2026-02-19

Library updates

• [improve][broker] Upgrade bookkeeper to 4.17.3 (#25166)
• [fix][sec] Bump at.yawk.lz4:lz4-java from 1.9.0 to 1.10.1 in /pulsar-common (#25045)
• [fix][sec] Bump org.apache.solr:solr-core from 9.8.0 to 9.10.1 in /pulsar-io/solr (#25175)
• [fix][sec] Eliminate commons-collections dependency (#25024)
• [fix][sec] Exclude org.lz4:lz4-java and standardize on at.yawk.lz4-java to remediate CVE-2025-12183 and CVE-2025-66566 (#25198)
• [fix][sec] Upgrade jose4j to 0.9.6 to address CVE-2024-29371 (#25095)
• [fix][sec] Upgrade log4j to 2.25.3 to address CVE-2025-68161 (#25102)
• [fix][sec] Upgrade Netty to 4.1.130.Final (#25078)
• [fix][sec] Upgrade OpenSearch to 2.19.4 to remediate CVE-2025-9624 (#25206)
• [fix][sec] Upgrade vertx to address CVE-2026-1002 (#25152)
• [fix][test] Upgrade docker-java to 3.7.0 (#25209)
• [improve][io] Upgrade Debezium version to 3.2.5.Final (#25029)
• [improve][monitor] Upgrade OpenTelemetry to 1.56.0, Otel instrumentation to 2.21.0 and Otel semconv to 1.37.0 (#24994)
• [improve][misc] Upgrade snappy version to 1.1.10.8 (#25182)
• [feat][meta] upgrade oxia version to 0.7.2 (#24976)
• [fix] Upgrade gson to 2.13.2 (#25022)
• [improve] Upgrade Apache Commons library versions (#24983)
• [improve] Upgrade Caffeine to 3.2.3 (#24984)
• [improve] Upgrade Log4j2 to 2.25.2 and slf4j to 2.0.17 (#24985)
• [improve] Upgrade Netty to 4.1.131.Final (#25232)
• [fix][sec] Bump github.com/dvsekhvalnov/jose2go from 1.6.0 to 1.7.0 in /pulsar-function-go (#24987)

Broker

• [fix][broker] Add schema version in rest produce api (#25004)
• [fix][broker] Avoid split non-existent bundle (#25031)
• [fix][broker] Fence reset cursor by timestamp to avoid concurrent timestamp-based position lookups (#25151)
• [fix][broker] Fix chunked message loss when no consumers are available (#25077)
• [fix][broker] Fix compaction horizon might be reset to an old position when phase two is interrupted (#25119)
• [fix][broker] Fix creation of replicated subscriptions for partitioned topics (#24997)
• [fix][broker] Fix cursor position persistence in ledger trimming (#25087)
• [fix][broker] Fix httpProxyTimeout config (#25223)
• [fix][broker] Fix incomplete futures in topic property update/delete methods (#25228)
• [fix][broker] Fix issue with schemaValidationEnforced in geo-replication (#25012)
• [fix][broker] Fix ManagedCursorImpl.asyncDelete() method may lose previous async mark delete properties in race condition (#25165)
• [fix][broker] Fix markDeletedPosition race condition in ManagedLedgerImpl.maybeUpdateCursorBeforeTrimmingConsumedLed ger() method (#25110)
• [fix][broker] Fix MultiRolesTokenAuthorizationProvider error when subscription prefix doesn't match. (#25121)
• [fix][broker] Fix potential NPE in InMemTransactionBuffer.appendBufferToTxn by returning a valid Position (#25039)
• [fix][broker] fix prepareInitPoliciesCacheAsync in SystemTopicBasedTopicPoliciesService (#24980)
• [fix][broker] Fix regex matching of namespace name which might contain a regex char (#25136)
• [fix][broker] Fix transactionMetadataFuture completeExceptionally with null value (#25231)
• [fix][broker] Fix various error-prone detected errors mainly in logging and String.format parameters (#25059)
• [fix][broker] Force EnsemblePolicies to resolve network location after rackInfoMap is updated due to changes in /ledgers/available znode (#25067)
• [fix][broker] PIP-442: Fix race condition in async semaphore permit updates that causes memory limits to become ineffective (#25066)
• [fix][broker] Prevent missed topic changes in topic watchers and schedule periodic refresh with patternAutoDiscoveryPeriod interval (#25188)
• [fix][broker]Fix incorrect backlog if use multiple acknowledge types on the same subscription (#25047)
• [fix][broker]Fix ledgerHandle failed to read by using new BK API (#25199)
• [fix][broker]Fix memory leak when using a customized ManagedLedger implementation (#25016)
• [fix][broker]Incorrect backlog that is larger than expected (#25037)
• [fix][broker]Infinitely failed to delete topic if the first time failed and enabled transaction (#25073)
• [fix][broker]pulsar_ml_reads_inflight_bytes and pulsar_ml_reads_available_inflight_bytes are 0 at the same time (#25105)
• [fix][broker]Topic deleting failed after removed local cluster from namespace policies (#25114)
• [fix][broker]Wrong backlog: expected 0 but got 1 (#24938)
• [fix][admin] Fix offload policy incompatible issue. (#25149)
• [fix][admin] Refactor bookie affinity group sync operations to async in rest api (#25050)
• [fix][ml] Fix cursor backlog size to account for individual acks (#25089)
• [fix][ml] Fix NoSuchElementException in EntryCountEstimator caused by a race condition (#25177)
• [fix][ml] Retry offload reads when OffloadReadHandleClosedException is encountered (#25148)
• [fix][meta] Metadata cache refresh might not take effect (#25246)
• [improve][broker] Add idle timeout support for http (#25224)
• [improve][broker] Add strictAuthMethod to require explicit authentication method (#25185)
• [improve][broker] Change log level from warn to debug when cursor mark-deleted position ledger doesn't exist (#25200)
• [improve][broker] Change the log level from error to info when throwing NotAllowedException (#25130)
• [improve][broker] Enhance logging for adding schema failures in ServerCnx (#25048)
• [improve][broker] Ensure metadata session state visibility and improve Unstable observability for ServiceUnitStateChannelImpl (#25132)
• [improve][broker] Fix replicated subscriptions race condition with mark delete update and snapshot completion (#16651)
• [improve][broker] Fix thread safety issue in ManagedCursorImpl.removeProperty (#25104)
• [improve][broker] Give the detail error msg when authenticate failed with AuthenticationException (#25221)
• [improve][broker] Improve replicated subscription snapshot cache so that subscriptions can be replicated when mark delete position update is not frequent (#25044)
• [improve][broker] Optimize Reader creation in TopicPoliciesService (#24658)
• [improve][broker] PIP-442: Add memory limits for topic list watcher (part 2) (#25070)
• [improve][broker] Use atomic counter for ongoing transaction count (#25053)
• [improve][broker]Add test for getting partitioned topic metadata with PulsarAdmin client (#25026)
• [improve][broker]Improve error response of failed to delete topic if it has replicators connected (#24975)
• [improve][broker]Remove the warn log that frequently prints (#25018)
• [improve][admin] ...

2026-02-19

Library updates

• [improve][broker] Upgrade bookkeeper to 4.17.3 (#25166)
• [fix][sec] Bump at.yawk.lz4:lz4-java from 1.9.0 to 1.10.1 in /pulsar-common (#25045)
• [fix][sec] Bump org.apache.solr:solr-core from 9.8.0 to 9.10.1 in /pulsar-io/solr (#25175)
• [fix][sec] Eliminate commons-collections dependency (#25024)
• [fix][sec] Exclude org.lz4:lz4-java and standardize on at.yawk.lz4-java to remediate CVE-2025-12183 and CVE-2025-66566 (#25198)
• [fix][sec] Upgrade jose4j to 0.9.6 to address CVE-2024-29371 (#25095)
• [fix][sec] Upgrade jose4j to 0.9.6 to address CVE-2024-29371 (#25095)
• [fix][sec] Upgrade log4j to 2.25.3 to address CVE-2025-68161 (#25102)
• [fix][sec] Upgrade Netty to 4.1.130.Final (#25078)
• [fix][sec] Upgrade OpenSearch to 2.19.4 to remediate CVE-2025-9624 (#25206)
• [fix][sec] Upgrade vertx to address CVE-2026-1002 (#25152)
• [fix][test] Upgrade docker-java to 3.7.0 (#25209)
• [improve][monitor] Upgrade OpenTelemetry to 1.56.0, Otel instrumentation to 2.21.0 and Otel semconv to 1.37.0 (#24994)
• [improve][monitor] Upgrade OpenTelemetry to 1.56.0, Otel instrumentation to 2.21.0 and Otel semconv to 1.37.0 (#24994)
• [improve][misc] Upgrade snappy version to 1.1.10.8 (#25182)
• [feat][meta] upgrade oxia version to 0.7.2 (#24976)
• [fix] Upgrade gson to 2.13.2 (#25022)
• [improve] Upgrade Apache Commons library versions (#24983)
• [improve] Upgrade Log4j2 to 2.25.2 and slf4j to 2.0.17 (#24985)
• [improve] Upgrade Netty to 4.1.131.Final (#25232)
• [fix][sec] Bump github.com/dvsekhvalnov/jose2go from 1.6.0 to 1.7.0 in /pulsar-function-go (#24987)

Broker

• [fix][broker] Add schema version in rest produce api (#25004)
• [fix][broker] Avoid split non-existent bundle (#25031)
• [fix][broker] Fence reset cursor by timestamp to avoid concurrent timestamp-based position lookups (#25151)
• [fix][broker] Fix chunked message loss when no consumers are available (#25077)
• [fix][broker] Fix compaction horizon might be reset to an old position when phase two is interrupted (#25119)
• [fix][broker] Fix creation of replicated subscriptions for partitioned topics (#24997)
• [fix][broker] Fix cursor position persistence in ledger trimming (#25087)
• [fix][broker] Fix httpProxyTimeout config (#25223)
• [fix][broker] Fix incomplete futures in topic property update/delete methods (#25228)
• [fix][broker] Fix issue with schemaValidationEnforced in geo-replication (#25012)
• [fix][broker] Fix ManagedCursorImpl.asyncDelete() method may lose previous async mark delete properties in race condition (#25165)
• [fix][broker] Fix markDeletedPosition race condition in ManagedLedgerImpl.maybeUpdateCursorBeforeTrimmingConsumedLed ger() method (#25110)
• [fix][broker] Fix MultiRolesTokenAuthorizationProvider error when subscription prefix doesn't match. (#25121)
• [fix][broker] Fix potential NPE in InMemTransactionBuffer.appendBufferToTxn by returning a valid Position (#25039)
• [fix][broker] fix prepareInitPoliciesCacheAsync in SystemTopicBasedTopicPoliciesService (#24980)
• [fix][broker] Fix regex matching of namespace name which might contain a regex char (#25136)
• [fix][broker] Fix transactionMetadataFuture completeExceptionally with null value (#25231)
• [fix][broker] Fix various error-prone detected errors mainly in logging and String.format parameters (#25059)
• [fix][broker] Force EnsemblePolicies to resolve network location after rackInfoMap is updated due to changes in /ledgers/available znode (#25067)
• [fix][broker] PIP-442: Fix race condition in async semaphore permit updates that causes memory limits to become ineffective (#25066)
• [fix][broker] Prevent missed topic changes in topic watchers and schedule periodic refresh with patternAutoDiscoveryPeriod interval (#25188)
• [fix][broker]Fix incorrect backlog if use multiple acknowledge types on the same subscription (#25047)
• [fix][broker]Fix ledgerHandle failed to read by using new BK API (#25199)
• [fix][broker]Fix memory leak when using a customized ManagedLedger implementation (#25016)
• [fix][broker]Incorrect backlog that is larger than expected (#25037)
• [fix][broker]Infinitely failed to delete topic if the first time failed and enabled transaction (#25073)
• [fix][broker]pulsar_ml_reads_inflight_bytes and pulsar_ml_reads_available_inflight_bytes are 0 at the same time (#25105)
• [fix][broker]Topic deleting failed after removed local cluster from namespace policies (#25114)
• [fix][broker]Wrong backlog: expected 0 but got 1 (#24938)
• [fix][admin] Fix offload policy incompatible issue. (#25149)
• [fix][admin] Refactor bookie affinity group sync operations to async in rest api (#25050)
• [fix][ml] Fix cursor backlog size to account for individual acks (#25089)
• [fix][ml] Fix NoSuchElementException in EntryCountEstimator caused by a race condition (#25177)
• [fix][ml] Retry offload reads when OffloadReadHandleClosedException is encountered (#25148)
• [fix][meta] Metadata cache refresh might not take effect (#25246)
• [improve][broker] Add idle timeout support for http (#25224)
• [improve][broker] Add strictAuthMethod to require explicit authentication method (#25185)
• [improve][broker] Change the log level from error to info when throwing NotAllowedException (#25130)
• [improve][broker] Enhance logging for adding schema failures in ServerCnx (#25048)
• [improve][broker] Ensure metadata session state visibility and improve Unstable observability for ServiceUnitStateChannelImpl (#25132)
• [improve][broker] Fix replicated subscriptions race condition with mark delete update and snapshot completion (#16651)
• [improve][broker] Fix thread safety issue in ManagedCursorImpl.removeProperty (#25104)
• [improve][broker] Give the detail error msg when authenticate failed with AuthenticationException (#25221)
• [improve][broker] Improve replicated subscription snapshot cache so that subscriptions can be replicated when mark delete position update is not frequent (#25044)
• [improve][broker] Optimize Reader creation in TopicPoliciesService (#24658)
• [improve][broker] PIP-442: Add memory limits for topic list watcher (part 2) (#25070)
• [improve][broker] Use atomic counter for ongoing transaction count (#25053)
• [improve][broker]Add test for getting partitioned topic metadata with PulsarAdmin client (#25026)
• [improve][broker]Improve error response of failed to delete topic if it has replicators connected (#24975)
• [improve][broker]Remove the warn log that frequently prints (#25018)
• [improve][admin] Add counter for marker messages in PersistentTopics.analyzeSubscriptionBacklog() rest a...

2026-02-16

Library updates

• [fix][sec] Bump github.com/dvsekhvalnov/jose2go from 1.6.0 to 1.7.0 in /pulsar-function-go (#24987)
• [fix][sec] Upgrade jose4j to 0.9.6 to address CVE-2024-29371 (#25095)
• [fix][sec] Upgrade log4j to 2.25.3 to address CVE-2025-68161 (#25102)
• [fix][sec] Upgrade Netty to 4.1.130.Final (#25078)
• [fix][sec] Upgrade vertx to address CVE-2026-1002 (#25152)
• [fix][test] Upgrade docker-java to 3.7.0 (#25209)
• [fix] Upgrade gson to 2.13.2 (#25022)

Broker

• [fix][broker] Fix chunked message loss when no consumers are available (#25077)
• [fix][broker] Fix creation of replicated subscriptions for partitioned topics (#24997)
• [fix][broker] Fix httpProxyTimeout config (#25223)
• [fix][broker] Fix incomplete futures in topic property update/delete methods (#25228)
• [fix][broker] Fix issue with schemaValidationEnforced in geo-replication (#25012)
• [fix][broker] Fix MultiRolesTokenAuthorizationProvider error when subscription prefix doesn't match. (#25121)
• [fix][broker] Fix regex matching of namespace name which might contain a regex char (#25136)
• [fix][broker] Fix transactionMetadataFuture completeExceptionally with null value (#25231)
• [fix][broker] Fix various error-prone detected errors mainly in logging and String.format parameters (#25059)
• [fix][broker] Force EnsemblePolicies to resolve network location after rackInfoMap is updated due to changes in /ledgers/available znode (#25067)
• [fix][broker] Use poll instead remove to avoid NoSuchElementException (#24933)
• [fix][broker][branch-3.0] fix prepareInitPoliciesCacheAsync in SystemTopicBasedTopicPoliciesService (#24978)
• [fix][admin] Fix asyncGetRequest to handle 204 (#25124)
• [fix][ml] Fix NoSuchElementException in EntryCountEstimator caused by a race condition (#25177)
• [fix][meta] Use getChildrenFromStore to read children data to avoid lost data (#24665)
• [improve][broker] Give the detail error msg when authenticate failed with AuthenticationException (#25221)
• [improve][ml] Optimize ledger opening by skipping fully acknowledged ledgers (#24655)
• [improve][meta] Improve fault tolerance of blocking calls by supporting timeout (#21028)
• [fix] Handle TLS close_notify to avoid SslClosedEngineException: SSLEngine closed already (#24986)

Client

• [fix][client] Fix AutoProduceBytesSchema.clone() method (#25015)
• [fix][client] Fix double recycling of the message in isValidConsumerEpoch method (#25008)
• [fix][client] Fix invalid parameter type passed to Map.get in TopicsImpl.getListAsync method (#25069)
• [fix][client] Fix producer synchronous retry handling in failPendingMessages method (#25207)
• [fix][client] Fix race condition between isDuplicate() and flushAsync() method in PersistentAcknowledgmentsGroupingTracker due to incorrect use Netty Recycler (#25208)
• [fix][client] Fix thread-safety of AutoProduceBytesSchema (#25014)
• [fix][client] PIP-84: Skip processing a message in the message listener if the consumer epoch is no longer valid (#25007)
• [fix][client] Skip processing messages in the listener when the consumer has been closed (#25006)
• [fix][client]Producer stuck or geo-replication stuck due to wrong value of message.numMessagesInBatch (#25106)
• [improve][client] Test no exception could be thrown for invalid epoch in message (#25013)
• [fix] Handle TLS close_notify to avoid SslClosedEngineException: SSLEngine closed already (#24986)

Pulsar IO and Pulsar Functions

• [fix][fn] complete flushAsync before closeAsync in ProducerCache and wait for completion in closing the cache (#25140)
• [fix][fn] Fix graceful Pulsar Function shutdown so that consumers and producers are closed (#25157)

Others

• [fix][proxy] Close client connection immediately when credentials expire and forwardAuthorizationCredentials is disabled (#25179)
• [fix][proxy] Fix memory leaks in ParserProxyHandler (#25142)
• [improve][proxy] Add regression tests for package upload with 'Expect: 100-continue' (#25211)
• [fix][misc] Allow JWT tokens in OpenID auth without nbf claim (#25197)
• [improve] Eliminate unnecessary duplicate schema lookups for partitioned topics in client and geo-replication (#25011)

Tests & CI

• [fix][build] Remove Confluent and Restlet maven repositories from top level pom.xml (#24981)
• [improve][test][branch-3.0] Add test for issue #25220

For the complete list, check the full changelog.

2025-11-17

Library updates

• [fix] Update gRPC to 1.75.0 (#24813)
• [improve][misc] Upgrade Netty to 4.1.128.Final (#24911)
• [improve] Upgrade Alpine base image to 3.22 version (#24840)
• [improve][ml] Upgrade Oxia client to 0.7.0 (#24824)
• [fix][sec] Added Exclusions for tomcat-embed-core and derby and override mina-core to remediate CVEs (#24949)
• [fix][sec] Bump io.vertx:vertx-web from 4.5.10 to 4.5.22 (#24889)
• [fix][sec] Override commons-beanutils and commons-configuration2 to remediate CVEs (#24936)
• [fix][sec] Override kafka-clients in kinesis-kpl-shaded to remediate CVE-2024-31141 and CVE-2025-27817 (#24935)
• [fix][sec] Override nimbus-jose-jwt to remediate CVE-2023-52428 and CVE-2025-53864 (#24937)
• [fix][sec] Update Hbase version to 2.6.3-hadoop3 and exclude Avro from hbase-client to remediate CVEs (#24953)
• [fix][sec] Upgrade BouncyCastle FIPS to 2.0.10 to remediate CVE-2025-8916 (#24923)
• [fix][sec] Upgrade hadoop3 version from 3.4.0 to 3.4.1 (#24950)
• [fix][sec] Upgrade Jetty to 9.4.58.v20250814 to address CVE-2025-5115 (#24897)
• [fix][sec] Upgrade Spring to 6.2.12 to remediate CVE-2025-22233 and CVE-2025-41249 (#24903)
• [improve][io] Upgrade Debezium version to 3.2.4.Final (#24896)
• [improve][ci] Upgrade GitHub Actions workflows to use ubuntu-24.04 (#24841)

Broker

• [fix][broker] Allow intermittent error from topic policies service when loading topics (#24829)
• [fix][broker] AvgShedder comparison error (#24954)
• [fix][broker] Avoid recursive update in ConcurrentHashMap during policy cache cleanup (#24939)
• [fix][broker] BacklogMessageAge is not reset when cursor mdPosition is on an open ledger (#24915)
• [fix][broker] Ensure LoadSheddingTask is scheduled after metadata service is available again (#24838)
• [fix][broker] ExtensibleLoadManager: handle SessionReestablished and Reconnected events to re-register broker metadata (#24932)
• [fix][broker] Fix bug in PersistentMessageExpiryMonitor which blocked further expirations (#24941)
• [fix][broker] fix getMaxReadPosition in TransactionBufferDisable should return latest (#24898)
• [fix][broker] Fix incorrect topic loading latency metric and timeout might not be respected (#24785)
• [fix][broker] Fix stack overflow caused by race condition when closing a connection (#24934)
• [fix][broker] Fix totalAvailablePermits not reduced when removing consumer from non-persistent dispatcher (#24885)
• [fix][broker] Fix wrong behaviour when using namespace.allowed_clusters, such as namespace deletion and namespace policies updating (#24860)
• [fix][broker] Flaky-test: ExtensibleLoadManagerImplTest.testDisableBroker (#24770)
• [fix][broker] Flaky-test: TopicTransactionBufferTest.testMessagePublishInOrder (#24826)
• [fix][broker] Run ResourceGroup tasks only when tenants/namespaces registered (#24859)
• [fix][broker] Stop to retry to read entries if the replicator has terminated (#24880)
• [fix][broker] Trigger topic creation event only once for non-existent topic (#24802)
• [fix][broker] Use poll instead remove to avoid NoSuchElementException (#24933)
• [fix][broker]Leaving orphan schemas and topic-level policies after partitioned topic is deleted by GC (#24971)
• [fix][broker]Transactional messages can never be sent successfully if concurrently taking transaction buffer snapshot (#24945)
• [fix][admin] Set local policies overwrites "number of bundles" passed during namespace creation (#24762)
• [fix][ml] Fix getNumberOfEntries may point to deleted ledger (#24852)
• [fix][ml] Fix ledger trimming race causing cursor to point to deleted ledgers (#24855)
• [fix][ml] PIP-430: Fix concurrency issue in MessageMetadata caching and improve caching (#24836)
• [fix]Fixed getChildren('/') on Oxia based provider (#24863)
• [improve][broker] Add tests for using absolute FQDN for advertisedAddress and remove extra dot from brokerId (#24787)
• [improve][broker] Cache last publish timestamp for idle topics to reduce storage reads (#24825)
• [improve][broker] Don't log an error when updatePartitionedTopic is called on a non-partitioned topic (#24943)
• [improve][broker] Optimize lookup result warn log (#24942)
• [improve][broker] Part-1 of PIP-434: Expose Netty channel configuration WRITE_BUFFER_WATER_MARK to pulsar conf and pause receive requests when channel is unwritable (#24423)
• [improve][broker] Part-2 of PIP-434: Use ServerCnxThrottleTracker, instead of modifying channel.readable directly (#24799)
• [improve][broker] PIP-434: add configurations to broker.conf (#24800)
• [improve][broker] Reduce the broker close time to avoid useless wait for event loop shutdown (#24895)
• [improve][broker] Replace isServiceUnitActiveAsync with checkTopicNsOwnership (#24780)
• [improve][broker]Call scheduleAtFixedRateNonConcurrently for scheduled tasks, instead of scheduleAtFixedRate (#24596)
• [improve][broker]Improve NamespaceService log that is printed when cluster was removed (#24801)
• [improve][broker]Skip to mark delete if the target position of expira... (#24881)
• [fix][txn] fix concurrent error cause txn stuck in TransactionBufferHandlerImpl#endTxn (#23551)
• [cleanup][broker] Remove unused configuration maxMessageSizeCheckIntervalInSeconds (#24958)
• [feat][monitor] Add ML write latency histogram and entry size histogram as OTel metrics (#24815)
• [feat][monitor] Add publish latency histogram as OTel metrics (#24810)
• [feat] PIP-442: Add memory limits for CommandGetTopicsOfNamespace (#24833)

Client

• [fix][client] Add description method to ClientBuilder (#24728)
• [fix][client] Fix deduplication for getPartitionedTopicMetadata to include method parameters (#24965)
• [fix][client] Fix getPendingQueueSize for PartitionedTopicProducerStatsRecorderImpl: avoid NPE and implement aggregation (#24830)
• [fix][client] Fix PulsarAdmin description check and add test (#24734)
• [fix][client] Fix thread leak in reloadLookUp method which is used by ServiceUrlProvider (#24794)
• [fix][client] Make auto partitions update work for old brokers without PIP-344 (#24822)
• [improve][client] Allow adding custom description to User-Agent header (#24729)
• [improve][client] Deduplicate getTopicsUnderNamespace in BinaryProtoLookupService (#24962)
• [improve][client] PIP-420: Update the schema ID format (#24798)
• [improve][client]Add null check for Pulsar client clock configuration (#24848)
• [feat][client] Implement PIP-234 for sharing thread pools and DNS resolver/cache across multiple Pulsar Client instances (#24790)
• [feat][client] PIP-234: Support shared resources in PulsarAdmin to reduce thread usage (#24893)
• [improve][client/broker] Add Dns...

2025-11-17

Library updates

• [fix] Update gRPC to 1.75.0 (#24813)
• [improve][misc] Upgrade Netty to 4.1.128.Final (#24911)
• [improve][ml] Upgrade Oxia client to 0.7.0 (#24824)
• [fix][sec] Added Exclusions for tomcat-embed-core and derby and override mina-core to remediate CVEs (#24949)
• [fix][sec] Bump io.vertx:vertx-web from 4.5.10 to 4.5.22 (#24889)
• [fix][sec] Override commons-beanutils and commons-configuration2 to remediate CVEs (#24936)
• [fix][sec] Override kafka-clients in kinesis-kpl-shaded to remediate CVE-2024-31141 and CVE-2025-27817 (#24935)
• [fix][sec] Override nimbus-jose-jwt to remediate CVE-2023-52428 and CVE-2025-53864 (#24937)
• [fix][sec] Update Hbase version to 2.6.3-hadoop3 and exclude Avro from hbase-client to remediate CVEs (#24953)
• [fix][sec] Upgrade BouncyCastle FIPS to 2.0.10 to remediate CVE-2025-8916 (#24923)
• [fix][sec] Upgrade hadoop3 version from 3.4.0 to 3.4.1 (#24950)
• [fix][sec] Upgrade Jetty to 9.4.58.v20250814 to address CVE-2025-5115 (#24897)
• [fix][sec] Upgrade Spring to 6.2.12 to remediate CVE-2025-22233 and CVE-2025-41249 (#24903)
• [improve][ci] Upgrade GitHub Actions workflows to use ubuntu-24.04 (#24841)

Broker

• [fix][broker] Allow intermittent error from topic policies service when loading topics (#24829)
• [fix][broker] AvgShedder comparison error (#24954)
• [fix][broker] Avoid recursive update in ConcurrentHashMap during policy cache cleanup (#24939)
• [fix][broker] BacklogMessageAge is not reset when cursor mdPosition is on an open ledger (#24915)
• [fix][broker] Ensure LoadSheddingTask is scheduled after metadata service is available again (#24838)
• [fix][broker] ExtensibleLoadManager: handle SessionReestablished and Reconnected events to re-register broker metadata (#24932)
• [fix][broker] Fix bug in PersistentMessageExpiryMonitor which blocked further expirations (#24941)
• [fix][broker] fix getMaxReadPosition in TransactionBufferDisable should return latest (#24898)
• [fix][broker] Fix incorrect topic loading latency metric and timeout might not be respected (#24785)
• [fix][broker] Fix stack overflow caused by race condition when closing a connection (#24934)
• [fix][broker] Fix totalAvailablePermits not reduced when removing consumer from non-persistent dispatcher (#24885)
• [fix][broker] Fix wrong behaviour when using namespace.allowed_clusters, such as namespace deletion and namespace policies updating (#24860)
• [fix][broker] Flaky-test: ExtensibleLoadManagerImplTest.testDisableBroker (#24770)
• [fix][broker] Flaky-test: TopicTransactionBufferTest.testMessagePublishInOrder (#24826)
• [fix][broker] Run ResourceGroup tasks only when tenants/namespaces registered (#24859)
• [fix][broker] Stop to retry to read entries if the replicator has terminated (#24880)
• [fix][broker] Trigger topic creation event only once for non-existent topic (#24802)
• [fix][broker] Use poll instead remove to avoid NoSuchElementException (#24933)
• [fix][broker]Leaving orphan schemas and topic-level policies after partitioned topic is deleted by GC (#24971)
• [fix][broker]Transactional messages can never be sent successfully if concurrently taking transaction buffer snapshot (#24945)
• [fix][admin] Set local policies overwrites "number of bundles" passed during namespace creation (#24762)
• [fix][ml] Fix getNumberOfEntries may point to deleted ledger (#24852)
• [fix][ml] Fix ledger trimming race causing cursor to point to deleted ledgers (#24855)
• [fix]Fixed getChildren('/') on Oxia based provider (#24863)
• [improve][broker] Add tests for using absolute FQDN for advertisedAddress and remove extra dot from brokerId (#24787)
• [improve][broker] Don't log an error when updatePartitionedTopic is called on a non-partitioned topic (#24943)
• [improve][broker] Optimize lookup result warn log (#24942)
• [improve][broker] Part-1 of PIP-434: Expose Netty channel configuration WRITE_BUFFER_WATER_MARK to pulsar conf and pause receive requests when channel is unwritable (#24423)
• [improve][broker] Part-2 of PIP-434: Use ServerCnxThrottleTracker, instead of modifying channel.readable directly (#24799)
• [improve][broker] PIP-434: add configurations to broker.conf (#24800)
• [improve][broker] Reduce the broker close time to avoid useless wait for event loop shutdown (#24895)
• [improve][broker] Replace isServiceUnitActiveAsync with checkTopicNsOwnership (#24780)
• [improve][broker]Call scheduleAtFixedRateNonConcurrently for scheduled tasks, instead of scheduleAtFixedRate (#24596)
• [improve][broker]Improve NamespaceService log that is printed when cluster was removed (#24801)
• [improve][broker]Skip to mark delete if the target position of expira... (#24881)
• [fix][txn] fix concurrent error cause txn stuck in TransactionBufferHandlerImpl#endTxn (#23551)
• [cleanup][broker] Remove unused configuration maxMessageSizeCheckIntervalInSeconds (#24958)
• [fix][broker][branch-4.0] Fix failed testFinishTakeSnapshotWhenTopicLoading due to topic future cache conflicts (#24947)
• [improve][broker] Separate offload read and write thread pool (#24025)
• [fix][monitor] Fix the incorrect metrics name (#21981)

Client

• [fix][client] Fix deduplication for getPartitionedTopicMetadata to include method parameters (#24965)
• [fix][client] Fix getPendingQueueSize for PartitionedTopicProducerStatsRecorderImpl: avoid NPE and implement aggregation (#24830)
• [fix][client] Fix thread leak in reloadLookUp method which is used by ServiceUrlProvider (#24794)
• [fix][client] Make auto partitions update work for old brokers without PIP-344 (#24822)
• [improve][client] Deduplicate getTopicsUnderNamespace in BinaryProtoLookupService (#24962)
• [improve][client]Add null check for Pulsar client clock configuration (#24848)
• [fix] Fix mixed lookup/partition metadata requests causing reliability issues and incorrect responses (#24832)

Pulsar IO and Pulsar Functions

• [improve][fn] Use PulsarByteBufAllocator.DEFAULT instead of ByteBufAllocator.DEFAULT (#24952)

Tests & CI

• [fix][build] Fix maven deploy with maven-source-plugin 3.3.1 (#24811)
• [fix][build] Remove invalid profile in settings.xml that caused gpg signing to fail (#24812)
• [fix][test] Add Delta Tolerance in Double-Precision Assertions to Fix Rounding Flakiness (#24972)
• [fix][test] BacklogQuotaManagerTest.backlogsAgeMetricsNoPreciseWithoutBa cklogQuota handle empty /metrics scrape (#24887)
• [fix][test] Fix flaky KeySharedSubscriptionBrokerCacheTest.testReplayQueueReadsGet tingCached (#24955)
• [fix][test] Fix flaky LookupPropertiesTest.testConcurrentLookupProperties (#24854)
• [fix][test] Fix flaky NonPersistentTopicTest.testProducerRateLimit ([#24951](#2...

2025-11-17

Library updates

• [improve][misc] Upgrade Netty to 4.1.128.Final (#24911)
• [fix][sec] Bump io.vertx:vertx-web from 4.5.10 to 4.5.22 (#24889)
• [fix][sec] Upgrade BouncyCastle FIPS to 2.0.10 to remediate CVE-2025-8916 (#24923)
• [fix][sec] Upgrade Jetty to 9.4.58.v20250814 to address CVE-2025-5115 (#24897)
• [fix][sec] Upgrade Spring to 6.2.12 to remediate CVE-2025-22233 and CVE-2025-41249 (#24903)
• [improve][ci] Upgrade GitHub Actions workflows to use ubuntu-24.04 (#24841)

Broker

• [fix][broker] Avoid recursive update in ConcurrentHashMap during policy cache cleanup (#24939)
• [fix][broker] BacklogMessageAge is not reset when cursor mdPosition is on an open ledger (#24915)
• [fix][broker] fix getMaxReadPosition in TransactionBufferDisable should return latest (#24898)
• [fix][broker] Fix stack overflow caused by race condition when closing a connection (#24934)
• [fix][broker] Fix totalAvailablePermits not reduced when removing consumer from non-persistent dispatcher (#24885)
• [fix][broker] Flaky-test: ExtensibleLoadManagerImplTest.testDisableBroker (#24770)
• [fix][broker] Run ResourceGroup tasks only when tenants/namespaces registered (#24859)
• [fix][broker] Stop to retry to read entries if the replicator has terminated (#24880)
• [fix][broker] Trigger topic creation event only once for non-existent topic (#24802)
• [fix][admin] Set local policies overwrites "number of bundles" passed during namespace creation (#24762)
• [fix][ml] Fix getNumberOfEntries may point to deleted ledger (#24852)
• [fix][txn] fix concurrent error cause txn stuck in TransactionBufferHandlerImpl#endTxn (#23551)
• [cleanup][broker][branch-3.0] Remove no-op configurations caused by cherry-picking (#24960)

Client

• [fix][client] Fix deduplication for getPartitionedTopicMetadata to include method parameters (#24965)
• [fix][client] Fix getPendingQueueSize for PartitionedTopicProducerStatsRecorderImpl: avoid NPE and implement aggregation (#24830)
• [fix][client] Fix thread leak in reloadLookUp method which is used by ServiceUrlProvider (#24794)
• [fix][client] Make auto partitions update work for old brokers without PIP-344 (#24822)
• [improve][client]Add null check for Pulsar client clock configuration (#24848)
• [fix] Fix mixed lookup/partition metadata requests causing reliability issues and incorrect responses (#24832)

Tests & CI

• [fix][build] Remove invalid profile in settings.xml that caused gpg signing to fail (#24812)
• [fix][test] Fix flaky KeySharedSubscriptionBrokerCacheTest.testReplayQueueReadsGet tingCached (#24955)
• [fix][test] Fix flaky NonPersistentTopicTest.testProducerRateLimit (#24951)
• [fix][test] Fix flaky ReplicatorTest.testResumptionAfterBacklogRelaxed (#24904)
• [fix][test] Fix flaky SubscriptionSeekTest.testSeekWillNotEncounteredFencedError by counting subscription is fenced only after seek (#24865)
• [fix][test] Fix invalid test NonPersistentTopicTest.testProducerRateLimit (#24957)
• [fix][test] Stabilize SequenceIdWithErrorTest by fencing after first publish to avoid empty-ledger deletion and send timeout (#24861)
• [fix][test] Stabilize testMsgDropStat by reliably triggering non-persistent publisher drop (#24929)
• [improve][ci] Move replication tests to new group Broker Group 5 in Pulsar CI (#24917)
• [fix][ci][branch-3.0] Drop UBUNTU_MIRROR/UBUNTU_SECURITY_MIRROR support in Dockerfile since it's broken
• [fix][test][branch-3.0] Backport test case so that it compiles in branch-3.0

For the complete list, check the full changelog.

2025-09-27

Library updates

• [fix][sec] Upgrade Netty to 4.1.127.Final to address CVEs (#24717)
• [improve][build] Upgrade Lombok to 1.18.42 to fully support JDK25 (#24763)
• [improve][build] Upgrade Apache Parent POM to version 35 (#24742)
• [improve][build] Upgrade Mockito, AssertJ and ByteBuddy to fully support JDK25 (#24764)
• [improve][build] Upgrade SpotBugs to a version that supports JDK25 (#24768)
• [feat][misc] upgrade oxia version to 0.6.2 (#24689)
• [improve][io] Upgrade to Debezium 3.2.2 (#24712)

Broker

• [fix][broker] Key_Shared subscription doesn't always deliver messages from the replay queue after a consumer disconnects and leaves a backlog (#24736)
• [fix][broker] Ensure KeyShared sticky mode consumer respects assigned ranges (#24730)
• [fix][broker] First entry will be skipped if opening NonDurableCursor while trimmed ledger is adding first entry. (#24738)
• [fix][broker] Fix cannot shutdown broker gracefully by admin api (#24731)
• [fix][broker] Fix memory leak when metrics are updated in a thread other than FastThreadLocalThread (#24719)
• [fix][broker] Prevent unexpected recycle failure in dispatcher's read callback (#24741)
• [fix][broker]Fix never recovered metadata store bad version issue if received a large response from ZK (#24580)
• [fix][ml]Fix EOFException after enabled topics offloading (#24753)
• [fix][broker] Fix NPE and annotate nullable return values for ManagedCursorContainer (#24706)
• [fix][broker]Dispatcher did unnecessary sort for recentlyJoinedConsumers and printed noisy error logs (#24634)
• [fix][broker]Fix dirty reading of namespace level offload thresholds (#24696)
• [fix][ml] Negative backlog & acked positions does not exist & message lost when concurrently occupying topic owner (#24722)
• [improve][broker] If there is a deadlock in the service, the probe should return a failure because the service may be unavailable (#23634)
• [improve][broker] Allow deletion of empty persistent topics regardless of retention policy (#24733)
• [improve][broker] PIP-402: Optionally prevent role/originalPrincipal logging (#23386)
• [improve][broker] Reduce unnecessary MessageMetadata parsing by caching the parsed instance in the broker cache (#24682)
• [improve][ml] Improve cache insert performance by removing exists check since it's already covered by putIfAbsent (#24699)

Client

• [fix][client] Avoid recycling the same ConcurrentBitSetRecyclable among different threads (#24725)
• [fix][client] Fix receiver queue auto-scale without memory limit (#24743)
• [fix][client]TopicListWatcher not closed when calling PatternMultiTopicsConsumerImpl.closeAsync() method (#24698)
• [fix][client] rollback TopicListWatcher retry behavior (#24752)
• [fix][client] Exclude io.prometheus:simpleclient_caffeine from client-side dependencies (#24761)
• [improve][client] PIP-407 Add newMessage with schema and transactions (#23942)

Pulsar IO and Pulsar Functions

• [fix][io] Improve Kafka Connect source offset flushing logic (#24654)
• [feat][fn] Fallback to using STATE_STORAGE_SERVICE_URL in PulsarMetadataStateStoreProviderImpl.init (#24721)

Others

• [fix][misc] Fix compareTo contract violation for NamespaceBundleStats, TimeAverageMessageData and ResourceUnitRanking (#24772)
• [fix] Exclude commons-lang dep from bookkeeper (#24749)

Tests & CI

• [fix][test] Flaky-test: BrokerServiceTest.testShutDownWithMaxConcurrentUnload (#24769)
• [fix][broker] Fix testServiceConfigurationRetentionPolicy unit test (#24756)
• [fix][broker]Fix the wrong logic of the test PartitionCreationTest.testCreateMissedPartitions (#24683)
• [improve][build] Disable javadoc build failure (#24594)
• [fix][ci] Fix CI for Java 25 including upgrade of Gradle Develocity Maven extension (#24767)

For the complete list, check the full changelog.

2025-09-27

Library updates

• [fix][sec] Upgrade bouncycastle bcpkix-fips version to 1.79 to address CVE-2025-8916 (#24650)
• [fix][sec] Upgrade Netty to 4.1.127.Final to address CVEs (#24717)
• [fix][sec] Upgrade to Netty 4.1.124.Final to address CVE-2025-55163 (#24637)
• [improve][io] Upgrade AWS SDK v1 & v2, Kinesis KPL and KPC versions (#24661)
• [fix][misc] Upgrade dependencies to fix critical security vulnerabilities (#24532)
• [improve][build] Upgrade Lombok to 1.18.42 to fully support JDK25 (#24763)
• [improve][broker] Upgrade avro version to 1.12.0 (#24617)
• [fix][misc] Upgrade fastutil to 8.5.16 (#24659)
• [improve][build] Upgrade Apache Parent POM to version 35 (#24742)
• [improve][build] Upgrade Mockito, AssertJ and ByteBuddy to fully support JDK25 (#24764)
• [improve][build] Upgrade SpotBugs to a version that supports JDK25 (#24768)
• [feat][misc] upgrade oxia version to 0.6.2 (#24689)

Broker

• [fix][broker] Key_Shared subscription doesn't always deliver messages from the replay queue after a consumer disconnects and leaves a backlog (#24736)
• [fix][broker] Ensure KeyShared sticky mode consumer respects assigned ranges (#24730)
• [fix][broker] PIP-428: Fix corrupted topic policies issues with sequential topic policy updates (#24427)
• [fix][broker][branch-4.0]Can not access topic policies if topic partitions have not been created (#24680)
• [fix][broker] Add double-check for non-durable cursor creation (#24643)
• [fix][broker] First entry will be skipped if opening NonDurableCursor while trimmed ledger is adding first entry. (#24738)
• [fix][broker] Fix cannot shutdown broker gracefully by admin api (#24731)
• [fix][broker] Fix duplicate watcher registration after SessionReestablished (#24621)
• [fix][broker] Fix memory leak when metrics are updated in a thread other than FastThreadLocalThread (#24719)
• [fix][broker] Fix race condition in MetadataStoreCacheLoader causing inconsistent availableBroker list caching (#24639)
• [fix][broker] Fix REST API to produce messages to single-partitioned topics (#24450)
• [fix][broker] Invalid regex in PulsarLedgerManager causes zk data notification to be ignored (#23977)
• [fix][broker] Prevent unexpected recycle failure in dispatcher's read callback (#24741)
• [fix][broker]Fix never recovered metadata store bad version issue if received a large response from ZK (#24580)
• [fix][ml]Fix EOFException after enabled topics offloading (#24753)
• [fix][broker] Fix incorrect AuthData passed to AuthorizationService in proxy scenarios (#24593)
• [fix][broker] Fix namespace deletion TLS URL selection for geo-replication (#24591)
• [fix][broker] Fix NPE and annotate nullable return values for ManagedCursorContainer (#24706)
• [fix][broker] Fix NPE being logged if load manager class name is blank (#24570)
• [fix][broker]Dispatcher did unnecessary sort for recentlyJoinedConsumers and printed noisy error logs (#24634)
• [fix][broker]Failed to create partitions after the partitions were deleted because topic GC (#24651)
• [fix][broker]Fix dirty reading of namespace level offload thresholds (#24696)
• [fix][broker]Fix thread safety issues in BucketDelayedDeliveryTracker with StampedLock optimistic reads (#24542)
• [fix][broker]User topic failed to delete after removed cluster because of failed delete data from transaction buffer topic (#24648)
• [fix][ml] Negative backlog & acked positions does not exist & message lost when concurrently occupying topic owner (#24722)
• [fix][meta] Use getChildrenFromStore to read children data to avoid lost data (#24665)
• [improve][admin] PIP-422 part 1: Support global topic-level replicated clusters policy (#24390)
• [improve][broker]Part-2 Add Admin API to delete topic policies (#24602)
• [improve][broker] If there is a deadlock in the service, the probe should return a failure because the service may be unavailable (#23634)
• [improve][ml] Optimize ledger opening by skipping fully acknowledged ledgers (#24655)
• [improve][broker] Allow deletion of empty persistent topics regardless of retention policy (#24733)
• [improve][broker] Extract duplication in AbstractTopic#incrementTopicEpochIfNeeded (#24520)
• [improve][broker]Find the target position at most once, during expiring messages for a topic, even though there are many subscriptions (#24622)
• [improve][broker]Improve the anti-concurrency mechanism expirationCheckInProgress (#24607)
• [improve][broker]Remove block calling that named cursor.asyncGetNth when expiring messages (#24606)

Client

• [fix][client] Avoid recycling the same ConcurrentBitSetRecyclable among different threads (#24725)
• [fix][client] fix ArrayIndexOutOfBoundsException in SameAuthParamsLookupAutoClusterFailover (#24662)
• [fix][client] Fix ArrayIndexOutOfBoundsException when using SameAuthParamsLookupAutoClusterFailover (#23336)
• [fix][client] Fix receiver queue auto-scale without memory limit (#24743)
• [fix][client] Retry for unknown exceptions when creating a producer or consumer (#24599)
• [fix][client] Skip schema validation when sending messages to DLQ to avoid infinite loop when schema validation fails on an incoming message (#24663)
• [fix][client]Prevent ZeroQueueConsumer from receiving batch messages when using MessagePayloadProcessor (#24610)
• [fix][client]TopicListWatcher not closed when calling PatternMultiTopicsConsumerImpl.closeAsync() method (#24698)
• [fix][client] rollback TopicListWatcher retry behavior (#24752)
• [improve][client] Support load RSA PKCS#8 private key (#24582)
• [fix][client] Exclude io.prometheus:simpleclient_caffeine from client-side dependencies (#24761)
• [improve][client] Add OpenTelemetry metrics for client memory buffer usage (#24647)
• [improve][client] RawReader support pause and resume (#24597)
• [fix][client] Refactor AttributeWrappedMeasurement to use a class instead of a record to compatible with lower version JDK

Pulsar IO and Pulsar Functions

• [fix][io] Improve Kafka Connect source offset flushing logic (#24654)
• [improve][io] Add dependency file name information to error message when .nar file validation fails with ZipException (#24604)
• [improve][io] Support specifying Kinesis KPL native binary path with 1.0 version specific path (#24669)
• [improve][io] Add support for the complete KinesisProducerConfiguration in KinesisSinkConfig (#24489)
• [feat][fn] Fallback to using STATE_STORAGE_SERVICE_URL in PulsarMetadataStateStoreProviderImpl.init (#24721)

Others

• [fix][proxy] Fix TooLongFrameException with Pulsar Proxy (#24626)
• [fix][misc] Fix compareTo contract violation for NamespaceBundleStats, TimeAverageMessageData and ResourceUnitRanking (#24772)
• [improve][doc] Improve the JavaDocs of sendAsync t...

2025-09-27

Library updates

• [fix][sec] Upgrade bouncycastle bcpkix-fips version to 1.79 to address CVE-2025-8916 (#24650)
• [fix][sec] Upgrade Netty to 4.1.127.Final to address CVEs (#24717)
• [fix][sec] Upgrade to Netty 4.1.124.Final to address CVE-2025-55163 (#24637)
• [improve][build] Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#24514)
• [improve][io] Upgrade AWS SDK v1 & v2, Kinesis KPL and KPC versions (#24661)
• [fix][misc] Upgrade dependencies to fix critical security vulnerabilities (#24532)
• [improve][build] Upgrade Lombok to 1.18.42 to fully support JDK25 (#24763)
• [improve][build] Upgrade Apache Parent POM to version 35 (#24742)

Broker

• [fix][broker] Add double-check for non-durable cursor creation (#24643)
• [fix][broker] Ensure KeyShared sticky mode consumer respects assigned ranges (#24730)
• [fix][broker] First entry will be skipped if opening NonDurableCursor while trimmed ledger is adding first entry. (#24738)
• [fix][broker] Fix cannot shutdown broker gracefully by admin api (#24731)
• [fix][broker] Fix duplicate watcher registration after SessionReestablished (#24621)
• [fix][broker] Fix memory leak when metrics are updated in a thread other than FastThreadLocalThread (#24719)
• [fix][broker] Fix race condition in MetadataStoreCacheLoader causing inconsistent availableBroker list caching (#24639)
• [fix][broker] Fix REST API to produce messages to single-partitioned topics (#24450)
• [fix][broker] Invalid regex in PulsarLedgerManager causes zk data notification to be ignored (#23977)
• [fix][broker] Prevent unexpected recycle failure in dispatcher's read callback (#24741)
• [improve][broker] If there is a deadlock in the service, the probe should return a failure because the service may be unavailable (#23634)
• [fix][meta] Use getChildrenFromStore to read children data to avoid lost data (#24665)
• [improve][broker]Remove block calling that named cursor.asyncGetNth when expiring messages (#24606)

Client

• [fix][client] Avoid recycling the same ConcurrentBitSetRecyclable among different threads (#24725)
• [fix][client] fix ArrayIndexOutOfBoundsException in SameAuthParamsLookupAutoClusterFailover (#24662)
• [fix][client] Fix ArrayIndexOutOfBoundsException when using SameAuthParamsLookupAutoClusterFailover (#23336)
• [fix][client] Fix receiver queue auto-scale without memory limit (#24743)
• [fix][client] Retry for unknown exceptions when creating a producer or consumer (#24599)
• [fix][client] Skip schema validation when sending messages to DLQ to avoid infinite loop when schema validation fails on an incoming message (#24663)
• [fix][client]Prevent ZeroQueueConsumer from receiving batch messages when using MessagePayloadProcessor (#24610)
• [fix][client]TopicListWatcher not closed when calling PatternMultiTopicsConsumerImpl.closeAsync() method (#24698)
• [fix][client] rollback TopicListWatcher retry behavior (#24752)
• [improve][client] Support load RSA PKCS#8 private key (#24582)

Pulsar IO and Pulsar Functions

• [fix][io] Improve Kafka Connect source offset flushing logic (#24654)
• [improve][io] Add dependency file name information to error message when .nar file validation fails with ZipException (#24604)
• [improve][io] Support specifying Kinesis KPL native binary path with 1.0 version specific path (#24669)
• [feat][fn] Fallback to using STATE_STORAGE_SERVICE_URL in PulsarMetadataStateStoreProviderImpl.init (#24721)

Others

• [fix][proxy] Fix TooLongFrameException with Pulsar Proxy (#24626)
• [fix][misc] Fix compareTo contract violation for NamespaceBundleStats, TimeAverageMessageData and ResourceUnitRanking (#24772)
• [improve][doc] Improve the JavaDocs of sendAsync to avoid improper use (#24601)
• [fix][offload] Exclude unnecessary dependencies from tiered storage provider / offloader nar files (#24649)

Tests & CI

• [improve][build] Use org.apache.nifi:nifi-nar-maven-plugin:2.1.0 with skipDocGeneration=true (#24668)
• [fix][ci] Fix code coverage metrics in Pulsar CI (#24595)
• [fix][test] Fix ConcurrentModificationException in Ipv4Proxy (#24632)
• [fix][test] Flaky-test: BrokerServiceTest.testShutDownWithMaxConcurrentUnload (#24769)
• [fix][test]fix flaky ZeroQueueSizeTest.testZeroQueueGetExceptionWhenReceiveBatchM essage (#24633)
• [fix][test]fix flaky ZeroQueueSizeTest.testZeroQueueGetExceptionWhenReceiveBatchM essage (#24630)
• [fix][broker] Fix flaky testReplicatorsInflightTaskListIsEmptyAfterReplicationFinish ed (#24590)
• [improve][build] Disable javadoc build failure (#24594)
• [improve][build] Increase maven resolver's sync context timeout (#24666)
• [improve][test] Add test for dead letter topic with max unacked messages blocking (#24535)
• [improve][test] Refactor the way way pulsar-io-debezium-oracle nar file is patched when building the test image (#24586)
• [fix][ci] Fix CI for Java 25 including upgrade of Gradle Develocity Maven extension (#24767)

For the complete list, check the full changelog.

2025-09-27

Library updates

• [fix][sec] Upgrade bouncycastle bcpkix-fips version to 1.79 to address CVE-2025-8916 (#24650)
• [fix][sec] Upgrade Netty to 4.1.127.Final to address CVEs (#24717)
• [fix][sec] Upgrade to Netty 4.1.124.Final to address CVE-2025-55163 (#24637)
• [improve][build] Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#24514)
• [improve][io] Upgrade AWS SDK v1 & v2, Kinesis KPL and KPC versions (#24661)
• [fix][misc] Upgrade dependencies to fix critical security vulnerabilities (#24532)
• [improve][build] Upgrade Lombok to 1.18.42 to fully support JDK25 (#24763)

Broker

• [fix][broker] Add double-check for non-durable cursor creation (#24643)
• [fix][broker] Ensure KeyShared sticky mode consumer respects assigned ranges (#24730)
• [fix][broker] First entry will be skipped if opening NonDurableCursor while trimmed ledger is adding first entry. (#24738)
• [fix][broker] Fix cannot shutdown broker gracefully by admin api (#24731)
• [fix][broker] Fix duplicate watcher registration after SessionReestablished (#24621)
• [fix][broker] Fix memory leak when metrics are updated in a thread other than FastThreadLocalThread (#24719)
• [fix][broker] Fix race condition in MetadataStoreCacheLoader causing inconsistent availableBroker list caching (#24639)
• [fix][broker] Fix REST API to produce messages to single-partitioned topics (#24450)
• [fix][broker] Invalid regex in PulsarLedgerManager causes zk data notification to be ignored (#23977)
• [fix][broker] Prevent unexpected recycle failure in dispatcher's read callback (#24741)
• [fix][broker][branch-3.0] Fix wrong backlog age metrics when the mark delete position point to a deleted ledger (#24518) (#24671)
• [fix][broker][branch-3.0] Prevent NPE in ownedBundlesCountPerNamespace on first bundle load (#24758)
• [fix][broker]Fix never recovered metadata store bad version issue if received a large response from ZK (#24580)
• [fix][ml]Fix EOFException after enabled topics offloading (#24753)
• [improve][broker] Choose random thread for consumerFlow in PersistentDispatcherSingleActiveConsumer (#20522)
• [improve][broker] If there is a deadlock in the service, the probe should return a failure because the service may be unavailable (#23634)
• [improve][broker] Optimize and clean up aggregation of topic stats (#21361)

Client

• [fix][client] Avoid recycling the same ConcurrentBitSetRecyclable among different threads (#24725)
• [fix][client] fix ArrayIndexOutOfBoundsException in SameAuthParamsLookupAutoClusterFailover (#24662)
• [fix][client] Fix ArrayIndexOutOfBoundsException when using SameAuthParamsLookupAutoClusterFailover (#23336)
• [fix][client] Fix receiver queue auto-scale without memory limit (#24743)
• [fix][client] Retry for unknown exceptions when creating a producer or consumer (#24599)
• [fix][client] Skip schema validation when sending messages to DLQ to avoid infinite loop when schema validation fails on an incoming message (#24663)
• [fix][client]Prevent ZeroQueueConsumer from receiving batch messages when using MessagePayloadProcessor (#24610)
• [fix][client]TopicListWatcher not closed when calling PatternMultiTopicsConsumerImpl.closeAsync() method (#24698)
• [fix][client] rollback TopicListWatcher retry behavior (#24752)
• [improve][client] Support load RSA PKCS#8 private key (#24582)

Pulsar IO and Pulsar Functions

• [fix][io] Improve Kafka Connect source offset flushing logic (#24654)
• [improve][io] Add dependency file name information to error message when .nar file validation fails with ZipException (#24604)
• [improve][io] Support specifying Kinesis KPL native binary path with 1.0 version specific path (#24669)

Others

• [fix][proxy] Fix TooLongFrameException with Pulsar Proxy (#24626)
• [fix][misc] Fix compareTo contract violation for NamespaceBundleStats, TimeAverageMessageData and ResourceUnitRanking (#24772)
• [improve][doc] Improve the JavaDocs of sendAsync to avoid improper use (#24601)
• [fix][offload] Exclude unnecessary dependencies from tiered storage provider / offloader nar files (#24649)

Tests & CI

• [improve][build] Use org.apache.nifi:nifi-nar-maven-plugin:2.1.0 with skipDocGeneration=true (#24668)
• [fix][ci] Fix code coverage metrics in Pulsar CI (#24595)
• [fix][test] Fix ConcurrentModificationException in Ipv4Proxy (#24632)
• [fix][test] Flaky-test: BrokerServiceTest.testShutDownWithMaxConcurrentUnload (#24769)
• [fix][test]fix flaky ZeroQueueSizeTest.testZeroQueueGetExceptionWhenReceiveBatchM essage (#24633)
• [fix][test]fix flaky ZeroQueueSizeTest.testZeroQueueGetExceptionWhenReceiveBatchM essage (#24630)
• [fix][broker] Fix flaky testReplicatorsInflightTaskListIsEmptyAfterReplicationFinish ed (#24590)
• [improve][build] Disable javadoc build failure (#24594)
• [improve][build] Increase maven resolver's sync context timeout (#24666)
• [improve][test] Add test for dead letter topic with max unacked messages blocking (#24535)
• [improve][test] Refactor the way way pulsar-io-debezium-oracle nar file is patched when building the test image (#24586)
• [fix][build] Import isNotBlank
• [fix][ci] Fix CI for Java 25 including upgrade of Gradle Develocity Maven extension (#24767)

For the complete list, check the full changelog.