Enterprise Distributed Application Service:Release notes for EDAS Container

5.0.7-jdk11

Release date: July 15, 2025 | Build package number: 160, 161 | Pandora version: 5.0.7

Optimization

• Improved startup speed.

• Improved compatibility with native Dubbo serialization.

3.7.1-jdk11

Release date: August 10, 2023 | Build package number: 150, 151 | Pandora version: 3.7.1

Bug fix

• Fixed a native memory leak caused by Pandora class loading.

Dependency update

• Updated the Pandora container to 2.1.18.

5.0.5-jdk11

Release date: August 10, 2023 | Build package number: 148, 149 | Pandora version: 5.0.5

Bug fix

• Fixed service discovery failures that occurred during dual calls, generic calls, and repeated creation of client proxy objects.

5.0.4-jdk11

Release date: July 18, 2023 | Build package number: 144, 145 | Pandora version: 5.0.4

New feature

• Exported nacos-client so applications can use it directly.

Optimization

• Optimized nacos-client log output.

5.0.3-jdk11

Release date: June 12, 2023 | Build package number: 142, 143 | Pandora version: 5.0.3

Security fix

• Updated the HSF plug-in to fix the CVE-2023-23638 Apache Dubbo JavaNative deserialization vulnerability.

New feature

• Added JDK 8, JDK 9, and JDK 11 support for the Pandora container.

4.0.6

Release date: May 20, 2022 | Build package number: 114, 115 | Pandora version: 4.0.6

Bug fix

• Fixed SPA authentication failures for generic calls in the HSF plug-in.

Change

• SPA authentication is now disabled by default on the server side. To enable it, add -DneedAuth=true to your JVM arguments.

4.0.5

Release date: March 25, 2022 | Build package number: 112, 113 | Pandora version: 4.0.5

Bug fix

• Fixed a WeightTable.class NoClassFound error in the HSF plug-in.

4.0.4

Release date: March 14, 2022 | Build package number: 110, 111 | Pandora version: 4.0.4

Dependency update

• Updated the HSF plug-in with Dubbo kernel version 3.0.6.17.

4.0.3

Release date: February 25, 2022 | Build package number: 108, 109 | Pandora version: 4.0.3

Bug fix

• Fixed a NullPointerException that occurred during service registration.

Change

• Updated the HSF plug-in. Dpath is no longer supported.

4.0.2

Release date: November 1, 2021 | Build package number: 104, 105 | Pandora version: 4.0.2

New feature

• Added support for the -DCC.dataContentLengthMax=xxx JVM property in the Config-client plug-in. Use this property to increase the maximum length of data published by HSF.

• Added asynchronous persistence for snapshot cache files in HSF services. This prevents the startup process of HSF consumers that subscribe to large volumes of data from blocking disk I/O.

4.0.1

Release date: September 7, 2021 | Build package number: 102, 103 | Pandora version: 4.0.1

New feature

• Added Triple protocol support.

Bug fix

• Fixed unexpected business log location changes after upgrading to V4.0.0.

• Fixed an open-source Dubbo issue where the number of members inherited from a parent class was incorrectly reduced.

4.0.0

Release date: December 21, 2020 | Build package number: 92, 93 | Pandora version: 4.0.0

New feature

• Released the first Pandora Source Approval Request (SAR) package version of the HSF plug-in, restructured on Dubbo 3.0.

• Added Dubbo service governance capabilities.

3.6.5

Release date: November 1, 2021 | Build package number: 106, 107 | Pandora version: 3.6.5

Bug fix

• Removed the warmup feature package from the HSF plug-in to eliminate HSF-0001 errors (failed calls).

New feature

• Added support for the -DCC.dataContentLengthMax=xxx JVM property in the Config-client plug-in. Use this property to increase the maximum length of data published by HSF.

• Added asynchronous persistence for snapshot cache files in HSF services. This prevents the startup process of HSF consumers that subscribe to large volumes of data from blocking disk I/O.

3.6.4

Release date: November 27, 2020 | Build package number: 90, 91 | Pandora version: 3.6.4

New feature

• Added service authentication module support in the HSF plug-in.

3.6.3

Release date: September 30, 2020 | Build package number: 88, 89 | Pandora version: 3.6.3

Dependency update

• Updated logback to V1.2.3 across all plug-ins.

• Updated groovy-all to V2.4.20 across all plug-ins.

• Updated commons-collections to V3.2.2 across all plug-ins.

• Updated the ons-client plug-in to 1.8.7.1-EagleEye.

3.6.2

Release date: August 4, 2020 | Build package number: 86, 87 | Pandora version: 3.6.2

New feature

• Added the hsf-feature-warmup package to the HSF plug-in, enabling launch prefetch for HSF services.

Dependency update

• Updated the ons-client plug-in with ApsaraMQ for RocketMQ version 4.8.6.5.

3.6.1

Release date: July 9, 2020 | Build package number: 84, 85 | Pandora version: 3.6.1

Dependency update

• Updated the ons-client plug-in with ApsaraMQ for RocketMQ version 4.8.6.5.

Bug fix

• Disabled the export class of the scenario link module in the EagleEye plug-in to prevent conflicts with Application Real-Time Monitoring Service (ARMS).

3.6.0

Release date: May 30, 2020 | Build package number: 81, 82, 83 | Pandora version: 3.6.0

Bug fix

• Fixed an issue where JarURLConnection could fail to access resources in the Pandora container.

Security fix

• Updated the Fastjson package to the noneautotype version across all plug-ins.

New feature

• Added intra-zone routing priority support for HSF services.

Change

• Removed the unitrouter and monitor plug-ins.

3.5.9

Release date: April 1, 2020 | Build package number: 60, 80 | Pandora version: 3.5.9

Security fix

• Updated the Fastjson package to a secure version across all plug-ins in edas.sar.V3.5.8.

Dependency update

• Updated the ons-client plug-in to 1.8.4.3-EagleEye.

Bug fix

• Resolved the ApsaraMQ for RocketMQ topAddr issue.

3.5.8

Release date: January 10, 2020 | Build package number: 59, 79 | Pandora version: 3.5.8

Bug fix

• ConfigClientWorker thread no longer exits when an out-of-memory (OOM) error occurs in an HSF application.

• Registered services are no longer deleted when stream ingest authentication in SPAs fails.

3.5.7

Release date: November 8, 2019 | Build package number: 58, 78 | Pandora version: 3.5.7

New feature

• Added circuit breaking support in the HSF plug-in.

Bug fix

• Fixed a quality of service (QoS) issue in the HSF plug-in.

• Removed the PS Cache parameter check performed by Global Transaction Service (GTS) in the tddl-driver plug-in.

3.5.6

Release date: September 12, 2019 | Build package number: 57, 77 | Pandora version: 3.5.6

Bug fix

• Resolved an unread cache issue in multitenancy scenarios in the Config-client plug-in.

• Pandora QoS command failed to run in the HSF plug-in.

• Service addresses were not found when HSF had an excessive number of subscribed services.

Security fix

• Updated the Fastjson package to the sec06 secure version across all plug-ins.

3.5.5

Release date: August 15, 2019 | Build package number: 56, 76 | Pandora version: 3.5.5

Dependency update

• Updated the Hessian-lite dependency of Dubbo in the HSF plug-in.

3.5.4

Release date: July 18, 2019 | Build package number: 55, 75 | Pandora version: 3.5.4

Bug fix

• Fixed an issue where RPCContext could not be cleared in the HSF plug-in.

• Fixed a missing TXC_XID HINT issue in the prepareCall operation of the tddl-driver plug-in.

• Fixed excessive memory consumption by the BinAppender object in the metrics plug-in.

Security fix

• Updated the Fastjson package to version 1.2.58 across all plug-ins.

3.5.3

Release date: March 13, 2019 | Build package number: 54, 74 | Pandora version: 3.5.3

New feature

• Added end-to-end canary release and HSF-based canary traffic adjustment in the HSF and EagleEye plug-ins.

Dependency update

• Updated the ons-client plug-in to 1.8.0-EagleEye.

3.5.2

Release date: January 26, 2019 | Build package number: 53, 73 | Pandora version: 3.5.2

New feature

• HSF plug-in now supports disabling service publishing and subscription for the DEFAULT_TENANT tenant.

Dependency update

• Updated Ali-Tomcat to V7.0.92.

• Re-added the ons-client plug-in and updated it to 1.7.9-EagleEye.

• Updated other Pandora plug-ins.

3.5.1

Release date: November 28, 2018 | Build package number: 52, 72 | Pandora version: 3.5.0

Dependency update

• Updated the JDK in the Docker image to JDK 1.8.0_191.

3.5.0

Release date: September 10, 2018 | Build package number: 51, 71 | Pandora version: 3.5.0

Bug fix

• Chinese parameter values in URL requests of web applications were garbled upon retrieval. Updated eagleeye-core to V1.7.4.8.

• HSF service list was not visible through the Pandora QoS command. Updated HSF to 2.2.6.7-edas.

Change

• Removed the ons-client plug-in to eliminate JAR package conflicts with applications.

3.4.7

Release date: August 1, 2018 | Build package number: 50, 70 | Pandora version: 3.4.7

Dependency update

• Updated ApsaraMQ for RocketMQ to 1.7.8-EagleEye.

Bug fix

• Eliminated class conflicts caused by the ApsaraMQ for RocketMQ tracing feature.

3.4.6

Release date: July 5, 2018 | Build package number: 49, 69 | Pandora version: 3.4.6

New feature

• Added Cloud Service Bus (CSB) feature support in HSF (updated to V2.2.6.1).

• Added Dubbo health check support for Spring Boot.

Bug fix

• Fixed serialization issues in specific scenarios in HSF.

• Removed the strong dependence on virtual IP addresses (VIPs) in HSF.

Dependency update

• Updated the Config-client plug-in to V1.9.6. The maximum number of registrations can now be dynamically adjusted.

• Updated Sentinel to 2.12.12-edas with Spring Boot 2.x support.

3.4.5

Release date: June 14, 2018 | Build package number: 48, 68 | Pandora version: 3.4.5

Bug fix

• Fixed a listening failure when using native interfaces in multitenancy scenarios. Updated Application Configuration Management to V3.8.10.

3.4.4

Release date: May 18, 2018 | Build package number: 47, 67 | Pandora version: 3.4.4

Bug fix

• Fixed a timeout error when the timeout parameter was set to 0 during asynchronous processing and local calls in an HSF provider.

• Fixed a missing peer IP address property in RpcContext when Dubbo was used in EDAS.

• Fixed unsupported HSF generic calls when a boolean value was contained in a Map data structure.

New feature

• Added support for the Dubbo service tag in aspect-oriented programming (AOP) scenarios.

3.4.3

Release date: April 24, 2018 | Build package number: 46, 66 | Pandora version: 3.4.3

Dependency update

• Updated Diamond to V3.8.8.

• Updated Fastjson to V1.2.48.

Bug fix

• Fixed persistent certificate-not-found errors and improved security capabilities.

• Optimized port availability detection logic.

New feature

• Updated EDAS-Assist to V2.0.

3.4.1

Release date: March 15, 2018 | Build package number: 44, 64 | Pandora version: 3.4.1

New feature

• Added Dubbo X support in the HSF plug-in.

Dependency update

• Updated diamond-client and configcenter-client.

Change

• Removed the port check that EDAS-Assist performed when the specified port value appeared.

3.4.0

Release date: March 7, 2018 | Build package number: 43, 63 | Pandora version: 3.4.0

New feature

• Added dynamic configuration support for the content security policy (CSP) port in EDAS-Assist.

• Added a tenant-oriented ConfigCenter version.

• Updated the Config-client plug-in to provide a unified client that supports CS 2.0 and CS 3.0.

Bug fix

• Fixed slow port availability checks in EDAS-Assist.

3.3.9

Release date: January 17, 2018 | Build package number: 42 | Pandora version: 3.3.9

Bug fix

• Fixed a ZooKeeper blocking issue in HSF.

New feature

• Added system protection support in Sentinel. System protection takes effect only when the relevant rule is pushed to the console.

• Updated the default error URL to support multilingual versions.

3.3.6

Release date: December 20, 2017 | Build package number: 41 | Pandora version: 3.3.6

Bug fix

• Eliminated excessively long error messages caused by repeated header information when the same error was thrown.

• Fixed a trace parsing and application topology display issue caused by Unknown entries in EagleEye.

3.3.5

Release date: December 20, 2017 | Build package number: 40 | Pandora version: 3.3.4

New feature

• Added Application Configuration Management support in HSF V2.2.

3.3.4

Release date: November 30, 2017 | Build package number: 39 | Pandora version: 3.3.4

Dependency update

• Updated Diamond for Application Configuration Management compatibility.

Bug fix

• Fixed HSF generalization, unit dependency, ZooKeeper multi-address parsing, and InetAddress serialization issues.

• Fixed the ~30-second delay before custom throttling and degradation settings took effect.

New feature

• Added whitelist rule configuration.

• Added health check capabilities to EagleEye, along with alimetric and tomcat monitor support.

• Added configurable maximum message cache size on clients in the ons-client plug-in for ApsaraMQ for RocketMQ.

3.3.3

Release date: October 18, 2017 | Build package number: 38 | Pandora version: 3.3.3

New feature

• Added automatic application registration support (disabled by default).

• Added Sentinel support for HSF V2.2.

• Improved the Pandora QoS command.

Bug fix

• Fixed a file handle occupation issue in HSF.

3.3.2

Release date: October 18, 2017 | Build package number: 36 | Pandora version: 3.3.2

Bug fix

• Fixed an issue where HSF held the hsf.lock handle.

New feature

• Added Redis tracking support.

• Improved the Pandora QoS command.

Dependency update

• Updated tddl-driver for online end-to-end stress testing.

3.3.1

Release date: July 13, 2017 | Build package number: 34 | Pandora version: 3.2.2

Dependency update

• Updated tddl-driver separately for online end-to-end stress testing.