| Release notes for Gerrit 2.10.3 |
| =============================== |
| |
| Download: |
| link:https://www.gerritcodereview.com/download/gerrit-2.10.3.war[ |
| https://www.gerritcodereview.com/download/gerrit-2.10.3.war] |
| |
| Important Notes |
| --------------- |
| |
| *WARNING:* There are no schema changes from |
| link:ReleaseNotes-2.10.2.html[2.10.2], but Bouncycastle was upgraded to 1.51. |
| It is therefore important to upgrade the site with the `init` program, rather |
| than only copying the .war file over the existing one. |
| |
| *WARNING:* When upgrading from version 2.8.4 or older with a site that uses |
| Bouncy Castle Crypto, new versions of the libraries will be downloaded. The old |
| libraries should be manually removed from site's `lib` folder to prevent the |
| startup failure described in |
| link:https://code.google.com/p/gerrit/issues/detail?id=3084[Issue 3084]. |
| |
| It is recommended to run the `init` program in interactive mode. Warnings will |
| be suppressed in batch mode. |
| |
| ---- |
| java -jar gerrit.war init -d site_path |
| ---- |
| |
| New Features |
| ------------ |
| |
| * Support hybrid OpenID and OAuth2 authentication |
| + |
| OpenID auth scheme is aware of optional OAuth2 plugin-based authentication. |
| This feature is considered to be experimental and hasn't reached full feature set yet. |
| Particularly, linking of user identities across protocol boundaries and even from |
| one OAuth2 identity to another OAuth2 identity wasn't implemented yet. |
| |
| Configuration |
| ~~~~~~~~~~~~~ |
| |
| * Allow to configure |
| link:https://gerrit-documentation.storage.googleapis.com/Documentation/2.10.3/config-gerrit.html#sshd.rekeyBytesLimit[ |
| SSHD rekey parameters]. |
| |
| SSH |
| --- |
| |
| * Update SSHD to 0.14.0. |
| + |
| This fixes link:https://issues.apache.org/jira/browse/SSHD-348[SSHD-348] which |
| was causing ssh threads allocated to stream-events clients to get stuck. |
| + |
| Also update SSHD Mina to 2.0.8 and Bouncycastle to 1.51. |
| |
| * link:https://code.google.com/p/gerrit/issues/detail?id=2797[Issue 2797]: |
| Add support for ECDSA based public key authentication. |
| |
| Bug Fixes |
| --------- |
| |
| * Prevent wrong content type for CSS files. |
| + |
| The mime-util library contains two content type mappings for .css files: |
| `application/x-pointplus` and `text/css`. Unfortunately, using the wrong one |
| will result in most browsers discarding the file as a CSS file. Ensure we only |
| use the correct type for CSS files. |
| |
| * link:https://code.google.com/p/gerrit/issues/detail?id=3289[Issue 3289]: |
| Prevent NullPointerException in Gitweb servlet. |
| |
| Replication plugin |
| ~~~~~~~~~~~~~~~~~~ |
| |
| * Set connection timeout to 120 seconds for SSH remote operations. |
| + |
| The creation of a missing Git, before starting replication, is a blocking |
| operation. By setting a timeout, we ensure the operation does not get stuck |
| forever, essentially blocking all future remote git creation operations. |
| |
| OAuth extension point |
| ~~~~~~~~~~~~~~~~~~~~~ |
| |
| * Respect servlet context path in URL for login token |
| + |
| On sites with non empty context path, first redirect was broken and ended up |
| with 404 Not found. |
| |
| * Invalidate OAuth session after web_sessions cache expiration |
| + |
| After web session cache expiration there is no way to re-sign-in into Gerrit. |
| |
| Daemon |
| ~~~~~~ |
| |
| * Print proper names for tasks in output of `show-queue` command. |
| + |
| Some tasks were not displayed with the proper name. |
| |
| Web UI |
| ~~~~~~ |
| |
| * link:http://code.google.com/p/gerrit/issues/detail?id=3044[Issue 3044]: |
| Remove stripping `#` in login redirect. |
| |
| SSH |
| ~~~ |
| |
| * Prevent double authentication for the same public key. |
| |
| |
| Performance |
| ----------- |
| |
| * Improved performance when creating a new branch on a repository with a large |
| number of changes. |
| |
| |
| Upgrades |
| -------- |
| |
| * Update Bouncycastle to 1.51. |
| |
| * Update SSHD to 0.14.0. |
