1. c91027d fix: support plaintext PU when AuthPolicy is NONE (#16374) by uuuyuqi · 2 days ago 3.3
  2. c587ff6 Close channel on TLS exception to prevent half-open connections (#16202) by uuuyuqi · 3 days ago
  3. 316df8e Restrict trigger push branch for GitHub Workflow (#16367) by Aurélien Pupier · 6 days ago
  4. ed0e11e Fix Triple method resolution for overloaded wrapper methods (#16325) by shinyruo · 13 days ago
  5. 2626e28 Fix misleading NPE when request parameter is not Serializable (#16299) by 代码不加冰 · 3 weeks ago
  6. b16c837 Fix UnsupportedOperationException in DubboDefaultPropertiesEnvironmentPostProcessor on immutable defaultProperties (#16268) (#16313) by Jason · 3 weeks ago
  7. eb2eb29 Fix StringUtils.substringAfter to return empty string when separator is absent (#16350) by yang · 3 weeks ago
  8. b75adde Fix StringUtils.toBoolean to return false for "off" (#16348) by RohithV · 3 weeks ago
  9. 866860d Configure GitHub workflows to use concurrency cancel-in-progress for pull requests (#16323) by Aurélien Pupier · 4 weeks ago
  10. 3c92642 build(deps): bump prometheus_metrics.version from 1.6.1 to 1.7.0 (#16316) by dependabot[bot] · 4 weeks ago
  11. be6dabc build(deps-dev): bump org.jacoco:jacoco-maven-plugin (#16317) by dependabot[bot] · 4 weeks ago
  12. da75195 build(deps): bump byte-buddy_version from 1.18.8 to 1.18.10 (#16318) by dependabot[bot] · 4 weeks ago
  13. 8ca0d22 build(deps): bump netty4_version from 4.2.14.Final to 4.2.15.Final (#16319) by dependabot[bot] · 4 weeks ago
  14. 4135d13 build(deps): bump io.micrometer:micrometer-core from 1.16.5 to 1.16.6 (#16321) by dependabot[bot] · 4 weeks ago
  15. 9b6e0d1 build(deps): bump io.micrometer:micrometer-bom from 1.16.5 to 1.16.6 (#16322) by dependabot[bot] · 4 weeks ago
  16. c3ceb27 build(deps): bump com.fasterxml.jackson:jackson-bom (#16302) by dependabot[bot] · 5 weeks ago
  17. 8c24ee7 build(deps): bump org.apache.maven.plugins:maven-surefire-plugin (#16303) by dependabot[bot] · 5 weeks ago
  18. a310aa3 build(deps): bump org.webjars:swagger-ui from 5.32.4 to 5.32.6 (#16304) by dependabot[bot] · 5 weeks ago
  19. d535eac Add threat model, AGENTS.md and SECURITY.md pointer (#16312) by Yukina · 5 weeks ago
  20. 8cce154 Improve type safety of CollectionUtils.toTreeSet (#16306) by shinyruo · 5 weeks ago
  21. 990c513 Migrate mesh address matching to host and port API (#16309) by yin_bo_ · 5 weeks ago
  22. ee9c190 Fix order-sensitive thread pool status test (#16300) by yzy · 6 weeks ago
  23. a6df7a9 Fix CompositeInputStream close handling (#16305) by shinyruo · 6 weeks ago
  24. b65573e build(deps): bump org.apache.maven:maven-plugin-api (#16278) by dependabot[bot] · 6 weeks ago
  25. 6538e34 build(deps): bump org.asynchttpclient:async-http-client (#16279) by dependabot[bot] · 6 weeks ago
  26. 3f2823e build(deps): bump tomcat.version from 9.0.117 to 10.1.55 (#16280) by dependabot[bot] · 6 weeks ago
  27. ae274f6 build(deps): bump org.apache.tomcat.embed:tomcat-embed-core (#16284) by dependabot[bot] · 6 weeks ago
  28. 6fb8ec8 build(deps): bump org.apache.maven:maven-core from 3.9.15 to 3.9.16 (#16277) by dependabot[bot] · 6 weeks ago
  29. 8a78785 build(deps): bump sentinel.version from 1.8.9 to 1.8.10 (#16290) by dependabot[bot] · 6 weeks ago
  30. c18825a build(deps): bump protobuf-java_version from 4.33.4 to 4.35.0 (#16289) by dependabot[bot] · 6 weeks ago
  31. c7c1806 test: add YamlCodec security tests (#16282) by yijie zhao · 6 weeks ago
  32. 18bd169 build(deps): bump io.swagger.core.v3:swagger-annotations (#16281) by dependabot[bot] · 6 weeks ago
  33. 6696d2d build(deps): bump org.asynchttpclient:async-http-client (#16283) by dependabot[bot] · 6 weeks ago
  34. d65cb96 build(deps): bump netty4_version from 4.2.13.Final to 4.2.14.Final (#16291) by dependabot[bot] · 6 weeks ago
  35. d9262cc build(deps): bump org.apache.maven.plugins:maven-enforcer-plugin (#16292) by dependabot[bot] · 6 weeks ago
  36. dfdf39b [FIX] Close channel on TLS negotiation failure to prevent zombie conn… (#16255) by conellimo · 6 weeks ago
  37. abf4e98 Improve generic type safety of CollectionUtils.sort (#16236) by Vinod Kumar M ( codingkiddo ) · 8 weeks ago
  38. 3dbba26 build(deps): bump prometheus_metrics.version from 1.5.1 to 1.6.1 (#16250) by dependabot[bot] · 9 weeks ago
  39. d5243b4 build(deps): bump io.swagger.core.v3:swagger-annotations (#16252) by dependabot[bot] · 9 weeks ago
  40. c3176fb build(deps): bump grpc.version from 1.80.0 to 1.81.0 (#16253) by dependabot[bot] · 9 weeks ago
  41. 9aedd9f build(deps): bump com.fasterxml.jackson:jackson-bom (#16254) by dependabot[bot] · 9 weeks ago
  42. 5c0b2cd build(deps): bump com.alibaba.fastjson2:fastjson2 from 2.0.61 to 2.0.62 (#16261) by dependabot[bot] · 9 weeks ago
  43. af29b81 build(deps): bump log4j2_version from 2.25.4 to 2.26.0 (#16260) by dependabot[bot] · 9 weeks ago
  44. a6f82c1 build(deps): bump io.opentelemetry:opentelemetry-bom (#16263) by dependabot[bot] · 9 weeks ago
  45. a01dc86 build(deps): bump netty4_version from 4.2.12.Final to 4.2.13.Final (#16264) by dependabot[bot] · 9 weeks ago
  46. aa193e4 build(deps): bump org.apache.groovy:groovy from 4.0.31 to 4.0.32 (#16266) by dependabot[bot] · 9 weeks ago
  47. 6916d1b build(deps): bump spring-security-6.version from 6.5.9 to 6.5.10 (#16237) by dependabot[bot] · 2 months ago
  48. ca72307 build(deps): bump junit_jupiter_version from 5.14.3 to 5.14.4 (#16241) by dependabot[bot] · 2 months ago
  49. 7ef40bc build(deps): bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#16243) by dependabot[bot] · 2 months ago
  50. 98e4538 build(deps): bump spring-boot-3.version from 3.5.12 to 3.5.14 (#16238) by dependabot[bot] · 2 months ago
  51. ea70773 build(deps): bump org.springframework.security:spring-security-oauth2-authorization-server (#16239) by dependabot[bot] · 2 months ago
  52. 13edde2 build(deps): bump prometheus_metrics.version from 1.5.0 to 1.5.1 (#16240) by dependabot[bot] · 2 months ago
  53. 6aae258 build(deps): bump com.google.code.gson:gson from 2.13.2 to 2.14.0 (#16242) by dependabot[bot] · 2 months ago
  54. de95dda build(deps-dev): bump junit_platform_version from 1.14.3 to 1.14.4 (#16244) by dependabot[bot] · 2 months ago
  55. 58ab3c9 build(deps): bump commons-io:commons-io from 2.21.0 to 2.22.0 (#16245) by dependabot[bot] · 2 months ago
  56. 1104390 build(deps): bump io.micrometer:micrometer-core from 1.16.4 to 1.16.5 (#16246) by dependabot[bot] · 2 months ago
  57. 21bdf49 build(deps): bump io.zipkin.reporter2:zipkin-reporter-bom (#16183) by dependabot[bot] · 3 months ago
  58. 3eb5a5c build(deps): bump org.springframework.boot:spring-boot-starter-actuator from 3.5.11 to 3.5.12 (#16151) by dependabot[bot] · 3 months ago
  59. a8dccb8 build(deps): bump log4j2_version from 2.25.3 to 2.25.4 (#16181) by dependabot[bot] · 3 months ago
  60. 25b885a build(deps): bump org.codehaus.plexus:plexus-utils from 3.6.0 to 3.6.1 (#16189) by dependabot[bot] · 3 months ago
  61. cb6581f build(deps): bump byte-buddy_version from 1.18.7 to 1.18.8 (#16192) by dependabot[bot] · 3 months ago
  62. e80a772 build(deps): bump org.apache.tomcat.embed:tomcat-embed-core (#16203) by dependabot[bot] · 3 months ago
  63. 0b60d5d build(deps): bump io.opentelemetry:opentelemetry-bom (#16206) by dependabot[bot] · 3 months ago
  64. 7694fe7 build(deps): bump io.zipkin.zipkin2:zipkin from 3.5.1 to 3.6.1 (#16210) by dependabot[bot] · 3 months ago
  65. 3b7d6a5 build(deps): bump org.bouncycastle:bcpkix-jdk18on (#16215) by dependabot[bot] · 3 months ago
  66. cfec8a9 build(deps): bump io.swagger.core.v3:swagger-annotations from 2.2.45 to 2.2.48 (#16222) by dependabot[bot] · 3 months ago
  67. b4ed71b build(deps): bump org.apache.groovy:groovy from 4.0.30 to 4.0.31 (#16184) by dependabot[bot] · 3 months ago
  68. 60714e5 build(deps): bump spring-6.version from 6.2.17 to 6.2.18 (#16219) by dependabot[bot] · 3 months ago
  69. 27fc75b fix: disable lockedSynchronizers in dumpAllThreads to avoid ZGC safepoint heap scan (#16195) by Ran · 3 months ago
  70. 21cd2ca Reset ApplicationModel after running AbstractServiceDiscoveryFactoryTest (#16234) by zrlw · 3 months ago
  71. 68a16cb feat: support legacy and new prometheus client stacks (#16132) by SavitarC · 3 months ago
  72. af9a355 build(deps): bump org.webjars:swagger-ui from 5.32.1 to 5.32.4 (#16220) by dependabot[bot] · 3 months ago
  73. 5279ba8 build(deps): bump io.micrometer:micrometer-bom from 1.16.4 to 1.16.5 (#16221) by dependabot[bot] · 3 months ago
  74. a447863 build(deps): bump bouncycastle-bcprov_version from 1.83 to 1.84 (#16223) by dependabot[bot] · 3 months ago
  75. 82fc6a3 build(deps): bump io.micrometer:micrometer-tracing-bom (#16224) by dependabot[bot] · 3 months ago
  76. d4d9406 build(deps-dev): bump io.projectreactor:reactor-core from 3.8.4 to 3.8.5 (#16225) by dependabot[bot] · 3 months ago
  77. 0287b85 build(deps): bump org.apache.maven:maven-core from 3.9.14 to 3.9.15 (#16226) by dependabot[bot] · 3 months ago
  78. 821fd73 build(deps): bump org.asynchttpclient:async-http-client (#16228) by dependabot[bot] · 3 months ago
  79. 7018128 build(deps): bump org.apache.maven:maven-plugin-api (#16227) by dependabot[bot] · 3 months ago
  80. c954223 build(deps): bump org.javassist:javassist from 3.30.2-GA to 3.31.0-GA (#16229) by dependabot[bot] · 3 months ago
  81. d95086c build(deps): bump org.apache.logging.log4j:log4j-core (#16204) by dependabot[bot] · 3 months ago
  82. 8814afa Update netty4_version to 4.2.12.Final (#16196) by Yukina · 3 months ago
  83. 69084bd build(deps): bump org.apache.tomcat.embed:tomcat-embed-core (#16147) by dependabot[bot] · 4 months ago
  84. 9322930 build(deps): bump org.webjars:swagger-ui from 5.32.0 to 5.32.1 (#16158) by dependabot[bot] · 4 months ago
  85. 67bda6d build(deps): bump grpc.version from 1.79.0 to 1.80.0 (#16159) by dependabot[bot] · 4 months ago
  86. 53b4853 build(deps): bump spring-security-6.version from 6.5.8 to 6.5.9 (#16160) by dependabot[bot] · 4 months ago
  87. f3ea80c build(deps): bump protobuf-java_version from 4.33.4 to 4.34.1 (#16161) by dependabot[bot] · 4 months ago
  88. d55694e build(deps): bump com.alibaba.fastjson2:fastjson2 from 2.0.60 to 2.0.61 (#16162) by dependabot[bot] · 4 months ago
  89. f788772 build(deps): bump com.fasterxml.jackson:jackson-bom (#16163) by dependabot[bot] · 4 months ago
  90. b54059d Remove job native-image-inspecting from build-and-test-scheduled-3.3.yml as action setup-graalvm was not allowed anymore (#16166) by zrlw · 4 months ago
  91. 63fe8c3 build(deps): bump org.webjars:swagger-ui from 5.31.2 to 5.32.0 (#16115) by dependabot[bot] · 4 months ago
  92. 1d92ea4 build(deps): bump io.opentelemetry:opentelemetry-bom (#16119) by dependabot[bot] · 4 months ago
  93. cce03be build(deps): bump io.micrometer:micrometer-tracing-bom (#16137) by dependabot[bot] · 4 months ago
  94. 17bfa90 build(deps): bump protobuf-java_version from 4.33.4 to 4.34.0 (#16114) by dependabot[bot] · 4 months ago
  95. bb9ab98 build(deps): bump org.apache.tomcat.embed:tomcat-embed-core (#16127) by dependabot[bot] · 4 months ago
  96. 53ed285 build(deps): bump spring-6.version from 6.2.16 to 6.2.17 (#16136) by dependabot[bot] · 4 months ago
  97. ae1641e build(deps): bump io.swagger.core.v3:swagger-annotations (#16138) by dependabot[bot] · 4 months ago
  98. 3ae91fe build(deps): bump io.micrometer:micrometer-bom from 1.16.3 to 1.16.4 (#16139) by dependabot[bot] · 4 months ago
  99. ad72331 build(deps): bump io.micrometer:micrometer-core from 1.16.3 to 1.16.4 (#16140) by dependabot[bot] · 4 months ago
  100. d5c5e22 build(deps): bump org.apache.maven:maven-plugin-api (#16141) by dependabot[bot] · 4 months ago