Skip to content

build(deps): bump pulsar.client.version from 4.2.5 to 5.0.1 - #118

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/maven/pulsar.client.version-5.0.1
Closed

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/maven/pulsar.client.version-5.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown

Bumps pulsar.client.version from 4.2.5 to 5.0.1.
Updates org.apache.pulsar:pulsar-bom from 4.2.5 to 5.0.1

Release notes

Sourced from org.apache.pulsar:pulsar-bom's releases.

v5.0.1

Cherry-picked changes

v5.0.0

2026-10-05

Milestone release notes

The 5.0.0 release also includes the changes from these milestone releases:

Approved PIPs

  • [improve][pip] PIP-441: Add Broker-Level Metrics for Skipped Non-Recoverable Data (#24716)
  • [improve][pip] PIP-494: Scalable Topics Client Specification — authoritative reference and change process (#26447)
  • [improve][pip] PIP-496: Pulsar Functions and IO support for the V5 client and scalable topics (#26698)

Library updates

  • [improve][broker] Upgrade bookkeeper to 4.18.1 (#26574)
  • [fix][sec] Upgrade Async HTTP Client to 3.0.14 and Netty Reactive Streams to 2.0.20 (#26764)
  • [fix][sec] Upgrade at.yawk.lz4:lz4-java to 1.11.4 (#26758)
  • [fix][sec] Upgrade zstd-jni to 1.5.7-20 (#26766)
  • [fix][build] Upgrade Conscrypt to 2.6.3 (#26660)
  • [fix][build] Upgrade LightProto to 0.8.2 (#26623)
  • [improve][zk] Upgrade ZooKeeper to 3.9.6 (#26750)
  • [improve][build] Upgrade Bouncy Castle libraries (#26753)
  • [improve][build] Upgrade Caffeine to 3.3.0 (#26755)
  • [improve][build] Upgrade Gradle to 9.8.0 and update plugins (#26752)
  • [improve][build] Upgrade gRPC to 1.84.0 (#26762)
  • [improve][build] Upgrade Guava to 33.7.1-jre (#26760)
  • [improve][build] Upgrade Jackson to 2.21.7 (#26754)
  • [improve][build] Upgrade OpenTelemetry libraries to 1.66.0 level (#26756)
  • [improve][build] Upgrade Protobuf to 4.36.2 (#26757)
  • [improve][build] Upgrade SnakeYAML to 2.7 (#26761)
  • [improve][misc] Upgrade Jetty to 12.1.13 (#26738)

Broker

  • [fix][broker] Align entry filter policy checks for non-persistent topics (#26774)
  • [fix][broker] Align partitioned topic truncate checks with non-partitioned topics (#26776)
  • [fix][broker] Apply managedLedgerContinueCachingAddedEntriesAfterLastActiveCursorLeavesMillis to managed ledgers (#26785)
  • [fix][broker] Apply subscription policies to namespace and topic subscription operations (#26767)
  • [fix][broker] Apply the role logging anonymizer to topic authorization denial logs (#26642)
  • [fix][broker] Avoid misleading ownership lock expiry logs during shutdown (#26633)
  • [fix][broker] Bound classic Key_Shared dispatcher replay queue look-ahead (#26677)
  • [fix][broker] Bound the local partition metadata retry when starting a geo-replicator (#26681)
  • [fix][broker] Check the original principal of proxied HTTP requests with its own authentication data (#26748)

... (truncated)

Commits
  • 9ef1a62 [fix][ml] Materialize compressed ManagedCursorInfo before releasing the decom...
  • e588a59 Release 5.0.1
  • 9fae417 [fix][ml] Fix races in managed ledger initialization timeout handling (#23470)
  • 51f8681 [fix][broker] Manage in-flight bucket work during clear (#26401)
  • d8edc2b [fix][broker] Don't continue loading a topic after its load has timed out (#2...
  • 2854520 [fix][fn] Only load crypto_key_reader for python function when cryptoKeyReade...
  • 293680d [fix][test] Fix flaky NegativeAcksTest.testNegativeAcksWithBackoff (#24342)
  • e1128ce [feat][fn] Expose the Prometheus metrics registry to Go functions via Functio...
  • b439c2d [fix][broker] Reject replicated status for the compaction subscription (#27037)
  • 4e2db01 [improve][test] Add deduplication contract coverage across broker restart (#2...
  • Additional commits viewable in compare view

Updates org.apache.pulsar:pulsar-client-admin from 4.2.5 to 5.0.1

Release notes

Sourced from org.apache.pulsar:pulsar-client-admin's releases.

v5.0.1

Cherry-picked changes

v5.0.0

2026-10-05

Milestone release notes

The 5.0.0 release also includes the changes from these milestone releases:

Approved PIPs

  • [improve][pip] PIP-441: Add Broker-Level Metrics for Skipped Non-Recoverable Data (#24716)
  • [improve][pip] PIP-494: Scalable Topics Client Specification — authoritative reference and change process (#26447)
  • [improve][pip] PIP-496: Pulsar Functions and IO support for the V5 client and scalable topics (#26698)

Library updates

  • [improve][broker] Upgrade bookkeeper to 4.18.1 (#26574)
  • [fix][sec] Upgrade Async HTTP Client to 3.0.14 and Netty Reactive Streams to 2.0.20 (#26764)
  • [fix][sec] Upgrade at.yawk.lz4:lz4-java to 1.11.4 (#26758)
  • [fix][sec] Upgrade zstd-jni to 1.5.7-20 (#26766)
  • [fix][build] Upgrade Conscrypt to 2.6.3 (#26660)
  • [fix][build] Upgrade LightProto to 0.8.2 (#26623)
  • [improve][zk] Upgrade ZooKeeper to 3.9.6 (#26750)
  • [improve][build] Upgrade Bouncy Castle libraries (#26753)
  • [improve][build] Upgrade Caffeine to 3.3.0 (#26755)
  • [improve][build] Upgrade Gradle to 9.8.0 and update plugins (#26752)
  • [improve][build] Upgrade gRPC to 1.84.0 (#26762)
  • [improve][build] Upgrade Guava to 33.7.1-jre (#26760)
  • [improve][build] Upgrade Jackson to 2.21.7 (#26754)
  • [improve][build] Upgrade OpenTelemetry libraries to 1.66.0 level (#26756)
  • [improve][build] Upgrade Protobuf to 4.36.2 (#26757)
  • [improve][build] Upgrade SnakeYAML to 2.7 (#26761)
  • [improve][misc] Upgrade Jetty to 12.1.13 (#26738)

Broker

  • [fix][broker] Align entry filter policy checks for non-persistent topics (#26774)
  • [fix][broker] Align partitioned topic truncate checks with non-partitioned topics (#26776)
  • [fix][broker] Apply managedLedgerContinueCachingAddedEntriesAfterLastActiveCursorLeavesMillis to managed ledgers (#26785)
  • [fix][broker] Apply subscription policies to namespace and topic subscription operations (#26767)
  • [fix][broker] Apply the role logging anonymizer to topic authorization denial logs (#26642)
  • [fix][broker] Avoid misleading ownership lock expiry logs during shutdown (#26633)
  • [fix][broker] Bound classic Key_Shared dispatcher replay queue look-ahead (#26677)
  • [fix][broker] Bound the local partition metadata retry when starting a geo-replicator (#26681)
  • [fix][broker] Check the original principal of proxied HTTP requests with its own authentication data (#26748)

... (truncated)

Commits
  • 9ef1a62 [fix][ml] Materialize compressed ManagedCursorInfo before releasing the decom...
  • e588a59 Release 5.0.1
  • 9fae417 [fix][ml] Fix races in managed ledger initialization timeout handling (#23470)
  • 51f8681 [fix][broker] Manage in-flight bucket work during clear (#26401)
  • d8edc2b [fix][broker] Don't continue loading a topic after its load has timed out (#2...
  • 2854520 [fix][fn] Only load crypto_key_reader for python function when cryptoKeyReade...
  • 293680d [fix][test] Fix flaky NegativeAcksTest.testNegativeAcksWithBackoff (#24342)
  • e1128ce [feat][fn] Expose the Prometheus metrics registry to Go functions via Functio...
  • b439c2d [fix][broker] Reject replicated status for the compaction subscription (#27037)
  • 4e2db01 [improve][test] Add deduplication contract coverage across broker restart (#2...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `pulsar.client.version` from 4.2.5 to 5.0.1.

Updates `org.apache.pulsar:pulsar-bom` from 4.2.5 to 5.0.1
- [Release notes](https://github.com/apache/pulsar/releases)
- [Commits](apache/pulsar@v4.2.5...v5.0.1)

Updates `org.apache.pulsar:pulsar-client-admin` from 4.2.5 to 5.0.1
- [Release notes](https://github.com/apache/pulsar/releases)
- [Commits](apache/pulsar@v4.2.5...v5.0.1)

---
updated-dependencies:
- dependency-name: org.apache.pulsar:pulsar-bom
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.apache.pulsar:pulsar-client-admin
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file Java Pull requests that update Java code labels Oct 29, 2026
@qianmoQ qianmoQ closed this Nov 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file Java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant