 4.2.13.Final to 4.2.15.Final by @dependabot[bot] in #8883
  • build(deps-dev): bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 by @dependabot[bot] in #8882
  • build(deps): bump org.junit:junit-bom from 6.1.0 to 6.1.1 by @dependabot[bot] in #8881
  • build(deps): bump org.apache:apache from 38 to 39 by @dependabot[bot] in #8879
  • build(deps): bump org.checkerframework:checker-qual from 4.1.0 to 4.2.0 by @dependabot[bot] in #8878
  • build(deps-dev): bump com.github.eirslett:frontend-maven-plugin from 2.0.0 to 2.0.1 by @dependabot[bot] in #8876
  • build(deps): bump org.apache.hbase:hbase-client from 2.6.5-hadoop3 to 2.6.6-hadoop3 by @dependabot[bot] in #8875
  • build(deps): bump com.zaxxer:HikariCP from 7.0.2 to 7.1.0 by @dependabot[bot] in #8871
  • build(deps): bump com.fasterxml.woodstox:woodstox-core from 7.2.0 to 7.2.1 by @dependabot[bot] in #8870
  • build(deps): bump spring.version from 7.0.7 to 7.0.8 by @dependabot[bot] in #8869
  • build(deps-dev): bump cypress from 15.16.0 to 15.18.0 in /storm-webapp by @dependabot[bot] in #8868
  • build(deps-dev): bump webpack-cli from 7.0.3 to 7.1.0 in /storm-webapp by @dependabot[bot] in #8865
  • build(deps): bump js-yaml from 4.2.0 to 5.2.0 in /storm-webapp by @dependabot[bot] in #8863
  • build(deps): bump jetty.version from 12.1.9 to 12.1.10 by @dependabot[bot] in #8862
  • build(deps-dev): bump start-server-and-test from 3.0.5 to 3.0.11 in /storm-webapp by @dependabot[bot] in #8861
  • build(deps): bump cytoscape from 3.33.4 to 3.34.0 in /storm-webapp by @dependabot[bot] in #8860
  • build(deps): bump netty-tcnative.version from 2.0.77.Final to 2.0.80.Final by @dependabot[bot] in #8880
  • build(deps): bump prometheus.client.version from 1.6.1 to 1.8.0 by @dependabot[bot] in #8877
  • build(deps): bump com.google.errorprone:error_prone_annotations from 2.49.0 to 2.50.0 by @dependabot[bot] in #8873
  • build(deps): bump commons-logging:commons-logging from 1.3.6 to 1.4.0 by @dependabot[bot] in #8872
  • build(deps): bump storm.kafka.client.version from 4.3.0 to 4.3.1 by @dependabot[bot] in #8859
  • build(deps): bump cytoscape-dagre from 3.0.0 to 4.0.0 in /storm-webapp by @dependabot[bot] in #8866
  • build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in #8899

Full Changelog: v2.8.8...v2.8.9

Contributors

rzo1 and dependabot
Loading

Apache Storm 2.8.8

Apache Storm 2.8.8

Choose a tag to compare

View all tags
@reiabreu reiabreu released this 18 May 22:03
v2.8.8
917952c

What's Changed

🚀 New Features

  • Update 2.x documentation links to javadoc.io, fix Jekyll rendering, and optimize CI matrix by @rzo1 in #8595

🐛 Bug Fixes

  • STORM-4041: fix(topology_lag): Kafka Topology Lag breaking when no offsets are committed (Backport #8589) by @reiabreu in #8591

📦 Dependency Upgrades

  • Bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in #8534
  • Bump postcss from 8.5.8 to 8.5.10 in /storm-webapp by @dependabot[bot] in #8536
  • Bump org.glassfish.jersey:jersey-bom from 3.1.11 to 4.0.2 by @dependabot[bot] in #8632
  • Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 by @dependabot[bot] in #8631
  • Bump netty-tcnative.version from 2.0.75.Final to 2.0.77.Final by @dependabot[bot] in #8628
  • Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4 by @dependabot[bot] in #8624
  • Bump jetty.version from 12.1.8 to 12.1.9 by @dependabot[bot] in #8622
  • Bump datatables.net-bs5 from 2.3.7 to 2.3.8 in /storm-webapp by @dependabot[bot] in #8621
  • Bump cytoscape from 3.33.2 to 3.33.3 in /storm-webapp by @dependabot[bot] in #8619
  • Bump prometheus.client.version from 1.5.1 to 1.6.1 by @dependabot[bot] in #8614
  • Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 by @dependabot[bot] in #8607
  • Bump org.apache:apache from 37 to 38 by @dependabot[bot] in #8604
  • Bump vis-data from 8.0.3 to 8.0.4 in /storm-webapp by @dependabot[bot] in #8602
  • Bump spring.version from 7.0.6 to 7.0.7 by @dependabot[bot] in #8601
  • Bump cypress from 15.13.0 to 15.14.2 in /storm-webapp by @dependabot[bot] in #8599
  • Bump com.fasterxml.jackson.core:jackson-databind from 2.21.2 to 2.21.3 by @dependabot[bot] in #8643
  • Bump joda-time:joda-time from 2.14.1 to 2.14.2 by @dependabot[bot] in #8642
  • Bump redis.clients:jedis from 7.4.1 to 7.5.0 by @dependabot[bot] in #8626
  • Bump start-server-and-test from 3.0.0 to 3.0.4 in /storm-webapp by @dependabot[bot] in #8620
  • Bump webpack from 5.105.4 to 5.106.2 in /storm-webapp by @dependabot[bot] in #8613
  • Bump org.checkerframework:checker-qual from 3.55.1 to 4.1.0 by @dependabot[bot] in #8641
  • Bump org.yaml:snakeyaml from 2.2 to 2.6 by @dependabot[bot] in #8637
  • Bump commons-io:commons-io from 2.21.0 to 2.22.0 by @dependabot[bot] in #8636
  • Bump com.google.code.gson:gson from 2.13.2 to 2.14.0 by @dependabot[bot] in #8630
  • Bump datatables.net-dt from 2.3.7 to 2.3.8 in /storm-webapp by @dependabot[bot] in #8617
  • Bump datatables.net from 2.3.7 to 2.3.8 in /storm-webapp by @dependabot[bot] in #8609
  • Bump vis-network from 10.0.2 to 10.0.3 in /storm-webapp by @dependabot[bot] in #8606
  • Bump terser-webpack-plugin from 5.4.0 to 5.6.0 in /storm-webapp by @dependabot[bot] in #8610
  • Bump io.netty:netty-bom from 4.2.12.Final to 4.2.13.Final by @dependabot[bot] in #8640
  • Bump activemq.version from 6.2.4 to 6.2.5 by @dependabot[bot] in #8635
  • Bump mockito.version from 4.11.0 to 5.23.0 by @dependabot[bot] in #8639

Full Changelog: v2.8.7...v2.8.8

Contributors

reiabreu, rzo1, and dependabot
Loading

Apache Storm 2.8.7

Apache Storm 2.8.7

Choose a tag to compare

View all tags
@reiabreu reiabreu released this 19 Apr 17:26
v2.8.7
db9cce5

Apache Storm 2.8.7 has been released. This release includes critical security fixes, library updates, and documentation improvements. The community strongly encourages all users of previous versions to upgrade to this release.

⚠️ Security Fixes

  • CVE-2026-40557: JVM-wide TLS Security Downgrade in Prometheus Reporter
    • Versions Affected: 2.6.3 to 2.8.6.
    • Technical Description: Enabling the skip_tls_validation configuration in the Prometheus Reporter caused an improper certificate validation that replaced the default SSL context. This resulted in a JVM-wide TLS security downgrade, affecting all components within the same process.
    • Fix: The reporter now uses a scoped SSL context for validation bypass, ensuring the default JVM SSL context remains secure.
  • CVE-2026-41081: Improper Handling of TLS Client Authentication Failures
    • Versions Affected: All versions before 2.8.7.
    • Technical Description: When TLS client authentication was enabled, failed authentication attempts were incorrectly assigned a fallback "ANONYMOUS" principal. This allowed unauthorized users to potentially bypass authorization checks that relied on the presence of a principal.
    • Fix: Connections are now strictly rejected if TLS client authentication fails or is missing when required.

🐛 Bug Fixes

  • [#8518] - Cache busting is broken - ${packageTimestamp} is never substituted in HTML resources.
  • [#8516] - Hardening: clean up TlsTransportPlugin and surface unverified peers.
  • [#8515] - Profiling/debugging REST endpoints should use POST instead of GET.
  • [#8533] - flux: fix 'recieveed' -> 'received' in LogInfoBolt Javadoc.
  • [#8532] - storm-client: fix 'accross' -> 'across' in Stream.java Javadoc.
  • [#8531] - storm-core: fix 'seperate' -> 'separate' in configuration.h comment.
  • [#8530] - docs: fix 'occured' -> 'occurred' in LocallyCachedBlob Javadoc.
  • [#8529] - docs: fix 'recieved' -> 'received' in IAutoCredentials Javadoc.

📦 Dependency Upgrades

Dependency From To PR
com.google.guava:guava 33.5.0-jre 33.6.0-jre [#8526]
org.apache.commons:commons-configuration2 2.13.0 2.14.0 [#8525]
org.bouncycastle (bouncycastle.version) 1.83 1.84 [#8524]
org.rocksdb:rocksdbjni 10.10.1 10.10.1.1 [#8523]
org.jgrapht:jgrapht-core 0.9.0 1.5.3 [#8522]
org.apache.hbase:hbase-client 2.6.4-hadoop3 2.6.5-hadoop3 [#8520]
follow-redirects (storm-webapp) 1.15.11 1.16.0 [#8519]
axios (storm-webapp) 1.13.6 1.15.0 [#8511]
org.apache.activemq:activemq-client 6.2.3 6.2.4 [#8508]
org.apache.activemq:activemq-broker 6.2.3 6.2.4 [#8507]
org.apache.activemq:activemq-all 6.2.3 6.2.4 [#8506]
org.apache.activemq:activemq-mqtt 6.2.3 6.2.4 [#8505]

📝 Contributors

Thank you to everyone who contributed to this release.

Loading

Apache Storm 2.8.6

Apache Storm 2.8.6

Choose a tag to compare

View all tags
@rzo1 rzo1 released this 07 Apr 18:11
v2.8.6
1d21736

This release includes two security fixes, enhancements, bug fixes, and a large number of dependency upgrades. Users of previous versions are strongly encouraged to upgrade.

⚠️ Security Fixes

CVE-2026-35337 — Deserialization of Untrusted Data in Apache Storm

Versions affected: < 2.8.6

When processing topology credentials submitted via the Nimbus Thrift API, Storm deserializes the base64-encoded TGT blob using ObjectInputStream.readObject() without any class filtering or validation. An authenticated user with topology submission rights could supply a crafted serialized object in the "TGT" credential field, leading to remote code execution in both the Nimbus and Worker JVMs.

Fix: Upgrade to 2.8.6. If you cannot upgrade immediately, monkey-patch an ObjectInputFilter allow-list to ClientAuthUtils.deserializeKerberosTicket() restricting deserialized classes to javax.security.auth.kerberos.KerberosTicket and its known dependencies. See the full mitigation instructions in the release notes.

Credit: Discovered by K.

CVE-2026-35565 — Stored XSS via Unsanitized Topology Metadata in Storm UI

Versions affected: < 2.8.6

The Storm UI visualization component interpolates topology metadata (component IDs, stream names, grouping values) directly into HTML via innerHTML in parseNode() and parseEdge() without sanitization. An authenticated user with topology submission rights could craft a topology with malicious HTML/JavaScript in component identifiers, resulting in stored cross-site scripting. In multi-tenant deployments this enables privilege escalation through script execution in an admin's browser session.

Fix: Upgrade to 2.8.6. If you cannot upgrade immediately, patch storm-webapp/src/main/webapp/js/visualization.js to escape output in parseNode() and parseEdge(). See the full mitigation instructions in the release notes.

Credit: Discovered while investigating another report by K.

🚀 Enhancements

  • #8483 — Migrate to Java 24+ compatible security APIs and add Java 25 to CI
  • #8452 — Pass Conf object to KryoDecorator
  • #8305 — Improve dev-tools/release_notes.py to handle multiple tags per issue

🐛 Bug Fixes

  • #8456 / #8457 — Fix scientific notation display for large numbers in Storm UI table
  • #8442 — Fix NPE in getSupervisorPageInfo for unknown hostnames
  • #8441 — Fix NPE in mkAssignments when assignment is deleted during scheduling
  • #8440 — Fix corrupted record counter in SequenceFileReader.Offset.increment()

📦 Dependency Upgrades

Dependency From To
io.netty:netty-bom 4.2.10.Final 4.2.12.Final
hadoop.version 3.4.3 3.5.0
org.rocksdb:rocksdbjni 10.2.1 10.10.1
activemq.version 6.2.1 6.2.3
spring.version 7.0.5 7.0.6
jetty.version 12.1.6 12.1.8
com.fasterxml.jackson:jackson-bom 2.21.1 2.21.2
com.fasterxml.jackson.core:jackson-databind 2.21.1 2.21.2
storm.kafka.client.version 4.1.1 4.2.0
redis.clients:jedis 7.3.0 7.4.1
byte-buddy.version 1.18.5 1.18.8
org.apache.logging.log4j:log4j-bom 2.25.3 2.25.4
prometheus.client.version 1.5.0 1.5.1
org.checkerframework:checker-qual 3.53.1 3.54.0
com.google.errorprone:error_prone_annotations 2.48.0 2.49.0
netty-tcnative.version 2.0.74.Final 2.0.75.Final
commons-logging:commons-logging 1.3.5 1.3.6
joda-time:joda-time 2.14.0 2.14.1
org.apache.maven:maven-resolver-provider 3.9.12 3.9.14
org.apache.maven.plugins:maven-shade-plugin 3.6.1 3.6.2
com.github.eirslett:frontend-maven-plugin 1.15.1 2.0.0
cytoscape (storm-webapp) 3.33.1 3.33.2
lodash (storm-webapp) 4.17.23 4.18.1
webpack-cli (storm-webapp) 7.0.0 7.0.2
cypress (storm-webapp) 15.12.0 15.13.0
mini-css-extract-plugin (storm-webapp) 2.10.1 2.10.2
start-server-and-test (storm-webapp) 2.1.5 3.0.0
serialize-javascript (storm-webapp) 7.0.4 7.0.5
picomatch (storm-webapp) 4.0.3 4.0.4
actions/upload-artifact 4.6.2 7.0.0
actions/setup-node 4.4.0 6.3.0
actions/download-artifact 4.3.0 8.0.1
ruby/setup-ruby 1.295.0 1.298.0
Loading

Apache Storm 2.8.5

Apache Storm 2.8.5

Choose a tag to compare

View all tags
@reiabreu reiabreu released this 25 Mar 00:05
v2.8.5
c3d657b

What's Changed

  • Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0 by @dependabot[bot] in #8410
  • Bump org.apache.maven.plugins:maven-dependency-plugin from 3.9.0 to 3.10.0 by @dependabot[bot] in #8408
  • Bump org.junit:junit-bom from 6.0.2 to 6.0.3 by @dependabot[bot] in #8402
  • Bump org.apache.maven.plugins:maven-surefire-report-plugin from 3.5.4 to 3.5.5 by @dependabot[bot] in #8394
  • Bump byte-buddy.version from 1.18.4 to 1.18.5 by @dependabot[bot] in #8395
  • Bump org.checkerframework:checker-qual from 3.53.0 to 3.53.1 by @dependabot[bot] in #8406
  • [storm-client] Replace e.printStackTrace() with SLF4J logging in ConfigurableTopology by @Ironankit525 in #8413
  • [storm-client] Add missing logging to TridentBoltExecutor on tuple count mismatch failures by @Ironankit525 in #8414
  • Bump surefire.version from 3.5.4 to 3.5.5 by @dependabot[bot] in #8404
  • Fix silent exception swallow in LocalFsBlobStore.prepare() leaving stormClusterState null by @jnioche in #8416
  • Bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in #8417
  • Bump ruby/setup-ruby from 1.288.0 to 1.289.0 by @dependabot[bot] in #8418
  • fix(HeartbeatCache): Falsely timing out alive executors when heartbeat TIME_SECS does not advance by @DiogoP98 in #8420
  • Bump com.google.errorprone:error_prone_annotations from 2.46.0 to 2.48.0 by @dependabot[bot] in #8412
  • Bump maven-resolver.version from 1.9.25 to 1.9.27 by @dependabot[bot] in #8411
  • Bump org.jctools:jctools-core from 4.0.5 to 4.0.6 by @dependabot[bot] in #8409
  • Bump spring.version from 7.0.3 to 7.0.5 by @dependabot[bot] in #8393
  • Bump activemq.version from 6.2.0 to 6.2.1 by @dependabot[bot] in #8396
  • Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.4 to 4.0.5 by @dependabot[bot] in #8398
  • Bump hadoop.version from 3.4.2 to 3.4.3 by @dependabot[bot] in #8397
  • Bump prometheus.client.version from 1.4.3 to 1.5.0 by @dependabot[bot] in #8405
  • Bump netty-tcnative.version from 2.0.74.Final to 2.0.75.Final by @dependabot[bot] in #8399
  • Bump redis.clients:jedis from 7.2.1 to 7.3.0 by @dependabot[bot] in #8401
  • Bump com.fasterxml.jackson:jackson-bom from 2.21.0 to 2.21.1 by @dependabot[bot] in #8400
  • Bump io.netty:netty-bom from 4.2.9.Final to 4.2.10.Final by @dependabot[bot] in #8407
  • Bump com.fasterxml.jackson.core:jackson-databind from 2.20.1 to 2.21.1 by @dependabot[bot] in #8403
  • Implement size-based file rotation for FileBasedEventLogger by @Ironankit525 in #8415
  • Bump ruby/setup-ruby from 1.289.0 to 1.290.0 by @dependabot[bot] in #8421
  • Bump ruby/setup-ruby from 1.290.0 to 1.292.0 by @dependabot[bot] in #8423
  • Bump org.apache.zookeeper:zookeeper from 3.9.4 to 3.9.5 by @dependabot[bot] in #8422
  • Migrate project from commons-lang to commons-lang3 by @reiabreu in #8424
  • Bump ruby/setup-ruby from 1.292.0 to 1.293.0 by @dependabot[bot] in #8426
  • Bump ruby/setup-ruby from 1.293.0 to 1.295.0 by @dependabot[bot] in #8431
  • Use package manager for 3rd party JS in Storm-UI by @rzo1 in #8427
  • Upgrade Bootstrap to 5.3.8, add dark mode toggle by @rzo1 in #8434
  • Bump actions/cache from 5.0.3 to 5.0.4 by @dependabot[bot] in #8433
  • STORM-4079: Add SSL setup documentation by @MNkulkarni06 in #8428

New Contributors

Full Changelog: v2.8.4...v2.8.5

Contributors

jnioche, reiabreu, and 5 other contributors
Loading

Apache Storm 2.8.4

Apache Storm 2.8.4

Choose a tag to compare

View all tags
@rzo1 rzo1 released this 02 Mar 15:29
v2.8.4
004f59d

What's Changed

Read more

Contributors

dependabot and haosenwang1018
Loading

Apache Storm 2.8.3

Apache Storm 2.8.3

Choose a tag to compare

View all tags
@reiabreu reiabreu released this 02 Nov 17:42
v2.8.3
58cf046

What's Changed

  • Bump curator.version from 5.8.0 to 5.9.0 by @dependabot[bot] in #8202
  • Drop storm-sql-* modules by @rzo1 in #8174
  • Update Java dependencies to latest versions by @rzo1 in #8215
  • Bump commons-codec:commons-codec from 1.18.0 to 1.19.0 by @dependabot[bot] in #8199
  • Bump com.google.errorprone:error_prone_annotations from 2.40.0 to 2.41.0 by @dependabot[bot] in #8200
  • Bump org.apache.commons:commons-text from 1.13.1 to 1.14.0 by @dependabot[bot] in #8201
  • Bump dropwizard.version from 4.0.14 to 4.0.15 by @dependabot[bot] in #8203
  • Bump net.minidev:json-smart from 2.5.2 to 2.6.0 by @dependabot[bot] in #8207
  • Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0 by @dependabot[bot] in #8208
  • Bump commons-cli:commons-cli from 1.9.0 to 1.10.0 by @dependabot[bot] in #8209
  • Bump com.zaxxer:HikariCP from 6.3.1 to 7.0.1 by @dependabot[bot] in #8212
  • Bump org.glassfish.jersey:jersey-bom from 3.1.10 to 3.1.11 by @dependabot[bot] in #8213
  • Bump org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.14.0 by @dependabot[bot] in #8137
  • Bump ruby/setup-ruby from 1.254.0 to 1.255.0 by @dependabot[bot] in #8216
  • Bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #8217
  • Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3 by @dependabot[bot] in #8223
  • Bump byte-buddy.version from 1.17.6 to 1.17.7 by @dependabot[bot] in #8220
  • Update Jetty (11.0.26), Netty (4.2.4.Final), Spring (6.2.10) by @rzo1 in #8224
  • Bump jetty.version from 11.0.25 to 11.0.26 by @dependabot[bot] in #8219
  • Bump io.netty:netty-bom from 4.2.3.Final to 4.2.4.Final by @dependabot[bot] in #8221
  • Bump spring.version from 6.2.9 to 6.2.10 by @dependabot[bot] in #8222
  • Bump ruby/setup-ruby from 1.255.0 to 1.256.0 by @dependabot[bot] in #8226
  • Bump actions/setup-java from 4.7.1 to 5.0.0 by @dependabot[bot] in #8225
  • Bump com.zaxxer:HikariCP from 7.0.1 to 7.0.2 by @dependabot[bot] in #8230
  • Bump prometheus.client.version from 1.3.10 to 1.4.1 by @dependabot[bot] in #8229
  • Bump metrics.version from 4.2.33 to 4.2.34 by @dependabot[bot] in #8228
  • Bump ruby/setup-ruby from 1.256.0 to 1.257.0 by @dependabot[bot] in #8240
  • Bump zookeeper.version from 3.9.3 to 3.9.4 by @dependabot[bot] in #8232
  • Bump org.checkerframework:checker-qual from 3.49.5 to 3.50.0 by @dependabot[bot] in #8231
  • Bump dropwizard.version from 4.0.15 to 4.0.16 by @dependabot[bot] in #8239
  • Bump com.fasterxml.jackson:jackson-bom from 2.19.2 to 2.20.0 by @dependabot[bot] in #8233
  • Bump org.clojure:clojure from 1.12.1 to 1.12.2 by @dependabot[bot] in #8234
  • Bump metrics.version from 4.2.34 to 4.2.36 by @dependabot[bot] in #8235
  • Bump hadoop.version from 3.4.1 to 3.4.2 by @dependabot[bot] in #8236
  • Bump netty-tcnative.version from 2.0.72.Final to 2.0.73.Final by @dependabot[bot] in #8238
  • Bump actions/setup-python from 5.6.0 to 6.0.0 by @dependabot[bot] in #8242
  • Bump actions/setup-node from 4.4.0 to 5.0.0 by @dependabot[bot] in #8241
  • Bump io.netty:netty-bom from 4.2.4.Final to 4.2.5.Final by @dependabot[bot] in #8244
  • Bump storm.kafka.client.version from 3.9.0 to 4.1.0 by @dependabot[bot] in #8243
  • Bump surefire.version from 3.5.3 to 3.5.4 by @dependabot[bot] in #8245
  • Bump org.apache.maven.plugins:maven-surefire-report-plugin from 3.5.3 to 3.5.4 by @dependabot[bot] in #8251
  • Bump ruby/setup-ruby from 1.257.0 to 1.258.0 by @dependabot[bot] in #8253
  • Bump org.springframework:spring-core from 6.2.10 to 6.2.11 in /examples/storm-jms-examples by @dependabot[bot] in #8252
  • Bump spring.version from 6.2.10 to 6.2.11 by @dependabot[bot] in #8246
  • Bump org.apache.maven.plugins:maven-shade-plugin from 3.6.0 to 3.6.1 by @dependabot[bot] in #8247
  • Bump org.checkerframework:checker-qual from 3.50.0 to 3.51.0 by @dependabot[bot] in #8248
  • Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 by @dependabot[bot] in #8249
  • Bump io.netty:netty-bom from 4.2.5.Final to 4.2.6.Final by @dependabot[bot] in #8250
  • Bump ruby/setup-ruby from 1.258.0 to 1.259.0 by @dependabot[bot] in #8254
  • Update Dependencies (Jetty 12.1.1) by @rzo1 in #8264
  • Bump metrics.version from 4.2.36 to 4.2.37 by @dependabot[bot] in #8255
  • Bump bouncycastle.version from 1.81 to 1.82 by @dependabot[bot] in #8256
  • Bump dropwizard.version from 4.0.16 to 5.0.0 by @dependabot[bot] in #8257
  • Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1 by @dependabot[bot] in #8258
  • Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0 by @dependabot[bot] in #8259
  • Bump jakarta.xml.bind:jakarta.xml.bind-api from 2.3.2 to 4.0.4 by @dependabot[bot] in #8260
  • Bump com.google.errorprone:error_prone_annotations from 2.41.0 to 2.42.0 by @dependabot[bot] in #8261
  • Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre by @dependabot[bot] in #8262
  • Bump ruby/setup-ruby from 1.259.0 to 1.262.0 by @dependabot[bot] in #8263
  • Bump ruby/setup-ruby from 1.262.0 to 1.263.0 by @dependabot[bot] in #8266
  • Bump actions/cache from 4.2.4 to 4.3.0 by @dependabot[bot] in #8267
  • Bump org.codehaus.mojo:license-maven-plugin from 2.6.0 to 2.7.0 by @dependabot[bot] in #8269
  • Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 by @dependabot[bot] in #8272
  • Bump org.clojure:clojure from 1.12.2 to 1.12.3 by @dependabot[bot] in #8270
  • Bump org.apache.logging.log4j:log4j-bom from 2.25.1 to 2.25.2 by @dependabot[bot] in #8268
  • Bump org.codehaus.mojo:exec-maven-plugin from 3.5.1 to 3.6.1 by @dependabot[bot] in #8278
  • Bump org.apache.maven.plugins:maven-dependency-plugin from 3.8.1 to 3.9.0 by @dependabot[bot] in #8277
  • Bump org.junit:junit-bom from 5.13.4 to 6.0.0 by @dependabot[bot] in #8276
  • Bump org.checkerframework:checker-qual from 3.51.0 to 3.51.1 by @dependabot[bot] in #8275
  • Bump asm.version from 9.8 to 9.9 by @dependabot[bot] in #8274
  • KeyAlreadyExistsException now does not cause downloadMissingBlob to return false by @reiabreu in #8273
  • Bump ruby/setup-ruby from 1.263.0 to 1.264.0 by @dependabot[bot] in #8279
  • Bump org.apache.maven.plugins:maven-pmd-plugin from 3.27.0 to 3.28.0 by @dependabot[bot] in #8284
  • Bump ruby/setup-ruby from 1.264.0 to 1.265.0 by @dependabot[bot] in #8285
  • Bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in #8286
  • Bump byte-buddy.version from 1.17.7 to 1.17.8 by @dependabot[bot] in #8281
  • Bump org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14 by @dependabot[bot] in #8283
  • Bump org.codehaus.mojo:exec-maven-plugin from 3.6.1 to 3.6.2 by @dependabot[bot] in #8290
  • Bump redis.clients:jedis from 5.2.0 to 7.0.0 by @dependabot[bot] in #8282
  • Bump org.apache.avro:avro from 1.12.0 to 1.12.1 by @dependabot[bot] in #8288
  • Bump spring.version from 6.2.11 to 6.2.12 by @dependabot[bot] in #8287
  • Bump io.netty:netty-bom from 4.2.6.Final to 4.2.7.Final and netty-tcnative.version from 2.0.73.Final to 2.0.74.Final by @dependabot[bot] in #8289

Full Changelog: https://github.com/apache/storm/comp...

Read more

Contributors

reiabreu, rzo1, and dependabot
Loading

Apache Storm 2.8.2

Apache Storm 2.8.2

Choose a tag to compare

View all tags
@reiabreu reiabreu released this 03 Aug 20:48
v2.8.2
dda23bb

What's Changed

  • Bump org.codehaus.mojo:exec-maven-plugin from 3.5.0 to 3.5.1 by @dependabot[bot] in #8094
  • Bump testcontainers.version from 1.21.0 to 1.21.1 by @dependabot[bot] in #8093
  • Bump org.junit:junit-bom from 5.12.2 to 5.13.0 by @dependabot[bot] in #8092
  • Bump org.apache.maven.plugins:maven-clean-plugin from 3.4.1 to 3.5.0 by @dependabot[bot] in #8090
  • Bump com.fasterxml.woodstox:woodstox-core from 7.1.0 to 7.1.1 by @dependabot[bot] in #8091
  • Bump org.apache.commons:commons-exec from 1.4.0 to 1.5.0 by @dependabot[bot] in #8087
  • Bump dropwizard.version from 4.0.13 to 4.0.14 by @dependabot[bot] in #8086
  • Bump prometheus.client.version from 1.3.7 to 1.3.8 by @dependabot[bot] in #8088
  • Bump metrics.version from 4.2.30 to 4.2.32 by @dependabot[bot] in #8085
  • Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.0 to 3.6.1 by @dependabot[bot] in #8105
  • Bump org.junit:junit-bom from 5.13.0 to 5.13.1 by @dependabot[bot] in #8107
  • Bump org.checkerframework:checker-qual from 3.49.3 to 3.49.4 by @dependabot[bot] in #8113
  • Bump bouncycastle.version from 1.80 to 1.81 by @dependabot[bot] in #8111
  • Bump org.clojure:clojure from 1.12.0 to 1.12.1 by @dependabot[bot] in #8112
  • Bump org.apache.maven:maven-resolver-provider from 3.9.9 to 3.9.10 by @dependabot[bot] in #8110
  • Bump com.github.ben-manes.caffeine:caffeine from 3.2.0 to 3.2.1 by @dependabot[bot] in #8109
  • Bump commons-fileupload:commons-fileupload from 1.5 to 1.6.0 by @dependabot[bot] in #8108
  • Bump io.netty:netty-bom from 4.2.1.Final to 4.2.2.Final by @dependabot[bot] in #8106
  • [STORM-8019] Fixing kafka topic level metrics computation by @reiabreu in #8047
  • Bump spring.version from 6.2.7 to 6.2.8 by @dependabot[bot] in #8123
  • Bump com.fasterxml.jackson.core:jackson-databind from 2.19.0 to 2.19.1 by @dependabot[bot] in #8125
  • Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1 by @dependabot[bot] in #8124
  • Bump org.apache:apache from 30 to 35 by @dependabot[bot] in #8126
  • Bump testcontainers.version from 1.21.1 to 1.21.2 by @dependabot[bot] in #8134
  • Bump byte-buddy.version from 1.17.5 to 1.17.6 by @dependabot[bot] in #8136
  • Bump org.codehaus.mojo:license-maven-plugin from 2.5.0 to 2.6.0 by @dependabot[bot] in #8135
  • Bump org.apache.logging.log4j:log4j-bom from 2.24.3 to 2.25.0 by @dependabot[bot] in #8138
  • Bump activemq.version from 6.1.6 to 6.1.7 by @dependabot[bot] in #8133
  • Bump metrics.version from 4.2.32 to 4.2.33 by @dependabot[bot] in #8132
  • Bump org.junit:junit-bom from 5.13.1 to 5.13.3 by @dependabot[bot] in #8155
  • Bump testcontainers.version from 1.21.2 to 1.21.3 by @dependabot[bot] in #8149
  • Bump org.apache.maven.plugins:maven-pmd-plugin from 3.26.0 to 3.27.0 by @dependabot[bot] in #8148
  • Bump com.google.errorprone:error_prone_annotations from 2.38.0 to 2.39.0 by @dependabot[bot] in #8146
  • Bump maven-resolver.version from 1.9.23 to 1.9.24 by @dependabot[bot] in #8154
  • Bump prometheus.client.version from 1.3.8 to 1.3.9 by @dependabot[bot] in #8153
  • Bump org.checkerframework:checker-qual from 3.49.4 to 3.49.5 by @dependabot[bot] in #8152
  • Bump org.apache.thrift:libthrift from 0.19.0 to 0.22.0 by @dependabot[bot] in #8147
  • Summarized Dependency Updates (Prometheus, Lang3, Caffeine) by @rzo1 in #8169
  • Updates Dependencies (Jackson 2.19.2, Spring 6.2.9, Resolver 2.19.11, Commons IO 2.20.0, Netty 4.2.3.Final, Hbase 2.6.3, Hikari 6.3.1) by @rzo1 in #8184
  • Drop User & URL from VersionInfo by @rzo1 in #8189
  • Bump org.junit:junit-bom from 5.13.3 to 5.13.4 by @dependabot[bot] in #8186

Full Changelog: v2.8.1...v2.8.2

Contributors

reiabreu, rzo1, and dependabot
Loading

Apache Storm 2.8.1

Apache Storm 2.8.1

Choose a tag to compare

View all tags
@reiabreu reiabreu released this 03 Jun 00:05
v2.8.1
69f2415

What's Changed

New Contributors

Full Changelog: v2.8.0...v2.8.1

Contributors

reiabreu, rzo1, and 3 other contributors
Loading