> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V4.1.3.4

# StreamNative Weekly Release Notes v4.1.3.4

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v4.1.3.4](https://github.com/streamnative/pulsar/releases/tag/v4.1.3.4)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/4.1.3.4/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/4.1.3.4/images/sha256-b9c2cc29aaff9fb2c3432b66788bcb47697594be5671fd5f8e6a059b8a95eddf)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/4.1.3.4/images/sha256-185605589c58a017c973e93dd180c9517a67ec89dc74ac3433f51561ebbd1b64)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/4.1.3.4/images/sha256-185605589c58a017c973e93dd180c9517a67ec89dc74ac3433f51561ebbd1b64)

## General Changes

### Apache Pulsar

([#25293](https://github.com/apache/pulsar/pull/25293)) \[improve]\[broker]Reduce the lock range of SimpleCache to enhance performance

([#25371](https://github.com/apache/pulsar/pull/25371)) \[fix]\[broker] Fix IllegalArgumentException in BucketDelayedDeliveryTracker.addMessage

([#25352](https://github.com/apache/pulsar/pull/25352)) \[fix]\[broker] Fix race condition in ServerCnx producer/consumer async callbacks

([#25312](https://github.com/apache/pulsar/pull/25312)) \[fix]\[broker]system topic was created with different partitions acrossing clusters after enabled namespace-level replication

([#25325](https://github.com/apache/pulsar/pull/25325)) \[fix]\[io]\[kca] kafka headers silently dropped

([#25317](https://github.com/apache/pulsar/pull/25317)) \[fix]\[client] Fail messages immediately in ProducerImpl when in terminal state

([#25316](https://github.com/apache/pulsar/pull/25316)) \[fix] Fix flaky OneWayReplicatorTest.testTopicPoliciesReplicationRule

([#25314](https://github.com/apache/pulsar/pull/25314)) \[fix]\[test] Fix flaky PulsarDebeziumOracleSourceTest

([#25266](https://github.com/apache/pulsar/pull/25266)) \[fix]\[broker] Handle missing replicator during snapshot request processing

([#25346](https://github.com/apache/pulsar/pull/25346)) \[fix]\[broker] Fix concurrency bug in BucketDelayedDeliveryTracker

### MoP

d4a069f3 Ignore some flaky test

### KoP

\[branch-4.1] Fix compatibility issue for ManagedLedgerInfo

fix: respect max bytes limit for both requests and partitions

Scheduled to add first offset to the ledger info

Fix "LastConfirmedEntry is xxx when reading" read failures after ledger rollover

### StreamNative Pulsar Plugins

222eabf7d Fix hashicorp image issue

fix: exclude stream-storage-server from pulsar-metadata-tool

fix: upgrade spring-beans to 6.2.12 and spring-ldap-core to 3.2.16 to fix CVEs in broker-auth-ldap

aa20817d2 Update bom version to 4.1.0-SNAPSHOT, the 4.0.0-SNAPSHOT will keep update when bom branch-4.1 have any change

Remove zookeeper version defiine

5d00fcc46 Upgrade bookie-rackinfo netty version

fix: upgrade Go from 1.25.6 to 1.25.8 to patch CVE-2026-27139 in stdlib

Fix vault docker version issue

### pulsarctl

Update Trivy GitHub Action to v0.35.0

Gate Docker login and snstage image usage on streamnativebot actor

Add platform and compute teams as CODEOWNERS

### Function Mesh Worker Service

e9fa1acc fix: use 4.1.3.3 base image in CI

4a919936 feat: Support volume & volumeMounts in CustomRuntimeOptions

Support unified RBAC for registry service

feat: expose clusterRef field to ConnectionConfig

fix: do not set static bootstrapServers when in registry mode

fix: fix build error

feat: add a new endpoint to validate connection

### StreamNative Unified RBAC

fix: include Pulsar 4.1 in pulsar40 compat source set

## Security Fixes

### Apache Pulsar

([#25399](https://github.com/apache/pulsar/pull/25399)) \[fix]\[sec] Upgrade to Netty 4.1.132.Final to address CVEs