1. 75dd02f fix: guard shutdown hook reflection failures (#6786) (#6926) by BobSong · 11 hours ago master
  2. d689e4e fix: honor retain flag in mqtt publish message (#6922) by wy471x · 14 hours ago
  3. da3616a fix: close removed websocket sync clients (#6784) (#6928) by BobSong · 15 hours ago
  4. 95612fe fix: handle null response status in AiResponseTransformerTemplate and add corresponding unit test (#6929) by Limbo · 16 hours ago
  5. 5cfd91e fix: handle null or blank TTL configuration in ClickHouseLogCollectClient and add test case (#6919) by Limbo · 16 hours ago
  6. c7178b2 Fixes #6886:移除 RocketMQ 日志客户端重复注册的关闭钩子 (#6927) by BobSong · 18 hours ago
  7. ed00727 fix: invalidate rule match cache when deleting a selector (#6797) (#6914) by Limbo · 20 hours ago
  8. e852576 fix: handle non-standard HTTP status codes in logging response and add test coverage (#6918) by Limbo · 20 hours ago
  9. e0b40ef refactor: replace Spring Value injection with ReflectionTestUtils and add delay validation test cases to SignService tests (#6917) by Limbo · 20 hours ago
  10. ce2a2e3 fix: offload websocket reconnect from shared timer to dedicated executor (#6898) by wy471x · 21 hours ago
  11. 5c11a25 fix: guard null boxed numeric fields in AbstractLogCollector desensitize (#6899) by Nikhil Ramashasthri · 22 hours ago
  12. 26a700a fix: enforce request body size limit during buffering in AiProxyPlugin (#6897) by wy471x · 33 hours ago
  13. f3167af fix: evict stale upstream countMap entries in LeastActiveLoadBalance (#6900) by Southern · 3 days ago
  14. 8f141a1 fix: clear stale proxy selector data after empty HTTP refresh. (#6909) by lymerin · 3 days ago
  15. b0cd6fe fix: update rpcExt property key to lowercase and add related test cases (#6912) by Limbo · 4 days ago
  16. 478dcfe refactor: use try-with-resources for GZIP decompression in AiResponseTransformerPlugin and add unit test for resource cleanup (#6915) by Limbo · 4 days ago
  17. 989d5a0 fix(admin): InstanceInfoServiceImpl.findById always returns null (#6908) by 杨俊杰 · 4 days ago
  18. 4bab1f1 fix: remove duplicate Pulsar shutdown hook (#6768) (#6910) by BobSong · 4 days ago
  19. b5c18d0 [ISSUE-6523] Add break after successful long polling to avoid unnecessary retries (#6901) by yali · 4 days ago
  20. 81fddfd feat: login get to post (#6409) by eye-gu · 12 days ago
  21. dd704a0 admin(dashboard): sync dashboard build from apache/shenyu-dashboard@83969a574ea35db3092c3e16901ba89a7f800a7b (#6822) by aias00 · 14 days ago
  22. 24e348e fix: Decouple JWT signing key from user password hash (#6408) by hengyuss · 2 weeks ago
  23. ee8ccf9 fix: handle null discoveryUpstreams in proxy selector update (#6534) by lll-peanut · 2 weeks ago
  24. 990aa29 fix: return ERROR_TOKEN when basic auth credentials are missing (#6533) by lll-peanut · 2 weeks ago
  25. 3a118b5 fix: validate parent tag existence when creating child tag (#6535) by lll-peanut · 2 weeks ago
  26. a02a3f8 Dependency governance rules for shenyu client java (#6438) by lll-peanut · 2 weeks ago
  27. d4c85f2 fix:PageParameter throws NPE when pageSize is omitted (#6494) by hengyuss · 2 weeks ago
  28. fcf0c98 fix: JWT plugin throws ArrayIndexOutOfBoundsException on malformed Authorization header (#6450) by wy471x · 3 weeks ago
  29. 05044b1 fix: correct shenyu.sdk.serverLists port in sdk examples from admin(9095) to gateway(9195) (#6462) by hengyuss · 3 weeks ago
  30. f9a67c9 fix(admin): enforce response body size limit on automatic swagger doc pull (#6458) by wy471x · 3 weeks ago
  31. d16d929 fix: use OpenGauss profile and dialect in docker-compose E2E storage (#6449) by lll-peanut · 3 weeks ago
  32. 3a411e0 fix(admin): guard against null servers and parameters in Swagger MCP import (#6452) by wy471x · 3 weeks ago
  33. 8389732 fix(tcp): unregister ActivityConnectionObserver on connection dispose to prevent memory leak (#6453) by wy471x · 3 weeks ago
  34. 0df09ca fix: skip maven-remote-resources-plugin in CI to avoid lock contention (#6459) (#6460) by lll-peanut · 3 weeks ago
  35. 43e05e9 fix: MemorySafeLinkedBlockingQueue.put rejects after successful enqueue (#6455) by hengyuss · 3 weeks ago
  36. 7b96daa fix: use typed InetSocketAddress APIs instead of parsing toString() in TCP proxy (#6454) by wy471x · 3 weeks ago
  37. 84921f4 fix: config import returns 500 when zip size limits are exceeded (#6451) by hengyuss · 3 weeks ago
  38. 92c2197 websocket sync handshakes (#6386) by aias00 · 4 weeks ago
  39. ea4f177 fix:P2C LoadBalancer responseTrigger calculates wrong (#6428) by hengyuss · 4 weeks ago
  40. 659da65 fix(admin): migrate dashboard passwords to bcrypt (#6380) by Honglei · 4 weeks ago
  41. 924f061 infra(ci): skip redundant disk cleanup in path-filter-only jobs (#6437) by Duansg · 4 weeks ago
  42. 5f9f4b3 docs admin : document websocket network isolation. (#6419) by BobSong · 4 weeks ago
  43. a1b6ae3 fix: updateSk not publish event (#6434) by kanlon · 4 weeks ago
  44. 96a4c94 fix: update examples to consume independent shenyu-client-java artifacts (#6371) (#6424) by lll-peanut · 4 weeks ago
  45. 292b73b infra(ci): use maven wrapper instead of mvnd on Windows to avoid daemon crash (#6436) by Duansg · 4 weeks ago
  46. 8a18eca infra(ci): run paths-filter once in a dedicated changes job instead of per matrix runner (#6435) by Duansg · 4 weeks ago
  47. 5926970 fix: remove magic num in InstanceCheckSrevice (#6421) by hengyuss · 5 weeks ago
  48. bf909a8 chore: add security model document. (#6431) by wy471x · 5 weeks ago
  49. 2974ec3 infra(ci): add concurrency to cancel superseded CI/test runs (#6432) by Duansg · 5 weeks ago
  50. 79885c1 infra(ci): remove sofa related workflow after sofa support removed (#6430) by Duansg · 5 weeks ago
  51. b94a699 fix: pin docker actions to approved commit SHA for ASF Actions policy (#6423) by Duansg · 5 weeks ago
  52. d39e623 feat(client):add many path register for spring mvc client. (#6348) by wy471x · 5 weeks ago
  53. 492bf47 2.7.1 release (#6420) by aias00 · 5 weeks ago
  54. bc4f20d fix: Update LICENSE files to include additional dependencies and their licenses (#6418) by aias00 · 6 weeks ago
  55. 281bc61 fix: Remove appSecret from sandbox-beforesign response header[#6402] (#6417) by hengyuss · 6 weeks ago
  56. 33e3033 fix: use come.google.re2j replace java.util.regex in RegexPredicateJu… (#6410) by hengyuss · 6 weeks ago
  57. f158c08 Require permission for namespace plugin sync (#6384) by aias00 · 6 weeks ago
  58. 9181fb1 [fix] Add missing permission annotations to /appAuth/updateSk and /sandbox/proxyGateway (#6388) by aias00 · 6 weeks ago
  59. 4e539dd fix: add mounts for external libraries in docker-compose to prevent startup issues (missing database connector driver) when using an external database datasource other than H2 (#6389) (#6391) by exyb · 6 weeks ago
  60. 74644fb fix: Add decompression size limits to ZipUtil.unzip()[#6400] (#6416) by hengyuss · 6 weeks ago
  61. d409a04 fix(admin): limit swagger import response body size (#6411) by SouthwestAsiaFloat · 6 weeks ago
  62. 9e7d5ff fix: Enforce account enabled check on every authenticated request in ShiroRealm [#6399] (#6415) by hengyuss · 6 weeks ago
  63. d4db5e6 fix: DividePlugin specify-domain header to prevent cache pollution and restrict to configured upstreams (#6412) by hengyuss · 6 weeks ago
  64. 6e79c7b fix:fix local springmvc client cant register success (#6395) by hengyuss · 8 weeks ago
  65. 6c3110f Prerelease/fix license (#6387) by aias00 · 9 weeks ago
  66. 470aefe [type:refactor] replace inactive wasmtime-java with chicory pure-Java WASM runtime (#6356) by eye-gu · 9 weeks ago
  67. 6d3605a fix(ci): remove maven cache save to avoid incomplete cache pollution (#6383) by eye-gu · 9 weeks ago
  68. e153077 fix: skip request body for GET and HEAD requests (#6350) by zongmingzhi · 9 weeks ago
  69. 3be5037 fix(request): make add operations append existing values (#6375) by SouthwestAsiaFloat · 9 weeks ago
  70. ca83c69 Fix RocketMQ logging e2e bootstrap startup (#6379) by aias00 · 10 weeks ago
  71. 75a23bb fix(netty): support configurable httpRequestDecoder properties (#6378) by hqbhonker · 10 weeks ago
  72. 1ecc77c [ISSUE 6334] : Add uri validation for regex and other operators. (#6335) by hengyuss · 10 weeks ago
  73. d17b29d Stabilize Sentinel CI assertion for PR 6375 (#6377) by aias00 · 10 weeks ago
  74. 0b16b58 Stabilize HTTP E2E compose startup readiness (#6363) by aias00 · 10 weeks ago
  75. 86e544b Stabilize Sentinel integrated rate-limit assertions (#6374) by aias00 · 10 weeks ago
  76. 48120c1 Stabilize k8s ingress startup healthchecks (#6361) by aias00 · 2 months ago
  77. 0e41bcc Codex/fix sandbox response leak (#6359) by SUPERSAIYAN · 2 months ago
  78. 48e48df Fix README documentation links (#6357) by SUPERSAIYAN · 2 months ago
  79. 7c8a67d fix: eliminate race condition in UpstreamCheckServiceTest.testReplace (#6355) by eye-gu · 2 months ago
  80. 7dc8ecc fix: replace ArrayList with CopyOnWriteArrayList to avoid ConcurrentModificationException in URI heartbeat (#6352) by eye-gu · 3 months ago
  81. e3cf5ce fix(ai-prompt): preserve all original messages in decorateBody (#6343) by eye-gu · 3 months ago
  82. 73a4a06 fix: correct instanceof check in addFailureUriDataRegister (#6345) by eye-gu · 3 months ago
  83. 338ea9a [type:refactor] remove motan support (#6307) by aias00 · 3 months ago
  84. c896152 Prevent duplicate full-mode URI heartbeats after repeated context refresh (#6337) by aias00 · 3 months ago
  85. 73b580d chore(deps): bump com.sun.mail:jakarta.mail from 2.0.1 to 2.0.2 (#6329) by dependabot[bot] · 4 months ago
  86. fb454de Fix websocket client spec builder reuse in plugin config (#6330) by zhaoguhong · 4 months ago
  87. e2c21ed test(task#5161): improve test coverage for admin. (#6328) by Oneday2333 · 4 months ago
  88. 4f346c5 test(task#5161): improve test coverage for sync. (#6333) by Oneday2333 · 4 months ago
  89. a19cb16 chore(deps): bump org.bouncycastle:bcprov-jdk18on from 1.78 to 1.84 (#6331) by dependabot[bot] · 4 months ago
  90. 31f0a4d Stop exposing login AES secrets to anonymous callers (#6323) by aias00 · 4 months ago
  91. e6298fa chore(deps): bump org.apache.kafka:kafka-clients from 3.9.1 to 3.9.2 (#6324) by dependabot[bot] · 4 months ago
  92. 33c79d1 Ci update cache (#6325) by L · 4 months ago
  93. f258aec Fix missing RBAC on selector, rule, and data-permission endpoints (#6319) by aias00 · 4 months ago
  94. 0e1cc3c Block redirect-based SSRF bypass in Swagger imports (#6320) by aias00 · 4 months ago
  95. aceaf5b Hide registry passwords from admin API responses (#6322) by aias00 · 4 months ago
  96. bec32f3 Align SSRF URL validation with OkHttp parsing (#6321) by aias00 · 4 months ago
  97. 2c44e7e feat(mcp-server): enhance SDK compatibility with reflection caching and error handling (#6312) by aias00 · 5 months ago
  98. d45cd70 infra(ci): add CI action condition (#6316) by shown · 5 months ago
  99. 2870eab fix(common): align PluginEnum sort values with DB schema.sql (#6310) (#6311) by bwang · 5 months ago
  100. 0a927fd Fix: RuleServiceImpl#searchByPage() Selectors now populated from namespace only when condition selectors are null or empty. (#6305) by X.Bruce121 · 5 months ago