> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V4.1.0.7

# StreamNative Weekly Release Notes v4.1.0.7

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v4.1.0.7](https://github.com/streamnative/pulsar/releases/tag/v4.1.0.7)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/4.1.0.7/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/4.1.0.7/images/sha256-52a093183b6f1721004a1a401ed8191e6eb5604fd2bf9a03678c37514222e6a9)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/4.1.0.7/images/sha256-9ec9e013b7e03c137f9c3c1269edb27e5900f3578826e4d9402d35484fed45c8)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/4.1.0.7/images/sha256-9ec9e013b7e03c137f9c3c1269edb27e5900f3578826e4d9402d35484fed45c8)

## General Changes

### Apache Pulsar

([#24976](https://github.com/apache/pulsar/pull/24976)) \[feat]\[meta] upgrade oxia version to 0.7.2

([#24971](https://github.com/apache/pulsar/pull/24971)) \[fix]\[broker]Leaving orphan schemas and topic-level policies after partitioned topic is deleted by GC

([#24805](https://github.com/apache/pulsar/pull/24805)) \[fix]\[test] Made ProtobufNativeSchemaTest.testSchema order-independent

([#24962](https://github.com/apache/pulsar/pull/24962)) \[improve]\[client] Deduplicate getTopicsUnderNamespace in BinaryProtoLookupService

([#24972](https://github.com/apache/pulsar/pull/24972)) \[fix]\[test] Add Delta Tolerance in Double-Precision Assertions to Fix Rounding Flakiness

([#24872](https://github.com/apache/pulsar/pull/24872)) \[fix]\[test] Fixed ResponseBody Check in Test Helper

([#24969](https://github.com/apache/pulsar/pull/24969)) \[fix]\[test] Fixed Nondeterministic Ordering in SchemaInfoTest

([#24965](https://github.com/apache/pulsar/pull/24965)) \[fix]\[client] Fix deduplication for getPartitionedTopicMetadata to include method parameters

([#24945](https://github.com/apache/pulsar/pull/24945)) \[fix]\[broker]Transactional messages can never be sent successfully if concurrently taking transaction buffer snapshot

([#24955](https://github.com/apache/pulsar/pull/24955)) \[fix]\[test] Fix flaky KeySharedSubscriptionBrokerCacheTest.testReplayQueueReadsGettingCached

([#24957](https://github.com/apache/pulsar/pull/24957)) \[fix]\[test] Fix invalid test NonPersistentTopicTest.testProducerRateLimit

([#24833](https://github.com/apache/pulsar/pull/24833)) \[feat] PIP-442: Add memory limits for CommandGetTopicsOfNamespace

([#24952](https://github.com/apache/pulsar/pull/24952)) \[improve]\[fn] Use PulsarByteBufAllocator.DEFAULT instead of ByteBufAllocator.DEFAULT

([#24958](https://github.com/apache/pulsar/pull/24958)) \[cleanup]\[broker] Remove unused configuration maxMessageSizeCheckIntervalInSeconds

([#24954](https://github.com/apache/pulsar/pull/24954)) \[fix]\[broker] AvgShedder comparison error

([#24951](https://github.com/apache/pulsar/pull/24951)) \[fix]\[test] Fix flaky NonPersistentTopicTest.testProducerRateLimit

([#24802](https://github.com/apache/pulsar/pull/24802)) \[fix]\[broker] Trigger topic creation event only once for non-existent topic

([#24948](https://github.com/apache/pulsar/pull/24948)) \[improve]\[test] Disable flaky PatternConsumerBackPressureTest until the problem is fixed

([#23551](https://github.com/apache/pulsar/pull/23551)) \[fix]\[txn] fix concurrent error cause txn stuck in TransactionBufferHandlerImpl#endTxn

([#24939](https://github.com/apache/pulsar/pull/24939)) \[fix]\[broker] Avoid recursive update in ConcurrentHashMap during policy cache cleanup

([#24787](https://github.com/apache/pulsar/pull/24787)) \[improve]\[broker] Add tests for using absolute FQDN for advertisedAddress and remove extra dot from brokerId

([#24893](https://github.com/apache/pulsar/pull/24893)) \[feat]\[client] PIP-234: Support shared resources in PulsarAdmin to reduce thread usage

([#24762](https://github.com/apache/pulsar/pull/24762)) \[fix]\[admin] Set local policies overwrites "number of bundles" passed during namespace creation

([#24941](https://github.com/apache/pulsar/pull/24941)) \[fix]\[broker] Fix bug in PersistentMessageExpiryMonitor which blocked further expirations

([#24929](https://github.com/apache/pulsar/pull/24929)) \[fix]\[test] Stabilize testMsgDropStat by reliably triggering non-persistent publisher drop

([#24934](https://github.com/apache/pulsar/pull/24934)) \[fix]\[broker] Fix stack overflow caused by race condition when closing a connection

([#24932](https://github.com/apache/pulsar/pull/24932)) \[fix]\[broker] ExtensibleLoadManager: handle SessionReestablished and Reconnected events to re-register broker metadata

([#24933](https://github.com/apache/pulsar/pull/24933)) \[fix]\[broker] Use `poll` instead `remove` to avoid `NoSuchElementException`

([#24898](https://github.com/apache/pulsar/pull/24898)) \[fix]\[broker] fix getMaxReadPosition in TransactionBufferDisable should return latest

([#24943](https://github.com/apache/pulsar/pull/24943)) \[improve]\[broker] Don't log an error when updatePartitionedTopic is called on a non-partitioned topic

([#24942](https://github.com/apache/pulsar/pull/24942)) \[improve]\[broker] Optimize lookup result warn log

### KoP

Fix incorrect version ID displayed in schema retrieval log

Add log to trace existing schema retrieval

### Function Mesh Worker Service

add kafka managed auth data annotation

bump funciton-mesh v0.26.0

bump function-mesh to 0.26.0

feat: make function api pass sink and source config

Add retry for ci

### StreamNative Tiered storage

Move the unsupported handler to info level

## Security Fixes

### Apache Pulsar

([#24953](https://github.com/apache/pulsar/pull/24953)) \[fix]\[sec] Update Hbase version to 2.6.3-hadoop3 and exclude Avro from hbase-client to remediate CVEs

([#24949](https://github.com/apache/pulsar/pull/24949)) \[fix]\[sec] Added Exclusions for tomcat-embed-core and derby and override mina-core to remediate CVEs

([#24950](https://github.com/apache/pulsar/pull/24950)) \[fix]\[sec] Upgrade hadoop3 version from 3.4.0 to 3.4.1

([#24937](https://github.com/apache/pulsar/pull/24937)) \[fix]\[sec] Override nimbus-jose-jwt to remediate CVE-2023-52428 and CVE-2025-53864

([#24936](https://github.com/apache/pulsar/pull/24936)) \[fix]\[sec] Override commons-beanutils and commons-configuration2 to remediate CVEs

([#24935](https://github.com/apache/pulsar/pull/24935)) \[fix]\[sec] Override kafka-clients in kinesis-kpl-shaded to remediate CVE-2024-31141 and CVE-2025-27817
