[RELEASE] Release version 3.0.0 #3747

opensearch-trigger-bot · 2023-07-16T02:56:30Z

Release Status: `3.0.0-beta1 (In-Progress)`

~~# Release Status: 3.0.0-alpha1 (Done 2025/03/18)~~

(3.0.0-alpha1 ensures early Integration - Ensure code compilation)

(You can still push feature to 3.0.0-beta1 if not ready by 3.0.0-alpha1)

Release OpenSearch and OpenSearch Dashboards 3.0.0

I noticed that a manifest was automatically created in manifests/3.0.0. Please follow the following checklist to make a release.

How to use this issue

This Release Issue

This issue captures the state of the OpenSearch release, its assignee (Release Manager) is responsible for driving the release. Please contact them or @mention them on this issue for help. There are linked issues on components of the release where individual components can be tracked. For more information check the the Release Process OpenSearch Guide.

Please refer to the following link for the release version dates: Release Schedule and Maintenance Policy.

Entrance Criteria

Criteria	Status	Description	Comments
Each component release issue has an assigned owner	🟢
Documentation draft PRs are up and in tech review for all component changes	🔴
Sanity testing is done for all components	🔴
Code coverage has not decreased (all new code has tests)	🔴
Release notes are ready and available for all components	🔴
Roadmap is up-to-date (information is available to create release highlights)	🔴
Release ticket is cut, and there's a forum post announcing the start of the window	🔴
Any necessary security reviews are complete	🔴

OpenSearch 3.0.0-beta1 exit criteria status:

Criteria	Status	Description	Comments
Performance tests are run, results are posted to the release ticket and there no unexpected regressions	🔴
No unpatched vulnerabilities of medium or higher severity that have been publicly known for more than 60 days	🔴
Documentation has been fully reviewed and signed off by the documentation community.	🔴
All integration tests are passing	🔴
Release blog is ready	🔴

OpenSearch-Dashboards 3.0.0-beta1 exit criteria status:

Criteria	Status	Description	Comments
Documentation has been fully reviewed and signed off by the documentation community	🔴
No unpatched vulnerabilities of medium or higher severity that have been publicly known for more than 60 days	🔴
All integration tests are passing	🔴
Release blog is ready	🔴

Preparation

Release manager assigned.
Update release page on the website with release manager and release issue details. Sample PR
Existence of label in each component repo. For more information check the release-label section.
Increase the build frequency.
Release Issue.

Campaigns

Version Increment - (2025/03/24-2025/03/28 3.0.0-beta1)

Feature Freeze - (Ends 2025/04/07 3.0.0-beta1)

OpenSearch / OpenSearch-Dashboards core and components teams finalize their features.

Code Complete - (Ends 2025/04/07 3.0.0-beta1)

Mark this as done once the Code Complete is reviewed.
Create/Verify pull requests to add each component to relase input manifests/3.0.0-beta1/opensearch-3.0.0-beta1.yml and manifests/3.0.0-beta1/opensearch-dashboards-3.0.0-beta1.yml.

Release Branch, Release Candidate Creation and Testing - (2025/04/08 3.0.0-beta1)

Performance testing validation - (2025/04/15 3.0.0-beta1)

Post the benchmark-tests
Longevity tests do not show any issues.

Pre Release - (2025/04/21 3.0.0-beta1)

Release - (2025/04/22 3.0.0-beta1)

Release Checklist.

Release Checklist

Pre-Release activities

Release activities

Post Release

Components

Replace with links to all component tracking issues.

Component	On track	Release Notes
{COMPONENT_ISSUE_LINK}	{INDICATOR}}	{STATUS}

OS:

OSD:

Issues:

Campaigns:

PRs:

Onboard beta1:

Open Increment PR: https://github.com/pulls?q=is%3Apr+user%3Aopensearch-project+label%3Av3.0.0+%5BAUTO%5D+Increment+in%3Atitle+is%3Aopen+
Open PRs: https://github.com/pulls?q=is%3Aopen+is%3Apr+archived%3Afalse+user%3Aopensearch-project+label%3Av3.0.0
Open Issues: https://github.com/issues?q=is%3Aopen+is%3Aissue+archived%3Afalse+user%3Aopensearch-project+label%3Av3.0.0
Docs Pending: https://github.com/opensearch-project/documentation-website/issues?q=is%3Aissue+is%3Aopen+label%3Av3.0.0

Third Party Upgrades:

RFC/Discussion:

3.0.0-alpha1 issues/PRs

Issues:

Campaigns:

Dreprecation:

PRs:

Version Bumps alpha1:
(OS)

(OSD)

Gradle 8.10.2 Bump:

GO/NOGO:

[RELEASE] Release version 3.0.0 #3747 (comment)

Update

The text was updated successfully, but these errors were encountered:

rishabh6788 · 2025-03-14T20:28:42Z

3.0.0-alpha1 Performance Report

There is no significant improvement or regression in indexing performance in 3.0.0-alpha1 compared to 2.19.1.
A few search queries have regressed which is being tracked in multiple issues, see https://github.com/opensearch-project/OpenSearch/issues?q=is%3Aissue%20state%3Aopen%20performance%20author%3Aexpani.

HTTP_LOGS

NYC_TAXIS

PMC

PERCOLATOR

BIG5

opensearch-ci-bot · 2025-03-18T18:43:36Z

See OpenSearch RC 8 and OpenSearch-Dashboards RC 8 details (3.0.0-alpha1)

OpenSearch RC 8 and OpenSearch-Dashboards RC 8 details

## OpenSearch 10932 and OpenSearch-Dashboards 8379 is ready for your test.

OpenSearch - Build 10932
OpenSearch Dashboards - Build 8379

Use the following Docker-Compose to setup a cluster

docker-compose.yml

version: '3' services: opensearch-node1: image: opensearchstaging/opensearch:3.0.0-alpha1.10932 container_name: opensearch-node1 environment: - cluster.name=opensearch-cluster - node.name=opensearch-node1 - discovery.seed_hosts=opensearch-node1,opensearch-node2 - cluster.initial_cluster_manager_nodes=opensearch-node1,opensearch-node2 - bootstrap.memory_lock=true # along with the memlock settings below, disables swapping - OPENSEARCH_INITIAL_ADMIN_PASSWORD=myStrongPassword123! ulimits: memlock: soft: -1 hard: -1 nofile: soft: 65536 # maximum number of open files for the OpenSearch user, set to at least 65536 on modern systems hard: 65536 volumes: - opensearch-data1:/usr/share/opensearch/data ports: - 9200:9200 - 9600:9600 # required for Performance Analyzer networks: - opensearch-net opensearch-node2: image: opensearchstaging/opensearch:3.0.0-alpha1.10932 container_name: opensearch-node2 environment: - cluster.name=opensearch-cluster - node.name=opensearch-node2 - discovery.seed_hosts=opensearch-node1,opensearch-node2 - cluster.initial_cluster_manager_nodes=opensearch-node1,opensearch-node2 - bootstrap.memory_lock=true - OPENSEARCH_INITIAL_ADMIN_PASSWORD=myStrongPassword123! ulimits: memlock: soft: -1 hard: -1 nofile: soft: 65536 hard: 65536 volumes: - opensearch-data2:/usr/share/opensearch/data networks: - opensearch-net opensearch-dashboards: image: opensearchstaging/opensearch-dashboards:3.0.0-alpha1.8379 container_name: opensearch-dashboards ports: - 5601:5601 expose: - "5601" environment: OPENSEARCH_HOSTS: '["https://opensearch-node1:9200","https://opensearch-node2:9200"]' networks: - opensearch-net volumes: opensearch-data1: opensearch-data2:

networks: opensearch-net:

Download the above docker-compose.yml on your machine.
Get latest image versions docker-compose pull.
Start the cluster docker-compose up.

OpenSearch docker 3.0.0-alpha1.10932
- Start without security
  - Docker command docker pull opensearchstaging/opensearch:3.0.0-alpha1.10932 && docker run -it -p 9200:9200 -e "discovery.type=single-node" -e "DISABLE_SECURITY_PLUGIN=true" opensearchstaging/opensearch:3.0.0-alpha1.10932
  - Connect command curl http://localhost:9200/
- Start with security
  - Docker command
```
docker pull opensearchstaging/opensearch:3.0.0-alpha1.10932 && docker run -it -p 9200:9200 -e "discovery.type=single-node" -e "OPENSEARCH_INITIAL_ADMIN_PASSWORD=myStrongPassword123!" opensearchstaging/opensearch:3.0.0-alpha1.10932
```
  - Connect command curl --insecure 'https://admin:myStrongPassword123!@localhost:9200/'
OpenSearch-Dashboards docker 3.0.0-alpha1.8379
- Start without security
  - Docker command docker pull opensearchstaging/opensearch-dashboards:3.0.0-alpha1.8379 && docker run -it --network="host" -e "DISABLE_SECURITY_DASHBOARDS_PLUGIN=true" opensearchstaging/opensearch-dashboards:3.0.0-alpha1.8379
  - URL http://localhost:5601/
- Start with security
  - Docker command docker pull opensearchstaging/opensearch-dashboards:3.0.0-alpha1.8379 && docker run -it --network="host" opensearchstaging/opensearch-dashboards:3.0.0-alpha1.8379
  - URL http://localhost:5601/
Use TARs to deploy OpenSearch Manually
- OpenSearch - Build 10932 (Note: Windows version does not have performance analyzer plugin)
  - arm64 [manifest] [tar] [rpm][deb]
  - x64 [manifest] [tar] [rpm] [deb] [windows]
- OpenSearch Dashboards - Build 8379
  - arm64 [manifest] [tar][rpm][deb]
  - x64 [manifest] [tar][rpm] [deb] [windows]

Check how to install opensearch and dashboards on different platforms

Integration Test Results

Use the https://metrics.opensearch.org/_dashboards/goto/9ed74dd90eb31c7b83f3542e43328088?security_tenant=global.
Filter by the distribution_build_number. Use 10932 for OpenSearch and 8379 for OpenSearch Dashboards.
Example when filtered with 10932 we can see all the passed/failed OpenSearch components. Check the metrics here.
Find the list of the created AUTOCUT issues here https://github.com/issues?page=1&q=is%3Aopen+is%3Aissue+user%3Aopensearch-project+label%3Av3.0.0-alpha1+label%3Aautocut+%5BAUTOCUT%5D+in%3Atitle.

Thank you

OpenSearch Docker-Scan Results

Workflow run




opensearchstaging/opensearch:3.0.0-alpha1-alpha1 (amazon 2023.6.20250303 (Amazon Linux))
=================================================================================
Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

OpenSearch-Dashboards Docker-Scan Results

Workflow run




opensearchstaging/opensearch-dashboards:3.0.0-alpha1-alpha1 (amazon 2023.6.20250303 (Amazon Linux))
============================================================================================
Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)


Node.js (node-pkg)
==================
Total: 9 (UNKNOWN: 0, LOW: 1, MEDIUM: 7, HIGH: 1, CRITICAL: 0)

┌───────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬─────────────────────────┬─────────────────────────────────────────────────────────────┐
│            Library            │ Vulnerability  │ Severity │ Status │ Installed Version │      Fixed Version      │                            Title                            │
├───────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼─────────────────────────┼─────────────────────────────────────────────────────────────┤
│ @babel/runtime (package.json) │ CVE-2025-27789 │ MEDIUM   │ fixed  │ 7.23.2            │ 7.26.10, 8.0.0-alpha.17 │ Babel is a compiler for writing next generation JavaScript. │
│                               │                │          │        │                   │                         │ When using ......                                           │
│                               │                │          │        │                   │                         │ https://avd.aquasec.com/nvd/cve-2025-27789                  │
│                               │                │          │        │                   │                         │                                                             │
│                               │                │          │        │                   │                         │                                                             │
│                               │                │          │        │                   │                         │                                                             │
│                               │                │          │        │                   │                         │                                                             │
│                               │                │          │        ├───────────────────┤                         │                                                             │
│                               │                │          │        │ 7.23.8            │                         │                                                             │
│                               │                │          │        │                   │                         │                                                             │
│                               │                │          │        │                   │                         │                                                             │
│                               │                │          │        ├───────────────────┤                         │                                                             │
│                               │                │          │        │ 7.26.9            │                         │                                                             │
│                               │                │          │        │                   │                         │                                                             │
│                               │                │          │        │                   │                         │                                                             │
│                               │                │          │        ├───────────────────┤                         │                                                             │
│                               │                │          │        │ 7.5.0             │                         │                                                             │
│                               │                │          │        │                   │                         │                                                             │
│                               │                │          │        │                   │                         │                                                             │
├───────────────────────────────┼────────────────┼──────────┤        ├───────────────────┼─────────────────────────┼─────────────────────────────────────────────────────────────┤
│ canvg (package.json)          │ CVE-2025-25977 │ HIGH     │        │ 3.0.10            │ 4.0.3, 3.0.11           │ canvg: Prototype Pollution Vulneralbility                   │
│                               │                │          │        │                   │                         │ https://avd.aquasec.com/nvd/cve-2025-25977                  │
├───────────────────────────────┼────────────────┼──────────┤        ├───────────────────┼─────────────────────────┼─────────────────────────────────────────────────────────────┤
│ cookie (package.json)         │ CVE-2024-47764 │ LOW      │        │ 0.5.0             │ 0.7.0                   │ cookie: cookie accepts cookie name, path, and domain with   │
│                               │                │          │        │                   │                         │ out of bounds...                                            │
│                               │                │          │        │                   │                         │ https://avd.aquasec.com/nvd/cve-2024-47764                  │
├───────────────────────────────┼────────────────┼──────────┤        ├───────────────────┼─────────────────────────┼─────────────────────────────────────────────────────────────┤
│ prismjs (package.json)        │ CVE-2024-53382 │ MEDIUM   │        │ 1.27.0            │ 1.30.0                  │ prismjs: DOM Clobbering vulnerability within the Prism      │
│                               │                │          │        │                   │                         │ library's prism-autoloader plugin                           │
│                               │                │          │        │                   │                         │ https://avd.aquasec.com/nvd/cve-2024-53382                  │
│                               │                │          │        ├───────────────────┤                         │                                                             │
│                               │                │          │        │ 1.29.0            │                         │                                                             │
│                               │                │          │        │                   │                         │                                                             │
│                               │                │          │        │                   │                         │                                                             │
└───────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴─────────────────────────┴─────────────────────────────────────────────────────────────┘

peterzhuamazon · 2025-03-18T21:59:45Z

Signature validation 3.0.0-alpha1:


$ gpg --verify opensearch-3.0.0-alpha1-linux-x64.tar.gz.sig opensearch-3.0.0-alpha1-linux-x64.tar.gz
gpg: Signature made Tue Mar 18 17:54:22 2025 EDT
gpg:                using RSA key C2EE2AF6542C03B4
gpg: Good signature from "OpenSearch project <[email protected]>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: C5B7 4989 65EF D1C2 924B  A9D5 39D3 1987 9310 D3FC
     Subkey fingerprint: 2187 3199 B103 0FCD 49DA  83F8 C2EE 2AF6 542C 03B4

Note, we will switch keys for 3.0.0 GA for a new key.

(New Key) Generating new PGP key for signing artifacts starting 3.0.0 with @opensearch.org email #5308

Thanks.

zelinh · 2025-03-18T22:00:09Z

Native plugin installation works for opensearch-3.0.0-alpha1

~/opensearch-3.0.0-alpha1 ./bin/opensearch-plugin install repository-s3
-> Installing repository-s3
-> Downloading repository-s3 from opensearch
[=================================================] 100%
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@     WARNING: plugin requires additional permissions     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
* java.io.FilePermission config#plus read
* java.lang.RuntimePermission accessDeclaredMembers
* java.lang.RuntimePermission getClassLoader
* java.lang.RuntimePermission setContextClassLoader
* java.lang.reflect.ReflectPermission suppressAccessChecks
* java.net.NetPermission setDefaultAuthenticator
* java.net.SocketPermission * connect,resolve
* java.util.PropertyPermission aws.configFile read,write
* java.util.PropertyPermission aws.sharedCredentialsFile read,write
* java.util.PropertyPermission opensearch.allow_insecure_settings read,write
* java.util.PropertyPermission opensearch.path.conf read,write
See http://docs.oracle.com/javase/8/docs/technotes/guides/security/permissions.html
for descriptions of what these permissions allow and the associated risks.

Continue with installation? [y/N]y
-> Installed repository-s3 with folder name repository-s3

peterzhuamazon · 2025-03-18T22:27:08Z

3.0.0-alpha1 maven: https://repo1.maven.org/maven2/org/opensearch/opensearch/3.0.0-alpha1/
(pending syncing)

peterzhuamazon · 2025-03-18T22:45:53Z

Hi All,

We have just release 3.0.0-alpha1 to the public! 🎉

Artifacts Page: https://opensearch.org/versions/opensearch-3-0-0-alpha1.html
Release Notes: https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-3.0.0-alpha1.md
Thanks everyone who helped in the process! We will start working on 3.0.0-beta1 next week!

Thanks!

opensearch-trigger-bot bot added release untriaged Issues that have not yet been triaged v3.0.0 labels Jul 16, 2023

gaiksaya mentioned this issue Mar 18, 2025

Add library to check and notify release notes based on old workflow opensearch-project/opensearch-build-libraries#626

Merged

This was referenced Mar 18, 2025

Switch 3.0.0-alpha1 builds back to upstream #5408

Merged

Update beta1 qualifier for 3.0.0 version opensearch-project/OpenSearch#17621

Merged

This was referenced Mar 18, 2025

Update beta1 builds and manifest entries #5411

Merged

Update aptly version check to support ubuntu2404 opensearch-project/opensearch-build-libraries#628

Merged

Switch repo promotion to use 8.3.4 version #5412

Merged

peterzhuamazon mentioned this issue Mar 19, 2025

Update 3.0.0 schedule as 3.0.0-beta1 will be delayed by 2 weeks opensearch-project/project-website#3707

Merged

1 task

martin-gaievski mentioned this issue Mar 24, 2025

[3.0] Update neural-search for OpenSearch 3.0 beta compatibility opensearch-project/neural-search#1245

Merged

1 task

peterzhuamazon mentioned this issue Mar 24, 2025

Update 3.0.0 beta1 related events and dates opensearch-project/project-website#3715

Merged

1 task

This was referenced Mar 24, 2025

add release note for 3.0 beta1 release opensearch-project/ml-commons#3683

Merged

Version bump to 3.0.0-beta1 opensearch-project/ml-commons#3684

Merged

peterzhuamazon mentioned this issue Mar 25, 2025

Update 3.0.0-beta1 osd core branch to main in manifests #5424

Merged

prudhvigodithi mentioned this issue Mar 26, 2025

[Release 3.0.0] Prepare for 3.0.0 beta1 release opensearch-project/job-scheduler#752

Merged

5 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[RELEASE] Release version 3.0.0 #3747

[RELEASE] Release version 3.0.0 #3747

opensearch-trigger-bot bot commented Jul 16, 2023 •

edited by peterzhuamazon

Loading

This Release Issue

Pre-Release activities

Release activities

rishabh6788 commented Mar 14, 2025

opensearch-ci-bot commented Mar 18, 2025 •

edited by peterzhuamazon

Loading

Integration Test Results

peterzhuamazon commented Mar 18, 2025 •

edited

Loading

zelinh commented Mar 18, 2025

peterzhuamazon commented Mar 18, 2025

peterzhuamazon commented Mar 18, 2025

[RELEASE] Release version 3.0.0 #3747

[RELEASE] Release version 3.0.0 #3747

Comments

opensearch-trigger-bot bot commented Jul 16, 2023 • edited by peterzhuamazon Loading

Release Status: 3.0.0-beta1 (In-Progress)

(3.0.0-alpha1 ensures early Integration - Ensure code compilation)

(You can still push feature to 3.0.0-beta1 if not ready by 3.0.0-alpha1)

This Release Issue

Entrance Criteria

OpenSearch 3.0.0-beta1 exit criteria status:

OpenSearch-Dashboards 3.0.0-beta1 exit criteria status:

Preparation

Campaigns

Version Increment - (2025/03/24-2025/03/28 3.0.0-beta1)

Feature Freeze - (Ends 2025/04/07 3.0.0-beta1)

Code Complete - (Ends 2025/04/07 3.0.0-beta1)

Release Branch, Release Candidate Creation and Testing - (2025/04/08 3.0.0-beta1)

Performance testing validation - (2025/04/15 3.0.0-beta1)

Pre Release - (2025/04/21 3.0.0-beta1)

Release - (2025/04/22 3.0.0-beta1)

Release Checklist.

Pre-Release activities

Release activities

Post Release

Components

rishabh6788 commented Mar 14, 2025

3.0.0-alpha1 Performance Report

HTTP_LOGS

NYC_TAXIS

PMC

PERCOLATOR

BIG5

opensearch-ci-bot commented Mar 18, 2025 • edited by peterzhuamazon Loading

See OpenSearch RC 8 and OpenSearch-Dashboards RC 8 details (3.0.0-alpha1)

Integration Test Results

peterzhuamazon commented Mar 18, 2025 • edited Loading

zelinh commented Mar 18, 2025

peterzhuamazon commented Mar 18, 2025

peterzhuamazon commented Mar 18, 2025

opensearch-trigger-bot bot commented Jul 16, 2023 •

edited by peterzhuamazon

Loading

Release Status: `3.0.0-beta1 (In-Progress)`

opensearch-ci-bot commented Mar 18, 2025 •

edited by peterzhuamazon

Loading

peterzhuamazon commented Mar 18, 2025 •

edited

Loading