v3.10.0

Summary

This release introduces enhancements, such as generic contracts and functions, as well as various improvements, including the addition of error codes. It also includes several bug fixes. For detailed changes, see the following.

Enhancements

• Added generic contracts and functions.

Improvements

• Added error codes for error messages.
• Enabled implicit pre-read in mutable databases.
• Improved ScalarDB exception handling in function execution.
• Upgraded the ScalarDB version to 3.14.0.
• Made executeContract with nonce deprecated.

Bug fixes

• Disabled SNI host check in the Prometheus exporter.
• Fixed a bug when handling PKCS#8-formatted private keys.
• Fixed unexpected validation execution.
• Fixed a bug with non-nonce transaction IDs.
• Fixed a bug where a transaction with the JDBC transaction manager incorrectly overwrites an asset.
• Fixed a bug that makes the Ledger service unable to execute contracts on DynamoDB.
• Added validation that disables the group commit feature in ScalarDB from being used.
• Fixed to run with Cosmos DB.
• Fixed the following vulnerabilities.
  • CVE-2023-1428
  • CVE-2023-32731
  • CVE-2023-45283
  • CVE-2023-45288
  • CVE-2024-24790
  • CVE-2024-34156

v3.9.4

Summary

This release includes the following bug fixes.

Bug fixes

• Fixed several vulnerabilities.
  • CVE-2023-1428
  • CVE-2023-22102
  • CVE-2023-32731
  • CVE-2024-34156

v3.8.4

Summary

This release includes the following bug fixes.

Bug fixes

• Fixed the following vulnerabilities.
  • CVE-2023-1428
  • CVE-2023-5072
  • CVE-2023-22102
  • CVE-2023-32731
  • CVE-2024-34156

v3.9.3

Summary

This release includes the following bug fixes.

Bug fixes

• Fixed a bug that prevented ScalarDL from running on Cosmos DB.

v3.8.3

Summary

This release includes the following bug fixes.

Bug fixes

• Fixed a bug that prevented ScalarDL from running on Cosmos DB.

v3.9.2

Summary

This release includes several bug fixes and vulnerability fixes.

Bug fixes

• Fixed a bug when handling PKCS#8 format private key.
• Fixed a comment for HMAC settings.
• Fixed sources and Javadoc for artifacts.
• Fixed CVE-2024-24790, CVE-2023-45283, and CVE-2023-45288.
• Fixed an issue that does not run integration tests with JUnit5.
• Fixed e2e tests to run correctly.
• Fixed unexpected validation execution.
• Fixed a bug with non-nonce transaction ID.
• Fixed a bug where a transaction with the JDBC transaction manager wrongly overwrites an asset.
• Fixed a bug that makes the Ledger service unable to execute contracts on DynamoDB.

v3.8.2

Summary

This release includes several bug fixes and vulnerability fixes.

Bug fixes

• Fixed a bug when handling PKCS#8 format private key.
• Fixed a comment for HMAC settings.
• Fixed sources and Javadoc for artifacts.
• Fixed CVE-2024-24790, CVE-2023-45283, and CVE-2023-45288.
• Fixed an issue that does not run integration tests with JUnit5.
• Fixed e2e tests to run correctly.
• Fixed unexpected validation execution.
• Fixed a bug with non-nonce transaction ID.
• Fixed a bug where a transaction with the JDBC transaction manager wrongly overwrites an asset.
• Fixed a bug that makes the Ledger service unable to execute contracts on DynamoDB.

v3.9.1

Summary

This release is for the following bug fix.

Bug fixes

• Fixed SNI host check in Prometheus exporter with TLS.

v3.8.1

Bug fixes

• Fixed dimension names for AWS meters.
• Fixed registry name of AWS Marketplace.
• Fixed to avoid outputting credential information as a log.
• Fixed to use getTargetHost() to properly get LEDGER_HOST.
• Fixed busybox version in Dockerfile.
• Fixed a bug to use the intermediary mode.
• Fixed the bound argument of FunctionalInterface for gRPC stub method in ThrowableConsumer and ThrowableFunction.
• Fixed AuthenticationMethod to accept "digital-signature".
• Fixed Function execution to return its results to clients.
• Fixed an unnecessary warning when the specified secret has already been registered.
• Fixed TLS-related code and configurations to work properly.
• Fixed several configuration issues.
• Upgraded org.everit.json.schema to 1.14.2. CVE-2023-5072
• Upgraded grpc-health-probe to fix security issues. CVE-2023-39325 GHSA-m425-mq94-257g
• Upgraded the base image to fix security issues. CVE-2022-29458 CVE-2022-29458 CVE-2023-4911 CVE-2023-29491 CVE-2023-47038
• Upgraded org.bouncycastle:bcprov-jdk15on from 1.59 to 1.70 CVE-2023-33201 CVE-2023-33202

v3.7.3

Bug fixes

• Fixed registry name of AWS Marketplace.
• Fixed to avoid outputting credential information as a log.
• Fixed to use getTargetHost() to properly get LEDGER_HOST.
• Fixed busybox version in Dockerfile.
• Fixed a bug to use the intermediary mode.
• Fixed the bound argument of FunctionalInterface for gRPC stub method in ThrowableConsumer and ThrowableFunction.
• Fixed Function execution to return its results to clients.
• Fixed TLS-related code and configurations to work properly.
• Fixed several configuration issues.
• Upgraded org.everit.json.schema to 1.14.2. CVE-2023-5072
• Upgraded grpc-health-probe to fix security issues. CVE-2023-39325 GHSA-m425-mq94-257g
• Upgraded the base image to fix security issues. CVE-2022-29458 CVE-2022-29458 CVE-2023-4911 CVE-2023-29491 CVE-2023-47038
• Upgraded org.bouncycastle:bcprov-jdk15on from 1.59 to 1.70 CVE-2023-33201 CVE-2023-33202