# Changelog for RabbitMQ Source Connector for Confluent Platform ## Version 1.8.10 * Pin netty to 4.1.137.Final to fix CVE-2026-75595 (transitive via amqp-client) * Upgrade amqp-client 5.18.0→5.33.1 and log4j 2.25.4→2.25.5 to fix CVEs ## Version 1.8.9 * feat: SASL EXTERNAL (passwordless PKI / mTLS) for RabbitMQ source + sink (INIT-14290) [1.8.x backport] ## Version 1.8.8 No changes ## Version 1.8.7 * Add KDP gating block to semaphore.yml ## Version 1.8.6 No changes ## Version 1.8.5 * feat(INIT-16875): add queue-to-topic mapping for RabbitMQ source and sink connectors ## Version 1.8.4 * CC-40694: Fix CVE log4j-core 2.25.3→2.25.4 on 1.8.x ## Version 1.8.3 * CC-38395: Bumped `org.apache.logging.log4j:log4j-core` dependency version to 2.25.3 to resolve CVE-2025-68161 ## Version 1.8.2 * CC-38604: Bumped `org.bitbucket.b_c:jose4j` dependency version to 0.9.6 to resolve CVE-2024-29371 ## Version 1.8.1 * Fixed deprecated `commitRecord` method in `RabbitMQSourceTask`. * C3ATM: Updated `replace-time` code. ## Version 1.8.0 * This version is compatible with Confluent Platform 7.9 and later but is not backward-compatible with earlier versions. * CC-31026: Remove usages of `org.apache.kafka.common.network.Mode` as the class is renamed to `org.apache.kafka.common.network.ConnectionMode`.