{"push_id":3137501812,"size":19,"distinct_size":1,"ref":"refs/heads/java-time","head":"88d7da9fc9e9794670249d1d2a0a127212b073b4","before":"79a60791121aef8f6248795e123a6f36d5d9e50d","commits":[{"sha":"2afa7faefd0cec893ad83298e43f6342d02c2d85","author":{"name":"Jason Tedor","email":"68c46a606457643eab92053c1c05574abb26f861@tedor.me"},"message":"Override the JVM DNS cache policy (#36570)\n\nWhen a security manager is present, the JVM will cache positive hostname\r\nlookups indefinitely. This can be problematic, especially in the modern\r\nworld with cloud services where DNS addresses can change, or\r\nenvironments using Docker containers where IP addresses could be\r\nconsidered ephemeral. This behavior impacts cluster discovery,\r\ncross-cluster replication and cross-cluster search, reindex from remote,\r\nsnapshot repositories, webhooks in Watcher, external authentication\r\nmechanisms, and the Elastic Stack Monitoring Service. The experience of\r\nwatching a DNS lookup change yet not be reflected within Elasticsearch\r\nis a poor experience for users. The reason the JVM has this is guard\r\nagainst DNS cache posioning attacks. Yet, there is already a defense in\r\nthe modern world against such attacks: TLS. With proper certificate\r\nvalidation, even if a resolver falls prey to a DNS cache poisoning\r\nattack, using TLS would neuter the attack. Therefore we have a policy\r\nwith dubious security value that significantly impacts usability. As\r\nsuch we make the usability/security tradeoff towards usability, since\r\nthe security risks are very low. This commit introduces new system\r\nproperties that Elasticsearch observes to override the JVM DNS cache\r\npolicy.","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/2afa7faefd0cec893ad83298e43f6342d02c2d85"},{"sha":"f998e04c345760583740ede7b3d2b15ee777619f","author":{"name":"Tim Brooks","email":"5ee0edb9e2229c0838f1959779f1949031de0123@uncontended.net"},"message":"Remove usages of `MockTcpTransport` from zen tests (#36579)\n\nWe are attempting to replace the usage of the `MockTcpTransport` with\r\nthe `MockNioTransport`. This commit replaces usages of\r\n`MockTcpTransport` in two zen test cases.","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/f998e04c345760583740ede7b3d2b15ee777619f"},{"sha":"e3cf64229992cbc9318c8e96c2534826bd916045","author":{"name":"Tal Levy","email":"72601a8e9b0cbe66dbefe816c40d3b8c1538be45@gmail.com"},"message":"Add ILM-specific security privileges (#36493)\n\n* add read_ilm cluster privilege\r\n\r\nAlthough managing ILM policies is best done using the\r\n\"manage\" cluster privilege, it is useful to have read-only\r\nviews.\r\n\r\n* adds `read_ilm` cluster privilege for viewing policies and status\r\n* adds Explain API to the `view_index_metadata` index privilege\r\n\r\n* add manage_ilm privileges","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/e3cf64229992cbc9318c8e96c2534826bd916045"},{"sha":"b820d7c617de8dd75e36d6e58cdda9026e408462","author":{"name":"Tal Levy","email":"72601a8e9b0cbe66dbefe816c40d3b8c1538be45@gmail.com"},"message":"fix MultiValuesSourceFieldConfig toXContent (#36525)\n\nThis commit turns MultiValuesSourceFieldConfig into a proper\r\nToXContentObject for easy testing and verification of its\r\nto/from XContent methods.\r\n\r\nCloses #36474.","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/b820d7c617de8dd75e36d6e58cdda9026e408462"},{"sha":"4b17055035daee9f6f569112fdffd9c93d4c650f","author":{"name":"Nick Knize","email":"a9feab4c43c307364f4cf9dd9959bbfa8385ecbd@gmail.com"},"message":"HLRC: Add get users action (#36332)\n\nThis commit adds get user action to the high level rest client.","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/4b17055035daee9f6f569112fdffd9c93d4c650f"},{"sha":"b33ff16d62e57843c407271d3aadeb6328567441","author":{"name":"Christoph Büscher","email":"e94fcfcfda62411722b8e83e850b947a59336941@posteo.de"},"message":"Remove deprecated `useDisMax` from MultiMatchQuery (#36488)\n\nThe getters and setters for useDisMax() have been deprecated since at least 6.0,\r\nalso there hasn't been any reference to the query parameter in the\r\ndocumentation. Removing it from the builder and tests and replacing it with\r\n`tieBreaker(1.0f)` where necessary.","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/b33ff16d62e57843c407271d3aadeb6328567441"},{"sha":"254d1e8f22d49f836cfdaa77442384749965f4ea","author":{"name":"Ryan Ernst","email":"ea3cd978650417470535f3a4725b6b5042a6ab59@iernst.net"},"message":"Core: Add backcompat for joda time formats (#36531)\n\nThis commit adds deprecation warnings when using format specifiers with\r\njoda data formats that will change with java time. It also adds the \"8\"\r\nprefix which may be used to force the new java time format parsing.","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/254d1e8f22d49f836cfdaa77442384749965f4ea"},{"sha":"64da98070c36425273fc6008521e28f8e26a9596","author":{"name":"Gil Raphaelli","email":"54fd1711209fb1c0781092374132c66e79e2241b@raphaelli.com"},"message":"format numbered list (#36580)","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/64da98070c36425273fc6008521e28f8e26a9596"},{"sha":"42d76a7e86596fac92915b45fa010984d137d513","author":{"name":"Chris Earle","email":"847f6088ec60d190026db00d4722bd3f17ecd820@users.noreply.github.com"},"message":"[Monitoring] LocalExporter should catch synchronous exceptions (#36606)\n\nIn the unlikely scenario that `LocalExporter::resolveBulk` throws\r\nan exception, then we should mark the `listener` as having failed.","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/42d76a7e86596fac92915b45fa010984d137d513"},{"sha":"692cff830a43d7207fac02fe143cd357b08b6a31","author":{"name":"Jason Tedor","email":"68c46a606457643eab92053c1c05574abb26f861@tedor.me"},"message":"Add guidance on using CCR with Logstash (#36609)\n\n* Add guidance on using CCR with Logstash\r\n\r\nThis commit adds a note to the documentation regarding how to configure\r\nLogstash indices in the context of being available as leader indices for\r\ncross-cluster replication.\r\n\r\n* Oh okay\r\n\r\n* idk\r\n\r\n* notconsole","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/692cff830a43d7207fac02fe143cd357b08b6a31"},{"sha":"1270d85ae19b9405b3949ab17d4a50b02c96ea77","author":{"name":"Andrei Stefan","email":"b7173f824f036ebf5de1f548643e696597d47c25@users.noreply.github.com"},"message":"SQL: be lenient for tests involving comparison to H2 but strict for csv spec tests (#36498)\n\n* Add a lenient parameter for floating point numbers and mark csv-spec\r\ntests as not lenient vs. sql-spec tests to be lenient.","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/1270d85ae19b9405b3949ab17d4a50b02c96ea77"},{"sha":"730b154c932bad5dd239069a24aa0ff3357cc0d0","author":{"name":"Marios Trivyzas","email":"6f4dd45cb60ec6c95d12a664ccc56007fdb55913@gmail.com"},"message":"SQL: Fix MOD() for long and integer arguments (#36599)\n\nPreviously, Math.floorMod was used for integers and longs\r\nwhich has different logic for negative numbers. Also, the\r\npriority of data types check was wrong as if one of the args\r\nis double the evaluation should be with doubles, then for floats,\r\nthen longs and finally integers.\r\n\r\nFixes: #36364","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/730b154c932bad5dd239069a24aa0ff3357cc0d0"},{"sha":"0804c27feeffb32b92d724264a7c19fe635881da","author":{"name":"Nicholas Knize","email":"a9feab4c43c307364f4cf9dd9959bbfa8385ecbd@gmail.com"},"message":"fix error with SecurityDocumentationIT#testGetUsers","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/0804c27feeffb32b92d724264a7c19fe635881da"},{"sha":"a4b32f1143392beae867a88aa56f8b3d15862dd0","author":{"name":"Nhat Nguyen","email":"1943a2452209b7c42f2abb91b701b4a903281a30@elastic.co"},"message":"Remove concurrency in testFailLeaderReplicaShard (#36607)\n\ntestFailLeaderReplicaShard periodically fails because we concurrently\r\nindex to the leader group and close one of its replicas. If a\r\nreplication request hits a closing shard, we will fail that shard;\r\nhowever, failing a shard is supported by the test framework - this makes\r\nthe test fail.","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/a4b32f1143392beae867a88aa56f8b3d15862dd0"},{"sha":"690b10a4a1ad402433f12837ff9cdd31872e95f8","author":{"name":"David Roberts","email":"78a0de84f73f75a59acf5b635cb4b514ff6819d2@elastic.co"},"message":"[ML] Interrupt Grok in file structure finder timeout (#36588)\n\nThe file structure finder has timeout functionality,\r\nbut prior to this change it would not interrupt a\r\nsingle long-running Grok match attempt.\r\n\r\nThis commit hooks into the ThreadWatchdog facility\r\nprovided by the Grok library to interrupt individual\r\nGrok matches that may be running at the time the\r\nfile structure finder timeout expires.","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/690b10a4a1ad402433f12837ff9cdd31872e95f8"},{"sha":"8a857983f7c0039b0782ee4fceef96895fa96cda","author":{"name":"Tal Levy","email":"72601a8e9b0cbe66dbefe816c40d3b8c1538be45@gmail.com"},"message":"[TEST] fix SecurityDocumentationIT#testGetUsers (#36622)\n\nthis test was failing because of two reason\r\n- it was creating invalid users with passwords shorter than 6 characters\r\n- it was expecting 7 total users to be returned, but it should be 9","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/8a857983f7c0039b0782ee4fceef96895fa96cda"},{"sha":"42f094952b43487060158492ec6d3c4c7e037de1","author":{"name":"Daniel Mitterdorfer","email":"6af016838da1f0f82b254730ffc3ce721afe497e@gmail.com"},"message":"Fix line length for IndexLifecycleActionIT\n\nRelates #34884\r\nRelates #36586","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/42f094952b43487060158492ec6d3c4c7e037de1"},{"sha":"b7ba2fa74b10486b88bdbdd6ddf91f8091945f85","author":{"name":"Daniel Mitterdorfer","email":"6af016838da1f0f82b254730ffc3ce721afe497e@gmail.com"},"message":"Fix line length for VersionTests\n\nRelates #34884\r\nRelates #36585","distinct":false,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/b7ba2fa74b10486b88bdbdd6ddf91f8091945f85"},{"sha":"88d7da9fc9e9794670249d1d2a0a127212b073b4","author":{"name":"Alexander Reelsen","email":"e46fc836cca3acec03944314d1457c2ae6c68ef3@reelsen.net"},"message":"Merge branch 'master' into java-time","distinct":true,"url":"https://api.github.com/repos/elastic/elasticsearch/commits/88d7da9fc9e9794670249d1d2a0a127212b073b4"}]}
{"actor":{"display_login":"spinscale"}}