Skip to main content

​
StreamNative Weekly Release Notes v4.0.10.1

​
Download

​
Distributions

​
Packages

​
Images

​
General Changes

​
Apache Pulsar

(#25518) [improve][broker] Use full bundle name for namespace bundle destination affinity in ModularLoadManagerImpl (#25566) [fix][test] Flaky SameAuthParamsLookupAutoClusterFailoverTest (#25561) [fix][test] Fix flaky OffloadPrefixTest.testPositionOnEdgeOfLedger race with ledger rollover (#25563) [fix][test] Extend SameAuthParamsLookupAutoClusterFailoverTest phase timeouts (#25557) [fix][broker] pulsar admin stats internal with metadata command (#25562) [fix][test] Relax BrokerRegistryIntegrationTest broker-close threshold (#25389) [fix][test] Fix flaky OneWayReplicatorUsingGlobalZKTest.cleanup (#25313) [fix][test] Fix flaky OneWayReplicatorUsingGlobalZKTest cleanup (#25385) [fix][test] Fix flaky PersistentStickyKeyDispatcherMultipleConsumersClassicTest.testSkipRedeliverTemporally (#24823) [fix][test] Fix flaky SingleThreadNonConcurrentFixedRateSchedulerTest.testPeriodicTaskCancellation (#25307) [fix] Fix flaky testEstimatedTimeBasedBacklogQuotaCheckWhenNoBacklog (#25463) [fix][test] Fix flaky BrokerRegistryIntegrationTest port binding race (#25560) [fix][test] Recreate EventLoop in PublishRateLimiterTest setup (#25502) [fix][broker] Unthrottle producers immediately when publish rate limiting is disabled (#25558) [fix][broker] Lower log level of DrainingHashesTracker not-found entry to DEBUG (#25098) [fix][broker] fix flaky test in SystemTopicBasedTopicPoliciesServiceTest (#25500) [fix][test] Fix flaky ExtensibleLoadManagerTest.startBroker timeout (#25509) [fix][test] Fix flaky ExtensibleLoadManagerImpl client reconnection tests: PulsarClientException$AlreadyClosedException: Client already closed (#25427) [fix][test] Fix flaky testLoadBalancerServiceUnitTableViewSyncer (#25378) [fix][test] Fix flaky ExtensibleLoadManagerImplTest.testLoadBalancerServiceUnitTableViewSyncer (#25497) [fix][test] Fix flaky ServerCnxTest.testCreateProducerTimeoutThenCreateSameNamedProducerShouldFail (#25460) [fix][broker] Prevent timed-out producer creation from racing with retry (#25358) [fix][test] Fix flaky ReplicatorTest.testResumptionAfterBacklogRelaxed (#25551) [fix][broker]Namespaces can be created with may empty replication_clusters policy (#24463) [improve][broker] Improve the performance of TopicName constructor (#25367) [improve][common] Optimize TopicName.get() to reduce lock contention on cache lookup (#24875) [fix][test] Stabilize FunctionAssignmentTailerTest.testErrorNotifier by synchronizing mock stubbing with CountDownLatch (#25017) [improve][client][branch-4.0] Deduplicate in-progress lookup requests also for HttpLookupService (#25469) [cleanup][ci] Remove documentation label bot (#25470) [cleanup][ci] Remove ready-to-test label enforcement

​
AoP

86fd755 test(aop): ignore closed multibundle cleanup 9657c29 fix(aop): update jetty 12 handler APIs

​
MoP

a2657bde fix(mqtt): adapt additional servlet api 947864b9 fix checkstyle ea1f8dba Fix mqtt client not have the consumer metric

​
KoP

f30e46cde Bump pulsar and sn bom versions to 4.0.10.1 and fix assertion message for invalid topic name in SimpleLoadBalanceTest Fix KsnRestServlet issue due to jetty upgrading

​
StreamNative Pulsar Plugins

9f7638887 fix(servlet): adapt additional servlets to jetty 12 Add keyword to filter the result 372d9b481 Add permission/ACL audit logging

​
pulsarctl

Fix flaky tests

​
Function Mesh Worker Service

feat: add default metadata and add metadata to labels e2b016f7 apply api changes introduced by https://github.com/apache/pulsar/pull/25534 feat: Support sandbox agent feat: Support setting extraDependenciesDir via CustomRuntimeOptions fix(auth): preserve service account when updateAuthData is false

​
StreamNative Unified RBAC

8da9057 fix: support Pulsar 4.0.10.x servlet loading

​
Security Fixes

​
Apache Pulsar

(#25569) [fix][sec] Upgrade BouncyCastle to 1.84 (CVE-2026-5588, CVE-2026-0636) (#25534) [fix][sec][branch-4.0] Upgrade to Jetty 12.1.8 to address several CVEs (#25546) [fix][sec] Upgrade to async-http-client 2.14.5 to address CVE-2026-40490