Release v2.4.1 · lf-edge/ekuiper

A patch release on the 2.4 branch. No breaking changes. Recommended as a drop-in upgrade from v2.4.0.

Full Changelog: v2.4.0...v2.4.1

Validate rule ID at the DeleteRule boundary to block path traversal via YAML import by @ngjaying in #4088
Reject unsafe dynamic field names in SQL by @ngjaying in #4080
Harden SSRF dial check: fail closed on unparsable hosts, handle IPv6 zones correctly, centralize internal-IP check by @ngjaying in #4104
Fix swallowed certificate decryption error caused by checking the wrong variable by @ngjaying in #4091
Remove sample secrets by @ngjaying in #4086

REST sink: separate OAuth-only vs. row-template headers; fix dropped auth on first request and concurrent token-refresh race by @ngjaying in #4094
Sink: support batchSize with dataTemplate (fix unknown data type: RawTuple) with correct per-format framing by @ngjaying in #4093
Rule: prevent concurrent double start by @ngjaying in #4076
Rule: fix createRule callback data race by @ngjaying in #4069
Topo: clear stale project caches by @ngjaying in #4074
Planner: validate memory stream slice by @ngjaying in #4084
Planner: fix state-window WHERE pushdown dropping state-transition rows; fix sink planning edge case by @ngjaying in #4104
SQLgen: fix ORDER BY index columns by @ngjaying in #4081
Conf: fix log formatter data race by @ngjaying in #4072
Protobuf: resolve absolute schema paths by @ngjaying in #4070
Neuron: stop receive loop on closed socket by @ngjaying in #4066
KV: prepare keyed state statement once by @Dream95 in #4058
SQL: quote table name in initPreparedStmt by @piepor in #4054

Bump google.golang.org/grpc 1.80.0 -> 1.82.1 in #4087, golang.org/x/crypto in #4059, golang.org/x/net in #4057, opencontainers/runc in #4056

Navigation Menu