> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V3.3.5.11

# StreamNative Weekly Release Notes v3.3.5.11

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v3.3.5.11](https://github.com/streamnative/pulsar/releases/tag/v3.3.5.11)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/3.3.5.11/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/3.3.5.11/images/sha256-8468c727e959830d2624419bb49825b9c6296cfab5695885928e645417fd9a84)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/3.3.5.11/images/sha256-47f0c66c0377e626b7fe91799c7a5412adae621d324cc7254b67509ff757632a)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/3.3.5.11/images/sha256-47f0c66c0377e626b7fe91799c7a5412adae621d324cc7254b67509ff757632a)

## General Changes

### Apache Pulsar

([#24542)](https://github.com/apache/pulsar/pull/24542))) Revert "\[fix]\[broker]Fix thread safety issues in BucketDelayedDeliveryTracker with StampedLock optimistic reads

([#24554](https://github.com/apache/pulsar/pull/24554)) ([#24571](https://github.com/apache/pulsar/pull/24571)) \[fix]\[client]\[branch-4.0] Partitioned topics are unexpectedly created by client after deletion

([#24576](https://github.com/apache/pulsar/pull/24576)) \[fix]\[test] fix flaky GrowableArrayBlockingQueueTest.testPollBlockingThreadsTermination

([#24569](https://github.com/apache/pulsar/pull/24569)) \[fix]\[broker] Fix ManagedCursor state management race conditions and lifecycle issues

([#24550](https://github.com/apache/pulsar/pull/24550)) \[improve]\[client] Terminate consumer.receive() when consumer is closed

([#24560](https://github.com/apache/pulsar/pull/24560)) \[fix]\[broker] Fix maxTopicsPerNamespace might report a false failure

([#24505](https://github.com/apache/pulsar/pull/24505)) \[fix]\[test]fix flaky test BrokerServiceAutoTopicCreationTest.testDynamicConfigurationTopicAutoCreationPartitioned

([#24472](https://github.com/apache/pulsar/pull/24472)) \[fix] Prevent IllegalStateException: Field 'message' is not set

([#24542](https://github.com/apache/pulsar/pull/24542)) \[fix]\[broker]Fix thread safety issues in BucketDelayedDeliveryTracker with StampedLock optimistic reads

([#24551](https://github.com/apache/pulsar/pull/24551)) \[fix]\[broker] Fix Broker OOM due to too many waiting cursors and reuse a recycled OpReadEntry incorrectly

([#24511](https://github.com/apache/pulsar/pull/24511)) \[fix]\[broker] Fix deduplication replay might never complete for exceptions

([#24557](https://github.com/apache/pulsar/pull/24557)) \[fix]\[broker]\[branch-3.3] Disable broken ExtensibleLoadManager tests and add closeInternalTopics in follower monitor

([#24522](https://github.com/apache/pulsar/pull/24522)) \[fix]\[ml] Fix the possibility of message loss or disorder when ML PayloadProcessor processing fails

([#24552](https://github.com/apache/pulsar/pull/24552)) \[improve]\[test] Remove EntryCacheCreator from ManagedLedgerFactoryImpl

([#24544](https://github.com/apache/pulsar/pull/24544)) \[improve] Upgrade pulsar-client-python to 3.8.0 in Docker image

([#24516](https://github.com/apache/pulsar/pull/24516)) \[fix]\[broker] Fix exclusive producer creation when last shared producer closes

([#24506](https://github.com/apache/pulsar/pull/24506)) \[fix]\[broker] Fix duplicate increment of ADD\_OP\_COUNT\_UPDATER in OpAddEntry

([#24543](https://github.com/apache/pulsar/pull/24543)) \[fix]\[broker] Fix matching of topicsPattern for topic names which contain non-ascii characters

([#24539](https://github.com/apache/pulsar/pull/24539)) \[fix]\[client] Close orphan producer or consumer when the creation is interrupted

([#24517](https://github.com/apache/pulsar/pull/24517)) \[fix]\[client] Fix ClientCnx handleSendError NPE

([#24515](https://github.com/apache/pulsar/pull/24515)) \[fix]\[ml] Fix asyncReadEntries might never complete if empty entries are read from BK

([#24530](https://github.com/apache/pulsar/pull/24530)) \[improve]\[misc] Upgrade RE2/J to 1.8

([#24518](https://github.com/apache/pulsar/pull/24518)) \[fix]\[broker] Fix wrong backlog age metrics when the mark delete position point to a deleted ledger

([#24468](https://github.com/apache/pulsar/pull/24468)) \[improve]\[broker] Upgrade bookkeeper to 4.17.2/commons-configuration to 2.x/grpc to 1.72.0 and enable ZooKeeper client to establish connection in read-only mode

([#24473](https://github.com/apache/pulsar/pull/24473)) \[improve]\[build] replace org.apache.commons.lang to org.apache.commons.lang3

([#24525](https://github.com/apache/pulsar/pull/24525)) \[improve]\[misc] Optimize topic list hashing so that potentially large String allocation is avoided

([#24528](https://github.com/apache/pulsar/pull/24528)) \[fix]\[client] Fix issue in auto releasing of idle connection with topics pattern consumer

([#24529](https://github.com/apache/pulsar/pull/24529)) \[fix]\[proxy] Fix default value of connectionMaxIdleSeconds in Pulsar Proxy

([#24476](https://github.com/apache/pulsar/pull/24476)) \[fix]\[client] NPE in MultiTopicsConsumerImpl.negativeAcknowledge

([#24465](https://github.com/apache/pulsar/pull/24465)) \[fix]\[proxy] Fix proxy OOM by replacing TopicName with a simple conversion method

([#24434](https://github.com/apache/pulsar/pull/24434)) \[improve]\[broker] Improve the log when namespace bundle is not available

### MoP

Fix MQTT message error handling and improve connection responses

### KoP

Do not set setReplicationClusters on createTopicIfNotExist

### StreamNative Pulsar Plugins

fix export duplicated JVM metrics on AuditLogMetrics

Upgrade delta kernel to 4.0.0

### Cloud Pulsar Plugins

Change to use commons-lang3

Only append jwk when kty is rsa

### Function Mesh Worker Service

0a27de1b Update version when release

Implement agent function

Set minReplicas to parallelism when HPA is enabled

### StreamNative Tiered storage

Fix build failure

### StreamNative Unified RBAC

Use `GET_BUNDLE` operation to check the "get" permission for namespace

## Security Fixes

### Apache Pulsar

([#24562](https://github.com/apache/pulsar/pull/24562)) \[fix]\[sec] Remove dependency on out-dated commons-configuration 1.x

([#24564](https://github.com/apache/pulsar/pull/24564)) \[fix]\[sec] Upgrade Kafka connector and clients version to 3.9.1 to address CVE-2025-27818

([#24547](https://github.com/apache/pulsar/pull/24547)) \[fix]\[sec] Upgrade pulsar-function-go dependencies to address CVE-2025-22868