Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 26, 2024

Bumps github.com/nats-io/nats-server/v2 from 2.10.20 to 2.10.21.

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.10.21

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

  • 1.22.7

Dependencies

  • golang.org/x/crypto v0.27.0 (#5869)
  • golang.org/x/sys v0.25.0 (#5869)

Added

Config

  • New TLS min_version option for configuring the minimum supported TLS version (#5904)

Improved

JetStream

  • Global JetStream API queue hard limit for protecting the system (#5900, #5923)
  • Orphaned ephemeral consumer clean-up is now logged at debug level only (#5917)

Monitoring

  • statsz messages are now sent every 10 seconds instead of every 30 seconds (#5925)
  • Include JetStream pending API request count in statsz messages and jsz responses for monitoring (#5923, #5926)

Fixed

JetStream

  • Fix an issue comparing the stream configuration with the updated stream assignment on stream create (#5854)
  • Improvements to recovering from old or corrupted index.db (#5893, #5901, #5907)
  • Ensure that consumer replicas and placement are adjusted properly when scaling down a replicated stream (#5927)
  • Fix a panic that could occur when trying to shut down while the JetStream meta group was in the process of being set up (#5934)

Monitoring

  • Always update account issuer in accountsz (#5886)

OCSP

  • Fix peer validation on the HTTPS monitoring port when OCSP is enabled (#5906)

Config

  • Support multiple trusted operators using a config file (#5896)

Complete Changes

nats-io/nats-server@v2.10.20...v2.10.21

Release v2.10.21-RC.4

... (truncated)

Commits
  • d3a8868 Release v2.10.21
  • cbbef5a Reuse pre-existing sys account reference
  • 5792b08 Bump to 2.10.21-RC.4
  • b39694d Cherry-picks for 2.10.21-RC.4 (#5928)
  • 098b4f8 When scaling down a stream make sure replica count is correct if adjusted and...
  • 8c0b9b5 Ensure pending sent correctly in regular statsz messages
  • 6fb4277 Publish STATSZ messages every 10 seconds rather than 30
  • 58fba00 Add pending to jsz response and statsz (#5923)
  • bac6cc2 Bump to 2.10.21-RC.3
  • 1e29e3a Cherry-picks for 2.10.21-RC.3 (#5921)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team as a code owner September 26, 2024 19:30
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 26, 2024
@flemzord
Copy link
Member

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/nats-io/nats-server/v2-2.10.21 branch from 6d18f11 to edc12e2 Compare October 14, 2024 14:28
Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approve dependencies bump PR

@flemzord flemzord added this pull request to the merge queue Oct 15, 2024
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Oct 15, 2024
@flemzord
Copy link
Member

@dependabot rebase

Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.10.20 to 2.10.21.
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/.goreleaser.yml)
- [Commits](nats-io/nats-server@v2.10.20...v2.10.21)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/nats-io/nats-server/v2-2.10.21 branch from edc12e2 to 92d4ec5 Compare October 15, 2024 07:24
@flemzord flemzord enabled auto-merge October 15, 2024 07:24
Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approve dependencies bump PR

@flemzord flemzord added this pull request to the merge queue Oct 15, 2024
Merged via the queue into main with commit 645615f Oct 15, 2024
5 checks passed
@flemzord flemzord deleted the dependabot/go_modules/github.com/nats-io/nats-server/v2-2.10.21 branch October 15, 2024 07:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant