Skip to main content

StreamNative Weekly Release Notes v4.2.5.5

Download

Distributions

Packages

Images

General Changes

Apache Pulsar

(#27227) [improve][meta][branch-4.2] Upgrade Oxia Java client to 0.10.4 (#27172) [improve][meta][branch-4.2] Upgrade Oxia Java client to 0.10.3 (#27180) [improve][misc] Upgrade Jetty to 12.1.14 and Conscrypt to 2.7.0

MoP

9e34da5a Fix MQTT stats tests with Gson map deserialization changes

KoP

[branch-4.2] Bump Pulsar BOM to 4.2.5.5 and align test dependencies

StreamNative Pulsar Plugins

fix(detector): upgrade go-jose to v4.1.6 for security fixes 22434ccea Remove log4j dependency and rely on bom 93cd73793 Remove opentelmetry dependency and rely on bom c76e8c5cc Remove netty dependency and rely on bom

pulsarctl

fix: install Trivy directly from GitHub Releases

Cloud Pulsar Plugins

[Rest API Interceptor] Export billing resource usage [Rest API Interceptor] Always report resource usage metrics

Function Mesh Worker Service

8c6cdaba ci: Fix the free-disk-space action reference [branch-4.2] Run the CI Oxia server from oxia/oxia:0.16.12

StreamNative Unified RBAC

Bump the RBAC SDKs to 1.17.3 (4.2)

Security Fixes

Apache Pulsar

(#27343) [fix][sec] Upgrade ZooKeeper to 3.9.7 to address several CVEs (#27311) [fix][sec][branch-4.2] Upgrade Netty to 4.1.140 and netty-tcnative to 2.0.85 to address several CVEs and bugs (#27186) [fix][sec] Upgrade zstd-jni to 1.5.7-25 (#27191) [fix][sec] Upgrade OkHttp to 5.5.1 and Okio to 3.18.2 (#27189) [fix][sec] Upgrade JLine to 4.4.8 (#27192) [fix][sec] Upgrade Gson to 2.15.0 (#27193) [fix][sec] Upgrade Byte Buddy to 1.18.16 (#27190) [fix][sec] Upgrade commons-codec to 1.23.0 (#27187) [fix][sec] Upgrade lz4-java to 1.12.1 (#27184) [fix][sec] Upgrade snappy-java to 1.1.10.12 (#27183) [fix][sec] Upgrade Vert.x to 4.5.35 (#26898) [fix][sec][branch-4.x] Upgrade Jackson to 2.18.12