You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* Add release announcements for 1.11.5 and 1.12.1
* Fix version numbers
* Update Avro committers
Add Oscar (me), move two comitters (PMC members) to the emeriti as
indicated by them on the mailing list.
Licensed to the Apache Software Foundation (ASF) under one
10
+
or more contributor license agreements. See the NOTICE file
11
+
distributed with this work for additional information
12
+
regarding copyright ownership. The ASF licenses this file
13
+
to you under the Apache License, Version 2.0 (the
14
+
"License"); you may not use this file except in compliance
15
+
with the License. You may obtain a copy of the License at
16
+
17
+
https://www.apache.org/licenses/LICENSE-2.0
18
+
19
+
Unless required by applicable law or agreed to in writing,
20
+
software distributed under the License is distributed on an
21
+
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
22
+
KIND, either express or implied. See the License for the
23
+
specific language governing permissions and limitations
24
+
under the License.
25
+
26
+
-->
27
+
28
+
The Apache Avro community is pleased to announce the release of Avro 1.11.5!
29
+
30
+
All signed release artifacts, signatures and verification instructions can
31
+
be found <a href="{{< relref "/project/download" >}}">here</a>
32
+
33
+
## Security Fixes
34
+
35
+
This release addresses 4 security fixes:
36
+
* Prevent class with empty Java package being trusted by SpecificDatumReader ([#3311](https://github.com/apache/avro/pull/3311))
37
+
* Remove the default serializable packages and deprecated the property to introduce org.apache.avro.SERIALIZABLE_CLASSES instead ([#3376](https://github.com/apache/avro/pull/3376))
38
+
* java-[key-]class allowed packages must be packages ([#3453](https://github.com/apache/avro/pull/3453))
39
+
*[AVRO-4053](https://issues.apache.org/jira/browse/AVRO-4053): doc consistency in velocity templates ([#3150](https://github.com/apache/avro/pull/3150))
40
+
41
+
These fixes apply only to the Java SDK. All other SDKs have no difference with their 1.11.4 release.
Licensed to the Apache Software Foundation (ASF) under one
10
+
or more contributor license agreements. See the NOTICE file
11
+
distributed with this work for additional information
12
+
regarding copyright ownership. The ASF licenses this file
13
+
to you under the Apache License, Version 2.0 (the
14
+
"License"); you may not use this file except in compliance
15
+
with the License. You may obtain a copy of the License at
16
+
17
+
https://www.apache.org/licenses/LICENSE-2.0
18
+
19
+
Unless required by applicable law or agreed to in writing,
20
+
software distributed under the License is distributed on an
21
+
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
22
+
KIND, either express or implied. See the License for the
23
+
specific language governing permissions and limitations
24
+
under the License.
25
+
26
+
-->
27
+
28
+
The Apache Avro community is pleased to announce the release of Avro 1.12.1!
29
+
30
+
All signed release artifacts, signatures and verification instructions can be found <a href="{{< relref "/project/download" >}}">here</a>
31
+
32
+
## Security Fixes
33
+
34
+
This release addresses 4 security fixes:
35
+
* Prevent class with empty Java package being trusted by SpecificDatumReader ([#3311](https://github.com/apache/avro/pull/3311))
36
+
* Remove the default serializable packages and deprecated the property to introduce org.apache.avro.SERIALIZABLE_CLASSES instead ([#3376](https://github.com/apache/avro/pull/3376))
37
+
* java-[key-]class allowed packages must be packages ([#3453](https://github.com/apache/avro/pull/3453))
38
+
*[AVRO-4053](https://issues.apache.org/jira/browse/AVRO-4053): doc consistency in velocity templates ([#3150](https://github.com/apache/avro/pull/3150))
39
+
40
+
These fixes apply only to the Java SDK.
41
+
42
+
43
+
## Highlights
44
+
45
+
### C++
46
+
*[AVRO-4038](https://issues.apache.org/jira/browse/AVRO-4038): Add support local-timestamp-nanos and timestamp-nanos
47
+
*[AVRO-4081](https://issues.apache.org/jira/browse/AVRO-4081): Add big decimal support
48
+
*[AVRO-4058](https://issues.apache.org/jira/browse/AVRO-4058): Allow custom attributes in arrays
49
+
*[AVRO-4120](https://issues.apache.org/jira/browse/AVRO-4120): Allow custom attributes for MAP and FIXED types
50
+
*[AVRO-4140](https://issues.apache.org/jira/browse/AVRO-4140): Support uuid to annotate fixed
51
+
*[AVRO-3984](https://issues.apache.org/jira/browse/AVRO-3984): Improved code generation for unions
52
+
53
+
### C#
54
+
*[AVRO-4075](https://issues.apache.org/jira/browse/AVRO-4075): Fix JsonDecoder string type failing to decode ISO string date
55
+
*[AVRO-2032](https://issues.apache.org/jira/browse/AVRO-2032): Add support for NaN, Infinity and -Infinity in JsonDecoder
56
+
57
+
### Java
58
+
*[AVRO-4062](https://issues.apache.org/jira/browse/AVRO-4062): Allow leading underscores for names in idl
59
+
*[AVRO-4119](https://issues.apache.org/jira/browse/AVRO-4119): Make Nullable and NotNull annotations configurable
60
+
*[AVRO-4039](https://issues.apache.org/jira/browse/AVRO-4039): fix GenericData.newArray to only return an appropriate array implementation
61
+
*[AVRO-3940](https://issues.apache.org/jira/browse/AVRO-3940): Allow schema redefinition when equal
62
+
*[AVRO-3230](https://issues.apache.org/jira/browse/AVRO-3230): Enable fastread by default
63
+
*[AVRO-4133](https://issues.apache.org/jira/browse/AVRO-4133): Support default enum value in Protobuf to Avro
64
+
*[AVRO-4165](https://issues.apache.org/jira/browse/AVRO-4165): ability to specify AvroEncode on a class
65
+
66
+
### PHP
67
+
*[AVRO-2843](https://issues.apache.org/jira/browse/AVRO-2843): PHP submit package on packagist.org
68
+
*[AVRO-4046](https://issues.apache.org/jira/browse/AVRO-4046): Handling of default values
69
+
70
+
71
+
## Other changes
72
+
73
+
These SDKs have upgraded dependencies and minor bugfixes:
0 commit comments