Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DX-1813] Release Notes 5.3.10 #5973

Open
wants to merge 20 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/menu-yaml-link-checker.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ jobs:
with:
python-version: ${{ matrix.python-version }}
- name: cache poetry install
uses: actions/cache@v2
uses: actions/cache@v4
with:
path: ~/.local
key: poetry-${{ matrix.poetry-version }}-0
Expand All @@ -46,7 +46,7 @@ jobs:
virtualenvs-in-project: true
- name: load cached venv
id: cached-poetry-dependencies
uses: actions/cache@v2
uses: actions/cache@v4
with:
path: ./tyk-docs/tyk_libs/.venv
key: venv-${{ runner.os }}-${{ hashFiles('**/poetry.lock') }}
Expand Down
91 changes: 91 additions & 0 deletions tyk-docs/content/developer-support/release-notes/dashboard.md
Original file line number Diff line number Diff line change
Expand Up @@ -1146,6 +1146,97 @@ Fixed the following high priority CVEs identified in the Tyk Dashboard, providin

## 5.3 Release Notes

### 5.3.10 Release Notes

#### Release Date 14 February 2025

#### Release Highlights

In this release, we upgraded the Golang version to `v1.23` and fixed a [CVE-2025-21613](https://nvd.nist.gov/vuln/detail/CVE-2025-21613]). For a comprehensive list of changes, please refer to the detailed [changelog]({{< ref "#Changelog-v5.3.10">}}) below.

#### Breaking Changes

This release has no breaking changes.

#### Dependencies {#dependencies-5.3.10}

##### Compatibility Matrix For Tyk Components

| Dashboard Version | Recommended Releases | Backwards Compatibility |
|---- |---- |---- |
| 5.3.10 | MDCB v2.5.1 | MDCB v2.5.1 |
| | Operator v0.17 | Operator v0.16 |
| | Sync v1.4.3 | Sync v1.4.3 |
| | Helm Chart (tyk-stack, tyk-oss, tyk-dashboard, tyk-gateway) v2.0.0 | Helm all versions |
| | EDP v1.8.3 | EDP all versions |
| | Pump v1.9.0 | Pump all versions |
| | TIB (if using standalone) v1.5.1 | TIB all versions |


##### 3rd Party Dependencies & Tools {#3rdPartyTools-v5.3.10}

| Third Party Dependency | Tested Versions | Compatible Versions | Comments |
| ---------------------------------------------------------- | ---------------------- | ---------------------- | -------- |
| [GoLang](https://go.dev/dl/) | 1.23 | 1.23 | [Go plugins]({{< ref "plugins/supported-languages/golang" >}}) must be built using Go 1.23 |
| [Redis](https://redis.io/download/) | 6.2.x, 7.x | 6.2.x, 7.x | Used by Tyk Dashboard |
| [MongoDB](https://www.mongodb.com/try/download/community) | 5.0.x, 6.0.x, 7.0.x | 5.0.x, 6.0.x, 7.0.x | Used by Tyk Dashboard |
| [PostgreSQL](https://www.postgresql.org/download/) | 12.x - 16.x LTS | 12.x - 16.x | Used by Tyk Dashboard |
| [OpenAPI Specification](https://spec.openapis.org/oas/v3.0.3) | v3.0.x | v3.0.x | Supported by [Tyk OAS]({{< ref "api-management/gateway-config-tyk-oas#tyk-oas-api-definition-object" >}})|

Given the time difference between your upgrade and the release of this version, we recommend customers verify the ongoing support of third-party dependencies they install, as their status may have changed since the release.

#### Deprecations
There are no deprecations in this release

#### Upgrade Instructions
If you are upgrading to 5.3.10, please follow the detailed [upgrade instructions](#upgrading-tyk).

#### Downloads
- [Docker Image to pull](https://hub.docker.com/r/tykio/tyk-dashboard/tags?page=&page_size=&ordering=&name=v5.3.10)
- ```bash
docker pull tykio/tyk-dashboard:v5.3.10
```
- Helm charts
- [tyk-charts v2.0.0]({{< ref "developer-support/release-notes/helm-chart#200-release-notes" >}})

#### Changelog {#Changelog-v5.3.10}

##### Fixed

<ul>
<li>
<details>
<summary>Upgraded to Golang 1.23</summary>

Tyk Dashboard now runs on Golang 1.23, bringing security and performance improvements. Key changes include unbuffered Timer/Ticker channels, removal of 3DES cipher suites, and updates to X509KeyPair handling. Users may need to adjust their setup for compatibility.
</details>
</li>
</ul>

##### Security Fixes

<ul>
<li>
<details>
<summary>Critical Priority CVEs Fixed</summary>

Fixed the following critical priority CVE identified in the Dashboard UI, providing increased protection and improved security:
- [CVE-2025-21613](https://nvd.nist.gov/vuln/detail/CVE-2025-21613)
</details>
</li>
<li>
<details>
<summary>High Priority CVE Fixed</summary>

- Fixed the following CVE:
- [CVE-2025-21614](https://nvd.nist.gov/vuln/detail/CVE-2025-21614)

</details>
</li>
</ul>

---

### 5.3.9 Release Notes

#### Release Date 31 December 2024
Expand Down
84 changes: 84 additions & 0 deletions tyk-docs/content/developer-support/release-notes/gateway.md
Original file line number Diff line number Diff line change
Expand Up @@ -1477,6 +1477,90 @@ links to API documentation and FAQs. You can copy it from the previous release.

## 5.3 Release Notes

### 5.3.10 Release Notes

#### Release Date 14 February 2025

#### Release Highlights

In this release, we upgraded the Golang version to `v1.23` for security enhancement and fixed an API authentication issue with redirects. For a comprehensive list of changes, please refer to the detailed [changelog]({{< ref "#Changelog-v5.3.10">}}) below.

#### Breaking Changes

This release has no breaking changes.

#### Dependencies

##### Compatibility Matrix For Tyk Components

| Gateway Version | Recommended Releases | Backwards Compatibility |
| --------------- | ------------------------------------------------------------------ | ----------------------- |
| 5.3.10 | MDCB v2.5.1 | MDCB v2.5.1 |
| | Operator v0.17 | Operator v0.16 |
| | Sync v1.4.3 | Sync v1.4.3 |
| | Helm Chart (tyk-stack, tyk-oss, tyk-dashboard, tyk-gateway) v2.0.0 | Helm all versions |
| | EDP v1.8.3 | EDP all versions |
| | Pump v1.9.0 | Pump all versions |
| | TIB (if using standalone) v1.5.1 | TIB all versions |

##### 3rd Party Dependencies & Tools

| Third Party Dependency | Tested Versions | Compatible Versions | Comments |
| ------------------------------------------------------------- | --------------------- | --------------------- | ------------------------------------------------------------------------------------------ |
| [Go](https://go.dev/dl/) | 1.23 (GW) | 1.23 (GW) | [Go plugins]({{< ref "plugins/supported-languages/golang" >}}) must be built using Go 1.23 |
| [Redis](https://redis.io/download/) | 6.2.x, 7.x | 6.2.x, 7.x | Used by Tyk Gateway |
| [OpenAPI Specification](https://spec.openapis.org/oas/v3.0.3) | v3.0.x | v3.0.x | Supported by [Tyk OAS]({{< ref "api-management/gateway-config-tyk-oas#tyk-oas-api-definition-object" >}}) |

Given the potential time difference between your upgrade and the release of this version, we recommend users verify the
ongoing support of third-party dependencies they install, as their status may have changed since the release.

#### Deprecations

There are no deprecations in this release

#### Upgrade Instructions

If you are upgrading to 5.3.10, please follow the detailed [upgrade instructions](#upgrading-tyk).

#### Downloads

- [Docker image to pull](https://hub.docker.com/r/tykio/tyk-gateway/tags?page=&page_size=&ordering=&name=v5.3.10)
- ```bash
docker pull tykio/tyk-gateway:v5.3.10
```
- Helm charts
- [tyk-charts v2.0.0]({{<ref "developer-support/release-notes/helm-chart#200-release-notes">}})
- [Source code tarball for OSS projects](https://github.com/TykTechnologies/tyk/releases)

#### Changelog {#Changelog-v5.3.10}

##### Fixed

<ul>
<li>
<details>
<summary>Resolved gateway not entering "emergency" mode</summary>

Fixed an issue where the gateway stopped processing traffic when restarted while MDCB was unavailable. Instead of entering "emergency" mode and loading APIs and policies from the Redis backup, the gateway remained unresponsive, continuously attempting to reconnect.
With this fix, the gateway detects connection failure and enters `emergency` mode, ensuring traffic processing resumes even when MDCB is down.
</details>
</li>
<li>
<details>
<summary>Upgraded to Golang 1.23</summary>

Tyk Gateway now runs on Golang 1.23, bringing security and performance improvements. Key changes include unbuffered Timer/Ticker channels, removal of 3DES cipher suites, and updates to X509KeyPair handling. Users may need to adjust their setup for compatibility.
</details>
</li>
<li>
<details>
<summary>Resolved API authentication issue while handling redirects using "tyk://" Scheme</summary>

This fix ensures that when API A redirects to API B using the tyk:// scheme, API B will now correctly authenticate using its own credentials, improving access control and preventing access denials. Users can now rely on the expected authentication flow without workarounds, providing a smoother experience when integrating APIs.
</details>
</li>
</ul>

### 5.3.9 Release Notes

#### Release Date 31 December 2024
Expand Down
Loading