Skip to content

v8.0.2-beta

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Nov 01:31
v8.0.2-beta
23cd018
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • Certificates. Tolerate dead SSL handles on invalidate; cancel mint waits before dispose; survive ClearRoot during parallel leaf mint; invalidate SSL context cache when IntermediateCertificates changes; do not cancel SaveFakeCertificates on the idle-clear token; drop implicit root trust from mint and lite gates.
  • HTTP/2. Drain reject payloads; reject truncated PRIORITY HEADERS with FRAME_SIZE_ERROR; RST on trailer HEADERS before request headers; strip DATA padding before forwarding flag-less frames; map origin open/SETTINGS and header-list overflow failures to H1 502 on the bridge; expose H1-to-H2 body to BeforeResponse.
  • HTTP/3. Keep gateway status-retry off MITM unchanged-lite forwards; treat MatchedRoute.Retry as MITM unchanged-lite veto; detect Via loop; do not read Body when BodyAvailable is false for 204/304/HEAD.
  • HTTP/1 and bodies. Return 431 for MaxHeaderLineBytes breaches; treat null Body as empty in BodyString.
  • Gateway / Manager / CLI. Emit TLS terminate serving certificates into data-plane config; ignore ObjectDisposedException on ProcessExit stop; HEAD without response body; malformed token hashes as mismatches; do not keep staged previous config for unknown agent nodes; bound apt-get for http3-deps; keep Prometheus result labels when aggregating.
  • Plus / satellites. Pace ADS reconnects after a clean stream close; never unmap MMDB under a lookup; back off ManagerAgent polls after unauthorized; treat illegal base64url JWT segments as decode misses.
  • Packaging. Helm chart 1.0.2, appVersion 8.0.2. Plus ABI floor stays 8.0.0.

Full Changelog: v8.0.1-beta...v8.0.2-beta

Assets 40
Loading