Merge pull request #9470 from thalesmg/check-unpack-target-v43

fix(install_upgrade): check target version when unpacking (v4.3)

.github/workflows/run_automate_tests.yaml

@@ -10,7 +10,7 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     outputs:
       imgname: ${{ steps.build_docker.outputs.imgname}}
       version: ${{ steps.build_docker.outputs.version}}

bin/install_upgrade.escript

@@ -32,6 +32,7 @@ main(Args) ->
 unpack({RelName, NameTypeArg, NodeName, Cookie}, Opts) ->
     TargetNode = start_distribution(NodeName, NameTypeArg, Cookie),
     Version = proplists:get_value(version, Opts),
+    validate_target_version(Version, TargetNode),
     case unpack_release(RelName, TargetNode, Version) of
         {ok, Vsn} ->
             ?INFO("Unpacked successfully: ~p", [Vsn]);

changes/v4.3.23-en.md

@@ -11,3 +11,5 @@
 ## Bug fixes
 
 - Fix a bug where the JWT ACL would not short-circuit with a deny response when the token is expired [#9338](https://github.com/emqx/emqx/pull/9338).
+
+- Added check for target version when unpacking a package for hot-upgrade.  The unpacking could lead to unresponsive node commands.  [#9470](https://github.com/emqx/emqx/pull/9470)

changes/v4.3.23-zh.md

@@ -11,3 +11,5 @@
 ## 修复
 
 - 修复 JWT ACL 在令牌超期后授权检查不生效的问题 [#9338](https://github.com/emqx/emqx/pull/9338)。
+
+- 为热升级解压软件包时增加了对目标版本的检查。 解包可能导致节点命令无响应。  [#9470](https://github.com/emqx/emqx/pull/9470)