v1.4.32 Akka.NET Release

[Aaronontheweb]

1.4.32 January 19 2022

Akka.NET v1.4.32 is a minor release that contains some API improvements. Most of the changes have been aimed at improving our web documentation and code cleanup to modernize some of our code. One big improvement in this version release is the Hyperion serialization update.

Hyperion 0.12.0 introduces a new deserialization security mechanism to allow users to selectively filter allowed types during deserialization to prevent deserialization of untrusted data described here. This new feature is exposed in Akka.NET in HOCON through the new akka.actor.serialization-settings.hyperion.allowed-types settings or programmatically through the new WithTypeFilter method in the HyperionSerializerSetup class.

The simplest way to programmatically describe the type filter is to use the convenience class TypeFilterBuilder:

var typeFilter = TypeFilterBuilder.Create()
    .Include<AllowedClassA>()
    .Include<AllowedClassB>()
    .Build();
var setup = HyperionSerializerSetup.Default
    .WithTypeFilter(typeFilter);

You can also create your own implementation of ITypeFilter and pass an instance of it into the WithTypeFilter method.

For complete documentation, please read the Hyperion readme on filtering types for secure deserialization.

• Akka.Streams: Added Flow.LazyInitAsync and Sink.LazyInitSink to replace Sink.LazyInit
• Akka.Serialization.Hyperion: Implement the new ITypeFilter security feature

If you want to see the full set of changes made in Akka.NET v1.4.32, click here.

COMMITS	LOC+	LOC-	AUTHOR
11	1752	511	Aaron Stannard
8	1433	534	Gregorius Soedharmo
3	754	222	Ismael Hamed
2	3	6	Brah McDude
2	227	124	Ebere Abanonu
1	331	331	Sean Killeen
1	1	1	TangkasOka