Skip to content

chore(deps): 依赖项升级[com.alibaba.nacos:nacos-client][3.2.0 => 3.2.1-2026.03.30]#1101

Closed
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/maven/meta-bom/bom-deamon/dependa/com.alibaba.nacos-nacos-client-3.2.1-2026.03.30
Closed

chore(deps): 依赖项升级[com.alibaba.nacos:nacos-client][3.2.0 => 3.2.1-2026.03.30]#1101
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/maven/meta-bom/bom-deamon/dependa/com.alibaba.nacos-nacos-client-3.2.1-2026.03.30

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 31, 2026

Bumps com.alibaba.nacos:nacos-client from 3.2.0 to 3.2.1-2026.03.30.

Release notes

Sourced from com.alibaba.nacos:nacos-client's releases.

3.2.1-2026.03.30

Nacos 3.2.1-2026.03.30 is a snapshot release focused on critical bug fixes for issues discovered in 3.2.0, particularly around AI module dependency conflicts, console UI bugs, and race conditions in the skill publish pipeline.

Key highlights include:

  • Dependency Resolution: Upgraded MCP SDK to 0.17.0 to resolve json-schema-validator conflicts affecting AI module functionality
  • AI Module Stability: Fixed race condition in skill publish pipeline and streamlined skill download routing
  • Console UI Fixes: Addressed configuration file editing errors and namespace ID validation issues in the new UI
  • Input Validation: Enhanced parameter validation in ops controller forms for better security

Feature

  • #14794 Support force-publish skills for admin user

Enhancement/Refactor

  • #14784 Validate input parameters in ops controller forms for better security

BugFix

  • #14765 Fix configuration file editing error in 3.2 console
  • #14768 Fix /v3/console/ai/mcp/importToolsFromMcp failure due to json-schema-validator dependency conflict
  • #14771 Fix batch import failure in legacy console UI
  • #14775 Add missing OIDC-related configurations to application.properties template
  • #14783 Remove downloadSkillZip from AiClientProxy interface and route skill download directly to HTTP client
  • #14786 Eliminate race condition in AI publish pipeline by pre-generating executionId
  • #14794 Fix namespace ID validation issue in new UI when adding custom namespace

Dependencies

  • #14782 Upgrade MCP SDK to 0.17.0 to resolve json-schema-validator conflict

Full Changelog: alibaba/nacos@3.2.0...3.2.1-2026.03.30

Commits
  • 9e968cc style(common): fix header comment formatting in AbstractNacosRestTemplate.java.
  • 6e6c850 chore(build): update project revision to 3.2.1-2026.03.30.
  • 2a213de Support force-publish skills for admin user. (#14794)
  • a0200d5 fix(common): add ByteArrayResponseHandler to fix byte[] deserialization in Na...
  • 920551e develop fix ut (#14788)
  • 40e1e48 ➖ remove duplicate dependency (#14769)
  • 2989450 [AI] Remove downloadSkillZip from AiClientProxy interface, Skill always uses ...
  • c9161d1 fix(ai): eliminate race condition in publish pipeline by pre-generating execu...
  • 3856ec7 Fix UT. (#14781)
  • 3dfee74 feat(core): validate input parameters in ops controller forms. (#14784)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.alibaba.nacos:nacos-client](https://github.com/alibaba/nacos) from 3.2.0 to 3.2.1-2026.03.30.
- [Release notes](https://github.com/alibaba/nacos/releases)
- [Changelog](https://github.com/alibaba/nacos/blob/develop/CHANGELOG.md)
- [Commits](alibaba/nacos@3.2.0...3.2.1-2026.03.30)

---
updated-dependencies:
- dependency-name: com.alibaba.nacos:nacos-client
  dependency-version: 3.2.1-2026.03.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Mar 31, 2026

Assignees

The following users could not be added as assignees: dependabot[bot]. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added Dependabot Dependabot 依赖:升级 依赖升级 自动化:提交 自动化提交 labels Mar 31, 2026
@github-actions github-actions Bot changed the title chore(deps): bump com.alibaba.nacos:nacos-client from 3.2.0 to 3.2.1-2026.03.30 in /meta-bom/bom-deamon chore(deps): 依赖项升级[com.alibaba.nacos:nacos-client][3.2.0 => 3.2.1-2026.03.30] Mar 31, 2026
Base automatically changed from dependa to dev March 31, 2026 16:23
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 3, 2026

Superseded by #1200.

@dependabot dependabot Bot closed this Apr 3, 2026
@dependabot dependabot Bot deleted the dependabot/maven/meta-bom/bom-deamon/dependa/com.alibaba.nacos-nacos-client-3.2.1-2026.03.30 branch April 3, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependabot Dependabot 依赖:升级 依赖升级 自动化:提交 自动化提交

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants