dapr v1.18.3-rc.1 版本更新介绍

发布日期: 2026-08-04
版本号: v1.18.3-rc.1

该版本为Dapr v1.18.3-rc.1候选发布版，主要包含以下更新：修复了多个安全依赖（如GO-2026-5970及gRPC相关组件）；增强了调度器性能，包括恢复etcd指标、优化关闭流程以处理异常的WatchJobs流；改进了工作流功能，修复了GetInstance临时性失败问题；解决了通过HTTP调度且不含data字段的作业无法正常传递的问题，并增加了时区相关测试；使绑定探针的OPTIONS超时配置可调整；为MCP服务器添加了失败时的重试注册逻辑；修复了发布订阅中因非字符串trace字段导致的HTTP投递panic问题。此外，GitHub工作流新增了合并组配置。

更新内容 （中文）

这是发布候选版本 1.18.3-rc.1

变更内容

• [回移植 release-1.18] 更新依赖项以应对 GO-2026-5970 安全公告 by @dapr-bot in https://github.com/dapr/dapr/pull/10259
• [回移植 release-1.18] 指标：在调度器上恢复 etcd 指标 by @dapr-bot in https://github.com/dapr/dapr/pull/10260
• [回移植 release-1.18] 调度器：限制关闭排空时间，在 WatchJobs 流断开时保持生存 by @dapr-bot in https://github.com/dapr/dapr/pull/10262
• [回移植 release-1.18] GitHub 工作流：为所有工作流添加合并组触发器 by @dapr-bot in https://github.com/dapr/dapr/pull/10278
• [回移植 release-1.18] 安全更新：升级 gRPC 等依赖 by @dapr-bot in https://github.com/dapr/dapr/pull/10286
• [回移植 release-1.18] 工作流：修复暂时性 GetInstance 失败问题 by @dapr-bot in https://github.com/dapr/dapr/pull/10289
• [回移植 release-1.18] 修复通过 HTTP 调度的任务因缺少 data 字段导致投递失败 + 时区测试 by @dapr-bot in https://github.com/dapr/dapr/pull/10292
• [1.18] 挑选修复：使绑定 OPTIONS 探测超时可配置 (#10220) by @cicoyle in https://github.com/dapr/dapr/pull/10300
• [回移植 release-1.18] MCP服务器：注册失败时重试 by @dapr-bot in https://github.com/dapr/dapr/pull/10318
• [回移植 release-1.18] PubSub：修复非字符串跟踪字段导致 HTTP 投递 panic 的问题 by @dapr-bot in https://github.com/dapr/dapr/pull/10320

完整变更日志: https://github.com/dapr/dapr/compare/v1.18.2...v1.18.3-rc.1

更新内容 （原始）

This is the release candidate 1.18.3-rc.1

What’s Changed

• [Backport release-1.18] Update deps for GO-2026-5970 by @dapr-bot in https://github.com/dapr/dapr/pull/10259
• [Backport release-1.18] Metrics: Restore etcd metrics on the scheduler by @dapr-bot in https://github.com/dapr/dapr/pull/10260
• [Backport release-1.18] scheduler: bound shutdown drain, survive dead WatchJobs streams by @dapr-bot in https://github.com/dapr/dapr/pull/10262
• [Backport release-1.18] GH workflow: adds merge group to all workflows by @dapr-bot in https://github.com/dapr/dapr/pull/10278
• [Backport release-1.18] sec: bump grpc etc by @dapr-bot in https://github.com/dapr/dapr/pull/10286
• [Backport release-1.18] Workflow: Fix transient GetInstance failure by @dapr-bot in https://github.com/dapr/dapr/pull/10289
• [Backport release-1.18] Fix jobs scheduled over HTTP without data failing to deliver + timezone tests by @dapr-bot in https://github.com/dapr/dapr/pull/10292
• [1.18] cherrypick fix(runtime): make binding OPTIONS probe timeout configurable (#10220) by @cicoyle in https://github.com/dapr/dapr/pull/10300
• [Backport release-1.18] mcpserver retry registration on failure by @dapr-bot in https://github.com/dapr/dapr/pull/10318
• [Backport release-1.18] PubSub: Fix panic in HTTP delivery on non-string trace field by @dapr-bot in https://github.com/dapr/dapr/pull/10320

Full Changelog: https://github.com/dapr/dapr/compare/v1.18.2...v1.18.3-rc.1

下载链接

• daprd_darwin_amd64.tar.gz
• daprd_darwin_amd64.tar.gz.sha256
• daprd_darwin_arm64.tar.gz
• daprd_darwin_arm64.tar.gz.sha256
• daprd_linux_amd64-stablecomponents.tar.gz
• daprd_linux_amd64-stablecomponents.tar.gz.sha256
• daprd_linux_amd64.tar.gz
• daprd_linux_amd64.tar.gz.sha256
• daprd_linux_arm-stablecomponents.tar.gz
• daprd_linux_arm-stablecomponents.tar.gz.sha256
• daprd_linux_arm.tar.gz
• daprd_linux_arm.tar.gz.sha256
• daprd_linux_arm64-stablecomponents.tar.gz
• daprd_linux_arm64-stablecomponents.tar.gz.sha256
• daprd_linux_arm64.tar.gz
• daprd_linux_arm64.tar.gz.sha256
• daprd_windows_amd64.zip
• daprd_windows_amd64.zip.sha256
• grafana-actor-dashboard.json
• grafana-actor-dashboard.json.sha256
• grafana-sidecar-dashboard.json
• grafana-sidecar-dashboard.json.sha256
• grafana-system-services-dashboard.json
• grafana-system-services-dashboard.json.sha256
• injector_darwin_amd64.tar.gz
• injector_darwin_amd64.tar.gz.sha256
• injector_darwin_arm64.tar.gz
• injector_darwin_arm64.tar.gz.sha256
• injector_linux_amd64.tar.gz
• injector_linux_amd64.tar.gz.sha256
• injector_linux_arm.tar.gz
• injector_linux_arm.tar.gz.sha256
• injector_linux_arm64.tar.gz
• injector_linux_arm64.tar.gz.sha256
• injector_windows_amd64.zip
• injector_windows_amd64.zip.sha256
• operator_darwin_amd64.tar.gz
• operator_darwin_amd64.tar.gz.sha256
• operator_darwin_arm64.tar.gz
• operator_darwin_arm64.tar.gz.sha256
• operator_linux_amd64.tar.gz
• operator_linux_amd64.tar.gz.sha256
• operator_linux_arm.tar.gz
• operator_linux_arm.tar.gz.sha256
• operator_linux_arm64.tar.gz
• operator_linux_arm64.tar.gz.sha256
• operator_windows_amd64.zip
• operator_windows_amd64.zip.sha256
• placement_darwin_amd64.tar.gz
• placement_darwin_amd64.tar.gz.sha256
• placement_darwin_arm64.tar.gz
• placement_darwin_arm64.tar.gz.sha256
• placement_linux_amd64.tar.gz
• placement_linux_amd64.tar.gz.sha256
• placement_linux_arm.tar.gz
• placement_linux_arm.tar.gz.sha256
• placement_linux_arm64.tar.gz
• placement_linux_arm64.tar.gz.sha256
• placement_windows_amd64.zip
• placement_windows_amd64.zip.sha256
• scheduler_darwin_amd64.tar.gz
• scheduler_darwin_amd64.tar.gz.sha256
• scheduler_darwin_arm64.tar.gz
• scheduler_darwin_arm64.tar.gz.sha256
• scheduler_linux_amd64.tar.gz
• scheduler_linux_amd64.tar.gz.sha256
• scheduler_linux_arm.tar.gz
• scheduler_linux_arm.tar.gz.sha256
• scheduler_linux_arm64.tar.gz
• scheduler_linux_arm64.tar.gz.sha256
• scheduler_windows_amd64.zip
• scheduler_windows_amd64.zip.sha256
• sentry_darwin_amd64.tar.gz
• sentry_darwin_amd64.tar.gz.sha256
• sentry_darwin_arm64.tar.gz
• sentry_darwin_arm64.tar.gz.sha256
• sentry_linux_amd64.tar.gz
• sentry_linux_amd64.tar.gz.sha256
• sentry_linux_arm.tar.gz
• sentry_linux_arm.tar.gz.sha256
• sentry_linux_arm64.tar.gz
• sentry_linux_arm64.tar.gz.sha256
• sentry_windows_amd64.zip
• sentry_windows_amd64.zip.sha256