Google Drive 歷史版本列表
更新時間：2022-02-18
更新細節：
更新時間：2022-02-16
更新細節：
What's new in this version:
- Support WebHook Notification. (Send the completion notification to Slack or etc).
更新時間：2022-02-11
更新細節：
What's new in this version:
Add fetch API:
- Adds experimental support to the fetch API. This adds a --experimental-fetch flag that installs the fetch, Request, Reponse and Headers globals.
- (SEMVER-MINOR) lib: add fetch
Add stream methods:
- (SEMVER-MINOR) stream: add iterator helper find
- (SEMVER-MINOR) stream: add toArray
- (SEMVER-MINOR) stream: add forEach method
- (SEMVER-MINOR) stream: support some and every
Other Notable Changes:
- (SEMVER-MINOR) node-api: add node_api_symbol_for()
- module: unflag esm json modules
- deps: upgrade npm to 8.4.1
更新時間：2022-02-08
更新細節：
What's new in this version:
Fixed:
- an issue where invalid input would cause an exception. (v3.0 or later)
- an issue that caused exceptions during interruptions. (v3.0 or later)
更新時間：2022-01-31
更新細節：
What's new in this version:
New features:
- Support for attaching to JVMs running in a Kubernetes cluster
- Support for attaching to JVMs running in Docker Desktop on Windows and macOS
- Support for attaching to OpenJ9 JVMs
- Local attach: Added a user switcher to profile JVMs started by different users on Linux
- Local attach: On Windows it is now possible to attach to a JVM started by the same user that runs in a different session
- Local attach: Differing settings for the temporary directory no longer prevent jpenable on Windows to attach to a JVM when the PID is provided
- Local attach: Elevated users can now attach to JVMs started by any user with jpenable on Windows when the PID is provided as long as the JProfiler installation is readable for that user
- Remote attach: Support attaching to JVMs running in Redhat UBI-minimal images
- Remote attach: FreeBSD and AIX are now supported
- Support for profiling OpenWebStart
- Sunburst diagram for the biggest objects view of the heap walker
- Support for the Reactor Netty web client
- Support for the Spring Webflux HTTP client
- The "Java EE components" aggregation level is now called "JEE/Spring" and includes Spring classes that are annotated with @Component or derived annotations
- Calls into proxy classes for profiled interfaces are now shown in the call tree. This adds support for a wide range of frameworks based on code generation.
- Dark mode for documentation
- Pressing the Delete key in view filter popups now deletes the selected entry
- Streamlined integration wizards
- Support for switching between light and dark mode on the fly
- Adding the option ",loopback" to the -agentpath VM parameter for profiling will restrict connecting JProfiler clients to the current machine. This is added by default for sessions launched by JProfiler and by IDE integrations.
- Reorganized general settings dialog
- Async sampling mode is now supported on macOS ARM with Java 17
- PHD dumps can now be taken without the presence of the java.management module on newer IBM VMs
- CPU telemetry on Windows is now recorded without the presence of the java.management module
- Added support for Hibernate 6
- Added support for MariaDB connector 3
- Added support for ktor 2
- Added support for RestEasy 6
- Added support for server side events in RestEasy, Jersey and CXF
Fixed:
- The controller MBean was not always added to an existing MBean server
- Heap walker: In the incoming references view, node selections from the path to GC root search were not memorized when moving back and forth in the heap walker history
- Call tree: Jumping to execution sites and to the probe call tree was not reliable
- CPU threshold triggers were broken on non-Windows platforms
- SSH password authentication did not work when connecting to FreeBSD 13
- NetBeans plugin: Profiling Maven projects did not work for NetBeans 12.6
- IDE integrations: When multiple JProfiler windows were opened from an IDE integration, some windows could not be used for standalone sessions anymore
更新時間：2022-01-29
更新細節：
更新時間：2022-01-26
更新細節：
What's new in this version:
Better block controls:
- WordPress 5.9 features new typography tools, flexible layout controls, and finer control of details like spacing, borders, and more—to help you get not just the look, but the polish that says you care about details
The power of patterns:
- The WordPress Pattern Directory is the home of a wide range of block patterns built to save you time and add to your site’s functionality. And you can edit them as you see fit. Need something different in the header or footer for your theme? Swap it out with a new one in a few clicks.
- With a nearly full-screen view that draws you in to see fine details, the Pattern Explorer makes it easy to compare patterns and choose the one your users need
A revamped List View:
- In 5.9, the List View lets you drag and drop your content exactly where you want it. Managing complex documents is easier, too: simple controls let you expand and collapse sections as you build your site—and add HTML anchors to your blocks to help users get around the page.
A better Gallery block:
- Treat every image in a Gallery Block the same way you would treat it in the Image Block
- Style every image in your gallery differently, or make them all the same, except for one or two. Or change the layout with drag-and-drop
更新時間：2022-01-19
更新細節：
What's new in this version:
Changed:
- (SEMVER-MINOR) child_process: add support for URL to cp.fork
- (SEMVER-MINOR) crypto: alias webcrypto.subtle and webcrypto.getRandomValues on crypto
- doc: add Mesteery to collaborators
- (SEMVER-MINOR) events: graduate capturerejections to supported
- (SEMVER-MINOR) events: add EventEmitterAsyncResource to core
- (SEMVER-MINOR) loader: return package format from defaultResolve if known
- (SEMVER-MINOR) perf_hooks: multiple fixes for Histogram
- (SEMVER-MINOR) stream: add filter method to readable
- (SEMVER-MINOR) stream: add isReadable helper
- (SEMVER-MINOR) stream: add map method to Readable
更新時間：2022-01-18
更新細節：
更新時間：2022-01-11
更新細節：
What's new in this version:
Improper handling of URI Subject Alternative Names (Medium)(CVE-2021-44531):
- Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.
- Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option
- More details will be available at CVE-2021-44531 after publication
Certificate Verification Bypass via String Injection (Medium)(CVE-2021-44532):
- Node.js converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an injection vulnerability when name constraints were used within a certificate chain, allowing the bypass of these name constraints.
- Versions of Node.js with the fix for this escape SANs containing the problematic characters in order to prevent the injection. This behavior can be reverted through the --security-revert command-line option.
- More details will be available at CVE-2021-44532 after publication
Incorrect handling of certificate subject and issuer fields (Medium)(CVE-2021-44533):
- Node.js did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relative Distinguished Name, for example, in order to inject a Common Name that would allow bypassing the certificate subject verification.
- Affected versions of Node.js do not accept multi-value Relative Distinguished Names and are thus not vulnerable to such attacks themselves. However, third-party code that uses node's ambiguous presentation of certificate subjects may be vulnerable.
- More details will be available at CVE-2021-44533 after publication
Prototype pollution via console.table properties (Low)(CVE-2022-21824):
- Due to the formatting logic of the console.table() function it was not safe to allow user controlled input to be passed to the properties parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be __proto__. The prototype pollution has very limited control, in that it only allows an empty string to be assigned numerical keys of the object prototype.
- Versions of Node.js with the fix for this use a null protoype for the object these properties are being assigned to
- More details will be available at CVE-2022-21824 after publication
- Thanks to Patrik Oldsberg (rugvip) for reporting this vulnerability