RabbitMQ 3.10.7

[michaelklishin]

RabbitMQ 3.10.7 is a maintenance release in the 3.10.x release series.

Please refer to the upgrade section from v3.10.0 release notes
if upgrading from a version prior to 3.10.0.

This release requires Erlang 24.x and supports Erlang 25.
RabbitMQ and Erlang/OTP Compatibility Matrix has more details on
Erlang version requirements for RabbitMQ.

Changes Worth Mentioning

Release notes can be found on GitHub at rabbitmq-server/release-notes.

Core Server

Enhancements

• Classic queue that used CQv2 (2nd generation index and message store) could run into an exception when lazy mode
  was enabled for them.

  GitHub issue: #5252

• Stream coordinator now handles lots of client connections on a single stream more efficiently.
  Previously its memory footprint was likely to begin creeping up.

  GitHub issue: #5181

• In environments where DNS resolution is not yet available at the time RabbitMQ nodes boot and try to perform peer discovery,
  such as CoreDNS with default caching interval of 30s on Kubernetes, nodes now will retry
  hostname resolution (including of their own host) several times with a wait interval.

  The recommended solution is to decrease CoreDNS caching interval.

  GitHub issue: #5322

• Free disk space monitoring on Windows was reworked to rely on standard runtime features more instead
  of a 3rd party, closed source handle.exe.

  GitHub issues: #5241, #4328

Bug Fixes

• Reduce log noise when sysctl cannot be accessed by node memory monitor.

  GitHub issue: #5256

Prometheus Plugin

Enhancements

• Prometheus plugin now exposes one more metric, process_start_time_seconds, the moment of node process
  startup in seconds.

  GitHub issue: #4539

Management Plugin

Enhancements

• Three more security-related response headers now can be set for all HTTP API endpoints:

  • X-Frame-Options
  • X-Xss-Protection
  • X-Content-Type-Options

  management.headers.content_type_options = nosniff
  management.headers.xss_protection = 1; mode=block
  management.headers.frame_options = DENY

  This is in addition to the CSP, HSTS, and CORS headers:

  management.hsts.policy = max-age=31536000; includeSubDomains
  management.csp.policy = default-src 'self'; script-src 'self' 'unsafe-eval'
  
  management.headers.content_type_options = nosniff
  management.headers.xss_protection = 1; mode=block
  management.headers.frame_options = DENY

  GitHub issue: #5320

Shovel plugin

Bug Fixes

• Shovels now handle consumer delivery timeouts gracefully and restart.

  Contributed by @Haster2004.

  GitHub issue: #5243

Dependency Upgrades

• osiris upgraded from v1.2.7 to v1.3.0

Source Code Archives

To obtain source code of the entire distribution, please download the archive named rabbitmq-server-3.10.7.tar.xz
instead of the source tarball produced by GitHub.

---

This discussion was created from the release RabbitMQ 3.10.7.