Bump github.com/nats-io/nats-server/v2 from 2.1.9 to 2.8.1 in /distributor

[dependabot]

Bumps github.com/nats-io/nats-server/v2 from 2.1.9 to 2.8.1.

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.8.1

Changelog

Go Version

• 1.17.9: Both release executables and Docker images are built with this Go release.

Changed:

• JetStream:
  • Enforce a minimum of 100ms for "max age" and "duplicates window" settings (#3056)

Updated:

• Dependencies:
  • golang.org/x/crypto due to a CVE scan. However, since this affects crypto/ssh that the server is not using, the vulnerability does not impact the NATS Server. Thank you to @​pgvishnuram for the contribution (#3065)

Fixed

• JetStream:
  • Assets migration may fail due to an aggressive internal polling mechanism (#3059)
  • Mirror streams would fail to be recovered from an earlier NATS Server versions with an error regarding duplicate window. Thanks to @​yadvlz and @​BenChen-PKI for the reports (#3060, #3067)
  • Mirror and Sources issues, especially in a mixed-mode super cluster layout (#3061, #3066)
  • A stream with a source may be canceled when the stream was updated. Thanks to @​sargikk for the report (#3061)
• LeafNode:
  • Failed to propagate subscription interest after a configuration reload. Thanks to @​LLLLimbo for the report (#3058)

Complete Changes

nats-io/nats-server@v2.8.0...v2.8.1

Release v2.8.0

Changelog

Go Version

• 1.17.9: Both release executables and Docker images are built with this Go release.

Added:

• LeafNode:
  • Support for a min_version in the leafnodes{} that would reject servers with a lower version. Note that this would work only for servers that are v2.8.0 and above (#3013)
• Monitoring:
  • Server version in monitoring landing page (#2928)
  • Logging to /healthz endpoint when failure occurs. Thanks to @​samuel-form3 for the contribution (#2976)
  • MQTT and Websocket blocks in the /varz endpoint (#2996)
• JetStream:
  • Consumer check added to healthz endpoint (#2927)
  • Max stream bytes checks (#2970)
  • Ability to limit a consumer's MaxAckPending value (#2982)
  • Allow streams and consumers to migrate between clusters. This feature is considered "beta" (#3001, #3036, #3041, #3043, #3047)

... (truncated)

Commits

• 23b41bb Merge pull request #3068 from nats-io/release_2_8_1
• dcfd524 Release v2.8.1
• 99f1bdf Bump version to 2.8.1-beta.1
• f4115b6 Merge pull request #3067 from nats-io/js_fix_mirror_dedup
• 243851a Merge pull request #3065 from pgvishnuram/main
• 363849b [FIXED] JetStream: Mirrors would fail to be recovered
• e3eb25d Merge pull request #3066 from nats-io/js_fix_stream_mirror
• b9463b3 [FIXED] JetStream: stream mirror issues in mixed mode clusters
• df61a33 Merge pull request #3061 from nats-io/js_fix_stream_source
• 5cc4d0c fix for CVE-2022-27191
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #368.