1. ebc2355 build(deps): bump uuid to 13.0.1 in /storm-webapp (#9083) by reiabreu · 16 hours ago master
  2. d8ba1d5 Merge pull request #9082 from apache/STORM-3871-sweep-orphaned-dependency-blobs by reiabreu · 22 hours ago
  3. 8c1fdc1 STORM-3871: stop a non-leader nimbus from registering a deleted blob again by Richard Zowalla · 34 hours ago STORM-3871-sweep-orphaned-dependency-blobs
  4. a9fb804 STORM-3871: sweep dependency blobs that outlive their topology's cleanup by Richard Zowalla · 36 hours ago
  5. f96065c Merge pull request #9080 from apache/dependabot/npm_and_yarn/storm-webapp/svgo-4.1.0 by reiabreu · 2 days ago
  6. 1553132 build(deps-dev): bump svgo from 4.0.2 to 4.1.0 in /storm-webapp by dependabot[bot] · 2 days ago
  7. d9dae3f Fix DeserializingConnectionCallbackTest negative-length assertion (#9081) by reiabreu · 2 days ago
  8. 4152128 Harden the java serialization fallback bridge with a JEP-290 serial filter (#9075) by L1nq · 3 days ago
  9. cccc233 Drop malformed tuple payloads instead of killing the receiving worker (#9076) by L1nq · 3 days ago
  10. c030b1b Apply one redaction rule to configuration served and logged by Storm (#9069) by Richard Zowalla · 7 days ago
  11. 0420045 build(deps-dev): bump fast-uri from 3.1.5 to 3.1.7 in /storm-webapp (#9072) by dependabot[bot] · 8 days ago
  12. 181800a Merge pull request #9071 from apache/dependabot/npm_and_yarn/storm-webapp/browserslist-4.28.8 by reiabreu · 9 days ago
  13. 6bae758 build(deps-dev): bump browserslist in /storm-webapp by dependabot[bot] · 10 days ago
  14. 9d3060f Merge pull request #9070 from apache/dependabot/npm_and_yarn/storm-webapp/postcss-selector-parser-7.1.5 by reiabreu · 10 days ago
  15. 6c06e51 build(deps): bump postcss-selector-parser in /storm-webapp by dependabot[bot] · 10 days ago
  16. 7f6df7d Regenerate license files after dependency changes (#9068) by github-actions[bot] · 10 days ago
  17. 9be3128 build(deps): bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre in /examples (#9052) by dependabot[bot] · 10 days ago
  18. 2acaf50 Pin org.jspecify:jspecify so the daemon and worker classpaths agree by Richard Zowalla · 11 days ago
  19. 6aba2cf build(deps): bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre by dependabot[bot] · 11 days ago
  20. b08e142 build(deps): bump datatables.net from 3.0.0 to 3.0.2 in /storm-webapp by dependabot[bot] · 11 days ago
  21. 261f0bf build(deps-dev): bump webpack-cli from 7.2.2 to 7.2.3 in /storm-webapp by dependabot[bot] · 11 days ago
  22. c3357d8 build(deps): bump cytoscape from 3.34.0 to 3.34.2 in /storm-webapp by dependabot[bot] · 11 days ago
  23. f4d0376 build(deps): bump vis-data from 8.0.4 to 8.0.5 in /storm-webapp by dependabot[bot] · 11 days ago
  24. 16ce49d build(deps): bump datatables.net-bs5 in /storm-webapp by dependabot[bot] · 11 days ago
  25. cb6e3ec build(deps): bump redis.clients:jedis from 7.5.3 to 8.0.1 by dependabot[bot] · 11 days ago
  26. e7c77b8 build(deps): bump com.fasterxml.jackson:jackson-bom by dependabot[bot] · 11 days ago
  27. 87916c7 build(deps): bump netty-tcnative.version by dependabot[bot] · 11 days ago
  28. c55a57a build(deps-dev): bump start-server-and-test in /storm-webapp by dependabot[bot] · 11 days ago
  29. dbd7894 build(deps-dev): bump css-loader from 7.1.4 to 7.1.5 in /storm-webapp by dependabot[bot] · 11 days ago
  30. d0c0719 build(deps-dev): bump webpack from 5.109.2 to 5.110.1 in /storm-webapp by dependabot[bot] · 11 days ago
  31. 8ab7948 build(deps): bump js-yaml from 5.2.2 to 5.4.1 in /storm-webapp by dependabot[bot] · 11 days ago
  32. cb9e935 build(deps): bump cytoscape-dagre from 4.0.0 to 4.0.1 in /storm-webapp by dependabot[bot] · 11 days ago
  33. 6c2240f build(deps): bump vis-network from 10.1.0 to 10.1.2 in /storm-webapp by dependabot[bot] · 11 days ago
  34. 1e7339d build(deps): bump datatables.net-dt from 3.0.0 to 3.0.2 in /storm-webapp by dependabot[bot] · 11 days ago
  35. 2e82b02 build(deps-dev): bump cypress from 15.19.0 to 15.21.1 in /storm-webapp by dependabot[bot] · 11 days ago
  36. beffa84 build(deps): bump com.puppycrawl.tools:checkstyle in /examples by dependabot[bot] · 11 days ago
  37. 5334ac1 build(deps): bump org.apache.xbean:xbean-spring from 4.31 to 5.0.0 by dependabot[bot] · 11 days ago
  38. 28186db build(deps): bump com.github.luben:zstd-jni from 1.5.7-12 to 1.5.7-15 by dependabot[bot] · 11 days ago
  39. 61e179b build(deps): bump org.junit:junit-bom from 6.1.2 to 6.1.3 by dependabot[bot] · 11 days ago
  40. 4cc3c71 build(deps): bump org.apache.commons:commons-collections4 by dependabot[bot] · 11 days ago
  41. 1e967ab build(deps): bump spring.version from 7.0.8 to 7.0.9 by dependabot[bot] · 11 days ago
  42. 10b51e7 build(deps): bump com.fasterxml.woodstox:woodstox-core by dependabot[bot] · 11 days ago
  43. a7b8938 build(deps): bump com.fasterxml.jackson.core:jackson-databind by dependabot[bot] · 11 days ago
  44. 58ecef0 build(deps): bump org.objenesis:objenesis from 3.5 to 3.6 by dependabot[bot] · 11 days ago
  45. 1041079 build(deps): bump activemq.version from 6.3.0 to 6.3.1 by dependabot[bot] · 11 days ago
  46. 33117f0 build(deps): bump org.jctools:jctools-core from 4.0.6 to 4.0.7 by dependabot[bot] · 11 days ago
  47. 9f161b2 build(deps): bump io.netty:netty-bom from 4.2.16.Final to 4.2.17.Final by dependabot[bot] · 11 days ago
  48. cb5868a build(deps): bump metrics.version from 4.2.39 to 4.2.40 by dependabot[bot] · 11 days ago
  49. 532d6a5 build(deps): bump org.apache.avro:avro from 1.12.1 to 1.12.2 by dependabot[bot] · 11 days ago
  50. 67656ae build(deps): bump jetty.version from 12.1.11 to 12.1.12 by dependabot[bot] · 11 days ago
  51. 9c4607e build(deps): bump byte-buddy.version from 1.18.11 to 1.18.12 by dependabot[bot] · 11 days ago
  52. 26ad76e Sync checkstyle config with upstream google_checks.xml (#8969) by sergio · 2 weeks ago
  53. 75b8c1f Merge pull request #9015 from apache/dependabot/github_actions/actions/setup-java-6.0.0 by reiabreu · 2 weeks ago
  54. f66a51e build(deps): bump actions/setup-java from 5.7.0 to 6.0.0 by dependabot[bot] · 2 weeks ago
  55. 313dacc Require every UI API endpoint to declare its authorization (#9004) by Gianluca Graziadei · 3 weeks ago
  56. d892aa2 Test the OCI launch-command username and mount-source enforcement (#9014) by reiabreu · 3 weeks ago
  57. e33d74d Restrict OCI bind-mount sources to configured directories and check the launch command username (#9010) by reiabreu · 3 weeks ago
  58. 0ffeec2 Return independently owned value arrays from get_values (#9013) by reiabreu · 3 weeks ago
  59. 6aa0066 Apply worker file ownership and mode via an open descriptor (#9006) by reiabreu · 3 weeks ago
  60. 6dd5355 Validate the container id and invoke runc without a shell in reap-oci-container (#9008) by reiabreu · 3 weeks ago
  61. c8d41cf Reject a topology submission that lists a blob key which is not a dependency blob key (#9012) by Richard Zowalla · 3 weeks ago
  62. 4a1c21a STORM-3871: remove a topology's dependency artifact blobs when it is cleaned up (#9011) by Richard Zowalla · 3 weeks ago
  63. 5ebe6e7 Check the calling principal against the topology owner in uploadNewCredentials (#9001) by Richard Zowalla · 3 weeks ago
  64. 9a6490a Filter the topology history by the authenticated caller rather than the requested user name (#9003) by Richard Zowalla · 3 weeks ago
  65. 1b3dcc1 Authorize createStateInZookeeper requests like the other blob operations by Richard Zowalla · 3 weeks ago
  66. c8a1474 Read and check the docker command file before changing worker directory ownership by Rui Abreu · 3 weeks ago
  67. 0441cfc Apply the nimbus ACLs to listBlobs so callers only see blobs they may read (#9000) by Richard Zowalla · 3 weeks ago
  68. 94b4088 Evaluate authorization for requests that carry no principal (#9005) by Gianluca Graziadei · 3 weeks ago
  69. b8c71da Evaluate nimbus.groups when nimbus.users is empty (#8998) by Richard Zowalla · 3 weeks ago
  70. 0535700 Validate topology.blobstore.map in rebalance conf overrides against the calling user (#8999) by Richard Zowalla · 3 weeks ago
  71. 4af262d Remove DRPC per-function request queues once they are empty (#8985) by Richard Zowalla · 3 weeks ago
  72. c1c3338 Generate tuple tree ids from a key stream instead of a recoverable linear congruential generator (#8989) by Richard Zowalla · 3 weeks ago
  73. b7865e4 Apply the configured log user and group lists to daemon log requests (#8973) by Richard Zowalla · 3 weeks ago
  74. d77982d Regenerate license files after dependency changes (#8996) by github-actions[bot] · 3 weeks ago
  75. ce21f79 BugFix Utils.java (#8972) by Valerio Baldazzi · 3 weeks ago
  76. 1d68ef6 Add storm-iceberg module: an Apache Iceberg sink bolt (#8950) by Gianluca Graziadei · 3 weeks ago
  77. ed585b8 Set the CORS filter credentials parameter explicitly instead of a header name that the filter ignores by Richard Zowalla · 3 weeks ago
  78. 059ebea Document that an unset scheduler strategy whitelist no longer allows every strategy class by Richard Zowalla · 3 weeks ago
  79. ee97546 Decode netty server frames only after the handshake completes by Gianluca Graziadei · 3 weeks ago
  80. f6b7be3 Restrict topology scheduler strategies to the shipped strategies when no allowlist is configured by Richard Zowalla · 3 weeks ago
  81. 27ae976 Pass only the required Kafka consumer properties to the spout lag monitor by Richard Zowalla · 3 weeks ago
  82. ea78c5b Add to instead of replace Jetty's default TLS exclusions on HTTPS connectors by Richard Zowalla · 3 weeks ago
  83. 4050924 Return a normalized copy of the topology conf from Nimbus by Gianluca Graziadei · 3 weeks ago
  84. 6d36a14 Require Kryo class registration in the state serializer by Gianluca Graziadei · 3 weeks ago
  85. c78ab74 Give each uploaded dependency artifact its own blob key instead of reusing a pre-existing blob by Richard Zowalla · 3 weeks ago
  86. 54d2c64 Verify the peer identity of the Netty TLS server the worker client connects to by Richard Zowalla · 3 weeks ago
  87. 22bd22a Reject submitted jar locations that are not inside the Nimbus inbox by Richard Zowalla · 3 weeks ago
  88. 2d972ca Stop echoing the request Origin with allow-credentials in logviewer JSON responses by Richard Zowalla · 3 weeks ago
  89. 76a59d2 Reject blobstore map local names that resolve outside the topology and worker directories by Richard Zowalla · 3 weeks ago
  90. ce56aef Update logging behavior by Gianluca Graziadei · 3 weeks ago
  91. 364dd79 Reject image tags that are neither mapped nor valid image hashes before building the manifest path (#8983) by Richard Zowalla · 3 weeks ago
  92. cb8d29b Change the worker log file permission only for download requests that are served (#8978) by Richard Zowalla · 3 weeks ago
  93. c14bfaf Add ui.enable.jsonp to control JSONP callback wrapping in UI and Logviewer API responses (#8977) by Richard Zowalla · 3 weeks ago
  94. 40d14c0 Return only the log files the requesting user may access from the log file listing (#8974) by Richard Zowalla · 3 weeks ago
  95. 29f9ffb Clarify worker/supervisor heartbeat docs and deprecate unused nimbus.supervisor.timeout.secs (#8984) by reiabreu · 3 weeks ago
  96. d6d15d0 Reinstate ordering of arguments in `bin/storm.py` (#8971) by sergio · 5 weeks ago
  97. 093f9d0 Merge pull request #8970 from apache/dependabot/npm_and_yarn/storm-webapp/fast-uri-3.1.5 by reiabreu · 5 weeks ago
  98. 9256517 build(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 in /storm-webapp by dependabot[bot] · 5 weeks ago
  99. 9e8dedf Merge pull request #8964 from apache/dependabot/npm_and_yarn/storm-webapp/datatables.net-bs5-3.0.0 by reiabreu · 5 weeks ago
  100. 4a48cb3 fix(ui): use tableId in DataTables 3.0 state callbacks by Rui Abreu · 5 weeks ago