This release focuses primarily on security hardening, reliability improvements, bug fixes, expanded test coverage, and the refactoring of older Cluster code.
Existing Clusters can be upgraded by running octops upgrade. See the Cluster upgrade guide for instructions.
The complete changeset is available on GitHub.
Security and Reliability
- Security hardening, bug fixes, and reliability improvements across several Cluster components, particularly AuthServer and Vigil. Manythanks to izaal10 for responsibly reporting the associated findings. A coordinated public disclosure and security advisory will follow.
Improvements
- Expanded unit-test coverage across several Cluster components.
- Improvements and fixes for APIServer, AuthServer and GatewayAgen.
- Replaced the previous Redis Pub/Sub-based implementation of the RscServer watch methods with a new Redis Streams-based implementation.
- Upgraded the @octelium/apis npm package to v1.0.6.
- Upgraded Envoy to v1.39.0.