> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V4.0.10.2

# StreamNative Weekly Release Notes v4.0.10.2 (stable)

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v4.0.10.2](https://github.com/streamnative/pulsar/releases/tag/v4.0.10.2)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/4.0.10.2/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/4.0.10.2/images/sha256-5604d46033399693e69d5b4f922309b08cd4f3abfa5179430c995be973141ecf)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/4.0.10.2/images/sha256-b29d0c77cfe0d12db4fdb37c0d7f32a6505698922c044e51fe57632515d19de0)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/4.0.10.2/images/sha256-b29d0c77cfe0d12db4fdb37c0d7f32a6505698922c044e51fe57632515d19de0)

## General Changes

### Apache Pulsar

([#25638)](https://github.com/apache/pulsar/pull/25638))) Revert "\[fix]\[test] Reduce flakiness in testLoadBalancerServiceUnitTableViewSyncer

([#25638](https://github.com/apache/pulsar/pull/25638)) \[fix]\[test] Reduce flakiness in testLoadBalancerServiceUnitTableViewSyncer

([#25752](https://github.com/apache/pulsar/pull/25752)) \[improve]\[misc] Upgrade Jetty to 12.1.9

([#25679](https://github.com/apache/pulsar/pull/25679)) \[fix]\[test] Fix flaky OneWayReplicatorDeduplicationTest.testDeduplication

([#25641](https://github.com/apache/pulsar/pull/25641)) \[fix]\[test] Make NamespacesTest.cleanupAfterMethod tolerant of transient infra failures

([#25640](https://github.com/apache/pulsar/pull/25640)) \[fix]\[test] Fix flaky testGetExcludedBookiesWithIsolationGroups

([#25581](https://github.com/apache/pulsar/pull/25581)) \[fix]\[broker] Decrement unacked counter when removeAllUpTo removes pending acks

([#25514](https://github.com/apache/pulsar/pull/25514)) \[fix]\[broker] Clean up orphan ledger on concurrent initial schema creation in BookkeeperSchemaStorage

([#25736](https://github.com/apache/pulsar/pull/25736)) \[fix]\[broker] Merge broker offload extra configurations

([#25681](https://github.com/apache/pulsar/pull/25681)) \[fix]\[broker] Correct two race conditions in the tracker code and logic bug in InMemoryDelayedDeliveryTracker that failed with NoSuchElementException

([#25684](https://github.com/apache/pulsar/pull/25684)) \[fix]\[broker] Skip backlog-quota eviction on fenced/closing topics

([#25730](https://github.com/apache/pulsar/pull/25730)) ([#25740](https://github.com/apache/pulsar/pull/25740)) \[fix]\[client] Make ClientBuilder serializable

([#25725](https://github.com/apache/pulsar/pull/25725)) \[fix]\[client]Broker-side producer handle leak if closes a producer which state is regitering schema

([#25583](https://github.com/apache/pulsar/pull/25583)) \[fix]\[broker]\[fix]\[broker]Replication stats is empty when the cluster is the target cluster of a one-way replication

([#25625](https://github.com/apache/pulsar/pull/25625)) \[fix]\[broker]Replication is stuck because failed to read entries

([#25644](https://github.com/apache/pulsar/pull/25644)) \[fix]\[broker] ConcurrentLongHashMap throw ArrayIndexOutOfBoundsException

([#25572](https://github.com/apache/pulsar/pull/25572)) \[fix]\[broker] Race condition causes perpetual backlog on internal topics

([#25578](https://github.com/apache/pulsar/pull/25578)) \[fix]\[client] Stabilize scaleReceiverQueueHint against concurrent enqueue/take

### AoP

6c929d3 test(aop): ignore closed multibundle cleanup

4c23aa6 fix(aop): update jetty 12 handler APIs

### KoP

add8acc2e Merge branch 'branch-4.0' into branch-4.0.10.2

ea3cf684b \[branch-4.0] Remove proxy from build.sh

b24b4a442 \[branch-4.0] remove dependencies from proxy

Fix fetch request duplicate key issue

Fix rdkafka requests might be forward to non-leader brokers and never recovered

Skip permission check for internal stats consumer

Stabilize generated swagger definitions

Fix possible message loss from idempotent producers during ledger rollover

Remove proxy module and related tests

### StreamNative Pulsar Plugins

c227b39f4 fix(rest): retry reader after consumer reconnect

10e99a94d chore(proxy): fix mock servlet import order

2976c8b1d fix(rest): handle jetty ee8 request redirects

Add rest v2 consume timeout to help return the current data

fix: upgrade Netty to 4.1.133.Final and exclude epoll native to fix CVEs in pulsar-metadata-tool and bookie-rackinfo

Fix to allow message id seek for non-partitioned topics

### pulsarctl

Bump go version to 1.25.10 to fix CVE

Add JDK path

### Function Mesh Worker Service

85f2b82a fix ci

feat: Support pin agent version when create session

feat: support filter based on metadata and use CRD for sessions

feat: Align with Anthropic api

fix(registry-service): mirror agent rename onto binding display-name

### StreamNative Unified RBAC

refactor: remove Pulsar servlet compatibility logic on main

63f1b65 Bump version to 1.13.2-rc10

41b673e Bump version to 1.13.2-rc9

b2f01df Bump version to 1.13.2-rc8

feat: add more agent related permissions

6dfb0ea Bump version to 1.13.2-rc7

c2fd5c0 Bump version to 1.13.2-rc6

\[codex] Fix maintenance notification action RBAC mappings

0ad4ea1 Bump version to 1.13.2-rc5

feat: add MaintenanceNotification permissions to unified RBAC

9c144cf Bump version to 1.13.2-rc4

ba6b888 Bump version to 1.13.2-rc3

feat: add test cases for workspaces and update sdk-apiserver

bde7d6e Bump version to 1.13.2-rc2

fix: update workspaces' api group to compute.streamnative.io

66bbb7a Bump version to 1.13.2-rc1

fix: support cloud integration with specified image

## Security Fixes

### Apache Pulsar

([#25744](https://github.com/apache/pulsar/pull/25744)) \[fix]\[sec] Upgrade thrift to 0.23.0 to address CVE-2026-43869

([#25745](https://github.com/apache/pulsar/pull/25745)) \[fix]\[sec] Upgrade vertx to 4.5.27 to address CVE-2026-6860

([#25737](https://github.com/apache/pulsar/pull/25737)) \[fix]\[sec] Upgrade vert.x to 4.5.25 to address CVE-2026-6860

([#25670](https://github.com/apache/pulsar/pull/25670)) \[fix]\[sec] Upgrade Netty to 4.1.133.Final to address CVEs