Confluent Platform Component Changelogs

To get the latest product updates delivered to you in an RSS feed, add the URL of this page to your feed reader or add the feed's URL directly
https://docs.confluent.io/platform/7.4/release-notes/changelog.xml

This topic provides changelogs for the individual Confluent Platform components.

Version 7.4.15

Released May 2026

Community Features

ksqlDB

  • Implemented a security fix for ksqlDB.

Schema Registry

  • Resolved a security vulnerability in io.confluent.kafka-json-schema-serializer

  • PR-4116 - Fix normalize() in Avro and JSON Schema to preserve metadata and ruleSet

Version 7.4.14

Released March 2026

Community Features

Common

  • 217dac01 - Update Avro to 1.11.5 in 7.4.14

  • PR-902 - Add –direct-pom-edit support to ci.py for faster CI builds

  • 745599ac - Update Jetty to 9.4.59

  • a9b992c5 - Update Log Redactor to 1.0.17 and Netty to 4.1.130

  • faa63c96 - Update dependency org.bitbucket.b_c:jose4j to v0.9.6

  • PR-887 - Update dependency org.apache.logging.log4j:log4j-core to v2.25.3

  • c33caa1b - Update Netty to 4.1.129

Kafka

  • PR-1891 - Update Jetty to 9.4.59 in 3.4

  • PR-1878 - Update Netty to 4.1.130 and Jose to 0.9.6 in 3.4

  • PR-21288 - Fix rare producer message corruption, don’t reuse buffers

  • PR-1859 - Bump at.yawk.lz4:lz4-java

  • PR-1850 - Request org.lz4:lz4-java in kafka

  • 02ea8b8d - Fix indentation

  • 1637e5b3 - Remove commonlangs2 sub

ksqlDB

  • PR-10936 - Bump up vert.x dependency version

  • PR-10932 - Update plugin version

  • PR-10920 - Update Netty.

  • PR-10915 - Fix for jersey-client dependency

  • PR-10905 - Print deprecated configurations in maven builds

REST Proxy

  • 8171a366 - Fix partial permission issue for getConsumerGroups()

  • 1df57555 - Bump Jersey dep to 2.46

  • PR-645 - Update jersey.version to 2.46

Schema Registry

  • PR-4116 - Fix normalize() in Avro and JSON Schema to preserve metadata and ruleSet

  • 88b49837 - Checkstyle lint

  • 5f7409e0 - Fix params

  • PR-4089 - Fix MetadataEncoderService key rotation and add test coverage

  • ee7d984f - Fix Avro union evolution for specific reader

  • PR-4077 - Exclude common-lang-2.6 from rest-utils to avoid conflicts with common-lang3

  • PR-4046 - Add tool to rewrap DEKs with latest version of KEK

  • PR-4033 - Don’t throw exception for JSON schema with format=serialized

Version 7.4.13

Released December 2025

Community Features

Common

  • PR-880 - Update dependency org.bouncycastle:bc-fips to v2.1.2 [SECURITY] (7.4.x)

  • 2a944f44 - Use correct groupname for commons-lang3

  • 25ab4be8 - Fix the scope of imported pom

  • 4eab14b4 - Update netty and bouncycastle

  • 1b8bb0d3 - Add dependency management for grpc libraries and commons-lang3

  • 179e9ad6 - Update jetty to 9.4.58.v20250814 in 7.3.14

  • c3793950 - Update azure libraries

  • 63d8206d - Update netty to 4.1.125

  • 06c00dc5 - Update netty to 4.1.225

  • de6eef11 - Update netty to 4.1.125

  • fdbb7f8a - Update bc-fips versions to match ce-kafka / latest security updates in verified fips version

  • a86ab6d5 - Update jetty, add bc-fips to renovatebot ignore file

  • PR-819 - Update dependency org.bouncycastle:bc-fips to v2.1.1 [SECURITY] (7.2.x)

ksqlDB

  • PR-10903 - Update dependency io.vertx:vertx-web to v4.5.22

  • PR-10869 - Upgrade jline dependency to address terminal sizing issue

  • cb2697ce - Bump up tcnative version to be in sync with netty

  • PR-10865 - Bump up tcnative dependency to be in sync with netty

  • PR-10854 - Update netty to 4.1.125

  • c5dc9fd5 - Update netty to 4.1.125 in 7.3.14

  • PR-10841 - Unpin jackson version and upgrade shade plugin

  • PR-10839 - Update dependency io.netty:netty-codec to v4.1.125.Final [SECURITY] (7.2.x)

  • PR-10833 - Set the order of timestamp fields to be processed to avoid incorrect modifications for daylight savings

  • fd1e276f - Update netty version

  • aa50267d - Update netty version

  • a3f4c676 - Update netty version

  • 53ee8cae - Update netty version

  • PR-10795 - Update dependency io.netty:netty-codec-http2 to v4.1.124.Final [SECURITY] (7.2.x)

  • ff42df17 - Update dependency io.netty:netty-codec-http2 to v4.1.124.Final [SECURITY]

REST Proxy

  • PR-1420 - Fix spotbug check issue

  • PR-1415 - Remove spotbug-annotations

Schema Registry

  • PR-3994 - Add Confluent-Accept-Unknown-Properties header to SR client

  • PR-3981 - Fix use of JSON Schema serializer for key

  • PR-3977 - Minor optimization to remove synchronized block

  • PR-3973 - Ensure lazy initialization is thread-safe

  • PR-3972 - Only use AWS role if the web identity token file is not set

  • PR-3955 - Ensure canonicalString() method is thread-safe

  • PR-3950 - In AvroConverter use name-based getter/setter only for valid names

  • PR-3935 - Ensure payloads are not unnecessarily redacted in DLQ

  • PR-3924 - Add AppRole auth for HC Vault

  • PR-3902 - Follow up PR to handle old CP versions

  • PR-3896 - Update RestService warn log to include error class name

  • PR-3890 - Ensure tags are used during schema evolution

  • PR-3880 - Fix exception when evolving Avro schema with rules

  • PR-3875 - Refine cache invalidation

  • PR-3871 - Some fixes to tests/lints

  • PR-3870 - Add sr-version to sr client API

  • PR-3864 - Organizing imports

Version 7.4.12

Released October 2025

Community Features

No changes

Commercial Features

Connect

  • Bug fix: Confluent Enterprise distribution of Kafka Connect workers (CE, connect-server, or connect-server-base): Fixed a plugin class loading bug that prevented certain non-isolated classes (for example, javax.jms) from being loaded from plugin JARs. For more information, see article.

Version 7.4.11

Released September 2025

Community Features

Common

  • 8c5f24d8 - Update jetty to 9.4.58.v20250814 in 7.4.11

  • 28503347 - Update netty to 4.1.225

  • PR-814 - Update dependency org.bouncycastle:bcpkix-fips to v2.0.8 [SECURITY] (7.2.x)

  • 94288a36 - use correct versions of fips providers

  • cac21f69 - update netty and auxilary bc-fips library

  • PR-810 - Update dependency org.bouncycastle:bc-fips to v2.1.0 [SECURITY] (7.2.x)

  • PR-808 - adding license for assembly-plugin-boilerplate and build-tools modules

  • 79dbce2c - update jackson bom to match ce-kafka version

  • 06637ab6 - pin commons beanutils and validator

Kafka

  • PR-1782 - Update netty to 4.1.125 in 3.4

  • PR-1770 - Bump jetty to version 9.4.58.v20250814 in 3.4

  • PR-1758 - Add run_tags to worker-ami and aws-packer

  • PR-1753 - Change ci_tools import path

  • PR-13662 - Upgrade Jackson dependencies to version 2.16.0 (#13662)

  • PR-1701 - In case of infra failure in ccs-kafka tag that as infra failure in testbreak

  • PR-1689 - migrate from vagrant to terraform

  • PR-1670 - add cloudwatch metrics to view cpu, memory and disk usage

  • PR-1647 - upgrade ducktape and requests version

ksqlDB

  • PR-10869 - upgrade jline dependency to address terminal sizing issue

  • 2f04c52c - Update netty to 4.1.125 in 7.4.11

  • PR-10841 - Unpin jackson version and upgrade shade plugin

  • d760e504 - update netty version

  • PR-10782 - Improve configuration filtering for query overrides.

  • PR-10779 - Bump common-lang3 version to 3.18.0

REST Proxy

  • f05cee42 - remove bc dependency that is being merged in bc-prov

  • PR-1403 - Hardcoding the CP rpm and deb installation dependency version

Schema Registry

  • PR-3860 - Add sr type endpoint

  • PR-3837 - Hardcoding the CP rpm and deb installation dependency version

  • PR-3850 - Prevent re-registration of schema with dangling reference

  • PR-3840 - Fix build due to Jackson upgrade to 2.16

  • PR-3822 - Allow alternate KMS key IDs on a KEK

  • PR-3821 - upgrade commons lang version

  • PR-3825 - Add Apache and CCL licenses to the dek-* modules

  • PR-3823 - fix license headers

  • 752b07bc - Minor refactor to add subject to create DEK API

  • PR-3802 - Fix field traversals when POJO property is missing

  • PR-3794 - Handle decimals based on fixed type in Avro converter

  • PR-3789 - support for license headers

  • PR-3783 - support for license headers

  • PR-3767 - Upgrade jackson-datatype-protobuf to 0.9.16

  • PR-3750 - Bump max DEK registry key default

  • PR-3746 - Generate correct field type for Decimal in JSON converter

  • PR-3739 - Fix ubuntu24 image in schema registry repo

  • PR-3724 - Upgrade everit json-schema to 1.14.6

Version 7.4.10

Released June 2025

Community Features

Common

  • 467efd8f - Fix missing version definition

  • cbc66130 - Add commons-compress to unify versions with ce-kafka

  • 54d73bbe - Update azure dependencies to versions defined in azure-bom 1.2.32

Kafka

  • PR-1588 - Update netty to 4.1.118.Final

ksqlDB

  • PR-10722 - Update dependency Pygments to v2.15.1 [SECURITY]

  • PR-10728 - Update the ZK notices text version under licenses

  • PR-10726 - Update dependency jinja2 to v3.1.6 [SECURITY]

Schema Registry

  • PR-3711 - Add warning log whenever baseUrl changes in RestService

  • PR-3710 - Improve unit test coverage (edge case handling) for SetCompatibilityMojoTest

  • PR-3693 - Ensure AvroConverter does not rely on field order

  • PR-3690 - Downgrade aws sdk v2 to match kafka on 7.7.x

  • PR-3682 - Ignore JSON schema fields not in the Java class

  • 306f08dc - Upgrade mbknor library to 1.0.39.3

  • PR-3648 - Update dependency junit:junit to v4.13.1 [SECURITY]

  • PR-3662 - Update the ZK notices text version under licenses

  • PR-3656 - Add minimal validation for certain KMS key IDs

  • PR-3615 - Upgrade to aws sdk 2.30.33

  • PR-3614 - Increase max length for kek and rule names

  • 76c315ae - Ensure use of DEK object is thread-safe

  • PR-3605 - Update deps for CSPs

  • PR-3590 - Add retry for schema exporter upon IOException

  • PR-3575 - Support Protobuf oneof fields in Data Contract rules

Version 7.4.9

Released March 2025

Community Features

Common

  • fde07db0 - Update netty to 4.1.118

  • f982ea91 - Update bouncycastle dependencies

  • 29819815 - Update jetty to 9.4.57

  • d1341a9b - Add commons codec to dependency management

  • fbb9acf3 - Pin version of mina-core to override version from jetty

  • 9277c65c - Update netty to 4.1.115

  • da4ebe39 - Change version of bctls-fips to 1.0.13

  • 86e4f1e2 - Change version of bctls-fips to 1.0.13

  • 93da41d2 - Change version of bctls-fips to 1.0.13

  • 60e02333 - Change version of bouncycastle bctls due to downstream failues

  • 644fbf03 - Change version of bouncycastle

  • c02b71d4 - Change version of bouncycastle

  • 62ad6c9a - Change version of bouncycastle

  • PR-708 - Change version of bouncycastle fips libraries upgrade

  • 7fa06075 - Update cyclonedx plugin( #704)

Kafka

  • PR-1548 - Update jetty to 9.4.57.v20241219

  • PR-1517 - Update netty to 4.1.115.Final

ksqlDB

  • 0a211a88 - Corrected conflict

  • PR-10686 - Update netty

  • PR-10671 - Unpinned Jetty Version

  • 8fcad7f8 - Remove jetty pin / outdated comment

  • be803959 - Debug

  • 313fd1da - Debug

  • 9c0edb4e - Nit

  • 90d5e47e - Nit

  • PR-10653 - Fix the placement of default port number and capture the sub path while creating a client to ksqlDB.

  • f6c26e7a - Fix the placement of default port number and capture the sub path while creating a client to ksqlDB.

  • 8bfe4b59 - Update vertx to 4.4.8 for 7.1.x

  • PR-10613 - Fix jsonschema dependency

  • PR-10614 - Merge Conflict Resolution (from 7.3.x to 7.4.x)

  • PR-10612 - Merge Conflict Resolution (from 7.2.x to 7.3.x)

  • PR-10608 - Fix close query context error

  • PR-10610 - Merge Conflict Resolution (from 7.3.x to 7.4.x)

  • PR-10607 - Merge Conflict Resolution (from 7.2.x to 7.3.x)

  • PR-10601 - Optimize Latency in POST /ksql API for describe streams Due to Orphan Topics

  • PR-10589 - Fix for netty-common

  • PR-10587 - Fix for netty-common

  • PR-10584 - Fix for netty-common

  • PR-10582 - Fix for netty-common

  • PR-10578 - Fix: for dependency update for jsonschema

  • PR-10503 - Fix classloader after connect starts

REST Proxy

  • PR-1322 - Fix visibility for stopRest function

  • PR-1318 - Change to manageRest to make the name consistent for all release branch

  • PR-1311 - Allow to start kafka rest separately so that the integration test can be more customisable

  • PR-1312 - Update codeowners

  • 02615956 - Udpate async_http_client without upgrade of major version

  • PR-511 - Add @confluentinc/kora-networking as Codeowner

  • 48e03221 - Remove the hibernate-validator exclusion no longer needed due to updated jersey-bean-validation

Schema Registry

  • PR-3573 - Upgrade commons.validator to 1.9.0

  • PR-3559 - Setting default SSLSocketFactory from HttpsURLConnection in RestService.

  • PR-3544 - Upgrade everit json-schema to 1.14.5

  • PR-3542 - Bouncy Castle and SunJSSE compatibility fix (additional flows)

  • PR-3538 - Bouncy Castle and SunJSSE compatibility fix.

  • PR-3528 - Fix in 7.0.x

  • PR-3497 - Fix parent POM version in new module

  • PR-3500 - Prevent overwriting argLine execution variable

  • PR-3496 - Fix parent POM version in new module

  • PR-3495 - Fix parent POM version in new module

  • PR-3494 - Fix parent POM version in new module

  • PR-3462 - Enable SonarQube reporting

  • PR-3481 - Fix retry logic for callables that return void

  • PR-3478 - Fix JSON Schema dependency

  • PR-3461 - Add test to ensure Protobuf map entry option is preserved

  • PR-3449 - Add composite deserializer for migration use cases

  • PR-3457 - Change Version “Ensure map_entry option is not emitted (#3444)”

  • PR-3453 - Port AWS KMS integration code to AWS SDK v2

  • PR-3444 - Ensure map_entry option is not emitted

  • PR-3440 - Remove pin of bouncycastle to favor version defined in common

  • PR-3434 - Fix transformation of fields in JSON Schema definitions

  • PR-3424 - Add retry logic to RestService

  • PR-3427 - Add config to specify packages to scan when deriving JSON Schema

  • PR-3425 - Merge Conflict Resolution (from 7.2.x to 7.3.x)

  • PR-3394 - Remove pin of bouncycastle to favor version defined in common

  • PR-3423 - Downgrade JSONata to 2.4.5

  • PR-3417 - Change Version “Upgrade json-schema to 1.14.4 (#3400)”

  • PR-3415 - Fix merge issue

  • PR-3414 - Fix merge issue

  • ebf23a1d - Upgrade jsonata to 2.4.9

  • PR-3400 - Upgrade json-schema to 1.14.4

  • PR-3399 - Upgrade tink to 1.15

  • PR-3397 - Upgrade cel-java to 0.4.5

  • PR-3396 - Remove scala dependency for mbknor library

  • PR-3392 - Handle schema migrations for Proto message types after first

  • PR-3393 - Remove hibernate-validator exclusion and pin as the updated dependency uses new version

  • PR-3390 - More robust retries in RetryExecutor

  • PR-3391 - Return 404 instead of 429 if schema lookup fails

  • PR-3389 - Retry on 500

  • PR-3388 - Add test that uses both JSONata and CEL

Version 7.4.8

Released December 2024

Community Features

Common

  • f78bf5b6 - change bctls-fips to 1.0.13

  • f478c73e - change bouncycastle

  • PR-687 - update jetty to 9.4.56

  • PR-684 - define version of commons-io and add it to dependencyManagement

  • 79d5047d - upgrade avro to 1.11.4 to patch AVRO-3985

  • PR-663 - disable CI gating workflow for master branch

  • 948d59f6 - Upgrade Netty

  • PR-657 - update protobuf to 3.25.5 (#16) (#654) (#17)

  • PR-654 - update protobuf to 3.25.5

  • PR-646 - update bouncycastle to version 2.0 (#11)

  • PR-637 - adding cp-jar-build ci gating

Kafka

  • PR-1507 - fix zk migration system tests

  • PR-1503 - Fix version check in util.py

  • PR-1489 - Update jetty to 9.4.56.v20240826

  • PR-1479 - Added commonsIo to libs variable.

  • PR-1460 - Bump commonsIo to version 2.16.0 in 3.4

  • fc06e0b4 - Ignore failing quota_test

  • PR-1437 - disable flakey test

ksqlDB

  • 0a63de1d - Fix commons-io version

  • bb335fa1 - nit

  • PR-157 - Remove KSQL internal topics from the list topic results. Sort the top

  • PR-156 - improve test coverage for cli

  • 3213368f - Update netty version from 4.1.108.final to 1.1.113.Final.

  • aee1218e - Update netty version from 4.1.108.Final to 4.1.113.Final.

  • 1ef32457 - Update netty version from 4.1.108.Final to 4.1.113.Final.

  • PR-10442 - Ensure Deterministic UDF Loading by Avoiding Context ClassLoader Interference

  • 70e7ffbf - Update netty version from 4.1.108.Final to 4.1.113.Final.

  • PR-140 - Delimited mode deserializer now can handle null values.

  • PR-139 - sanity check for persistent queries

  • PR-138 - Added props to the sanity check.

  • f923a1ea - Downgrade git commit id plugin version from 9.0.1 to 4.9.10 for Java 8 compatibility.

  • ec48c835 - Upgrade git commit id plugin version from 2.2.6 to 9.0.1 and include git.commit.id property only.

  • PR-10413 - Fix for select struct->* for Pull Queries

  • PR-10443 - updating cp-jar-build block in semaphore pipeline

REST Proxy

  • PR-1290 - adding cp jar build workflow as PR ci gating

  • PR-500 - skipping cp jar builds on master branch PRs

  • PR-492 - adding cp-jar-build block for PR builds

Schema Registry

  • PR-3359 - Add latest caches at the SR client level

  • PR-3351 - Ensure correct exception is thrown from parseSchema

  • PR-3352 - Minor optimization to reduce schema ID lookups

  • PR-3348 - Reapply “Fix for decoding of sensitive metadata”

  • PR-3339 - remove fix for decoding of sensitive metadata

  • PR-3333 - Ensure encoders are synced when decoding sensitive metadata

  • PR-3332 - Fix NPE when listing versions by id

  • PR-3316 - Return encrypted value instead of throwing exception

  • PR-3311 - Fix 7.1.x merge conflicts

  • PR-3265 - Add performanceMetric to get config metadata API

  • PR-3264 - Add performanceMetric to list schema refs API

  • PR-3263 - Add performanceMetric to global delete config API

  • PR-3307 - Fix pint merge from 7.3.x to 7.4.x

  • PR-3244 - Handle 401/403 errors appropriately

  • PR-72 - Fixed the wait timeout in the KafkaStoreReaderThread. Fixes #54

  • PR-3262 - remove azure-identity definition, update azure-keyvault version (#49)

  • PR-3278 - Use concurrent hash maps in serde members (#61)

  • PR-3276 - Add format query param to APIs that return a schema (#46)

  • PR-3252 - Add CSFLE tests with pre-canned data (#42)

  • PR-3250 - Allow oneofs to be flattened in Protobuf converter (#41)

  • PR-3256 - adding cp jar build CI gating block (#38)

Version 7.4.7

Released August 2024

Community Features

Common

  • PR-2 - Remove IntelliJ and build output and add it to .gitignore.

  • ab0d4be5 - Update pom.xml

  • 2add2049 - pin classgraph

  • 1825f6c2 - update azure-identity to 1.12.2

  • 57dce6aa - Remove bouncy property

  • 3753b015 - Remove bcprov-jdk15on

Kafka

  • PR-1390 - 3.4 fixed downstream trigger

ksqlDB

  • PR-63 - Checkstyle fixes

  • PR-62 - Remove unnecessary exclusions

  • PR-61 - Remove unused imports

  • PR-60 - Removed the imlicit topic generation from th estatement executor.

  • PR-59 - Added partition by clause to CSAS statement

  • PR-52 - Inherit from common POM, clean up dependencies

  • PR-50 - json processing

  • PR-49 - Fixed the issue with COUNT(*).

  • PR-47 - Make tabular output for ‘DESCRIBE …’ statements a little prettier

  • PR-37 - Remove custom JSON (de)serialization, use Jackson’s ObjectMapper instead

  • PR-10398 - Package kafka streams in api client

  • PR-10397 - Increase time limit for the pipeline

  • PR-10392 - Change classgraph version to 4.8.59

  • PR-9 - Leverage ARG (Avro Random Generator) in DataGen class

  • 88704d16 - Use range version instead of pinned nano-versions

  • ea2c84c9 - Use range version instead of pinned nano-versions

  • af2b0440 - Use range version instead of pinned nano-versions

  • e65fd80d - Use range version instead of pinned nano-versions

  • ddcda7d2 - Use range version instead of pinned nano-versions(to fix build failure)

  • PR-10369 - Add kafka streams dependency on ksqldb api client

REST Proxy

Schema Registry

  • PR-33 - Moved key serialization to a JSON serializer.

  • PR-30 - APIs changed to refer to subjects. Retrieval by globally unique schema id

  • PR-3235 - Fix Pint Merge Error

  • PR-11 - Moves hard-coded configs

  • 0f4860f3 - Revert “Upgrade JSONata dependency to 2.5.0”

  • 64e420b4 - Clean up LocalKmsClient

  • 8c5aaa96 - Upgrade JSONata dependency

Version 7.4.6

Released July 2024

Community Features

Common

  • 0fe414fb - downgrade fips library to a version that is certified compliant

  • ac056ff0 - Remove dependency-check-maven plugin

  • 199fb826 - [skip ci] Copy CODEOWNERS from the default branch

  • 2d18feed - [skip ci] Copy CODEOWNERS from the default branch

  • a4ce2aa5 - [skip ci] Copy CODEOWNERS from the default branch

  • c3161ee3 - [skip ci] Copy CODEOWNERS from the default branch

  • 7bb3031e - [skip ci] Copy CODEOWNERS from the default branch

  • 7101444c - [skip ci] Copy CODEOWNERS from the default branch

  • 1161cd16 - [skip ci] Copy CODEOWNERS from the default branch

  • 35bb1580 - [skip ci] Copy CODEOWNERS from the default branch

  • 4de5f345 - [skip ci] Copy CODEOWNERS from the default branch

  • 56cf025c - [skip ci] Copy CODEOWNERS from the default branch

  • b1986c77 - [skip ci] Copy CODEOWNERS from the default branch

  • 99e2d3ee - [skip ci] Copy CODEOWNERS from the default branch

  • a2532765 - [skip ci] Copy CODEOWNERS from the default branch

  • d447e722 - [skip ci] Copy CODEOWNERS from the default branch

  • 4074cb43 - [skip ci] Copy CODEOWNERS from the default branch

  • fb60a228 - [skip ci] Copy CODEOWNERS from the default branch

  • c68a9779 - [skip ci] Copy CODEOWNERS from the default branch

  • 754d9b81 - [skip ci] Copy CODEOWNERS from the default branch

  • fb5fd4f1 - [skip ci] Copy CODEOWNERS from the default branch

  • a8fe8bde - [skip ci] Copy CODEOWNERS from the default branch

  • 709008c3 - [skip ci] Copy CODEOWNERS from the default branch

  • 87965aeb - [skip ci] Copy CODEOWNERS from the default branch

  • 324ea0c2 - [skip ci] Copy CODEOWNERS from the default branch

  • 1e75bf2e - [skip ci] Copy CODEOWNERS from the default branch

  • dbc2808e - [skip ci] Copy CODEOWNERS from the default branch

  • 37299738 - [skip ci] Copy CODEOWNERS from the default branch

  • 6834d31e - [skip ci] Copy CODEOWNERS from the default branch

  • f672f0b7 - [skip ci] Copy CODEOWNERS from the default branch

  • 1552a6ae - [skip ci] Copy CODEOWNERS from the default branch

  • c2e6d1d9 - [skip ci] Copy CODEOWNERS from the default branch

  • 58752026 - [skip ci] Copy CODEOWNERS from the default branch

  • 257e5583 - [skip ci] Copy CODEOWNERS from the default branch

  • d805ea52 - [skip ci] Copy CODEOWNERS from the default branch

  • a51cbedc - [skip ci] Copy CODEOWNERS from the default branch

  • bae0cc2b - [skip ci] Copy CODEOWNERS from the default branch

  • 05c3c21f - [skip ci] Copy CODEOWNERS from the default branch

  • 19382638 - [skip ci] Copy CODEOWNERS from the default branch

  • 8a85ced7 - [skip ci] Copy CODEOWNERS from the default branch

  • 745ad6e0 - [skip ci] Copy CODEOWNERS from the default branch

  • b471ca1e - [skip ci] Copy CODEOWNERS from the default branch

  • e4657f76 - [skip ci] Copy CODEOWNERS from the default branch

  • 58210d7e - [skip ci] Copy CODEOWNERS from the default branch

  • 54023e05 - [skip ci] Copy CODEOWNERS from the default branch

  • 4849bf6c - [skip ci] Copy CODEOWNERS from the default branch

  • 513505a4 - [skip ci] Copy CODEOWNERS from the default branch

  • 3b923d23 - [skip ci] Copy CODEOWNERS from the default branch

  • 3baac0ca - [skip ci] Copy CODEOWNERS from the default branch

  • f981b476 - [skip ci] Copy CODEOWNERS from the default branch

  • c6202053 - [skip ci] Copy CODEOWNERS from the default branch

  • f90b2358 - [skip ci] Copy CODEOWNERS from the default branch

  • 0a75e912 - [skip ci] Copy CODEOWNERS from the default branch

  • fec34ca6 - [skip ci] Copy CODEOWNERS from the default branch

  • 955a9d56 - [skip ci] Copy CODEOWNERS from the default branch

  • 7be2463a - [skip ci] Copy CODEOWNERS from the default branch

  • 4a39583c - [skip ci] Copy CODEOWNERS from the default branch

  • 54ba479f - [skip ci] Copy CODEOWNERS from the default branch

  • 1bcdaa2d - [skip ci] Copy CODEOWNERS from the default branch

  • 61cfbd02 - [skip ci] Copy CODEOWNERS from the default branch

  • 6674005e - [skip ci] Copy CODEOWNERS from the default branch

  • 1c0f4d21 - [skip ci] Copy CODEOWNERS from the default branch

  • 22befdbe - [skip ci] Copy CODEOWNERS from the default branch

  • 068cab4e - [skip ci] Copy CODEOWNERS from the default branch

  • e16dfe4f - [skip ci] Copy CODEOWNERS from the default branch

  • 303b2ee4 - [skip ci] Copy CODEOWNERS from the default branch

  • c121708d - [skip ci] Copy CODEOWNERS from the default branch

  • 7cf721e2 - [skip ci] Copy CODEOWNERS from the default branch

  • 0ee7493f - [skip ci] Copy CODEOWNERS from the default branch

  • 18c80b08 - [skip ci] Copy CODEOWNERS from the default branch

  • 360f8390 - [skip ci] Copy CODEOWNERS from the default branch

  • 06020135 - [skip ci] Copy CODEOWNERS from the default branch

  • a6f16e5b - [skip ci] Copy CODEOWNERS from the default branch

  • 0617a389 - [skip ci] Copy CODEOWNERS from the default branch

  • fd1c2566 - [skip ci] Copy CODEOWNERS from the default branch

  • b0452bf1 - [skip ci] Copy CODEOWNERS from the default branch

  • ab852844 - [skip ci] Copy CODEOWNERS from the default branch

  • a211badc - [skip ci] Copy CODEOWNERS from the default branch

  • 9b6902db - [skip ci] Copy CODEOWNERS from the default branch

  • b1b20738 - [skip ci] Copy CODEOWNERS from the default branch

  • a7a4cc7a - [skip ci] Copy CODEOWNERS from the default branch

  • 91490ad5 - [skip ci] Copy CODEOWNERS from the default branch

  • 17da8567 - [skip ci] Copy CODEOWNERS from the default branch

  • 766a751b - [skip ci] Copy CODEOWNERS from the default branch

  • 1fbbb32a - [skip ci] Copy CODEOWNERS from the default branch

  • 3825d594 - [skip ci] Copy CODEOWNERS from the default branch

  • a40b2814 - [skip ci] Copy CODEOWNERS from the default branch

  • d5cae13d - [skip ci] Copy CODEOWNERS from the default branch

  • 6bde5187 - [skip ci] Copy CODEOWNERS from the default branch

  • 1de74570 - [skip ci] Copy CODEOWNERS from the default branch

  • 7b2523a9 - [skip ci] Copy CODEOWNERS from the default branch

  • 9c81bb26 - [skip ci] Copy CODEOWNERS from the default branch

  • 5a9cc14b - [skip ci] Copy CODEOWNERS from the default branch

  • eff4902e - [skip ci] Copy CODEOWNERS from the default branch

  • c78d91e0 - [skip ci] Copy CODEOWNERS from the default branch

  • f06f7364 - [skip ci] Copy CODEOWNERS from the default branch

  • 1e32c541 - [skip ci] Copy CODEOWNERS from the default branch

  • b200e9b2 - [skip ci] Copy CODEOWNERS from the default branch

  • 8759b329 - [skip ci] Copy CODEOWNERS from the default branch

  • 8f5cc526 - [skip ci] Copy CODEOWNERS from the default branch

  • 66fe85c0 - [skip ci] Copy CODEOWNERS from the default branch

  • 394c99ad - [skip ci] Copy CODEOWNERS from the default branch

  • c346275b - [skip ci] Copy CODEOWNERS from the default branch

  • 3fccf1c0 - [skip ci] Copy CODEOWNERS from the default branch

  • 283327a3 - [skip ci] Copy CODEOWNERS from the default branch

  • d8f9e18c - [skip ci] Copy CODEOWNERS from the default branch

  • 00c0eb82 - [skip ci] Copy CODEOWNERS from the default branch

  • 19efc04e - [skip ci] Copy CODEOWNERS from the default branch

  • 227118f8 - [skip ci] Copy CODEOWNERS from the default branch

  • 07bdd844 - [skip ci] Copy CODEOWNERS from the default branch

  • 3ff06154 - [skip ci] Copy CODEOWNERS from the default branch

  • 603fbeea - [skip ci] Copy CODEOWNERS from the default branch

  • 25321bce - [skip ci] Copy CODEOWNERS from the default branch

  • 7f0ab7b9 - [skip ci] Copy CODEOWNERS from the default branch

  • aca775c6 - [skip ci] Copy CODEOWNERS from the default branch

  • f654da0e - [skip ci] Copy CODEOWNERS from the default branch

  • 44028ac6 - [skip ci] Copy CODEOWNERS from the default branch

  • a513edb4 - [skip ci] Copy CODEOWNERS from the default branch

  • abf422bb - [skip ci] Copy CODEOWNERS from the default branch

  • 739d4812 - [skip ci] Copy CODEOWNERS from the default branch

  • 02f185fc - [skip ci] Copy CODEOWNERS from the default branch

  • 9b73ab9e - [skip ci] Copy CODEOWNERS from the default branch

  • 52ff6ef2 - [skip ci] Copy CODEOWNERS from the default branch

  • e1f6c689 - [skip ci] Copy CODEOWNERS from the default branch

  • 8d7ca7c1 - [skip ci] Copy CODEOWNERS from the default branch

  • ad60fa3e - [skip ci] Copy CODEOWNERS from the default branch

  • 0fc5ca14 - [skip ci] Copy CODEOWNERS from the default branch

  • e1edccb6 - [skip ci] Copy CODEOWNERS from the default branch

  • d4f4daae - [skip ci] Copy CODEOWNERS from the default branch

  • 4cbed2ca - [skip ci] Copy CODEOWNERS from the default branch

  • 0ae51d8e - [skip ci] Copy CODEOWNERS from the default branch

  • 06eb50f2 - [skip ci] Copy CODEOWNERS from the default branch

  • d1657566 - [skip ci] Copy CODEOWNERS from the default branch

  • 52d310eb - [skip ci] Copy CODEOWNERS from the default branch

  • 6eeee637 - [skip ci] Copy CODEOWNERS from the default branch

  • 01caa623 - [skip ci] Copy CODEOWNERS from the default branch

  • 691709b1 - [skip ci] Copy CODEOWNERS from the default branch

  • 8dbe4889 - [skip ci] Copy CODEOWNERS from the default branch

  • ca9ea7c3 - [skip ci] Copy CODEOWNERS from the default branch

  • 29aa3e26 - [skip ci] Copy CODEOWNERS from the default branch

  • f6b3349a - [skip ci] Copy CODEOWNERS from the default branch

  • c133160a - [skip ci] Copy CODEOWNERS from the default branch

  • 495ab211 - [skip ci] Copy CODEOWNERS from the default branch

  • 29c3f474 - [skip ci] Copy CODEOWNERS from the default branch

  • 1327ab0b - [skip ci] Copy CODEOWNERS from the default branch

  • e29041b8 - [skip ci] Copy CODEOWNERS from the default branch

  • 8cdd5e86 - [skip ci] Copy CODEOWNERS from the default branch

  • bf2249de - [skip ci] Copy CODEOWNERS from the default branch

  • d04c0fa0 - [skip ci] Copy CODEOWNERS from the default branch

  • 1ec0f1c9 - [skip ci] Copy CODEOWNERS from the default branch

  • 0238cfb8 - [skip ci] Copy CODEOWNERS from the default branch

  • f428b4a2 - [skip ci] Copy CODEOWNERS from the default branch

  • 23944f1d - [skip ci] Copy CODEOWNERS from the default branch

  • 61e6fa60 - [skip ci] Copy CODEOWNERS from the default branch

  • cc315d24 - [skip ci] Copy CODEOWNERS from the default branch

  • b17fae65 - [skip ci] Copy CODEOWNERS from the default branch

  • 799a4798 - [skip ci] Copy CODEOWNERS from the default branch

  • e03d34a4 - [skip ci] Copy CODEOWNERS from the default branch

  • 6d8fc018 - [skip ci] Copy CODEOWNERS from the default branch

  • e17def72 - [skip ci] Copy CODEOWNERS from the default branch

  • 9e2cd086 - [skip ci] Copy CODEOWNERS from the default branch

  • 812e85c4 - [skip ci] Copy CODEOWNERS from the default branch

  • 47dc8ded - [skip ci] Copy CODEOWNERS from the default branch

  • 8700b8b8 - [skip ci] Copy CODEOWNERS from the default branch

  • 68241084 - [skip ci] Copy CODEOWNERS from the default branch

  • 55746933 - [skip ci] Copy CODEOWNERS from the default branch

  • 1aa59696 - [skip ci] Copy CODEOWNERS from the default branch

  • 12669c89 - [skip ci] Copy CODEOWNERS from the default branch

  • 3cd026a6 - [skip ci] Copy CODEOWNERS from the default branch

  • 5bae6ca7 - [skip ci] Copy CODEOWNERS from the default branch

  • 459789ed - [skip ci] Copy CODEOWNERS from the default branch

  • 7d9c8c26 - [skip ci] Copy CODEOWNERS from the default branch

  • 3f003df7 - [skip ci] Copy CODEOWNERS from the default branch

  • 2a44c926 - [skip ci] Copy CODEOWNERS from the default branch

  • 6ddf5d33 - [skip ci] Copy CODEOWNERS from the default branch

  • d329f7eb - [skip ci] Copy CODEOWNERS from the default branch

  • 9a722234 - [skip ci] Copy CODEOWNERS from the default branch

  • 97836fb2 - [skip ci] Copy CODEOWNERS from the default branch

  • e9232f50 - add aws-sdk bom instead of just core

  • e5506701 - unify versions of aws and azure sdks with ce-kafka

  • 664220bd - add correct version of tls_fips

  • 70c2d3e7 - add bcpkix to the pack

  • 1ee85034 - add version definitions of bouncycastle fips dependencies

  • 4f0ba3a2 - Update pom.xml

  • PR-604 - netty-bom version should be picked up from netty.version property

  • 5e9c5ab4 - add new line

  • 5099df8f - Fix codeowners

  • c6e03ed1 - Update bouncycastle version to 1.78

  • 4caab334 - replace EOL plugin with ant-run invocation

  • c2f222bf - update bouncycastle

  • e21ffc4e - revert #595 to remediate downstream build failures

  • e29ec833 - update netty to 4.1.108-final

  • 64ff93dc - Update pom.xml

  • 8d984cba - Version bump for Jackson Databind package

  • b59f48d2 - update zookeper to 3.8.4

  • ada22e3c - update netty to 4.1.108.Final

Kafka

  • PR-1364 - removed mk-include and make init-ci from semaphore

  • PR-1323 - Update refs to confluent-packaging-tools 3.4

  • PR-1262 - Upgrade zookeeper 3.8.3 -> 3.8.4 (#15480)

  • PR-1238 - Updated netty version to 4.1.108.Final

  • PR-1169 - update tags and added seamphore tags as part of semaphore migration 3.4

  • PR-14995 - Allow restricting File and Directory ConfigProviders to specific paths (#14995)

ksqlDB

  • PR-10365 - add cp-jar-build tasks when running pr workflows

  • 4781375c - Update ref to confluent-packaging-tools

  • e12817d4 - [skip ci] Copy CODEOWNERS from the default branch

  • d5a611b2 - [skip ci] Copy CODEOWNERS from the default branch

  • c0a5ceb7 - [skip ci] Copy CODEOWNERS from the default branch

  • 24fb159d - [skip ci] Copy CODEOWNERS from the default branch

  • 2edfb831 - [skip ci] Copy CODEOWNERS from the default branch

  • 70b4d119 - [skip ci] Copy CODEOWNERS from the default branch

  • db68a852 - [skip ci] Copy CODEOWNERS from the default branch

  • 22a7f2cc - [skip ci] Copy CODEOWNERS from the default branch

  • PR-10355 - MINOR: Update snapshot URLs.

  • PR-10346 - Merge Conflict Resolution (from 7.2.x to 7.3.x)

  • PR-10338 - fix for vertx dependency.

  • PR-10330 - Merge Conflict Resolution (from 7.2.x to 7.3.x)

  • PR-10329 - Merge Conflict Resolution (from 7.2.x to 7.3.x)

  • PR-10328 - Fix for janino dependency.

  • PR-10321 - Check if directory exists before cleanup 7.2.x

  • PR-10323 - Check if directory exists before cleanup 7.4.x

  • PR-10322 - Check if directory exists before cleanup 7.3.x

  • PR-10311 - Migrate 7.3.x to ranges

  • PR-10312 - Migrate 7.2.x to ranges

  • PR-10310 - Migrate 7.4.x to ranges

  • PR-10313 - Migrate 7.1.x to ranges

  • PR-10314 - Migrate 7.0.x to ranges

  • PR-10315 - Migrate 6.2.x to ranges

  • PR-10318 - Merge Conflict Resolution (from 7.3.x to 7.4.x)

  • PR-10317 - Merge Conflict Resolution (from 7.2.x to 7.3.x)

  • PR-10316 - Merge Conflict Resolution (from 7.1.x to 7.2.x)

  • PR-10304 - Update netty version to stable one

  • PR-10303 - Update netty version to stable one

  • PR-10294 - Update common version

REST Proxy

  • 774a275a - [skip ci] Copy CODEOWNERS from the default branch

  • 2f76a249 - [skip ci] Copy CODEOWNERS from the default branch

  • 3facf7f9 - [skip ci] Copy CODEOWNERS from the default branch

  • 4554dfe9 - [skip ci] Copy CODEOWNERS from the default branch

  • 4abee2fc - [skip ci] Copy CODEOWNERS from the default branch

  • 1a685495 - [skip ci] Copy CODEOWNERS from the default branch

  • c27f5683 - [skip ci] Copy CODEOWNERS from the default branch

  • 2a857aaa - [skip ci] Copy CODEOWNERS from the default branch

  • 886a5b87 - [skip ci] Copy CODEOWNERS from the default branch

  • c752dafa - [skip ci] Copy CODEOWNERS from the default branch

  • c439ed86 - [skip ci] Copy CODEOWNERS from the default branch

  • d56cdf08 - [skip ci] Copy CODEOWNERS from the default branch

  • 269ae5ce - [skip ci] Copy CODEOWNERS from the default branch

  • 649812b7 - [skip ci] Copy CODEOWNERS from the default branch

  • e23b1069 - [skip ci] Copy CODEOWNERS from the default branch

  • a48787a6 - [skip ci] Copy CODEOWNERS from the default branch

  • a555f83b - [skip ci] Copy CODEOWNERS from the default branch

  • 25a878bd - [skip ci] Copy CODEOWNERS from the default branch

  • 6b90e34d - [skip ci] Copy CODEOWNERS from the default branch

  • 52480dcd - [skip ci] Copy CODEOWNERS from the default branch

  • 4cba4ab3 - [skip ci] Copy CODEOWNERS from the default branch

  • 93eebbfe - [skip ci] Copy CODEOWNERS from the default branch

  • 16e9be7f - [skip ci] Copy CODEOWNERS from the default branch

  • 6e7fec5d - [skip ci] Copy CODEOWNERS from the default branch

  • 0eb00fb9 - [skip ci] Copy CODEOWNERS from the default branch

  • e69a6353 - [skip ci] Copy CODEOWNERS from the default branch

  • 3d5ebd5c - [skip ci] Copy CODEOWNERS from the default branch

  • 882de29e - [skip ci] Copy CODEOWNERS from the default branch

  • d6244bc5 - [skip ci] Copy CODEOWNERS from the default branch

  • a6eb93d8 - [skip ci] Copy CODEOWNERS from the default branch

  • 47cb7427 - [skip ci] Copy CODEOWNERS from the default branch

  • f75dec56 - [skip ci] Copy CODEOWNERS from the default branch

  • d2fa2ab6 - [skip ci] Copy CODEOWNERS from the default branch

  • 08ace774 - [skip ci] Copy CODEOWNERS from the default branch

  • d12e4ef0 - [skip ci] Copy CODEOWNERS from the default branch

  • b5e7597f - [skip ci] Copy CODEOWNERS from the default branch

  • 393c3171 - [skip ci] Copy CODEOWNERS from the default branch

  • 0bd46b13 - [skip ci] Copy CODEOWNERS from the default branch

  • 92cf9612 - [skip ci] Copy CODEOWNERS from the default branch

  • 87fe599c - [skip ci] Copy CODEOWNERS from the default branch

  • 23d0b6c8 - [skip ci] Copy CODEOWNERS from the default branch

  • 2cc87ba0 - [skip ci] Copy CODEOWNERS from the default branch

  • cedb3f53 - [skip ci] Copy CODEOWNERS from the default branch

  • f85ab60a - [skip ci] Copy CODEOWNERS from the default branch

  • f3579e99 - [skip ci] Copy CODEOWNERS from the default branch

  • fd35be2f - [skip ci] Copy CODEOWNERS from the default branch

  • eff691a1 - [skip ci] Copy CODEOWNERS from the default branch

  • 6813d52e - [skip ci] Copy CODEOWNERS from the default branch

  • e6cb79bb - [skip ci] Copy CODEOWNERS from the default branch

  • 94b22bbb - [skip ci] Copy CODEOWNERS from the default branch

  • b92d1e9c - [skip ci] Copy CODEOWNERS from the default branch

  • 064872a8 - [skip ci] Copy CODEOWNERS from the default branch

  • ac9cc7d7 - [skip ci] Copy CODEOWNERS from the default branch

  • fa5006bd - [skip ci] Copy CODEOWNERS from the default branch

  • 57c115c6 - [skip ci] Copy CODEOWNERS from the default branch

  • 8eeec592 - [skip ci] Copy CODEOWNERS from the default branch

  • 97afb2c5 - [skip ci] Copy CODEOWNERS from the default branch

  • 348fa979 - [skip ci] Copy CODEOWNERS from the default branch

  • f25f5030 - [skip ci] Copy CODEOWNERS from the default branch

  • 70083072 - [skip ci] Copy CODEOWNERS from the default branch

  • 20f66171 - [skip ci] Copy CODEOWNERS from the default branch

  • 87dcb105 - [skip ci] Copy CODEOWNERS from the default branch

  • e9d454e4 - [skip ci] Copy CODEOWNERS from the default branch

  • 9a486cd3 - [skip ci] Copy CODEOWNERS from the default branch

  • 773a53ed - [skip ci] Copy CODEOWNERS from the default branch

  • 36228772 - [skip ci] Copy CODEOWNERS from the default branch

  • 671a662e - [skip ci] Copy CODEOWNERS from the default branch

  • c32b44c0 - [skip ci] Copy CODEOWNERS from the default branch

  • 75e24bd7 - [skip ci] Copy CODEOWNERS from the default branch

  • b49d8bf7 - [skip ci] Copy CODEOWNERS from the default branch

  • 1506289e - [skip ci] Copy CODEOWNERS from the default branch

  • 96e37339 - [skip ci] Copy CODEOWNERS from the default branch

  • 545b2304 - [skip ci] Copy CODEOWNERS from the default branch

  • 7129dd13 - [skip ci] Copy CODEOWNERS from the default branch

  • fa40654f - [skip ci] Copy CODEOWNERS from the default branch

  • 7ff44938 - [skip ci] Copy CODEOWNERS from the default branch

  • 298d1ad8 - [skip ci] Copy CODEOWNERS from the default branch

  • ad0ca7d1 - [skip ci] Copy CODEOWNERS from the default branch

  • 242fdc5e - [skip ci] Copy CODEOWNERS from the default branch

  • f1527a52 - [skip ci] Copy CODEOWNERS from the default branch

  • 281d1c07 - [skip ci] Copy CODEOWNERS from the default branch

  • 18502365 - [skip ci] Copy CODEOWNERS from the default branch

  • 0412aec7 - [skip ci] Copy CODEOWNERS from the default branch

  • 93fe15a0 - [skip ci] Copy CODEOWNERS from the default branch

  • 1d4cfdc9 - [skip ci] Copy CODEOWNERS from the default branch

  • d61c01f6 - [skip ci] Copy CODEOWNERS from the default branch

  • e9e05a34 - [skip ci] Copy CODEOWNERS from the default branch

  • 72bbd1ba - [skip ci] Copy CODEOWNERS from the default branch

  • 9b2859f7 - [skip ci] Copy CODEOWNERS from the default branch

  • 984f9ebe - [skip ci] Copy CODEOWNERS from the default branch

  • e8c2397c - [skip ci] Copy CODEOWNERS from the default branch

  • 23654fb6 - [skip ci] Copy CODEOWNERS from the default branch

  • 52233121 - [skip ci] Copy CODEOWNERS from the default branch

  • 106a24a4 - [skip ci] Copy CODEOWNERS from the default branch

  • 1e820d71 - [skip ci] Copy CODEOWNERS from the default branch

  • a8593f20 - [skip ci] Copy CODEOWNERS from the default branch

  • b8d06800 - [skip ci] Copy CODEOWNERS from the default branch

  • bf7af88d - [skip ci] Copy CODEOWNERS from the default branch

  • 7d8a4273 - [skip ci] Copy CODEOWNERS from the default branch

  • 690700f6 - [skip ci] Copy CODEOWNERS from the default branch

  • 9c45f589 - [skip ci] Copy CODEOWNERS from the default branch

  • 2c84fdb8 - [skip ci] Copy CODEOWNERS from the default branch

  • e22120e2 - [skip ci] Copy CODEOWNERS from the default branch

  • 10d65d5a - [skip ci] Copy CODEOWNERS from the default branch

  • 5c0a489f - [skip ci] Copy CODEOWNERS from the default branch

  • dcdce23b - [skip ci] Copy CODEOWNERS from the default branch

  • 56c28056 - [skip ci] Copy CODEOWNERS from the default branch

  • acb411e7 - [skip ci] Copy CODEOWNERS from the default branch

  • 9809b9a4 - [skip ci] Copy CODEOWNERS from the default branch

  • 397d9ccb - [skip ci] Copy CODEOWNERS from the default branch

  • 1ac1b615 - [skip ci] Copy CODEOWNERS from the default branch

  • eb59efd6 - [skip ci] Copy CODEOWNERS from the default branch

  • 42532879 - [skip ci] Copy CODEOWNERS from the default branch

  • 28c6f5aa - [skip ci] Copy CODEOWNERS from the default branch

  • 25dd1fd2 - [skip ci] Copy CODEOWNERS from the default branch

  • d04cb214 - [skip ci] Copy CODEOWNERS from the default branch

  • 87b3fe2c - [skip ci] Copy CODEOWNERS from the default branch

  • d813536a - [skip ci] Copy CODEOWNERS from the default branch

  • 2960da0c - [skip ci] Copy CODEOWNERS from the default branch

  • 33859dad - [skip ci] Copy CODEOWNERS from the default branch

  • 164f769e - [skip ci] Copy CODEOWNERS from the default branch

  • 4a09142e - [skip ci] Copy CODEOWNERS from the default branch

  • 31c85eff - [skip ci] Copy CODEOWNERS from the default branch

  • babfde85 - [skip ci] Copy CODEOWNERS from the default branch

  • 105dff8c - [skip ci] Copy CODEOWNERS from the default branch

  • eab7db7d - [skip ci] Copy CODEOWNERS from the default branch

  • 3fae42c7 - [skip ci] Copy CODEOWNERS from the default branch

  • a2dbc03b - [skip ci] Copy CODEOWNERS from the default branch

  • 77364140 - [skip ci] Copy CODEOWNERS from the default branch

  • a67cdb63 - [skip ci] Copy CODEOWNERS from the default branch

  • 585f4c00 - [skip ci] Copy CODEOWNERS from the default branch

  • 6b72f354 - [skip ci] Copy CODEOWNERS from the default branch

  • 484eeda4 - [skip ci] Copy CODEOWNERS from the default branch

  • d80e01da - [skip ci] Copy CODEOWNERS from the default branch

  • 7d405e7c - [skip ci] Copy CODEOWNERS from the default branch

  • 17f39316 - [skip ci] Copy CODEOWNERS from the default branch

  • 6ffe0fb0 - [skip ci] Copy CODEOWNERS from the default branch

  • 2c04ab95 - [skip ci] Copy CODEOWNERS from the default branch

  • 092f3080 - [skip ci] Copy CODEOWNERS from the default branch

  • 2a60cc1d - [skip ci] Copy CODEOWNERS from the default branch

  • 4d603536 - [skip ci] Copy CODEOWNERS from the default branch

  • 9e5032a1 - [skip ci] Copy CODEOWNERS from the default branch

  • 2b072aaa - [skip ci] Copy CODEOWNERS from the default branch

  • 422e4220 - [skip ci] Copy CODEOWNERS from the default branch

  • 5f597920 - [skip ci] Copy CODEOWNERS from the default branch

  • 41bd2d15 - [skip ci] Copy CODEOWNERS from the default branch

  • 3a8c9c12 - [skip ci] Copy CODEOWNERS from the default branch

  • 65e1f1a5 - [skip ci] Copy CODEOWNERS from the default branch

  • 447c3f2e - [skip ci] Copy CODEOWNERS from the default branch

  • bc3ef444 - [skip ci] Copy CODEOWNERS from the default branch

  • ad938c69 - [skip ci] Copy CODEOWNERS from the default branch

  • 0a371184 - [skip ci] Copy CODEOWNERS from the default branch

  • f2e545c0 - [skip ci] Copy CODEOWNERS from the default branch

  • bba70807 - [skip ci] Copy CODEOWNERS from the default branch

  • 3f2657f7 - [skip ci] Copy CODEOWNERS from the default branch

  • f23ac904 - [skip ci] Copy CODEOWNERS from the default branch

  • 6f51c550 - [skip ci] Copy CODEOWNERS from the default branch

  • ed6e78eb - [skip ci] Copy CODEOWNERS from the default branch

  • dbc5874f - [skip ci] Copy CODEOWNERS from the default branch

  • 3363227c - [skip ci] Copy CODEOWNERS from the default branch

  • df562073 - [skip ci] Copy CODEOWNERS from the default branch

  • 2dca0656 - [skip ci] Copy CODEOWNERS from the default branch

  • cf22f710 - [skip ci] Copy CODEOWNERS from the default branch

  • 978f40e8 - [skip ci] Copy CODEOWNERS from the default branch

  • 28d996af - [skip ci] Copy CODEOWNERS from the default branch

  • aa256602 - [skip ci] Copy CODEOWNERS from the default branch

  • 3b2bebd3 - [skip ci] Copy CODEOWNERS from the default branch

  • 166bf231 - [skip ci] Copy CODEOWNERS from the default branch

  • 9674993c - Removing /tmp/confluent as the DSTDIR check from Makefile

  • f7da1047 - Checking if removing the comment helps this pass in the upstream build

  • 6b994366 - Disabling flakey test

  • 3ac1df6b - Fix flakey test similar to

  • a2297ef2 - [skip ci] Copy CODEOWNERS from the default branch

  • 651f40c4 - [skip ci] Copy CODEOWNERS from the default branch

  • 76e35b41 - [skip ci] Copy CODEOWNERS from the default branch

  • 33bac739 - [skip ci] Copy CODEOWNERS from the default branch

  • f1f413ce - [skip ci] Copy CODEOWNERS from the default branch

  • 5c62f5d1 - [skip ci] Copy CODEOWNERS from the default branch

  • b6536e06 - [skip ci] Copy CODEOWNERS from the default branch

  • 207d6e13 - [skip ci] Copy CODEOWNERS from the default branch

  • 5c8bba63 - [skip ci] Copy CODEOWNERS from the default branch

  • 5b880bf9 - [skip ci] Copy CODEOWNERS from the default branch

  • 65f9900a - [skip ci] Copy CODEOWNERS from the default branch

  • 218e7118 - [skip ci] Copy CODEOWNERS from the default branch

  • 4872ccee - [skip ci] Copy CODEOWNERS from the default branch

  • c278841a - [skip ci] Copy CODEOWNERS from the default branch

  • ae87efe5 - [skip ci] Copy CODEOWNERS from the default branch

  • c782d6df - [skip ci] Copy CODEOWNERS from the default branch

  • ab63e4bf - [skip ci] Copy CODEOWNERS from the default branch

  • e32252f7 - [skip ci] Copy CODEOWNERS from the default branch

  • 4b0825aa - [skip ci] Copy CODEOWNERS from the default branch

  • c712a7b6 - [skip ci] Copy CODEOWNERS from the default branch

  • 5a865ad1 - [skip ci] Copy CODEOWNERS from the default branch

  • 6d5db24c - [skip ci] Copy CODEOWNERS from the default branch

  • 89b92bd2 - [skip ci] Copy CODEOWNERS from the default branch

  • ad5830c8 - [skip ci] Copy CODEOWNERS from the default branch

  • 9905c26a - [skip ci] Copy CODEOWNERS from the default branch

  • 74ab9454 - [skip ci] Copy CODEOWNERS from the default branch

  • 2e88469c - [skip ci] Copy CODEOWNERS from the default branch

  • 60a62854 - [skip ci] Copy CODEOWNERS from the default branch

  • 53a84c75 - [skip ci] Copy CODEOWNERS from the default branch

  • 86859186 - [skip ci] Copy CODEOWNERS from the default branch

  • c679c697 - [skip ci] Copy CODEOWNERS from the default branch

  • c98d6ca5 - [skip ci] Copy CODEOWNERS from the default branch

  • f54b5869 - [skip ci] Copy CODEOWNERS from the default branch

  • 82b88384 - [skip ci] Copy CODEOWNERS from the default branch

  • 8e2dd726 - [skip ci] Copy CODEOWNERS from the default branch

  • 5c328be7 - [skip ci] Copy CODEOWNERS from the default branch

  • a113fa42 - [skip ci] Copy CODEOWNERS from the default branch

  • 1a593b91 - [skip ci] Copy CODEOWNERS from the default branch

  • 776697e6 - [skip ci] Copy CODEOWNERS from the default branch

  • 624fe9e4 - [skip ci] Copy CODEOWNERS from the default branch

  • 87036a01 - [skip ci] Copy CODEOWNERS from the default branch

  • f38d54a5 - [skip ci] Copy CODEOWNERS from the default branch

  • 9c7ff08b - [skip ci] Copy CODEOWNERS from the default branch

  • 19196fdf - [skip ci] Copy CODEOWNERS from the default branch

  • da00d80b - [skip ci] Copy CODEOWNERS from the default branch

  • 280aae15 - [skip ci] Copy CODEOWNERS from the default branch

  • f3ccff55 - [skip ci] Copy CODEOWNERS from the default branch

  • ae43c59c - [skip ci] Copy CODEOWNERS from the default branch

  • 3c753719 - [skip ci] Copy CODEOWNERS from the default branch

  • ef0265b2 - [skip ci] Copy CODEOWNERS from the default branch

  • 855a3f92 - [skip ci] Copy CODEOWNERS from the default branch

  • 2c0bd775 - [skip ci] Copy CODEOWNERS from the default branch

  • ccd4c3ff - [skip ci] Copy CODEOWNERS from the default branch

  • 611dfcc1 - [skip ci] Copy CODEOWNERS from the default branch

  • 718c96af - [skip ci] Copy CODEOWNERS from the default branch

  • adde81bc - [skip ci] Copy CODEOWNERS from the default branch

  • c7def207 - [skip ci] Copy CODEOWNERS from the default branch

  • bcbca6f3 - [skip ci] Copy CODEOWNERS from the default branch

  • fd8daf34 - [skip ci] Copy CODEOWNERS from the default branch

  • c8415273 - [skip ci] Copy CODEOWNERS from the default branch

  • 2fbb320f - [skip ci] Copy CODEOWNERS from the default branch

  • 61ae4210 - [skip ci] Copy CODEOWNERS from the default branch

  • 1549a733 - [skip ci] Copy CODEOWNERS from the default branch

  • 0234a19e - [skip ci] Copy CODEOWNERS from the default branch

  • 4b905680 - [skip ci] Copy CODEOWNERS from the default branch

  • 4b4879f9 - [skip ci] Copy CODEOWNERS from the default branch

  • fc07f523 - [skip ci] Copy CODEOWNERS from the default branch

  • fcac05cc - [skip ci] Copy CODEOWNERS from the default branch

  • 5a863941 - [skip ci] Copy CODEOWNERS from the default branch

  • 0c68cb91 - [skip ci] Copy CODEOWNERS from the default branch

  • f6e07609 - [skip ci] Copy CODEOWNERS from the default branch

  • 7bc4eb1d - [skip ci] Copy CODEOWNERS from the default branch

  • b99068e4 - [skip ci] Copy CODEOWNERS from the default branch

  • d0954367 - [skip ci] Copy CODEOWNERS from the default branch

  • 0a58c76a - [skip ci] Copy CODEOWNERS from the default branch

  • a552df85 - [skip ci] Copy CODEOWNERS from the default branch

  • 44629de2 - [skip ci] Copy CODEOWNERS from the default branch

  • e48e59f7 - [skip ci] Copy CODEOWNERS from the default branch

  • 38ab6618 - [skip ci] Copy CODEOWNERS from the default branch

  • 531668ac - [skip ci] Copy CODEOWNERS from the default branch

  • e70d2084 - [skip ci] Copy CODEOWNERS from the default branch

  • fc97d1d2 - [skip ci] Copy CODEOWNERS from the default branch

  • c6b58d0c - [skip ci] Copy CODEOWNERS from the default branch

  • 264002d6 - [skip ci] Copy CODEOWNERS from the default branch

  • 65b47b1b - [skip ci] Copy CODEOWNERS from the default branch

  • 0961d44c - [skip ci] Copy CODEOWNERS from the default branch

  • fe0e4319 - [skip ci] Copy CODEOWNERS from the default branch

  • 6ece1e71 - [skip ci] Copy CODEOWNERS from the default branch

  • 63e16f69 - [skip ci] Copy CODEOWNERS from the default branch

  • a1421f92 - [skip ci] Copy CODEOWNERS from the default branch

  • 0bb5993b - [skip ci] Copy CODEOWNERS from the default branch

  • 2ce35d18 - [skip ci] Copy CODEOWNERS from the default branch

  • 92b470e2 - [skip ci] Copy CODEOWNERS from the default branch

  • 6e3e59aa - [skip ci] Copy CODEOWNERS from the default branch

  • 9af44114 - [skip ci] Copy CODEOWNERS from the default branch

  • e4e51111 - [skip ci] Copy CODEOWNERS from the default branch

  • d451937c - [skip ci] Copy CODEOWNERS from the default branch

  • e10cc47e - [skip ci] Copy CODEOWNERS from the default branch

  • bc74f98d - [skip ci] Copy CODEOWNERS from the default branch

  • bbc9e470 - [skip ci] Copy CODEOWNERS from the default branch

  • e8b39d23 - [skip ci] Copy CODEOWNERS from the default branch

  • d95c69bf - [skip ci] Copy CODEOWNERS from the default branch

  • bcb4ab33 - [skip ci] Copy CODEOWNERS from the default branch

  • f6c17454 - [skip ci] Copy CODEOWNERS from the default branch

  • 79b1c2b9 - [skip ci] Copy CODEOWNERS from the default branch

  • 261756df - [skip ci] Copy CODEOWNERS from the default branch

  • e25becd7 - [skip ci] Copy CODEOWNERS from the default branch

  • 7cba7835 - [skip ci] Copy CODEOWNERS from the default branch

  • 46b43fcc - [skip ci] Copy CODEOWNERS from the default branch

  • e7096662 - [skip ci] Copy CODEOWNERS from the default branch

  • 832238d1 - [skip ci] Copy CODEOWNERS from the default branch

  • a9cc866e - [skip ci] Copy CODEOWNERS from the default branch

  • 8497b008 - [skip ci] Copy CODEOWNERS from the default branch

  • 66222b44 - [skip ci] Copy CODEOWNERS from the default branch

  • 0ceb19d9 - [skip ci] Copy CODEOWNERS from the default branch

  • a9c9c07c - [skip ci] Copy CODEOWNERS from the default branch

  • 8a6e8125 - [skip ci] Copy CODEOWNERS from the default branch

  • 6c871751 - [skip ci] Copy CODEOWNERS from the default branch

  • ef6f3b5b - [skip ci] Copy CODEOWNERS from the default branch

  • a931e891 - [skip ci] Copy CODEOWNERS from the default branch

  • b17d2f4f - [skip ci] Copy CODEOWNERS from the default branch

  • 67391bbf - [skip ci] Copy CODEOWNERS from the default branch

  • 84ff0461 - [skip ci] Copy CODEOWNERS from the default branch

  • 2742dbc0 - [skip ci] Copy CODEOWNERS from the default branch

  • 63020b73 - [skip ci] Copy CODEOWNERS from the default branch

  • 605fef38 - [skip ci] Copy CODEOWNERS from the default branch

  • 212207b3 - [skip ci] Copy CODEOWNERS from the default branch

  • 81ffa922 - [skip ci] Copy CODEOWNERS from the default branch

  • 9de1ae76 - [skip ci] Copy CODEOWNERS from the default branch

  • f230d01d - [skip ci] Copy CODEOWNERS from the default branch

  • d8161abf - [skip ci] Copy CODEOWNERS from the default branch

  • 33e3fd19 - [skip ci] Copy CODEOWNERS from the default branch

  • 8bab397c - [skip ci] Copy CODEOWNERS from the default branch

  • 4d0c897c - [skip ci] Copy CODEOWNERS from the default branch

  • 56ade566 - [skip ci] Copy CODEOWNERS from the default branch

  • 610d46ce - [skip ci] Copy CODEOWNERS from the default branch

  • 7515dada - [skip ci] Copy CODEOWNERS from the default branch

  • 0982fd7c - [skip ci] Copy CODEOWNERS from the default branch

  • c0f5c52e - [skip ci] Copy CODEOWNERS from the default branch

  • 64cc2ea1 - [skip ci] Copy CODEOWNERS from the default branch

  • e89fd8e6 - [skip ci] Copy CODEOWNERS from the default branch

  • a5f01619 - [skip ci] Copy CODEOWNERS from the default branch

  • e89907a3 - [skip ci] Copy CODEOWNERS from the default branch

  • 1ffb1e9a - [skip ci] Copy CODEOWNERS from the default branch

  • 02b448a5 - [skip ci] Copy CODEOWNERS from the default branch

  • 6f198a06 - [skip ci] Copy CODEOWNERS from the default branch

  • 75fef45f - [skip ci] Copy CODEOWNERS from the default branch

  • 75bd69c5 - [skip ci] Copy CODEOWNERS from the default branch

  • da298ea9 - [skip ci] Copy CODEOWNERS from the default branch

  • 9a93de46 - [skip ci] Copy CODEOWNERS from the default branch

  • 1332b4dd - [skip ci] Copy CODEOWNERS from the default branch

  • 3e4d40cb - [skip ci] Copy CODEOWNERS from the default branch

  • 1d82ebb3 - [skip ci] Copy CODEOWNERS from the default branch

  • b0736e52 - [skip ci] Copy CODEOWNERS from the default branch

  • 38128cc3 - [skip ci] Copy CODEOWNERS from the default branch

  • bdafc89e - [skip ci] Copy CODEOWNERS from the default branch

  • a95839e4 - [skip ci] Copy CODEOWNERS from the default branch

  • 7a6754dc - [skip ci] Copy CODEOWNERS from the default branch

  • 7a9a85bf - [skip ci] Copy CODEOWNERS from the default branch

  • 82c25098 - [skip ci] Copy CODEOWNERS from the default branch

  • d7c96d1e - [skip ci] Copy CODEOWNERS from the default branch

  • f46091f9 - [skip ci] Copy CODEOWNERS from the default branch

  • fd4b3181 - [skip ci] Copy CODEOWNERS from the default branch

  • 79345bb0 - [skip ci] Copy CODEOWNERS from the default branch

  • d9fcedd3 - [skip ci] Copy CODEOWNERS from the default branch

  • 338182a1 - [skip ci] Copy CODEOWNERS from the default branch

  • 11c8d4f6 - [skip ci] Copy CODEOWNERS from the default branch

  • 0b632a37 - [skip ci] Copy CODEOWNERS from the default branch

Schema Registry

  • 7917b812 - Fix dek search

  • eb059309 - Fix comparator for DataEncryptionKeyId

  • c025d150 - Fix comparator for DataEncryptionKeyId

  • 07ea0e03 - Add DekRegistry to SR properties for easier access

  • 79947071 - Cache checkpoint for cacheInitialized before reader thread starts

  • b862eb19 - fix merge issue

  • 6a9d6e22 - Fix Protobuf custom option for single-entry map

  • 2d3c4736 - Revert “do not reinstantiate objectmapper as it’s expensive (#2686) (#2695)”

  • cdf34e52 - Fix deserialization of Avro unions with logical types

  • 0e4552fe - [skip ci] Copy CODEOWNERS from the default branch

  • be973d31 - [skip ci] Copy CODEOWNERS from the default branch

  • 3d20da54 - [skip ci] Copy CODEOWNERS from the default branch

  • cfc91482 - [skip ci] Copy CODEOWNERS from the default branch

  • b6b122d1 - [skip ci] Copy CODEOWNERS from the default branch

  • de2dd7a1 - [skip ci] Copy CODEOWNERS from the default branch

  • a26607ff - [skip ci] Copy CODEOWNERS from the default branch

  • fff14afd - [skip ci] Copy CODEOWNERS from the default branch

  • 65f9cbae - [skip ci] Copy CODEOWNERS from the default branch

  • 0a19a7ec - [skip ci] Copy CODEOWNERS from the default branch

  • 1c67c003 - [skip ci] Copy CODEOWNERS from the default branch

  • 21ab9974 - [skip ci] Copy CODEOWNERS from the default branch

  • f1d74be3 - [skip ci] Copy CODEOWNERS from the default branch

  • 57dcb51d - [skip ci] Copy CODEOWNERS from the default branch

  • cc1b888a - [skip ci] Copy CODEOWNERS from the default branch

  • 3cca8c8e - [skip ci] Copy CODEOWNERS from the default branch

  • e6415268 - [skip ci] Copy CODEOWNERS from the default branch

  • be8789c8 - [skip ci] Copy CODEOWNERS from the default branch

  • d51dadef - [skip ci] Copy CODEOWNERS from the default branch

  • 053ffc65 - [skip ci] Copy CODEOWNERS from the default branch

  • 48f95eab - [skip ci] Copy CODEOWNERS from the default branch

  • 9fb80938 - [skip ci] Copy CODEOWNERS from the default branch

  • d666957e - [skip ci] Copy CODEOWNERS from the default branch

  • 7e1384c1 - [skip ci] Copy CODEOWNERS from the default branch

  • 3807e0b1 - [skip ci] Copy CODEOWNERS from the default branch

  • db0d92da - [skip ci] Copy CODEOWNERS from the default branch

  • f58b9a44 - [skip ci] Copy CODEOWNERS from the default branch

  • c9bfdf85 - [skip ci] Copy CODEOWNERS from the default branch

  • 44053962 - [skip ci] Copy CODEOWNERS from the default branch

  • e919a53a - [skip ci] Copy CODEOWNERS from the default branch

  • 3b139777 - [skip ci] Copy CODEOWNERS from the default branch

  • 1f8e55ec - [skip ci] Copy CODEOWNERS from the default branch

  • 315a93f0 - [skip ci] Copy CODEOWNERS from the default branch

  • 87f176c6 - [skip ci] Copy CODEOWNERS from the default branch

  • c2ea7f63 - [skip ci] Copy CODEOWNERS from the default branch

  • c4583749 - [skip ci] Copy CODEOWNERS from the default branch

  • 9338e69f - [skip ci] Copy CODEOWNERS from the default branch

  • 1c81c926 - [skip ci] Copy CODEOWNERS from the default branch

  • fc42617c - [skip ci] Copy CODEOWNERS from the default branch

  • 46ef3a10 - [skip ci] Copy CODEOWNERS from the default branch

  • 2fbc38dc - [skip ci] Copy CODEOWNERS from the default branch

  • 9b568526 - [skip ci] Copy CODEOWNERS from the default branch

  • b6df6407 - [skip ci] Copy CODEOWNERS from the default branch

  • 59ebf04b - [skip ci] Copy CODEOWNERS from the default branch

  • d9034596 - [skip ci] Copy CODEOWNERS from the default branch

  • 3b4269c7 - [skip ci] Copy CODEOWNERS from the default branch

  • ddfcc5a6 - [skip ci] Copy CODEOWNERS from the default branch

  • 070fdd65 - [skip ci] Copy CODEOWNERS from the default branch

  • b60a8b91 - [skip ci] Copy CODEOWNERS from the default branch

  • 48553994 - [skip ci] Copy CODEOWNERS from the default branch

  • b5d123c0 - [skip ci] Copy CODEOWNERS from the default branch

  • 7ed17673 - [skip ci] Copy CODEOWNERS from the default branch

  • e3dbf432 - [skip ci] Copy CODEOWNERS from the default branch

  • a46c233b - [skip ci] Copy CODEOWNERS from the default branch

  • cd927005 - [skip ci] Copy CODEOWNERS from the default branch

  • d85eb75d - [skip ci] Copy CODEOWNERS from the default branch

  • ebebe49c - [skip ci] Copy CODEOWNERS from the default branch

  • 7d051458 - [skip ci] Copy CODEOWNERS from the default branch

  • 7184dd8b - [skip ci] Copy CODEOWNERS from the default branch

  • 05b2fb73 - [skip ci] Copy CODEOWNERS from the default branch

  • d6c639a9 - [skip ci] Copy CODEOWNERS from the default branch

  • 0ed0b521 - [skip ci] Copy CODEOWNERS from the default branch

  • 99c7c7e7 - [skip ci] Copy CODEOWNERS from the default branch

  • 336d8daf - [skip ci] Copy CODEOWNERS from the default branch

  • 64a2fa5c - [skip ci] Copy CODEOWNERS from the default branch

  • 9dd607a4 - [skip ci] Copy CODEOWNERS from the default branch

  • 85a6c0cf - [skip ci] Copy CODEOWNERS from the default branch

  • babc9618 - [skip ci] Copy CODEOWNERS from the default branch

  • 2e7d8d90 - [skip ci] Copy CODEOWNERS from the default branch

  • 0ea0881b - [skip ci] Copy CODEOWNERS from the default branch

  • 8906b866 - [skip ci] Copy CODEOWNERS from the default branch

  • 85a686de - [skip ci] Copy CODEOWNERS from the default branch

  • 20edd638 - [skip ci] Copy CODEOWNERS from the default branch

  • 8f58bf4a - [skip ci] Copy CODEOWNERS from the default branch

  • 2c0e8d1e - [skip ci] Copy CODEOWNERS from the default branch

  • 9006d494 - [skip ci] Copy CODEOWNERS from the default branch

  • f266e7b3 - [skip ci] Copy CODEOWNERS from the default branch

  • 0c451364 - [skip ci] Copy CODEOWNERS from the default branch

  • d9b6a7b7 - [skip ci] Copy CODEOWNERS from the default branch

  • 697c92a3 - [skip ci] Copy CODEOWNERS from the default branch

  • 87e39d99 - [skip ci] Copy CODEOWNERS from the default branch

  • 6f592077 - [skip ci] Copy CODEOWNERS from the default branch

  • 568c3c9c - [skip ci] Copy CODEOWNERS from the default branch

  • 55572bc9 - [skip ci] Copy CODEOWNERS from the default branch

  • f795cfdd - [skip ci] Copy CODEOWNERS from the default branch

  • 79fca338 - [skip ci] Copy CODEOWNERS from the default branch

  • 4fbc5a0b - [skip ci] Copy CODEOWNERS from the default branch

  • 4e14f53f - [skip ci] Copy CODEOWNERS from the default branch

  • 1f979acc - [skip ci] Copy CODEOWNERS from the default branch

  • 7bc6f359 - [skip ci] Copy CODEOWNERS from the default branch

  • fcf7aa68 - [skip ci] Copy CODEOWNERS from the default branch

  • aba7c810 - [skip ci] Copy CODEOWNERS from the default branch

  • 809080e6 - [skip ci] Copy CODEOWNERS from the default branch

  • d4aa15e6 - [skip ci] Copy CODEOWNERS from the default branch

  • 385ec04e - [skip ci] Copy CODEOWNERS from the default branch

  • 54610aae - [skip ci] Copy CODEOWNERS from the default branch

  • 88f3532c - [skip ci] Copy CODEOWNERS from the default branch

  • 7762ec8c - [skip ci] Copy CODEOWNERS from the default branch

  • fde9940a - [skip ci] Copy CODEOWNERS from the default branch

  • a7cd7bd3 - [skip ci] Copy CODEOWNERS from the default branch

  • d365a238 - [skip ci] Copy CODEOWNERS from the default branch

  • 979935fa - [skip ci] Copy CODEOWNERS from the default branch

  • 52b6315b - [skip ci] Copy CODEOWNERS from the default branch

  • 5a6640b3 - [skip ci] Copy CODEOWNERS from the default branch

  • 148cebf7 - [skip ci] Copy CODEOWNERS from the default branch

  • 25c7e31e - [skip ci] Copy CODEOWNERS from the default branch

  • b604f8f1 - [skip ci] Copy CODEOWNERS from the default branch

  • cbb507b5 - [skip ci] Copy CODEOWNERS from the default branch

  • e4d12664 - [skip ci] Copy CODEOWNERS from the default branch

  • f29827d0 - [skip ci] Copy CODEOWNERS from the default branch

  • 2976d5f2 - [skip ci] Copy CODEOWNERS from the default branch

  • e0492a62 - [skip ci] Copy CODEOWNERS from the default branch

  • b109d01f - [skip ci] Copy CODEOWNERS from the default branch

  • 41fb4c4e - [skip ci] Copy CODEOWNERS from the default branch

  • 448c2e7d - [skip ci] Copy CODEOWNERS from the default branch

  • e09a3f27 - [skip ci] Copy CODEOWNERS from the default branch

  • 5f17cc99 - [skip ci] Copy CODEOWNERS from the default branch

  • b682add5 - [skip ci] Copy CODEOWNERS from the default branch

  • 83018694 - [skip ci] Copy CODEOWNERS from the default branch

  • 2ada8010 - [skip ci] Copy CODEOWNERS from the default branch

  • 17d1911e - [skip ci] Copy CODEOWNERS from the default branch

  • 3532d7fd - [skip ci] Copy CODEOWNERS from the default branch

  • 075ef6e7 - [skip ci] Copy CODEOWNERS from the default branch

  • 48b2c056 - [skip ci] Copy CODEOWNERS from the default branch

  • 3505dab8 - [skip ci] Copy CODEOWNERS from the default branch

  • a38799c5 - [skip ci] Copy CODEOWNERS from the default branch

  • 040d788d - [skip ci] Copy CODEOWNERS from the default branch

  • c3df6822 - [skip ci] Copy CODEOWNERS from the default branch

  • 715dd1a5 - [skip ci] Copy CODEOWNERS from the default branch

  • b60bcd82 - [skip ci] Copy CODEOWNERS from the default branch

  • 9544e2f4 - [skip ci] Copy CODEOWNERS from the default branch

  • 822e09d4 - [skip ci] Copy CODEOWNERS from the default branch

  • 5491f42f - [skip ci] Copy CODEOWNERS from the default branch

  • ebe31fd9 - [skip ci] Copy CODEOWNERS from the default branch

  • d1407b91 - [skip ci] Copy CODEOWNERS from the default branch

  • d71c4cf0 - [skip ci] Copy CODEOWNERS from the default branch

  • 08118171 - [skip ci] Copy CODEOWNERS from the default branch

  • 4ac1cac3 - [skip ci] Copy CODEOWNERS from the default branch

  • a90d3299 - [skip ci] Copy CODEOWNERS from the default branch

  • 823b5bb4 - [skip ci] Copy CODEOWNERS from the default branch

  • c5558b8a - [skip ci] Copy CODEOWNERS from the default branch

  • 6b962a95 - [skip ci] Copy CODEOWNERS from the default branch

  • fb07b501 - [skip ci] Copy CODEOWNERS from the default branch

  • e6eed195 - [skip ci] Copy CODEOWNERS from the default branch

  • 57da7b81 - [skip ci] Copy CODEOWNERS from the default branch

  • 9a0fac41 - [skip ci] Copy CODEOWNERS from the default branch

  • 2c70ff4d - [skip ci] Copy CODEOWNERS from the default branch

  • dc54354e - [skip ci] Copy CODEOWNERS from the default branch

  • edbe009a - [skip ci] Copy CODEOWNERS from the default branch

  • 228193cf - [skip ci] Copy CODEOWNERS from the default branch

  • 0c3d40dc - [skip ci] Copy CODEOWNERS from the default branch

  • 79ec0638 - [skip ci] Copy CODEOWNERS from the default branch

  • 5a02cb97 - [skip ci] Copy CODEOWNERS from the default branch

  • eafb0d45 - [skip ci] Copy CODEOWNERS from the default branch

  • 1d031141 - [skip ci] Copy CODEOWNERS from the default branch

  • f5726d05 - [skip ci] Copy CODEOWNERS from the default branch

  • 30d1b76f - [skip ci] Copy CODEOWNERS from the default branch

  • 434730c1 - [skip ci] Copy CODEOWNERS from the default branch

  • 8f83e416 - [skip ci] Copy CODEOWNERS from the default branch

  • bfeba831 - [skip ci] Copy CODEOWNERS from the default branch

  • fd35b90e - [skip ci] Copy CODEOWNERS from the default branch

  • 41447b05 - [skip ci] Copy CODEOWNERS from the default branch

  • d4e486a1 - [skip ci] Copy CODEOWNERS from the default branch

  • 966c6d3f - [skip ci] Copy CODEOWNERS from the default branch

  • 01585c10 - [skip ci] Copy CODEOWNERS from the default branch

  • 4dd9d4d5 - [skip ci] Copy CODEOWNERS from the default branch

  • f2d717da - [skip ci] Copy CODEOWNERS from the default branch

  • 285302b2 - [skip ci] Copy CODEOWNERS from the default branch

  • 75f07a5f - update azure-identity

  • 2c980a77 - More robust usage of ServiceLoader

  • 79d50b79 - Add comment

  • 2c6c783c - Enhance Avro error with type name

  • f98a7075 - Fix checkstyle

  • d81d0f49 - Unwrap IllegalStateException if possible

  • fdc39bff - Fix handleDeleteSubject to pass right oldSchemaValue

  • de17bc6e - Support passing keystore/truststore to Vault KMS client

  • PR-3110 - Revert jackson to 2.14.2

  • 57308f0b - upgrade jackson package to fix build

  • c3520a33 - Removing /tmp/confluent as the DSTDIR check from Makefile

  • PR-3098 - Fix build due to Jackson upgrade to 2.16.2

  • fa9545cc - Ensure consistent lookup of rule params

  • b36c62ae - Support const in JSONSchemaConverter

  • 2c32a50d - Refactor storage value to entity conversions

  • 8eeaf335 - Add disabled override

  • 93d8d2f8 - Allow rule onFailure/onSuccess to be overriden by rule type

  • 4d377d80 - Allow rule onFailure/onSuccess to be overriden via props

  • af548bf0 - Update Apache commons-compress to 1.26.1

  • c0cbc3c8 - Add test

  • fce6aaf6 - Ensure sensitive values are decoded during listVersionsForId

  • 01d8b72b - Fix NPE in deser when use.latest=true and RecordNameStrategy

  • aab7e57f - Scrub Avro namespace when scrub.invalid.names=true

Version 7.4.5

Released April 2024

Community Features

Common

  • 4fb11814 - Remove auto-generated CODEOWNERS. It’s inaccurate.

  • 52b0f806 - Remove CODEOWNERS file

  • 7a96a215 - Add service.yml

  • c4b849a5 - update jose4j

  • 4c8d3021 - update jetty to 9.4.54

  • PR-581 - fix: no implicit activation of docker-arm profile

  • PR-563 - added a new docker-arm profile to build docker containers in arm64

Kafka

  • PR-1126 - Update jose4j to 0.9.4 (#15284)

  • PR-1074 - Update jetty to 9.4.54.v20240208

  • PR-1016 - update bcprov-jdk15on for the CVE in this jira

  • PR-15177 - Checkpoint restored offsets instead of written offsets (#15177)

ksqlDB

  • PR-10243 - Update Commons-Compress and commons-io

  • PR-10238 - Update apache.io.version

  • PR-10237 - Update commons-compress

  • PR-10223 - Change groupID to a more secure name

  • 2f84873b - Change groupID to a more secure name

  • 5612f336 - Increase execution time limit to 6 hours.

  • PR-10198 - Set timeout to 6 hours on branches starting on 7.3.x

  • 30544a65 - Cherry pick the replacement of easymock to mockito from newer branches.

  • PR-10195 - Add pinned nano version for common on 7.3.x

  • PR-10196 - Add pinned nano version for common for 7.4.x

  • f969d5c0 - Enable pinned nanoversions.

  • b49bbcbb - Specify type parameter for CommandStatus.

  • c7288dd0 - Remove maven cache restore.

  • cea27ec9 - set java version to 8

  • cd59a75a - Increase the execution time limit.

  • 26db19fd - Fixed the extra args in service.yml file.

  • PR-10189 - fix: configure KsqlBoundedMemoryConfigSetter in StandaloneExecutor mode

  • PR-10175 - fix: configure KsqlBoundedMemoryConfigSetter in StandaloneExecutor mode

  • PR-10178 - fix: configure KsqlBoundedMemoryConfigSetter in StandaloneExecutor mode

  • 37e06168 - Fix the parent version in commons.

  • 5467ea20 - set java version to 8

  • 0a1cf171 - Increase the execution time limit.

  • db81cd09 - Fixed the extra args in service.yml file.

REST Proxy

  • PR-1250 - Allow to set KafkaAvroSerializerConfig in KafkaRestConfig (#1229)

  • PR-1235 - Deflake KafkaConsumerManagerTest.testBackoffMsControlsPollCalls test

  • PR-1236 - disable flakey test

Schema Registry

  • PR-3059 - fix: nested schemas were not considered in matching the correct Json Union schema

  • 38e98145 - Handle nulls in enum in JSON Schema converter

  • c84f735e - Update client/src/main/java/io/confluent/kafka/schemaregistry/rules/RuleContext.java

  • PR-3038 - feat: Added ReferenceSchema support to allOf

  • 2808930e - Add test to register same schema with no ID in IMPORT mode

  • ae0e3140 - fix: invalid behaviour for stringSchema in allOfToConnectSchema

  • 6dcb41f7 - Fix tests

  • 6a138838 - Allow exact same schema to be re-imported

  • ff5b2158 - Add support for CONDITION with CEL_FIELD

  • 22f36f3f - Optimization: cache Tink primitives

  • 8b8eebe0 - Fix checkstyle

  • 1063bb4c - Add check for FieldRuleExecutor

  • bc194452 - Add a CEL test with a tags expr in the guard

  • ff0b820b - Ensure specific Avro type is setup during configure

  • 6df56c8f - Optimization: remove known deps from ProtobufSchema

  • 16214b96 - Re-add schema parameter that was dropped during refactor

  • PR-3012 - Minor: Apply service bot changes to earlier branches

  • 306dd5c5 - Add error message for PACKAGE_CHANGED

  • 2861cd88 - Fix checkstyle

  • abbab267 - Ensure package change for Protobuf is incompatible

  • aed3b7d5 - Ensure correct GenericData is used

  • 26569386 - Optimization: remove extraneous KekInfo/DekInfo classes

  • be5c571b - Improve parameter handling in FieldEncryptionExecutor

  • 3bd1cdd5 - update common-compress

  • 77f4ed97 - Ensure Vault namespace is being passed

  • 98ffc914 - update azure-identity to match the version used in ce-kafka

  • 2ef767e3 - Fix merge issue for wire upgrade

  • 7684230c - Update pom.xml

  • 177af0d0 - Add Protobuf compat check for moving field into existing oneOf

  • 82f51da1 - Support older versions of Tink library

  • bbe261f4 - exclude okio

  • 28d86634 - Don’t prefix KEK names with the context in the ContextFilter

  • 0cb664f1 - Fix sharedKeys cache to account for multiple use of kms key ID

  • PR-2943 - Update Bouncycastle dependencies

  • d08a0978 - fix NPE when value is nil when print.schema.ids=true is set

  • 9408a386 - Improve err msg

  • df7effb2 - Handle alreadyExists in putKek

  • 87ca438c - Cache shared KEKs in DEK Registry

  • PR-2937 - Added num_keks_shared metric

  • 13848a40 - Improve the performance of invalid name scrubbing

  • 0bdb81e7 - Omit decrypted DEK when registering DEK in IMPORT mode

  • 0eb5a631 - Allow JSONata exprs to be used for CONDITION rules

  • 85a9e53c - Also support allOf to singleton; add tests

  • 26a3423e - Ensure logicalType flag passed to ReflectData

  • 414ce79f - Better handling of JSON Schema singleton combined types

Version 7.4.4

Released December 2023

Community Features

Common

  • e99d8b1a - exclude logback-core and logback-classic in line with the changes in kafka-rest

  • eb200670 - update zookeeper component to match version in ce-kafka

  • 0c034e86 - re-add dependencymanagement sections for old bouncycastle to satisfy downstream validation

  • 33734c5f - add additional version definition to ease the update of the downstream repos

  • 8e71caf2 - update bouncycastle

Kafka

  • 6dcc125b - CONFLUENT: Bump ZK to 3.8.3 for 7.4.x

  • PR-990 - KSECURITY-2090: Updated bcpkix version to 1.77

  • PR-14635 - KAFKA-15755: LeaveGroupResponse v0 - v2 loses its member under certain error conditions (#14635)

  • PR-14617 - KAFKA-15602: revert KAFKA-4852 (#14617)

  • PR-13315 - KAFKA-14767: Fix missing commitId build error after git gc (#13315)

  • PR-14539 - KAFKA-15378: fix streams upgrade system test (#14539)

  • PR-14438 - Upgrade Jetty to 9.4.52.v20230823 (#14438)

  • PR-14445 - KAFKA-15502: Update SslEngineValidator to handle large stores (#14445)

  • PR-14367 - KAFKA-15450 Don’t allow ZK migration with JBOD (#14367)

  • PR-14221 - KAFKA-15338: The metric group documentation for metrics added in KAFKA-13945 is incorrect (#14221)

  • 6624d070 - KAFKA-15375: fix broken clean shutdown detection logic in LogManager

  • PR-14039 - KAFKA-15211: Mock InvalidParameterException in DistributedConfigTest (#14039)

  • PR-14244 - KAFKA-15377: Don’t expose externalized secret values in tasks-config API endpoint (#14244)

  • PR-14278 - KAFKA-15393: Improve shutdown behavior in MM2 integration tests (#14278)

  • PR-14082 - KAFKA-15102: Add replication.policy.internal.topic.separator.enabled property to MirrorMaker 2 (KIP-949) (#14082)

  • PR-14156 - KAFKA-15202: Fix MM2 offset translation when syncs are variably spaced (#14156)

REST Proxy

  • PR-1230 - KREST-12372 Upgrade dependency to JDK 1.8 with version 1.77

  • PR-1221 - KREST-12630 Exclude logback from zookeeper dependency in tests

  • PR-1219 - KREST-12630 Add missing dependency due to zookeeper upgrade

  • PR-1212 - KREST-12277 semaphore migration to release branches

  • PR-440 - KREST-11812 upgrade jaxb-api dependency

  • ee8dd479 - KREST-12364: update bcpix

  • PR-427 - KRES-12288 migration semaphore release branches

Schema Registry

  • 01cc37a6 - Fix NPE for getAllVersionsById in MockSchemaRegistryClient

  • de9de139 - Handle all exceptions when rule action cannot be performed

  • 30fbe76c - Clean up test

  • e66c5c51 - Fix checkstyle

  • d0a9c3f9 - Fix copyright date

  • d6d92d65 - Add unit tests

  • 78b1947d - DGS-9450 Strip rule param prefix from configs

  • bfda9dd4 - Improve logging

  • 806989d7 - DGS-9450 More minor cleanup

  • ef077a85 - DGS-9450 Minor cleanup

  • 0b445986 - DGS-9450 Add command line tool to register/auto-rotate DEKs

  • 98a1a4de - update swagger core

  • 12166e07 - DGS-9402 In CEL, treat exception from guard as false

  • PR-2888 - Apply service bot changes to version branches

  • 1d415181 - DGS-9387 Ensure isKey flag is passed when reusing deserializers

  • ae313e51 - Add logging

  • 6683bd00 - Fix CSFLE dek rotation tests

  • c180f450 - Fix findbugs

  • 92a148cb - Temporarily disable DEK rotation tests

  • e3deb5dd - Fix CSFLE dek rotation test

  • PR-2879 - Update azure-identity and unpin azure-core

  • bafbad8c - DGS-9343 Allow removing enum in JSON Schema to be backward compatible

  • PR-2874 - DGS-9048: Semaphore Migration of Version Branches

  • 089b1fb7 - Upgrade tink to 1.12.0

  • 899b38a2 - migrate to semaphore

  • 7f7a7ab1 - add metrics-core to fix the build

  • 5aa50c15 - Fix test

  • 02a996b1 - Check multiple actions only valid for WRITEREAD and UPDOWN

  • 2f93432d - Add null check

  • 3f8d16f7 - Add initialized method to dek registry

  • 5e7bf83d - DGS-9031 Add strings extension lib for CEL executor

  • b19aea83 - DGS-9067 Ensure keys for schema cache are not mutated

  • d3b1912d - upgrade com.squareup.okio:okio to 3.4.0

  • 3e5ecba2 - Add tests

  • a990ce0f - DGS-9031 Add builtin CEL validation functions

  • c8ab3fd0 - Add log if encoding fails

  • 531cc692 - Add test

  • PR-2822 - Add deleted flag to create kek/dek requests

  • d81d5a53 - Encode subject names for Maven download plugin

  • PR-2820 - Cache ProtobufSchema.toDynamicSchema calls (#2818)

  • PR-2817 - Sort list of dek subjects before returning to client

  • PR-2816 - DGS-8960 Fix handling of diamond structure in Protobuf converter

  • PR-2815 - Update DEK Registry spec

  • PR-2807 - Allow create kek/dek to act like undelete

  • PR-2808 - For tags API, only modify ruleset on leader node

  • PR-2806 - DGS-8908 Ensure tenant prefix is used for aliases

  • PR-2805 - DGS-8901 Ensure logical type config is applied to Reflect/Specific Avro data types

  • PR-2801 - Add check and test for invalid DEK rotation expiry

Version 7.4.3

Released October 2023

Community Features

Common

  • 35a1415d - APPSEC-3039: Update jetty and netty

  • 81295738 - update snappy to 1.10.5

  • aea31af8 - APPSEC-2796: add guava to dependencyManagement

Kafka

  • PR-969 - KSECURITY-2013: Upgraded Jetty to 9.4.53.v20231009 and Netty to 4.1.100.Final

  • PR-956 - KAFKA-15498: bump snappy-java version to 1.1.10.5 (#14434)

REST Proxy

  • PR-408 - KREST-11276 - Tighten SSL auto cert reload

  • PR-409 - KREST-11276 - Fixing cert reload with multiple registered listeners

Schema Registry

  • PR-2784 - DGS-8165 Add support for automatic DEK Rotation

  • PR-2790 - DGS-8088 Get the mode in scope rather that just for the subject

  • PR-2789 - DGS-8783 Add rulesToMerge/rulesToRemove to tags API

  • PR-2786 - DGS-8769 Upgrade vault lib; add namespace support

  • PR-2783 - DGS-8708 Add rule config to preserve source fields

  • PR-2773 - DGS-8615 Minor change to DlqAction

  • PR-2772 - DGS-8553: Updated create and delete DEK Registry API documented names

  • PR-2769 - DGS-8522 Support required fields in proto2 in CEL executor

  • PR-2764 - DGS-8336 Add ruleType filter to schemas endpoint

  • PR-2758 - DGS-8323 Always populate version metadata prop for tags API

Version 7.4.2

Released September 2023

Community Features

Common

  • 59440c88 - APPSEC-2855: add generation of SBOMs to maven based Java projects

  • PR-542 - update easymock support for java 17 support

  • 27a3c1ca - APPSEC-2796: update guava

Kafka

  • PR-931 - KSECURIYT-1859: updating netty to 4.1.96 (3.4)

  • PR-14141 - KAFKA-15100; KRaft data race with the expiration service (#14141)

  • b8732bb6 - HOFIX: fix missing import in SnapshottableHashTableTest.java

  • PR-14125 - KAFKA-15271: Historicalterator can exposes elements that are too new (#14125)

  • PR-14162 - KAFKA-15312; Force channel before atomic file move (#14162)

  • PR-14094 - KAFKA-15243: Set decoded user names to DescribeUserScramCredentialsResponse (#14094)

  • PR-14044 - KAFKA-15216: InternalSinkRecord::newRecord should not ignore new headers (#14044)

  • PR-13948 - KAFKA-15091: Fix misleading Javadoc for SourceTask::commit (#13948)

ksqlDB

  • PR-10065 - fix: import not picked back in fix

  • d3f0e149 - fix: fix compile error introduced by merge conflict resolution

REST Proxy

  • 3274c17d - KREST-11122 - Add note about empty response from endpoint

Schema Registry

  • PR-2748 - Ensure all SR client props are passed to FLE

  • PR-2746 - Create default KMS params in rule based on KMS key id

  • PR-2745 - Log DEK errors

  • PR-2744 - MINOR Added another constructor to DekRegistryConfig

  • PR-2742 - DGS-8169 Handle null compat groups for schemas

  • PR-2741 - Improve error handling during DEK creation

  • PR-2738 - Ensure kek name is prefixed with context

  • PR-2734 - DGS-8112 Allow properties to be omitted during serialization

  • PR-2730 - DGS-7826 DGS-7828 DGS-7830 Add kek/dek timestamp, dek version

  • PR-2719 - DGS-7826 DGS-7828 DGS-7830 Add DEK registry for CSFLE

  • 3f0e1198 - DGS-7927: update io.grpc_grpc-protobuf

  • PR-2717 - DGS-7976: Add tagging support for composite json schema

  • PR-2716 - Upgrade wire to 4.8.0

  • 47296719 - DGS-7797: Introduce a new optional host.port config for inter instance communication

  • PR-2699 - Minor: Fix entity order after converting list to map

  • PR-2696 - DGS-7772: Impl POST /subjects/{subject}/versions/{version}/tags

  • PR-2695 - do not reinstantiate objectmapper as it’s expensive (#2686)

Version 7.4.1

Released June 2023

Community Features

Common

  • PR-530 - Backport log redactor to CP patches.

  • bd393b16 - AUDIT-1600: Updating logredactor version to 1.0.12

  • b4334b94 - pin jose4j version to match ce-kafka

  • 95ed5124 - include snappy and jetty in the dependency management to match versions with ce-kafka, cleanup jackson imports

Kafka

  • PR-13690 - KAFKA-14978 ExactlyOnceWorkerSourceTask should remove parent metrics (#13690)

  • PR-13688 - KAFKA-14974: Restore backward compatibility in KafkaBasedLog (#13688)

  • PR-13140 - KAFKA-14644: Process should crash after failure in Raft IO thread (#13140)

  • PR-13668 - KAFKA-14963; Do not use equals with Uuid (#13668)

  • PR-13653 - KAFKA-14946: fix NPE when merging the deltatable (#13653)

  • PR-13652 - KAFKA-14639: A single partition may be revoked and assign during a single round of rebalance (#13550) (#13652)

  • PR-13429 - KAFKA-14666: Add MM2 in-memory offset translation index for offsets behind replication (#13429)

  • PR-13446 - KAFKA-14837/14842:Avoid the rebalance caused by the addition and deletion of irrelevant groups for MirrorCheckPointConnector (#13446)

  • PR-13831 - KAFKA-15053: Use case insensitive validator for security.protocol config (#13831)

  • PR-13865 - KAFKA-15096: Update snappy-java to 1.1.10.1 (#13865)

  • PR-13745 - KAFKA-15015: Explicit on reload4j version (#13745)

  • PR-13441 - Fix log DateTime format unit test (#13441)

  • PR-13717 - KAFKA-14994: Upgrading jose4j

  • 92ebf0d4 - fix compilation failure

ksqlDB

  • PR-9810 - Bump minimist and mkdirp

  • 4ce2d5f3 - fix: Replace regex in CommandParser with a split by space

  • PR-10000 - fix: implement default method for schema registry client

REST Proxy

Schema Registry

  • PR-2658 - DGS-7457 Cache schemas in client when getting by subject/version

  • PR-2663 - Ensure compat check returns mutable lists

  • PR-2635 - DGS-7289 Adding CustomBearerAuthCredentialProvider

  • PR-2655 - Enable use of service loader for CSFLE

  • PR-2653 - Make DEK algorithm configurable for CSFLE

  • PR-2644 - Add JSONata integration test

  • PR-2654 - DGS-7432 Fix ClassCastException when getting params option

  • PR-2652 - DGS-7430 Add auto.flush config for DlqAction

  • PR-2647 - DGS-7422 Optimization: omit compat check during IMPORT

  • PR-2646 - DGS-7412 Fix for registering references in non-default context

  • PR-2645 - DGS-7407 Fix issues for numeric types in CEL_FIELD exprs

  • PR-2643 - DGS-7375 DGS-7376 DlqAction enhancements, support ServiceLoader

  • PR-2642 - DGS-7367 Propagate error messages even if not JSON

  • PR-2640 - DGS-7363 Handle JsonNode objects in CEL executors

  • PR-2614 - DGS-7103 Optimize instantiation of lists of schemas

  • PR-2639 - DGS-7353 Allow message references in CEL_FIELD exprs

  • PR-2632 - DGS-7243 Add initialized method to determine extension readiness

  • PR-2630 - Add a local SR client for internal use to SR

  • PR-2629 - RCCA-12410: Fix exception due to addition to immutable list

  • PR-2625 - Static token provider: adding optional lsrc-id and pool-id

  • PR-2693 - DGS-7746 Fix perf regression due to DGS-6331

  • 48101a91 - Fix merge issue

  • PR-2692 - DGS-7723 Fix for qualifySubjectWithParent method

  • PR-2690 - DGS-7697 Ensure version 0 is not returned in register response

  • PR-2685 - DGS-7565 Add rule name validation

  • 1e57cba0 - Fix merge issue

  • PR-2684 - DGS-7675 Fix NPE when print.schema.ids=true

  • PR-2683 - DGS-7682 Ensure correct tenant is passed when resolving refs

  • PR-2679 - DGS-7668 DGS-7669 Ensure invalid defaults are dropped; also handle slash in aliases

  • PR-2674 - DGS-7564 When registering, return schema if changed on server

  • PR-2673 - Exclude metadata population during import mode

  • PR-2670 - DGS-7488: Add X-Forward=true if forwarding request to leader

  • 4a833e6e - reorder

  • 1bf961b7 - Update json-schema

  • PR-2665 - DGS-7208 DGS-7474 Fix some regressions

  • PR-2664 - DGS-7208 DGS-7474 Add alias/normalize configs

Commercial Features

Confluent Server

  • [OBSTEL-303] Update Telemetry Remote Configuration

  • KSECURITY-1568: Upgrading jose4j

  • Restore backward compatibility in KafkaBasedLog (#9725)

  • KAFKA-14963; Do not use equals with Uuid (#13668)

  • KDATA-737: Fix incorrectly exposed ccloud only configs on documentation

  • Exclude bouncy castle (org.bouncycastle: bcpkix-jdk18on) from Kafka packaging in CP

  • Revert “Exclude bouncy castle jdk18on”

  • Exclude bouncy castle jdk18on

  • KSTORAGE-2447: Disable ULE on tier topic, if tier topic already exist

  • KGLOBAL-3350 Add more logging for persistent connection creation in Outbound connection manager

  • KSECURITY-1627: Updated snappy-java

  • KSECURITY-1618: update guava version to 32.0.1-jre.

  • CONFLUENT: Add exception details to SecurePassConfigProvider logs

  • fix compilation failure

  • KAFKA-14887: FinalizedFeatureChangeListener should not shut down when ZK session expires

  • KSTORAGE-230: TierFetcher offset/batch size cache (#719)

  • KSTORAGE-82: Tiered storage topic deletion support

  • MINOR: disable use of ConfluentLeaderAndIsrRequest in 5.4.x

  • Revert “KAFKA-14367; Add ListGroups to the new GroupCoordinator interface (#12853)”

  • Revert “MINOR: Fix some compiler warnings (#12912)”

Security

  • CIAM-2998 - Log redactor backport for confluent-security-plugins

  • Adding version to fix build

  • Exclude jdk18on dep

  • Make bouncyCastle jdk18on runtime dep test-scoped

  • KREST-10128 Create LicenseManager instance in iteration run instead o

Secret Registry

  • unpin netty, as rest-utils brings updated version

Control Center

  • [MMA-13078] revisit session caching in basic auth

  • [MMA-13013] Add property to specify alias cert per component for Schema Registry, KSQL & Connect

  • [MMA-13089] Handle large message JSON on topic inspection

  • [MMA-13042] Fixing log statement for websocket time out

  • [MMA-13216] update jose4j

  • [MMA-13201] Csrf Enabled Flag not working

  • [MMA-13417] Fixing netty dependency issue

MQTT Proxy

  • CC-19108 | Rename isChannelClosed to isAuthenticated.

  • CC-19108 | Use an atomic reference to avoid publishing message when the channel is closed or marked for closure.

Metadata Service

  • CIAM-2936: update jose4j

  • Update pom.xml

  • CIAM-2810: Update http response status code if writer is null

  • CIAM-2986 - Older MDS builds are not running all the tests they should be

  • update comment, clean up whitespaces

  • another attempt with mina-core

  • pin mina core in cli, scope mina-core as test in main pom

  • pin mina-core in testingLdap only

  • SEC-xyz: Update mina-core

Replicator

  • disable builds of connect-replicator version 5.5.x

Version 7.4.0

Released May 2023

Community Features

Common

  • 22a9da57 - APPSEC-2551: Update Prometheus JMX Exporter

  • 5ad03d12 - APPSEC-2551: Update Jackson

  • PR-514 - Update snakeyaml

  • PR-512 - Add snakeyaml to dependency management

  • 7bcaab9e - Fix typo in with method calls

  • 3868e27b - Fix typo

  • 783c5721 - Return the original “version_range” if it isn’t an actual Maven version range

  • e71293e4 - Update logredactor depdendency to 1.0.11

  • PR-502 - Fix: override Maven version plugin’s default versionrange

  • 9350d231 - Update resolver-maven-plugin to 0.6.0

  • PR-497 - Upgrade Netty to 4.1.86.Final

  • PR-496 - Bump to 7.4.4

  • PR-492 - APIF-3112: Upgrade jmx_prometheus_javaagent to 0.17.2.

  • PR-489 - APIF-3117: Upgrade Scala to 2.13.10.

  • PR-485 - APIF-2957: Upgrade Jackson and Protobuf versions.

Kafka

  • PR-13592 - KAFKA-14862: Outer stream-stream join does not output all results with multiple input partitions (#13592)

  • PR-13575 - KAFKA-14905: Reduce flakiness in MM2 ForwardingAdmin test due to admin timeouts (#13575)

  • PR-13604 - KAFKA-14869: Bump coordinator value records to flexible versions (KIP-915, Part-2) (#13604)

  • 03b41b54 - KAFKA-14887: FinalizedFeatureChangeListener should not shut down when ZK session expires

  • PR-13511 - KAFKA-14869: Ignore unknown record types for coordinators (KIP-915, Part-1) (#13511)

  • PR-13534 - KAFKA-14054: Handle TimeoutException gracefully (#13534)

  • PR-13541 - KAFKA-14894: MetadataLoader must call finishSnapshot after loading a snapshot (#13541)

  • PR-13462 - KAFKA-14857: Fix some MetadataLoader bugs (#13462)

  • PR-13499 - KAFKA-14880; TransactionMetadata with producer epoch -1 should be expirable (#13499)

  • PR-13369 - KAFKA-14172: Should clear cache when active recycled from standby (#13369)

  • PR-13470 - KAFKA-14864: Close iterator in KStream windowed aggregation emit on window close (#13470)

  • PR-13472 - KAFKA-14774 the removed listeners should not be reconfigurable (#13472)

  • PR-13445 - KAFKA-14843: Include Connect framework properties when retrieving connector config definitions (#13445)

  • PR-13148 - KAFKA-14645: Use plugin classloader when retrieving connector plugin config definitions (#13148)

  • PR-13367 - KAFKA-14797: Emit offset sync when offset translation lag would exceed max.offset.lag (#13367)

  • PR-13415 - KAFKA-14816: Only load SSL properties when issuing cross-worker requests to HTTPS URLs (#13415)

  • PR-13386 - KAFKA-14809 Fix logging conditional on WorkerSourceTask (#13386)

  • PR-13379 - KAFKA-14799: Ignore source task requests to abort empty transactions (#13379)

  • PR-13351 - KAFKA-14781: Downgrade MM2 log message severity when no ACL authorizer is configured on source broker (#13351)

  • PR-13182 - KAFKA-14649: Isolate failures during plugin path scanning to single plugin classes (#13182)

  • PR-13193 - KAFKA-14659 source-record-write-[rate|total] metrics should exclude filtered records (#13193)

  • PR-13279 - KAFKA-14295 FetchMessageConversionsPerSec meter not recorded (#13279)

  • PR-13297 - Kafka-14743: update request metrics after callback (#13297)

  • PR-13052 - KAFKA-14545: Make MirrorCheckpointTask.checkpoint handle null OffsetAndMetadata gracefully (#13052)

  • PR-13181 - KAFKA-14610: Publish Mirror Maker 2 offset syncs in task commit() method (#13181)

  • PR-11818 - KAFKA-12558: Do not prematurely mutate internal partition state in Mirror Maker 2 (#11818)

  • PR-13161 - KAFKA-14128: Kafka Streams does not handle TimeoutException (#13161)

  • PR-13282 - KAFKA-14733: Added a few missing checks for Kraft Authorizer and updated AclAuthorizerTest to run tests for both zk and kraft (#13282)

  • PR-13273 - KAFKA-14731: Upgrade ZooKeeper to 3.6.4 (#13273)

  • PR-13262 - KAFKA-14727: Enable periodic offset commits for EOS source tasks (#13262)

  • PR-13168 - Kafka 14565: On failure, close AutoCloseable objects instantiated and configured by AbstractConfig (#13168)

  • PR-13208 - KAFKA-5756: Wait for concurrent source task offset flush to complete before starting next flush (#13208)

  • PR-13227 - KAFKA-14693; Kafka node should halt instead of exit (#13227)

  • PR-13230 - KAFKA-14704; Follower should truncate before incrementing high watermark (#13230)

  • PR-13241 - KAFKA-14711: kafaka-metadata-quorum.sh does not honor –command-confi… (#13241)

  • PR-13211 - KAFKA-14676: Include all SASL configs in login cache key to ensure clients in a JVM can use different OAuth configs (#13211)

  • PR-12984 - KAFKA-14455: Kafka Connect create and update REST APIs should surface failures while writing to the config topic (#12984)

  • PR-13175 - KAFAK-14660: Fix divide-by-zero vulnerability (#13175)

  • PR-13107 - KAFKA-13972; Ensure replica state deleted after reassignment cancellation (#13107)

  • 2e1947d2 - Bump version to 3.4.0

  • PR-880 - KC-2332: Upgrade Netty to 4.1.86

  • PR-13159 - KAFKA-14656: Send UMR first during ZooKeeper migration (#13159)

  • PR-13166 - KAFKA-14623: OAuth’s HttpAccessTokenRetriever potentially leaks secrets in logging (#13119) (#13166)

  • PR-13156 - KAFKA-14533: re-enable ‘false’ and disable the ‘true’ parameter of SmokeTestDriverIntegrationTest (#13156)

  • PR-13147 - KAFKA-14533: temporarily disable the ‘false’ parameter of SmokeTestDriverIntegrationTest (#13147)

  • PR-857 - CONFLUENT: Fix filter for not publishing streams upgrade test artifacts

  • PR-853 - CONFLUENT: Skip publishing for kafka-streams-upgrade-system-tests

  • PR-13130 - KAFKA-14637: Fix upgrade compatibility issue from older versions to 3.4 (#13130)

  • PR-13117 - KAFKA-14621: Disallow authorizers during ZooKeeper migration (#13117)

  • PR-13108 - KAFKA-14618: Fix off by one error in snapshot id (#13108)

  • PR-13106 - KAFKA-13709: (follow-up): Avoid mention of ‘exactly-once delivery’ or ‘delivery guarantees’ in Connect (#13106)

  • PR-13104 - KAFKA-14612: Make sure to write a new topics ConfigRecords to metadata log if the topic is created (#13104)

  • PR-13103 - KAFKA-14304: Use boolean for ZooKeeper migrating brokers in RPC/record (#13103)

  • PR-13058 - KAFKA-14557: Lock metadata log dir (#13058)

  • PR-13077 - KAFKA-14279: Add 3.3.x streams system tests (#13077)

  • PR-12998 - KAFKA-14493: Introduce Zookeeper to KRaft migration state machine STUBs in KRaft controller. (#12998)

  • PR-13083 - 2023 (#13083)

  • 347042cc - KAFKA-14458: Introduce RPC support during ZK migration #13028

  • PR-13001 - KAFKA-14446: code style improvements for broker-to-controller forwarding (#13001)

  • PR-13020 - KAFKA-14529: Use the MetadataVersion from ClusterConfig in ZooKeeper tests (#13020)

  • PR-13076 - KAFKA-14279: Add 3.3.x to core compatibility tests (#13076)

  • PR-13073 - KAFKA-14571: Include rack info in ZkMetadataCache.getClusterMetadata (#13073)

  • PR-13061 - [MINOR] Update upgrade documentation for 3.4 (#13061)

  • PR-13016 - KAFKA-14498: reduce the startup nodes to avoid timeout error (#13016)

  • PR-12008 - KAFKA-13439: move upgrade note to stream upgrade doc (#12008)

  • PR-12937 - KAFKA-13881: Add Connect package infos (#12937)

  • PR-12613 - MINOR: Fix punctuation marks (#12613)

  • PR-12936 - KAFKA-13881: Add Streams package infos (#12936)

  • PR-13023 - KAFKA-14532: Correctly handle failed fetch when partitions unassigned (#13023)

  • PR-13019 - KAFKA-14531: Fix controller snapshot interval (#13019)

  • PR-12994 - KAFKA-14457: Controller metrics should only expose committed data (#12994)

  • PR-12968 - KAFKA-14417: Address incompatible error code returned by broker from InitProducerId (#12968)

  • PR-12961 - KAFKA-14446: API forwarding support from zkBrokers to the Controller (#12961)

  • PR-12965 - KAFKA-14448: Let ZooKeeper brokers register with KRaft controller (#12965)

  • PR-12856 - KAFKA-14392: Fix overly long request timeouts in BrokerToControllerChannelManager (#12856)

  • PR-12946 - KAFKA-14427: ZooKeeper client support for migrations (#12946)

  • PR-13000 - KAFKA-14496: Wrong Base64 encoder used by OIDC OAuthBearerLoginCallbackHandler (#13000)

  • PR-12977 - Removing Multicasting partitioner for IQ (#12977)

  • PR-12985 - KAFKA-13602: Remove unwanted logging in RecordCollectorImpl.java (#12985)

  • PR-12956 - KAFKA-14379: Consumer should refresh preferred read replica on update metadata (#12956)

  • PR-12971 - KAFKA-14454: Making unique StreamsConfig for tests (#12971)

  • PR-845 - CONFLUENT: Skip publishing for projects with no Scala suffix when the Scala version is not the default

  • PR-842 - DP-9030: Use the new withGradleFile closure

  • 56f7a277 - KAFKA-14435: Fix allow.everyone.if.no.acl.found config behavior for StandardAuthorizer

  • PR-12935 - KAFKA-14432: RocksDBStore relies on finalizers to not leak memory (#12935)

  • PR-12955 - KAFKA-14443: Close topic creation Admin clients in MM2 connectors (#12955)

  • PR-12954 - KAFKA-14352: Rack-aware consumer partition assignment protocol changes (KIP-881) (#12954)

  • PR-12893 - KAFKA-14260: Add synchronized to prefixScan method (#12893)

  • PR-12903 - KAFKA-14415: Faster ThreadCache (#12903)

  • PR-12892 - KAFKA-14386: Return TopicAssignment from the ReplicaPlacer (#12892)

  • PR-12915 - KAFKA-14417: Producer doesn’t handle REQUEST_TIMED_OUT for InitProducerIdRequest, treats as fatal error (#12915)

  • PR-12800 - KAFKA-14342: Clear offsets for connector source partitions on tombstone messages (#12800)

  • PR-12803 - KAFKA-13602: Adding ability to multicast records (#12803)

  • PR-12846 - KAFKA-14293: Basic Auth filter should set the SecurityContext after a successful login (#12846)

  • PR-12850 - KAFKA-14367: Add LeaveGroup to the new GroupCoordinator interface (#12850)

  • PR-12675 - KAFKA-14256: Upgrade from Scala 2.13.8 to 2.13.10 (#12675)

  • PR-12928 - KAFKA-14304: Add RPC changes, records, and config from KIP-866 (#12928)

  • PR-12847 - KAFKA-14367: Add SyncGroup to the new GroupCoordinator interface (#12847)

  • PR-12175 - KAFKA-14146: Config file option for MessageReader/MessageFormatter in ConsoleProducer/ConsoleConsumer (KIP-840) (#12175)

  • PR-12896 - KAFKA-14398: Update EndToEndAuthorizationTest to test both ZK and KRAFT quorum servers (#12896)

  • PR-12942 - KAFKA-14433: Clear Yammer metrics in QuorumTestHarness#tearDown (#12942)

  • PR-12898 - KAFKA-14430: Specify JMX RMI port system property when not already set (#12898)

  • PR-12885 - KAFKA-14358: Disallow creation of cluster metadata topic (#12885)

  • PR-12848 - KAFKA-14367: Add Heartbeat to the new GroupCoordinator interface (#12848)

  • PR-12355 - KAFKA-14017: Implement new KIP-618 APIs in FileStreamSourceConnector (#12355)

  • PR-12748 - KAFKA-13715: Add generationId field in subscription (#12748)

  • PR-12778 - KAFKA-13152: Add cache size metrics (#12778)

  • PR-12899 - KAFKA-14413: Separate MirrorMaker configurations for each connector (#12899)

  • PR-11890 - KAFKA-13731: Allow standalone workers to be started without providing any connector configurations (#11890)

  • PR-12917 - KAFKA-14414: Fix request/response header size calculation (#12917)

  • PR-12920 - KAFKA-14339: Do not perform producerCommit on serializationError when trying offsetWriter flush (#12920)

  • PR-12845 - KAFKA-14367: Add JoinGroup to the new GroupCoordinator interface (#12845)

  • PR-12876 - KAFKA-12476: Prevent herder tick thread from sleeping excessively after slow operations (#12876)

  • PR-12909 - KAFKA-14422: Consumer rebalance stuck after new static member joins a group with members not supporting static members (#12909)

  • PR-12884 - KAFKA-14393: Default metadata retition by bytes (#12884)

  • PR-12875 - KAFKA-12679: Handle lock exceptions in state updater (#12875)

  • PR-12890 - KAFKA-14414: Remove unnecessary usage of ObjectSerializationCache (#12890)

  • PR-12904 - KAFKA-14299: Handle double rebalances better (#12904)

  • PR-12639 - KAFKA-14242: use mock managers to avoid duplicated resource allocation (#12639)

  • d139379e - KAFKA-14009: Rebalance timeout should be updated when static member rejoins

  • PR-12877 - KAFKA-14372: Choose replicas only from ISR for preferred read replica (#12877)

  • PR-12805 - KAFKA-12610: Implement PluginClassLoader::getResource and getResources (#12805)

  • PR-12761 - KAFKA-14307: Controller time-based snapshots (#12761)

  • PR-12505 - KAFKA-14133: Replace EasyMock with Mockito in streams tests (#12505)

  • PR-12859 - KAFKA-14325: Fix NPE on Processor Parameters toString (#12859)

  • PR-12869 - KAFKA-14382: wait for current rebalance to complete before triggering followup (#12869)

  • PR-12842 - KAFKA-14406: Fix double iteration of restoring records (#12842)

  • PR-12840 - KAFKA-14320: Updated Jackson to version 2.13.4 (#12840)

  • PR-12295 - KAFKA-13586: Prevent exception thrown during connector update from crashing distributed herder (#12295)

  • PR-12866 - KAFKA-14346: Remove hard-to-mock javax.crypto calls (#12866)

  • PR-12828 - KAFKA-14346: Remove hard-to-mock RestClient calls (#12828)

  • PR-12752 - KAFKA-14303: Producer.send without record key and batch.size=0 goes into infinite loop (#12752)

  • PR-12843 - KAFKA-14375: Remove use of “authorizer-properties” from EndToEndAuthorizerTest (#12843)

  • PR-12839 - KAFKA-14346: Replace static mocking of WorkerConfig::lookupKafkaClusterId (#12839)

  • PR-12861 - KAFKA-14388: - Fixes the NPE when using the new Processor API with the DSL (#12861)

  • PR-12783 - KAFKA-14334: Complete delayed purgatory after replication (#12783)

  • PR-12857 - KAFKA-14360: Fix links in documentation (#12857)

  • PR-12418 - KAFKA-13414: Replace PowerMock/EasyMock with Mockito in connect.storage.KafkaOffsetBackingStoreTest (#12418)

  • PR-12561 - KAFKA-12495: Exponential backoff retry to prevent rebalance storms when worker joins after revoking rebalance (#12561)

  • PR-826 - KSECURITY-792: Upgrade from Scala 2.13.8 to 2.13.10

  • PR-12577 - KAFKA-13401: KIP-787 - MM2 manage Kafka resources with custom Admin implementation. (#12577)

  • PR-12795 - KAFKA-14299: Initialize tasks in state updater (#12795)

  • PR-12835 - KAFKA-14294: check whether a transaction is in flight before skipping a commit (#12835)

  • PR-12836 - KAFKA-14282: stop tracking Produced sensors by processor node id (#12836)

  • PR-12809 - KAFKA-14324: Upgrade RocksDB to 7.1.2 (#12809)

  • PR-12827 - KAFKA-14363: Add new group-coordinator module (KIP-848) (#12827)

  • PR-12808 - KAFKA-14299: Avoid allocation & synchronization overhead in StreamThread loop (#12808)

  • PR-12544 - KAFKA-14098: Add meaningful client IDs for Connect workers (#12544)

  • PR-12760 - KAFKA-14309: FK join upgrades not tested with DEV_VERSION (#12760)

  • PR-12823 - KAFKA-14132: Replace PowerMock and EasyMock with Mockito in connect tests (#12823)

  • PR-12772 - KAFKA-14299: Avoid busy polling in state updater (#12772)

  • PR-12817 - KAFKA-14346: Remove difficult to mock Plugins.compareAndSwapLoader usages (#12817)

  • PR-12684 - KAFKA-14254: Format timestamps as dates in logs (#12684)

  • PR-12773 - KAFKA-14299: Return emptied ChangelogReader to ACTIVE_RESTORING (#12773)

  • PR-12804 - KAFKA-14344: Build EmbeddedKafkaCluster with common configs used for all clients (#12804)

  • PR-12756 - Kafka 12960: Follow up Commit to filter expired records from Windowed/Session Stores (#12756)

  • PR-815 - KSECURITY-788: Upgrade jackson-databind version to 2.13.4.2

  • PR-12822 - KAFKA-14355: Fix integer overflow in ProducerPerformance (#12822)

  • PR-12409 - KAFKA-14058: Migrate ExactlyOnceWorkerSourceTaskTest from EasyMock and Powermock to Mockito (#12409)

  • PR-12771 - KAFKA-14299: Handle TaskCorruptedException during initialization (#12771)

  • PR-12725 - KAFKA-14132: Replace EasyMock with Mockito ConnectorsResourceTest (#12725)

  • PR-12789 - KAFKA-13989: Errors while evaluating connector type should return UNKNOWN (#12789)

  • PR-12775 - KAFKA-14247: add handler impl to the prototype (#12775)

  • PR-12791 - KAFKA-14338: Use MockTime in RetryUtilTest to eliminate flakiness (#12791)

  • PR-12790 - KAFKA-14337: Correctly remove topicsWithCollisionChars after topic deletion (#12790)

  • PR-12769 - KAFKA-14314: Add check for null upstreamTopic (#12769)

  • PR-12465 - Move to mockito (#12465)

  • PR-12543 - KAFKA-10149: Allow auto preferred leader election when there are ongoing partition reassignments (#12543)

  • PR-12758 - KAFKA-13152: KIP-770, cache size config deprecation (#12758)

  • PR-12672 - KAFKA-14247: Consumer background thread base implementation (#12672)

  • PR-12762 - KAFKA-14299: Never transition to UpdateStandby twice (#12762)

  • PR-12765 - KAFKA-14316: Fix feature control iterator metadata version handling (#12765)

  • PR-12747 - KAFKA-14300: Generate snapshot after repeated controller resign (#12747)

  • PR-12749 - KAFKA-14299: Fix busy polling with separate state restoration (#12749)

  • PR-12743 - KAFKA-14299: Fix incorrect pauses in separate state restoration (#12743)

  • PR-12754 - Kafka Streams Threading P3: TaskManager Impl (#12754)

  • PR-12744 - Kafka Streams Threading P2: Skeleton TaskExecutor Impl (#12744)

  • PR-12741 - KAFKA-14296: Partition leaders are not demoted during kraft controlled shutdown (#12741)

  • PR-12736 - KAFKA-14292: Fix KRaft controlled shutdown delay (#12736)

  • PR-10528 - KAFKA-12497: Skip periodic offset commits for failed source tasks (#10528)

  • PR-11211 - KAFKA-12960: Enforcing strict retention time for WindowStore and Sess… (#11211)

  • PR-12737 - Kafka Streams Threading P1: Add Interface for new TaskManager and TaskExecutor (#12737)

  • PR-12434 - KAFKA-14099: - Fix request logging in connect (#12434)

  • PR-10910 - KAFKA-12965: - Graceful clean up of task error metrics (#10910)

  • PR-810 - Fix format of CODEOWNERS

  • PR-809 - Add ksql to CODEOWNERS

  • PR-12634 - KAFKA-14225: Fix deadlock caused by lazy val exemptSensor (#12634)

  • PR-12709 - KAFKA-14275: KRaft Controllers should crash after failing to apply any metadata record (#12709)

  • PR-12721 - KAFKA-14283: Fix connector creation Auth tests (#12721)

  • PR-12723 - MINIOR: some typos in javadoc (#12723)

  • PR-12676 - KAFKA-14209: Integration tests 3/3 (#12676)

  • PR-12644 - KAFKA-14209: Rewrite self joins to use single state store 2/3 (#12644)

  • PR-12700 - KAFKA-14270: Fix generated Kafka Streams version file name (#12700)

  • PR-12663 - KAFKA-14247: Define event handler interface and events (#12663)

  • PR-12704 - Fix ByteBufferSerializer#serialize(String, ByteBuffer) not roundtrip input with ByteBufferDeserializer#deserialize(String, byte[]) (#12704)

  • PR-12527 - KAFKA-14133: Replace EasyMock with Mockito in streams tests (#12527)

  • PR-12683 - KAFKA-4852: Fix ByteBufferSerializer#serialize(String, ByteBuffer) not compatible with offsets (#12683)

  • eefe8671 - KAFKA-14265: Prefix ACLs may shadow other prefix ACLs

  • b9da249b - Fix test

  • fc786c33 - add unit and integration tests

  • ba89eaf0 - KAFKA-14265: Prefix ACLs may shadow other prefix ACLs

  • PR-12659 - KAFKA-10199: Integrate Topology Pause/Resume with StateUpdater (#12659)

  • PR-12687 - KAFKA-10199: Fix switching to updating standbys if standby is removed (#12687)

  • PR-12642 - KAFKA-14207: KRaft Operations documentation (#12642)

  • PR-12670 - KAFKA-14239: Merge StateRestorationIntegrationTest into RestoreIntegrationTest (#12670)

  • PR-12681 - KAFKA-14259: BrokerRegistration#toString throws an exception, terminating metadata replay (#12681)

  • PR-12677 - KAFKA-14132: Replace PowerMock/Easymock with Mockito for WorkerMetricsGroupTest (#12677)

  • PR-12039 - KAFKA-13725: KIP-768 OAuth code mixes public and internal classes in same package (#12039)

  • PR-12643 - KAFKA-14097: Make producer ID expiration a dynamic config (#12643)

  • PR-12641 - KAFKA-14209: Change Topology optimization to accept list of rules 1/3 (#12641)

  • PR-12652 - KAFKA-14236: ListGroups request produces too much Denied logs in authorizer (#12652)

  • 9d1f9f77 - Bump version to 3.3.0

  • PR-12628 - KAFKA-14214: Introduce read-write lock to StandardAuthorizer for consistent ACL reads. (#12628)

  • PR-12664 - KAFKA-14243: Temporarily disable unsafe downgrade (#12664)

  • PR-12566 - KAFKA-13927: Fix sink task offset tracking during exception retries (#12566)

  • PR-12651 - KAFKA-14212: Enhance HttpAccessTokenRetriever to retrieve error message (#12651)

  • PR-12653 - KAFKA-14240: Validate KRaft snapshot state on startup (#12653)

  • PR-12650 - KAFKA-10199: Adapt restoration integration tests to state updater (#12650)

  • PR-12632 - KAFKA-12878: Support –bootstrap-server in kafka-streams-application-reset tool (#12632)

  • PR-12658 - KAFKA-14233: disable testReloadUpdatedFilesWithoutConfigChange first to fix the build (#12658)

  • PR-12655 - KAFKA-14238: KRaft metadata log should not delete segment past the latest snapshot (#12655)

  • PR-12638 - KAFKA-10199: Register and unregister changelog topics in state updater (#12638)

  • PR-12602 - KAFKA-13985: Skip committing MirrorSourceTask records without metadata (#12602)

  • PR-12570 - KAFKA-14156: Built-in partitioner may create suboptimal batches (#12570)

  • PR-12615 - KAFKA-14132: Migrate some Connect tests from EasyMock/PowerMock to Mockito (#12615)

  • PR-12600 - KAFKA-10199: Suspend tasks in the state updater on revocation (#12600)

  • PR-12414 - KAFKA-14073: Log the reason for snapshot (#12414)

  • PR-12625 - KAFKA-14222: KRaft’s memory pool should always allocate a buffer (#12625)

  • PR-12626 - KAFKA-14208: Do not raise wakeup in consumer during asynchronous offset commits (#12626)

  • PR-12603 - KAFKA-14196: Do not continue fetching partitions awaiting auto-commit prior to revocation (#12603)

  • PR-12624 - KAFKA-14215: Ensure forwarded requests are applied to broker request quota (#12624)

  • b2639c8d - Remove the html end tag from upgrade.html

  • PR-12597 - KAFKA-14205: Document how to replace the disk for the KRaft Controller (#12597)

  • PR-12596 - KAFKA-14203: Disable snapshot generation on broker after metadata errors (#12596)

  • PR-12616 - KAFKA-14198: Define separate configuration for Swagger (#12616)

  • PR-12617 - KAFKA-14216: Remove ZooKeeper reference from org.apache.kafka.server.quota.ClientQuotaCallback javadoc (#12617)

  • PR-12618 - KAFKA-14217: app-reset-tool.html should not show –zookeeper flag that no longer exists (#12618)

  • PR-12609 - KAFKA-14198: swagger-jaxrs2 dependency should be compileOnly (#12609)

  • PR-12584 - KAFKA-14194: Fix NPE in Cluster.nodeIfOnline (#12584)

  • PR-12604 - KAFKA-14188: Getting started for Kafka with KRaft (#12604)

  • PR-12599 - KAFKA-14201: Consumer should not send group instance ID if committing with empty member ID (#12599)

  • PR-12598 - KAFKA-14201: Consumer should not send group instance ID if committing with empty member ID (server side) (#12598)

  • PR-12595 - KAFKA-14204: QuorumController must correctly handle overly large batches (#12595)

  • PR-11783 - KAFKA-14143: Exactly-once source connector system tests (#11783)

  • PR-12478 - KAFKA-13952: fix RetryWithToleranceOperator to respect infinite retries configuration (#12478)

  • 6397d503 - Remove the html end tag from upgrade.html

  • PR-12586 - KAFKA-14200: kafka-features.sh must exit with non-zero error code on error (#12586)

  • PR-12583 - KAFKA-10199: Separate state updater from old restore (#12583)

  • PR-12492 - KAFKA-14133: Replace EasyMock with Mockito in streams tests (#12492)

  • c3595588 - KAFKA-14015: Reconfigure tasks if configs have been changed for restarted connectors in standalone mode(#12568)

  • PR-12519 - KAFKA-10199: Handle exceptions from state updater (#12519)

  • PR-12578 - KAFKA-14195: Fix KRaft AlterConfig policy usage for Legacy/Full case (#12578)

  • PR-12573 - KAFKA-10199: Remove changelog unregister from state updater (#12573)

  • PR-12533 - KAFKA-14170: Fix NPE in the deleteTopics() code path of KRaft Controller (#12533)

  • PR-12576 - Update expected task configs for FileStream source and sink connectors in ConnectRestApiTest (#12576)

  • PR-12569 - KAFKA-10199: Shutdown state updater on task manager shutdown (#12569)

  • PR-12294 - KAFKA-13990: KRaft controller should return right features in ApiVersionResponse (#12294)

  • PR-12571 - KAFKA-14187: kafka-features.sh: add support for –metadata (#12571)

  • PR-12459 - KAFKA-13036: Replace EasyMock and PowerMock with Mockito for RocksDBMetricsRecorderTest (#12459)

  • PR-795 - CONFLUENT: Retry compilation after zinc compile cache error

  • PR-12562 - KAFKA-10199: Remove tasks from state updater on shutdown (#12562)

  • PR-12554 - KAFKA-10199: Handle restored tasks output by state updater (#12554)

  • PR-12565 - KAFKA-14183: Cluster metadata bootstrap file should use header/footer (#12565)

  • PR-12513 - KAFKA-14177: Correctly support older kraft versions without FeatureLevelRecord (#12513)

  • PR-12103 - KAFKA-13850: Show missing record type in MetadataShell (#12103)

  • PR-12046 - KAFKA-10360: Allow disabling JMX Reporter (KIP-830) (#12046)

  • PR-12551 - KAFKA-14178: Don’t record queue time for deferred events (#12551)

  • PR-12549 - KAFKA-10199: Introduce task registry (#12549)

  • PR-12473 - KAFKA-13133: Replace EasyMock and PowerMock with Mockito for AbstractHerderTest (#12473)

  • PR-12536 - KAFKA-14160: Streamline clusterId retrieval in Connect (#12536)

  • PR-12502 - KAFKA-14162: Stop adding immutable maps/lists to record keys/values in HoistField and MaskField SMTs (#12502)

  • c6c1895f - CONFLUENT: Add original files from confluent/master

  • PR-12547 - KAFKA-10199: Remove tasks from state updater on revoked and lost partitions (#12547)

  • a1690ecd - CONFLUENT: Add original files from confluent/master

  • PR-12509 - KAFKA-14133: Replace EasyMock with Mockito in WorkerCoordinatorTest and RootResourceTest (#12509)

  • 4fe80532 - CONFLUENT: Add original files from confluent/master

  • 44a88aee - CONFLUENT: Add original files from confluent/master

  • PR-12490 - KAFKA-14147: Prevent deferredTaskUpdates map from growing monotonically in KafkaConfigBackingStore (#12490)

  • 2c8a781c - CONFLUENT: Add original files from confluent/master

  • PR-12501 - KAFKA-14097: Separate configuration for producer ID expiry (KIP-854) (#12501)

  • 88448f61 - CONFLUENT: Add original files from confluent/master

  • PR-12469 - KAFKA-13914: Add command line tool kafka-metadata-quorum.sh (#12469)

  • b212677b - CONFLUENT: Add original files from confluent/master

  • PR-12508 - KAFKA-13888: Implement LastFetchTimestamp and in LastCaughtUpTimestamp for DescribeQuorumResponse [KIP-836] (#12508)

  • 97d9c73a - CONFLUENT: Add original files from confluent/master

  • PR-12525 - remove sleep in test (#12525)

  • PR-12535 - KAFKA-13769: Fix version check in SubscriptionStoreReceiveProcessorSupplier (#12535)

  • PR-12518 - KAFKA-14167: Completion exceptions should not be translated directly to error codes (#12518)

  • PR-12517 - KAFKA-13940: Return NOT_LEADER_OR_FOLLOWER if DescribeQuorum sent to non-leader (#12517)

  • PR-12520 - KAFKA-10199: Remove tasks from state updater on revocation (#12520)

  • PR-12521 - KAFKA-10199: Remove tasks from state updater on partition lost (#12521)

  • PR-12277 - KAFKA-13971: Atomicity violations caused by improper usage of ConcurrentHashMap (#12277)

  • PR-12491 - KAFKA-14148: Update ResetOffsetsDoc (#12491)

  • PR-12466 - KAFKA-10199: Handle task closure and recycling from state updater (#12466)

  • PR-12450 - KAFKA-13809: Propagate full connector configuration to tasks in FileStream connectors (#12450)

  • PR-12514 - KAFKA-14154: Kraft controller should return NOT_CONTROLLER if request epoch is ahead (#12514)

  • PR-12416 - KAFKA-13559: Fix issue where responses intermittently takes 300+ ms to respond, even when the server is idle. (#12416)

  • PR-12163 - KAFKA-13900: Support Java 9 direct ByteBuffer Checksum methods (#12163)

  • PR-12274 - KAFKA-13959: Controller should unfence Broker with busy metadata log (#12274)

  • PR-12497 - KAFKA-10199: Expose read only task from state updater (#12497)

  • PR-12506 - KAFKA-14154: Return NOT_CONTROLLER from AlterPartition if leader is ahead of controller (#12506)

  • PR-12498 - KAFKA-13986: Brokers should include node.id in fetches to metadata quorum (#12498)

  • PR-12507 - KAFKA-14163: Retry compilation after zinc compile cache error (#12507)

  • a6a8ff9e - Add muckrake mapping for 7.3

  • PR-12407 - Remove duplicate common.message.* from clients:test jar file (#12407)

  • PR-12484 - KAFKA-13060: Replace EasyMock and PowerMock with Mockito in WorkerGroupMemberTest.java (#12484)

  • PR-12184 - Fix the rate window size calculation for edge cases (#12184)

  • PR-12487 - KAFKA-14140: Ensure an offline or in-controlled-shutdown replica is not eligible to join ISR in ZK mode (#12487)

  • f3cf6db3 - KAFKA-14114: Add Metadata Error Related Metrics

  • PR-12396 - KAFKA-14051: Create metrics reporters in KRaft remote controllers (#12396)

  • PR-12403 - KAFKA-13166: Fix missing ControllerApis error handling (#12403)

  • PR-12467 - KAFKA-14129: KRaft must check manual assignments for createTopics are contiguous (#12467)

  • PR-12447 - KAFKA-14124: improve quorum controller fault handling (#12447)

  • c2422f63 - KSECURITY-478: migrating log4j12 to reload4j, slf4j-log4j12 to slf4j-reload4j.jar (3.3) #775

  • PR-12489 - KAFKA-14144: Compare AlterPartition LeaderAndIsr before fencing partition epoch (#12489)

  • PR-12472 - KAFKA-14134: Replace EasyMock with Mockito for WorkerConnectorTest (#12472)

  • PR-12457 - KAFKA-14104: Add CRC validation when iterating over Metadata Log Records (#12457)

  • PR-12440 - KAFKA-14107: Upgrade Jetty version (#12440)

  • PR-12483 - KAFKA-14136: Generate ConfigRecord for brokers even if the value is unchanged (#12483)

  • PR-12455 - KAFKA-14111: Fix sensitive dynamic broker configs in KRaft (#12455)

  • PR-12468 - KAFKA-13877: Fix flakiness in RackAwarenessIntegrationTest (#12468)

  • PR-11615 - KAFKA-13546: Do not fail connector validation if default topic creation group is explicitly specified (#11615)

  • PR-12432 - KAFKA-14095: Improve handling of sync offset failures in MirrorMaker (#12432)

  • PR-12441 - KAFKA-14108: Ensure both JUnit 4 and JUnit 5 tests run (#12441)

  • PR-12321 - KAFKA-14012: Add warning to closeQuietly documentation about method references of null objects (#12321)

  • PR-12442 - KAFKA-10199: Bookkeep tasks during assignment for use with state updater (#12442)

  • PR-12429 - KAFKA-14089: Only check for committed seqnos after disabling exactly-once support in Connect integration test (#12429)

  • PR-12309 - KAFKA-14007: Close header converters during Connect task shutdown (#12309)

  • PR-12439 - KAFKA-10199: Further refactor task lifecycle management (#12439)

  • PR-12437 - KAFKA-13769: Add tests for ForeignJoinSubscriptionProcessorSupplier (#12437)

  • PR-11886 - KAFKA-13730: OAuth access token validation fails if it does not contain the “sub” claim (#11886)

  • PR-12415 - KAFKA-14079: - Ack failed records in WorkerSourceTask when error tolerance is ALL (#12415)

  • PR-12438 - KAFKA-13868: Replace YouTube embedded video with links on streams page (#12438)

  • PR-12422 - KAFKA-13982: Move WorkerConfigTransformerTest to use Mockito (#12422)

  • PR-12374 - KAFKA-14039: Fix AlterConfigPolicy usage in KRaft (#12374)

  • PR-12411 - KAFKA-14078: Do leader/epoch validation in Fetch before checking for valid replica (#12411)

  • PR-12423 - KAFKA-13158: Migrate ConnectClusterStateImpl to Mockito (#12423)

  • PR-12433 - KAFKA-14093: Use single-worker Connect cluster when testing fenced leader recovery (#12433)

  • PR-12347 - KAFKA-13919: expose log recovery metrics (#12347)

  • PR-12427 - KAFKA-10199: Add tasks to state updater when they are created (#12427)

  • PR-12285 - KAFKA-14001: Migrate streams module to JUnit 5 - Part 1 (#12285)

  • PR-12408 - KAFKA-14076: Fix issues with KafkaStreams.CloseOptions (#12408)

  • PR-12397 - KAFKA-10199: Cleanup TaskManager and Task interfaces (#12397)

  • PR-12365 - KAFKA-14020: Performance regression in Producer (#12365)

  • PR-12320 - KAFKA-13702: Connect RestClient overrides response status code on request failure (#12320)

  • PR-12349 - KAFKA-14024: Consumer keeps Commit offset in onJoinPrepare in Cooperative rebalance (#12349)

  • PR-12324 - KAFKA-12699: Override the default handler for stream threads if the stream’s handler is used (#12324)

  • PR-12387 - KAFKA-10199: Add RESUME in state updater (#12387)

  • PR-12386 - KAFKA-10199: Add PAUSE in state updater (#12386)

  • PR-12420 - KAFKA-13769: Fix version check in SubscriptionJoinForeignProcessorSupplier (#12420)

  • PR-12405 - KAFKA-13572: Fix negative preferred replica imbalanced count metric (#12405)

  • PR-10964 - KAFKA-13043: Implement Admin APIs for offsetFetch batching (#10964)

  • PR-12370 - KAFKA-13785: [10/N][emit final] more unit test for session store and disable cache for emit final sliding window (#12370)

  • PR-12265 - KAFKA-13968: Fix 3 major bugs of KRaft snapshot generating (#12265)

  • PR-12398 - KAFKA-14062: OAuth client token refresh fails with SASL extensions (#12398)

  • PR-12388 - KAFKA-14013: Limit the length of the reason field sent on the wire (#12388)

ksqlDB

  • 40d8003d - fix: Replace regex in CommandParser with a split by space

  • cc0501d8 - fix: Simplify regex in DdlDmlRequestValidators to avoid catastrophic backtracking

  • aefe6338 - Fix log4j-extensions

  • 08853cd3 - Fix log4j-extensions

  • PR-9821 - Fix: migrations tool without basic auth works again

  • PR-9818 - Fix: default to get authHeader if using basic

  • PR-9812 - Fix: catch TopicAuthorizationExceptions when getting topic config

  • PR-9717 - Fix: change password-based configs to Type.PASSWORD

  • 6cffbe92 - Feat: properly use Kafka consumer in multi thread environment

  • a74891c1 - Refactor: fixed checkstyle errors

  • 38122a2f - Feat: Print Topic sets auto.offset.reset as default

  • PR-9731 - Fix: show streams/tables should not return names in back tick

  • 4ec1bc23 - Refactor: removed executePrintQueryWithVariables

  • 56133e1c - Feat: Using fixed poll timeout instead of disconnect check interval

  • fc3e81c8 - Refactor: Remove PrintResponseWriter and move write to PrintSubscriber

  • abe2ebd6 - Refactor: vcrfxia’s feedback, comments, unused code, moving things

  • 7e384445 - Refactor: small refactoring, luca-filipponi PR feedback

  • ae274326 - Refactor: use Publisher instead of QueryPublisher everywhere

  • 1b968cff - Feat: Modify QueryStreamHandler so it handles Print Statements

  • 993dc778 - Feat: Extend QueryEndpoint /KsqlServerEndpoints to create printPub…

  • facadf54 - Feat: Implement BlockingPrintPublisher extending BasePublisher

  • 42f8f6dc - Feat: Add PrintResponseWriter and implement PrintResponseWriter

  • 48d986a7 - Feat: Implement PrintSubscriber extending BaseSubscriber

  • PR-9713 - Bump netty tcnative version to 2.0.54.Final

  • PR-9702 - Feat: Allow alternative nullable representations also for protobuf_nosr

  • PR-9708 - APIF-3117: Unpin Scala version.

  • PR-9697 - APIF-3122: Unpin Protobuf version.

  • PR-9694 - Fix: null check of query plan when restoring

  • 8ee15c2c - checkstyle

  • b42fb444 - revise: Victoria’s comments

  • PR-9676 - Fix: prevent null values in runtimeID cmd records from throwing errors

  • 6f6f1843 - checkstyle

  • 0adcb0b7 - missing changes and make spotbugs happy

  • 169b0878 - Feat: Alternative representations for nullable Protobuf fields

  • fb01cab4 - revise: Sergio’s comments

  • 909f8d11 - revise: Alan’s comments

  • a1e25d70 - Fix: also skip basic authentication for authentication.skip.paths

  • PR-9667 - style: fix checkstyle error - Line is longer than 100 characters

  • PR-9640 - Feat: Support Bytes to UUID UDF Function

  • PR-9646 - Fix: remove spurious consistency error message (2)

  • PR-9637 - Fix: Improving error messages

  • PR-9645 - Fix: remove spurious consistency error message

  • d911d5f9 - Fix: copy Avro data using physical schema to deal with optional fields

  • PR-9619 - Fix: null handling in headers

  • PR-9626 - Feat: allow base64 strings to be coerced to bytes

  • PR-9622 - Fix: fix tag pattern in doc

  • PR-9588 - Fix: dont throw persistent query limit errors for non-queries

  • PR-9612 - Fix: link fix

  • PR-9561 - refactor: remove usage of the org.apache.kafka.connect.runtime library

  • PR-9585 - Fix: show command must list the exact names of sources

  • PR-9594 - Fix: give hint when source name has extra/lacks dquotes

  • PR-9593 - Fix: enhance error messages when source has extra/lacks double quotes

  • PR-9573 - Fix: enhance error messages when source has extra/lacks double quotes

  • PR-9531 - Fix-9243: improving error messages

  • PR-9524 - Feat: improve syntax error messages

  • 5e07e8c7 - Fix: Ignore schema id while generating materialized schema #9516

  • PR-9551 - MINOR: add static terminate cluster command and id

  • PR-9443 - Fix: Add shaded jar for java-client and document its use

  • PR-9534 - Feat: add source connector property to CREATE SOURCE statements

  • 1b327c61 - Fix: Ignore schema id while creating internal schemas #9163

  • PR-9458 - Docs: adding newline to allow correct script execution

  • PR-9522 - Feat: Add TRUNC function

  • PR-9453 - Feat: add stop co-ordinates to NodeLocation

  • PR-9512 - Feat: expose cleanup policy in create statements

  • PR-9514 - Artifactory migration for release_stabilization.py

  • PR-9369 - Fix: disable SR ID_COMPATIBILITY_STRICT for Protobuf to allow serialization with external references

  • PR-9504 - Feat: add a customer log4j MetricAppender to track log level stats

  • PR-9496 - Feat: hard delete internal schemas for persistent queries.

  • PR-9497 - Fix: don’t confuse flag on with old queries

  • PR-9493 - Feat: Variadic TopK that can select other columns

  • PR-9420 - Fix: track lag by queryId rather than applicationId

  • PR-9481 - Feat: Support Object as the type parameter for a UDAF variadic column argument

  • f9864add - minor: Update error message for retention config

  • PR-9482 - Fix: handle windowed queries in YATT

  • PR-9451 - Feat: Support variadic arguments in the middle of a function signature

  • PR-9317 - Feat: add command topic migration config and migration logic

  • PR-9463 - Fix: allow assert values command to check partial columns

  • PR-9470 - Fix: only use the internal topic id for the shared runtimes without a

  • b09f94d6 - minor: Make retention config as optional & validate it

  • PR-9433 - Fix: replace struct schemas with missing connect name

  • PR-9448 - Fix: cors handling for precondition server

  • PR-9452 - Fix: Do not clean up when in degraded mode

  • 14ec76ab - minor: Remove unused code

  • ccfd63c8 - minor: Address review comment

  • 790ef920 - minor: Address review comments

  • PR-9442 - Fix: apply custom error handler to KsqlStatementException (MINOR)

  • 132c2220 - minor: fix checkstyle

  • ba164390 - Fix: Validate retention config for exisiting topics

  • cb3c3ea0 - minor: fix checkstyle

  • PR-9423 - Fix: Ensure lag reporter doesn’t crash

  • PR-9424 - Fix: turn off internal topic for transient queries

  • PR-9409 - Fix: don’t block event loop in PullQueryQueue

  • PR-9402 - Feat: add support for JSON arrays

  • PR-9407 - Fix: Update default to not delete consumer groups

  • PR-9410 - Fix: topologies with internal topics can not use get sources

  • PR-9238 - Fix: Avoid new schema version registration on INSERT VALUES

  • PR-9408 - Fix: With shared runtimes, ALTER SYSTEM would cause paused queries to resume.

  • fde710ae - Fix: Use schema_id while serializing keySchema during INSERT

  • PR-9383 - Feat: add CORRELATION UDAF

  • 0f699264 - Feat: Add config to set topic retention in the WITH clause #5148

REST Proxy

  • ab17aa29 - Fix the overzealous conflict resolution

  • 5be3406e - KREST-9942: Remove SnakeYaml from dependency management

  • PR-389 - Cherry pick KREST-1553 for duplicate log fix

  • PR-385 - Backport KREST-8335 to branch 7.2.x

  • 60edebfe - Changed all configs to dynamic configs

  • PR-1083 - Fix build breakage caused by KAFKA-14334

  • PR-1116 - Cherry-pick: fix test (#1115)

  • 69ed0cd9 - remove incorrect synchronization

  • 08035fb1 - remove incorrect synchronization

  • PR-1110 - Add server-common dependency to avoid the issue of org.apache.kafka.s

  • PR-1108 - Set kafka-schema-registry version in dependency mamanagement

  • 7a7f5dcd - Remove unnecessary ${project.version} tag

  • PR-1102 - Fix transitive dependency of kafka-schema-registry

  • PR-1101 - Upgrade dependency org.yaml_snakeyaml

  • PR-1097 - KREST-8639: Only call get on topic manager provider once

  • PR-1095 - Krest 8353 per lkc rate limiting admin endpoints

  • PR-1096 - Make sure SchemaRegistryRestApplication check for leader election finish

  • PR-1093 - Address a coincidence causing a build breakage

  • PR-1090 - KREST-8518: Add dry-run/validate-only versions of some topic APIs

  • PR-1084 - KREST-3009: Add ability to update partition count on a topic

  • PR-1077 - Remove obsolete Avro test

  • PR-1075 - Fix the line longer than 100 characters issue

  • PR-1072 - KREST-7107: Shouldn’t provide overly detailed info or stack traces in responses -

  • PR-1051 - NPE when post to topics endpoint without payload

  • PR-1061 - Log Describe log Dirs and log the topic name causing a 404 anyway

  • PR-1059 - KREST-7275: update openapi changes for batch acl

  • PR-1035 - Replaced deprecated method

  • PR-1053 - KREST-7005: use a sensor object per request - but shared per LKC id

  • PR-365 - Adapt Test to handle Exception class changing its parent

  • ed1ab64b - Make errorSensor final

  • 0918cd98 - Remove Rest429CustomResponseHandler, and - Use MetricsResourceMethodApplicationListener logic for recording the metrics of 429

  • f7f3835e - Make sure that fourTwoNineHandler only bound to the right application

  • 94f41bcf - KREST-8429: refactor to separate 429 metrics from logging

  • 75aa92ab - KREST-8429: Address review comments

  • 283fd540 - KREST-8429: remove LKC tags from 429 metrics

  • 686de13e - KREST-8429: alert on 429s

  • a518e923 - KREST-8391: add comment per review

  • 7b4b32fe - KREST-8391: swap order of dos rate limiters

  • PR-362 - APIF-2959: Add support for per-listener SSL config.

  • PR-361 - Add ApplicationServer.getSslContextFactories method.

  • PR-359 - CIAM-2346: Override-able Request Log Format

  • PR-360 - APIF-2959: Fix SslConfig.getClientAuth.

  • PR-357 - APIF-2959: Prepare rest-utils API for per-listener SSL configs.

  • 6a7c4069 - Use LINEAR instead of CONSTANT bucket sizing for latency percentiles.

Schema Registry

  • PR-2627 - For Maven plugin, ensure metadata/ruleSet subject names are decoded

  • PR-2626 - Allow rule actions to differ per rule

  • PR-2623 - Upgrade deps for azure, cel, jsonata

  • 909c2f98 - DGS-xxxx: Update azure-identity to 1.8.2

  • 52e6bc28 - DGS-xxxx: update Msal4j dependency to bring in latest json-smart

  • PR-2620 - Add CSFLE tests for bytes

  • PR-2619 - Upgrade Tink to 1.9.0

  • PR-2616 - DGS-7005 Convert socket timeouts to RetriableException for converters

  • PR-2613 - Add param for CEL executors to ignore guard separator

  • PR-2610 - Update OpenAPI spec with rules, metadata

  • PR-2607 - Convert Avro utf8 objects to string for CEL

  • f45fe28e - DGS-6698: Remove SnakeYaml from the dependencyManagement

  • PR-2602 - DGS-6929 Ignore invalid Avro defaults for source connectors

  • ad72fd78 - Fix merge issue

  • PR-2599 - DGS-6516 Add normalize query param to compatibility APIs

  • PR-2597 - Refactor duplicate tag handling for field rule executors

  • PR-2593 - Enhancements to DlqAction

  • PR-2594 - Add support for optional guard for CEL expressions

  • PR-2590 - DGS-6701 Fix getSchemaById to match subject if passed

  • ed4ec914 - DGS-6698: Remove SnakeYaml from the dependencyManagement

  • PR-2589 - DGS-6613 Ignore invalid Avro defaults in Avro Converter

  • 6bb74171 - Fix test due to merge

  • PR-2588 - DGS-6603 Fix default conversions in JsonSchemaConverter

  • PR-2586 - Allow field xforms to still run if no tag is specified

  • PR-2585 - Revert behavior of DGS-6522

  • PR-2584 - DGS-6522 Disallow empty subject names during schema registration

  • PR-2582 - Reset default for leader election delay to false

  • PR-2577 - DGS-6373: Ignore leading dot when merging Protobuf custom options

  • PR-2575 - DGS-6331: Handle javaType for oneOfs during JSON deserialization

  • PR-2572 - DGS-6319: Handle field encryption rules that apply to the same tags

  • PR-2570 - DGS-6267: Changing logs to debug in SR

  • PR-2568 - DGS-6306: Allow multiple oneofs in Protobuf converter

  • PR-2566 - Minor: Add jackson annotation to SchemaEntity.java

  • PR-2560 - Add config whether to delay leader election

  • PR-2559 - Add tag APIs to ParsedSchema

  • PR-2552 - Upgrade Tink to 1.8.0

  • PR-2550 - DGS-6192: Include default ctx when using subjectPrefix w/wildcard ctx

  • PR-2546 - Adding createBrokerConfig changes

  • PR-2533 - DGS-5624: SR Oauth client config : Make Identity pool and logical cluster id as optional

  • PR-2544 - Add rule params

  • PR-2540 - DGS-6075: Add explicit definition of snakeyaml.

  • PR-2543 - DGS-6073: upgrade com.azure.azure-identity to 1.7.3

  • PR-2531 - Add support for ruleSet handlers

  • PR-2542 - DGS-6072: Upgrade google-api-client to 1.35.2

  • PR-2539 - DGS-6071: Handle nested messages in Protobuf custom options

  • PR-2538 - Add check to relookup schema after population/normalization

  • PR-2532 - Handle OneOf in Protobuf Path

  • PR-2530 - DGS-6032: Externalize Kafka group configurations

  • PR-2527 - DGS-6033: Allow rule names to be qualified with subject in configs

  • PR-2528 - Add doc field to Rule

  • PR-2525 - DGS-6033: Allow multiple rules of the same type

  • PR-2523 - DGS-6023: Add Protobuf converter config to not generate index for unions

  • PR-2522 - DGS-6022: Add Protobuf converter config to generate struct for nulls

  • PR-2517 - MINOR cherry-pick Protobuf validate optimization to 7.0.x

  • PR-2519 - DGS-6014: cherry pick Maven plugin enhancement to 5.5.x

  • PR-2518 - DGS-6014: Make url decoding in Maven plugin more lenient

  • PR-2516 - DGS-5908: Qualify extension fields from Protobuf descriptor

  • PR-2515 - DGS-5959: Update Maven plugin for metadata/ruleSet

  • PR-2512 - DGS-5215: Add integration tests for CSFLE [skip secret scan]

  • PR-2514 - DGS-5950: Allow optional map key in Avro

  • PR-2510 - DGS-5907: Allow CMK to be passed via metadata

  • PR-2509 - DGS-5909: When normalizing Avro, ensure defaults are valid

  • PR-2505 - DGS-5908: Qualify extension fields when normalizing Protobuf

  • PR-2504 - Add more CEL executor tests

  • PR-2501 - DGS-5897: Support return Avro schemas with all refs resolved

  • PR-2500 - DGS-5896: Allow metadata/rules to be passed to console producer

  • PR-2496 - DGS-5019: Add error tests for CSFLE

  • PR-2497 - DGS-5576: Change sensitive field type to TYPE.PASSWORD

  • PR-2495 - DGS-5850: Support adding schema tags to record

  • PR-2494 - DGS-5851: Add header support to console producer/consumer

  • PR-2470 - DGS-5210: Add Support to Copy ParsedSchema with Given Tags [skip secret scan]

  • PR-2490 - DDGS-5816: Track key for use in value serdes

  • PR-2482 - DGS-5018: Add client-side field-level encryption [skip secret scan]

  • PR-2487 - DGS-5804: Add a ConfigProvider to read SR metadata

  • PR-2486 - DGS-5803: Add size/ttl configs for caches holding latest schemas

  • PR-2483 - DGS-4826: Validate rulesets sent via REST API

  • PR-2481 - DGS-4826: Allow updating only metadata/ruleSet during registration

  • PR-2435 - DGS-5335: Encode sensitive metadata properties at rest

  • PR-2469 - DGS-5796: Initiate leader election after resources have been set up

  • PR-2475 - Fix handling of Protobuf repeated options

  • PR-2471 - Preserve metadata associated with primitive types during normalization

  • PR-2447 - SUP-49: Improve Error reporting on incompatibility for better usability

  • PR-2462 - DGS-3254: Support for separate internal and external certs

  • PR-2468 - DGS-5567: Handle Protobuf map options in toCanonicalString()

  • PR-2467 - Changed the header name of pool id

  • PR-2465 - DGS-5514: Implementation for new config parameters

  • PR-2460 - DGS-5544: Support nulls when using optional fields in proto2

  • PR-2459 - DGS-5400: Support subjectPrefix containing wildcard context and subject

  • PR-2457 - DGS-5514: Enhance config APIs with additional parameters

  • PR-2456 - Derive schema maven plugin 7.3.x

  • PR-2455 - Bug fix for union types, added test for same and removing unused imports

  • PR-2450 - Pin Snakeyaml version

  • PR-2448 - DGS-5475: Add error handling for rules

  • PR-2443 - DGS-5423: Check subject when looking up ID across contexts

  • PR-2431 - DGS-5117: Derive Schema Maven Plugin

  • PR-2441 - Minor: change OAuth config string

  • PR-2440 - Update the Snakeyaml dependency

  • PR-2418 - DGS-4996: Deriving Schema from Messages - Avro

  • PR-2439 - Add support for use.latest.version for deserializers

  • PR-2409 - DGS-3721: SaslOAuthCredentialProvider

  • PR-2434 - Fix build breakage caused by KAFKA-14334

  • PR-2428 - DGS-4823: Handle Jackson annotations during object transform

  • PR-2371 - DGS-3396: Add deletedOnly=true to SR list APIs

  • PR-2421 - DGS-5220: Handle nested extend decls in Protobuf

  • PR-2413 - Skip set-compatibility goal if skip flag is set

  • PR-2417 - Rename rule body to expr, add onSuccess/onFailure

  • PR-2415 - DGS-5254: Make timeouts configurable when forwarding requests

  • PR-2414 - DGS-5253: Handle cycles when resolving references

  • PR-2401 - DGS-4995: Deriving Schema from Messages - Protobuf

  • PR-2344 - DGS-3719, DGS-3720: Added OAuthCredentialProvider and CachedOauthTokenRetriever

  • PR-2411 - DGS-5243: Remove static from JsonSchemaData.toConnectData

  • PR-2402 - Add rule client functionality

  • PR-2407 - MINOR: Fix OpenAPI deleteSubjectConfig example

  • PR-2405 - DGS-4754: Handle empty record default at field level

  • PR-2398 - Add metadata/rules to schema format

  • PR-2374 - DGS-4813: Deriving Schema from Messages - JSON

  • PR-2372 - Migrate PowerMock to Mockito in RestServiceTest

  • PR-2366 - Allow specifying readerSchema on KafkaAvroDeserializer

  • PR-2361 - DGS-4419: Adding validation error report in json serialization

  • PR-2363 - Adding timer in onJoinPrepare

Commercial Features

Confluent Server

  • OBSTel-189 - Include process.roles in the MetricsMessage for C3 (#9618)

  • KAFKA-14887: FinalizedFeatureChangeListener should not shut down when

  • (cherry picked from commit e64436dbfb4f8cbaf529f36c068747e452e189de)

  • KSECURITY-1556: Updated jetty version

  • KAFLAESS-1743: replica entity invalidation fix

  • [KMETA-658] Add ClusterBalanceManager to BrokerServer colocated startup

  • OBSTel-189: Add Kafka process roles as part of the  KafkaServerProvider’s resource attributes

  • Reduce remove brokers history from 2 weeks to 1 day

  • DGS-6911: Properly close schema validation interceptor

  • KSECURITY-1460, KSECURITY-1466: Updated snakeyaml, json-smart and nim

  • KGLOBAL-3170: Deflake testFetchRequestPartitionMaxSize in ClusterLinkFetcherThreadTest (#9467)

  • KSECURITY-1459: Updated golang.org/x/net mod.

  • DGS-6911: Fix memory leak by closing schema validation interceptor

  • KSECURITY-1455: Updated golang.org/x/text mod.

  • KSECURITY-1453: Updated version of golang.org/x/sys

  • Use RemoteConfigurationRequest.Builder to avoid issues with shading (

  • API-665: Allow named listeners to passthrough to Kafka HTTP Server.

  • KAFKALESS-1412: Fix SBC status API for KRaft controller

  • cherrypick KAFKA-14816: Only load SSL properties when issuing cross-worker requests to HTTPS URLs

  • KSECURITY-1399: Add custom_security_config as parameter in KafkaService

  • KMETA-745: Support –config file in metadata shell

  • Backport “Minor: add logging to inLock / inWriteLock to catch leaked locks (#8594)” to 7.4.x

  • Made Request Pipelining disabled by default in 7.4.x

  • KMETA-478: Enable ZooKeeper audit logs by default

  • KMETA-714: disable migration from ZooKeeper while Confluent tiered storage is enabled

  • Fix version comparison in kafkatests (#8922)

  • KMETA-726: Allow config records before topic record

  • KAFKALESS-1633: Update MovementExclusionGoal to check for original brokers (#8791)

  • Fixing the Identation error

  • KMETA-700: Re-enable ZkMigrationIntegrationTest#testDualWrite

  • DGS-4197: Fix schema validation not working under KRaft

  • KGLOBAL-2530: Disallow ZooKeeper to KRaft migration if cluster contains topic placement topics

  • KMETA-668: Halting the process if Authorizer fails to startup (#8871)

  • CONFLUENT: enable FFF in FetchFromFollowerIntegrationTest

  • KMETA-702: Disable migration when cluster link metadata is present in the Zookeeper mode.

  • KAFKA-14676: Include all SASL configs in login cache key to ensure clients in a JVM can use different OAuth configs (#13211)

  • KSECURITY-885: Add additional parameter to pass configs overrides for controller nodes

  • Disable ZkMigrationIntegrationTest.testDualWrite until it can be fixed

  • KAFKA-14458: Introduce RPC support during ZooKeeper migration #13028

  • KMETA-693: Fix missing MetadataEncryptorFactory references

  • KAFKALESS-1591: Fix merging of partition and replica metrics when replica metrics are missing

  • KSECURITY-917: Updated AclAuthorizerTest to run tests for both zk and kraft (#8464)

  • Move BrokerHealth APIs to CloudAdmin

  • KAFKA-14457: Controller metrics should only expose committed data

  • KSECURITY-1001: Close old rest client when creating new one (#8785)

  • Backport part 2 of KAFKA-14446

  • Backport part 1 of KAFKA-14446

  • KSECURITY-897: Make expiration timeout for ZooKeeper ACL change notification path configurable

  • KSECURITY-1005: [7.4.x]Enforce kafka-client-plugins consumers to use the same snakeyaml version

  • Delete kafka-cells-admin.sh script from 7.4.x

  • KENGINE-287: RPCProducerIdManager should not wait on new block

  • KMETA-682: StandardAuthorizer uses findRule and findRulesByResourceTy

  • KC-2328: Update yaml.v2 to 2.2.4

  • METRICS-4722: - Clean up reference to TR when closing the remote config source

  • KAFKA-14601: Improve exception handling in KafkaEventQueue #13089

  • KSECURITY-885: Add zk_sasl dummy method to NoZookeeperService

  • KSECURITY-965: Update git version 1.13.0

  • Moves cells admin APIs to a CloudAdmin interface which lives in a separate package.

  • METRICS-4611: Update telemetry dependency version (#8371)

  • KSECURITY-953: Update azure-identity to 1.7.3

  • KSECURITY-884: Update RbacCluster.java bootstrapServers() function to use “EXTERNAL” type listener.

  • KSECURITY-981: Add FeatureZNode zk node path to secure root paths

  • Bump version to 3.4.0

  • KDATA-560: Extend Durability Audits to KRaft protocol and metadata topic

  • CIAM-2581: - Robustify additional roledef file specification

  • KGLOBAL-2261: Add mirror topic and link coordinator state to updateMetadata request.

  • Test fixes

  • KDATA-668: Improve AuditJob logs

  • KMETA-633: Unable to get a PhysicalClusterMetadata instance when in KRaft mode

  • KMETA-629: check authorizers in controller startup

  • KAFKALESS-1545-invalidated-window-metrics

  • KFS-490: - Admin roles updated to support FlinkResourcePool

  • KDATA-661: Periodical Audit Run is missing after the job scheduled on last day of year takes more than 24 hours

  • Make Content-Type header configurable for Telemetry HttpExporter

  • TRAFFIC-4283: Add RBAC configuration for PrivateLinkAttachment and PrivateLinkAttachmentConnection resources

  • Use Byte for cell state and Short for cell sizes

  • KSTORAGE-2635: print leader epoch in TierMessageFormatter output

  • Moves CellLoad class to common package

  • KSTORAGE-2416: remove step to delete discarded FTPS file

  • KENGINE-321: CPU regression from FFF metrics

  • Add ‘broker’ to cells requests in order to support KRaft cells APIs

  • KPERF-568: build arm64 images

  • QEC-8060: Adding trogdor build process in semaphore to be automatically kickstarted after kafka build process,

  • KENGINE-314: Fix a NPE when FetchSession close.

  • Adds more cells integration tests

  • CIAM-2463: - Make and test CCloudAdmin role to allow for Org0 Apikeys

  • Disable logging fetch requests in slow log

  • KGLOBAL-2447: Make OAuth client-side configs configurable for cluster links in Cloud

  • Update persistence of component code in BrokerHealthZNode

  • KDATA-643: DA Compaction Debugger Tool

  • KAFKA-14612: Make sure to write a new topics ConfigRecords to metadata log iff the topic is created (#13104)

  • KAFKALESS-1516: Add capacity metrics for the CapacityGoal hard goals

  • KAFKA-14601: Improve exception handling in KafkaEventQueue #13089

  • Kdata 601 ttps integrate with restore

  • KDATA-365: Add support for deletion of tier topic snapshots in CLM

  • KDATA 655: Fixing output for on demand audit jobs

  • Use cellid as Integer instead of string

  • KAFKALESS-1540: Refresh least-loaded brokers on a successful CapacityGoal replica move

  • DGS-5187: Propagate broker default config change to catalog

  • KAFKALESS-1540: Try to rebalance down to a lower threshold when a capacity goal triggers

  • KAFKALESS-1547: Introduce exponential backing off on cluster requests

  • KGLOBAL-2486: Changing RPO metric reporting from Percentile to Value

  • Minor Short circuit accumulated bytes calculation in DelayedFetch

  • Add CLI integration for TenantPlacementAdvisor

  • QEC-8060: Adding trogdor build process in semaphore to be automatically kickstarted after kafka build process

  • KSTORAGE-2549: separate tier fetch and local fetch metrics

  • KSECURITY-928: Added code to expose granular error codes to user.

  • Disabling hanging test testNetworkThreadTimeRecorded

  • KAFKALESS-379: Avoid creating a new tree set of brokers

  • KGLOBAL-1647: Prevent excessive logging when ClusterLinkSyncAcls fails to create multiple ACLs on destination cluster

  • KDATA-656: Fixing context as part of on demand DA

  • KREST-8654: fix issue curl process stuck for RestProduce soak worker

  • KSECURITY-182: Add test and made some changes to support ACL sync in cluster link with resourceId flag enabled

  • Request Pipelining POC v2

  • Explicit linux/amd64 build for M1 local workflow.

  • CONFLUENT: rename rack state to zone alignment for response bytes tag

  • KPLATFORM-1532: Add QueuesProxy role for kafka queues

  • KSECURITY-903: Add KRaft to LdapAuthorizerTest.java

  • CIAM-2533: - Ability to specify additional roledef files for cc-rbac

  • KAFKALESS-1546: For leader replicas, fill in FFF metrics with a zero value

  • KAFKA-14458: Introduce RPC support during ZK migration #13028

  • KPERF-516: Include EOF response in disconnectedClient metrics

  • TCP-109: add cloud_new_networklink_permissions.json, add networklink resource type

  • Adding function definitions to NoZKService

  • CONFLUENT: Minor cleanups to RbacClusters

  • KDATA-655: Fix summary generation for on demand DA

  • KENGINE-313: Observers should be selectable as preferred read replicas

  • KENGINE-302: Add trace level logs when recording CROSS_RACK egress

  • Bumping version for encoding of BrokerHealthZNode

  • cc-trogdor: building image respects local Kafka version

  • KPLATFORM-1096: Remove cc-rollingupgrade-ctl.

  • KDATA-647: DA for compaction enhancement

  • KSECURITY-912: - Fix race condition

  • KGLOBAL-2461: Account for promotion policy when removing observer from ISR

  • KSECURITY-898: Update tests in ce-audit module to run on KRaft mode

  • KSECURITY-801: adding try/catch to DetailedRequestAuditLogFilter

  • KSECURITY-741: Fix for High CPU usage on Confluent Platform RBAC after AuthCache restructuring

  • KSECURITY-903: Update LDAP tests to run on KRaft clusters

  • Kcfun 557 cli for describe cells tenants

  • Allow for use of Global ducktape params to set the default metadata quorum

  • Moves PartitionPlacementStrategy.java to org.apache.common in order to be reusable within tools/

  • KAFKALESS-1334: SBC’s FFF Adoption

  • KSECURITY-905: Changes to add identity info in token processing error logs.

  • KCFUN-583: Wire cell load API to SBC cluster model

  • KSTORAGE-2456: log compaction with transactions property tests

  • KDATA-573: Implementing on-demand Durability audits

  • MINOR Fix Noisy Log in setTieringEnabled

  • Adds various cell commands to complete the CLI

  • KDATA-384: Add support for Azure in InspectTieredObjects tool

  • KAFKA-14435: KRaft - Fix allow.everyone.if.no.acl.found config behavior for StandardAuthorizer

  • KSECURITY-801: Kafka Produce/Consume audit logging

  • KGLOBAL-2456: Clear partitionsWithNewHighWatermark in ClusterLinkFetcherThread

  • KCFUN-665: Update KCFUN constant_soak workload to FFF

  • KAFKALESS-1532: Fix NPE with replica count on a broker is null

  • KCFUN-252: Adds max replicas per broker limit to CreateTopicPolicy

  • KAFKALESS-1467: Improve error reported by CDBE::computeEvenClusterLoadPlan

  • KCFUN-665: Soak workload for fetch from follower

  • KAFKA-14532: Correctly handle failed fetch when partitions unassigned

  • KGLOBAL-2453: Fix CL partition max size in fetch request.

  • Cherrypick KAFKA-14417: Address incompatible error code returned by broker from`InitProducerId`

  • KSECURITY-882: Support CP MDS/RBAC on KRaft clusters

  • KAFKALESS-1239: Fix NPEs in EvenClusterLoad state machine during remove/add broker, GVD operations

  • KAFKALESS-1528: Do NOT invalidate metrics when removing a broker

  • cherry-pick: KAFKA-14379: Consumer should refresh preferred read replica on update metadata

  • KENGINE-304: Avoid choosing degraded replica as preferred read replica

  • KCFUN-602: Implement the basic producer id throttle mechanism

  • KCFUN-689: Validate Server cets in ConfluentTrustManager

  • KGLOBAL-2442: Disallow cluster link deletion when mirror topics are in PENDING_STOPPED state

  • KSTORAGE-2577: Dump headers of tier state files using DumpTierPartitionState tool

  • KGLOBAL-1852: Reject cluster link request on Confluent Cloud unauthenentication

  • Added describe permission to DataSteward and DataDiscovery

  • KPERF-457: Slowlog Sampling

  • KAFKALESS-1124: Add size() to the EventQueue and size metric for SbcEventQueue

  • KGLOBAL-2432: Return external endpoint for link coordinator when describing links

  • Adding Admin APIs for Leadership Priority API

  • Propagate broker health changes through UpdateMetadataRequest

  • Adding import to DistributedHerderTest which was preventing build

  • KSTORAGE-2069: minor change: changed debug to info so that it can show up in opensearch

  • Removing WorkerWithTopicCreationTest

  • Update connect/runtime/src/test/java/org/apache/kafka/connect/runtime/distributed/DistributedHerderTest.java

  • KGLOBAL-2450: Add cluster links to kraft shell

  • KPERF-425: Enable creating Netty client SSL engine

  • KGLOBAL-2427: Fix and test tenant connection metric for reverse connections

  • Minor: Disable the telemetry reporter integration test

  • Fixing failing test cases in WorkerTest

  • CNK-1867: Apply latest num.partitions value for new topics without override in ZooKeeper-mode

  • DGS-5558: removed describe permission for CCA and Operator

  • CONFLUENT: Upgrade Netty to 4.1.86

  • KMETA-270: Generate snapshots from metadata shell

  • KSTORAGE-2394: Add TierFetcher Non Retriable Exception Meter

  • KDATA-361: Metrics for Tier Topic Snapshots

  • SBC: Don’t expire replica entity if topic partition is present

  • KCFUN-696: Add a lower bound to the negative value for TokenBucket

  • KAFKA-9038: [WIP] Allow creating partitions for topics partitions not in reassignment

  • KGLOBAL-2415: handle missing topic on Traffic store startup

  • CONFLUENT: Skip publishing for projects with no scala suffix when the scala version is not the default

  • DP-9030: - Switch to codeartifact repo

  • CONFLUENT: Use single audit log provider for MDS and its hosting broker

  • KGLOBAL-2431: Disallowing mirror topic creation for a link in FAILED state

  • Disabling tests which are causing jenkins build to hang

  • Run EndToEndAuthorizationTests with KRaft quorum servers

  • Deduplicating Connect log events

  • KGLOBAL-2438: Fixing naming for failed broker links

  • KAFKALESS-1523: Use effective goals when passing goalsConfig from triggerEvenClusterLoadTask

  • KSTORAGE-2116: add an internal min.segment.ms config to clamp segment.ms

  • KAFKA-14435: Fix allow.everyone.if.no.acl.found config behavior for StandardAuthorizer

  • KAFKALESS-1415: Introduce tenant aware goal class

  • KGLOBAL-2358: converted CCLOUD_HOST_SUFFIXES to a config for fedramp

  • Make numMessages a long type to increase the capability of workload

  • CONFLUENT: Change cdc topic load timeout config name and it’s default value

  • Cherry-pick KAFKA-14372: Choose replicas only from ISR for preferred read replica

  • Add an interface to propogate broker health status to the metadata cache

  • Add CCloudIdentityProviderAdmin to delete identity providers/pools for deactivated orgs

  • KAFKALESS-1241: Add configurable min.free.space threshold to balance for DiskCapacityGoal

  • Remove use of “authorizer-properties” from EndToEndAuthorizerTest

  • KDATA-637: Move compaction validation to a separate alert type

  • KAFKA-14386: Return TopicAssignment from the ReplicaPlacer (#12892)

  • Cherry pick KAFKA-14417: Producer doesn’t handle REQUEST_TIMED_OUT for InitProducerIdRequest, treats as fatal error

  • DGS-3472: Emit incremental and snapshot events for topic metadata in KRaft mode

  • CONFLUENT: Replace deprecated usage of new Long

  • Cherry pick KAFKA-14334: Complete delayed purgatory after replication (#12783)

  • DGS-5508: Catch all Exception in CacheBuildEvent

  • KAFKALESS-1247: Fix main ZooKeeper thread freezing in the integration test

  • KAFKALESS-1506: Add metrics around the proposal execution

  • KAFKALESS-1283: Improve the incremental CPU goal’s observability

  • KCFUN-666, KCFUN-595: Implements rest of cells APIs with adminClient and their integration tests

  • KAFKALESS-1511: Movements from hard goals shouldn’t be restricted by oscillation prevention

  • Alter Broker Health API - ZooKeeper [Part 1]

  • KAFKALESS-1283: Introduce metrics for IncrementalResourceDistributionGoal

  • KCFUN-583: Derive cell load from SBC cluster model

  • DGS-5493: Moved DD and DS to different namespace

  • KCFUN-634: Add tool to give cell rebalancing recommendations

  • DGS-5248: Adding SR client OAuth config for Schema Validation. (#8137)

  • Add ce-licensing libs to broker classpath

  • CONFLUENT: Cluster link fetcher should complete fetches when new messages are replicated

  • Remove ForwardingAdmin overrides of methods that were deleted in recent commit

  • CONFLUENT: disable RocksDBMetricsRecorderTest

  • Kcfun 558 cells admin cli fw

  • KENGINE-233: fetch from follower metric: detect unknown/same/cross rack egress

  • KSTORAGE-2303: Keep SBC enabled and processing metrics when demoting a broker

  • KDATA-582: FTPS snapshot deletion

  • KPLATFORM-1350: Initializing Broker Health Manager in KRaft mode

  • KSTORAGE-2472: use delayed deletion for KRaft stray partition deletion

  • KMETA-523: Ensure sensitive configs are encrypted in KRaft snapshots

  • KCFUN-595: Implements tenant APIs: adminClient.assignTenantsToCell and adminClient.deleteTenants

  • KCFUN-666: Plumb DescribeCells and DescribeTenants API and their integration tests

  • KAFKA-14422: Consumer rebalance stuck after new static member joins a group with members not supporting static members

  • KAFKALESS-761: Don’t multiply CPU usage by 100

  • Ignore throttling test

  • KGLOBAL-1587: Implementing RPO metric for cluster linking

  • KAFKA-14009: Rebalance timeout should be updated when static member rejoins

  • KSECURITY-783: Update Async auth timeout behavior

  • KFS-337: Add flink and network to ConfluentServerCrnAuthority constants

  • Fix testWorkerTracingEnabled by verifying connectorClass called 3 times is expected

  • KAFKALESS-1276: Add ReplicaMetricsAggregator

  • KAFKALESS-1169: Calculate replica CPU from metrics

  • KAFKALESS-1170: Switch CPU and NW_OUT resource utilization when reloc

  • CONFLUENT: Fix Kafka management audit log exception metric

  • KAFKALESS-1402: Disable invalid goal sequences for incremental balancing

  • Fix NPE in WorkerTest

  • KSTORAGE-2303: Use LD flag to control whether SBC is enabled when demoting broker

  • KAFKA-14307: Controller time-based snapshots (#12761)

  • KAFKALESS-1209: Consolidate test methods creating metrics for a single replica to use ReplicaLoad.Builder/ReplicaLoad

  • KCFUN-607: Incorporate replication factor in tenant to cell assignments

  • KAFKALESS-1209: Remove legacy DeterministicLoad#createLoad(cpu, nwIn, nwOut, disk) method

  • KSTORAGE-2527: GCS checksum implementation should handle ByteBuffer with non zero position

  • AUTHN-1449: Added new error for issuer cache lookup error.

  • KAFKALESS-1209: Extend unit tests to set Resource#PRODUCE_IN metric values

  • Nits for checkstyle

  • Initial changes

  • KMETA-387: Confluent Repair Mode (formerly Kafka Repair Mode)

  • AUTHN-945: Minor fix for decoding of latency records in auth topic

  • EVENTS-1464: Depend directly on events-schema rather than copying protos

  • KDATA-596: Create KRaftLogSnapshotGenerationEvent for KRaft DA

  • Clarify description for broker config

  • DGS-5318: add Topic + Read/WriteCatalog operations to Org/Env Admin

  • Increase vagrant aws timeout for system test

  • KSTORAGE-2303: Set strategy IGNORE for demoted broker in SBC

  • Add ce-audit missing proto fields to align with events-schema

  • KDATA-592: Create KRaftNodeStartUpEvent for KRaft DA

  • KPLATFORM-974: AlterLeadershipAPI max brokers configuration

  • KDATA-356, KDATA-357, KDATA-358, KDATA-359: Tier topic snapshots

  • KGLOBAL-2024: Validate JSON filters with alter configs in kafka-cli

  • Fix build in ForwardingAdmin w/ describeCell overridden method

  • KAFKALESS-1376: Integrate GoalOptmizationHistory with E2E balancing workflow

  • KAFKALESS-1376: Add GoalOptimizationLogger

  • Disable broken tests

  • KAFKALESS-1367: Skip soft goal execution when incremental balancing is enabled

  • KPLATFORM-1332: Allow Network Health Manager to be enabled in KRaft mode

  • KCFUN-642: Implement cell load resolver classes for TenantPlacementAdvisor

  • Fixing build errors. WorkerTest was fixed based on changes from KAFKA-14346 PR

  • KSTORAGE-2303: MovementExclusionGoal should honor eligible source or destination

  • Extract TenantPlacementAdvisor related metrics to shared enum

  • KMETA-508: Checking mv when creating new cluster link records

  • KGLOBAL-2389: NettySslEngineFactory to support trustmanager algorithm

  • KCFUN-600: Setup ProducerIdQuotaManager to manage client throttle

  • KGLOBAL-2023: Controller support to remove cluster link references in ACLs on removing cluster link.

  • KAFKALESS-1376: GoalOptimizationHistory

  • Upgrade cc-base docker image to v20.6.0-jdk-17 and cc-base-alpine docker image to v2.16.0

  • CNKAF-108: Improve log message for dynamic certificate update

  • KSTORAGE-2310: Adds misclassification detection logic for stray partition deletion

  • KAFKALESS-1404: Add metric to track v2 enablement

  • KSECURITY-792: Upgrade from Scala 2.13.8 to 2.13.10

  • AUTHN-1409: Added support for identity in v2 schema audit logs.

  • KGLOBAL-1501: Fix error message propagation and improve error message when mirror topic name is not expected

  • DP-9370: - use cc-service-bot to manage Semaphore project

  • KDATA-591: Create KRaftLogStartOffsetChangeEvent for KRaft DA

  • KAFKALESS-1376: Add SuspendedTopicPartitionPool

  • KAFKALESS-1438: Log reason when interrupting the Executor

  • KSECURITY-789: Upgrade to snakeyaml version 1.32

  • Increase test timeout to reduce flakiness of the test

  • KDATA-590: Create KRaftHWMChangeEvent for KRaft DA

  • KAFKALESS-1376: Add TopicPartitionMovement

  • KAFKALESS-1439: Log full exception stack trace at DEBUG when a plan fails to compute during retry

  • KGLOBAL-2378: added default value for routes CDC topic

  • CIAM-2462: - Make new CCloudAdmin role to enable KSQL Healthchecking

  • METRICS-4145: Migrate TelemetryReporter to OpenTelemetry

  • AUTHN-1365: Update KsqlAdmin role def

  • KGLOBAL-2290: Add the internal topic pattern for Cluster Link Auto-mirroring

  • METRICS-4647: Deduplicate RemoteConfiguration POJOs

  • CONFLUENT: Minor updates in parsing user metadata record

  • KCFUN-619: -add-cell-load-rpc-message

  • KSTORAGE-2069: Enable Idempotent Producer for Tier Topic Internal Producer

  • Reducing the gradle cache expiry time

  • KAFKALESS-1386: Clear metrics not belonging to leader/follower

  • Support dynamic configuration of create-topic/alter-config/create-cluster-link policies in kraft

  • KCFUN-476: Tenant partition availability metrics for KRaft controllers

  • AUTHN-1001: Add support for using providerId to fetch token verification key.

  • CONFLUENT: Allow holes in tag ids

  • Fix the KafkaConfigTest.scala test failure

  • KSECURITY-788: Upgrade jackson-databind version to 2.13.4.2

  • KAFKALESS-829: Drop all metrics windows post SBC rebalance

  • KPLATFORM-1238: Network Health Manager incoming traffic should only consider requests that use the broker bootstrap lb

  • DA Compaction PerfFixes 1

  • MINOR: fix stray partition integration test

  • AUTHN-1032: Add Identity field to authentication_info in audit logs.

  • KCFUN-668: Auto-Tuning tenants with unlimited quota based on order of

  • KENGINE-223: Adding metrics to check truncation below HWM and new leader LEO less than HWM

  • KAFKALESS-1149: SBC v2 windows

  • CONFLUENT: Fix AuditLogProtobufV2ToJsonTest

  • CDMUM-2135: Update AuthenticationInfo to include identity_pool and identity

  • AUTHN-1353: KsqlAdmin user should be able to manage its ApiKey

  • KSTORAGE-2512: add latency metric for TierObjectStore.getObject call

  • KAFKALESS-1415: Update cluster model to have tenants by id

  • KGLOBAL-2355: adher to matching the key format(networkId:pkcId)

  • KGLOBAL-2209: add mTLS client auth configs to link config using broker

  • AUTHN-1134: Add new Create Ops

  • KSTORAGE-2506: fix FileTierPartitionState.segments(from, to) to handle ‘from > endOffset’ case properly

  • Kcfun 594 create cell manageability rpc api

  • AUTHN-1173, AUTHN-1174, AUTHN-1175 compute and emit SDS pipeline record latency Kafka-metrics

  • KENGINE-254: Prevent fetching from follower without a leader epoch

  • KGLOBAL-2252: Fix minor nits found during demo

  • KGLOBAL-2274: alter config on every multitenant listener on ssl certif

  • KCFUN-641: Implement load function classes for TenantPlacementAdvisor

  • Delete RaftSnapshotWriterTest.java

  • KAFKALESS-1415: Introduce tenant class for tenant aware goal

  • KCFUN-551: & KCFUN-552: Implicit cell creation integration and topic/partition integration. pr-image

  • Update cluster-linking-soak-destination-kraft.yaml to pkc-do0nk1

  • KSTORAGE-2509: record throttling time for tier compaction

  • Fix forreplicaAssignment

  • KGLOBAL-1726: Perform additional validation before truncating mirror partitions below high watermark

  • KMETA-484: Get rid of metadataQuorum/log path in metadata shell

  • CIAM-2424: - Name RestClient threads for stackdump identification

  • KAFKA-14337: Correctly remove topicsWithCollisionChars after topic deletion (#12790)

  • KMETA-387: Kafka Repair Mode

  • KSECURITY-794: Upgrade to protobuf version 3.19.6

  • KSECURITY-766: Update multitenant authorizer to use user metadata store

  • KMETA-438: Introduce old ClusterLinkDescription

  • KDATA-550: - Allow old segment deletion for other partitions if current partition is in is in isFrozenLogStartOffsetState

  • KCFUN-650: Readd KCFUN-581 compute per-IP throttle based on adjusted g

  • CC-18181: Fix connect tests broken due to WorkerSourceTask change

  • KMETA-438: Add link coordinator information describe cluster links co

  • KSTORAGE-2507: Ensure dynamic update to log.deletion.throttler.disk.free.headroom.bytes works well

  • MINOR: fix negative TierLogToClean.uncleanableBytes value

  • Param key bytes testing

  • KDATA-461: CLM handle the case when encryption key is in an invalid state

  • KDATA-558: Add restore metrics for tracking number of failures during subtasks

  • MSG-100: Add kafka-queues lib in classpath

  • KSECURITY-751: Create Store for User Metadata

  • KMETA-465: Fixing ClusterLinksImage to write out linkMode

  • KAFKALESS-1167: Add hard goals to incremental goals list

  • KDATA-570: Add support for durability audit to do

  • Remove fetch from follower parameter from createBrokerConfig and add

  • CDX-484: Fix unit test

  • CDX-484: Add StreamShareMetadataRead role for accessing catalog servic

  • Log average key size observed during the compaction

  • KAFKALESS-1210: Delete sample store topic if exists

  • CPKAFKA-9173: Disable colocated KRaft upgrade from CP 7.1/7.2

  • KMETA-368: Leader will respond to the partions with leader epoch changed.

  • KCFUN-643: Lazy evaluation for dynamic quota

  • KGLOBAL-2035: Unblock local follower fetch requests when records are appended to mirror leader logs

  • KDATA-589: use override option in revert restore copy

  • KAFKALESS-1394: Increase timeout for aborting executions to 5m

  • KCFUN-551, KCFUN-552: Creates CellControlManager and TenantControlManager.

  • KPERF-521: A couple minor fixes to offset commit batching

  • KAFKALESS-1362: Refactor MetricDef to use KafkaMetricDef instead of String as its interface

  • CONFLUENT: Add userResourceId existence check in AuditLogUtils.v2SchemaPrincipal

  • KGLOBAL-2277: increased timeout to resolve flakiness

  • KDATA-487: compact topic restore feature branch

  • KGLOBAL-1583: add network_id to Authenticate audit events for cluster linking

  • Fix minor build issues in connect

  • Add missing curly brace in WorkerSourceTaskTest.java

  • KAFKALESS-1337: Use Time#hiResClockMs() instead of System#currentTimeMillis() in ResourceDistributionGoal

  • Adding dependencies

  • Adding log4j

  • Fixing includes

  • Added new role for schema registry Healthcheck

  • KENGINE-238: Add fetch from follower egress metrics to support SBC

  • KSTORAGE-2479: Replace putBuf with putBuffer in TierObjectStore interface

  • KCFUN-75: PROXY support for Java client

  • Adding exactly_once_source argument in test_file_source_and_sink

  • Updating the docuemntation of atomicMoveWithFallback to match the implementation.

  • Increase the retries during periodical audit

  • KGLOBAL-2273: Make ClusterLinkManagerTest.testClusterLinkConfigReencryption more reliable

  • DP-8824: Use JDK 17 node label if for pull request

  • KDATA-577: Create KRaftLeaderChangeEvent for KRaft DA

  • KAFKALESS-1209: Introduce a ProduceInboundCapacityGoal goal and a PRODUCE_IN Resource

  • KDATA-318: Implement the cloud API

  • KMETA-458 / KAFKA-14292: controlledShutDownOffset should only be updated if set to -1

  • KAFKA-14296: Partition leaders are not demoted during kraft controlled shutdown (#7745)

  • KFS-237: Add new KsqlAppAdmin role

  • KAFKA-14296: Partition leaders are not demoted during kraft controlled shutdown

  • KSTORAGE-2435: Config changes to support different hashing logic for offset map

  • CPU-105: add customplug rbac for connect-plugin-service

  • CONFLUENT: Fix testSslCipherAlter to work with Java 11 and newer

  • KGLOBAL-1707: Set config source correctly for cluster link configs

  • METRICS-4649: Refactor Remote Configuration activeFilters Semantics for 7.3.x

  • METRICS-4649: Refactor Remote Configuration activeFilters Semantics

  • KAFKALESS-1387: add OpenTelemetry support for telemetry metrics in SBC

  • KDATA-355: Add FTPS snapshot integration test

  • AUTHN-1135: Add providerId to JwtIssuer records

  • AUTHN-1276: Renamed identity pool constants as per spec.

  • KMETA-402: Enable audit log provider start up in kraft controller authoriser

  • AUTHN-1199: Create new error messages based on jose4j error codes.

  • KMETA-431: KRaft Controllers should crash after failing to apply any metadata record (#12709)

  • Only prepend LKC if hostname starts with ‘-’

  • METRICS-736: Log Error for audit log of consumption on audit log topic

  • KSTORAGE-3: Unit tests for log recovery when local segments are lost

  • KGLOBAL-998: Add Kafka CLI support for DescribeClusterLinks

  • KMETA-451: Allow broker registration with older confluent.metadata.version

  • KSTORAGE-2277:Smart ISR shrink when a broker has degraded storage

  • Fix testHealthCheckTotalTimeMs test failure

  • KMETA-448: Fix auto leader balancing of linked partitions

  • KENGINE-263: add valid rack set config for FFF

  • KGLOBAL-2033: Consolidate on one reason code instead of having both a reason code and an exception in LinkStateInfo

  • KPLATFORM-1150: fix more jdk 17 test failures

  • Exclude non-fips dependency(bcprov-ext-jdk15on) from trogdor project (#7673)

  • Exclude non-fips dependency coming from trogdor project

  • KMETA-448: Fix auto leader balancing of linked partitions

  • Exclude fips and non-fips bouncycastle dependency jar from connect packages

  • CONFLUENT: Fix response object when authorization fails

  • KGLOBAL-2246: Fix the order of creation and deletion of link ACLs during startup or cluster link config update.

  • KSTORAGE-2304: Add broker load percent to local topic for SBC

  • Add engine team as code owner for transaction and group coordinator

  • CDX-469: RBAC changes for stream sharing SR subjects

  • CONFLUENT: Pass RequestId to forwardedContext in handleEnvelopeRequest

  • KGLOBAL-2037: Cluster link fetching is not resumed after failure.

  • Cherrypick excluded bc jdk15 (non fips) from :ce-broker-plugins as it uses non-fips bc jars during compile time to 7.3.x

  • KMETA-430: Support old confluent.metadata.version feature levels

  • KMETA-436: Fix compatibility break with default principal schema

  • Tier State Machine Refactor in Follower Fetch Path

  • KSTORAGE-2442: MINOR - Memory Usage Fixes for Property Tests

  • Exclude bc jdk15 (non fips) from :ce-broker-plugins as it uses non-fips bc jars during compile time

  • KPERF-483: Add HealthCheckTotalTimeMs metric

  • KSTORAGE-2463: Do not start tier compaction if there are old segments waiting to be tiered

  • CONFLUENT: Update logs in ConfluentAuditLogProvider

  • KGLOBAL-2143: Return error message containing all racks that dont have enough brokers during topic creation validation

  • KGLOBAL-2122: Validate there are enough brokers to satisfy updated topic placement

  • Add new soak clients CLI to expand a Kafka cluster

  • KDATA-554: Update restore timing metrics to include additional time due to retries

  • KAFKALESS-1370: Skip partitions with null leader

  • KPERF-391: Validate topic name collisions through the MetadataCache

  • KAFKALESS-1368: Test for topic metrics availability before accessing it

  • KSTORAGE-2442: Reuse OffsetMaps across CompactionTasks

  • KDATA-503- DA support idempotent producer.

  • KSTORAGE-2410: Add ResetTierPartitionState tool

  • KAFKA-14265: Prefix ACLs may shadow other prefix ACLs

  • KC-2290: Promote when dynamic network health manager mitigation is disabled

  • Fix typo in ensure script for KRaft provisioning

  • KMETA-405: compatibility for kafka-storage –release-version in ensure

  • Add unit and integration tests

  • KGLOBAL-2216: Handle SocketTimeoutException in ClusterLinkConnectionChecker when checking TCP connection

  • KAFKA-14265: Prefix ACLs may shadow other prefix ACLs

  • KGLOBAL-2215: Limit timeout in CreateClusterLinks

  • Add formatter for client quotas

  • KGLOBAL-1578: validate that security protocol of a cloud to cloud link

  • KAFKALESS-1300: Fix reading goals configs from originals, add integration tests

  • KGLOBAL-2218: Eliminate stronger validation on ACL sync enable and filter flags.

  • KPLATFORM-1150: fix jdk 17 test failures

  • KGLOBAL-2144: Rename LinkError to ClusterLinkError and move it to common package

  • KDATA-181: Move existing DA test package to Kafka from unit.kafka

  • DGS-4573: Added more control plane role bindings for schema registry

  • KSTORAGE-2369: retry with doesNotExist option when GCS upload fails

  • KMETA-229: Confluent’s CreateTopicPolicy must handle batches correctly in KRaft mode

  • KGLOBAL-124: Convert Java UUID to Kafka Uuid for CL

  • KAFKALESS-1210: Remove version from RawMetricType and its usages

  • KAFKA-14214: Introduce read-write lock to StandardAuthorizer for consistent ACL reads. (#12628)

  • METRICS-4564: Add new TelemetrySubmitter role

  • Added metrics to monitor bad timestamps

  • KDATA-192: Log internal partition in DumpDB tool

  • dpennaqueiroz/metrics 4620 - Remote Config bug fixes (#7495)

  • MINOR: refactor name for producer state metrics helper

  • dpennaqueiroz/metrics 4620 - Remote Config bug fixes

  • KAFKALESS-1219: Make progress updates refresh the rebalanced topics only

  • KAFKALESS-1300: Set SBC goals to static values when dynamically deleted

  • KPLATFORM-1109: Adding BrokerHealth Status metrics for kc-1786

  • KGLOBAL-2203: Fix MRC assignment logic so rack positioning in placeme

  • Add log message when skipping deletion

  • KCFUN-149: Add new listener ports to Confluent internal list

  • KGLOBAL-2203: Fix MRC assignment logic so rack positioning in placement file is honored

  • KENGINE-245: Add metric for timing between duplicate batches

  • Add log message when skipping deletion

  • KSECURITY-731: Add KAFKA_CLUSTER to scope.resources hierarchy in audit logs

  • KCFUN-310: Broker-side Proxy Protocol V2 Support

  • KSTORAGE-2411: Handle offset map error when calling LogCleaner.validateLog

  • Telemetry Reporter Remote Configuration (#6585)

  • KGLOBAL-1577: Added CCloud mTLS trust manager

  • AUTHN-1173: Add LatencyRecord key and value

  • [KCFUN-468] Add Failed Auth Metric tagged by IP

  • Bump version to 3.3.0

  • KSTORAGE-2116: clamp segment.ms to higher minimum in CCloud

  • CIAM-2304: Add SecurityMetadata:Describe to SecurityAdmin

  • RCCA-8564: log a warning if LDAP login fails becuase of network issues

  • CIAM-2290: Upgrade bc fips drivers

  • KSECURITY-726: Push sessionId and requestId to request logs

  • KSECURITY-579: Only populate the metrics for enabled security mechanisms for the selector.

  • KAFKA-14212: Enhance HttpAccessTokenRetriever to retrieve error messa

  • KAFKA-14156: Built-in partitioner may create suboptimal batches (#12570)

  • KSECURITY-704: Added metric to show BlockedQ size, logs at aysnc auth cancellation call points.

  • CIAM-2304: Add SecurityMetadata:Describe to SecurityAdmin

  • KAFKA-14156: Built-in partitioner may create suboptimal batches (#12570)

  • KENGINE-246: Metric to measure frequency of nonzero sequences when no producer state is present

  • FileTierPartitionState metadata snapshots

  • MINOR: refactor safeSwapForRestoredState

  • KGLOBAL-1812: Fix thread leak in cluster linking test. (#7188)

  • KSTORAGE-2415: remove discarded tier metadata file during FTPS init

  • Add DynamicConfig to enable/disable MetadataCollector

  • Increase timeout, correct error message returned for addBroker test

  • KC-2284: Network Health Manager continues trying to demote when dynamic configuration disabled mitigation

  • KGLOBAL-1797: Remove rack mixing feature flag (#7421)

  • CC-17987: Remove logging of sensitive records

  • MINOR: delete discarded FTPS file in safeSwapForRestoredState

  • KAFKALESS-1123: Add logs to help with diagnosing when submitting tasks to ccrunner

  • KGLOBAL-1797: Remove multi-region cluster rack mixing feature flag

  • Correcting the sox logging command for zk that got incorrectly copied

  • Build and release ZooKeeper image as part of promotion

  • KAFKALESS-1167: Incremental rebalance support for ResourceDistributionGoal

  • EVENTS-1022: Deprecate events-schema logical cluster status fields

  • CONFLUENT: implement ControllerLoadTime metric for KRaft

  • KSTORAGE-2402: Fix byteEndOffset parameter of TierObjectStore.getObject call

  • KGLOBAL-1854: Add more identifying tags for link count and unavailable link count

  • KGLOBAL-2141: Add link error code and message to CreateClusterLinksResponse

  • Network health manager should be started after Replica manager

  • KENGINE-229: Partition.isReplicaIsrEligible is misused in Partition.maybeIncrementLeaderHW

  • Disable failed test CLIENTS-2714

  • KGLOBAL-2133: Improve link error messages

  • CIAM-2305: Add CCloudGrandfatheringRoleBindingAdmin role

  • KENGINE-212: batch transaction requests.

  • KENGINE-211: Add a metric to record the avg latency for a transaction to transit from PreCommit to Commit.

  • Migrate connect tests to KRaft

  • Remove the html end tag from upgrade.html

  • KENGINE-236: Make producer ID expiration ms a dynamic config

  • KCFUN-497: Allow decimal values for IP connection rates [pr-image]

  • MINOR: move Records.sizeInBytes from fetch request callback

  • KSECURITY-150: Add exception stack trace in LdapAuthenticateCallbackHandler for binding failure

  • KGLOBAL-2127: retry for metrics to catchup before giving up in test

  • KAFKALESS-1210: Remove serialization/deserialization for partition/broker metric samples

  • KAFKALESS-817: Set RF = -1 for internal topics if placement constraint is set

  • Convert soak cluster app to go modules

  • KAFKA-14195: Fix KRaft AlterConfig policy usage for Legacy/Full case

  • CDMUM-2116: Make the JwtIssuerStatic constructor public for initialization using jwks

  • AUTHN-1038: Enhanced logging (client and server) for erroneous cases.

  • Re-arrange clm Kraft tests

  • Remove the html end tag from upgrade.html

  • KSTORAGE-2308: delayed stray partition deletion logic

  • KAFKALESS-1209: Refactor BrokerCapacityInfo constructor into a Builder and replace usages

  • KPLATFORM-477: Making the metric LeadershipNetworkHealthStatus a number

  • KMETA-290: Metadata shell supports snapshot and log

  • CDMUM-2116: Make the JwtIssuerStatic.builder to be public

  • KGLOBAL-1803: reset lastCaughtupTime when mirror leader appends to its

  • KSTORAGE-2378: Fix TierMetadataDebugger to accept additional consumer configuration

  • KGLOBAL-2042: Add LinkState to ListClusterLinks RPC

  • KSTORAGE-1924: add kraft mode for TierEpochStateReplicationTest

  • KAFKA-14015: Reconfigure tasks if configs have been changed for restarted connectors in standalone mode(#12568)

  • KPLATFORM-477: Metric to combine leadership info with network health

  • KSECURITY-470: Add support for enum values in kafka request audit logs

  • CONFLUENT: Set exposure field to AuthenticationInfo in request audit logs

  • KSECURITY-602: Add request and connection id to authentication and authorization audit logs

  • KGLOBAL-2045: Future replica append need not redo epoch validation

  • Don’t include Server info as an HTTP response header in the Connect REST API (#7264)

  • KGLOBAL-2044: Tag unavailable link metric with all reason codes

  • CCLOG-2002: Don’t include Server info as an HTTP response header in the Connect REST API

  • Add required perms for sox logging

  • Log cc-kafka-init and cc-zookeeper latest

  • KGLOBAL-1751: Add enhanced cluster link creation validation

  • KPLATFORM-1012: Fix the start up order of Network Health Manager

  • KGLOBAL-1775: Authenticate NetworkId is allowed to talk to this cluster

  • KC-2276: Add BrokersExcludedForReplicaPlacementCount metric in KRaft

  • KGLOBAL-1803: reset lastCaughtupTime when mirror leader appends to its log

  • KGLOBAL-1754: Add cluster link unavailable info to ListClusterLinksResponse and DescribeClusterLinksResponse

  • AUTHN-1166: Allow schema registry binding Scopes

  • SBC Make ‘invalid.replica.assignment.retry.timeout.ms’ description match

  • CONFLUENT: ConfluentServerAuthorizer fixes to work with new authorizer API

  • Ensure DQ is backwards compatible by ignoring unknown format

  • KENGINE-173: Add metric for number of producer IDs

  • Cherrypick KAFKA-14097: Separate configuration for producer ID expiry (KIP-854)

  • Minor: Fix SOX versions

  • Add Javadoc to undocumented public APIs in SBC

  • KSECURITY-599: - Don’t filter out schema registry healthcheck LSRCs

  • KSECURITY-577: Update log level in RestClient

  • KSECURITY-573: Push management audit events to confluent-audit-log-events-v2 topic

  • KPERF-462: Add sequenceId to each incoming request in each KafkaChannel

  • KAFKALESS-1273: Dynamic Configuration of Incremental Balancing

  • KENGINE-224: Add PartitionsTotalSize metric to GroupCoordinator/TransactionCoordinator

  • Bump cc-base from v18.9.0-jdk17 to v18.15.0-jdk-17

  • SOX logging migration

  • CP 7.3 - Telemetry Reporter Remote Configuration [METRICS-4195][METRICS-4186][METRICS-4189]

  • Gave API key permissions to schema registry roles

  • [METRICS-4576] KafkaServerMultipleExportersSubsetPartitionerTest fix

  • Add Metrics as Codeowner for Subset Partitioner #7152

  • KCFUN-373: KRaft support for launching MultiTenantQuotaConsumer

  • Disk Utilization Detector

  • KAFKALESS-1210: Delete Kafka sample store

  • Artifactory migration

  • KAFKALESS-1248: Enable testSelfHealingWithIgnoredBrokersPresentWithReplicaPlacements

  • Disable co-located KRaft tests

  • CONFLUENT: Add original files from confluent/master

  • KAFKALESS-1254: Enable two tests in BrokerFailureDetectorTest

  • KMETA-247: Bind multiTenantSaslSecretsStore on Controller Server.

  • Fix some lingering test issues

  • CONFLUENT: Add original files from confluent/master

  • KAFKA-14170: Fix NPE in the deleteTopics() code path of KRaft Control

  • KGLOBAL-1812: Fix thread leak in cluster linking test.

  • CONFLUENT: Add original files from confluent/master

  • KAFKA-14170: Fix NPE in the deleteTopics() code path of KRaft Controller

  • KGLOBAL-1777: retry finding a link coordinator instead

  • KDATA-360: Add feature flag and cloud API for TTP snapshots

  • KSECURITY-595: Enhanced AuthenticationException class to include reasonCode and errorInfo

  • KGLOBAL-1812: fixed review comments from PR#7184

  • KGLOBAL-1812: give chance for every resource in harness to close

  • MINOR: Add the “shell” node back to metadata shell

  • KSECURITY-577: Update log level in RestClient

  • KGLOBAL-1979: log error code when updating linked leader epoch fails

  • KSECUTIRY-582: Upgrade com.squareup.okhttp3.okhttp to 4.9.3 (#7116)

  • RCCA-8435: Remove Explicit Checks in Number of Brokers and Partitions in Subset Partitioner

  • KCFUN-166: Reduce tenant sensor expiration

  • KGLOBAL-1958: Fix regression in updating corrupted cluster link configs

  • KSECURITY-155: Add Request_Id, Connection_Id to correlate with Authorization/Authentication/Request Audit Events

  • KAFKALESS-830: Add follower fetch rate at broker level

  • KAFKALESS-830: Set replication bytes in/out for topics

  • KGLOBAL-1750: Add cluster linking connection checker

  • KGLOBAL-1867: Fix the NPE exception in isAutoMirrorTopic() check when the link is failed

  • KSECUTIRY-582: Add direct dependency on com.squareup.okhttp3.okhttp 4.9.3

  • KGLOBAL-1952: Attempt to shutdown both clusters in CL tests even if one fails to avoid thread leak impacting other tests

  • KAFKA-14144: Compare AlterPartition LeaderAndIsr before fencing part

  • KDATA-509: Tier Topic Partition Snapshot (TTPS): FlatBuffers and serialization wrapper

  • KMETA-329: Workaround for AlterPartition regression on stale controllers

  • KAFKA-13785: [10/N][emit final] more unit test for session store and

  • cherrypick KAFKA-14140: Ensure an offline or in-controlled-shutdown replica is not eligible to join ISR in ZooKeeper mode

  • KSTORAGE-2275: Add Windowed Avg/Max/Counter Storage Probe Metrics

  • Fix typo in offset writer thread config name

  • KAFKA-14144: cherry-pick

  • KAFKA-14114: Add Metadata Error Related Metrics

  • KAFKA-14104: Add CRC validation when iterating over Metadata Log Records (#12457)

  • KAFKALESS-1267: Deliver BALANCER_ENABLED event in ccrunner thread

  • METRICS-4507: Add cluster linking metrics to Telemetry Reporter

  • Remove TelemetryReporter dependency on core introduced in KMETA-295

  • KPERF-469: Fix regression in Follower Throttle Condition Check

  • Bump go version to 1.16.15

  • Upgrade ducktape to 0.11.1

  • Request filter should be applied independently on each request thread

  • KAFKA-14114: Add Metadata Error Related Metrics

  • KMETA-329: Workaround for AlterPartition regression on stale controllers

  • KSTORAGE-2293: storage performance metrics - fetch

  • KAFKALESS-1255: Add Javadoc and rename variables to contain their measurement unit

  • Add muckrake mapping for 7.3

  • KAFKA-14107: Upgrade Jetty version

  • KAFKA-14114: Add Metadata Error Related Metrics

  • KCFUN-138: ClientRequestQuotaManager jmh benchmark

  • KSECURITY-478: migrating log4j12 to reload4j, slf4j-log4j12 to slf4j-reload4j.jar (3.3) #775

Security

  • Removed From Supported Operations to follow RBAC Rules

  • Added fix for unit test

  • Fixed import

  • Changed the design of RBAC for Exporters

  • Removed extra line changes

  • Added RBAC for Schema linking Phase 1

  • Remove logging statement

  • Removed bcfips from common

  • Pin bouncycastle fips dependency in confluent-security-plugins

  • Exclude bcpkix-jdk15on as compile dep and add as test dependency

  • SEC-5350: Update netty-codec-http to 4.1.86.Final

  • Fix createBrokerConfig due to Kafka merge

  • Adding null check in AuthorizationFilter operation method

  • DGS-5605: Remove logging statement for idToken

  • Changed operation to compatibility read.

  • Update confluent-schema-registry-security-plugin/src/main/java/io/confluent/kafka/schemaregistry/security/filter/AuthorizationFilter.java

  • Moved comment and updated variable names

  • Added RBAC for /schemas/ids/1/subjects and versions endpoints

  • Adding parameter to createBrokerConfig

  • DGS-5542: Incorporated code review comments and removed the unused parameter schemaRegistryResourceOperation

  • DGS-5542: SchemaId validation for numeric value in authorizer filter

  • Update confluent-schema-registry-security-plugin/src/main/java/io/confluent/kafka/schemaregistry/security/filter/AuthorizationFilter.java

  • Changed from 5 operations to 1

  • Updated tests

  • Added null when schema id does not exist

  • Changed the logic of authorizeSchemaIdLookup

  • Changed to Short

  • Adding OAuth config support for Schema validation

  • Exclude bcpkix-jdk15on as compile dep and add as test dependency

  • Pin bc-nonfips dep as a test dependency

  • Pin bouncycastle fips dependency in confluent-security-plugins

  • Removed bcfips from common

  • Excluded bcfips jars

  • Removed From Supported Operations to follow RBAC Rules

  • Added fix for unit test

  • Changed the design of RBAC for Exporters

  • Fixed import

  • Removed extra line changes

  • Added RBAC for Schema linking Phase 1

  • AUTHN-1087: Explicit define netty versions in kafka-rest plugin

  • DGS-3396: introduce LookupFilter for list apis

  • AUTHN-1087: Upgrade vertx to 4.3.2

  • AUTHN-1087: Upgrade vertx to 3.9.14

  • AUTHN-1325: Update bc-fips version to 1.0.2.3

  • Fix bouncycastle issue

  • CIAM-2416: Extract org resource id from JWT token

  • DGS-5208: remove fetchFromFollower param from CreateBrokerConfigs

  • Fix createBrokerConfig call

  • Exclude bouncycastle non-fips jar from connect packaging

  • Fixed tests

  • Added invalid principal check

  • Fix a NoClassDefFoundError caused by a missing dependency

  • Fixed checkstyle error

  • Requesting permission only for Subject Read operation instead of any of the subject operation in case of GET /schemas

Secret Registry

  • Exclude Non-FIPS dep and use bc-fips dependency

  • Remove unused variables

  • Update RestService.java

  • CCLOG-2349: remove request body from debug logs

  • Refactor: use variable name for argument

  • Add missing parameter in test case

  • Fixing createBrokerConfig

  • Exclude Non-FIPS dep and use bc-fips dependency

  • MINOR: Update createBrokerConfig arguments

  • Update createBrokeConfig

  • Update CODEOWNERS

  • Handle illegal reflection access under java 9+

Control Center

  • RCCA-9557: - Fix broker flapping issue 7.0

  • Update Docker image tag in integration test to be compatible with 7.4.x

  • Use getTokenLifetimeMs from Util

  • Update Docker image tag for integration test

  • Use Docker image tag 7.1.6

  • Increase wait start time for control center in test

  • Make sure Control Center stops properly

  • Change PORT to avoid conflict with TelemetryReporterIntegrationTest

  • Change to make this compatible with 6.2.x

  • KC-2261: timeout websocket connection via jwt token

  • Update CODEOWNWERS to match latest definition from master

  • MMA-13013: Override SSL Stores priority

  • Refactoring- made code more functional and improved readability.

  • Updated NotFoundException message in scenario where topicName provided returns 0 no consumergroupdata.

  • Updated code based on PR feedback.

  • Updated /{consumerGroupId} API to also support topicName queryParam.

  • Improving test cases with scenarios of single consumergroup covering multiple topics. Updated /{consumerGroupId} to not support topicName queryParam, it is not required.

  • Adding unit test for CachedConsumerOffsetsResource

  • MMA-12987, MMA-12439: Fix ControlCenterSecureIntegrationTest Test

  • adding support for topicName in query param to return only consumer groups for that topic

  • MMA-12439: Fix ControlCenterSecureIntegrationTest Test

  • MMA-12980: Fix ConsumeToSocketSerdeTest Test

  • Pin bc-fips version correctly

  • MMA-12439: Update Websocket configuration for Control Center if BasePath supplied

  • Reading password using getPassword instead of getString, this fixes the casting exception

  • MMA-12895: Add New APIs for querying KRaft mode in KafkaResource

  • Adding a config to force armeria health check to use HTTP1

  • Fixing failing test case, due to merge issue

  • Fixing check style error, removing unused import

  • Renaming Health_check to health check

  • MMA-12911: Propagate numPartitions and replication factor from CreateTopicsResult

  • MMA-12912: Disable offset commits, don’t supply group ID

  • Adding config based functionality to force http1 for armeria health checks

  • MINOR: Update repo to use mvn-wrapper to speed up builds

  • MMA-12804: Re-enable failing tests in SslUtilsTest

  • Fix codeowners to make c3 default ownens as well

  • Cherry pick 7746 codewoner

  • RCCA-7746: CCloud RBAC user unable to view messages from UI

  • KEXP-349: experiences code owners

  • RCCA-7746: CCloud RBAC user unable to view messages from UI

  • MMA-12804: [Temp] Ignore tests due to bouncy castle fips dep [7.2.x, master]

  • MMA-9023: memory bounding for streams applications [5.4.x, master]

  • MMA-12768, MMA-12764, MMA-12765: Fix test TelemetryReporterIntegrationTest

  • MMA-12762, MMA-12624: Add testng dependency

  • APIF-2959: Use base SSL config for proxy servlets.

  • Fix Failing Tests due to CC-18163

  • MMA-12556: Build failure: org.json added checked exception in JSONObject

  • Add OmgRawDeserializer for use by KafkaApi

  • Using empty string instead of null to avoid nullpointer exceptions

  • Improved java doc

  • Renamed extraPath to urlPath to make the changes more understandable

  • Checkstyle fixes

  • Added method for extracting any path present in the url, and added before the healthcheck path and after the healthyUrlsMap urls

MQTT Proxy

  • Migrate test to OpenTelemetry

  • Remove the pin of netty version to use the (current) version defined in common

  • Fixing the tests and config validator, to incorporate new changes in validation of MqttDecoder brought in by netty upgrade

  • Upgrade netty

Metadata Service

  • MMA-13145: Update launchdarkly

  • API-665: Accept named listeners when deciding if MDS is enabled.

  • clean testng

  • [Fix build] Drop down to testNG 7.5 - which is the last version to support jdk8

  • Fix org.jetbrains dependency

  • Adapt 7.1.x to testNg 7

  • clean up surefire

  • CIAM-2615: - Bump TestNG to 7.7.0

  • NotNull

  • Fix NotNull import

  • Update CP RBAC tests to run on KRaft Clusters

  • CIAM-2579: update pgsql

  • CIAM-2572: Add PreStop hook to deployment for graceful shutdown

  • Add sgscheduleradmin User devel

  • CIAM-2353: moved all cloud tests to cc-rbac.

  • CIAM-2581: - Robustify additional roledef file specification

  • CIAM-2463: - Make and test CCloudAdmin role to allow for Org0 Apikeys

  • CIAM-2577: Turned off test RbacExtractorMetricsTest

  • CIAM-2352: Moved some unit tests from module rbac-api-server to cc-rbac

  • Add sgscheduleradmin User in stag

  • CIAM-2557: Upgrading base OS for Docker image

  • CIAM-2504: Propagate publish attributes through call stack

  • AUTHN-1569: Create trust service db r/w user for prod

  • CIAM-2420: Add excludePrincipal filter to v2 public list endpoint

  • KPLATFORM-1531: Add kafkaqueuesadmin user in prod

  • CIAM-2533: - Ability to specify additional roledef file for cc-rbac

  • AUTHN-1569: Create trust service db r/w user for stag

  • AUTHN-1569: create read/write account for trust-service devel

  • KPLATFORM-1531: Add kafkaqueuesadmin user in stag

  • Fixed build error relate to FIPS jar for 7.0.x branch

  • Add schema.sql

  • Add kafkaqueuesadmin user in devel

  • CIAM-2527: Lock timeout applied at transaction level for RBAC DB

  • BUGFIX: “Added describe permission to DataSteward and DataDiscovery”

  • Use test branch

  • Bumped prod version to 0.612.0

  • Bumped devel version to 0.612.0

  • AUTHN-860: dbmigrate identitypool access for datasci user [PROD]

  • AUTHN-898: - Enable Trust-Extractor Lifecycle Publish

  • AUTHN-860: dbmigrate identitypool access for datasci user [STAG]

  • CDMUM-2408: Add role bindings to flowserviceadmin for identity providers/pools deletion [PROD]

  • CDMUM-2408: Add role bindings to flowserviceadmin for identity providers/pools deletion [STAG]

  • CIAM-2475: Allow deletion of rbac role bindings for SR Scope

  • Increase buffer size for Proxy Servlet

  • AUTHN-860: dbmigrate identitypool access for datasci user [DEVEL]

  • CIAM-2507: Add CHC Query Time Metric

  • CIAM-2507: Increase number of connection in DB connection pool

  • CDMUM-2408: Add role bindings to flowserviceadmin for identity providers/pools deletion

  • CIAM-2524: - Re-run all grandfathering scripts

  • Bump extractor version in prod

  • CIAM-2495: - Fix KSQL grandfathering queries

  • Promoted 0.598.0 of cc-rbac to devel

  • CIAM-2495: - Prod rbacgrandfatheringadmin needs CCloudKsqlRoleBindingAdmin

  • CIAM-2495: - Devel rbacgrandfatheringadmin needs CCloudKsqlRoleBindingAdmin

  • CIAM-2495: - Stag rbacgrandfatheringadmin needs CCloudKsqlRoleBindingAdmin

  • CIAM-2483: Updating to add some logging to cached client

  • CIAM-2513: Fix CCA SR migration script

  • CIAM-2483: Add a cached client wrapper

  • CIAM-2520: Changed maximum number of rbac role bindings to 4000.

  • CIAM-2506: - Round 2 : Fix SR grandfathering issues found from dry run

  • Bump MDS version in Devel

  • Update Launchdarkly

  • Enabled chcRespnseCache stats

  • CIAM-2505: CHC Query Counter

  • CIAM-2494: - Fix the SR grandfathering queries

  • DGS-5493: Moved DD and DS to different namespace [Updating MDS tests]

  • CDMUM-2403: CDMUM-2130 Fix getAuthenticationinfo compile issue on the RefreshIdentityProviderKeys api

  • AUTHN-1012: Handle empty post and patch requests

  • AUTHN-1291: Create public endpoint for manual jwks refresh

  • AUTHN-1465: - move ld check inside try catch in case of CHC errors

  • AUTHN-1226: Enforce 7 day max jwks key refresh period

  • trust-extractor: throttle CHC requests using local cache

  • CIAM-2402: Grandfathering script: check ISA field for ‘t’ instead of true

  • remove accessToken duplicate code

  • fix string comparion issue

  • CDMUM-2130: Audit log identity(full crn) for all identityPool/user/serviceAccount access

  • CIAM-2490: - Fix migration script to include internal service accounts for connectors and schema validation

  • CIAM-2489: - Split SR and KSQL apikey grandfathering script directories

  • CIAM-2230: Add CCA SR migration scripts

  • CIAM-2489: Service accounts with KSQL Apikeys should be grandfathered too

  • CIAM-2402: Remove owner_type restriction

  • Minor: resolve manualRepublishError in trust-extractor sds publish path

  • RCCA-9784: Promote to prod

  • RCCA-9784: Promote to devel

  • Add trust-extractor LD flag

  • Minor: update pool dao to have correct message sequence ids

  • Fix broken test + adjust manualRepublish to include sds count

  • Minor: pass provider id to JwtIssuerKey constructor

  • DGS-5150: Insert sr healthcheck rolebinding

  • RCCA-9784: Temporarily remove delete of old style JwtIssuer records

  • APIF-3122: Unpin protobuf version.

  • AUTHN 1263 - SDS Trust Service Periodic Publish Integration

  • Move from artifactory for helm

  • Insert schema registry healthcheck rolebinding

  • CIAM-2480: Deleting role bindings that are invalid from database to unblock SR test

  • Promoted 0.564.0 of cc-rbac to prod

  • AUDIT-1230: Upgrade the java library dependency to v1

  • CIAM-2462: - ksqscheduleradmin can grant KsqlAdmin for healthchecks

  • CIAM-2468: - grant flowserviceadmin more roles in prod

  • Revert Extractor Based JWKS Manual Refresh

  • AUTHN-1134: Move create audit to parent resource

  • KFS-251: - added ksqlscheduleradmin to prod

  • CIAM-2374: Added feature that default page size can be set by LD

  • Update java chc client

  • CIAM-2426: Add tests for enforcing checking on org resource id.

  • CIAM-2230: Create README for RBAC Phase 3 migration scripts

  • CIAM-2305: Remove grandfatheringadmin whitelist & x-org check from rbac create/delete

  • DP-9370: - use cc-service-bot to manage Semaphore project

  • DGS-5219: Delete zombie rolebindings for connect systemtests

  • Promote CC RBAC Devel to hal-319, helm-553 to include cascade delete

  • Update chc java client version

  • CIAM-2305: Exclude rbacgrandfatheringadmin from cross org check

  • CIAM-2462: - added migration for ksqlscheduleradmin role in devel

  • CIAM-2462: - added migration for updating role on the ksqlscheduleradmin user

  • CIAM-2305: Use KsqlAdmin and users._organization_id in KSQL/SR migration scripts

  • CDX-484: seed for cdx metadata read role for prod

  • Promote CC-RBAC to Devel to use 0.539.0 to cascade delete resource rolebindings

  • MMA-12624: Fix testng dependencies

  • CIAM-2462: - Test Ksql roles

  • CIAM-2198: Delete Resource Rolebindings fix

  • CIAM-2468: grant flowserviceadmin permission to delete internal role b

  • AUDIT-1202: change methodNames in auditLogs and modify version

  • Added second LD flag, fixed RejectionExecutionException error

  • Upgrade cc-base to v20.6.0-jdk-17

  • CIAM-2258: - sds healthcheck v2

  • CIAM-690: Implement pagination for V2 RBAC Public API list endpoint

  • CIAM-2464: - Fix master not finding new Protobuf method

  • CIAM-2258: - extractor - wire up LatencyRecord emitter and CHC

  • CIAM-2422: Enforce checking on calling org resource id has to match with target org resource id

  • Applied migration

  • Renamed migration file to align with prod changes

  • CIAM-2346: Better log format for jetty request logs’

  • RCCA-9483: OrgAdmin Reactivation for Halliburton

  • AUTHN-812: Log to db jwks refresh errors

  • CIAM-2343: - Validate JWT Token generation using cluster id/name

  • Unsert schema registry healthcheck rolebinding

  • MINOR: Promote To Devel 0.539.0

  • AUTHN-812: generate new jooq objects

  • AUTHN-812: Make stag/prod migrations for jwks error field

  • CIAM-2148: Retry failed consumer seek-back in Extractor Listeners

  • APIF-2959: Use base SSL config for proxy writer.

  • AUTHN-541: fix: Add clientIp to audit logs (app-sec recommendation)

  • CIAM-2427: CHC Client Exception Counter

  • AUTHN-812: Make devel migration for jwks error field

  • CDX-484: seed for cdx metadata read role for devel

  • CDX-484: seed for cdx metadata read role for stage

  • KFS-251: - added ksqlscheduler admin user on stag

  • CIAM-2320: Decrease role bindings that we publish

  • CIAM-2414: Support inclusive Lookup of Managed rolebindings for v2alpha1

  • CIAM-2376: Configured pgaudit for PROD

  • CIAM-2402: Modify SR api key migration script to support internal SAs

  • Update pull_request_template.md

  • AUTHN-1285: Enforce get using provider/org upon read/upd/del

  • CDX-484: fix role bindings for cdx stream share

  • CDX-484: Add role bindings for StreamShareMetadataRead role

  • CIAM-2392: Bump PSQL Version

  • CIAM 2417: Revert to normal tables

  • CIAM-2376: Create pgaudit DB role

  • CDX-469: add db seed for prod environment

  • DGS-5157: add_schemaregistryvalidationadmin_schemaregistryconnectadmin_role for prod environment

  • CDX-469: Fix bad ids and seed StreamShareSRRead role binding

  • CIAM-2376: Added pgaudit config

  • CIAM-2409: Fix Issue with Org Keys containing null values at the end

  • CIAM-2124: Update the Extractor to use Batch API

  • CIAM-2376: Created pgaudit role rds_pgaudit

  • DGS-5155: add_schemaregistryvalidationadmin_schemaregistryconnectadmin_role for devel environment

  • CIAM-2396: - Deploy KsqlAdmin to devel

  • Remove authentication team as codeowner from rbac specific parts

  • CIAM-2376: Configure pgaudit log

  • CIAM-2337: Seeking for unassigned partitions cause seek exception

  • CIAM-2376: Added specific db parameters for MDS

  • modify tests to include schema registry healthcheck role added

  • CIAM-2389: Update topics to history tables to include deactivated records

  • CIAM-2373: Switch to GetPhysicalClusterIdAndK8sClusterIdResponse endpoint from chc

  • CIAM-2343: - Validate JWT Token generation using cluster id/name

  • AUTHN-1135: Fix sequencing of provider records

  • AUTHN-1265: Add force refresh mechanism

  • CIAM-2307: Write Stage 3 schema registry tests in V2CloudResourceOwnerTest

  • Stag migration version

  • Add change to test file

  • Add_schemaregistryvalidationadmin_schemaregistryconnectadmin_role_binding

  • RCCA-9245: Undelete rbs deleted in CIAM-1859 w/principals having only inactive admin bindings

  • CIAM-2376: Created rds_pgaudit db role

  • AUTHN-1135: Add providerId to JwtIssuer record

  • CIAM-2265: Handling of null offset data at start bug

  • CIAM-2338: CHC lifecycle publish type time meter bug

  • CIAM-2369: Upgrade cc-rbac and extractor version to the latest

  • CDMUM-2268: Add more unit test cases for public apis using oauth

  • CDX-469: add db seed for stag environment

  • AUTHN-992: Create manual jwks refresh endpoint

  • CIAM-2035: Add KSQL/SR api key migration scripts

  • CDX-469: add role bindings for SR and stream catalog integration

  • CIAM-1859: Delete crufty BASIC resource level role bindings for active users

  • Update CHC object to allow unknown fields

  • RCCA-9083: Reactivate role bindings deleted by Newswav org delete

  • AUDIT-1170: Nikhil/audit 1170 app sec suggestions

  • AUTHN-541: trust-service: Expose principal user id to customer

  • Upgrade auditlog-emitter-java version

  • Remove useless varieable

  • Audit log identityPool and full crn of external user in trust service

  • CIAM-2263: Refactor tests to be independent of each other and write to different topics

  • Update the identity provider in response to be identity_provider_id

  • CIAM-2320: Change RBAC orm DB query to handle exact and descendant scopes

  • AUDIT-1110: Auditing cc rbac crud

  • CIAM-2330: Fix Issue with data inconsistency CHC

  • CIAM-2291: Enable using the physical cluster mapping from CHC messages

  • Bump postgresql from 42.3.3 to 42.4.1

  • AUTHN-1212: Skip loading audit config for legacy pkc rbac

  • EVENTS-1022: Update events-schema to latest

  • CIAM-2213: - Extract a RepeatedJobRunner from existing Org0 healthcheck

  • Update sds global Kafka lkc/pkc ids for devel and prod

  • CIAM-2305: Add MDS local tests for CCloudGrandfatheringRoleBindingAdmin

  • Updated cc-rbac to 0.465.0(225)

  • CIAM-2313: A LD Flag for CHC lifecycle

  • CIAM-2305: Seed rbacgrandfatheringadmin rb dbmigration [devel, stag, prod]

  • CIAM-1309: Fix undelete endpoints spec

  • RCCA-9749: Restored Org Admin role for user u-l670z2

  • Fix fmt issue

  • Rename algorithmWhitelists

  • Print identity claim

  • Add non-sub identity claim test

  • Use JwtIssuerStatic

  • Add constraints into the authenticator

  • Build authenticator on-demand

  • Fix test failure and syntax issue

  • Add more assertion in test cases

  • Add OAuth authentication API to validate OAuth token and corresponding identity pool

  • CIAM-2214: Add API to get all K8 ids from CHC

  • CIAM-1692: Delete crufty rolebindings associated with deleted users

  • CIAM-2318: Deleted RBAC role bindings for deleted clusters

  • AUDIT-1163: Add clearingHouse api-keys in config

  • Add more logging to CHC to understand consumption bug and also publish duration

  • Fix flaky tests due to multithreaded environment for chc listeners

  • CIAM-2033: Authorize request body validator

  • Fix the org_resource_id naming

  • Use underscore in ValidateOAuthRequest and ValidateOAuthResponse variable

  • CIAM-1931: Meters to capture Extractor consumer/producer failures to consume records from Events/Chc Kafka

  • Artifactory migration

  • CIAM-2295: Gating Kafka publish to only be done on lifecycle publish

  • Update Dockerfile

  • AUTHN-1147: Skip cts-sdk-go deploy

  • CIAM-2292: Update cc-rbac/rbac-extractor deployment order to stag->devel->prod

  • AUTHN-1147: Auto generate trust service cts-sdk-go

  • CIAM-2288: Temp Workaround: To prevent publishing KSQL and SR rolebindings for new Kafka Cluster Lifecycle flow

  • CIAM-2285: Upgrade Chc version

  • CIAM-2243: CLI: Create and Delete command fail with 404 Role Not found for SR/KSQL

  • AUTHN-965: - Make build work with old and new jvms

  • CIAM-2212: Publish SDS role bindings to SDS Sync Pipeline instead of Kafka Sync Pipeline

  • CIAM-1974: Env rolebinding publish for new LC creation

  • CIAM-1896: Added metrics for LD used by RBAC quotas

  • Used cluster.id instead of creating new one cloudCluster.id

  • CIAM-1829: Org rolebinding publish for new LC creation

  • CIAM-2217: Default to JSON type if accept all header present

  • Updated v2list type

  • CIAM-2236: RBAC resource to roles UI endpoint

  • Fixed yaml ref

  • CIAM-2240: Refactor CHC and Sync Listeners and Fix tests

  • Specified content return in yaml

  • Returns list of role bindings, updated test clarity

  • Fixed line length errors

  • Fixed whitespacing

  • Returns role bindings that were undeleted and throws a 400 error for valid requests but no undeletion

  • CIAM-1965: Publish K8 ID for RBAC Crud Changes for KSQL/SR with K8 ID from CHC

  • CIAM-2246: Enforce LD auth.rbac.limits.enable on org resource id for better cont

  • Updated test to reflect edge cases

  • Fixed naming and wider tests for undelete endpoints

  • Update UserUndeleteRequest.java

  • Update ScopeUndeleteRequest.java

  • Update release.svg

  • Update mothership-seed.sql

  • Update mk-include-git-hash

  • Updated rbacdb scope tests

  • Updated rbacdb tests

  • Automated newReason for both endpoints

  • Automatic newReason generated, user no longer passes it in

  • Remade tests with cleaner code, touched up formatting, changed undeleteRequest to userUndeleteRequest

  • Whitespace issues fixed

  • Caught malformed reason field at api level

  • Caught malformed JSON reason field error

  • Fix tabbing issue on yaml file

  • Updated v2alpha1.yaml

  • Changed crnString variable to ‘crn’

  • Updated tests to reflect that endpoint now checks for valid orgIds and parameters

  • Cleaned up spacing and added safety comments

  • Changed validators for scopeUndelete

  • Added validators and removed debug print lines

  • Test no authorizor

  • Add debug lines

  • Debug roles endpoint, testing docker image creation

  • Remove debug print statement

  • Added undelete by scope

  • Update RbacOrmDbService.java

  • Update DuplicateRequest.java

  • Created and tested user undelete function

Replicator

  • used spotbugs version variable instead

  • use spotbugs annotations instead of findbugs

  • resolving compile issue

  • KGLOBAL-3224 removed find bugs usage

  • remove aws-maven plugin to unblock the downstream validation for common: RCCA-10412, APPSEC-2551

  • Fixed deprecated method usage

  • Changed to 5 sec to honor TASK_SHUTDOWN_GRACEFUL_TIMEOUT_MS_CONFIG

  • Changed default to 120 sec to match topic config sync

  • KGLOBAL-3060: added consumer poll timeout ms property

  • Resolve compile issues created by change in signature due to KAFKA-14346

  • KGLOBAL-2436: Don’t seek to beginning on pause for schema translator

  • REPL-2055-: Log WakeupException at debug level