Skip to content

Rebase 5.0 v3.7.0#14

Open
JSampsonIV wants to merge 1950 commits into
mainfrom
rebase-5.0-v3.7.0
Open

Rebase 5.0 v3.7.0#14
JSampsonIV wants to merge 1950 commits into
mainfrom
rebase-5.0-v3.7.0

Conversation

@JSampsonIV

Copy link
Copy Markdown
Owner

Jefftree and others added 30 commits July 17, 2026 15:39
Signed-off-by: Jefftree <jeffrey.ying86@live.com>
Signed-off-by: Sharath P J <pjsharath28@gmail.com>
Bumps [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) from 1.1.0 to 1.1.1.
- [Commits](FiloSottile/edwards25519@v1.1.0...v1.1.1)

Signed-off-by: Ivan Valdes <ivan@vald.es>

---
updated-dependencies:
- dependency-name: filippo.io/edwards25519
  dependency-version: 1.1.1
  dependency-type: indirect
...

Reference: etcd-io#21332

Signed-off-by: Ivan Valdes <ivan@vald.es>
Vulnerability #1: GO-2026-4962
    Excessive memory allocation when decoding malicious SFNT in
    golang.org/x/image
  More info: https://pkg.go.dev/vuln/GO-2026-4962
  Module: golang.org/x/image
    Found in: golang.org/x/image@v0.38.0
    Fixed in: golang.org/x/image@v0.39.0
    Example traces found:
      #1: pkg/chart/heatmaps.go:232:10: chart.plotComparisonHeatMapGrid calls plot.Legend.Draw, which eventually calls sfnt.Font.GlyphAdvance
      #2: pkg/chart/heatmaps.go:232:10: chart.plotComparisonHeatMapGrid calls plot.Legend.Draw, which eventually calls sfnt.Font.GlyphIndex
      #3: pkg/chart/heatmaps.go:232:10: chart.plotComparisonHeatMapGrid calls plot.Legend.Draw, which eventually calls sfnt.Font.Kern
      #4: pkg/chart/heatmaps.go:232:10: chart.plotComparisonHeatMapGrid calls plot.Legend.Draw, which eventually calls sfnt.Font.LoadGlyph
      #5: pkg/chart/heatmaps.go:31:2: chart.init calls draw.init, which eventually calls sfnt.Parse

Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
Bump golang.org/x/image to v0.39.0 to resolve GO-2026-4962
Signed-off-by: Jefftree <jeffrey.ying86@live.com>
txn: fix range benchmark to enable WithTotalCount
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
Cleanup the unused function `AssertNoV2StoreContent`
Signed-off-by: Jefftree <jeffrey.ying86@live.com>
…0260413

[2026-04-06] Manual Dependency Bump
This is the latest version provided by otel. Bumping makes no
difference to etcd but will allow downstreams such as Kubernetes to
clean up their own dependencies.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
Signed-off-by: shenmu.wy <shenmu.wy@antfin.com>
Cleanup the deprecated V2DeprecationEnum options
grpcproxy: return io.EOF at end of server-streaming RPCs
…ields

The etcd command-line flags accept human-readable duration strings (e.g.
"10m") via flag.DurationVar. However, when the same fields are read from
a JSON or YAML configuration file they are unmarshalled as time.Duration
(int64), which only accepts integer values in nanoseconds. Setting such
a field to a string like "1m" in a config file produces an unmarshalling
error.

Document this limitation in two places where it applies to every
time.Duration configuration option:

  * usageline's --config-file section: note that duration fields in the
    config file must be integer nanoseconds, not human-readable strings
  * embed.Config struct doc comment: same note for SDK users reading
    the godoc, with a link to the upstream Go stdlib limitation
    (golang/go#10275).

Fixes etcd-io#20342

Signed-off-by: Ali <alliasgher123@gmail.com>
…r is down

Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
RangeStream is a server-streaming counterpart to Range. The server
splits the result into a sequence of RangeStreamResponse chunks, each
wrapping a RangeResponse, so a client can proto.Merge them together
and end up with what a single Range call would have returned.

Signed-off-by: Jefftree <jeffrey.ying86@live.com>
Signed-off-by: Chun-Hung Tseng <henrytseng@google.com>
Fix the issue that cannot add a new member when one member is down, even if quorum is still satisfied
Wire up the RangeStream handler end to end: the v3rpc layer streams
chunks out, the txn range path honors the pinned revision and
CountOnly semantics, and retry, mock, and the grpcproxy adapter learn
about the new method so clients and proxies route it correctly.
Integration tests cover the chunking behavior and header handling.

Signed-off-by: Jefftree <jeffrey.ying86@live.com>
…dcoded_bug

robustness: fix accidental hard coded value in getRequest()
Signed-off-by: Jefftree <jeffrey.ying86@live.com>
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
ahrtr and others added 30 commits July 17, 2026 15:39
…sonly

Add support for limit and withTotalCount to FastKeysOnly Range
…nearization

Signed-off-by: Chun-Hung Tseng <henrytseng@google.com>
Signed-off-by: Marek Siarkowicz <siarkowicz@google.com>
…dule-function

Update release to use workspace functions
Signed-off-by: Nont <9658731+nwnt@users.noreply.github.com>
…visualize_if_any_failure

robutsness: don't visualize history if there is any failure during linearization
Refactor to make mvcc treeIndex.Revisions consistent with Range
Signed-off-by: AR21SM <mahajanashishar21sm@gmail.com>
Signed-off-by: Ivan Valdes <iv@a.ki>
Signed-off-by: AR21SM <mahajanashishar21sm@gmail.com>
Signed-off-by: Sahil Patel <smppatel999@gmail.com>
…lease-3.7

[release-3.7] Bump golang.org/x/crypto to v0.52.0
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
…th-3.7

[release-3.7] server/auth: accept bearer-prefixed auth tokens
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
[release-3.7] Make the etcd client creation non-blocking
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
…ry-pick-21943-to-release-3.7

[release-3.7] Update the comment of DialTimeout to reflect the real usage
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
[release-3.7] Bump bbolt to v1.5.0 and raft to v3.7.0
Signed-off-by: Ivan Valdes <ivan@vald.es>
[release-3.7] Reject the client request if the client certificate has been revoked
Signed-off-by: Ivan Valdes <ivan@vald.es>
…o-0.55.0

[release-3.7] dependency: bump golang.org/x/net from 0.54.0 to 0.55.0
Signed-off-by: Ivan Valdes <iv@a.ki>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.