v1.27.2

February 26, 2024

🔒 Security fixes

• Armeria's SAML integration now rejects unsigned SAML messages by default. CVE-2024-1735
  • You can set SamlServiceProviderBuilder.signatureRequired() to control whether to accept unsigned SAML messages.

🛠️ Bug fixes

• XdsEndpointGroup now supports Subset based Load Balancing, which enables more sophisticated load balancing configurations. #5461
• You can now specify a static Cluster configuration to define the ClusterLoadAssignment instead of receiving the Cluster resource from the control plane. #5468
• Armeria's Eureka integration no longer incorrectly appends port information to vipAddress. #5451
• homePageUrl and statusPageUrl of an InstanceInfo in Eureka are correctly set if corresponding path properties are configured. #5464 #5465
• You no longer see IllegalArgumentException when using ConnectionPoolListener.metricCollecting(MeterRegistry). #5466

☢️ Breaking changes

• The .connections suffix is now automatically appended to the names of connection pool metrics. #5466
  • If you use a custom MeterIdPrefix with ConnectionPoolListener.metricCollecting(MeterRegistry,MeterIdPrefix), this changes will affect your meter naming.

🙇 Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests: