> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V4.0.12.6

# StreamNative Weekly Release Notes v4.0.12.6

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v4.0.12.6](https://github.com/streamnative/pulsar/releases/tag/v4.0.12.6)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/4.0.12.6/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/4.0.12.6/images/sha256-2148750ad059bed64185fd6d76b3a3871dba46c369e47afc2a06ba2dcdd7ca45)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/4.0.12.6/images/sha256-af80edd05cb8b09a9297b7401e3c5696f48d02a5208c4b5c7a6306303e9c536a)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/4.0.12.6/images/sha256-af80edd05cb8b09a9297b7401e3c5696f48d02a5208c4b5c7a6306303e9c536a)

## General Changes

### Apache Pulsar

([#26192](https://github.com/apache/pulsar/pull/26192)) \[fix]\[broker] Add missing bundle Prometheus metrics for extensible load manager

([#26348](https://github.com/apache/pulsar/pull/26348)) \[improve]\[build] Upgrade Apache Commons libraries

([#26429](https://github.com/apache/pulsar/pull/26429)) \[fix]\[test] Fix flaky IsolatedBookieEnsemblePlacementPolicyTest by awaiting the initial rack config load

([#26431](https://github.com/apache/pulsar/pull/26431)) \[fix]\[txn] Do not fail topic deletion when the aborted txn snapshot cannot be cleared

([#26432](https://github.com/apache/pulsar/pull/26432)) \[fix]\[broker] Bound the topic deletion retries triggered by a replication cluster removal

([#26421](https://github.com/apache/pulsar/pull/26421)) \[fix]\[fn] Allow retainKeyOrdering on Go functions

([#26413](https://github.com/apache/pulsar/pull/26413)) \[fix]\[fn] Honour negativeAckRedeliveryDelayMs in the Python function runtime

([#26414](https://github.com/apache/pulsar/pull/26414)) \[fix]\[fn] Honour retainOrdering and retainKeyOrdering in the Go function runtime

([#26399](https://github.com/apache/pulsar/pull/26399)) \[improve]\[ci] Run the Python function instance tests in CI

([#26424](https://github.com/apache/pulsar/pull/26424)) \[fix]\[offload] Cache and reuse entry offsets discovered while skipping in BlobStoreBackedReadHandleImpl

### KoP

\[fix] Fix the epoch for the shadow load manager

### Cloud Pulsar Plugins

5f4c3c33 \[ApiKeys] Fix HTTP auth provider marker

Fix checking auth provider name in the authorization stage

6b8b79f8 \[ApiKeys] Fix authorization migration tests

d53eb762 \[ApiKeys] Require provider marker for authorization

### Pulsar Tiered Storage v2

feat(offload): Add broker-wide offload rate limiting

## Security Fixes

### Apache Pulsar

([#26446](https://github.com/apache/pulsar/pull/26446)) \[fix]\[sec] Bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /pulsar-function-go

([#26436](https://github.com/apache/pulsar/pull/26436)) \[fix]\[sec]\[branch-4.x] Upgrade async-http-client to 2.16.1

([#26437](https://github.com/apache/pulsar/pull/26437)) \[fix]\[sec]\[branch-4.x] Upgrade vertx to 4.5.32

([#26438](https://github.com/apache/pulsar/pull/26438)) \[fix]\[sec]\[branch-4.x] Upgrade Thrift to 0.24.0

([#26439](https://github.com/apache/pulsar/pull/26439)) \[fix]\[sec]\[branch-4.x] Upgrade lz4-java to 1.11.2
