Meshery
v1.0.77Provisioning & Runtime2026년 11월 12일
정확성과 검증, UI 및 CLI 동작 안정성에 초점을 둔 유지보수 릴리스입니다. 운영자에게 영향을 주는 동작 변경과 원격 URL 가져오기의 `SSRF` 방지 수정이 포함되어 있습니다.
영향 확인 (2)
security원격 URL 가져오기
SSRF방지원격 URL 가져오기를 사용할 때 적용됩니다.
서버가 원격 URL 가져오기에서
SSRF를 방지하도록 보완되었습니다.breaking
system provider view인자 검증mesheryctl을 실행할 때 적용됩니다.mesheryctl의system provider view에서 인자를 정확히 검증합니다.
그 외 기록된 변경 31건 전체fixes 14 · value changes 14 · additions 2 · constraints 1
fixes (14)
- - [Server] Guard nil dereferences for user, SystemID, provider, and connection in telemetry handlers @Amansingh0807 (#23338)
- - [Server] Guard nil MesheryInstanceID and typed-nil INSTANCE_ID in K8s context paths @piyxsh31 (#23305)
- - [Server] Prevent nil pointer dereference on unauthenticated /user/logout @Supersaiyan101 (#23311)
- - [Server] Evict state machine from tracker on DeleteContext error @Atharva-Mendhulkar (#23256)
- - [Server] Probe NOTFOUND Kubernetes connections so their unreachable condition can resolve @dropps07 (#23235)
- - [mesheryctl] Fix nil dereference and slice bounds panic in
environment view@abhinavkdeval08-design (#23365) - - [mesheryctl] Guard nil timestamp and UUID fields across design and filter commands @Swarup-Banik (#23325)
- - [mesheryctl] Fix connection view empty-slice panic when TotalCount > 0 @Swarup-Banik (#23328)
- - [mesheryctl] Fix Kubernetes log stream descriptor leak in system logs @muskan-creates352 (#22471)
- - [mesheryctl] Fix file descriptor leak in model init @muskan-creates352 (#22438)
- - [UI] Fix search paging and Count sort in the database summary table @mayank609 (#23282)
- - [Server] Dedup inventory parent additions across relationship copies @yi-nuo426 (#23366)
- - fix(mesheryctl): sanitize spaces and path separators in relationship view --save filename
- - fix(mesheryctl): escape model path and validate input in relationship view
value changes (14)
- - [mesheryctl] Use MeshKit errors for token assignment and rollback @piyxsh31 (#23340)
- - [mesheryctl] Respect -c/--context across system token create, set, and view @piyxsh31 (#23317)
- - [mesheryctl] Replace path separators in file names saved by component view @RajJasani (#23300)
- - [mesheryctl] Honor the --context flag in system dashboard, login and logout @mayank609 (#23280)
- - [mesheryctl] Return actionable error for unsupported meshery publish target @Rohith-Saran (#23270)
- - [UI] Handle empty component.schema in LazyComponentForm @abhinavkdeval08-design (#23357)
- - [UI] Offer every credential in the connection wizard and MeshSync stepper @ChackoPAbraham19 (#23334)
- - [UI] Paginate the Credentials table on the server @ChackoPAbraham19 (#23243)
- - [UI] Guard missing cluster context in Dashboard View and enforce RBAC query skip checks @piyxsh31 (#23319)
- - [UI] Keep failed notification page requests retryable @ayushgade06 (#22805)
- - [UI] Enforce RBAC skip guards on connections, preferences, and registry @piyxsh31 (#23295)
- - [UI] Disable LegacyRJSFModal submit while pending and add submitDisabled @piyxsh31 (#23299)
- - [UI] Reset to the first page when searching performance results @mayank609 (#23284)
- - [UI] Skip unauthorized queries in Dashboard charts when view permissions are denied @piyxsh31 (#23272)
additions (2)
- - [Helm] Add env.MESHSYNC_DEFAULT_DEPLOYMENT_MODE with embedded default @ayushbuilds-code (#23291)
- - [mesheryctl] Added Port Fallback To Unused Port @tanav29 (#22308)
constraints (1)
- - [mesheryctl] Parse positional mesh name argument in adapter deploy and remove (#23275) @muskan-creates352 (#23276)
Meshery 스택에 추가
조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치와 브레이킹 체인지 같은 것들입니다.