centraldogma-0.64.0

New features

• You can now use Central Dogma as a control plane for xDS service discovery. #904
• You can now update the Central Dogma cluster status with UpdateServerStatusCommand . #899
• You can now execute ForcePushCommand to forcibly push commits in the read-only mode. #899

Improvements

• Administrators can now access the internal dogma project through both REST API and the web UI. #907

Bug fixes

• XSS attacks through SAML RelayState are not possible now. (CVE-2024-1143)
• The project creator is now correctly retrieved based on the information stored in the metadata.json file. #909
• You no longer see 503 Service Unavailable errors with RequestTimeoutException when an access token is being removed. #797 #812
• The server now correctly converts JSON requests even if jackson-module-scale exists in the classpath. #910
• Error messages resulting from Zookeeper replication failures now include reply logs to facilitate the identification of the underlying causes. #900

Dependencies

• Armeria 1.26.4 -> 1.27.0
• Bouncy Castle 1.76 -> 1.77
• Curator 5.5.0 -> 5.6.0
• futures-completable 0.3.5 -> 0.3.6
• Guava 32.1.3 -> 33.0.0
• Jackson 2.15.3 -> 2.16.1
• Javassist 3.29.2 -> 3.30.2
• JGit 5.13.2 -> 5.13.3, 6.7.0 -> 6.8.0
• JUnit 5.10.0 -> 5.10.1
• Logback 1.2.12 -> 1.2.13
• Micrometer 1.11.5 -> 1.12.2
• Mina SSHD 2.11.0 -> 2.12.0
• Snappy 1.1.10.1 -> 1.1.10.4
• Spring Boot 2.7.16 -> 2.7.18, 3.1.4 -> 3.2.2
• Zookeeper 3.7.1 -> 3.7.2