dapr v1.18.0-rc.5 版本更新介绍

发布日期: 2026-06-01
版本号: v1.18.0-rc.5

Dapr 1.18.0-rc.5版本的发布候选主要包含一系列依赖更新、持续集成优化、安全漏洞修复以及功能增强。具体涉及更新Go SSH加密组件、在ARM64环境原生运行macOS测试、修复依赖审查中的网络问题、新增标准输入输出辅助二进制文件、更新durabletask-go及components-contrib组件、稳定集成测试、优化工作流中事件存储逻辑、修复CI环境下的虚拟机配置、文档化工作流负载大小指标、更新dapr/kit库、修复严重安全漏洞（如升级durabletask-go和pgx）、更新govulncheck工具、修复Sentry中OIDC相关的头部注入漏洞、调整e2e测试中Azure资源命名、引入ConfigMap配置存储组件、注册nameformat名称解析组件、解除本地应用的gRPC单例连接限制、清理已归档的dapr/dashboard引用、增强工作流对非持久化可选键的清理策略等。

更新内容 （中文）

这是候选发布版1.18.0-rc.5

变更内容

• [回移植 release-1.18] 修复：更新Go SSH加密依赖 by @dapr-bot in https://github.com/dapr/dapr/pull/10001
• [回移植 release-1.18] 杂项(CI)：更新虚拟机规格 by @dapr-bot in https://github.com/dapr/dapr/pull/9989
• [回移植 release-1.18] CI：在arm64架构上原生运行macOS测试 by @dapr-bot in https://github.com/dapr/dapr/pull/9988
• [回移植 release-1.18] 修复依赖审查：网络组件 by @dapr-bot in https://github.com/dapr/dapr/pull/10006
• [回移植 release-1.18] 集成测试：标准IO辅助二进制文件与迁移辅助工具 by @dapr-bot in https://github.com/dapr/dapr/pull/9982
• [回移植 release-1.18] 杂项：更新durabletask-go与components-contrib依赖 by @dapr-bot in https://github.com/dapr/dapr/pull/9998
• [回移植 release-1.18] 修复测试不稳定问题 by @dapr-bot in https://github.com/dapr/dapr/pull/10009
• [回移植 release-1.18] 工作流：在创建唤醒提醒前保存收件箱事件 by @dapr-bot in https://github.com/dapr/dapr/pull/10010
• [1.18回移植] 修复(CI)：AKS测试中使用兼容Hyper-V Gen1的Windows虚拟机规格 by @cicoyle in https://github.com/dapr/dapr/pull/10004
• [回移植 release-1.18] 文档：列出新的工作负载大小比例指标 by @dapr-bot in https://github.com/dapr/dapr/pull/10011
• [回移植 release-1.18] 更新github.com/dapr/kit至0.18.1版本 by @dapr-bot in https://github.com/dapr/dapr/pull/10016
• [回移植 release-1.18] 修复关键漏洞：升级durabletask-go至v0.12.1并更新pgx依赖 by @dapr-bot in https://github.com/dapr/dapr/pull/10017
• [回移植 release-1.18] 依赖更新：govulncheck工具 by @dapr-bot in https://github.com/dapr/dapr/pull/10022
• [回移植 release-1.18] 测试：稳定不稳定的CI测试用例 by @dapr-bot in https://github.com/dapr/dapr/pull/10018
• [回移植 release-1.18] 工作流：保留器忽略未完成错误 by @dapr-bot in https://github.com/dapr/dapr/pull/10026
• [回移植 release-1.18] Sentry：修复OIDC X-Forwarded-Host验证器/jwks_uri注入问题 by @dapr-bot in https://github.com/dapr/dapr/pull/10029
• [回移植 release-1.18] CI(端到端)：重命名工作流中的Azure Key Vault资源 by @dapr-bot in https://github.com/dapr/dapr/pull/10031
• [1.18] 使用contrib v1.18.0-rc.1版本并升级kit (#10024) + 摘取作业API性能测试 by @cicoyle in https://github.com/dapr/dapr/pull/10033
• [回移植 release-1.18] 修复(MCP)：基于mcpserver工作流注册配置/healthz/outbound网关 by @dapr-bot in https://github.com/dapr/dapr/pull/10036
• [回移植 release-1.18] CI：将azure/login固定为v3版本 by @dapr-bot in https://github.com/dapr/dapr/pull/10035
• [回移植 release-1.18] 功能：添加配置映射存储组件 by @dapr-bot in https://github.com/dapr/dapr/pull/10040
• [回移植 release-1.18] 功能：注册nameformat名称解析组件 by @dapr-bot in https://github.com/dapr/dapr/pull/10047
• [回移植 release-1.18] 修复(gRPC)：移除本地应用的单例连接限制 by @dapr-bot in https://github.com/dapr/dapr/pull/10048
• [回移植 release-1.18] 清理已归档dapr/dashboard项目的引用 by @dapr-bot in https://github.com/dapr/dapr/pull/10044
• [回移植 release-1.18] 修复漏洞与集成测试不稳定问题 by @dapr-bot in https://github.com/dapr/dapr/pull/10049
• [回移植 release-1.18] 工作流：跳过非持久化可选键的清除删除操作 by @dapr-bot in https://github.com/dapr/dapr/pull/10051

完整变更日志：https://github.com/dapr/dapr/compare/v1.18.0-rc.4…v1.18.0-rc.5

更新内容 （原始）

This is the release candidate 1.18.0-rc.5

What’s Changed

• [Backport release-1.18] fix: update Go SSH crypto dependency by @dapr-bot in https://github.com/dapr/dapr/pull/10001
• [Backport release-1.18] chore(ci): update vm sizes by @dapr-bot in https://github.com/dapr/dapr/pull/9989
• [Backport release-1.18] CI: run macOS tests natively on arm64 by @dapr-bot in https://github.com/dapr/dapr/pull/9988
• [Backport release-1.18] fix dep review: net by @dapr-bot in https://github.com/dapr/dapr/pull/10006
• [Backport release-1.18] Integration: stdio helper binary and move helpers. by @dapr-bot in https://github.com/dapr/dapr/pull/9982
• [Backport release-1.18] chore: Update durabletask-go and components-contrib by @dapr-bot in https://github.com/dapr/dapr/pull/9998
• [Backport release-1.18] Fix test flakes by @dapr-bot in https://github.com/dapr/dapr/pull/10009
• [Backport release-1.18] workflow: save inbox event before creating wake-up reminder by @dapr-bot in https://github.com/dapr/dapr/pull/10010
• [1.18 backport] fix(ci): use Hyper-V Gen 1-compatible Windows VM size for AKS test po… by @cicoyle in https://github.com/dapr/dapr/pull/10004
• [Backport release-1.18] docs: list new workflow payload size ratio metrics by @dapr-bot in https://github.com/dapr/dapr/pull/10011
• [Backport release-1.18] github.com/dapr/kit: update 0.18.1 by @dapr-bot in https://github.com/dapr/dapr/pull/10016
• [Backport release-1.18] fix critical vulns: bump durabletask-go to v0.12.1 and bump pgx by @dapr-bot in https://github.com/dapr/dapr/pull/10017
• [Backport release-1.18] Dependency update: govulncheck by @dapr-bot in https://github.com/dapr/dapr/pull/10022
• [Backport release-1.18] tests: stabilize flaky CI tests by @dapr-bot in https://github.com/dapr/dapr/pull/10018
• [Backport release-1.18] Workflow: retentioner ignore not completed errors by @dapr-bot in https://github.com/dapr/dapr/pull/10026
• [Backport release-1.18] Sentry: fix OIDC X-Forwarded-Host issuer/jwks_uri injection by @dapr-bot in https://github.com/dapr/dapr/pull/10029
• [Backport release-1.18] ci(e2e): rename Azure Key Vault resource in workflow by @dapr-bot in https://github.com/dapr/dapr/pull/10031
• [1.18] Use contrib v1.18.0-rc.1 and bump kit (#10024) + cherrypick jobs api perf tests by @cicoyle in https://github.com/dapr/dapr/pull/10033
• [Backport release-1.18] fix(mcp): gate /healthz/outbound on mcpserver wf registration by @dapr-bot in https://github.com/dapr/dapr/pull/10036
• [Backport release-1.18] ci: pin azure/login to v3 by @dapr-bot in https://github.com/dapr/dapr/pull/10035
• [Backport release-1.18] feat: add config map configuration store component by @dapr-bot in https://github.com/dapr/dapr/pull/10040
• [Backport release-1.18] feat: register nameformat nameresolution component by @dapr-bot in https://github.com/dapr/dapr/pull/10047
• [Backport release-1.18] fix(grpc): remove singleton connection limit for local app by @dapr-bot in https://github.com/dapr/dapr/pull/10048
• [Backport release-1.18] Clean up references to the archived dapr/dashboard by @dapr-bot in https://github.com/dapr/dapr/pull/10044
• [Backport release-1.18] fix vulns and IT flake by @dapr-bot in https://github.com/dapr/dapr/pull/10049
• [Backport release-1.18] Workflow: skip purge deletes for non-persisted optional keys by @dapr-bot in https://github.com/dapr/dapr/pull/10051

Full Changelog: https://github.com/dapr/dapr/compare/v1.18.0-rc.4...v1.18.0-rc.5

下载链接

• daprd_darwin_amd64.tar.gz
• daprd_darwin_amd64.tar.gz.sha256
• daprd_darwin_arm64.tar.gz
• daprd_darwin_arm64.tar.gz.sha256
• daprd_linux_amd64-stablecomponents.tar.gz
• daprd_linux_amd64-stablecomponents.tar.gz.sha256
• daprd_linux_amd64.tar.gz
• daprd_linux_amd64.tar.gz.sha256
• daprd_linux_arm-stablecomponents.tar.gz
• daprd_linux_arm-stablecomponents.tar.gz.sha256
• daprd_linux_arm.tar.gz
• daprd_linux_arm.tar.gz.sha256
• daprd_linux_arm64-stablecomponents.tar.gz
• daprd_linux_arm64-stablecomponents.tar.gz.sha256
• daprd_linux_arm64.tar.gz
• daprd_linux_arm64.tar.gz.sha256
• daprd_windows_amd64.zip
• daprd_windows_amd64.zip.sha256
• grafana-actor-dashboard.json
• grafana-actor-dashboard.json.sha256
• grafana-sidecar-dashboard.json
• grafana-sidecar-dashboard.json.sha256
• grafana-system-services-dashboard.json
• grafana-system-services-dashboard.json.sha256
• injector_darwin_amd64.tar.gz
• injector_darwin_amd64.tar.gz.sha256
• injector_darwin_arm64.tar.gz
• injector_darwin_arm64.tar.gz.sha256
• injector_linux_amd64.tar.gz
• injector_linux_amd64.tar.gz.sha256
• injector_linux_arm.tar.gz
• injector_linux_arm.tar.gz.sha256
• injector_linux_arm64.tar.gz
• injector_linux_arm64.tar.gz.sha256
• injector_windows_amd64.zip
• injector_windows_amd64.zip.sha256
• operator_darwin_amd64.tar.gz
• operator_darwin_amd64.tar.gz.sha256
• operator_darwin_arm64.tar.gz
• operator_darwin_arm64.tar.gz.sha256
• operator_linux_amd64.tar.gz
• operator_linux_amd64.tar.gz.sha256
• operator_linux_arm.tar.gz
• operator_linux_arm.tar.gz.sha256
• operator_linux_arm64.tar.gz
• operator_linux_arm64.tar.gz.sha256
• operator_windows_amd64.zip
• operator_windows_amd64.zip.sha256
• placement_darwin_amd64.tar.gz
• placement_darwin_amd64.tar.gz.sha256
• placement_darwin_arm64.tar.gz
• placement_darwin_arm64.tar.gz.sha256
• placement_linux_amd64.tar.gz
• placement_linux_amd64.tar.gz.sha256
• placement_linux_arm.tar.gz
• placement_linux_arm.tar.gz.sha256
• placement_linux_arm64.tar.gz
• placement_linux_arm64.tar.gz.sha256
• placement_windows_amd64.zip
• placement_windows_amd64.zip.sha256
• scheduler_darwin_amd64.tar.gz
• scheduler_darwin_amd64.tar.gz.sha256
• scheduler_darwin_arm64.tar.gz
• scheduler_darwin_arm64.tar.gz.sha256
• scheduler_linux_amd64.tar.gz
• scheduler_linux_amd64.tar.gz.sha256
• scheduler_linux_arm.tar.gz
• scheduler_linux_arm.tar.gz.sha256
• scheduler_linux_arm64.tar.gz
• scheduler_linux_arm64.tar.gz.sha256
• scheduler_windows_amd64.zip
• scheduler_windows_amd64.zip.sha256
• sentry_darwin_amd64.tar.gz
• sentry_darwin_amd64.tar.gz.sha256
• sentry_darwin_arm64.tar.gz
• sentry_darwin_arm64.tar.gz.sha256
• sentry_linux_amd64.tar.gz
• sentry_linux_amd64.tar.gz.sha256
• sentry_linux_arm.tar.gz
• sentry_linux_arm.tar.gz.sha256
• sentry_linux_arm64.tar.gz
• sentry_linux_arm64.tar.gz.sha256
• sentry_windows_amd64.zip
• sentry_windows_amd64.zip.sha256