Changes by Version

Release Notes.

9.0.0

Upgrade log4j2 to 2.17.1 for CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 and CVE-2021-44832. This CVE only effects on JDK if JNDI is opened in default. Notice, using JVM option -Dlog4j2.formatMsgNoLookups=true or setting the LOG4J_FORMAT_MSG_NO_LOOKUPS=”true” environment variable also avoids CVEs.
Upgrade maven-wrapper to 3.1.0, maven to 3.8.4 for performance improvements and ARM more native support.
Exclude unnecessary libs when building under JDK 9+.

Fix potential NPE in OAL string match and a bug when right-hand-side variable includes double quotes.
Bump up Armeria version to fix CVE.
Polish ETCD cluster config environment variables.
Add the analysis of metrics in Satellite MetricsService.
Fix Can't split endpoint id into 2 parts bug for endpoint ID. In the TCP in service mesh observability, endpoint name doesn't exist in TCP traffic.
Upgrade H2 version to 2.0.206 to fix CVE-2021-23463 and GHSA-h376-j262-vhq6.
Extend column name override mechanism working for ValueColumnMetadata.
Introduce new concept Layer and removed NodeType. More details refer to v9-version-upgrade.
Fix query sort metrics failure in H2 Storage.
Bump up grpc to 1.43.2 and protobuf to 3.19.2 to fix CVE-2021-22569.
Add source layer and dest layer to relation.
Follow protocol grammar fix GCPhrase -> GCPhase.
Set layer to mesh relation.
Add FAAS to SpanLayer.
Adjust e2e case for V9 core.
Support ZGC GC time and count metric collecting.
Sync proto buffers files from upstream Envoy (Related to https://github.com/envoyproxy/envoy/pull/18955).
Bump up GraphQL related dependencies to latest versions.
Add normal to V9 service meta query.
Support scope=ALL catalog for metrics.

All issues and pull requests are here

Find change logs of all versions here.