> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V4.0.9.5

# StreamNative Weekly Release Notes v4.0.9.5

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v4.0.9.5](https://github.com/streamnative/pulsar/releases/tag/v4.0.9.5)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/4.0.9.5/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/4.0.9.5/images/sha256-55c6518c4668fb8d1190e1e4140d7bbc5f2407bd4dbad6ca014c369bb8484b53)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/4.0.9.5/images/sha256-2a7b7a126e418052d3d47fa36c6d1b4a5e83deb3c216041e5cf3646fc1903e87)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/4.0.9.5/images/sha256-2a7b7a126e418052d3d47fa36c6d1b4a5e83deb3c216041e5cf3646fc1903e87)

## General Changes

### Apache Pulsar

([#25371](https://github.com/apache/pulsar/pull/25371)) \[fix]\[broker] Fix IllegalArgumentException in BucketDelayedDeliveryTracker.addMessage

([#25312](https://github.com/apache/pulsar/pull/25312)) \[fix]\[broker]system topic was created with different partitions acrossing clusters after enabled namespace-level replication

([#25266](https://github.com/apache/pulsar/pull/25266)) \[fix]\[broker] Handle missing replicator during snapshot request processing

([#25325](https://github.com/apache/pulsar/pull/25325)) \[fix]\[io]\[kca] kafka headers silently dropped

([#25317](https://github.com/apache/pulsar/pull/25317)) \[fix]\[client] Fail messages immediately in ProducerImpl when in terminal state

([#25316](https://github.com/apache/pulsar/pull/25316)) \[fix] Fix flaky OneWayReplicatorTest.testTopicPoliciesReplicationRule

([#25314](https://github.com/apache/pulsar/pull/25314)) \[fix]\[test] Fix flaky PulsarDebeziumOracleSourceTest

([#25346](https://github.com/apache/pulsar/pull/25346)) \[fix]\[broker] Fix concurrency bug in BucketDelayedDeliveryTracker

### KoP

([#1838)](https://github.com/streamnative/ksn/pull/1838))) Revert "Improve performance for finding position by offset

Improve performance for finding position by offset

### StreamNative Pulsar Plugins

90be1b311 fix(build): manage zookeeper version in parent pom

Fix Vault testcontainer compatibility in integration tests

fix: exclude stream-storage-server from pulsar-metadata-tool

fix: upgrade spring-beans to 6.2.12 and spring-ldap-core to 3.2.16 to fix CVEs in broker-auth-ldap

fe47ab3f5 Update bom version to 4.0.0-SNAPSHOT, the 4.0.0-SNAPSHOT will keep update when bom branch-4.0 have any change

Remove zookeeper version defiine

0d3d7c518 Upgrade bookie-rackinfo netty version

Fix vault docker version issue

### pulsarctl

Update Trivy GitHub Action to v0.35.0

Gate Docker login and snstage image usage on streamnativebot actor

Add platform and compute teams as CODEOWNERS

### Function Mesh Worker Service

df8505ee fix: use 4.0.9.4 base image in CI

Support unified RBAC for registry service

feat: expose clusterRef field to ConnectionConfig

fix: do not set static bootstrapServers when in registry mode

fix: fix build error

feat: add a new endpoint to validate connection

### StreamNative Unified RBAC

feat: add workspace packages permissions

b963039 Bump version to 1.11.2

89d0215 Bump version to 1.11.1

fix(deps): make caffeine compileOnly to avoid BOM convergence conflict

aac4247 Bump version to 1.11.0

fix(build): use afterEvaluate to resolve Maven artifactId from archivesName

740835b Bump version to 1.10.2

afa1350 Bump version to 1.10.1

fix(build): set Maven artifactId from archivesName

f7f6131 Bump version to 1.10.0

perf(authz-provider): add allowExtraOperationAsync result cache

ci: add workflow to sync release branches from main

docs: add comprehensive project documentation

build: remove legacy Maven pom.xml files

docs: add comprehensive project documentation

perf(enforcer): avoid thread switching with thenCompose/thenApply

build(management-servlet): conditional compilation for Pulsar 4.0.x/4.2.x compat

refactor(authz-provider): remove jjwt dependency, decode JWT payload directly

style: apply google java format via spotless

build: migrate Java build from Maven to Gradle

fix(authz-provider): pass org/instance/cluster condition in isSuperUser

ed0031c Bump version to 1.9.4

fix(sdk-go-oxia): merge role bindings on apply instead of overwriting

e683943 Bump version to 1.9.3

fix ci

367bae4 Bump version to 1.9.2

feat: Add workspace related permissions

10ca8ca Bump version to 1.9.1

16ac8ee Bump version to 1.9.0

9bc931e Bump version to 1.8.4

0b14a22 Bump version to 1.8.3

83a2430 Bump version to 1.8.2

26e32f4 Bump version to 1.8.1

e4f2838 Bump version to 1.8.0

feat: upgrade sdk-go version to v0.15.0

feat: support instances permissions mapping

b245b96 Bump version to 1.7.4

fixes the schedule release workflow

fdf637a fixes: configure maven

f0a9bcd fixes: use the pulsar image directly

597e9e4 fixes: fix the wrong image

feat: support features and featuregates permissions mapping

## Security Fixes