> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V4.2.1.9

# StreamNative Weekly Release Notes v4.2.1.9

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v4.2.1.9](https://github.com/streamnative/pulsar/releases/tag/v4.2.1.9)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/4.2.1.9/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/4.2.1.9/images/sha256-998b1fa04adcee7bcf740a17b86d69049a598fa687ab1e212905a9a3163e4f16)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/4.2.1.9/images/sha256-f6f389b951dfbf9f2f84a2184a9a643f3c633c27564e0cbee17e9de4f11ecb0b)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/4.2.1.9/images/sha256-f6f389b951dfbf9f2f84a2184a9a643f3c633c27564e0cbee17e9de4f11ecb0b)

## General Changes

### Apache Pulsar

([#26089](https://github.com/apache/pulsar/pull/26089)) \[fix]\[broker] Release entry on GetLastMessageId when parseMessageMetadata throws

([#26146](https://github.com/apache/pulsar/pull/26146)) \[fix]\[broker] Prevent stale service unit callbacks from dropping active lookup and cleanup jobs

([#26243](https://github.com/apache/pulsar/pull/26243)) \[fix]\[broker] Fix TableViewLoadDataStoreImpl close deadlock that stalls broker shutdown

([#26001](https://github.com/apache/pulsar/pull/26001)) \[fix]\[client] Fix unAckedMessageTracker cleanup on multi-topics batch ack

([#26191](https://github.com/apache/pulsar/pull/26191)) \[fix]\[fn] Forward source message properties in Python runtime

([#26237](https://github.com/apache/pulsar/pull/26237)) \[fix]\[broker] Fix silently dropped acknowledgement failures in PulsarMetadataEventSynchronizer

([#26240](https://github.com/apache/pulsar/pull/26240)) \[fix]\[broker] Fix delayed message index data loss when trimming overlapping bucket snapshots

([#26245](https://github.com/apache/pulsar/pull/26245)) \[fix]\[broker] Fix incorrect listener URLs returned by ModularLoadManager lookups

([#26119](https://github.com/apache/pulsar/pull/26119)) \[fix]\[broker] Prevent completing replicated snapshot before marker publish

([#26145](https://github.com/apache/pulsar/pull/26145)) \[fix]\[broker] Prevent stale topic unload cleanup from removing active cache entries

([#26199](https://github.com/apache/pulsar/pull/26199)) \[fix]\[meta] Complete handleMetadataEvent future exceptionally when the initial get fails

([#26201](https://github.com/apache/pulsar/pull/26201)) \[fix]\[meta] Record get op stats on the correct completion branch in AbstractMetadataStore

([#26236](https://github.com/apache/pulsar/pull/26236)) \[fix]\[broker] Fix Key\_Shared delivery stall when look-ahead triggers at the end of the topic

([#26218](https://github.com/apache/pulsar/pull/26218)) \[fix]\[meta] Fix RocksdbMetadataStore instanceId not advancing across restarts

([#26232](https://github.com/apache/pulsar/pull/26232)) \[improve]\[offload] Support credentials from offload policies for S3 and Aliyun OSS drivers

([#26228](https://github.com/apache/pulsar/pull/26228)) \[fix]\[ml] Preserve ledger entries/size when transformLedgerInfo callback completes after a concurrent close

([#26174](https://github.com/apache/pulsar/pull/26174)) \[fix]\[broker] Prevent stale read completions from stranding Failover subscriptions

([#26233](https://github.com/apache/pulsar/pull/26233)) \[improve]\[misc] Upgrade Jetty to 12.1.11

([#26234](https://github.com/apache/pulsar/pull/26234)) \[fix]\[broker] Trigger max read position callback for messages published during transaction buffer recovery

([#26230](https://github.com/apache/pulsar/pull/26230)) \[fix]\[broker] Check deliverAt before containsMessage in bucket addMessage

([#26227](https://github.com/apache/pulsar/pull/26227)) \[fix]\[ml] Preserve ledger properties when closing ledger

([#26225](https://github.com/apache/pulsar/pull/26225)) \[improve]\[build] Upgrade docker base image Alpine to 3.24

([#26226](https://github.com/apache/pulsar/pull/26226)) \[improve]\[build] Upgrade slog to 0.10.0

([#26223](https://github.com/apache/pulsar/pull/26223)) \[fix]\[broker]\[branch-4.2] Fix admin API HTTP 400 FAIL\_ON\_TRAILING\_TOKENS when a broker interceptor is loaded

([#26198](https://github.com/apache/pulsar/pull/26198)) \[fix]\[test] Fix flaky test `testCompactionPriority `

([#26217](https://github.com/apache/pulsar/pull/26217)) \[fix]\[fn] Return inputSpecs consumerProperties in function GET info

([#26200](https://github.com/apache/pulsar/pull/26200)) \[fix]\[meta] Fix NPE in shouldIgnoreEvent when MetadataEvent options is null

([#26179](https://github.com/apache/pulsar/pull/26179)) \[fix]\[broker] Prevent partition expansion from inheriting delayed-delivery bucket state

([#26149](https://github.com/apache/pulsar/pull/26149)) \[improve]\[broker] Skip system cursor when check inactive cursor.

([#26143](https://github.com/apache/pulsar/pull/26143)) \[fix]\[client] Fix lookup permit double-release, waiting queue starvation and timeout-response races in ClientCnx

([#26193](https://github.com/apache/pulsar/pull/26193)) \[improve]\[meta] Upgrade Oxia client to 0.9.4

([#26163](https://github.com/apache/pulsar/pull/26163)) \[improve]\[broker] Trace the asynchronous tasks in logs when loading topics

([#26171](https://github.com/apache/pulsar/pull/26171)) \[fix]\[broker] Fix bucket delayed message index metrics reset on scrape

([#26160](https://github.com/apache/pulsar/pull/26160)) \[fix]\[broker] Fix BucketDelayedDeliveryTracker recovery after LightProto migration

([#26159](https://github.com/apache/pulsar/pull/26159)) \[fix]\[broker] Read subscription properties directly from cursor

([#26043](https://github.com/apache/pulsar/pull/26043)) \[fix]\[client] Fix UnAckedMessageRedeliveryTracker to skip cancelled timeouts

([#26135](https://github.com/apache/pulsar/pull/26135)) \[fix]\[client] Sync ackSet in client with broker to stop acked messages reaching the DLQ

([#26169](https://github.com/apache/pulsar/pull/26169)) \[fix]\[ci] Upgrade sandboxed-trivy-action to approved sha

([#25480](https://github.com/apache/pulsar/pull/25480)) \[improve]\[ci] Replace trivy-action with sandboxed-trivy-action

([#26221](https://github.com/apache/pulsar/pull/26221)) \[fix]\[test]\[branch-4.2] Fix ManagedCursorTest compilation

([#26184](https://github.com/apache/pulsar/pull/26184)) \[fix]\[broker] Fix `getEstimatedSizeSinceMarkDeletePosition` throw `IllegalArgumentException`

([#26196](https://github.com/apache/pulsar/pull/26196)) \[fix]\[client] Preserve null values in pulsar-admin schema output

### AoP

\[branch-4.2] Remove OpenTelemetry dependencies

### MoP

368b5e63 fix

04e487db fix

### KoP

Introduce size and time based snapshottable metadata for producer state

Skip metadata lookup for topics with errors in async lookup

Fix pending txn offsets never removed due to deleted TXN markers after compaction

### pulsarctl

Upgrade go version to avoid cve

### Cloud Pulsar Plugins

c344ea49 fix(tests): remove pinned opentelemetry spi version

Check auth provider name in the authorization stage

### Function Mesh Worker Service

Align with orca-managed-agents

registry-service: Support PostgreSQL managed-agent storage

registry-service: Expose session cache token metrics

ci: Seed managed-agents API key fingerprint

### Pulsar Tiered Storage v2

test(read): reproduce empty-range crash after oversized entries

fix(read): support v1 entries larger than read buffer

tune(read): lower default in-flight read budget to 15% of direct memory

## Security Fixes