2.1.8

Security

• [APPS-1290] - Fix org.bouncycastle:bcprov-jdk18on Infinite loop vulnerability.
• [APPS-1291] - Fix org.apache.tomcat.embed:tomcat-embed-core Insufficient Session Expiration.

2.1.7

Security

• [APPS-1135] - (REST) Fix Denial of Service (DoS) - CVE-2023-1370
• [APPS-1168] - (REST) Fix Open Redirect - CVE-2024-22243
• [APPS-1170] - (REST) Fix Open Redirect - CVE-2024-22259
• [APPS-1171] - (REST) Fix Denial of Service (DoS) - CVE-2024-23672
• [APPS-1172] - (REST) Fix Denial of Service (DoS) - CVE-2024-24549

2.1.6

Security

• [APPS-1108] - Address various vulnerabilities.

2.1.5

Bug Fixes

• [APPS-886] - Swagger API documentation does not display acceptable values for model 'type' fields.
• [APPS-887] - Swagger API documentation does not correctly display the required fields for Operation models.
• [APPS-941] - Fix http2 rapid-reset vulnerability CVE-2023-44487.

2.1.4

Improvements

• [APPS-882] - Clarify how to provide GeoJSON bin types in the documentation.

Bug Fixes

• [APPS-884] - GeoJSON bins are inserted as Aerospike Maps.

2.1.3

Improvements

• [APPS-866] - Upgrade to aerospike-java-client version 7.1.0.

2.1.2

Bug Fixes

• [APPS-833] - Upgrade to aerospike-java-client version 7 (addresses CVE-2023-36480).

2.1.1

Improvements

• [APPS-599] - REST: Add support for MAP_ORDERED and MAP_UNORDERED Map operation return types added in aerospike server 6.3.

Bug Fixes

• [APPS-652] - REST: Using a sindex filter and pagination causes infinite pages to be returned. #124
• [APPS-657] - REST: Support batch requests for server versions 5.x. #118
• [APPS-697] - REST: Address CVE-2023-20860.
• [APPS-730] - REST: Address CVE-2022-1471.

2.0.2

• Renamed package from aerospike-client-rest to aerospike-rest-gateway.

Bug Fixes

• [APPS-336] - REST: Fails to start when aerospike.restclient.requireauthentication=true.

2.0.1

REST Client 2.0.1

BREAKING CHANGE

• The project now relies on Java 17.
• The /v1/batch endpoint has been redesigned to support BatchWrite, BatchUDF, and BatchDelete. See https://aerospike.github.io/aerospike-rest-gateway/.
• The steps to add a ctx to an Operation model have changed. The new method allows multiple CTX models to be provided instead of just one. Allowing for operations to be performed on nested CDTs. See https://aerospike.github.io/aerospike-rest-gateway/.
• /v1/operation and /v1/execute endpoints are deprecated and will be removed. Please switch to using /v2/operate and /v2/execute. The new endpoints make use of robustly documented Operation models. See https://aerospike.github.io/aerospike-rest-gateway/ for more details.

New Features

• [APPS-25] - Support 6.0 partition query with pagination. (#75)
• [APPS-20] - Support 6.0 batch write, batch UDF, and batch delete. (#75)

Improvements

• [APPS-315] - Document Operation models in swagger. See https://aerospike.github.io/aerospike-rest-gateway/ for the new models. (#80)
• [APPS-63] - Add 'EXISTS' return type for CDT read operations. (#80)
• [APPS-21] - Support 6.0 truncate, udf-admin, and sindex-admin privileges. (#75)
• GeoJSON is now supported as a bin value with JSON. Look at docs/data-formats.md for more info. (#75)
• There are now spring-boot, circuit breaker, and tomcat metrics exposed from http://localhost:8080/actuator/prometheus.

Bug Fixes

• [APPS-285] - Cleanup client on cache eviction to stop runaway file descriptors. (#76)
• [APPS-288] - Support operations on CDTs by allowing multiple CTX objects. (#80)

Updates

• Update Java 1.8 to Java 17 (#80)
• Upgrade springboot from 2.5.12 to 2.7.4 (#84)
• Configure Dependabot (#51)
• Bump spring-retry from 1.3.1 to 1.3.4 (#81)
• Bump jackson-dataformat-msgpack from 0.9.0 to 0.9.3 (#82)
• Bump springdoc-openapi-ui from 1.6.11 to 1.6.12 (#83)
• Bump spring-aspects from 5.3.13 to 5.3.23 (#77)
• Bump aerospike-document-api from 1.1.1 to 1.2.0 (#72)

Full Changelog: 1.11.0...2.0.0