| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
tests(clustering): rpc test framework (#14030) KAG-5551 | 1 年前 | |
chore(lint): fix some helpers-outside-of-setup warnings (#14410) This reduces the number of warnings reported by the 'helpers-outside-of-setup' ast-grep lint rule. The lint rule itself had some false positives. I've updated it to remove those. In order to keep the changes easy to review, I've limited fixes to cases that only require trivial edits--essentially just moving the offending function calls into a `setup()`/`lazy_setup()` scope. There are several files that require a little more refactoring to fix, so I've left them alone for now. I'll address them in a follow-up PR, at which point this lint rule could be converted from a warning to an error. ``` spec/02-integration/04-admin_api/21-admin-api-keys_spec.lua spec/02-integration/05-proxy/10-balancer/02-least-connections_spec.lua spec/02-integration/05-proxy/10-balancer/02-least-connections_spec.lua spec/02-integration/05-proxy/10-balancer/07-latency_spec.lua spec/02-integration/05-proxy/10-balancer/07-latency_spec.lua spec/02-integration/08-status_api/05-dns_client_spec.lua spec/02-integration/09-hybrid_mode/01-sync_spec.lua spec/03-plugins/23-rate-limiting/04-access_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/39-ai-request-transformer/01-transformer_spec.lua ``` ``` $ ast-grep scan --filter helpers-outside-of-setup | grep -c '^warning' 60 ``` ``` ast-grep scan --filter helpers-outside-of-setup | grep -c '^warning' 12 ``` | 1 年前 | |
Revert "refactor(shorthand_fields): remove translate_backwards in favor of replaced_with (#13604)" This reverts commit 11405e5d4d2d88db746dd6ae0b700bc94f9fbe47. | 1 年前 | |
chore(deps): bump openssl, libexpat and pcre2. (#15004) * chore(deps): bump openssl from 3.4.1 to 3.5.5 (#16322) KAG-8526 (cherry picked from commit e4de0f903f5509b6ef4e8e7d72baabd4e54e7bbd) (cherry picked from commit 771265488fb421474a2334cbc3500631c2acd9fe) * chore(deps): bump libexpat from 2.6.4 to 2.7.3 (#14901) Signed-off-by: Aapo Talvensaari <aapo.talvensaari@gmail.com> (cherry picked from commit 63be051b995403dd25e1cbd3ced877b6570d2790) (cherry picked from commit 4d76a5589e4219883f62eb0deb45e62fcb3c99eb) * [backport -> next/3.10.x.x] chore(deps): bump openssl to 3.5.6 and bump libexpat to 2.8.1 (#18229) * chore(deps): bump openssl to 3.5.6 Signed-off-by: Aapo Talvensaari <aapo.talvensaari@gmail.com> (cherry picked from commit f86ed11fefdb928d858609467bb1122def40a383) * chore(deps): bump expat to 2.8.1 (cherry picked from commit 27ed4bfdd24e2a0df917cf73207b494bc664eec1) --------- Signed-off-by: Aapo Talvensaari <aapo.talvensaari@gmail.com> Co-authored-by: Aapo Talvensaari <aapo.talvensaari@gmail.com> (cherry picked from commit a9d51050116c71b1841850938dfc1aeee20f3073) * chore(deps): bump openssl to 3.5.7 Signed-off-by: Aapo Talvensaari <aapo.talvensaari@gmail.com> (cherry picked from commit b8bbdbb057a40a753fa875bb676cc259b105e43b) * chore(deps): bump openssl to 3.5.8 (#21603) Signed-off-by: Aapo Talvensaari <aapo.talvensaari@gmail.com> (cherry picked from commit 7369e7b330a2be9d48ccbe50cd4423b00d7cb5a4) * chore(deps): bump libexpat to 2.8.3 (#21605) Signed-off-by: Aapo Talvensaari <aapo.talvensaari@gmail.com> (cherry picked from commit 2f1e4ae71450e1dc1a79b32cf5f630221423354d) * chore(deps): bump libexpat to 2.8.4 Signed-off-by: Aapo Talvensaari <aapo.talvensaari@gmail.com> (cherry picked from commit 8aeddca0b2486b855e095f50deb4dfc7aea65219) * chore(deps): bump PCRE2 from 10.45 to 10.47 to address CVE-2025-58050 (PCRE2) (cherry picked from commit 2e30012124c2e6fc23398cccdbe780b7d3a1ca97) * chore(deps): bump pcre2 to 10.48 Signed-off-by: Aapo Talvensaari <aapo.talvensaari@gmail.com> (cherry picked from commit de201e3b91b3e7640a2c2b4c9bd2c6122926a822) * docs: update changelog --------- Signed-off-by: Aapo Talvensaari <aapo.talvensaari@gmail.com> Co-authored-by: Niklaus Schen <8458369+Water-Melon@users.noreply.github.com> Co-authored-by: Aapo Talvensaari <aapo.talvensaari@gmail.com> Co-authored-by: Aklis <aklis@qq.com> | 1 个月前 | |
Merge commit from fork removing the inbound content-length header will cause CL.0 request smuggling, because the body is treated as zero length. https://konghq.atlassian.net/browse/FTI-7377 tests(core): add more tests for hop-by-hop header related smuggling Co-authored-by: Zhefeng Chen <chzf_zju@163.com> | 28 天前 | |
refactor(concurrency): consistent node-level locks Several places in the gateway need a node-level lock, some of them used slightly different implementations. This refactor brings consistency in the ways we do node-level locking by using the same implementation (concurrency.with_worker_mutex) everywhere. | 2 年前 | |
chore(lint): fix some helpers-outside-of-setup warnings (#14410) This reduces the number of warnings reported by the 'helpers-outside-of-setup' ast-grep lint rule. The lint rule itself had some false positives. I've updated it to remove those. In order to keep the changes easy to review, I've limited fixes to cases that only require trivial edits--essentially just moving the offending function calls into a `setup()`/`lazy_setup()` scope. There are several files that require a little more refactoring to fix, so I've left them alone for now. I'll address them in a follow-up PR, at which point this lint rule could be converted from a warning to an error. ``` spec/02-integration/04-admin_api/21-admin-api-keys_spec.lua spec/02-integration/05-proxy/10-balancer/02-least-connections_spec.lua spec/02-integration/05-proxy/10-balancer/02-least-connections_spec.lua spec/02-integration/05-proxy/10-balancer/07-latency_spec.lua spec/02-integration/05-proxy/10-balancer/07-latency_spec.lua spec/02-integration/08-status_api/05-dns_client_spec.lua spec/02-integration/09-hybrid_mode/01-sync_spec.lua spec/03-plugins/23-rate-limiting/04-access_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/39-ai-request-transformer/01-transformer_spec.lua ``` ``` $ ast-grep scan --filter helpers-outside-of-setup | grep -c '^warning' 60 ``` ``` ast-grep scan --filter helpers-outside-of-setup | grep -c '^warning' 12 ``` | 1 年前 | |
chore(lint): fix remaining helpers-outside-of-setup warnings This is a follow-up to d1a8e41ab7923605510c8ca1ebc6692a65a90bd8 that fixes the remainder of the files with warnings. ``` $ ast-grep scan | wc -l 0 ``` | 1 年前 | |
fix(hybrid-mode): add nil checks for bedrock config options - Safely handle nil bedrock config in compatibility transformations - Add type checking before accessing bedrock fields | 1 年前 | |
chore(build): remove ngx_wasm_module from default builds (#14347) | 1 年前 | |
tests(*): remove useless strategy arg from reload_kong helper function | 1 年前 | |
fix(core): rename unix sockets to shorter names to avoid exceeding socket name limit (#13557) | 2 年前 | |
fix(certificate): unable to refresh certificate entity with vault reference when initial with an invalid string (#10984) When set the cert to an invalid string in the vault, and then correct the string, kong will not start to use the correct certificate even though `kong vault` command shows the correct certiticate being returned. This is because the initial invalid string has already been cached in the L2 cache by mlcache, and it will not be updated via the L3 cache callback afterward. When mlcache fails during the execution of the `l1_serializer`, it caches the result retrieved from the L3 cache callback the first time in the L2 cache permanently. This means that subsequent calls to `cache.get()` will never fetch data from the L3 cache but will directly retrieve it from the L2 cache. To avoid this situation, when the `l1_serializer` fails, we no longer allow mlcache to store the data retrieved from L3 into L2. | 1 年前 | |
chore(lint): fix some helpers-outside-of-setup warnings (#14410) This reduces the number of warnings reported by the 'helpers-outside-of-setup' ast-grep lint rule. The lint rule itself had some false positives. I've updated it to remove those. In order to keep the changes easy to review, I've limited fixes to cases that only require trivial edits--essentially just moving the offending function calls into a `setup()`/`lazy_setup()` scope. There are several files that require a little more refactoring to fix, so I've left them alone for now. I'll address them in a follow-up PR, at which point this lint rule could be converted from a warning to an error. ``` spec/02-integration/04-admin_api/21-admin-api-keys_spec.lua spec/02-integration/05-proxy/10-balancer/02-least-connections_spec.lua spec/02-integration/05-proxy/10-balancer/02-least-connections_spec.lua spec/02-integration/05-proxy/10-balancer/07-latency_spec.lua spec/02-integration/05-proxy/10-balancer/07-latency_spec.lua spec/02-integration/08-status_api/05-dns_client_spec.lua spec/02-integration/09-hybrid_mode/01-sync_spec.lua spec/03-plugins/23-rate-limiting/04-access_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/39-ai-request-transformer/01-transformer_spec.lua ``` ``` $ ast-grep scan --filter helpers-outside-of-setup | grep -c '^warning' 60 ``` ``` ast-grep scan --filter helpers-outside-of-setup | grep -c '^warning' 12 ``` | 1 年前 | |
tests: add verification tests for plugin execution rules Signed-off-by: Joshua Schmid <jaiks@posteo.de> | 3 年前 | |
chore(lint): fix some helpers-outside-of-setup warnings (#14410) This reduces the number of warnings reported by the 'helpers-outside-of-setup' ast-grep lint rule. The lint rule itself had some false positives. I've updated it to remove those. In order to keep the changes easy to review, I've limited fixes to cases that only require trivial edits--essentially just moving the offending function calls into a `setup()`/`lazy_setup()` scope. There are several files that require a little more refactoring to fix, so I've left them alone for now. I'll address them in a follow-up PR, at which point this lint rule could be converted from a warning to an error. ``` spec/02-integration/04-admin_api/21-admin-api-keys_spec.lua spec/02-integration/05-proxy/10-balancer/02-least-connections_spec.lua spec/02-integration/05-proxy/10-balancer/02-least-connections_spec.lua spec/02-integration/05-proxy/10-balancer/07-latency_spec.lua spec/02-integration/05-proxy/10-balancer/07-latency_spec.lua spec/02-integration/08-status_api/05-dns_client_spec.lua spec/02-integration/09-hybrid_mode/01-sync_spec.lua spec/03-plugins/23-rate-limiting/04-access_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/39-ai-request-transformer/01-transformer_spec.lua ``` ``` $ ast-grep scan --filter helpers-outside-of-setup | grep -c '^warning' 60 ``` ``` ast-grep scan --filter helpers-outside-of-setup | grep -c '^warning' 12 ``` | 1 年前 | |
feat(dns): use new `resolver_*` directives for new DNS client (#13427) This avoids confusion with old DNS client config as not all of them works in the new client. KAG-4994 | 2 年前 | |
Merge commit from fork Add a node_id check to kong/clustering/rpc/manager.lua and kong/clustering/control_plane.lua. Add a hostname format check to prevent potential injection vulnerabilities. [FTI-7219]!(https://konghq.atlassian.net/browse/FTI-7219) (cherry picked from commit dfd4f41) Signed-off-by: zhen.zhong <zhen.zhong@konghq.com> | 28 天前 | |
feat(request-debugging): improve the time resolution and latency field (#13460) Using `time_ns` to measure the context duration and introduced a field `total_time_without_upstream` to represent total latency without upstream. KAG-4733 | 2 年前 | |
chore(lint): fix some helpers-outside-of-setup warnings (#14410) This reduces the number of warnings reported by the 'helpers-outside-of-setup' ast-grep lint rule. The lint rule itself had some false positives. I've updated it to remove those. In order to keep the changes easy to review, I've limited fixes to cases that only require trivial edits--essentially just moving the offending function calls into a `setup()`/`lazy_setup()` scope. There are several files that require a little more refactoring to fix, so I've left them alone for now. I'll address them in a follow-up PR, at which point this lint rule could be converted from a warning to an error. ``` spec/02-integration/04-admin_api/21-admin-api-keys_spec.lua spec/02-integration/05-proxy/10-balancer/02-least-connections_spec.lua spec/02-integration/05-proxy/10-balancer/02-least-connections_spec.lua spec/02-integration/05-proxy/10-balancer/07-latency_spec.lua spec/02-integration/05-proxy/10-balancer/07-latency_spec.lua spec/02-integration/08-status_api/05-dns_client_spec.lua spec/02-integration/09-hybrid_mode/01-sync_spec.lua spec/03-plugins/23-rate-limiting/04-access_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/26-prometheus/04-status_api_spec.lua spec/03-plugins/39-ai-request-transformer/01-transformer_spec.lua ``` ``` $ ast-grep scan --filter helpers-outside-of-setup | grep -c '^warning' 60 ``` ``` ast-grep scan --filter helpers-outside-of-setup | grep -c '^warning' 12 ``` | 1 年前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 28 天前 | ||
| 2 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 2 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 3 年前 | ||
| 1 年前 | ||
| 2 年前 | ||
| 28 天前 | ||
| 2 年前 | ||
| 1 年前 |