Tags: ogulcanaydogan/dapr
Tags
[1.17] Sentry: infer X.509 signature algorithm (dapr#9662) * [1.17] Sentry: infer X.509 signature algorithm Remove hardcoded `ECDSAWithSHA256` SignatureAlgorithm from certificate templates and the SignRequest struct. Instead, let Go's x509.CreateCertificate infer the correct algorithm from the issuer's signing key. This ensures Sentry can sign workload certificates regardless of whether the issuer key is `ECDSA` or `Ed25519`, fixing version skew failures when sidecars send CSRs with a different key type than the issuer. Signed-off-by: joshvanl <me@joshvanl.dev> * Lint Signed-off-by: joshvanl <me@joshvanl.dev> * lint Signed-off-by: joshvanl <me@joshvanl.dev> --------- Signed-off-by: joshvanl <me@joshvanl.dev>
[Backport release-1.17] Fix actor placement version check (dapr#9645) * Fix actor placement version check (dapr#9639) * Fix actor placement version check The sidecar disseminator's `UNLOCK` handler set `currentVersion` before comparing it, making the stale-version guard a no-op. Move the assignment after the check so stale UNLOCKs are correctly ignored. Batch waiting connections on the server side into a single dissemination round instead of processing them one at a time, avoiding O(n) sequential rounds when many replicas connect at once. Signed-off-by: joshvanl <me@joshvanl.dev> * Only send one-shot updates to new streams Signed-off-by: joshvanl <me@joshvanl.dev> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Signed-off-by: Josh van Leeuwen <me@joshvanl.dev> * lint Signed-off-by: joshvanl <me@joshvanl.dev> * Review comments Signed-off-by: joshvanl <me@joshvanl.dev> * Fix integration test now dissemination can be batched Signed-off-by: joshvanl <me@joshvanl.dev> --------- Signed-off-by: joshvanl <me@joshvanl.dev> Signed-off-by: Josh van Leeuwen <me@joshvanl.dev> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: Dapr Bot <56698301+dapr-bot@users.noreply.github.com> (cherry picked from commit b4a8b94) * Fix unit test Signed-off-by: joshvanl <me@joshvanl.dev> * Fix unit test type Signed-off-by: joshvanl <me@joshvanl.dev> --------- Signed-off-by: joshvanl <me@joshvanl.dev> Signed-off-by: Josh van Leeuwen <me@joshvanl.dev> Co-authored-by: Josh van Leeuwen <me@joshvanl.dev> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
release notes added (dapr#9602) Signed-off-by: Cassandra Coyle <cassie@diagrid.io>
fix: rename wasm component files to avoid implicit GOARCH=wasm build … ( dapr#9581) (dapr#9586) * fix: rename wasm component files to avoid implicit GOARCH=wasm build constraint Go applies an implicit build constraint when a filename matches *_GOARCH.go. Since wasm is a valid GOARCH, files named _wasm.go are only compiled when GOARCH=wasm, making WASM binding and middleware unavailable on all production architectures. This regression was introduced in dapr#9009 (v1.16.0) which inadvertently reverted fixes from dapr#5486 and dapr#6439 which specifically addressed this exact GOARCH filename clash. Rename the files back to use the _webassembly suffix to restore WASM component registration on all platforms. Made-with: Cursor * docs: add release notes for v1.16.10 and v1.17.1 Made-with: Cursor --------- (cherry picked from commit 0c15e9e) Signed-off-by: aGentleKnife <1793575354@qq.com> Co-authored-by: aGentleKnife <1793575354@qq.com>
Update dapr for 1.17 1.17 (dapr#9569) * Update kit & contrib v17 Signed-off-by: joshvanl <me@joshvanl.dev> * Adds v1.17.0.md release notes Signed-off-by: joshvanl <me@joshvanl.dev> * Remove author comments from release notes Signed-off-by: joshvanl <me@joshvanl.dev> --------- Signed-off-by: joshvanl <me@joshvanl.dev>
Actors: Honor DrainOngoingCallTimeout during actor dissemination (dap… …r#9556) (dapr#9559) * Actors: Honor DrainOngoingCallTimeout during actor dissemination During placement table dissemination, in-flight actor calls are now given the configured DrainOngoingCallTimeout to complete before being forcefully cancelled. Previously this was hardcoded to 2 seconds. Changes: - Pass DrainOngoingCallTimeout through placement loop chain to the lock - Use pointer types for nil-check presence detection - Default to 2 seconds when not configured - Respect DrainRebalancedActors setting (when false, skip waiting) - Use DrainRebalancedActors from hostconfig instead of hardcoding true Also adds integration tests for: - Default 2 second timeout behavior - Custom timeout being respected - Timeout expiration forcing cancellation - DrainRebalancedActors=false immediate cancellation * Increase timeout for slow test * Move drain outside of app target, since now handled outside * Use atomic sets for drain timeout * Fix fake placement * Revert default placement dissemination timeout to 8s * Revert to 8s for placement charts --------- (cherry picked from commit 168cd90) Signed-off-by: joshvanl <me@joshvanl.dev> Co-authored-by: Josh van Leeuwen <me@joshvanl.dev>
Fixes workflows getting in an invalid state (dapr#9537) (dapr#9546) * Fixes workflows getting in an invalid state * Added test for idempotent children creation * Apply suggestions from code review * Fix imports --------- (cherry picked from commit 025719d) Signed-off-by: Albert Callarisa <albert@diagrid.io> Signed-off-by: Albert Callarisa <albert@acroca.com> Co-authored-by: Albert Callarisa <albert@diagrid.io> Co-authored-by: Dapr Bot <56698301+dapr-bot@users.noreply.github.com> Co-authored-by: Josh van Leeuwen <me@joshvanl.dev>
PreviousNext