> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V4.2.5.3

# StreamNative Weekly Release Notes v4.2.5.3

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v4.2.5.3](https://github.com/streamnative/pulsar/releases/tag/v4.2.5.3)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/4.2.5.3/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/4.2.5.3/images/sha256-a02354d0243780671eb97cb1fc111ea7f53f0232a7690b3d1655ffecde43a22b)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/4.2.5.3/images/sha256-fbc04688853d5bfb4f4965dc61b6a6eaecd67002609de302f033a52b789aacef)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/4.2.5.3/images/sha256-fbc04688853d5bfb4f4965dc61b6a6eaecd67002609de302f033a52b789aacef)

## General Changes

### KoP

\[fix] Prevent Kafka topic recovery stalls and initialization deadlocks

\[build]\[branch-4.2] Use the RBAC SDK from streamnative/rbac

### StreamNative Pulsar Plugins

fix(placement-policy): avoid per-entry rack resolution in AZ-aware read reordering

fix: upgrade detector compression and kube Go toolchain

### pulsarctl

test: use a valid integer for dynamic dispatch rate config

Upgrade Go to 1.26.10 to fix CVE-2026-111943

### StreamNative Unified RBAC

Fix seven bugs in the Pulsar plugins (4.2)

Build the Pulsar plugins for StreamNative Pulsar 4.2

Bump the RBAC SDKs to 1.17.0

Bump the RBAC SDKs to 1.16.3 and require full coverage

Remove the catch blocks that can never run from the Pulsar plugins

Bump the RBAC SDKs to 1.16.2

Cover the authorization provider with unit tests

Cover the management servlet with unit tests

Cover the broker interceptor with unit tests

Post Claude reviews in a tracking comment

Move the Gradle build into eco/sdk-java-pulsar

Add Claude Code review and @claude workflows

Bump the RBAC SDKs to 1.16.1

Speed up the ECO - Pulsar CI job

Move the SDKs to streamnative/rbac

perf: limit the authorization cache by estimated heap and expose its metrics

perf: route standard authorization checks through authzCache

perf: check only static and delegated super users in allowExtraOperationAsync

perf: check only static and delegated super users in allow\*

test: give each benchmark subject its own few topics

test: benchmark every RbacAuthorizationProvider authorization endpoint

fix: check super user once in canProduce/canConsume/canLookup

docs: convert README to Markdown with logo and badges

docs: add cherry-pick label rules and make AGENTS.md a symlink to CLAUDE.md

fix: build and test main against Pulsar 5.0.0.103

ci: report test coverage to Codecov

fix: expect unauthorized when Pulsar cluster listing is denied

fix: align CV role expectations and bound pool watches

fix: support org-basic role in cv tests

ci: version Pulsar plugin releases as `<StreamNative release>`.N

ci: version Pulsar plugin releases as X.Y.Z.N following the Pulsar release

ci: release the Pulsar authorization provider of each release line as X.Y.N

fix: preserve workspace fields

ci: publish release-line broker libraries as X.Y-SNAPSHOT daily

fix: unblock the release workflow (Java 21 target for Pulsar 5 plugins, Go 1.25 validation)

fix: preserve authentication provider identity in authorization cache

Align dependencies and Jakarta integration with Pulsar 5

## Security Fixes


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.