3.1.0.0
Version 3.1.0 Release Notes
Compatible with OpenSearch and OpenSearch Dashboards version 3.1.0
Features
- [Resource Permissions] Introduces Centralized Resource Access Control Framework (#5281)
Enhancements
- Github workflow for changelog verification (#5318)
- Add flush cache endpoint for individual user (#5337)
- Handle roles in nested claim for JWT auth backends (#5355)
- Register cluster settings listener for
plugins.security.cache.ttl_minutes(#5324 - Integrate search-relevance functionalities with security plugin (#5376)
- Use extendedPlugins in integrationTest framework for sample resource plugin testing (#5322)
- Introduced new, performance-optimized implementation for tenant privileges (#5339)
- Performance improvements: Immutable user object (#5212)
- Include mapped roles when setting userInfo in ThreadContext (#5369)
- Adds details for debugging Security not initialized error(#5370)
- [Resource Sharing] Store resource sharing info in indices that map 1-to-1 with resource index (#5358)
Bug Fixes
- Corrections in DlsFlsFilterLeafReader regarding PointVales and object valued attributes (#5303)
- Fixes issue computing diffs in compliance audit log when writing to security index (#5279)
- Fixes dependabot broken pull_request workflow for changelog update (#5331)
- Fixes assemble workflow failure during Jenkins build (#5334)
- Fixes security index stale cache issue post snapshot restore (#5307)
- Only log Invalid Authentication header when HTTP Basic auth challenge is called (#5377)
Maintenance
- Add forecast roles and permissions (#5386)
- Add missing cluster:monitor permission (#5405)
- Add missing mapping get permission (#5412)
- Bump
guava_versionfrom 33.4.6-jre to 33.4.8-jre (#5284) - Bump
spring_versionfrom 6.2.5 to 6.2.7 (#5283, #5345) - Bump
com.google.errorprone:error_prone_annotationsfrom 2.37.0 to 2.38.0 (#5285) - Bump
org.mockito:mockito-corefrom 5.15.2 to 5.18.0 (#5296, #5362) - Bump
com.carrotsearch.randomizedtesting:randomizedtesting-runnerfrom 2.8.2 to 2.8.3 (#5294) - Bump
org.ow2.asm:asmfrom 9.7.1 to 9.8 (#5293) - Bump
commons-codec:commons-codecfrom 1.16.1 to 1.18.0 (#5295) - Bump
net.bytebuddy:byte-buddyfrom 1.15.11 to 1.17.5 (#5313) - Bump
org.awaitility:awaitilityfrom 4.2.2 to 4.3.0 (#5314) - Bump
org.springframework.kafka:spring-kafka-testfrom 3.3.4 to 3.3.5 (#5315) - Bump
com.fasterxml.jackson.core:jackson-databindfrom 2.18.2 to 2.19.0 (#5292) - Bump
org.apache.commons:commons-collections4from 4.4 to 4.5.0 (#5316) - Bump
com.google.googlejavaformat:google-java-formatfrom 1.26.0 to 1.27.0 (#5330) - Bump
io.github.goooler.shadowfrom 8.1.7 to 8.1.8 (#5329) - Bump
commons-io:commons-iofrom 2.18.0 to 2.19.0 (#5328) - Upgrade kafka_version from 3.7.1 to 4.0.0 (#5131)
- Bump
io.dropwizard.metrics:metrics-corefrom 4.2.30 to 4.2.32 (#5361) - Bump
org.junit.jupiter:junit-jupiterfrom 5.12.2 to 5.13.1 (#5371, #5382) - Bump
bouncycastle_versionfrom 1.80 to 1.81 (#5380) - Bump
org.junit.jupiter:junit-jupiter-apifrom 5.13.0 to 5.13.1 (#5383) - Bump
org.checkerframework:checker-qualfrom 3.49.3 to 3.49.4 (#5381)