6.3.1-rc.3
Merge pull request #19012 from zmstone/260916-api-key-optional-fields…
Merge pull request #19012 from zmstone/260916-api-key-optional-fields…
Merge pull request #19007 from emqx/bump-510-dashboard-version-202609…
docs: add changelogs for 6.3.1
build: disable QUIC for Amazon Linux 2 packages, bump to 5.10.5-rc.3
chore: bump chart version to 6.1.5-rc.1
build(quicer): bump to 0.4.9 with QUICER_TLS_VER=auto, bump to 5.10.5-rc.2
chore: bump version to 5.10.5-rc.1
EMQX Enterprise 6.3.0 focuses on stronger security defaults, leaner deployments, and broader operational visibility. Highlights include: Feature Gates. Set EMQX_FEATURES=ESSENTIAL to run the core MQTT broker with an under-100 MB boot-time memory footprint; Security Profile. Set EMQX_SECURITY_PROFILE=hardened for secure-by-default deployments; A more performant socket backend for MQTT TCP listeners…
chore: bump version to 6.3.0-rc.4
Merge pull request #18760 from emqx/bump-63-dashboard-version-2026090…
docs: add changelogs for 6.3.0
chore: bump version to 6.3.0-rc.1
6.2.3 Enhancements Access Control #17813 The Dashboard user and API-key endpoints now reject scope lists that mix privilege scopes (system, user_management, api_key_management, sso_management) with other scopes. Each of the four privilege scopes is administrator-equivalent in effect, so combining them with a restricted scope list cannot meaningfully restrict the account. Use either a privilege-onl…
6.2.3-rc.1
6.1.4 Enhancements Multi-tenancy #17732 Added a namespace field to the API key creation and update endpoints. Operators no longer need to encode the namespace in the role string. The ns:<namespace>::<role> format remains supported. When both forms are provided, their namespace values must match. #17855 Enabled namespace-scoped EMQX Dashboard administrators to create, list, read, update, and delete…
260730 sync r60 to r61
build(rpm): disable rpmbuild check-rpaths on el10
chore: cut release e5.9.3
chore: bump version to 6.3.0-beta.2
6.2.2 Enhancements Clustering #17530 Cluster linking now requires a non-community license. Under the default community license, configured links stay inactive (no message forwarding or route replication) and the REST API rejects attempts to enable a link with a clear hint to load a non-community license. Disabling and deleting links remain available so that legacy configuration can be tidied up. A…
6.1.3 Enhancements Clustering #17530 Cluster linking now requires a non-community license. Under the default community license, configured links stay inactive (no message forwarding or route replication) and the REST API rejects attempts to enable a link with a clear hint to load a non-community license. Disabling and deleting links remain available so that legacy configuration can be tidied up. A…
chore: bump version to 6.1.3-rc.3
chore: bump rel version in Chart.yaml
chore: bump to version 6.1.3-rc.2
chore: bump to 6.3.0-beta.1
6.2.2-rc.1
Merge remote-tracking branch 'origin/release-61' into dev-61
Security Hardening #17200 Plugin install allowlist entries (emqx ctl plugins allow <name-vsn>) now expire 5 minutes after they are issued, and may be pinned to a SHA-256 hash of the package. emqx ctl plugins allow <name-vsn> sha256:<HEX> accepts a 64-character lowercase hex digest; uploads whose contents do not hash to that value are rejected with 403 Forbidden. The previous behavior of accepting…