Repository navigation
release: 3.5.1 - #217
Merged
Merged
release: 3.5.1#217
Conversation
Always use the service-account CA with peer verification. Missing or invalid trust material must fail discovery without exposing the bearer token, while preserving membership and allowing later polls to recover. Cover trust failures, hostname and expiry validation, and recovery using a real loopback HTTPS server. Fixes #214.
Resolve an address namespace from its optional target reference, endpoint metadata, or the namespace of the request. Valid external endpoints must not crash strategy startup. Skip entries that cannot form a hostname node while retaining usable neighbors.
Validate external-term framing and encrypted payload lengths at the input boundary. Reject compressed terms and invalid PKCS7 padding, and isolate decoding errors so discovery can continue after malformed packets. Preserve the existing node-name wire format and document that Gossip still requires trusted senders; encryption does not authenticate this protocol.
Exercise discovery through the real TLS client using generated certificates, ephemeral loopback listeners and response fixtures. Check request paths, selectors, cache queries, authentication and membership during API failures. Remove ExVCR, its converter override and unused transitive dependencies so the test suite runs across the supported Erlang and Elixir versions.
Test Elixir 1.13 through 1.20 on maintained Ubuntu runners with compatible OTP, Hex and Rebar versions. Keep dependency caches isolated by runtime and add strict compilation, documentation, package and dependency checks. Lock direct and transitive actions, validate workflows with actionlint and zizmor, restrict token permissions and bound job execution. Document local maintenance commands and schedule grouped dependency updates.
Document fail-closed Kubernetes TLS, optional endpoint references and malformed Gossip input handling, including deployment trust requirements. Describe the supported CI runtime range and test infrastructure changes. Move the already released cache option into the 3.5.0 changelog section and add a release checklist that aligns package contents, documentation refs, tags and maintainer-controlled publication.
Use polling_interval in the option reference, matching the implementation and configuration example so users can configure the polling frequency.
This was referenced Nov 1, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Maintenance and CI hardening release to fix outstanding issues