Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 9, 2023

Bumps github.com/dapr/components-contrib from 1.8.0-rc.6 to 1.10.3.

Release notes

Sourced from github.com/dapr/components-contrib's releases.

v1.9.0 release

Service-Invocation: Application middleware

You can now use any middleware components when making service-to-service invocation calls. For example, for token validation in a zero-trust environment or to apply OAuth policies. Service-to-service invocation middleware components apply to all outgoing calls from Dapr sidecar to the receiving application.

Learn more about app middleware

Pub/Sub: Namespaced consumer groups

Drive infrastructure efficiency with namespaced consumer groups for pub/sub. This feature allows you to deploy Dapr applications to different namespaces who all share the same app id, and have all topic subscriptions scoped at the namespace level. This allows development teams to reuse the same pub/sub underlying infrastructure without needing to change their code based on the namespace they are running in.

Learn about namespaced consumer groups.

Changes

  • CHANGED Configuration API response now a dictionary instead of array. 1770
  • FIXED AWS SQS/SNS submit more than 20 statement in access policy 1780
  • CHANGED refactored aws sqs policy inserting 1807
  • FIXED RocketMQ fix metadata properties 1817
  • ADDED middleware: changes wasm basic to use waPC 1833
  • ADDED Support for Azure AD auth in Azure Storage queues and SignalR bindings 1842 1852
  • ADDED Kafka: SASL SCRAM SHA-256 and SHA-512 Authentication 1856
  • FIXED issue where Azure Service Bus binding would not receive messages after some time. 1865
  • FIXED SendGrid output binding content error. 1866
  • ADDED New binding: Alicloud SLS log storage 1873
  • ADDED Azure AppConfig configuration store 1874
  • ADDED pubsub.mqtt: support wildcard and shared subscriptions 1882 1901
  • ADDED Support for wildcard topics in in-memory PubSub 1966
  • ADDED Added pubsub.FeatureSubscribeWildcards capability 1887
  • CHANGED pubsub.redis: better ack for messages 1886
  • ADDED Add user agent to AWS requests 1890
  • FIXED Azure Service Bus Component: MessageID isn't guaranteed to be unique 1892 1898
  • CHANGED modify error msg for rocketmq binding 1897
  • FIXED aws sqs component can not support China region such as cn-northwest-1 1907
  • ADDED Add auto-completion flag for Zeebe 1908
  • ADDED Allow metadata to flow through Service Bus queue 1911
  • ADDED Azure App Configuration: Implemented get all keys 1920
  • ADDED [Jetstream] Allow TLS Client Authentication 1923
  • ADDED [pubsub/jetstream]: allow tls client authentication 1924
  • ADDED pubsub.snssqs: Support regions in other AWS partitions 1925
  • FIXED Ensure rethinkdb complies with state.TransactionalStore 1930
  • CHANGED binding.eventhub: use same name schema for storage leases like on pubsub.eventhub 1940
  • FIXED Handle service bus exported errors 1942
  • FIXED bindings.cron: ensure it can resume correctly after context cancellation 1943
  • FIXED Distributed Lock components' code doesn't reflect renaming on UnlockResponse.Status 1950
  • FIXED Removing the use of the ioutil package and Fix CVE-2021-42576 1954
  • CHANGED Update code to reflect renaming on UnlockResponse.Status 1958
  • FIXED Kafka: ConsumeClaim should not return err when retry recovery failed 1965 2120
  • ADDED feature(secretstore): add tencent/ssm 1973
  • FIXED Fix CosmosDB state store handling of nulls 1974
  • CHANGED Update to Go 1.19 1975

... (truncated)

Commits
  • b4cdc7a Restore Kafka CA Cert Auth without Password support, fix Jetstream pubsub iss...
  • 441ec46 Backport updated workflows into release-1.10 (#2642)
  • b1811e9 Fixed path for dubbo
  • 0aab967 Backport #2542 into release-1.10
  • ad67114 [Release 1.10] Upgrade service bus SDK to 1.2.1 (#2640)
  • 86a39f6 Upgrade service bus SDK to 1.2.1
  • 0d0b12f Addition to Hotfix 1.10.3: Add warning to Redis State Store: Do not use as Ac...
  • 6e588f1 Add warning to Redis State Store: Do not use Actor State
  • c264ba5 [release-1.10] Backport OAuth middlewares fixes into 1.10 [DO NOT SQUASH] (#2...
  • 1c48453 Pin dapr 1.10 in cert test
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/dapr/components-contrib](https://github.com/dapr/components-contrib) from 1.8.0-rc.6 to 1.10.3.
- [Release notes](https://github.com/dapr/components-contrib/releases)
- [Commits](dapr/components-contrib@v1.8.0-rc.6...v1.10.3)

---
updated-dependencies:
- dependency-name: github.com/dapr/components-contrib
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants