Release commit for v2.4.9. (#4074)

Update docs and release notes for v2.4.9.

Signed-off-by: David Enyeart <enyeart@us.ibm.com>

Makefile

@@ -47,7 +47,7 @@
 #   - verify - runs unit tests for only the changed package tree
 
 ALPINE_VER ?= 3.16
-BASE_VERSION = 2.4.8
+BASE_VERSION = 2.4.9
 
 # 3rd party image version
 # These versions are also set in the runners in ./integration/runners/

docs/source/install.md

@@ -46,11 +46,11 @@ To view the help and available commands for the download script, please use the
 curl -sSL https://bit.ly/2ysbOFE | bash -s -- -h
 ```
 
-To download a specific release, pass a version identifier for Fabric and Fabric CA Docker images. The command below demonstrates how to download the latest production releases - `Fabric v2.4.8` and `Fabric CA v1.5.5` 
+To download a specific release, pass a version identifier for Fabric and Fabric CA Docker images. The command below demonstrates how to download the latest production releases - `Fabric v2.4.9` and `Fabric CA v1.5.5` 
 
 ```shell
 curl -sSL https://bit.ly/2ysbOFE | bash -s -- <fabric_version> <fabric-ca_version>
-curl -sSL https://bit.ly/2ysbOFE | bash -s -- 2.4.8 1.5.5
+curl -sSL https://bit.ly/2ysbOFE | bash -s -- 2.4.9 1.5.5
 ```
 
 ## Notes

docs/source/whatsnew.rst

@@ -342,6 +342,7 @@ announced in each of the v2.x releases.
 * `Fabric v2.4.6 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.4.6>`_.
 * `Fabric v2.4.7 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.4.7>`_.
 * `Fabric v2.4.8 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.4.8>`_.
+* `Fabric v2.4.9 release notes <https://github.com/hyperledger/fabric/releases/tag/v2.4.9>`_.
 
 .. Licensed under Creative Commons Attribution 4.0 International License
    https://creativecommons.org/licenses/by/4.0/

release_notes/v2.4.9.md

@@ -0,0 +1,115 @@
+v2.4.9 Release Notes - March 1, 2023
+====================================
+
+Fixes
+-----
+
+**Peer gateway service now uses peer local height instead of service discovery height**
+
+Peer gateway service uses ledger height to determine an endorser peer.
+Service discovery ledger heights can be slightly behind the actual peer ledger height.
+Ensure the most up-to-date information is used for the local peer by querying the ledger height directly.
+This avoids the possibility of a remote peer with a lower ledger height being selected as an endorser.
+
+**Peer gateway service now uses async connection to other peers and ordering service nodes**
+
+Peer gateway service now uses async connection to other peers and ordering service nodes.
+Prior to this change, connection issues can cause gateway service to prematurely hit its concurrency limit.
+
+**Fix for ordering service node certificate renewal when not using a system channel**
+
+It is possible to renew an ordering service node certificate without a channel configuration update by using the existing key in the certificate renewal request.
+However, in the scenario where there is no system channel, the ordering service node would never transition from a follower to a consenter after certificate renewal.
+This fix ensures that an ordering service node uses a key match rather than certificate match so that it can transition from a follower to a consenter after certificate renewal with existing key.
+
+
+Dependencies
+------------
+Fabric v2.4.9 has been tested with the following dependencies:
+* Go 1.18.10
+* CouchDB v3.2.2
+
+Fabric docker images on dockerhub utilize Alpine 3.16.
+
+
+Deprecations (existing)
+-----------------------
+
+**Ordering service system channel is deprecated**
+
+v2.3 introduced the ability to manage an ordering service without a system channel.
+Managing an ordering service without a system channel has privacy, scalability,
+and operational benefits. The use of a system channel is deprecated and may be removed in a future release.
+For information about removal of the system channel, see the [Create a channel without system channel documentation](https://hyperledger-fabric.readthedocs.io/en/release-2.3/create_channel/create_channel_participation.html).
+
+**FAB-15754: The 'Solo' consensus type is deprecated.**
+
+The 'Solo' consensus type has always been marked non-production and should be in
+use only in test environments, however for compatibility it is still available,
+but may be removed entirely in a future release.
+
+**FAB-16408: The 'Kafka' consensus type is deprecated.**
+
+The 'Raft' consensus type was introduced in v1.4.1 and has become the preferred
+production consensus type.  There is a documented and tested migration path from
+Kafka to Raft, and existing users should migrate to the newer Raft consensus type.
+For compatibility with existing deployments, Kafka is still supported,
+but may be removed entirely in a future release.
+Additionally, the fabric-kafka and fabric-zookeeper docker images are no longer updated, maintained, or published.
+
+**Fabric CouchDB image is deprecated**
+
+v2.2.0 added support for CouchDB 3.1.0 as the recommended and tested version of CouchDB.
+If prior versions are utilized, a Warning will appear in peer log.
+Note that CouchDB 3.1.0 requires that an admin username and password be set,
+while this was optional in CouchDB v2.x. See the
+[Fabric CouchDB documentation](https://hyperledger-fabric.readthedocs.io/en/v2.2.0/couchdb_as_state_database.html#couchdb-configuration)
+for configuration details.
+Also note that CouchDB 3.1.0 default max_document_size is reduced to 8MB. Set a higher value if needed in your environment.
+Finally, the fabric-couchdb docker image will not be updated to v3.1.0 and will no longer be updated, maintained, or published.
+Users can utilize the official CouchDB docker image maintained by the Apache CouchDB project instead.
+
+**FAB-7559: Support for specifying orderer endpoints at the global level in channel configuration is deprecated.**
+
+Utilize the new 'OrdererEndpoints' stanza within the channel configuration of an organization instead.
+Configuring orderer endpoints at the organization level accommodates
+scenarios where orderers are run by different organizations. Using
+this configuration ensures that only the TLS CA certificates of that organization
+are used for orderer communications, in contrast to the global channel level endpoints which
+would cause an aggregation of all orderer TLS CA certificates across
+all orderer organizations to be used for orderer communications.
+
+**FAB-17428: Support for configtxgen flag `--outputAnchorPeersUpdate` is deprecated.**
+
+The `--outputAnchorPeersUpdate` mechanism for updating anchor peers has always had
+limitations (for instance, it only works the first time anchor peers are updated).
+Instead, anchor peer updates should be performed through the normal config update flow.
+
+**FAB-15406: The fabric-tools docker image is deprecated**
+
+The fabric-tools docker image will not be published in future Fabric releases.
+Instead of using the fabric-tools docker image, users should utilize the
+published Fabric binaries. The Fabric binaries can be used to make client calls
+to Fabric runtime components, regardless of where the Fabric components are running.
+
+**FAB-15317: Block dissemination via gossip is deprecated**
+
+Block dissemination via gossip is deprecated and may be removed in a future release.
+Fabric peers can be configured to receive blocks directly from an ordering service
+node and not gossip blocks by using the following configuration:
+```
+peer.gossip.orgLeader: true
+peer.gossip.useLeaderElection: false
+peer.gossip.state.enabled: false
+peer.deliveryclient.blockGossipEnabled: false
+```
+
+**FAB-15061: Legacy chaincode lifecycle is deprecated**
+
+The legacy chaincode lifecycle from v1.x is deprecated and will be removed
+in a future release. To prepare for the eventual removal, utilize the v2.x
+chaincode lifecycle instead, by enabling V2_0 application capability on all
+channels, and redeploying all chaincodes using the v2.x lifecycle. The new
+chaincode lifecycle provides a more flexible and robust governance model
+for chaincodes. For more details see the
+[documentation for enabling the new lifecycle](https://hyperledger-fabric.readthedocs.io/en/release-2.2/enable_cc_lifecycle.html).

scripts/bootstrap.sh

@@ -6,7 +6,7 @@
 #
 
 # if version not passed in, default to latest released version
-VERSION=2.4.8
+VERSION=2.4.9
 # if ca version not passed in, default to latest released version
 CA_VERSION=1.5.5
 ARCH=$(echo "$(uname -s|tr '[:upper:]' '[:lower:]'|sed 's/mingw64_nt.*/windows/')-$(uname -m | sed 's/x86_64/amd64/g')")
@@ -21,7 +21,7 @@ printHelp() {
     echo "-s : bypass fabric-samples repo clone"
     echo "-b : bypass download of platform-specific binaries"
     echo
-    echo "e.g. bootstrap.sh 2.4.8 1.5.5 -s"
+    echo "e.g. bootstrap.sh 2.4.9 1.5.5 -s"
     echo "will download docker images and binaries for Fabric v2.4.8 and Fabric CA v1.5.5"
 }
 

scripts/install-fabric.sh

@@ -23,7 +23,7 @@ _arg_comp=('' )
 
 # if version not passed in, default to latest released version
 # if ca version not passed in, default to latest released version
-_arg_fabric_version="2.4.8"
+_arg_fabric_version="2.4.9"
 _arg_ca_version="1.5.5"
 
 ARCH=$(echo "$(uname -s|tr '[:upper:]' '[:lower:]'|sed 's/mingw64_nt.*/windows/')-$(uname -m | sed 's/x86_64/amd64/g')")
@@ -51,7 +51,7 @@ print_help()
 {
 	printf 'Usage: %s [-f|--fabric-version <arg>] [-c|--ca-version <arg>] <comp-1> [<comp-2>] ... [<comp-n>] ...\n' "$0"
 	printf '\t%s\n' "<comp>: Component to install one or more of  d[ocker]|b[inary]|s[amples]. If none specified, all will be installed"
-	printf '\t%s\n' "-f, --fabric-version: FabricVersion (default: '2.4.8')"
+	printf '\t%s\n' "-f, --fabric-version: FabricVersion (default: '2.4.9')"
 	printf '\t%s\n' "-c, --ca-version: Fabric CA Version (default: '1.5.5')"
 }