> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V4.0.6.7

# StreamNative Weekly Release Notes v4.0.6.7

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v4.0.6.7](https://github.com/streamnative/pulsar/releases/tag/v4.0.6.7)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/4.0.6.7/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/4.0.6.7/images/sha256-9a81b196b69abc1a89d44de62f9441961ff549a807cf782b818e7109aab9665d)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/4.0.6.7/images/sha256-9621cfce5d2a6e117406fc72d9da00eb3a7939218a06d43ea1a357701332f76e)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/4.0.6.7/images/sha256-9621cfce5d2a6e117406fc72d9da00eb3a7939218a06d43ea1a357701332f76e)

## General Changes

### Apache Pulsar

([#24779](https://github.com/apache/pulsar/pull/24779)) Bump org.apache.zookeeper:zookeeper from 3.9.3 to 3.9.4

([#24596](https://github.com/apache/pulsar/pull/24596)) \[improve]\[broker]Call scheduleAtFixedRateNonConcurrently for scheduled tasks, instead of scheduleAtFixedRate

([#24769](https://github.com/apache/pulsar/pull/24769)) \[fix]\[test] Flaky-test: BrokerServiceTest.testShutDownWithMaxConcurrentUnload

([#24764](https://github.com/apache/pulsar/pull/24764)) \[improve]\[build] Upgrade Mockito, AssertJ and ByteBuddy to fully support JDK25

([#24761](https://github.com/apache/pulsar/pull/24761)) \[fix]\[client] Exclude io.prometheus:simpleclient\_caffeine from client-side dependencies

([#24763](https://github.com/apache/pulsar/pull/24763)) \[improve]\[build] Upgrade Lombok to 1.18.42 to fully support JDK25

([#23634](https://github.com/apache/pulsar/pull/23634)) \[improve]\[broker] If there is a deadlock in the service, the probe should return a failure because the service may be unavailable

([#24738](https://github.com/apache/pulsar/pull/24738)) \[fix]\[broker] First entry will be skipped if opening NonDurableCursor while trimmed ledger is adding first entry.

([#24753](https://github.com/apache/pulsar/pull/24753)) \[fix]\[ml]Fix EOFException after enabled topics offloading

([#24772](https://github.com/apache/pulsar/pull/24772)) \[fix]\[misc] Fix compareTo contract violation for NamespaceBundleStats, TimeAverageMessageData and ResourceUnitRanking

([#24768](https://github.com/apache/pulsar/pull/24768)) \[improve]\[build] Upgrade SpotBugs to a version that supports JDK25

([#24767](https://github.com/apache/pulsar/pull/24767)) \[fix]\[ci] Fix CI for Java 25 including upgrade of Gradle Develocity Maven extension

([#24741](https://github.com/apache/pulsar/pull/24741)) \[fix]\[broker] Prevent unexpected recycle failure in dispatcher's read callback

([#24756](https://github.com/apache/pulsar/pull/24756)) \[fix]\[broker] Fix testServiceConfigurationRetentionPolicy unit test

([#24752](https://github.com/apache/pulsar/pull/24752)) \[fix]\[client] rollback TopicListWatcher retry behavior

([#24733](https://github.com/apache/pulsar/pull/24733)) \[improve]\[broker] Allow deletion of empty persistent topics regardless of retention policy

([#24698](https://github.com/apache/pulsar/pull/24698)) \[fix]\[client]TopicListWatcher not closed when calling PatternMultiTopicsConsumerImpl.closeAsync() method

### KoP

Add test cases for record schema validation with subject name strategy

Add more info to logs when the connection is closed

Change log level to warn for authentication failure

\[schema-registry] add option to disable compatibility mode configuration

Handle unexpected exception in decode for safe producer state recovery

Avoid blocking when the previous consumer closed without sending SyncGroup requests

Use new CompactedTopicUtils.asyncReadCompactedEntries API from apache/pulsar#24725

### StreamNative Pulsar Plugins

\[feat]\[topic-compaction-service] Implement clean expired  message during compaction

Fix gcs-connector cve

### Function Mesh Worker Service

Reject request when agent name is too long or sessionId is not valid

c1035c46 Allow to use long name for agent function

### StreamNative Tiered storage

Fix ci on the branch-4.0

### StreamNative Unified RBAC

feat: treat NotFound exception as success for deleting

feat: upgrade sdk-go version to v0.14.0

Add conditions for Catalog, CC and CE

feat: support extract variable claim from token

### StreamNative Ursa storage

fix: mask sensitive properties in CatalogKey toString to avoid credential leaks in logs

## Security Fixes