RATATOSKRATATOSK
로그인

Meshery

v1.0.77Provisioning & Runtime
2026년 11월 12일

CHECK 2OTHER 31

정확성과 검증, UI 및 CLI 동작 안정성에 초점을 둔 유지보수 릴리스입니다. 운영자에게 영향을 주는 동작 변경과 원격 URL 가져오기의 `SSRF` 방지 수정이 포함되어 있습니다.

영향 확인 (2)

  • security원격 URL 가져오기 SSRF 방지

    원격 URL 가져오기를 사용할 때 적용됩니다.

    서버가 원격 URL 가져오기에서 SSRF를 방지하도록 보완되었습니다.

  • breakingsystem provider view 인자 검증

    mesheryctl을 실행할 때 적용됩니다.

    mesheryctl의 system provider view에서 인자를 정확히 검증합니다.

그 외 기록된 변경 31건 전체fixes 14 · value changes 14 · additions 2 · constraints 1

fixes (14)

  • - [Server] Guard nil dereferences for user, SystemID, provider, and connection in telemetry handlers @Amansingh0807 (#23338)
  • - [Server] Guard nil MesheryInstanceID and typed-nil INSTANCE_ID in K8s context paths @piyxsh31 (#23305)
  • - [Server] Prevent nil pointer dereference on unauthenticated /user/logout @Supersaiyan101 (#23311)
  • - [Server] Evict state machine from tracker on DeleteContext error @Atharva-Mendhulkar (#23256)
  • - [Server] Probe NOTFOUND Kubernetes connections so their unreachable condition can resolve @dropps07 (#23235)
  • - [mesheryctl] Fix nil dereference and slice bounds panic in environment view @abhinavkdeval08-design (#23365)
  • - [mesheryctl] Guard nil timestamp and UUID fields across design and filter commands @Swarup-Banik (#23325)
  • - [mesheryctl] Fix connection view empty-slice panic when TotalCount > 0 @Swarup-Banik (#23328)
  • - [mesheryctl] Fix Kubernetes log stream descriptor leak in system logs @muskan-creates352 (#22471)
  • - [mesheryctl] Fix file descriptor leak in model init @muskan-creates352 (#22438)
  • - [UI] Fix search paging and Count sort in the database summary table @mayank609 (#23282)
  • - [Server] Dedup inventory parent additions across relationship copies @yi-nuo426 (#23366)
  • - fix(mesheryctl): sanitize spaces and path separators in relationship view --save filename
  • - fix(mesheryctl): escape model path and validate input in relationship view

value changes (14)

  • - [mesheryctl] Use MeshKit errors for token assignment and rollback @piyxsh31 (#23340)
  • - [mesheryctl] Respect -c/--context across system token create, set, and view @piyxsh31 (#23317)
  • - [mesheryctl] Replace path separators in file names saved by component view @RajJasani (#23300)
  • - [mesheryctl] Honor the --context flag in system dashboard, login and logout @mayank609 (#23280)
  • - [mesheryctl] Return actionable error for unsupported meshery publish target @Rohith-Saran (#23270)
  • - [UI] Handle empty component.schema in LazyComponentForm @abhinavkdeval08-design (#23357)
  • - [UI] Offer every credential in the connection wizard and MeshSync stepper @ChackoPAbraham19 (#23334)
  • - [UI] Paginate the Credentials table on the server @ChackoPAbraham19 (#23243)
  • - [UI] Guard missing cluster context in Dashboard View and enforce RBAC query skip checks @piyxsh31 (#23319)
  • - [UI] Keep failed notification page requests retryable @ayushgade06 (#22805)
  • - [UI] Enforce RBAC skip guards on connections, preferences, and registry @piyxsh31 (#23295)
  • - [UI] Disable LegacyRJSFModal submit while pending and add submitDisabled @piyxsh31 (#23299)
  • - [UI] Reset to the first page when searching performance results @mayank609 (#23284)
  • - [UI] Skip unauthorized queries in Dashboard charts when view permissions are denied @piyxsh31 (#23272)

additions (2)

  • - [Helm] Add env.MESHSYNC_DEFAULT_DEPLOYMENT_MODE with embedded default @ayushbuilds-code (#23291)
  • - [mesheryctl] Added Port Fallback To Unused Port @tanav29 (#22308)

constraints (1)

  • - [mesheryctl] Parse positional mesh name argument in adapter deploy and remove (#23275) @muskan-creates352 (#23276)
Meshery 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치와 브레이킹 체인지 같은 것들입니다.

스택에 추가 →