Skip to main content

StreamNative Weekly Release Notes v4.0.12.4

Download

Distributions

Packages

Images

General Changes

Apache Pulsar

(#26384) [fix][client] Divide the across-partitions budget only when it was set explicitly (#26382) [fix][test] Fix OneWayReplicatorSchemaValidationEnforcedTest racing the replicator’s remote topic creation (#26365) [fix][cli] Set —enable-native-access=ALL-UNNAMED for the CLI tools on Java 24+ (#26371) [fix][cli][branch-4.0] Don’t pass unset pulsar-perf pending-message options to the producer (#26342) [fix][client] Apply no-memory-limit producer queue defaults at producer creation (#26372) [fix][offload] Normalize offloader cache directory path (#26249) [fix][test] Fix flaky AdminApiTest caused by leaked brokerShutdownTimeoutMs (#26268) [fix][broker] Prevent Key_Shared out-of-order replay starvation at the end of topic (#25973) [improve][misc] Upgrade log4j to 2.26.0 and slf4j to 2.0.18 (#26315) [improve][misc] Upgrade Conscrypt to 2.6.2 to restore the native library glibc baseline (#26325) [fix][client] Restore OAuth2 HTTP client after deserialization

AoP

Fix test. [fix] Fix issues caused by rabbitmq client

KoP

Change NOT_LEADER_OR_FOLLOWER log level to WARN [fix] Support return leader epoch for the metadata request

StreamNative Pulsar Plugins

fix: upgrade metadata tool Netty and Log4j dependencies fix: address Trivy Go and Netty CVEs in platform image

pulsarctl

fix: upgrade Go to 1.25.14 and x/sys to 0.44.0 for CVEs

Pulsar Tiered Storage v2

test(read): allocate cache chunks from the pooled allocator and log resolved config 73be6c8 update: bump Pulsar and StreamNative BOM versions to 4.0.12.3 and update test image version revert(index): restore byte-limit span behavior e14e156 chore(deps): update Pulsar and StreamNative BOM versions to 4.0.12.2 and bump Caffeine version to 3.2.4

Security Fixes

Apache Pulsar

(#26370) [fix][sec][branch-4.2] Upgrade BouncyCastle to 1.85 and BouncyCastle FIPS to 2.0.2 to address CVEs (#26339) [fix][sec] Upgrade Jackson to 2.18.10 (#26329) [fix][sec] Bump log4j2 from 2.26.0 to 2.26.1