Skip to main content

​
StreamNative Weekly Release Notes v4.0.10.2 (stable)

​
Download

​
Distributions

​
Packages

​
Images

​
General Changes

​
Apache Pulsar

(#25638))) Revert “[fix][test] Reduce flakiness in testLoadBalancerServiceUnitTableViewSyncer (#25638) [fix][test] Reduce flakiness in testLoadBalancerServiceUnitTableViewSyncer (#25752) [improve][misc] Upgrade Jetty to 12.1.9 (#25679) [fix][test] Fix flaky OneWayReplicatorDeduplicationTest.testDeduplication (#25641) [fix][test] Make NamespacesTest.cleanupAfterMethod tolerant of transient infra failures (#25640) [fix][test] Fix flaky testGetExcludedBookiesWithIsolationGroups (#25581) [fix][broker] Decrement unacked counter when removeAllUpTo removes pending acks (#25514) [fix][broker] Clean up orphan ledger on concurrent initial schema creation in BookkeeperSchemaStorage (#25736) [fix][broker] Merge broker offload extra configurations (#25681) [fix][broker] Correct two race conditions in the tracker code and logic bug in InMemoryDelayedDeliveryTracker that failed with NoSuchElementException (#25684) [fix][broker] Skip backlog-quota eviction on fenced/closing topics (#25730) (#25740) [fix][client] Make ClientBuilder serializable (#25725) [fix][client]Broker-side producer handle leak if closes a producer which state is regitering schema (#25583) [fix][broker][fix][broker]Replication stats is empty when the cluster is the target cluster of a one-way replication (#25625) [fix][broker]Replication is stuck because failed to read entries (#25644) [fix][broker] ConcurrentLongHashMap throw ArrayIndexOutOfBoundsException (#25572) [fix][broker] Race condition causes perpetual backlog on internal topics (#25578) [fix][client] Stabilize scaleReceiverQueueHint against concurrent enqueue/take

​
AoP

6c929d3 test(aop): ignore closed multibundle cleanup 4c23aa6 fix(aop): update jetty 12 handler APIs

​
KoP

add8acc2e Merge branch ‘branch-4.0’ into branch-4.0.10.2 ea3cf684b [branch-4.0] Remove proxy from build.sh b24b4a442 [branch-4.0] remove dependencies from proxy Fix fetch request duplicate key issue Fix rdkafka requests might be forward to non-leader brokers and never recovered Skip permission check for internal stats consumer Stabilize generated swagger definitions Fix possible message loss from idempotent producers during ledger rollover Remove proxy module and related tests

​
StreamNative Pulsar Plugins

c227b39f4 fix(rest): retry reader after consumer reconnect 10e99a94d chore(proxy): fix mock servlet import order 2976c8b1d fix(rest): handle jetty ee8 request redirects Add rest v2 consume timeout to help return the current data fix: upgrade Netty to 4.1.133.Final and exclude epoll native to fix CVEs in pulsar-metadata-tool and bookie-rackinfo Fix to allow message id seek for non-partitioned topics

​
pulsarctl

Bump go version to 1.25.10 to fix CVE Add JDK path

​
Function Mesh Worker Service

85f2b82a fix ci feat: Support pin agent version when create session feat: support filter based on metadata and use CRD for sessions feat: Align with Anthropic api fix(registry-service): mirror agent rename onto binding display-name

​
StreamNative Unified RBAC

refactor: remove Pulsar servlet compatibility logic on main 63f1b65 Bump version to 1.13.2-rc10 41b673e Bump version to 1.13.2-rc9 b2f01df Bump version to 1.13.2-rc8 feat: add more agent related permissions 6dfb0ea Bump version to 1.13.2-rc7 c2fd5c0 Bump version to 1.13.2-rc6 [codex] Fix maintenance notification action RBAC mappings 0ad4ea1 Bump version to 1.13.2-rc5 feat: add MaintenanceNotification permissions to unified RBAC 9c144cf Bump version to 1.13.2-rc4 ba6b888 Bump version to 1.13.2-rc3 feat: add test cases for workspaces and update sdk-apiserver bde7d6e Bump version to 1.13.2-rc2 fix: update workspaces’ api group to compute.streamnative.io 66bbb7a Bump version to 1.13.2-rc1 fix: support cloud integration with specified image

​
Security Fixes

​
Apache Pulsar

(#25744) [fix][sec] Upgrade thrift to 0.23.0 to address CVE-2026-43869 (#25745) [fix][sec] Upgrade vertx to 4.5.27 to address CVE-2026-6860 (#25737) [fix][sec] Upgrade vert.x to 4.5.25 to address CVE-2026-6860 (#25670) [fix][sec] Upgrade Netty to 4.1.133.Final to address CVEs