[shreemaan-abhishek]

Bump APISIX version from 3.18.0 to 3.19.0 across Dockerfiles, Makefile, example compose files, CI workflows, and docs.

https://github.com/apache/apisix/blob/release/3.19/CHANGELOG.md#3190

Package availability

The apisix=3.19.0-0 debs are already published for every distro the Debian and Ubuntu images install from, so those builds should not hit the usual publish lag:

curl -s https://repos.apiseven.com/packages/debian/dists/debian12/main/binary-amd64/Packages | grep -A1 '^Package: apisix$' | grep '^Version: 3.19'
curl -s https://repos.apiseven.com/packages/arm64/debian/dists/debian12/main/binary-arm64/Packages | grep -A1 '^Package: apisix$' | grep '^Version: 3.19'
curl -s https://repos.apiseven.com/packages/ubuntu/dists/noble/main/binary-amd64/Packages | grep -A1 '^Package: apisix$' | grep '^Version: 3.19'

All three list 3.19.0-0.

The RedHat repo could not be queried at the time of writing. Its repomd.xml advertises primary.xml.gz and filelists.xml.gz objects that are not served:

curl -s https://repos.apiseven.com/packages/redhat/9/x86_64/repodata/repomd.xml | grep primary.xml
# -> repodata/5e5f812f...-primary.xml.gz
curl -o /dev/null -w '%{http_code}\n' -s https://repos.apiseven.com/packages/redhat/9/x86_64/repodata/5e5f812f6212be0ae223f0be5d87bf5460192b6a39a509b6bc803f967113f417-primary.xml.gz
# -> 404

yum fails with Failed to download metadata for repo 'release' as a result, for any version rather than only for 3.19.0, and the advertised revision is still the one from the 3.18.0 publish. This is independent of this bump: the redhat build on current master at 3.18.0 fails the same way. It should clear once that repo is republished, so the redhat job is the one to watch here.

Dockerfile packages

No Dockerfile package changes are needed for this release. Comparing the rockspec between the 3.18.0 and 3.19.0 tags, the dependency delta is one new rock, api7-lua-resty-websocket 0.2.0-0, plus bumps to api7-lua-resty-dns-client 7.1.2, api7-lua-resty-http 0.2.4, lua-resty-saml 0.2.6 and lua-resty-t1k 1.2.1.

api7-lua-resty-websocket is pure Lua: its rockspec declares no dependencies and a builtin build listing only .lua modules, so it links no new system shared library. The lua-resty-saml bump is a patch release of a rock already shipped since 3.17.0, whose libxml2/libxslt requirement is already satisfied by every image.