Skip to main content

StreamNative Weekly Release Notes v4.0.14.4

Download

Distributions

Packages

Images

General Changes

Apache Pulsar

(#27228) [improve][meta][branch-4.0] Upgrade Oxia Java client to 0.10.4 (#27173) [improve][meta][branch-4.0] Upgrade Oxia Java client to 0.10.3 (#27180) [improve][misc] Upgrade Jetty to 12.1.14 and Conscrypt to 2.7.0 (#27144) [fix][admin] Fix Pulsar Admin client deadlock caused by AsyncHttpClient’s per-host connection limit (#27125) [improve][broker] Balance partitions across consumers with activeConsumerFailoverConsistentHashing (#26760) [improve][build] Upgrade Guava to 33.7.1-jre

MoP

a7adae4a Fix MQTT stats tests with Gson map deserialization changes

KoP

[branch-4.0] Bump Pulsar BOM to 4.0.14.4 and align Oxia tests [fix] Fix waiting Fetch requests that spin and re-run offset searches

pulsarctl

fix: install Trivy directly from GitHub Releases

Cloud Pulsar Plugins

2afa8dba [CI] Fix free-disk-space action repository reference [Rest API Interceptor] Export billing resource usage [Rest API Interceptor] Always report resource usage metrics

Function Mesh Worker Service

f204253b ci: Fix the free-disk-space action reference [branch-4.2] Run the CI Oxia server from oxia/oxia:0.16.12

StreamNative Unified RBAC

Bump the RBAC SDKs to 1.17.3 (4.0)

Security Fixes

Apache Pulsar

(#27343) [fix][sec] Upgrade ZooKeeper to 3.9.7 to address several CVEs (#27311) [fix][sec][branch-4.2] Upgrade Netty to 4.1.140 and netty-tcnative to 2.0.85 to address several CVEs and bugs (#27186) [fix][sec] Upgrade zstd-jni to 1.5.7-25 (#27191) [fix][sec] Upgrade OkHttp to 5.5.1 and Okio to 3.18.2 (#27192) [fix][sec] Upgrade Gson to 2.15.0 (#27193) [fix][sec] Upgrade Byte Buddy to 1.18.16 (#27190) [fix][sec] Upgrade commons-codec to 1.23.0 (#27187) [fix][sec] Upgrade lz4-java to 1.12.1 (#27189) [fix][sec] Upgrade JLine to 4.4.8 (#27184) [fix][sec] Upgrade snappy-java to 1.1.10.12 (#27183) [fix][sec] Upgrade Vert.x to 4.5.35 (#26898) [fix][sec][branch-4.x] Upgrade Jackson to 2.18.12 (#27156) [fix][sec] Bump guava to 33.7.2-jre (#27142) [fix][sec] Bump github.com/go-jose/go-jose/v4 from 4.1.4 to 4.1.6 in /pulsar-function-go (#27139) [fix][sec] Bump org.xerial.snappy:snappy-java from 1.1.10.8 to 1.1.10.9 (#27138) [fix][sec] Use guava 33.7.1-jre also in jclouds-shaded