github alibaba/nacos 3.2.2
3.2.2 (May 29th, 2026)

11 hours ago

Nacos 3.2.2 is mainly a bugfix and experience-improvement release for the 3.2 series.

This release focuses on:

  • Console experience improvements for Config, Naming, MCP, Skill, AI resources, and namespace workflows.
  • Stability and compatibility fixes across Config, Naming, plugins, startup scripts, and AI resource handling.
  • AI Registry import, discovery, publishing, subscription, and security improvements.

For AI Registry and Console users, this release adds or improves:

  • Importing AI resources from operator-configured external registries.
  • Skill well-known discovery, Skill subscription, and latest protocol adapter support.
  • Config diff confirmation, Prompt Markdown download, and Skill upload lifecycle improvements.

It also fixes bugs across Config, Naming, Console, MCP, Skill, plugins, and client-side watch handling.


Detailed changes in this release:

Feature

[#14695] Support label-based matching for Config gray rules.
[#14848] Add Prompt version download as Markdown.
[#14907] Support specifying a target version when uploading Skills.
[#14985] Add persistent instance deregistration support in Console v3.
[#15022] Support optional Skill auto-publish after review.
[#15031] Extend nacos.functionMode with microservice and ai modes.
[#15142] Support drag-and-drop ZIP upload and batch Skill upload.
[#15183] Support importing AI resources from operator-configured external registries, including MCP resources, Skill well-known resources, importer APIs, SPI models, built-in presets, and source-based import UI.
[#15234] Support commit messages when uploading AI skills.
[#15247] Support the latest Skill well-known protocol in the registry adapter.
[#15263] Add Skill subscription support and refactor AgentSpec subscription to HTTP polling with 304 handling.

Enhancement/Refactor

[#14833][#15221] Route AI resource version trace logging through trace events and the default plugin.
[#14911] Split LDAP authentication into an optional plugin and package the LDAP plugin JAR.
[#14983] Enforce non-frontmatter Markdown body content during Skill validation.
[#15059] Add the reviewed version status after pipeline approval for Skill versions.
[#15066] Harden AgentSpec ZIP parsing with Zip Slip, Zip Bomb, and entry-count defenses.
[#15138] Add Config publish diff confirmation in the new Console.
[#15145] Restrict forcePublish to valid Skill states and add pipeline stale flags for re-edit.
[#15164] Make Skill ZIP entry and size limits configurable.
[#15165] Parallelize AgentSpec storage writes to align with Skill behavior.
[#15258] Enable reviewed status by default for the AI publish pipeline.

BugFix

[#11122] Accept healthCheckEnabled as a Naming switch-entry alias.
[#14774] Shade Caffeine into the OIDC plugin JAR to avoid NoClassDefFoundError.
[#14882] Fix Console theme color loss by adding RGB fallbacks.
[#14952] Fix the incorrect MCP protocol value when the restToMcp switch is off.
[#14992] Add v3 Naming APIs to DistroFilter to fix client API instance registration and deregistration in clusters.
[#14997] Preserve SKILL.md indentation and validate Skill versions during upload and download.
[#15000] Add the missing group_id LIKE placeholder in BaseConfigInfoMapper.
[#15004] Replace deprecated AccessControlException usage with SecurityException.
[#15037] Fix access denied errors on Console history detail, rollback, and compare pages.
[#15067] Fix the missing write lock in MemoryMcpCacheIndex#removeIndex.
[#15073] Preserve multi-byte UTF-8 characters across DiskUtils chunk boundaries.
[#15136] Fix the password modification dialog display.
[#15141] Fix namespace description editing when namespaceId is missing.
[#15150] Prevent PostgreSQL tenant nulls from causing config sync row explosions.
[#15152] Fix Config page display mismatches after namespace switching.
[#15160] Fix ConfigChangeAspect misclassifying Console config changes as RPC when srcType is missing.
[#15162] Default unlisted AI resources to base64 to avoid UTF-8 corruption.
[#15167] Fix Console controller mapping with request context paths.
[#15171] Re-exec startup scripts under bash when invoked through sh.
[#15192] Reject submit requests for non-draft AI resource versions to protect formal version status.
[#15201] Fix Skill description inconsistencies between list and detail after uploading a new version.
[#15207] Fix MCP Console editor regressions for object-type tool input fields.
[#15228] Guard fuzzy-watch futures against lost and spurious wakeups.
[#15240] Fix Skill install card overflow with long Skill names in Console next.
[#15252] Preserve namespace context on Console AI resource pages.

Dependencies

[#15039] Upgrade the PostgreSQL JDBC driver from 42.7.2 to 42.7.11.
[#15060] Upgrade Micrometer to 1.15.10 to fix the Prometheus endpoint.
[#15087] Upgrade vulnerable dependencies reported for the Nacos server image and enable default AI importers.
[#15148] Add a console-ui-next npm min-release-age policy for supply-chain security.


Java Version Requirements

Module Java Required
Nacos-Server / Nacos-Console Java 17
Nacos-Client Java 8
Nacos-Maintainer-Client Java 8

New Contributors

Full Changelog: 3.2.1...3.2.2

Don't miss a new nacos release

NewReleases is sending notifications on new releases.