Tsurugi 1.6.0 - Changelog

[akirakw]

1.6.0 Changelog

⚠ BREAKING CHANGES

• tgsql: default credential file path: ~/.tsurugidb/credentials.key

Features

• compiler: introduce grant/revoke statement. (23ee31e)
• compiler: introduce revoke from {*, CURRENT_USER}. (a31d42d)
• harinoki, tsubakuro, tateyama, and tateyama-bootstrap: change encrypted credential to JSON format (2fc520f)
• harinoki: implement issue-encrypted, etc. (5ca7c64)
• harinoki: Replace SLF4J binding from slf4j-simple to jetty-slf4j-impl (dd5011f)
• jogasaki: add authorization check for describe table (76c6726)
• jogasaki: add authorization info. in storage metadata (8a5bda6)
• jogasaki: authorization check for explain/list tables (d864da5)
• jogasaki: block DDLs if not authorized (b468799)
• jogasaki: GRANT/REVOKE statements for tables (9b43cdf)
• jogasaki: prepare implementation for authorization (3732418)
• jogasaki: re-apply execute DDL/DML exclusively with each other (627e67b)
• jogasaki: support revoke from all users (3c26e3f)
• shirakami: add a feature to skip unnecessary Record GC for unmodified storages (default disabled) (c2f89a2)
• tateyama, tateyama-boostrap: implement tgctl credentials and authentication refresh timeout handling (8ce509d)
• tateyama, tsubakuro, tateyama-bootstrap, ogawayama: add user_name() API to tsubakuro Session (96d621c)
• tateyama,jogasaki: prepare user_type info. for authorization (0fcf98d)
• tateyama: add username check to authentication mechanism (f475785)
• tateyama: implement GetCredentialsExpirationTime handling (ecfccc4)
• tateyama: non-privileged users can only access their own sessions by tgctl session subcommand (1d74eb6)
• tgdump: introduce --scan-parallel option (a1823ae)
• tgdump: introduce auth options into tgdump. (c89856e)
• tgql: show session.user (7b85934)
• tsubakuro, tateyama, tateyama-bootstrap: implement authentication using harinoki (8694b5b)
• tsubaluro: implement UpdateCredentialTask (be27938)

Bug Fixes

• compiler: correct type computing around decimal types. (5542e18)
• harinoki and tsubakuro: alter cryptographic algorithms to RSA/ECB/OAEPWithSHA-1AndMGF1Padding (c8013e8)
• harinoki, tateyama, and tateyama-bootstrap: improve authentication error handling (50057ea)
• harinoki, tateyama: minor corrections that do not affect behavior (972bb9e)
• harinoki: also tsurugi.jwt.private_key_file (868f350)
• harinoki: close JsonParser wit try-with-resources (4332a0e)
• harinoki: fix typo for tsurugi.token.expiration (f84dab2)
• harinoki: Log the exceptions raised in IssueEncryptedServlet (8a36bb3)
• jogasaki: add varying flag for result set metatada (2424ca3)
• jogasaki: cast to return correct scale for decimal types (72edc30)
• jogasaki: improve grant/revoke logic for recovery (18eefd3)
• jogasaki: lock tables when creating/dropping indices (5b7179e)
• jogasaki: multiple privileges given to user and public (582f1ac)
• jogasaki: return result metadata length/prec/scale (70c5de6)
• jogasaki: REVOKE ALL privs. correctly clears all privs. (0c32be8)
• jogasaki: wrong length/precision/scale/varying returned from describe table (f4ccd3f)
• limestone: downgrade log level for backup and replica checks (395ff09)
• limestone: handle 0-filled WAL tail corruption via format v6 upgrade (71e5c97), closes #1257
• sharksfin: updates for new clang-tidy settings (74511d4)
• tateyama-bootstrap: allow interrupt during psssword input and fix the first line of verbose output of session list being misaligned (6fc5328)
• tateyama-bootstrap: alter cryptographic algorithms to RSA/ECB/OAEPWithSHA-1AndMGF1Padding (59d0dee)
• tateyama-bootstrap: avoid error: ISO C++11 does not allow conversion from string literal to char * (0181830)
• tateyama-bootstrap: close connection on interrupt (e1546c8)
• tateyama-bootstrap: error when trying to connect to IPC while server is shutting down (e049cb4)
• tateyama-bootstrap: if two or more credentials options are specified, return an error (3674d7c)
• tateyama-bootstrap: password entry is performed before the handshake (a47cec6)
• tateyama-bootstrap: revise tgctl command-line-option handling (78b7055)
• tateyama, tateyama-bootstrap, and tsubakuro: minor changes of error code, document, range check, and connection lost message (24e5017)
• tateyama: handle authentication service unavailable case (f72908f)
• tateyama: handle std::runtime_error in endpoint setup() (86e3018)
• tateyama: return AUTHENTICATION_ERROR for NullCredential case (a73c0a0)
• tateyama: return endpoint::response::Handshake::error in case of authentication failure (96f80c6)
• tateyama: revise ipc_service_session_test to ensure the order in which sessions are created (2nd), (test code change only) (c5ae99f)
• tateyama: revise ipc_service_session_test to ensure the order in which sessions are created (test code change only) (079d0ca)
• tgsql: change credential file name (c4a2a87)
• tgsql: Skip when authentication error occurs (89ce1e9)
• tgsql: use FileCredential.DEFAULT_CREDENTIAL_PATH (a1eb43f)
• tsubakuro, tateyama, tateyama-bootstrap: follow FileCredential specification changes (8c43947)
• tsubakuro: eliminate race in state transision in TransactionImpl (cc6d864)
• tsubakuro: fix timeout for PreparedStatementImpl to make it behave as specified (33e7f37)
• tsubakuro: misc fix on handshake, TCP/IP disconnection message, TransactionImpl.close(), and enhance tests (b717d2c)
• tsubakuro: revise TransactionImpl.close() (cab3bff)
• yakushima: change to modify permutation value atomically (c99b6c5)

Performance Improvements

• change the default value of the dev_update_skips_deletion param (daf3793)
• introduce parallel index recovery from datastore on startup (75971ad)
• jogasaki: optimize shirakami API calls used to update primary index (924a360)

Distribution

• add apt package for tatayama authentication feature (94a5fe1)
• add authentication section to tsurugi.ini (80473f0)
• add authentication section to tsurugi.ini - follow up (5a70c8b)
• add authentication_server validation for harinoki.properties (c5fbf50)
• add new config cc.index_restore_threads to tsurugi.ini template (bf9b44d)
• Bump Jetty (for harinoki) version to 12.0.25 (5f78e0f)
• bump tsubakuro, tanzawa to 1.11.0-SNAPSHOT (91e818f)
• change to --replaceconfig with section.parameter - follow-up (dd67215)
• change to --replaceconfig with section.parameter style (f9a0749)
• fix replace_config for escape value with comma (ca44c8b)
• modify for starting auth server in docker (a67074d)
• modify harinoki installation due to the harinoki/pull/5 (d1ef7d9)
• modify installer when existing var directory (eb13d52)
• modify installer when existing var directory - follow-up (484b38e)
• remove unnecessary code in install.sh (5d417b0)
• tsubakuro: fix to fail Gradle PublishToMavenLocal task with Release Version (cdaa74a)

Miscellaneous Chores

• jogasaki: update year part in source files copyright (b67e0a1)
• tgsql: change credential file name (aeac0c7)

Code Refactoring

• tateyama, tateyama-bootstrap, tsubakuro, and ogawayama: alter CredentialsExpiration to AuthenticationExpiration (bd64076)

Tests

• harinoki: add testcase and revise docs (4777cba)

Build System

• jogasaki: fix for FTBFS with Apache Arrow 21.0.0 (e8db6e8)
• tateyama: suppress build warnings for generated code (88a59bf)

Reverts

• Revert "add --allow-downgrades to dist/install/apt-install.sh" (dc6a66a)
• Revert "dist: add interim patch to fail Tsubakuro installation" (053c9b6)
• ogawayama: revert to dc2d51819a2880e03b1b779a16a6c3fc8b58e638 and apply 3dbe6efe9314a6de9a4a76dc152abf5da8576a29 (b6ae919)