Bump github.com/nats-io/nats-server/v2 from 2.1.9 to 2.6.3 in /distributor

[dependabot]

Bumps github.com/nats-io/nats-server/v2 from 2.1.9 to 2.6.3.

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.6.3

Changelog

Notice for JetStream Users

See important note if upgrading from a version prior to v2.4.0.

Notice for MQTT Users

See important note if upgrading from a version prior to v2.5.0.

Go Version

• 1.16.9: Both release executables and Docker images are built with this Go release.

Fixed

• Gateways:
  • Each server within a cluster gossips its gateway URL, however, when two servers create route to each other and one route is dropped as a duplicate, a server may lose the peer's gateway URL and therefore would not be able to gossip it to inbound gateway connections (#2653)
• JetStream:
  • Purging would, in some cases, not honor the amount of messages to keep after purge (#2623)
  • Panic caused by the Unlock of unlocked RWMutex, which would happen through non client connections when the limit of JetStream API in-flight requests was reached. Thanks to @​minight for the report (#2645)
  • Cluster becomes inconsistent with constant "catchup for stream stalled" warnings. Thanks to @​aksdb for the report (#2648)
  • Ensure that stream's sealed, deny delete, deny purge and allow rollup booleans in stream config are always set (for languages that may not set to false when decoding JSON when absent) and set the deny delete and purge to true and allow rollup to false when a stream is sealed (#2650)
  • Redelivered state of consumers was not properly decoded from file (#2652)
• LeafNode:
  • Apparent memory leak on "Authorization Violation" errors. Thanks to @​DavidSimner for the contribution (#2637)
• Monitoring:
  • The /varz endpoint may still show gateway URLs of servers that have been removed from the remote cluster (#2647)
  • The /varz endpoint would not show the configured URLs of a remote gateway block if that remote gateway was the one of the server being inspected (#2653)
• OCSP:
  • Only last of LeafNode and Gateway remotes were being updated. Thanks to @​guodongli-google for the report (#2632)
• TLS:
  • If a connection is closed before the specified TLS timeout, the connection object would be retained in the go runtime due to the TLS timeout timer not being stopped, which could be seen as a memory leak, until that timer fired (#2638)
• Redact URLs before logging. Thanks to @​fowlerp-qlik for the report (#2643)

Complete Changes

nats-io/nats-server@v2.6.2...v2.6.3

Release v2.6.2

Changelog

Notice for JetStream Users

See important note if upgrading from a version prior to v2.4.0.

Notice for MQTT Users

... (truncated)

Commits

• 530ea6a Merge pull request #2654 from nats-io/release_2_6_3
• a06e11a Release v2.6.3
• 31cb06d Merge pull request #2655 from nats-io/st-race
• cf53220 Race around accessing storage type
• c6b1d7f Merge pull request #2653 from nats-io/gw_gossip_urls
• 22fb95f Merge pull request #2652 from nats-io/consumer-rdc
• 5fc9e0e [FIXED] Gateway URLs gossip and /varz report issues
• 003b699 If AckWait less then restart check interval use AckWait
• 3a14a98 Fix for a bug that did not properly decode redelivered state for consumers fr...
• 862c0c6 Merge pull request #2650 from nats-io/issue-2633
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #236.