<doc>(project): update 2.10.0 changelog. (#896)

* <fix>(crypto): add safe key store path.

* <doc>(project): update 2.10.0 changelog.

Author: kyonRay

Changelog.md

@@ -1,3 +1,29 @@
+## v2.10.0
+
+(2024-03-08)
+
+请参考文档：
+
+* [英文版用户手册](https://fisco-bcos-documentation.readthedocs.io/en/latest/docs/sdk/java_sdk/index.html)
+* [中文版用户手册](https://fisco-bcos-documentation.readthedocs.io/zh_CN/latest/docs/sdk/java_sdk/index.html#)
+* [中文版WIKI](https://github.com/FISCO-BCOS/java-sdk/wiki)
+
+修复：
+
+- 解决在使用Solidity复杂数据结构（如struct，二维数组等）、复杂事件场景（如重载event，有复杂数据结构参数）时，Java SDK在发交易/调用请求时出现的编解码错误；
+- 修复了读取密钥时可能存在的安全问题；
+
+更新：
+
+- 废弃 `sdk-codegen` 模块，合约生成Java文件的功能建议开发者使用`org.fisco-bcos.code-generator:bcos-code-generator`中的方法。以解决在使用Solidity复杂数据结构、复杂事件场景时，生成的Java文件出现编译、运行错误的问题；
+- 依赖变更：
+  - `org.apache.commons:commons-lang3` 更新到3.14.0版本 
+  - `org.bouncycastle:bcprov-jdk15on` 变更为使用`org.bouncycastle:bcprov-jdk18on:1.77`版本 
+  - `io.netty:netty-all` 更新到 4.1.100.Final版本 
+  - `com.google.code.gson:gson` 更新到 2.10.1版本 
+  - `com.webank:webank-blockchain-java-crypto` 更新到1.0.3版本
+  - 删除不必要的`com.google.guava:guava`
+
 ## v2.9.2
 
 (2022-10-31)

build.gradle

@@ -35,7 +35,7 @@ ext {
 // integrationTest.mustRunAfter test
 allprojects {
     group = 'org.fisco-bcos.java-sdk'
-    version = '2.10.0-SNAPSHOT'
+    version = '2.10.0'
     apply plugin: 'maven'
     apply plugin: 'maven-publish'
     apply plugin: 'idea'

sdk-core/src/main/java/org/fisco/bcos/sdk/config/model/ConfigProperty.java

@@ -105,6 +105,7 @@ public static InputStream getConfigInputStream(String configFilePath) throws Con
         }
         InputStream inputStream = null;
         try {
+            configFilePath = configFilePath.replace("..", "");
             inputStream = new FileInputStream(configFilePath);
             if (inputStream != null) {
                 return inputStream;

sdk-crypto/src/main/java/org/fisco/bcos/sdk/crypto/keystore/KeyTool.java

@@ -289,7 +289,8 @@ public static void storePublicKeyWithPem(PublicKey publicKey, String privateKeyF
     /** load information from the keyStoreFile */
     protected void load() {
         try {
-            InputStream keyStoreFileInputStream = new FileInputStream(keyStoreFile);
+            String safeFile = keyStoreFile.replace("..", "");
+            InputStream keyStoreFileInputStream = new FileInputStream(safeFile);
             this.load(keyStoreFileInputStream);
         } catch (FileNotFoundException | org.bouncycastle.util.encoders.DecoderException e) {
             String errorMessage =

sdk-crypto/src/main/java/org/fisco/bcos/sdk/crypto/keystore/P12KeyStore.java

@@ -150,6 +150,7 @@ public static void storeKeyPairWithP12Format(
             Certificate[] certChain = new Certificate[1];
             certChain[0] = generateSelfSignedCertificate(keyPair, signatureAlgorithm);
             keyStore.setKeyEntry(NAME, privateKey, password.toCharArray(), certChain);
+            privateKeyFilePath = privateKeyFilePath.replace("..", "");
             keyStore.store(new FileOutputStream(privateKeyFilePath), password.toCharArray());
             // store the public key
             storePublicKeyWithPem(privateKey, privateKeyFilePath);

sdk-crypto/src/main/java/org/fisco/bcos/sdk/crypto/keystore/PEMKeyStore.java

@@ -69,6 +69,7 @@ public static void storeKeyPairWithPemFormat(
         try {
             KeyPair keyPair = convertHexedStringToKeyPair(hexedPrivateKey, curveName);
             // save the private key
+            privateKeyFilePath = privateKeyFilePath.replace("..", "");
             PemWriter writer = new PemWriter(new FileWriter(privateKeyFilePath));
             BCECPrivateKey bcecPrivateKey = (BCECPrivateKey) (keyPair.getPrivate());
             writer.writeObject(new PemObject(PRIVATE_KEY, bcecPrivateKey.getEncoded()));