1.10.8 Patch Release Checklist

[JoshVanL]

• Dapr maintainer(s) communicate out the discovery of issues that require a patch release and the reason why to the Discord Maintainers and Release channels. Patch releases are made for one of categories below:
  • Security vulnerability
  • Regression that does not have a work around:
    • [release-1.10] Component Name Valdiation #6501
    • [release-1.10] Fix panic in service invocation when connection fails #6492
    • Daprd router normalize only seperator - release-1.10 #6431
    • State stores: conformace test to check special characters are not mangled components-contrib#2910
    • Error when storing actors reminders on MongoDB. error in updating document: an inserted document is too large #6497 (comment)
      • [release-1.10] cherry pick of MongoDB Actor Reminder fix #6529
    • [1.10] Fix bulk subscribe response #6513
    • [release-1.10] Fixed goroutine leak in reminders and timers (#6523) #6554
    • Svc invocation broken on a subset of OpenShift/K8s in v1.11/v1.10 #6543
      • [release-1.10] Add OwnerReference RBAC permissions #6545
    • [Release 1.10] Pin new contrib (v1.10.9) #6561
  • Broken mainline scenario that has a missing test case:
• Create v1.10.8-rc.1 Tag
• Performance tests passing:
• End to End tests passing on Linux and Windows:
• New test case written to catch future occurrences
• Notify users to try RC1
• Update the longhaul tests to use 1.10.8-rc.21
• Write release notes :
• Review release notes [@dapr/maintainers-dapr ]
• Create v1.10.8 Tag [@dapr/maintainers-dapr ]
• Backport fixes into master branch [@dapr/maintainers-dapr ]
• Update the documentation: Latest version & versions in supported releases
• Push new tag in installer-bundle repo.
• Announce the hotfix release on Discord Announcements channel

[ItalyPaleAle]

As discussed this morning, dapr/components-contrib#2910 is not going to be included as a hotfix for 1.10 nor 1.11. When we have a backwards-compatible fix, we'll include it in the next major release.

[berndverst]

Please also include the fix for dapr/components-contrib#2901

Fixed and included here: #6561

Updated the checklist above.

I am happy to update the release notes once we have them or for someone to include the details here.

It's pretty simple:
The Azure Service Bus Queues component did not URL encode custom properties (application properties) which resulted in failures delivering the pubsub event via HTTP to the user app. This is because attributes are sent as metadata headers and therefore must be URL encoded. The fix was to urlencode the custom attributes.

[JoshVanL]

Release: https://github.com/dapr/dapr/releases/tag/v1.10.8

[JoshVanL]

Done.