This version is an important version which support many new features.

The most mainly feature is Nacos support maintainer to initialize the admin user nacos password instead of using default password to improve the default security for deploy nacos clusters.

One more thing is default disabled derby ops API to prevent false alarms regarding corresponding risks for users without authentication enabled when deploying in standalone mode. If maintainers want use this API to maintain and query data in derby, maintainers can use nacos.config.derby.ops.enabled=true to open this API.

And other mainly features are support TLS Grpc communication between Nacos cluster nodes as an optional feature to improve Nacos security, which means nacos not only support TLS communication between client and server; What's more, Nacos start to support user extend Selector before callback Subscriber for naming module, not only can select instance of services by healthy and clusters. And Nacos client support callback service diffs by new event to reduce Subscriber cache and compare logics.

Third mainly features are support some configs usages in Nacos console and support more enhancement usage for plugins, such as support add all metadata to prometheus sd protocol and support aliyun ram v4 signature.

In addition to substantial feature updates, this version also fixes some bugs from previous versions and upgrades certain dependencies with security vulnerabilities.

Detail see:

Feature

[#10374] Support naming custom selectors and support service diff events. [#11456] Support TLS Grpc communication between Nacos cluster nodes. [#11847] Nacos console support publish config with cas. [#11943] Record users for import configs. [#11957] Remove default password for user nacos. [#12130] Add metadata as labels in prometheus http sd. [#12162] Support aliyun ram v4 signature method.

Enhancement&Refactor

[#11956] Refactor nacos client logging module, use SPI load current logger adapter. [#12013] Enhance to fast config Nacos memory setting in startup.sh by environment CUSTOM_NACOS_MEMORY. [#12072] Support does not impose any limit when totalCountLimit is less than 0. [#12166] Enhance nacos client init properties logger. [#12177] Update console header link to new nacos.io. [#12178] Add total record count display in pagination. [#12185] Use nacos properties in CacheDirUtil. [#12221] Remove the accessToken from the URL. [#12235] Enhance logging format in the ResponseExceptionHandler. [#12246] Internationalize the display of total counts in the configuration list and service list. [#12321] Enhance log for unexpected exception from NetworkInterface.ifUp. [#12355] Record the cost of ConfigDump in Prometheus. [#12372] Disable derby ops api default. [#12382] Support ram info switch.

BugFix

[#10639] Fix the encrypted_data_key is text type so that old version can't upgrade directly. [#11902] Fix leak of request and response for java native runtime for nacos-client. [#11926] Fix Nacos can't triggle self protection when disk full in some OS. [#11951] Fix the problem that the serviceName and groupName are not resolved correctly when deleting an empty service instance. [#11967] Fix Config can't publish and listen when dataId contains some special words in Window OS. [#11968] Fix Multiple config change plugin implementation configuration conflicts problem. [#12022] Fix nacos datasource plugin ClassCastException problem. [#12046] Fix cipher-aes config encrypt plugin not effect when publish config again. [#12060] Fix too large ttl when auth disabled. [#12146] Fix the operation type does not display when rolling back a configuration with a delete operation type. [#12168] Fix the labels of the query conditions on the Permission Control - Role Management page are still displayed in Chinese after switching the system language to English. [#12180] Fix the operator is not recorded during clone and import operations. [#12196] Fix prometheus http sd invalid label names. [#12207] Fix disk failover datasource not keep status. [#12197] Add an id primary key column to both the roles and permissions tables. [#12219] Fix ServerListManager in nacos-client fails to parse the endpoint in the config. [#12253] Add endpoint cluster name for config & naming server list manager. [#12265] Fix nacos client dependencies tree without grpc package. [#12323] Fix nacos client logback configuration will override packagingData problem. [#12333] Fix auth Plugin resource parser can't parser v2 config openAPI namespaceId.

Dependency

[#11904] Bump Spring Security to 5.7.12. [#11975] Remove unused dependency javatuple. [#11980] Bump spring framework to 5.3.34. [#12135] Upgrade module naocs-console from junit4 to junit5. [#12369] Upgrade grpc to 1.64.2.

New Contributors From 2.4.0-BETA.

• @HMYDK made their first contribution in https://github.com/alibaba/nacos/pull/12203
• @taomaree made their first contribution in https://github.com/alibaba/nacos/pull/12239
• @dingjs made their first contribution in https://github.com/alibaba/nacos/pull/12360

Full Changelog: https://github.com/alibaba/nacos/compare/2.4.0-BETA...2.4.0