v3.9.0

Summary

This release includes several enhancements, such as introducing a single top-level command, “scalardl”, which integrates all ScalarDL management commands for better usability and a gateway functionality to let developers write ScalarDL applications using any programming language. This release also has a lot of improvements and bug fixes. See the following for detailed changes.

Enhancements

• Added "scalardl" command for better usability.
• Added ScalarDL Gateway.
• Added license-checking mechanism.
• Added TLS support for the Prometheus exporter.

Improvements

• Improved gRPC configurations in clients and servers.
• Improved the GateKeeper behavior.
• Improved CI release workflow.
• Improved CI tests and maintenance.
• Made the servers transition to decommissioning state before shutting down.
• Made contracts and functions loadable in registration time.
• Supported OpenShift.
• Migrated schema-loader back.
• Upgraded depending libraries.

Bug fixes

• Fixed dimension names for AWS meters.
• Fixed registry name of AWS Marketplace.
• Fixed to avoid outputting credential information as a log.
• Fixed to use getTargetHost() to properly get LEDGER_HOST.
• Fixed busybox version in Dockerfile.
• Fixed a bug to use the intermediary mode.
• Fixed the bound argument of FunctionalInterface for gRPC stub method in ThrowableConsumer and ThrowableFunction.
• Fixed AuthenticationMethod to accept "digital-signature".
• Fixed a spotbugs issue and formated code for consistency.
• Fixed Function execution to return its results to clients.
• Fixed an unnecessary warning when the specified secret has already been registered.
• Fixed TLS-related code and configurations to work properly.
• Fixed gRPC-related configurations.
• Fixed several configuration issues, especially Gateway with TLS.
• Fixed to use grpc_health_probe in the Gateway docker image to support TLS gRPC health check.
• Upgraded org.everit.json.schema to 1.14.2. CVE-2023-5072
• Upgraded grpc-health-probe to fix security issues. CVE-2023-39325 GHSA-m425-mq94-257g
• Upgraded the base image to fix security issues. CVE-2022-29458 CVE-2022-29458 CVE-2023-4911 CVE-2023-29491 CVE-2023-47038
• Upgraded org.bouncycastle:bcprov-jdk15on from 1.59 to 1.70 CVE-2018-1000180 CVE-2018-1000613 CVE-2020-28052

v3.8.0

Enhancements

• Add registerSecret to the servers (#864)
• Update LedgerConfig and AuditorConfig to deal with HMAC authentication (#895)
• Create an abstraction for signature signing and validation. (#897)
• Rename variables and method names based on the abstraction for HMAC authentication. (#899)
• Add HMAC authentication (#856)
• Scaffold ScalarDL Ledger Meter (#881)
• Make it configurable through environment variables (#935)
• Propose the reporting part (#906)
• Use metering lib 1.3.0 (#928)
• Include ClientIdentityKey.class into the client SDK (#934)
• To build Docker images for metered servers (#930)

Improvements

• Replace usage of gradle by gradle wrapper in CI (#927)
• Update scheduled-vuln-check.yaml (#905)
• Increase Trivy timeout (#913)
• Use the environment variable to replace the set-output command (#918)
• Add cache for DagValidator (#912)
• Run vulnerability check twice a week (#915)
• Rename Scalar DL to ScalarDL (#936)
• Push SNAPSHOT version container images (#938)
• Remove ordering and proxy subprojects (#933)
• Remove unused files (#937)
• Support ScalarDB 3.8 (#945)

Bug fixes

• Upgrade the in-house JRE 8 Docker image to 1.1.11 (#920)
• Upgrade gRPC Health Probe version to 0.4.15 (#917)
• Upgrade the in-house JRE image to 1.1.10 (#907)
• Include ClientIdentityKey.class into the client SDK (#934)
• Use the latest ubuntu (#940)
• Upgrade the in-house JRE Docker image to 1.1.12 (#932)
• Upgrade the gRPC health probe version (#939)

v3.7.2

Bug fixes

• Upgrade the in-house JRE 8 Docker image to 1.1.11 (#920)
• Upgrade gRPC Health Probe version to 0.4.15 (#917)
• Upgrade the in-house JRE image to 1.1.10 (#907)
• Use the latest ubuntu (#940)
• Upgrade the in-house JRE Docker image to 1.1.12 (#932)
• Upgrade the gRPC health probe version (#939)
• Fix to verify signature when reading it from Ledger (#925)
• Fix thread unsafety in Ledger validation. (#929)

v3.6.4

Bug fixes

• Upgrade the in-house JRE image to 1.1.10 (#907)
• Upgrade gRPC Health Probe version to 0.4.15 (#917)
• Upgrade the in-house JRE 8 Docker image to 1.1.11 (#920)
• Use the latest ubuntu (#940)
• Upgrade the gRPC health probe version (#939)
• Upgrade the in-house JRE Docker image to 1.1.12 (#932)
• Fix to verify signature when reading it from Ledger (#925)

v3.5.7

Bug fixes

• Upgrade the in-house JRE 8 Docker image to 1.1.11 (#920)
• Upgrade gRPC Health Probe version to 0.4.15 (#917)
• Upgrade the in-house JRE image to 1.1.10 (#907)
• Use the latest ubuntu (#940)
• Upgrade the in-house JRE Docker image to 1.1.12 (#932)
• Upgrade the gRPC health probe version (#939)
• Fix to verify signature when reading it from Ledger (#925)

v3.4.6

Bug fixes

• Upgrade the in-house JRE 8 Docker image to 1.1.11 (#920)
• Upgrade gRPC Health Probe version to 0.4.15 (#917)
• Upgrade the in-house JRE image to 1.1.10 (#907)
• Use the latest ubuntu (#940)
• Upgrade the in-house JRE Docker image to 1.1.12 (#932)
• Upgrade the gRPC health probe version (#939)

v3.7.1

Bugfix

• Upgrade the in-house JRE Docker image and ScalarDB (#904)

v3.6.3

Bugfix

• Upgrade the in-house JRE Docker image and ScalarDB (#903)

v3.5.6

Bugfix

• Upgrade the in-house JRE Docker image and ScalarDB (#902)

v3.4.5

Bugfix

• Upgrade the in-house JRE Docker image and ScalarDB (#901)