Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update dependency erlang to v27.3.2 #252

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update dependency erlang to v27.3.2 #252

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 7, 2025 •
edited
Loading

This PR contains the following updates:

Package Update Change
erlang minor 27.2.1 -> 27.3.2

Release Notes

erlang/otp (erlang)

v27.3.2: OTP 27.3.2

Compare Source

Patch Package:           OTP 27.3.2
Git Tag:                 OTP-27.3.2
Date:                    2025-04-04
Trouble Report Id:       OTP-19482, OTP-19560, OTP-19561, OTP-19562,
                         OTP-19563, OTP-19564, OTP-19565, OTP-19567,
                         OTP-19568, OTP-19569, OTP-19571
Seq num:                 ERIERL-1207, ERIERL-1208, ERIERL-1210,
                         ERIERL-1211, ERIERL-1212, ERIERL-1214,
                         ERIERL-1216, GH-9541, PR-9650, PR-9658,
                         PR-9661, PR-9676
System:                  OTP
Release:                 27
Application:             asn1-5.3.4, compiler-8.6.1, erts-15.2.5,
                         kernel-10.2.5, megaco-4.7.1, snmp-5.18.2,
                         ssl-11.2.11, xmerl-2.1.2
Predecessor:             OTP 27.3.1

Check out the git tag OTP-27.3.2, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

asn1-5.3.4

The asn1-5.3.4 application can be applied independently of other applications on
a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Negative REAL numbers greater than -1 would be incorrectly encoded (the minus
    sign would be lost).

    Own Id: OTP-19567
    Related Id(s): ERIERL-1214, PR-9658

Full runtime dependencies of asn1-5.3.4

erts-14.0, kernel-9.0, stdlib-5.0

compiler-8.6.1

The compiler-8.6.1 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Fix the compiler crash when the inner-most tuple in a nested tuple with 3
    layers is updated.

    Own Id: OTP-19561
    Related Id(s): ERIERL-1208, ERIERL-1210, PR-9650

Full runtime dependencies of compiler-8.6.1

crypto-5.1, erts-13.0, kernel-8.4, stdlib-6.0

erts-15.2.5

The erts-15.2.5 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • On Windows, using socket:sendv, a large IOV (size > MAX), the tail was not
    sent.

    Own Id: OTP-19482

  • Uplift pcre 8.44 to pcre 8.45

    Own Id: OTP-19565

Full runtime dependencies of erts-15.2.5

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.5

Note! The kernel-10.2.5 application cannot be applied independently of other
applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.2.5 (first satisfied in OTP 27.3.2)
Fixed Bugs and Malfunctions

  • On Windows, using socket:sendv, a large IOV (size > MAX), the tail was not
    sent.

    Own Id: OTP-19482

  • gen_tcp connect with a sockaddr with loopback address failed.

    Own Id: OTP-19560
    Related Id(s): GH-9541

  • Remove debug printouts from gen_tcp_socket

    Own Id: OTP-19564

Full runtime dependencies of kernel-10.2.5

crypto-5.0, erts-15.2.5, sasl-3.0, stdlib-6.0

megaco-4.7.1

The megaco-4.7.1 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Correct type spec for ActionReply

    Own Id: OTP-19563
    Related Id(s): ERIERL-1216

Full runtime dependencies of megaco-4.7.1

asn1-3.0, debugger-4.0, erts-12.0, et-1.5, kernel-8.0, runtime_tools-1.8.14,
stdlib-2.5

snmp-5.18.2

The snmp-5.18.2 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • When manager receives an v3 inform (request) it used engine-id and full
    address (including port number) to check if engine was known. This did not
    work if agent used ephemeral ports for notifications. Has now been changed to
    only use (context) engine-id and address (without port).

    Own Id: OTP-19562
    Related Id(s): ERIERL-1207

  • Fixed snmp_generic (dialyzer) spec for function table_func.

    Own Id: OTP-19568
    Related Id(s): ERIERL-1211

Full runtime dependencies of snmp-5.18.2

crypto-4.6, erts-12.0, kernel-8.0, mnesia-4.12, runtime_tools-1.8.14,
stdlib-5.0

ssl-11.2.11

Note! The ssl-11.2.11 application cannot be applied independently of other
applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)
Fixed Bugs and Malfunctions

  • Correct the debug functionality for NSS keylogging for TLS-1.3 introduced in
    OTP-27.3.1 so that TLS-1.3 key updates items always get correct counter value
    and each item is logged as one single line.

    Own Id: OTP-19569
    Related Id(s): PR-9661

Full runtime dependencies of ssl-11.2.11

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4,
runtime_tools-1.15.1, stdlib-6.0

xmerl-2.1.2

The xmerl-2.1.2 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Corrected faulty type specification

    Corrected type specification for the input parameter of xmerl_xs:value_of/1.

    Also replaced underscore in the return type specifications of
    xmerl_xs:select/2, xmerl_xpath:string/2 and xmerl_xpath:string/3 with
    specified return values to improve documentation.

    Own Id: OTP-19571
    Related Id(s): ERIERL-1212, PR-9676

Full runtime dependencies of xmerl-2.1.2

erts-6.0, kernel-8.4, stdlib-2.5

Thanks to

Björn Gustavsson

v27.3.1: OTP 27.3.1

Compare Source

Patch Package:           OTP 27.3.1
Git Tag:                 OTP-27.3.1
Date:                    2025-03-28
Trouble Report Id:       OTP-19391, OTP-19437, OTP-19469, OTP-19525,
                         OTP-19527, OTP-19529, OTP-19542, OTP-19543,
                         OTP-19545, OTP-19546, OTP-19547, OTP-19548,
                         OTP-19549, OTP-19559
Seq num:                 #​9172, CVE-2025-30211, ERIERL-1204,
                         ERIERL-1205, ERIERL-1206, GH-8891, GH-9483,
                         GH-9554, OTP-19472, OTP-19544, PR-9221,
                         PR-9486, PR-9534, PR-9545, PR-9553, PR-9577,
                         PR-9587, PR-9588, PR-9596, PR-9611, PR-9612
System:                  OTP
Release:                 27
Application:             asn1-5.3.3, erts-15.2.4, kernel-10.2.4,
                         mnesia-4.23.5, ssh-5.2.9, ssl-11.2.10,
                         stdlib-6.2.2
Predecessor:             OTP 27.3

Check out the git tag OTP-27.3.1, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

OTP-27.3.1

Fixed Bugs and Malfunctions

  • Update used ExDoc version to v0.37.3

    Own Id: OTP-19525
    Related Id(s): PR-9553

asn1-5.3.3

The asn1-5.3.3 application can be applied independently of other applications on
a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • The JER backend will now include the SIZE constraint in the type info for
    OCTET STRINGs, and a SIZE constraint with a range will now be included for BIT
    STRINGs. This does not change the actual encoding or decoding of JER, but can
    be useful for tools.

    Own Id: OTP-19542
    Related Id(s): ERIERL-1204, PR-9588

Improvements and New Features

  • When using the JSON encoding rules, it is now possible to call the decode/2
    function in the following way with data that has already been decoded by
    json:decode/1:

    SomeModule:decode(Type, {json_decoded, Decoded}).

    Own Id: OTP-19547
    Related Id(s): ERIERL-1206, PR-9611

Full runtime dependencies of asn1-5.3.3

erts-14.0, kernel-9.0, stdlib-5.0

erts-15.2.4

The erts-15.2.4 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Behavior for socket:recv/3 has been improved. The behavior has also been
    clarified in the documentation.

    Own Id: OTP-19469
    Related Id(s): #​9172

  • Trace messages due to receive tracing could potentially be delayed a very
    long time if the traced process waited in a receive expression without
    clauses matching on messages (timed wait), or just did not enter a receive
    expression for a very long time.

    Own Id: OTP-19527
    Related Id(s): PR-9577

  • Improve the naming of the (internal) esock mutex(es). It is now possible to
    configure (as in autoconf) the use of simple names for the esock mutex(es).

    Own Id: OTP-19548
    Related Id(s): OTP-19472

Full runtime dependencies of erts-15.2.4

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.4

Note! The kernel-10.2.4 application cannot be applied independently of other
applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.1 (first satisfied in OTP 27.1)

Fixed Bugs and Malfunctions

  • Behavior for socket:recv/3 has been improved. The behavior has also been
    clarified in the documentation.

    Own Id: OTP-19469
    Related Id(s): #​9172

  • An infinite loop in CNAME loop detection that can cause Out Of Memory has been
    fixed. This affected CNAME lookup with the internal DNS resolver.

    Own Id: OTP-19545
    Related Id(s): PR-9587, OTP-19544

Full runtime dependencies of kernel-10.2.4

crypto-5.0, erts-15.1, sasl-3.0, stdlib-6.0

mnesia-4.23.5

The mnesia-4.23.5 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • With this change mnesia will merge schema of tables using external backends.

    Own Id: OTP-19437
    Related Id(s): PR-9534

Full runtime dependencies of mnesia-4.23.5

erts-9.0, kernel-5.3, stdlib-5.0

ssh-5.2.9

The ssh-5.2.9 application can be applied independently of other applications on
a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Reception of malicious KEX init message does not result with ssh daemon
    excessive memory usage.

    Own Id: OTP-19543
    Related Id(s): CVE-2025-30211

  • Call to ssh:daemon_replace_options does not crash when argument is not a valid
    daemon ref.

    Own Id: OTP-19559
    Related Id(s): GH-9554, PR-9545

Full runtime dependencies of ssh-5.2.9

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1,
stdlib-5.0, stdlib-6.0

ssl-11.2.10

Note! The ssl-11.2.10 application cannot be applied independently of other
applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)

Fixed Bugs and Malfunctions

  • Correct handling of unassigned signature algorithms to properly ignore them
    instead of failing the handshake.

    Own Id: OTP-19529
    Related Id(s): GH-9483, PR-9486

  • Update key mechanism in CRL cache so that CRL DP with same URI path component
    becomes distinguishable from each other.

    Own Id: OTP-19549
    Related Id(s): GH-8891, PR-9612

Improvements and New Features

  • Add callback for NSS keylogging so that it can work as expected for all
    scenarios.

    Own Id: OTP-19391
    Related Id(s): PR-9221

Full runtime dependencies of ssl-11.2.10

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4,
runtime_tools-1.15.1, stdlib-6.0

stdlib-6.2.2

The stdlib-6.2.2 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Fixed crash when fetching initial_call when user code have modified the
    process_dictionary.

    Own Id: OTP-19546
    Related Id(s): ERIERL-1205, PR-9596

Full runtime dependencies of stdlib-6.2.2

compiler-5.0, crypto-4.5, erts-15.0, kernel-10.0, sasl-3.0

Thanks to

Alexandre Rodrigues, Marc Worrell, Sergei Shuvatov, zmstone

v27.3: OTP 27.3

Compare Source

OTP 27.3

Erlang/OTP 27.3 is the third maintenance patch package for OTP 27, with mostly bug fixes as well as improvements.

For details about bugfixes and potential incompatibilities see the Erlang 27.3 README

The Erlang/OTP source can also be found at GitHub on the official Erlang repository,
https://github.com/erlang/otp

Download links for this and previous versions are found here:

v27.2.4: OTP 27.2.4

Compare Source

Patch Package:           OTP 27.2.4
Git Tag:                 OTP-27.2.4
Date:                    2025-02-20
Trouble Report Id:       OTP-19438, OTP-19466
Seq num:                 CVE-2025-26618, ERIERL-1173, ERIERL-1180
System:                  OTP
Release:                 27
Application:             snmp-5.18.1, ssh-5.2.7
Predecessor:             OTP 27.2.3

Check out the git tag OTP-27.2.4, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

snmp-5.18.1

The snmp-5.18.1 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • SNMP Agent transports type (intAgentTransports) was incorrectly not documented
    as a list of transports. Also add a couple of config file generation examples.

    Own Id: OTP-19438
    Related Id(s): ERIERL-1180

Full runtime dependencies of snmp-5.18.1

crypto-4.6, erts-12.0, kernel-8.0, mnesia-4.12, runtime_tools-1.8.14,
stdlib-5.0

ssh-5.2.7

The ssh-5.2.7 application can be applied independently of other applications on
a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • SFTP packets exceeding max packet size are not processed and dropped.

    Own Id: OTP-19466
    Related Id(s): ERIERL-1173, CVE-2025-26618

Full runtime dependencies of ssh-5.2.7

crypto-5.0, erts-14.0, kernel-9.0, public_key-1.6.1, runtime_tools-1.15.1,
stdlib-5.0, stdlib-6.0

v27.2.3: OTP 27.2.3

Compare Source

Patch Package:           OTP 27.2.3
Git Tag:                 OTP-27.2.3
Date:                    2025-02-17
Trouble Report Id:       OTP-19457, OTP-19467, OTP-19486
Seq num:                 ERIERL-1189, ERIERL-1190, PR-9387, PR-9408,
                         PR-9418
System:                  OTP
Release:                 27
Application:             inets-9.3.2, ssl-11.2.8
Predecessor:             OTP 27.2.2

Check out the git tag OTP-27.2.3, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

inets-9.3.2

The inets-9.3.2 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Improved robustness of httpd startup procedure.

    Own Id: OTP-19486
    Related Id(s): ERIERL-1190, PR-9408

Full runtime dependencies of inets-9.3.2

erts-14.0, kernel-9.0, mnesia-4.12, public_key-1.13, runtime_tools-1.8.14,
ssl-9.0, stdlib-5.0, stdlib-6.0

ssl-11.2.8

Note! The ssl-11.2.8 application cannot be applied independently of other
applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)

Fixed Bugs and Malfunctions

  • Setting protocol version to a lower value then supported by default in server
    API function called after ssl:listen/2 could result in wrong default values
    being used and connections failing with insufficient security.

    Own Id: OTP-19457
    Related Id(s): PR-9418

  • Improve error handling of server name indication fun. This implies that if the
    sni_fun returns undefined we will attempt connection with original option
    values, if it returns unrecognized we end the connection with
    UNRECOGNIZED_NAME alert and if provided options fail option verification we
    will end the connection with a HANDSHAKE_FAILURE and an error log.

    Own Id: OTP-19467
    Related Id(s): ERIERL-1189, PR-9387

Full runtime dependencies of ssl-11.2.8

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4,
runtime_tools-1.15.1, stdlib-6.0

v27.2.2: OTP 27.2.2

Compare Source

Patch Package:           OTP 27.2.2
Git Tag:                 OTP-27.2.2
Date:                    2025-02-06
Trouble Report Id:       OTP-19240, OTP-19381, OTP-19411, OTP-19445,
                         OTP-19455, OTP-19462
Seq num:                 ERIERL-1174, ERIERL-1177, GH-9112, GH-9117,
                         GH-9177, GH-9208, PR-9273, PR-9286, PR-9322,
                         PR-9356, PR-9372, PR-9377
System:                  OTP
Release:                 27
Application:             compiler-8.5.5, erts-15.2.2, kernel-10.2.2,
                         public_key-1.17.1, ssl-11.2.7
Predecessor:             OTP 27.2.1

Check out the git tag OTP-27.2.2, and build a full OTP system including
documentation. Apply one or more applications from this build as patches to your
installation using the 'otp_patch_apply' tool. For information on install
requirements, see descriptions for each application version below.

compiler-8.5.5

The compiler-8.5.5 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Eliminated a bug in the alias analysis pass that could potentially cause
    unsafe optimizations of binary construction or record updates.

    Own Id: OTP-19455
    Related Id(s): PR-9356

Full runtime dependencies of compiler-8.5.5

crypto-5.1, erts-13.0, kernel-8.4, stdlib-6.0

erts-15.2.2

The erts-15.2.2 application can be applied independently of other applications
on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Disabled an unsafe runtime optimization in binary construction that caused
    silent memory corruption.

    Own Id: OTP-19462
    Related Id(s): ERIERL-1177, PR-9372

Full runtime dependencies of erts-15.2.2

kernel-9.0, sasl-3.3, stdlib-4.1

kernel-10.2.2

Note! The kernel-10.2.2 application cannot be applied independently of other
applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- erts-15.1 (first satisfied in OTP 27.1)

Fixed Bugs and Malfunctions

  • Fixed a couple of bugs that could make global's internal state inconsistent
    when a connection was reconnected.

    Own Id: OTP-19381
    Related Id(s): GH-9112, GH-9117, PR-9377

Full runtime dependencies of kernel-10.2.2

crypto-5.0, erts-15.1, sasl-3.0, stdlib-6.0

public_key-1.17.1

The public_key-1.17.1 application can be applied independently of other
applications on a full OTP 27 installation.

Fixed Bugs and Malfunctions

  • Consider keyCertSign to compatible with extended key usage for TLS
    client/server auth in CAs, adhere to wide spread implementations

    Own Id: OTP-19240
    Related Id(s): GH-9208, PR-9286

Full runtime dependencies of public_key-1.17.1

asn1-5.0, crypto-5.0, erts-13.0, kernel-8.0, stdlib-4.0

ssl-11.2.7

Note! The ssl-11.2.7 application cannot be applied independently of other
applications on an arbitrary OTP 27 installation.

   On a full OTP 27 installation, also the following runtime
   dependency has to be satisfied:
   -- public_key-1.16.4 (first satisfied in OTP 27.1.3)

Fixed Bugs and Malfunctions

  • An initiated handshake should always be closed with an alert, some corner
    cases have been fixed so that this should always be the case.

    Own Id: OTP-19411
    Related Id(s): ERIERL-1174, PR-9273

  • Correct option handling to work properly for paused handshaking. Could result
    in unwanted alerts or or error messages.

    Own Id: OTP-19445
    Related Id(s): GH-9177, PR-9322

Full runtime dependencies of ssl-11.2.7

crypto-5.0, erts-15.0, inets-5.10.7, kernel-9.0, public_key-1.16.4,
runtime_tools-1.15.1, stdlib-6.0

Thanks to

Frej Drejhammar

Configuration

📅 Schedule: Branch creation - "* 0-3 * * *" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title chore(deps): update dependency erlang to v27.2.2 chore(deps): update dependency erlang to v27.2.3 Feb 17, 2025
@renovate renovate bot force-pushed the renovate/erlang-27.x branch from a877f34 to 7d6b802 Compare February 17, 2025 23:19
@renovate renovate bot changed the title chore(deps): update dependency erlang to v27.2.3 chore(deps): update dependency erlang to v27.2.4 Feb 20, 2025
@renovate renovate bot force-pushed the renovate/erlang-27.x branch 2 times, most recently from 1ca34bf to 3f89c0e Compare February 24, 2025 20:43
@renovate renovate bot changed the title chore(deps): update dependency erlang to v27.2.4 chore(deps): update dependency erlang to v27.3 Mar 5, 2025
@renovate renovate bot force-pushed the renovate/erlang-27.x branch from 3f89c0e to 2bc262f Compare March 5, 2025 11:46
@renovate renovate bot force-pushed the renovate/erlang-27.x branch from 2bc262f to 5383a20 Compare March 28, 2025 16:28
@renovate renovate bot changed the title chore(deps): update dependency erlang to v27.3 chore(deps): update dependency erlang to v27.3.1 Mar 28, 2025
@renovate renovate bot changed the title chore(deps): update dependency erlang to v27.3.1 chore(deps): update dependency erlang to v27.3.2 Apr 4, 2025
@renovate renovate bot force-pushed the renovate/erlang-27.x branch from 5383a20 to cc36c8a Compare April 4, 2025 10:09
@renovate renovate bot force-pushed the renovate/erlang-27.x branch from cc36c8a to 6c6cbf6 Compare April 8, 2025 16:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants