> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V4.0.10.6

# StreamNative Weekly Release Notes v4.0.10.6

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v4.0.10.6](https://github.com/streamnative/pulsar/releases/tag/v4.0.10.6)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/4.0.10.6/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/4.0.10.6/images/sha256-56b7c869e0cc2fea450f7ea87666f5c0079c9a974323db61181d216949b894bc)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/4.0.10.6/images/sha256-3dc5b5ecc0d98c271ab493bae6a21aabb2ac40de38999d81b44051cc9ff3540b)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/4.0.10.6/images/sha256-3dc5b5ecc0d98c271ab493bae6a21aabb2ac40de38999d81b44051cc9ff3540b)

## General Changes

### Apache Pulsar

([#25915](https://github.com/apache/pulsar/pull/25915)) \[fix]\[broker]Do not trigger topic GC if replication is still active

([#26079](https://github.com/apache/pulsar/pull/26079)) \[feat]\[broker] Expose managed ledger properties via topic internal stats

([#26075](https://github.com/apache/pulsar/pull/26075)) \[fix]\[broker] Avoid attaching a consumer to a migrated non-persistent topic on subscribe

([#26065](https://github.com/apache/pulsar/pull/26065)) \[fix]\[meta] Run ledger-underreplication notification callbacks off the metadata-store listener thread

([#26064](https://github.com/apache/pulsar/pull/26064)) \[fix]\[client] Run the failover health probe off the Netty event-loop thread

([#25675](https://github.com/apache/pulsar/pull/25675)) \[fix]\[test] Make SameAuthParamsLookupAutoClusterFailoverTest less timing-sensitive

([#26038](https://github.com/apache/pulsar/pull/26038)) \[improve]\[test]Add test: test/testTopicPartitionCannotBeCreatedAfterTopicDeleted

([#26002](https://github.com/apache/pulsar/pull/26002)) \[fix]\[broker] Fix geo-replication stuck after a failed publish to the remote cluster

([#26059](https://github.com/apache/pulsar/pull/26059)) \[fix] functions: Run worker leader-election off the consumer event-listener thread

([#26054](https://github.com/apache/pulsar/pull/26054)) \[fix]\[broker] Avoid blocking the bundle-throughput lookup on per-bundle metadata reads

([#26053](https://github.com/apache/pulsar/pull/26053)) \[fix]\[broker] Avoid blocking the dispatcher close path on delayed-delivery tracker close

([#26052](https://github.com/apache/pulsar/pull/26052)) \[fix]\[proxy] Avoid blocking the proxy IO thread on a cold broker cache

([#26051](https://github.com/apache/pulsar/pull/26051)) \[fix]\[broker] Avoid blocking metadata read on the IO thread when redirecting migrated producers/consumers

([#26044](https://github.com/apache/pulsar/pull/26044)) \[fix]\[broker] Prevent topic policy initialization race with a buffering listener wrapper

([#26049](https://github.com/apache/pulsar/pull/26049)) \[fix]\[test] Fix flaky testPrepareInitPoliciesCacheAsyncThrowExceptionAfterCreateReader

([#26040](https://github.com/apache/pulsar/pull/26040)) \[fix]\[broker] Run the message expiry check off the topic policy update path

([#26042](https://github.com/apache/pulsar/pull/26042)) \[fix]\[broker] Run topic policy notifications on the topic-ordered executor

([#26046](https://github.com/apache/pulsar/pull/26046)) \[fix]\[fn] Make exclusiveLeaderProducer volatile in FunctionMetaDataManager

([#26033](https://github.com/apache/pulsar/pull/26033)) \[improve]\[fn] Upgrade pulsar-client-python to 3.12.0

([#26031](https://github.com/apache/pulsar/pull/26031)) \[fix]\[broker] Fail fast for load balancer misconfigurations instead of falling back to SimpleLoadManagerImpl

([#26025](https://github.com/apache/pulsar/pull/26025)) \[fix]\[broker] Don't let a stuck or aborted topic policies cache init make a namespace's topics unloadable

([#26026](https://github.com/apache/pulsar/pull/26026)) \[fix]\[broker] Fix forced topic/namespace deletion still hanging when the compaction reader reconnect stalls

([#26016](https://github.com/apache/pulsar/pull/26016)) \[fix]\[broker] Fix forced topic/namespace deletion hanging or failing when compaction is in progress

([#26015](https://github.com/apache/pulsar/pull/26015)) \[fix]\[broker] Prevent subscribe rate limit from stalling compaction and blocking forced deletion

([#26000](https://github.com/apache/pulsar/pull/26000)) \[fix]\[meta] Keep the leader value in the election cycle and make leader reads authoritative

([#25998](https://github.com/apache/pulsar/pull/25998)) \[fix]\[broker] Fix compacted read could be stuck forever or message loss due to cursor mark delete

([#25963](https://github.com/apache/pulsar/pull/25963)) \[improve]\[misc] Upgrade Apache Commons libraries and Apache Http components

([#25974](https://github.com/apache/pulsar/pull/25974)) \[fix]\[test] Deflake TopicPoliciesTest.setupTestTopic by retrying forced namespace deletion

([#25977](https://github.com/apache/pulsar/pull/25977)) \[fix]\[test] Fix flaky ExtensibleLoadManagerImplTest.initializeState by recovering wedged channel ownership

([#25976](https://github.com/apache/pulsar/pull/25976)) \[fix]\[test] Fix flaky ExtensibleLoadManagerImplTest by re-serving the channel topic in initializeState

([#25946](https://github.com/apache/pulsar/pull/25946)) \[fix]\[broker] Fix tableview divergence in ServiceUnitStateTableViewSyncer causing flaky tests

### KoP

\[fix] Improve NotOwnedBundleHandler logic

Fix inflight reads limiter permits leak when handleEntries fails

Fix the internal Kafka client could be configured with TLS but no certificates

### StreamNative Pulsar Plugins

fix(package-storage-cloud): set numeric GCS fs config for Hadoop 3.5 compatibility

405aa78dd fix(ci): use go 1.26.4 for plugin release builds

fix(snoidc-sdk-go): upgrade golangci-lint to v2 for Go 1.26 compatibility

46cccc374 Remove unused OpenTelemetry test dependency from pulsar-rest tests

### pulsarctl

feat(cmd): add custom runtime options injection

### Function Mesh Worker Service

e1fed5f2 fix cherry-pick error

feat: support as service account runtime auth

fix: fix AgentTrigger restart and support list AgentTrigger by agent id

worker-service: Support Kubernetes 1.35 pod status

a1c93d5c feat: upgrade pulsar to 4.0.10.5

### StreamNative Ursa storage

fix cve check failed

## Security Fixes

### Apache Pulsar

([#26068](https://github.com/apache/pulsar/pull/26068)) \[fix]\[sec] Upgrade jline to 4.2.1 and picocli to 4.7.7, drop unused jline2

### StreamNative Pulsar Plugins

\[fix]\[sec] Update branch-4.0 plugin CVE dependencies