sentinel-datasource-nacos中1.4.2版本的nacos-client存在安全漏洞，升级nacos客户端版本报错
- Dominant language
- Java
- Stars
- 23.1k
- Forks
- 8.1k
- PR merge metrics
- No merged PRs in 30d
Description
版本：sentinel-datasource-nacos：1.8.5
sentinel-datasource-nacos 1.8.5 中1.4.2版本的nacos-client存在安全漏洞，
首先尝试升级sentinel-datasource-nacos为最新的2.0.0-alpha版本，发现引用的nacos-client仍是1.4.2版本的nacos，
因此尝试升级nacos-client版本为2.2.1，发现启动报错。
升级nacos-client修改的pom配置如下：
请问后续sentinel-datasource-nacos是否有适配nacos-client高版本的迭代计划？
Contributor guide
Research direction
Start in the sentinel-datasource-nacos module and inspect its pom configuration and Nacos client integration. Reproduce the startup failure after changing nacos-client from 1.4.2 to 2.2.1, then determine the compatibility changes needed for a supported newer client version. Done means the module starts successfully with the newer client and the security concern is addressed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- backend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100