Common

• 90634c43 - Bump zookeeper to 3.8.7

• PR-1165 - Set jetty.version to a range so public builds resolve

• 96450273 - Update Netty to 4.1.139.Final

• b7334945 - Update Snappy to 1.1.10.11

• 404db625 - Bump jackson.version to 2.18.11

• 0903aa79 - Update Bouncy Castle libraries to current version

• b1f84024 - Update Jetty to 9.4.65

• cb0f7066 - Add opentelemetry bom to common to ensure proper versions in maven builds

• a2a875ee - Update log4j to 2.25.5

Kafka

• 62efa683 - Use ZooKeeper 3.8.7 instead of 3.8.8 (3.8.8 not yet released)

• PR-2303 - Set the Jetty version to a range so public builds resolve

• c487691a - Update Netty to 4.1.139.Final

• 1c1be93a - Bump ZooKeeper to 3.8.8

• PR-18565 - Use mocks instead of a real DNS lookup to the outside (#18565)

• PR-2243 - Bound array and tagged-field allocation in generated message readers

• 775a5bd9 - Bump jackson to 2.18.11

• PR-2185 - Bump netty from 4.1.136.Final to 4.1.138.Final

• 2be89c24 - Update jline to 3.30.17

• PR-2162 - Update Jetty to 9.4.65

ksqlDB

• PR-11154 - Gate debug.request behind the internal-listener check

• PR-11217 - Add authorization validation to query stream endpoint

• PR-11197 - KSQL-15645

• fa3ad988 - Update Netty to 4.1.139.Final

• PR-11204 - Update jline

• PR-11201 - Update netty to 4.1.138

• PR-11139 - Remove stale jol-core license entry

• PR-11186 - Port: SpotBugs suppression fixes from #11155

• PR-11170 - Bump wire-runtime-jvm/wire-schema-jvm to 6.3.0

• fcfee1d0 - Bump Netty to 4.1.137.Final and httpclient5 to 5.6.3

• PR-11133 - Bound the pull query queues and make saturation observable

REST Proxy

• PR-1512 - Apply jackson StreamReadConstraints override to v2 JSON consumer state

• d42bd3f3 - Bump async-http-client to 2.16.1

• 8a331efc - Enable nano versions on 7.6.x so Release stops redeploying X.Y.Z-0

• aae46000 - Fix Invalid HTTP Method Name ‘*’ in AuthUtil constraint mappings

• 9441ad5f - Bump async-http-client to 2.16.0

Schema Registry

• PR-4756 - Remove snappy-java override and pin swagger-maven-plugin

• PR-4718 - Backport cycle-safe JsonSchemaComparator to 7.6.x

• PR-4640 - Remove duplicate kafka-connect-maven-plugin declaration in avro-converter

• PR-4699 - Add remote reference blocking to json-sKema

• 2e2f64e4 - Delete prepopulated mappings test since later branches delete it

• PR-4684 - DGS-25136

• PR-4687 - Retry on transient poll errors

• PR-4643 - Fix record-name strategy for indexed messages

• PR-4634 - Key Avro serde caches by subject and schema id

• PR-4610 - Resolve derive.type without initializing before type check

• 00ad389f - Teeny fix

• 4f366abb - Fix compile failures

• fe57e9cd - Bump wire.version

• PR-4562 - Exclude non-FIPS BouncyCastle jars from kafka-serde-tools package

• PR-4514 - Add configuration to control fetching external references for JSON Schema

Common

• c467acb0 - Add opentelemetry bom to common to ensure proper versions in maven builds

• 9f9f643d - Update Netty to 4.1.137

• 35253c74 - Move version definition to variable, re-trigger build

• be663738 - update mina-core

• 0ab54068 - Update Jetty to 9.4.63 in common 7.5-7.9

• 9d138600 - Update Netty to 4.1.136

• 4047f12e - Update Jackson Version

• 2b3854b9 - Update netty to 4.1.135

ksqlDB

• 9f9898cd - Bump Netty to 4.1.137.Final and httpclient5 to 5.6.3

• PR-11141 - Exclude non-FIPS bcpkix-jdk18on from broker-plugins dependency

• PR-11130 - fix: add property parser to 2 endpoints

• PR-11129 - Support allowlist for all KSQL endpoints that allows user overrides

• 90aab84a - fix: update logging implementation to use log4j instead of log4j2

• a7aad96d - feat: add ConfigOverrideLogger for logging property overrides

• PR-11121 - Bump jline to 3.30.14, fix JLineReaderTest hang

• PR-11123 - Bind the default JMX listener to loopback

• PR-11099 - Cleanup JMX configuration defaults

• 6632c01c - Revert jline version to 3.25.0

• PR-11112 - Bump Netty version to 4.1.136.Final

• PR-11109 - limit col size

• 8436188a - jline version bumps

• PR-11097 - fix(rest server): stop heartbeat/lag agents before vertx close to avoid shutdown hang

• c9b7003a - Bump Netty version to 4.1.135.Final

• ca9a61c9 - fix: bump Netty version to 4.1.135.Final

• 0caab489 - downgrade netty-tcnative to match netty-bom

• 235c95ea - Update netty to 4.1.135

• PR-11073 - MINOR: Fix BytesUtils.arrayEquals byte comparison and loop bounds

Schema Registry

• 0717b4e3 - Exclude non-FIPS BouncyCastle jars from kafka-serde-tools package

• PR-4492 - Fix Protobuf xformations re: absent/unknown fields and map keys

• feb2216e - Upgrade wire to 6.4.5

• PR-4465 - Bump sdk version on earlier branches

• PR-4457 - Fix JSON Schema compat check

• PR-4441 - Fix handling of Proto custom options during normalization

• PR-4434 - fix: skip schema normalization in IMPORT mode

• PR-4418 - Remove incorrect default for subject in RewrapDeks tool

• PR-4416 - Add support for saving Azure key version with DEK

• PR-4405 - Key Avro serde caches by schema id

• PR-4404 - Fix serializing fixed-size Avro decimals with small unscaled value

• PR-4397 - Fix oneof handling of wrapper types in protobuf converter

• PR-4396 - Fix oneofs in protobuf converter for nullables (write-side)

• PR-4392 - Fix oneofs in protobuf converter with wrapper/optional for nullables

• 3f5ff243 - Detect incompatible oneof field changes hidden by oneof rename/removal

• 33657e5b - Fix fixed-point calc

• 350fdb61 - Memoize JSON Schema diff to prevent combinatorial explosion

• 0297dd48 - Refactor

• a6352b44 - Fix normalize schema bug

• PR-4342 - Exclude LGPL findbugs annotations from jackson-datatype-protobuf

Common

• 8365d540 - Update Netty to 4.1.135

ksqlDB

• d4711e2e - Bump Netty version to 4.1.135.Final

Schema Registry

• Implemented a security fix for Schema Registry.

Common

• bd2bfe51 - Update mina-core to 2.2.7

• 902d6f6b - Pin plexus-utils dependency to match ce-kafka

• e0509516 - Update logredactor

• 9c4d0eb1 - Update Jetty to 9.4.61

• c35f82c6 - Re-scope spotbugs-annotations

• c92168f8 - Update Netty to 4.1.133

• feef7ef9 - Update bouncycastle to 1.84

• 9c2d2eaa - Replace jetty-bom with individual dependency definitions

• 93f81673 - Add log4j2 version definition and update version in log4j2-extensions

• f6f72532 - Update Netty to 4.1.132

• f3d00a7d - Update Jackson to 2.18.6

• PR-927 - Rename docker-arm profile to docker-fabric8 and migration changes

• 88413aa1 - Update Jetty to 9.4.60 and ZooKeeper to 3.8.6

• 62db0fed - Update Avro to 1.11.5 in 7.6.10

• 71f054dd - Update Avro to 1.11.5 in 7.5.13

• 217dac01 - Update Avro to 1.11.5 in 7.4.14

• d5a703f7 - Update Avro to latest patch release

Kafka

• PR-2068 - Update Netty to 4.1.133 in 3.7

• 69df40cc - Upgrade Netty to 4.1.132.Final

• 3597045b - Bump maven-artifact to 3.9.15

• 8ae84a4c - Upgrade Jetty from 9.4.59 to 9.4.60

• 6e2d5fa4 - Bump Jackson to 2.18.6

• 2e3fb1e7 - Upgrade ZooKeeper from 3.8.4 to 3.8.6 with SLF4J version pin

ksqlDB

• PR-11066 - Enforce DenyListPropertyValidator on in-SQL SET statements.

• PR-11052 - TransientQueryCleanup leak-detection ordering + TransientQueryQueue LIMIT-handler null-guard

• a5803cee - Update vertx and Netty to resolve known security issues

• PR-11033 - Fix: wait for broker to unfence in EmbeddedSingleNodeKafkaCluster.start()

• PR-11030 - Fix: always retry admin stmts on topic-not-found, even with expectedError

• PR-11029 - Fix: retry admin statements on transient topic-not-found errors

• PR-11023 - Fix: KsqlTarget and SchemaRegistryUtil prefix collision

• PR-11014 - Feat(config): deprecate ksql.runtime.feature.shared.enabled

• PR-11010 - Mark spotbugs-annotations as provided scope as they are only used for static code analysis.

• PR-11009 - Fix type mismatch error for @JsonCreator. Wrap up the passed Map into ConcurrentHashMap internally.

• e8475caf - Bump Netty to 4.1.132.Final

• PR-10988 - Fix to prevent error when HTTP response fails in KsqlTarget

• PR-10985 - Remove cc-docker-ksql as downstream branch

• PR-10986 - Remove unused dependency for airlift.

• PR-10975 - Add a no arg constructor for ProtobufNoSRConverter

• PR-10970 - Fix printTopic error when SSL is enabled

• 512f69e5 - Backport pr_ci_gating and status_level from master to service.yml

REST Proxy

• PR-1473 - Disable javaType resolution in JSONSCHEMA consumer (7.5.x)

• 94dbce1e - Fix ProduceActionRequestSizeLimitIntegrationTest

• PR-1449 - Fix integration test failures (rate limit broken pipe, Jackson string length)

• e918b7a1 - Update async-http-client

• 9af8e309 - Remove Jackson definitions already present in common

• b77450cc - Use mvn help:evaluate instead of regex for VERSION fallback

• 32898c8a - Tighten VERSION grep and drop unused mkdir BINPATH

• PR-684 - Bump async-http-client to 2.14.5

• PR-669 - Fix header validation to allow colons in header values

• de983175 - Backport pr_ci_gating and status_level from master to service.yml

Schema Registry

• bbd699d9 - Adjust logging level in NONE action

• PR-4312 - Add size limit handler

• 57320568 - Add allow package config for JSON deserializer

• 75b6c604 - Fix AWS KMS driver to use AssumeRoleWithWebIdentity in IRSA pods

• 560bf4ca - Handle anyOf/allOf in JSON transforms

• PR-4148 - DefaultToGlobal available in SRClient

• 118b46ba - Nits

• fedca30c - Change structire to filter

• a2d0b821 - Change header name

• PR-4223 - Fix UriPercentEncoder to correctly encode multi-byte Unicode characters

• 865f274c - Tests structure change

• 1c62d809 - Expose exporter name as part of logs in schema exporter destination

• 108e27ab - Remove println

• 47f2ece1 - Fix compat check on circular ref for JSON Schema 2020-12-20

• PR-4207 - Fix incorrect OpenAPI example for getSchemaOnly endpoints

• PR-4199 - Fix handling of JSON Schema with a single child

• PR-4193 - Fix FindTags endpoint handling of JSON Schema with oneOf containing $ref

• PR-4159 - Increase timeout of 7.4.x build

• 89b3155e - Quote lang_version in service.yml to fix service-bot validation

• 52ac4f7c - Backport pr_ci_gating and status_level from master to service.yml

ksqlDB

• Implemented a security fix for ksqlDB.

Schema Registry

• Resolved a security vulnerability in io.confluent.kafka-json-schema-serializer

• PR-4116 - Fix normalize() in Avro and JSON Schema to preserve metadata and ruleSet

Common

• e8cf967f - Update Avro to 1.11.5 in 7.7.8

• PR-902 - Add –direct-pom-edit support to ci.py for faster CI builds

• 745599ac - Update Jetty to 9.4.59

• a9b992c5 - Update Log Redactor to 1.0.17 and Netty to 4.1.130

• faa63c96 - Update dependency org.bitbucket.b_c:jose4j to v0.9.6

• PR-887 - Update dependency org.apache.logging.log4j:log4j-core to v2.25.3

• c33caa1b - Update Netty to 4.1.129

Kafka

• PR-1895 - Update Jetty to 9.4.59 in 3.7

• PR-1881 - Update Netty to 4.1.130 and Jose to 0.9.6 in 3.7

• PR-21288 - Fix rare producer message corruption, don’t reuse buffers

• PR-1861 - Bump at.yawk.lz4:lz4-java

• PR-1853 - Request org.lz4:lz4-java in kafka

• b35d0f14 - Fix indentation

• 073c8706 - Remove commonlangs2 sub

• a5cf44eb - Make comment concise

• 6e9fcf38 - Updated dep

ksqlDB

• PR-10936 - Bump up vert.x dependency version

• PR-10932 - Update plugin version

• PR-10920 - Update Netty.

• PR-10916 - Fix for jersey-client dependency.

• PR-10905 - Print deprecated configurations in maven builds.

REST Proxy

• PR-1273 - Work around jackson databind string length limit

• 8171a366 - Fix partial permission issue for getConsumerGroups()

• 1df57555 - Bump Jersey dep to 2.46

• PR-648 - Update jersey.version to 2.46

Schema Registry

• PR-4116 - Fix normalize() in Avro and JSON Schema to preserve metadata and ruleSet

• 88b49837 - Checkstyle lint

• 5f7409e0 - Fix params

• PR-4089 - Fix MetadataEncoderService key rotation and add test coverage

• ee7d984f - Fix Avro union evolution for specific reader

• PR-4077 - Exclude common-lang-2.6 from rest-utils to avoid conflicts with common-lang3

• 13cd3fc7 - Add more tests for DEK rewrap functionality

• PR-4046 - Add tool to rewrap DEKs with latest version of KEK

• PR-4033 - Don’t throw exception for JSON schema with format=serialized

• PR-4019 - Handle raw http in JSON Schema drafts

Common

• PR-880 - Update dependency org.bouncycastle:bc-fips to v2.1.2 [SECURITY] (7.4.x)

• 2a944f44 - Use correct groupname for commons-lang3

• 25ab4be8 - Fix the scope of imported pom

• 4eab14b4 - Update netty and bouncycastle

• 1b8bb0d3 - Add dependency management for grpc libraries and commons-lang3

• 6b641984 - Update jetty to 9.4.58.v20250814 in 7.6.7

• 2763e1a3 - Update jetty to 9.4.58.v20250814 in 7.5.10

• 8c5f24d8 - Update jetty to 9.4.58.v20250814 in 7.4.11

• 179e9ad6 - Update jetty to 9.4.58.v20250814 in 7.3.14

• c3793950 - Update azure libraries

• 351727d4 - Update netty to 4.1.125

• 1e7d8099 - Update netty to 4.1.125

• 45817e38 - Update netty to 4.1.125

• 63d8206d - Update netty to 4.1.125

• 731e21af - Update netty to 4.1.225

• 6897f0eb - Update netty to 4.1.225

• 28503347 - Update netty to 4.1.225

• 06c00dc5 - Update netty to 4.1.225

• de6eef11 - Update netty to 4.1.125

• fdbb7f8a - Update bc-fips versions to match ce-kafka / latest security updates in verified fips version

• a86ab6d5 - Update jetty, add bc-fips to renovatebot ignore file

• PR-819 - Update dependency org.bouncycastle:bc-fips to v2.1.1 [SECURITY] (7.2.x)

ksqlDB

• PR-10903 - Update dependency io.vertx:vertx-web to v4.5.22

• PR-10361 - Classify exceptions as user errors

• PR-10893 - Exclude kafka.brokerTypeTopicClient from thread pool check

• PR-10869 - Upgrade jline dependency to address terminal sizing issue

• cb2697ce - Bump up tcnative version to be in sync with netty

• PR-10865 - Bump up tcnative dependency to be in sync with netty

• PR-10854 - Update netty to 4.1.125

• 9576ff68 - Update netty to 4.1.125 in 7.6.7

• b7473128 - Update netty to 4.1.125 in 7.5.10

• 2f04c52c - Update netty to 4.1.125 in 7.4.11

• c5dc9fd5 - Update netty to 4.1.125 in 7.3.14

• PR-10833 - Set the order of timestamp fields to be processed to avoid incorrect modifications for daylight savings

• PR-10845 - Unpin jackson version

• PR-10841 - Unpin jackson version and upgrade shade plugin

• PR-10839 - Update dependency io.netty:netty-codec to v4.1.125.Final [SECURITY] (7.2.x)

• fd1e276f - Update netty version

• aa50267d - Update netty version

• 02310d14 - Update netty version

• 73f28ebd - Update netty version

• d760e504 - Update netty version

• a3f4c676 - Update netty version

• 53ee8cae - Update netty version

• PR-10795 - Update dependency io.netty:netty-codec-http2 to v4.1.124.Final [SECURITY] (7.2.x)

• ff42df17 - Update dependency io.netty:netty-codec-http2 to v4.1.124.Final [SECURITY]

REST Proxy

• PR-1420 - Fix spotbug check issue

• PR-1415 - Remove spotbug-annotations

Schema Registry

• PR-3994 - Add Confluent-Accept-Unknown-Properties header to SR client

• PR-3981 - Fix use of JSON Schema serializer for key

• PR-3977 - Minor optimization to remove synchronized block

• PR-3973 - Ensure lazy initialization is thread-safe

• PR-3972 - Only use AWS role if the web identity token file is not set

• cf58140d - Handling trailing hash in JSON Schema drafts

• PR-3955 - Ensure canonicalString() method is thread-safe

• PR-3950 - In AvroConverter use name-based getter/setter only for valid names

• PR-3935 - Ensure payloads are not unnecessarily redacted in DLQ

• PR-3924 - Add AppRole auth for HC Vault

• PR-3902 - Follow up PR to handle old CP versions

• PR-3896 - Update RestService warn log to include error class name

• PR-3890 - Ensure tags are used during schema evolution

• PR-3880 - Fix exception when evolving Avro schema with rules

• PR-3876 - Fix merge issue; add JavaDoc for invalidate methods

• PR-3875 - Refine cache invalidation

• PR-3871 - Some fixes to tests/lints

• PR-3870 - Add sr-version to sr client API

• 1cdf19fe - Re-organize imports

• PR-3864 - Organizing imports

• PR-3862 - Add deployment metadata endpoint

Connect

• Bug fix: Confluent Enterprise distribution of Kafka Connect workers (CE, connect-server, or connect-server-base): Fixed a plugin class loading bug that prevented certain non-isolated classes (for example, javax.jms) from being loaded from plugin JARs. For more information, see article.

Common

• 6452c47a - Update jetty to 9.4.58.v20250814 in 7.7.5

• 3f2822ab - Update netty to 4.1.225

• PR-808 - Adding license for assembly-plugin-boilerplate and build-tools modules

• 79dbce2c - Update jackson bom to match ce-kafka version

• 06637ab6 - Pin commons beanutils and validator

Kafka

• PR-1785 - Update netty dependency

• PR-1773 - Bump jetty version

• PR-1761 - Add run_tags to worker-ami and aws-packer

• PR-1750 - Change ci_tools import path

• PR-1704 - In case of infra failure in ccs-kafka tag that as infra failure in testbreak

• PR-19939 - Force bump commons-beanutils

• PR-20142 - Undeprecate JoinGroup API versions

• PR-1686 - migrate from vagrant to terraform

• PR-1676 - exclude newly added files to fix build

• PR-1667 - add cloudwatch metrics to view cpu, memory and disk usage

• PR-1650 - upgrade ducktape and requests version

ksqlDB

• PR-10869 - Upgrade jline dependency to address terminal sizing issue

• f145df25 - Update netty dependency

• PR-10833 - Set the order of timestamp fields to be processed to avoid incorrect modifications for time changes.

• PR-10782 - Improve configuration filtering for query overrides.

• PR-10779 - Bump the commons-lang3 version to 3.18.0

REST Proxy

• f05cee42 - Remove bc dependency that is being merged in bc-prov

• PR-1403 - Hardcode installation dependency version

Schema Registry

• PR-3860 - Add sr type endpoint

• PR-3837 - Hardcode installation dependency version

• PR-3855 - Minor refactoring; add test

• PR-3850 - Prevent re-registration of schema with dangling reference

• PR-3851 - For shared KEKs avoid calling KMS when deleting DEKs

• PR-3840 - Fix build due to Jackson upgrade to 2.16

• PR-3838 - Upgrade json-sKema to 0.24.0

• PR-3822 - Allow alternate KMS key IDs on a KEK

• PR-3821 - Upgrade commons lang version

• PR-3825 - Add Apache and CCL licenses to the dek-* modules

• PR-3823 - Fix license headers

• 752b07bc - Minor refactor to add subject to create DEK API

• PR-3816 - Ensure DEKs are decrypted if version=-1 for shared KEKs

• PR-3808 - Add support for JSON Schema 2020-12 in JsonSchemaUtils

• PR-3787 - Changed resource logging to log subject name assotiation rather than hash contents

• PR-3802 - Fix field traversals when POJO property is missing

• PR-3794 - Handle decimals based on fixed type in Avro converter

• PR-3784 - Fix parsing of recursive definitions for JSON Schema 2020-12

• PR-3773 - send NetworkException instead of ConnectionException for IO exceptions in Connect converters

• PR-3767 - Upgrade jackson-datatype-protobuf to 0.9.16

• PR-3760 - 7.8 below java doc fix

• PR-3761 - javadoc fix in ParsedSchema

• PR-3758 - Add javadoc as part of the maven build

• PR-3750 - Bump max DEK registry key default

• PR-3746 - Generate correct field type for Decimal in JSON converter

• PR-3738 - Send ConnectException for IO exceptions in connect converters

• 42349149 - exposed context name for mode/config errors

• PR-3724 - Upgrade everit json-schema to 1.14.6

Common

• 44f2c2e4 - Update jmx FF-20502

• PR-778 - Add property for AWS SDK v2

• 467efd8f - Fix missing version definition

• cbc66130 - Add commons-compress to unify versions with ce-kafka

• 54d73bbe - Update azure dependendecies to versions defined in azure-bom 1.2.32

Kafka

• PR-1636 - Replace all occurrences of ‘s1-prod-ubuntu20-04’ with ‘s1-prod-ubuntu24-04’ (#1554)

ksqlDB

• PR-10722 - Update dependency Pygments to v2.15.1 [SECURITY] (7.1.x)

• PR-10728 - Update the ZK notices text version under licenses

• PR-10726 - Update dependency jinja2 to v3.1.6 [SECURITY] (7.1.x)

REST Proxy

• PR-491 - Add configuration hsts.header.enable to control whether we response with HSTS header

• 6480173f - Rename snihandler

• c23b84c7 - Add config: sni.host.check.enabled for SNI host checking in SecureRequestCustomizer

• 034b803a - Implement TenantPrefixSniHandler to perform prefix validation using the tenant name

• 3b3ff728 - Add config for forwarded request customizer

Schema Registry

• PR-3711 - Add warning log whenever baseUrl changes in RestService

• PR-3710 - Improve unit test coverage (edge case handling) for SetCompatibilityMojoTest

• PR-3698 - Distinguish between null and missing props for PUT

• PR-3691 - Start with first URL in UrlList

• PR-3693 - Ensure AvroConverter does not rely on field order

• PR-3688 - Use aws-java-sdk-v2.version from common

• PR-3690 - Downgrade aws sdk v2 to match kafka on 7.7.x

• PR-3682 - Ignore JSON schema fields not in the Java class

• 306f08dc - Upgrade mbknor library to 1.0.39.3

• 7505a200 - Handle default context properly for /config and /mode

• PR-3664 - Log schema reads, writes and deletes

• PR-3648 - Update dependency junit:junit to v4.13.1 [SECURITY] (7.1.x)

• PR-3666 - Add RuleSet.isEmpty method

• PR-3662 - Update the ZK notices text version under licenses

• PR-3656 - Add minimal validation for certain KMS key IDs

• PR-3641 - Add retry test for ser/de/restservice

• PR-3640 - Handle URL-encoded paths in ContextFilter

• PR-3631 - Deep copy for Schema

• PR-3621 - Always override X-Forwarded-For header on follower call

• PR-3619 - Expand semantic check when looking up schemas

• PR-3581 - SR dek paginations

• PR-3616 - Update test to use qualified subject names and fix a typo

• PR-3615 - Upgrade to aws sdk 2.30.33

• PR-3614 - Increase max length for kek and rule names

• PR-3610 - Exclude an imported 3P util class from test coverage

• PR-3609 - Add dek-registry module for coverage aggregation

• PR-3608 - Test coverage: fix the module and updated the tests.

• 76c315ae - Ensure use of DEK object is thread-safe

• PR-3605 - Update deps for CSPs

• PR-3599 - Improve test coverage (no feature change)

• PR-3590 - Add retry for schema exporter upon IOException

• PR-3582 - Add missing tests for DekRegistry

• PR-3592 - Enhance integration test w/additional lookup

• PR-3584 - Upgrade json-skema to 0.20

• PR-3578 - Pagination of SR APIs (Subject and Schema)

• PR-3575 - Support Protobuf oneof fields in Data Contract rules

Common

• fde07db0 - Update Netty to 4.1.118

• f982ea91 - Update Bouncycastle Dependencies

• da33ed03 - Fix the Merge Conflict

• 29819815 - Update Jetty to 9.4.57

• ffe9fa48 - Update Bouncycastle to Version 2.x for Testing in CP

• d1341a9b - Add Commons Codec to Dependency Management

• fbb9acf3 - Pin Version of Mina-Core to Override Version From Jetty

• 9277c65c - Update Netty to 4.1.115

• bbde81e9 - Change Bctls-Fips to 1.0.13

• c3786289 - Change Bctls-Fips to 1.0.13

• f78bf5b6 - Change Bctls-Fips to 1.0.13

• da4ebe39 - Change Bctls-Fips to 1.0.13

• 86e4f1e2 - Change Bctls-Fips to 1.0.13

• 93da41d2 - Change Bctls-Fips to 1.0.13

• 60e02333 - Change Bouncycastle Bctls Due to Downstream Failues

• 16ab459f - Change Bouncycastle

• 9af7b9a3 - Change Bouncycastle

• f478c73e - Change Bouncycastle

• 644fbf03 - Change Bouncycastle

• c02b71d4 - Change Bouncycastle

• 62ad6c9a - Change Bouncycastle

• PR-708 - Change Verion Bouncycastle Fips Libraries Upgrade

• 7fa06075 - Update Cyclonedx Plugin( #704)

Kafka

• PR-18736 - Metadata V0-V3 Should Be Undeprecated (#18736)

• PR-1551 - Update Jetty to 9.4.57.V20241219

• PR-18333 - Deprecated Protocol Api Usage Should Be Logged at Info Level (3.8) (#18333)

• PR-18323 - Deletegroups V0 Incorrectly Tagged as Deprecated (#18323)

• PR-18288 - Produce V4-V6 Should Be Undeprecated (#18288)

• PR-18262 - Findcoordinator V0 Incorrectly Tagged as Deprecated (#18262)

• PR-18221 - Saslhandshake V0 Incorrectly Tagged as Deprecated (#18221)

• 79a8f2b5 - Bump Version to 3.7.2

• PR-17919 - Add Unit Tests for Previous Fix (#17919)

• PR-17899 - Fix Kafka Streams Consumer Hang Issue (#17899)

• 1c4b02a6 - Fix Incorrect Synonym Handling for Dynamic Log Configurations

• PR-1520 - Update Netty to 4.1.115.Final

ksqlDB

• 0a211a88 - Corrected Conflict

• PR-10686 - Update Netty

• PR-10672 - Merge Conflict Resolution (From 7.4.x to 7.5.x)

• PR-10671 - Unpinned Jetty Version

• 8fcad7f8 - Remove Jetty Pin / Outdated Comment

• be803959 - Debug

• 313fd1da - Debug

• 9c0edb4e - Nit

• 90d5e47e - Nit

• PR-10657 - Fix the Placement of Default Port Number and Capture the Sub Path While Creating a Client to Ksqldb.

• PR-10655 - Fix the Placement of Default Port Number and Capture the Sub Path While Creating a Client to Ksqldb.

• PR-10653 - Fix the Placement of Default Port Number and Capture the Sub Path While Creating a Client to Ksqldb.

• f6c26e7a - Fix the Placement of Default Port Number and Capture the Sub Path While Creating a Client to Ksqldb.

• 8bfe4b59 - Update Vertx to 4.4.8 for 7.1.x

• PR-10620 - Fix Jsonschema Dependency

• PR-10619 - Fix Jsonschema Dependency

• PR-10613 - Fix Jsonschema Dependency

• PR-10614 - Merge Conflict Resolution (From 7.3.x to 7.4.x)

• PR-10612 - Merge Conflict Resolution (From 7.2.x to 7.3.x)

• PR-10608 - Fix Close Query Context Error

• PR-10610 - Merge Conflict Resolution (From 7.3.x to 7.4.x)

• PR-10607 - Merge Conflict Resolution (From 7.2.x to 7.3.x)

• PR-10601 - Optimize Latency in Post /Ksql Api for Describe Streams Due to Orphan Topics

• PR-10591 - Fix for Netty-Common

• PR-10590 - Fix for Netty-Common

• PR-10581 - Merge Conflict Fix and Build

• PR-10589 - Fix for Netty-Common

• PR-10587 - Fix for Netty-Common

• PR-10584 - Fix for Netty-Common

• PR-10582 - Fix for Netty-Common

• PR-10578 - Fix: for Dependency Update for Jsonschema

• PR-10503 - Fix Classloader After Connect Starts

REST Proxy

• PR-1322 - Fix Visibility for Stoprest Function

• PR-1318 - Change to Managerest to Make the Name Consistent for All Release Branch

• PR-1311 - Allow to Start Kafka Rest Separately so that the Integration Test Can Be More Customisable

• PR-1312 - Update Codeowners

• PR-524 - Backport Http2 Support Changes to 7.5.x

• 02615956 - Udpate Async_Http_Client Without Upgrade of Major Version

• PR-511 - Add @Confluentinc/Kora-Networking as Codeowner

• 48e03221 - Remove the Hibernate-Validator Exclusion No Longer Needed Due to Updated Jersey-Bean-Validation

• 302da1b6 - Add a Comment

• c6a50d88 - Add Access.Control.Expose.Headers Into the Cors Filters

Schema Registry

• PR-3573 - Upgrade Commons.Validator to 1.9.0

• PR-3568 - Merge Conflict Resolution (From 7.5.x to 7.6.x)

• PR-3561 - Ensure That Dek Lookups Use Applicable Aliases

• PR-3559 - Setting Default Sslsocketfactory From Httpsurlconnection in Restservice.

• PR-3555 - Ensure Lookup by Schema Logic Matches Logic During Register

• PR-3544 - Upgrade Everit Json-Schema to 1.14.5

• PR-3542 - Bouncy Castle and Sunjsse Compatibility Fix (Additional Flows)

• PR-3538 - Bouncy Castle and Sunjsse Compatibility Fix.

• PR-3539 - Fix Inline Tag Retrieval for Json Schema With Null in Array

• PR-3527 - Set Pagination Limit for Subjects to Int_Max

• PR-3528 - Fix in 7.0.x

• PR-3523 - Retry on Notleaderorfollowerexception

• PR-3455 - Add Pagination for Get All Subjects

• PR-3515 - Fix Equivalence Checks for Json and Protobuf

• d4c0fcd8 - Update Parent Pom Version in New Module

• PR-3498 - Fix Parent Pom Version in New Module

• PR-3497 - Fix Parent Pom Version in New Module

• PR-3500 - Prevent Overwriting Argline Execution Variable

• e13dac33 - Update Generated Files

• cd5df0be - Add Codeartifact Paths

• 7f75e155 - Update Parent Pom

• 13d494b6 - Don’t Overwrite Argline Var

• 749e1c9b - Merge Conflicts

• PR-3462 - Enable Sonarqube Reporting

• PR-3496 - Fix Parent Pom Version in New Module

• PR-3495 - Fix Parent Pom Version in New Module

• PR-3494 - Fix Parent Pom Version in New Module

• PR-3484 - Prioritize the Shutdown of the Leader Elector

• PR-3481 - Fix Retry Logic for Callables That Return Void

• PR-3478 - Fix Json Schema Dependency

• PR-3461 - Add Test to Ensure Protobuf Map Entry Option Is Preserved

• PR-3468 - Ensure Json-Skema Validator Is Called if Possible

• PR-3449 - Add Composite Deserializer for Migration Use Cases

• PR-3459 - Optimization to Use Confluent:Version if Available

• PR-3458 - Enhance Lookup Match to Be More Lenient Wrt Confluent:Version

• PR-3457 - Change Version “Ensure Map_Entry Option Is Not Emitted (#3444)”

• PR-3453 - Port Aws Kms Integration Code to Aws Sdk V2

• PR-3447 - Pass Ip Address so that Requests Sent to Leader Can Forward the Ip

• PR-3444 - Ensure Map_Entry Option Is Not Emitted

• PR-3441 - Added Config for Not Waiting for Kafka Reader on Store Init and Leader Election

• PR-3440 - Remove Pin of Bouncycastle to Favor Version Defined in Common

• PR-3437 - Fix: Config for Not Throwing Timeout Exception When Waiting for Kafka Reader on Init

• PR-3434 - Fix Transformation of Fields in Json Schema Definitions

• PR-3430 - Fix Merge 7.4.x to 7.5.x

• PR-3424 - Add Retry Logic to Restservice

• PR-3427 - Add Config to Specify Packages to Scan When Deriving Json Schema

• PR-3425 - Merge Conflict Resolution (From 7.2.x to 7.3.x)

• PR-3394 - Remove Pin of Bouncycastle to Favor Version Defined in Common

• PR-3423 - Downgrade Jsonata to 2.4.5

• PR-3417 - Change Version “Upgrade Json-Schema to 1.14.4 (#3400)”

• PR-3415 - Fix Merge Issue

• PR-3414 - Fix Merge Issue

• ebf23a1d - Upgrade Jsonata to 2.4.9

• PR-3401 - Upgrade Json-Skema to 0.19.0

• PR-3400 - Upgrade Json-Schema to 1.14.4

• PR-3399 - Upgrade Tink to 1.15

• PR-3397 - Upgrade Cel-Java to 0.4.5

• PR-3396 - Remove Scala Dependency for Mbknor Library

• PR-3392 - Handle Schema Migrations for Proto Message Types After First

• PR-3393 - Remove Hibernate-Validator Exclusion and Pin as the Updated Dependency Uses New Version

• PR-3390 - More Robust Retries in Retryexecutor

• PR-3391 - Return 404 Instead of 429 if Schema Lookup Fails

• PR-3389 - Retry on 500

• PR-3388 - Add Test That Uses Both Jsonata and Cel

• PR-3382 - Handle Refs With Version of -1 When Looking Up Schemas

• PR-3379 - Allow Empty Fragment (#) in $Schema Prop for Json Schema

• PR-3378 - Handle Doubly Nested Combinedschema When Getting Tags

Common

• 35ba77cd - Changed bctls-fips to 1.0.13

• 3bb5287b - Changed bouncycastle

• PR-688 - Merge Conflict Resolution (from 7.6.x to 7.7.x)

• PR-687 - update jetty to 9.4.56

• PR-684 - define version of commons-io and add it to dependencyManagement

• 79d5047d - upgrade avro to 1.11.4 to patch AVRO-3985

• PR-663 - disable CI gating workflow for master branch

• 948d59f6 - Upgrade Netty

• PR-660 - update protobuf to 3.25.5 (#16) (#654) (#17) (#657) (#18)

• PR-657 - update protobuf to 3.25.5 (#16) (#654) (#17)

• PR-654 - update protobuf to 3.25.5

• PR-646 - update bouncycastle to version 2.0 (#11)

Kafka

• PR-17799 - Update javadoc on split to mention first matching (#17799)

• PR-17716 - Backport fix from 3.9 (#17716)

• PR-17710 - Update consumed offsets on records with invalid timestamp (#17710)

• PR-16337 - fix synchronization of streams threadState (#16337)

• PR-1500 - Fix version check in util.py

• PR-1453 - Bump commonsIo to version 2.16.0

• PR-17517 - upgrade Jetty (#17517)

• e3deb50b - change ducktape version in tests/docker/Dockerfile and tests/setup.py (#17485)”

• PR-17501 - Document that control.plane.listener should be removed before ZK migration is finished (#17501)

• fe38b056 - Ignore failing quota_test

• PR-17485 - Align ducktape version in tests/docker/Dockerfile and tests/setup.py (#17485)

• PR-17477 - Update protobuf and commons-io dependencies in 3.7.2 (#17477)

• PR-15957 - Handle telemetry push response while terminating (#15957)

• PR-17431 - Removed timed waiting signal for client telemetry close (#17431)

• cea40270 - Bump protobuf to 3.25.5

• PR-1437 - disable flakey test

• PR-17147 - KRaftMigrationDriver initialization race (#17147)

• PR-17102 - Backport changes to 3.8 and Enable KRaft for BaseAdminIntegrationTest and SaslSslAdminIntegrationTest (#15175) (#17102)

• 6f76ed9a - Set metadata.log.dir to broker in KRAFT mode in integration test

• PR-17120 - Don’t allow ZK migration to start without transactions (#17094) (#17120)

ksqlDB

• PR-10478 - Update netty version from 4.1.108.Final to 4.1.113.Final.

• 0a63de1d - Fix commons-io version

• bb335fa1 - nit

• PR-157 - Remove KSQL internal topics from the list topic results. Sort the top

• PR-156 - improve test coverage for cli

• 3213368f - Update netty version from 4.1.108.final to 1.1.113.Final.

• aee1218e - Update netty version from 4.1.108.Final to 4.1.113.Final.

• 1ef32457 - Update netty version from 4.1.108.Final to 4.1.113.Final.

• PR-10442 - Ensure Deterministic UDF Loading by Avoiding Context ClassLoader Interference

• 70e7ffbf - Update netty version from 4.1.108.Final to 4.1.113.Final.

• PR-140 - Delimited mode deserializer now can handle null values.

• PR-139 - sanity check for persistent queries

• PR-138 - Added props to the sanity check.

• f923a1ea - Downgrade git commit id plugin version from 9.0.1 to 4.9.10 for Java 8 compatibility.

• ec48c835 - Upgrade git commit id plugin version from 2.2.6 to 9.0.1 and include git.commit.id property only.

• PR-10413 - Fix for select struct->* for Pull Queries

• PR-10443 - updating cp-jar-build block in semaphore pipeline

REST Proxy

• PR-1290 - adding cp jar build workflow as PR ci gating

• PR-504 - Update bcfips modules (#17)

• PR-500 - skipping cp jar builds on master branch PRs

• PR-492 - adding cp-jar-build block for PR builds

Schema Registry

• PR-3359 - Add latest caches at the SR client level

• PR-3361 - Don’t create a new version if latest is equivalent

• PR-3351 - Ensure correct exception is thrown from parseSchema

• PR-3354 - Add test to ensure MD5 does not change for schema values

• PR-3352 - Minor optimization to reduce schema ID lookups

• PR-3348 - Reapply “Fix for decoding of sensitive metadata”

• PR-3349 - Reapply “Allow SR to ignore confluent version when matching schemas”

• PR-3346 - Include sonarqube

• PR-3343 - disable SR to ignore confluent version when matching schemas

• PR-3342 - remove fix for decoding of sensitive metadata

• PR-3334 - remove change to default rule actions

• PR-3339 - remove fix for decoding of sensitive metadata

• PR-3337 - Fix pint merge 7.4.x to 7.5.x

• PR-3333 - Ensure encoders are synced when decoding sensitive metadata

• PR-3332 - Fix NPE when listing versions by id

• PR-3327 - Add additional tests for draft 2019-09 (#81)

• PR-3328 - Add dedupe test for same schema w/different version (#82)

• PR-3322 - Allow SR to ignore confluent:version when matching schemas

• PR-3316 - Return encrypted value instead of throwing exception

• PR-3311 - Fix 7.1.x merge conflicts

• PR-3265 - Add performanceMetric to get config metadata API

• PR-3264 - Add performanceMetric to list schema refs API

• PR-3263 - Add performanceMetric to global delete config API

• PR-3307 - Fix pint merge from 7.3.x to 7.4.x

• PR-3244 - Handle 401/403 errors appropriately

• e39cf350 - Fix typo in scope for JSON schema else clause

• PR-72 - Fixed the wait timeout in the KafkaStoreReaderThread. Fixes #54

• PR-68 - Updated classpath logic in shell script.

• PR-70 - Api update

• PR-71 - Docs

• 41e967fc - minor fix

• 66a9487a - minor fix

• PR-3262 - remove azure-identity definition, update azure-keyvault version (#49)

• PR-3278 - Use concurrent hash maps in serde members (#61)

• PR-3276 - Add format query param to APIs that return a schema (#46)

• PR-3275 - Scrub refs in arrays when searching for inline tags (#59)

• PR-3273 - Dedupe imported schemas with older versions (#58)

• PR-3266 - Ensure register schema request is forwarded correctly (#53)

• PR-3252 - Add CSFLE tests with pre-canned data (#42)

• PR-3250 - Allow oneofs to be flattened in Protobuf converter (#41)

• PR-3249 - Bound recursion when finding tagged entities (#40)

• PR-63 - Integration tests

• PR-3256 - adding cp jar build CI gating block (#38)

Common

• PR-637 - adding cp-jar-build ci gating

• PR-629 - Bump protobuf version to 3.25.4

• PR-2 - Remove IntelliJ and build output and add it to .gitignore.

• ab0d4be5 - Update pom.xml

• 2add2049 - pin classgraph

• 1825f6c2 - update azure-identity to 1.12.2

• 57dce6aa - Remove bouncy property

• 3753b015 - Remove bcprov-jdk15on

Kafka

• PR-16951 - Back-port KAFKA-16230 to 3.7 branch (#16951)

• PR-16996 - local log retention ms/bytes “-2” is not treated correctly (#16996)

• PR-16858 - Fix the behavior of delegation tokens that expire immediately upon creation in KRaft mode (#16858)

• PR-16672 - AssignmentsManager gets stuck retrying on deleted topics (#16672)

• PR-16763 - Update zstd-jni lib (#16763)

• PR-16678 - Fix MirrorMaker2 worker config does not pass config.provi… (#16678)

• PR-16616 - Remove print MetaPropertiesEnsemble from kafka-storage tool (#16607) (3.7) (#16616)

ksqlDB

• PR-63 - Checkstyle fixes

• PR-62 - Remove unnecessary exclusions

• PR-61 - Remove unused imports

• PR-60 - Removed the imlicit topic generation from th estatement executor.

• PR-59 - Added partition by clause to CSAS statement

• PR-52 - Inherit from common POM, clean up dependencies

• PR-50 - json processing

• PR-49 - Fixed the issue with COUNT(*).

• PR-47 - Make tabular output for ‘DESCRIBE …’ statements a little prettier

• PR-10403 - Add a null check in the response object to avoid NPE while accessing the connection status.

• PR-37 - Remove custom JSON (de)serialization, use Jackson’s ObjectMapper instead

• PR-10398 - Package kafka streams in api client

• PR-10397 - Increase time limit for the pipeline

• PR-10392 - Change classgraph version to 4.8.59

• PR-9 - Leverage ARG (Avro Random Generator) in DataGen class

• PR-10380 - Use range version instead of pinned nano-versions

• 3116084b - Use range version instead of pinned nano-versions

• 88704d16 - Use range version instead of pinned nano-versions

• ea2c84c9 - Use range version instead of pinned nano-versions

• af2b0440 - Use range version instead of pinned nano-versions

• e65fd80d - Use range version instead of pinned nano-versions

• ddcda7d2 - Use range version instead of pinned nano-versions(to fix build failure)

• PR-10369 - Add kafka streams dependency on ksqldb api client

REST Proxy

Schema Registry

• PR-33 - Moved key serialization to a JSON serializer.

• PR-30 - APIs changed to refer to subjects. Retrieval by globally unique schema id

• PR-3235 - Fix Pint Merge Error

• PR-25 - Issue 5

• PR-11 - Moves hard-coded configs

• 51f62d2f - Dedupe schemas during IMPORT mode

Common

• ac056ff0 - Remove dependency-check-maven plugin

• bd3ffe2c - update jackson to match ce-kafka.

• 199fb826 - [skip ci] Copy CODEOWNERS from the default branch

• e9232f50 - add aws-sdk bom instead of just core

• e5506701 - unify versions of aws and azure sdks with ce-kafka

• 664220bd - add correct version of tls_fips

• 70c2d3e7 - add bcpkix to the pack

• 1ee85034 - add version definitions of bouncycastle fips dependencies

• 4f0ba3a2 - Update pom.xml

• PR-604 - CCMSG-2462: netty-bom version should be picked up from netty.version property

• 5e9c5ab4 - add new line

• 5099df8f - Fix codeowners

• c6e03ed1 - Update bouncycastle version to 1.78

• 4caab334 - replace EOL plugin with ant-run invocation

• c2f222bf - update bouncycastle to address CVEs

• e21ffc4e - revert #595 to remediate downstream build failures

• e29ec833 - update netty to 4.1.108-final

• 64ff93dc - Update pom.xml

• 8d984cba - [CC-26337] Version bump for Jackson Databind package

• b59f48d2 - update ZooKeeper to 3.8.4

• ada22e3c - update netty to 4.1.108.Final

• 4fb11814 - Remove auto-generated CODEOWNERS. It’s inaccurate.

• 52b0f806 - Remove CODEOWNERS file

• 7a96a215 - Add service.yml

• c4b849a5 - update jose4j to address CVE-2023-51775

• 4c8d3021 - update jetty to 9.4.54

• PR-581 - fix: no implicit activation of docker-arm profile

• 8e2bb637 - fix: no implicit activation of docker-arm profile

• PR-563 - added a new docker-arm profile to build docker containers in arm64

• PR-574 - Fix CODEOWNERS

• PR-556 - Upgrade protobuf to 3.24.4

• ab03eece - added a new docker-arm profile to build docker containers in arm64 laptops

• 0fe414fb - downgrade fips library to a version that is certified compliant

Kafka

• PR-1316 - Update refs to confluent-packaging-tools 3.7

• PR-15473 - KAFKA-16252: Fix the documentation and adjust the format (#15473)

• PR-16379 - KAFKA-16988: add 1 more node for test_exactly_once_source system test (#16379)

• PR-16366 - KAFKA-16969: Log error if config conficts with MV (#16366)

• PR-16229 - KAFKA-16570 FenceProducers API returns “unexpected error” when succes… (#16229)

• PR-16053 - KAFKA-9228: Restart tasks on runtime-only connector config changes (#16053)

• PR-16232 - KAFKA-16886: Detect replica demotion in AssignmentsManager (#16232)

• PR-15834 - KAFKA-16606 Gate JBOD configuration on 3.7-IV2 (#15834)

• PR-15689 - KAFKA-12317: Update FK-left-join documentation (#15689)

• PR-16165 - KAFKA-16814 KRaft broker cannot startup when partition.metadata is missing (#16165)

• PR-16118 - KAFKA-16583: Handle PartitionChangeRecord without directory IDs (#16118)

• PR-16122 - KAFKA-16837, KAFKA-16838: Ignore task configs for deleted connectors, and compare raw task configs before publishing them (#16122)

• PR-16151 - KAFKA-16047: Use REQUEST_TIMEOUT_MS_CONFIG in AdminClient.fenceProducers (#16151)

• PR-15165 - KAFKA-16105: Reset read offsets when seeking to beginning in TBRLMM (#15165)

• PR-16175 - KAFKA-16881: InitialState type leaks into the Connect REST API OpenAPI spec (#16175)

• PR-16042 - KAFKA-16807 DescribeLogDirsResponseData#results#topics have unexpected topics having empty partitions (#16042)

• 327b696b - KAFKA-16757: Fix broker re-registration issues around MV 3.7-IV2

• PR-16005 - KAFKA-16790: Update RemoteLogManager configuration in broker server (#16005)

• PR-16072 - KAFKA-16371; fix lingering pending commit when handling OFFSET_METADATA_TOO_LARGE (#16072)

• PR-15910 - KAFKA-15905 Restarts of MirrorCheckpointTask should not permanently i… (#15910)

• PR-16038 - KAFKA-16825: Update netty/jetty/jackson/zstd dependencies (#16038)

• PR-15971 - KAFKA-16992: InvalidRequestException: ADD_PARTITIONS_TO_TXN with version 4 which is not enabled when upgrading from kafka (#15971)

• PR-15953 - KAFKA-16539 Fix IncrementalAlterConfigs during ZK migration (#15744) (#15953)

• PR-1235 - APPSEC-3974: Updated netty version to 4.1.108.Final

• PR-13965 - KAFKA-15170: Fix rack-aware assignment in AbstractStickyAssignor (#13965)

• PR-15416 - KAFKA-16277: AbstractStickyAssignor - Sort owned TopicPartitions by partition when reassigning (#15416)

• PR-15149 - KAFKA-16093: Fix spurious REST-related warnings on Connect startup (#15149)

• PR-15817 - KAFKA-16511: Fix the leaking tiered segments during segment deletion (#15817)

• PR-15732 - KAFKA-16563: retry pollEvent in KRaftMigrationDriver for retriable errors (#15732)

• PR-15755 - cherrypick KAFKA-16386: Convert NETWORK_EXCEPTIONs from KIP-890 transaction verification (#15755)

• PR-15792 - KAFKA-16217 Stop the abort transaction try loop when closing producers (#15541) (#15792)

• PR-15361 - KAFKA-15625: Do not flush global state store at each commit (#15361)

• PR-1172 - update tags and added seamphore tags as part of semaphore migration 3.7

• PR-15777 - KAFKA-16082 Avoid resuming future replica if current replica is in the same directory (#15777)

• PR-15701 - KAFKA-16466: Log exception message for non-fault errors in QuorumController (#15701)

• PR-15776 - KAFKA-16559 allow defining number of disks per broker in TestKitNodes (#15776)

• PR-15747 - KAFKA-16073: Increment the local-log-start-offset before deleting segments in memory table (#15631) (#15747)

• PR-15022 - KAFKA-16003: Always create the /config/topics ZNode even for topics without configs (#15022)

• PR-15397 - KAFKA-16286; Notify listener of latest leader and epoch (#15397)

• PR-15695 - KAFKA-16509: CurrentControllerId metric is unreliable in ZK mode (#15695)

• PR-15648 - KAFKA-16463 Delete metadata log on ZK broker startup (#15648)

• PR-15658 - KAFKA-16473: Use correct cluster ID when formatting log dir. (#15658)

• PR-14995 - KAFKA-14822: Allow restricting File and Directory ConfigProviders to specific paths (#14995)

• PR-15557 - KAFKA-16297: Race condition while promoting future replica (#15557)

• PR-15409 - KAFKA-16293: Test log directory failure in Kraft (#15409)

• PR-15335 - KAFKA-16234: Log directory failure re-creates partitions in another logdir automatically (#15335)

• PR-15663 - KAFKA-16472 Fix integration tests in Java with parameter name (#15663)

• PR-15434 - KAFKA-16305: Avoid optimisation in handshakeUnwrap (#15434)

• PR-15655 - KAFKA-16471 invoke SSLEngine::closeInbound on SslTransportLayer close (#15655)

• PR-15532 - KAFKA-16359: Corrected manifest file for kafka-clients (#15532)

• PR-15521 - KAFKA-16365: AssignmentsManager callback handling issues (#15521)

• fc646f92 - Revert “KAFKA-16342 fix getOffsetByMaxTimestamp for compressed records (#15474)”

• bd5989dd - Revert “KAFKA-16341 fix the LogValidator for non-compressed type (#15476)”

• PR-15608 - KAFKA-16428: Fix bug where config change notification znode may not get created during migration (#15608)

• PR-15584 - KAFKA-16411: Correctly migrate default client quota entities (#15584)

• PR-15562 - KAFKA-16392: Stop emitting warning log message when parsing source connector offsets with null partitions (#15562)

• PR-15591 - KAFKA-16410 kafka-leader-election / LeaderElectionCommand doesn’t set exit code on error (#15591)

• PR-15583 - KAFKA-16408 kafka-get-offsets / GetOffsetShell doesn’t handle –version or –help (#15583)

• PR-1013 - KSECURITY-2090 master update bcprov-jdk15on for the CVE in this jira

• PR-1064 - KSECURITY-2349 Fix CVE-2024-22201 for jetty

• PR-15481 - KAFKA-16222: desanitize entity name when migrate client quotas (#15481)

• PR-15476 - KAFKA-16341 fix the LogValidator for non-compressed type (#15476)

• PR-15530 - KAFKA-16369: Broker may not shut down when SocketServer fails to bind as Address already in use (#15530)

• PR-15464 - KAFKA-16322 upgrade jline from 3.22.0 to 3.25.1 (#15464)

• PR-15474 - KAFKA-16342 fix getOffsetByMaxTimestamp for compressed records (#15474)

• PR-15493 - KAFKA-16226; Reduce synchronization between producer threads (#15323) (#15493)

• 4cd36f93 - TRIVIAL: fix typo

• PR-15088 - KAFKA-16025: Fix orphaned locks when rebalancing and store cleanup race on unassigned task directories (#15088)

• PR-15479 - KAFKA-16319: Divide DeleteTopics requests by leader node (#15479)

• PR-15480 - KAFKA-16347: Upgrade zookeeper 3.8.3 -> 3.8.4 (#15480)

• PR-15444 - KAFKA-16209 : fetchSnapshot might return null if topic is created before v2.8 (#15444)

• PR-15398 - KAFKA-16278: Missing license for scala related dependencies (#15398)

• PR-14631 - KAFKA-15670: add “inter.broker.listener.name” config in KRaft controller config (#14631)

• PR-15347 - [MINOR] Fix docker image build by introducing bash (#15347)

• PR-15051 - Update Streams API broker compat table for AK 3.7 (#15051)

• PR-15263 - KAFKA-16157: fix topic recreation handling with offline disks (#15263)

• PR-15293 - KAFKA-16180: Fix UMR and LAIR handling during ZK migration (#15293)

• PR-15262 - KAFKA-16195: ignore metadata.log.dir failure in ZK mode (#15262)

• a1addb56 - Revert “KAFKA-16101: Additional fixes on KRaft migration documentation (#15287)”

• 945f4b91 - KAFKA-16216: Reduce batch size for initial metadata load during ZK migration

• PR-15291 - Update jetty to 9.4.53.v20231009 for CVE-2023-36478 (#15291)

• PR-15287 - KAFKA-16101: Additional fixes on KRaft migration documentation (#15287)

• cf6defb8 - KAFKA-16162: resend broker registration on metadata update to IBP 3.7-IV2

• b5a19053 - Update jetty to 9.4.53.v20231009 for CVE-2023-36478

• PR-15284 - KAFKA-16210: Update jose4j to 0.9.4 (#15284)

• 5a861075 - KAFKA-14616: Fix stray replica of recreated topics in KRaft mode

• PR-15193 - KAFKA-16101: Fix KRaft migration documentation (#15193)

• b7098722 - KAFKA-16171: Fix ZK migration controller race #15238

• PR-15133 - KAFKA-16085: Add metric value consolidated for topics on a broker for tiered storage. (#15133)

• PR-15151 - KAFKA-15594: Add version 3.6 to Kafka Streams system tests (#15151)

• PR-15186 - KAFKA-16029: Fix “Unable to find FetchSessionHandler for node X” bug (#15186)

• PR-15235 - KAFKA-16144: skip checkQuorum for only 1 voter case (#15235)

• PR-15236 - Note that Java 11 support for broker and tools is deprecated for removal in 4.0 (#15236)

• PR-15217 - KAFKA-16141: Fix StreamsStandbyTask system test (#15217)

• PR-15228 - KAFKA-16159: MINOR - Correcting logs to debug telemetry reporter (#15228)

• 3c923302 - KAFKA-16078: Be more consistent about getting the latest MetadataVersion

• PR-15197 - KAFKA-16131: Only update directoryIds if the metadata version supports DirectoryAssignment (#15197)

• PR-15207 - KAFKA-16139: Fix StreamsUpgradeTest (#15207)

• PR-15199 - KAFKA-16139: Fix StreamsUpgradeTest (#15199)

• b743f6fd - KAFKA-16126: Kcontroller dynamic configurations may fail to apply at startup

• b4036833 - KAFKA-16126: Kcontroller dynamic configurations may fail to apply at startup

• 7486223d - KAFKA-16120: Fix partition reassignment during ZK migration

• PR-15182 - KAFKA-16118; Coordinator unloading fails when replica is deleted (#15182)

• PR-15194 - KAFKA-16133 - Reconciliation auto-commit fix (#15194)

• 4280df48 - KAFKA-16120: Fix partition reassignment during ZK migration

• PR-15177 - KAFKA-16017: Checkpoint restored offsets instead of written offsets (#15177)

• PR-15077 - KAFKA-16074: close leaking threads in replica manager tests (#15077)

• PR-15153 - KAFKA-16094: BrokerRegistrationRequest.logDirs field must be ignorable (#15153)

• PR-15145 - KAFKA-16089: Revert “KAFKA-14412: Better Rocks column family management” (#15145)

• PR-15146 - KAFKA-16097: Disable state updater in 3.7 (#15146)

• PR-15048 - KAFKA-16016: Add docker wrapper in core and remove docker utility script (#15048)

• PR-15132 - KAFKA-16059: close more kafkaApis instances (#15132)

• PR-15117 - KAFKA-16077: Streams with state updater fails to close task upon fencing (#15117)

• PR-15135 - KAFKA-16086: Fix memory leak in RocksDBStore (#15135)

• PR-15122 - KAFKA-16079: fix threads leak threads in LocalLeaderEndPointTest and other tests (#15122)

• PR-14980 - KAFKA-15817: Avoid reconnecting to the same IP address (#14813) (#14980)

• PR-15073 - KAFKA-16046: also fix stores for outer join (#15073)

• PR-15096 - KAFKA-9545: Fix IllegalStateException in updateLags (#15096)

• PR-15093 - KAFKA-16059: Fix thread leak KafkaAPIsTest (#15093)

• PR-15094 - KAFKA-16052: Save heap in AbstractCoordinatorConcurrencyTest by creating real ReplicaManager (#15094)

• PR-15089 - KAFKA-16062: Upgrade mockito to 5.8.0 (#15089)

• PR-15090 - KAFKA-16065: close DelayedFuturePurgatory in DelayedOperationTest (#15090)

• PR-15030 - KAFKA-16015: Fix custom timeouts overwritten by defaults in LeaderElectionCommand (#15030)

• PR-15084 - KAFKA-16058: close controllerApi instance to avoid thread leaks (#15084)

• PR-15079 - KAFKA-16053: Fix memory leaks due to KDC server in tests (#15079)

• PR-15023 - KAFKA-16012: Ensure new leader information merged correctly with the current metadata (#15023)

• PR-15061 - KAFKA-16046: fix stream-stream-join store types (#15061)

• PR-15035 - KAFKA-16026: Send Poll event to the background thread (#15035)

• PR-15056 - KAFKA-16035: add tests for remoteLogSizeComputationTime/remoteFetchExpiresPerSec metrics (#15056)

• PR-15050 - KAFKA-16014: Implement RemoteLogSizeBytes (#15050)

• PR-15059 - KAFKA-16040; Rename Generic to Classic (#15059)

• PR-14985 - KAFKA-14505; [3/N] Wire WriteTxnMarkers API (#14985)

• PR-14557 - KAFKA-15456: Commit/Fetch error handling improvements and V9 support (#14557)

• PR-15043 - KAFKA-16030: new group coordinator should check if partition goes offline during load (#15043)

• PR-15053 - KAFKA-16036; Add group.coordinator.rebalance.protocols and publish all new configs (#15053)

• PR-15044 - KAFKA-16017: Checkpoint restored offsets instead of written offsets (#15044)

• PR-15015 - KAFKA-16013: Throw an exception in DelayedRemoteFetch for follower fetch replicas. (#15015)

• PR-15005 - KAFKA-16002: Implement RemoteCopyLagSegments, RemoteDeleteLagBytes and RemoteDeleteLagSegments (#15005)

• PR-14937 - KAFKA-15696: Refactor closing consumer (#14937)

• PR-14930 - KAFKA-15913: Migrate async consumer tests to mocks (#14930)

• PR-15032 - KAFKA-15874: Add metric and request log attribute for deprecated request api versions (KIP-896) (#15032)

• PR-15026 - KAFKA-16014: Add RemoteLogMetadataCount metric (#15026)

• PR-14848 - KAFKA-15870: Move new group coordinator metrics from Yammer to Metrics (#14848)

• PR-14977 - KAFKA-15366: Modify LogDirFailureTest for KRaft (#14977)

• PR-15007 - KAFKA-16007 Merge batch records during ZK migration (#15007)

• PR-15039 - KAFKA-15448: Update upgrade guide for KIP-988 (#15039)

• PR-13662 - KAFKA-15208: Upgrade Jackson dependencies to version 2.16.0 (#13662)

• PR-14375 - KAFKA-15158: Add metrics for RemoteDelete and BuildRemoteLogAuxState (#14375)

• PR-15042 - KAFKA-15364: Replay BrokerRegistrationChangeRecord.logDirs (#15042)

• PR-15021 - KAFKA-16014: Add RemoteLogSizeComputationTime metric (#15021)

• PR-15014 - KAFKA-16013: Add metric for expiration rate of delayed remote fetch (#15014)

• PR-14832 - KAFKA-15883: Implement RemoteCopyLagBytes (#14832)

• PR-14925 - KAFKA-15971: Re-enable consumer integration tests for new consumer (#14925)

• PR-14962 - KAFKA-15775: New consumer listTopics and partitionsFor (#14962)

• PR-14640 - KAFKA-15276: Implement event plumbing for ConsumerRebalanceListener callbacks (#14640)

• PR-14996 - KAFKA-15471 [MINOR]: Fix backward-compatibility bug (#14996)

• PR-14984 - KAFKA-15922: Bump MetadataVersion to support JBOD with KRaft (#14984)

• PR-14774 - KAFKA-15784: Ensure atomicity of in memory update and write when transactionally committing offsets (#14774)

• PR-14981 - KAFKA-15237: Implement write operation timeout (#14981)

• PR-14988 - KAFKA-15981: update Group size only when groups size changes (#14988)

• PR-14293 - KAFKA-15372: Reconfigure dedicated MM2 connectors after leadership change (#14293)

• PR-14649 - KAFKA-15695: Update the local log start offset of a log after rebuilding the auxiliary state (#14649)

• PR-14990 - KAFKA-15881: Update Release Process for Docker images documentation (#14990)

• PR-14873 - KAFKA-15818: ensure leave group on max poll interval (#14873)

• PR-14400 - KAFKA-15471: Allow independently stop KRaft controllers or brokers (#14400)

• PR-14942 - KAFKA-15358: Added QueuedReplicaToDirAssignments metric (#14942)

• PR-14938 - KAFKA-15879: Add documentation and examples for docker image (#14938)

• PR-14967 - KAFKA-15906: Emit latest MM2 offset syncs every offset.flush.interval.ms (#14967)

• PR-14562 - KAFKA-15563: Provide informative error messages when Connect REST requests time out (#14562)

• PR-14857 - KAFKA-15574; [2/N]: Client state machine updates (#14857)

• PR-14982 - KAFKA-15363: Run completion handlers for duped AssignmentEvent (#14982)

• PR-14881 - KAFKA-15365: Broker-side replica management changes (#14881)

• PR-14948 - KAFKA-15662: Add support for clientInstanceIds in Kafka Stream (#14948)

• PR-14945 - KAFKA-15978: Update member information on HB response (#14945)

• PR-14899 - KAFKA-15956: MetadataShell must take the log directory lock when reading (#14899)

• PR-14970 - KAFKA-15714: KRaft support in DynamicNumNetworkThreadsTest (#14970)

• PR-14902 - KAFKA-15364: Handle log directory failure in the Controller (#14902)

• PR-14304 - KAFKA-13328, KAFKA-13329 (1): Add preflight validations for key, value, and header converter classes (#14304)

• PR-14976 - KAFKA-15361: Migrating brokers must register with directory list (#14976)

• PR-14935 - KAFKA-15662: Add support for clientInstanceIds in Kafka Stream (#14935)

• PR-14911 - KAFKA-14516: [3/3] Integration Test - Static Member Removed After Session Timeout (#14911)

• PR-14964 - KAFKA-15986: Fix integration test failures (#14964)

• PR-14961 - Revert “MINOR: Add junit properties to display parameterized test names (#14687)” (#14961)

• PR-14790 - KAFKA-15363: Broker log directory failure changes (#14790)

• PR-14907 - KAFKA-15629: Support ResultOrder to TimestampedRangeQuery. (#14907)

• PR-14939 - KAFKA-15977: Fix leak in DelegationTokenEndToEndAuthorizationWithOwnerTest (#14939)

• c515bf51 - KAFKA-15426: Process and persist directory assignments

• PR-14922 - KAFKA-15662: Add support for clientInstanceIds in Kafka Stream (#14922)

• PR-14906 - KAFKA-15527: Support ResultOrder to reverseRange and reverseAll query over kv-store in IQv2 (#14906)

• PR-12728 - KAFKA-14132; Replace EasyMock with Mockito in StandaloneHerderTest (#12728)

• PR-14845 - KAFKA-14505; [2/N] Implement TxnOffsetCommit API (#14845)

• PR-14940 - KAFKA-15903: Add Github Actions Workflow for building and pushing RC Docker Image (#14940)

• PR-14941 - KAFKA-15880: Add Github Actions Workflow for Promoting an RC docker image (#14941)

• PR-14749 - KAFKA-15980: Add the CurrentControllerId metric (#14749)

• PR-14947 - KAFKA-15347: fix unit test (#14947)

• PR-14898 - KAKFA-15629: Update upgrade-guide.html for TimestampedKeyQuery and TimestampedRangeQuery (#14898)

• PR-14838 - KAFKA-15361: Process and persist dir info with broker registration (#14838)

• PR-14933 - KAFKA-15684: Support to describe all client metrics resources (KIP-714) (#14933)

• PR-14761 - KAFKA-15816: Fix leaked sockets in mirror tests (#14761)

• PR-14926 - KAFKA-15871: kafka-client-metrics.sh (#14926)

• PR-14912 - KAFKA-15932: Wait for responses in consumer operations (#14912)

• PR-14849 - KAFKA-15910: New group coordinator needs to generate snapshots while loading (#14849)

• PR-14921 - KAFKA-15022: tests for HA assignor and StickyTaskAssignor (#14921)

• PR-14626 - KAFKA-15347: add support for ‘single key multi timestamp’ IQs with versioned state stores (KIP-968) (#14626)

• PR-14924 - KAFKA-15972: Add support to exclude labels for telemetry metrics (KIP-714) (#14924)

• PR-14916 - KAFKA-15970: Copy over KIP-951 tests in FetcherTest.java to FetchRequestManagerTest.java (#14916)

• PR-14878 - KAFKA-15280: Implement client support for KIP-848 server-side assignors (#14878)

• PR-14552 - KAFKA-15445: Add JVM Docker image (#14552)

• PR-14735 - KAFKA-15448: Streams Standby Update Listener (KIP-988) (#14735)

• PR-14879 - KAFKA-15281: Implement the groupMetadata Consumer API (#14879)

• PR-14714 - KAFKA-15022: introduce interface to control graph constructor (#14714)

• PR-14928 - [MINOR-PR] Enable telemetry APIs and logs suppression (KIP-714) (#14928)

• PR-14107 - Kafka-14748: Relax non-null FK left-join requirement (#14107)

• PR-14750 - KAFKA-15816: Fix leaked sockets in clients tests (#14750)

• PR-14908 - KAFKA-15662: Add support for clientInstanceIds in Kafka Stream (#14908)

• PR-14843 - KAFKA-15901: Client changes for registering telemetry and API calls (KIP-714) (#14843)

• PR-14811 - KAFKA-15831: KIP-1000 protocol and admin client (#14811)

• PR-14882 - KAFKA-14516: [2/N] Integration Test - Static Member Gets Assignment Back (#14882)

• PR-14588 - KAFKA-15645: Move ReplicationQuotasTestRig to tools module (#14588)

• PR-14852 - KAFKA-14412: Better Rocks column family management (#14852)

• PR-14870 - KAFKA-14987 [2/2]; customize retry backoff for group/offsets expiration (#14870)

• PR-14885 - KAFKA-15061; CoordinatorPartitionWriter should reuse buffer (#14885)

• PR-14767 - KAFKA-15830: Add telemetry API handling (KIP-714) (#14767)

• PR-14567 - KAFKA-13988: Enable replicating from latest offset with MirrorMaker 2 (#14567)

• PR-14909 - KAFKA-15663, KAFKA-15794: Telemetry reporter and request handling (KIP-714) (#14909)

• PR-13932 - KAFKA-14133: Migrate ProcessorStateManagerTest and StreamThreadTest to Mockito (#13932)

• PR-14544 - KAFKA-14509: [2/N] Implement server side logic for ConsumerGroupDescribe API (#14544)

• PR-14872 - KAFKA-14438: Throw if async consumer configured with invalid group ID (#14872)

• PR-14897 - KAFKA-15953: Refactor polling delays (#14897)

• PR-14835 - KAFKA-15890: Consumer.poll with long timeout unaware of assigned partitions (#14835)

• PR-14859 - KAFKA-15842: Correct handling of KafkaConsumer.committed for new consumer (#14859)

• 6b87c852 - KAFKA-15886: Always specify directories for new partition registrations

• PR-14570 - KAFKA-15629: Proposal to introduce IQv2 Query Types: TimestampedKeyQuery and TimestampedRangeQuery (#14570)

• PR-14428 - KAFKA-15489: resign leadership when no fetch or fetch snapshot from majority voters (#14428)

• PR-14860 - KAFKA-15922: Add a MetadataVersion for JBOD (#14860)

• PR-14839 - KAFKA-14412: Add ProcessingThread tag interface (#14839)

• PR-14646 - KAFKA-15689: Logging skipped event when expected migration state is wrong (#14646)

• PR-14651 - Using INFO level for migration transition state logging (#14651)

• PR-14769 - KAFKA-15816: Fix leaked sockets in streams tests (#14769)

• PR-14711 - KAFKA-15022: add config for balance subtopology in rack aware task assignment (#14711)

• PR-14831 - KAFKA-15865: Remove autocommit completion event (#14831)

• PR-14242 - KAFKA-15046: Get rid of unnecessary fsyncs inside UnifiedLog.lock to stabilize performance (#14242)

• PR-14699 - KAFKA-15778 & KAFKA-15779: Implement metrics manager (KIP-714) (#14699)

• PR-14844 - KAFKA-14505; [1/N] Add support for transactional writes to CoordinatorRuntime (#14844)

• PR-14865 - Update NOTICE-binary with latest additions (#14865)

• PR-14842 - KAFKA-15887: Ensure FindCoordinatorRequest is sent before closing (#14842)

• 14571054 - KAFKA-15904: Only add directory.id to meta.properties when migrating or in kraft mode

• PR-14620 - KAFKA-15618: Kafka metrics collector and supporting classes (KIP-714) (#14620)

• PR-14198 - KAFKA-15022: Only relax edge when path exist (#14198)

• PR-14758 - KAFKA-15544: Enable integration tests for new consumer (#14758)

• PR-14432 - KAFKA-14516: [1/N] Static Member leave, join, re-join request using ConsumerGroupHeartbeats (#14432)

• PR-14632 - KAFKA-15681: Add support of client-metrics in kafka-configs.sh (KIP-714) (#14632)

• PR-14784 - KAFKA-15582 Unset the previous broker epoch if version < 2 (#14784)

• PR-14696 - KAFKA-15022: Detect negative cycle from one source (#14696)

• PR-14766 - KAFKA-15047: Roll active segment when it breaches the retention policy (#14766)

• PR-14751 - KAFKA-15819: KafkaServer.shutdown should free KafkaRaftManager (#14751)

• PR-14813 - KAFKA-15817: Avoid reconnecting to the same IP address (#14813)

• PR-14787 - KAFKA-15241: Compute tiered copied offset by keeping the respective epochs in scope (#14787)

• PR-14756 - KIP-978: Allow dynamic reloading of certificates with different DN / SANs (#14756)

• PR-14817 - KAFKA-15803: Update leader epoch in commitAsync and committed (#14817)

• PR-14800 - KAFKA-15856: Add integration tests for JoinGroup API and SyncGroup API (#14800)

• PR-14781 - KAFKA-15756: [1/2] Migrate existing integration tests to run old protocol in new coordinator (#14781)

• PR-14825 - KAFKA-15888: DistributedHerder log context should not use the same client ID for each Connect worker by default (#14825)

• PR-14746 - KAFKA-15555: Ensure wakeups are handled correctly in poll() (#14746)

• PR-14481 - KAFKA-15484: General Rack Aware Assignor (#14481)

• PR-14807 - KAFKA-15860: ControllerRegistration must be written out to the metadata image (#14807)

• PR-988 - KSECURITY-2090: Updated bcpkix to 1.77

• PR-987 - KSECURITY-2090: Updated bcpkix version to 1.77

• PR-14582 - KAFKA-15578: Migrating other system tests to use the group coordinator (#14582)

• PR-14648 - KAFKA-15215: [KIP-954] support custom DSL store providers (#14648)

• PR-14710 - KAFKA-15327: Ensure the commit manager commit on close (#14710)

• PR-14737 - KAFKA-15362: Resolve offline replicas in metadata cache (#14737)

• PR-14810 - KAFKA-15837: Throw error on use of Consumer.poll(long timeout) in AsyncKafkaConsumer (#14810)

• PR-14656 - KAFKA-15705: Add integration tests for Heartbeat API and GroupLeave API (#14656)

• PR-14387 - KAFKA-14519; [2/N] New coordinator metrics (#14387)

• PR-14789 - KAFKA-15836: KafkaConsumer subscribes to multiple topics does not respect max.poll.records (#14789)

• PR-14690 - KAFKA-15574; [1/N]: Client state machine updates (#14690)

• PR-14680 - KAFKA-15174: Ensure CommitAsync propagate the exception to the user (#14680)

• PR-14796 - KAFKA-15854: Move Java classes from kafka.server to the server module (#14796)

• PR-14779 - KAFKA-15833: Restrict Consumer API to be used from one thread (#14779)

• PR-14785 - KAFKA-15849: Fix ListGroups API when runtime partition size is zero (#14785)

• a03a71d7 - KAFKA-15357: Aggregate and propagate assignments

• PR-14747 - Revert “Revert “KAFKA-15661: KIP-951: Server side changes (#14444)” (#14738)” (#14747)

• PR-14719 - KAFKA-15799 Handle full metadata updates on ZK brokers (#14719)

• PR-982 - Update muckrake version mapping for 3.6 (#981)

• PR-14483 - KAFKA-15481: Fix concurrency bug in RemoteIndexCache (#14483)

• PR-14482 - KAFKA-15169: Added TestCase in RemoteIndexCache (#14482)

• PR-981 - Update muckrake version mapping for 3.6

• PR-14777 - [MINOR] Removing unused variables from StreamThreadTest (#14777)

• PR-14635 - KAFKA-15755: LeaveGroupResponse v0 - v2 loses its member under certain error conditions (#14635)

• PR-14759 - KAFKA-15802: Validate remote segment state before fetching index (#14727) (#14759)

• PR-14596 - KAFKA-15346: add support for ‘single key single timestamp’ IQs with versioned state stores (KIP-960) (#14596)

• PR-14670 - KAFKA-15277: Design & implement support for internal Consumer delegates (#14670)

• PR-14704 - KAFKA-15470: Allow creating connectors in a stopped state (#14704)

• PR-14757 - KAFKA-15824 SubscriptionState’s maybeValidatePositionForCurrentLeader should handle partition which isn’t subscribed yet (#14757)

• PR-14727 - KAFKA-15802: Validate remote segment state before fetching index (#14727)

• PR-14545 - KAFKA-15605: Fix topic deletion handling during ZK migration (#14545)

• PR-14713 - KAFKA-15780: Wait for consistent KRaft metadata when creating or deleting topics (#14695) (#14713)

• PR-14738 - Revert “KAFKA-15661: KIP-951: Server side changes (#14444)” (#14738)

• PR-14708 - KAFKA-15774: refactor windowed stores to use StoreFactory (#14708)

• PR-14718 - KAFKA-15800: Prevent DataExceptions from corrupting KafkaOffsetBackingStore (#14718)

• PR-14712 - cherrypick KAFKA-15653: Pass requestLocal as argument to callback so we use the correct one for the thread (#14712)

• PR-14444 - KAFKA-15661: KIP-951: Server side changes (#14444)

• eaa6b8ab - KAFKA-15360: Include dirs in BrokerRegistration #14392

• PR-14647 - KAFKA-15693: Immediately reassign lost connectors and tasks when scheduled rebalance delay is disabled (#14647)

• PR-14506 - KAFKA-15552 Fix Producer ID ZK migration (#14506)

• PR-14629 - KAFKA-15653: Pass requestLocal as argument to callback so we use the correct one for the thread (#14629)

• PR-14594 - KAFKA-15583: Enforce HWM advance only if partition is not under-min-ISR (#14594)

• PR-14674 - KAFKA-15771: fix concurrency bug in ProduceRequest#partitionSizes() (#14674)

• PR-14659 - KAFKA-15774: introduce internal StoreFactory (#14659)

• PR-14695 - KAFKA-15780: Wait for consistent KRaft metadata when creating or deleting topics (#14695)

• PR-14593 - KAFKA-15584: Leader election with ELR (#14593)

• PR-14630 - KAFKA-15680: Fix sink task partition-count metric when cooperative consumer protocol is used (#14630)

• PR-14683 - KAFKA-15769: Fix logging with exception trace (#14683)

• PR-14679 - KAFKA-14133: Move StandbyTaskTest to Mockito (#14679)

• PR-14416 - KAFKA 14515: Optimized Uniform Rack Aware Assignor (#14416)

• PR-14621 - KAFKA-15673: Adding client metrics resource types (KIP-714) (#14621)

• PR-14689 - Add note about KAFKA-15653 (#14689)

• PR-14290 - KAFKA-15355: Message schema changes (#14290)

• PR-14642 - KAFKA-15679: Consumer configurations for group protocol (#14642)

• PR-14667 - KAFKA-15432: RLM Stop partitions should not be invoked for non-tiered storage topics (#14667)

• PR-14639 - KAFKA-15562: ensure commit request manager handles errors correctly (#14639)

• PR-14537 - KAFKA-15598 & KAFKA-15461: Add integration tests for DescribeGroups API, DeleteGroups API, OffsetDelete API and ListGroups API (#14537)

• PR-14618 - KAFKA-15668: Adding Opentelmetry shadowed library (KIP-714) (#14618)

• PR-14684 - KAFKA-15614: [Minor] Renaming getter and correcting code comments (#14684)

• PR-14685 - KAFKA-15627: KIP-951’s Leader discovery optimisations on the client (#14685)

• PR-14607 - KAFKA-14484: [1/N] Move PartitionMetadataFile to storage module (#14607)

• PR-14623 - KAFKA-14133: Move StreamsMetricsImplTest to Mockito (#14623)

• PR-13247 - KAFKA-14595 Move ReassignPartitionsCommand to java (#13247)

• PR-14627 - KAFKA-15661: KIP-951: protocol changes (#14627)

• PR-14619 - KAFKA-15669: Implement telemetry metric naming strategy (KIP-714) (#14619)

• PR-14174 - Kafka 12317: Relax non-null key requirement in Kafka Streams (#14174)

• PR-14589 - KAFKA-15647: Fix the different behavior in error handling between the old and new group coordinator (#14589)

• PR-14657 - KAFKA-15643: Fix error logged when unload is called on a broker that was never a coordinator. (#14657)

• PR-14576 - KAFKA-15632: Drop the invalid remote log metadata events (#14576)

• PR-14603 - KAFKA-15582: Move the clean shutdown file to the storage package (#14603)

• PR-14617 - KAFKA-15602: revert KAFKA-4852 (#14617)

• PR-14638 - KAFKA-15628: Refactor ConsumerRebalanceListener invocation for reuse (#14638)

• 37715862 - KAFKA-15704: Set missing ZkMigrationReady field on ControllerRegistrationRequest

• PR-14524 - KAFKA-15578: System Tests for running old protocol with new coordinator (#14524)

• PR-14410 - KAFKA-14133: Replace Easymock with Mockito in StreamsProducerTest, TopologyMetadataTest & GlobalStateStoreProviderTest (#14410)

• PR-14575 - KAFKA-15614: Define interfaces and classes for client telemetry (#14575)

• PR-14584 - KAFKA-15644: Fix CVE-2023-4586 in netty:handler (#14584)

• PR-13321 - KAFKA-15685: Add support for MinGW and MSYS2 (windows OS) (#13321)

• PR-14636 - KAFKA-15200: Add pre-requisite check in release.py (#14636)

• PR-14406 - KAFKA-14274 [6, 7]: Introduction of fetch request manager (#14406)

• PR-14193 - KAFKA-15326: [10/N] Integrate processing thread (#14193)

• PR-13315 - KAFKA-14767: Fix missing commitId build error after git gc (#13315)

• PR-14602 - KAFKA-15093: Add 3.5 Streams upgrade system tests (#14602)

• PR-14611 - KAFKA-15457: Add support for OffsetFetch version 9 in admin client (#14611)

• PR-14601 - KAFKA-15664: Add 3.4 Streams upgrade system tests (#14601)

• PR-14563 - KAFKA-15566: Fix test FetchRequestTest.testLastFetchedEpochValidation for KRaft mode (#14563)

• PR-14539 - KAFKA-15378: fix streams upgrade system test (#14539)

• PR-14568 - KAFKA-15626: Replace verification guard object with an specific type (#14568)

• PR-14587 - KAFKA-15607: Fix NPE in MirrorCheckpointTask::syncGroupOffset (#14587)

• PR-14586 - KAFKA-14133: Move RocksDBGenericOptionsToDbOptionsColumnFamilyOptionsAdapterTest to Mockito (#14586)

• PR-14538 - KAFKA-15428: Cluster-wide dynamic log adjustments for Connect (#14538)

• PR-14532 - KAFKA-15534: Inject request completion time when the request failed (#14532)

• PR-14312 - KAFKA-15581: Introduce ELR (#14312)

• PR-14465 - KAFKA-15582: Identify clean shutdown broker (#14465)

• PR-14477 - KAFKA-15527: Add reverseRange and reverseAll query over kv-store in IQv2 (#14477)

• PR-14554 - KAFKA-15604: Telemetry API request and response schemas and classes (KIP-714) (#14554)

• PR-14571 - KAFKA-15454: Add support for OffsetCommit version 9 in admin client (#14571)

• PR-14566 - KAFKA-15616: Client telemetry states and transition (KIP-714) (#14566)

• PR-14560 - KAFKA-15613: Client API definition and configurations (KIP-714) (#14560)

• 33b8ee3a - remove unused import

• PR-14407 - KAFKA-15479: Remote log segments should be considered once for retention breach (#14407)

• PR-14317 - KAFKA-13973: Fix inflated block cache metrics (#14317)

• PR-14413 - KAFKA-15554: Client state changes for handling one assignment at a time & minor improvements (#14413)

• PR-14417 - KAFKA-14519; [1/N] Implement coordinator runtime metrics (#14417)

• PR-14364 - KAFKA-15278: Implement HeartbeatRequestManager to handle heartbeat requests (#14364)

• PR-14473 - KAFKA-15521: Refactor build.gradle to align gradle swagger plugin with swagger dependencies (#14473)

• PR-14381 - KAFKA-14912:Add a dynamic config for remote index cache size (#14381)

• PR-14291 - KAFKA-15356: Generate and persist directory IDs (#14291)

• PR-14462 - KAFKA-14504: Implement DescribeGroups API (#14462)

• PR-14490 - HOTIFX: fix Kafka versions for system tests (#14490)

• PR-13201 - KAFKA-14596: Move TopicCommand to tools (#13201)

• PR-967 - KSECURITY-2013: Upgraded Jetty to 9.4.53.v20231009 and Netty to 4.1.100.Final

• PR-14523 - KAFKA-15569: test and add test cases in IQv2StoreIntegrationTest (#14523)

• PR-14478 - KAFKA-15532: non active controllers return 0 for ZkWriteBeforelag (#14478)

• PR-14272 - KAFKA-15390: Do not return fenced broker in FetchResponse.preferredReplica (#14272)

• PR-14529 - KAFKA-14481: Move LogSegment/LogSegments to storage module (#14529)

• PR-14505 - KAFKA-14684: Replace EasyMock/PowerMock with Mockito in WorkerSinkTaskThreadedTest (#14505)

• PR-14511 - KAFKA-15536: Dynamically resize remoteIndexCache (#14511)

• PR-14361 - KAFKA-15387: Deprecate Connect’s redundant task configurations endpoint (#14361)

• PR-14527 - KAFKA-15593: Add 3.6 to core upgrade and compatibility tests (#14527)

• PR-14388 - KAFKA-15465: Don’t throw if MirrorMaker not authorized to create internal topics. (#14388)

• PR-14535 - KAFKA-15596: Upgrade ZooKeeper to 3.8.3 (#14535)

• PR-14533 - KAFKA-15492: Upgrade and enable spotbugs when building with Java 21 (#14533)

• PR-14518 - KAFKA-15570: Add unit tests for MemoryConfigBackingStore (#14518)

• PR-14467 - KAFKA-14987; Implement Group/Offset expiration in the new coordinator (#14467)

• PR-14484 - KAFKA-15537: Fix metadata downgrade documentation (#14484)

• PR-14519 - KAFKA-15571: StateRestoreListener#onRestoreSuspended is never called because DelegatingStateRestoreListener doesn’t implement onRestoreSuspended (#14519)

• PR-14053 - KAFKA-15221; Fix the race between fetch requests from a rebooted follower. (#14053)

• PR-14458 - KAFKA-15498: upgrade to snappy 1.1.10.5 (#14458)

• PR-14522 - KAFKA-15415: On producer-batch retry, skip-backoff on a new leader (#14384) (#14522)

• PR-14412 - KAFKA-14133: Move MeteredTimestampedKeyValueStoreTest, ReadOnlyWindowStoreFacadeTest and TimestampedWindowStoreBuilderTest to Mockito (#14412)

• PR-14455 - KAFKA-15507: Make AdminClient throw non-retriable exception for a new call while closing (#14455)

• PR-14514 - KAFKA-14927: Add validation to be config keys in ConfigCommand tool (#14514)

• PR-14445 - KAFKA-15502: Update SslEngineValidator to handle large stores (#14445)

• PR-14384 - KAFKA-15415: On producer-batch retry, skip-backoff on a new leader (#14384)

• PR-14487 - KAFKA-15547: Fix thread leak in MirrorMakerConfigTest (#14487)

• PR-14480 - KAFKA-15330: Add missing documentation of metrics introduced as part of KAFKA-15028 (#14480)

• PR-13927 - KAFKA-10199: Enable state updater by default (#13927)

• PR-14408 - KAFKA-14506: Implement DeleteGroups API and OffsetDelete API (#14408)

• PR-14470 - KAFKA-15526: Simplify the LogAppendInfo class (#14470)

• PR-13204 - KAFKA-14593: Move LeaderElectionCommand to tools (#13204)

• PR-14456 - KAFKA-14595 ReassignPartitionsIntegrationTest rewritten in java (#14456)

• PR-14370 - KAFKA-15449: Verify transactional offset commits (KIP-890 part 1) (#14370)

• PR-14281 - KAFKA-15326: [9/N] Start and stop executors and cornercases (#14281)

• PR-14441 - KAFKA-15500: Fix condition in SslPrincipalMapper.java (#14441)

• PR-14459 - KAFKA-15511: Handle CorruptIndexException in RemoteIndexCache (#14459)

• 60e84562 - Bump version to 3.6.0

• PR-14457 - KAFKA-15510: Fix follower’s lastFetchedEpoch when fetch response has … (#14457)

• PR-14442 - KAFKA-10199: Do not unlock state directories of tasks in state updater (#14442)

• PR-14434 - KAFKA-15498: bump snappy-java version to 1.1.10.4 (#14434)

• PR-14399 - KAFKA-15466: Add KIP-919 support for some admin APIs (#14399)

• PR-14226 - KAFKA-15326: [8/N] Move consumer interaction out of processing methods (#14226)

• PR-14265 - KAFKA-10199: Do not process when in PARTITIONS_REVOKED (#14265)

• PR-14437 - KAFKA-10199: Fix restoration behavior for paused tasks (#14437)

• PR-14403 - KAFKA-10199: Add missing catch for lock exception (#14403)

• PR-14093 - KAFKA-15248 (KIP-959): Add BooleanConverter to Kafka Connect (#14093)

• PR-14438 - Upgrade Jetty to 9.4.52.v20230823 (#14438)

• PR-14440 - [KAFKA-15117] In TestSslUtils set SubjectAlternativeNames to null if there are no hostnames (#14440)

• PR-14433 - KAFKA-15485: Support Java 21 (3/3) (#14433)

• PR-14427 - KAFKA-15485: Fix “this-escape” compiler warnings introduced by JDK 21 (1/N) (#14427)

• PR-14355 - KAFKA-14595 ReassignPartitionsUnitTest rewritten in java (#14355)

• PR-14405 - [MINOR] QuorumController tests use testToImage (#14405)

• PR-14404 - KAFKA-14133: Move MeteredSessionStoreTest, MeteredWindowStoreTest and ReadOnlyKeyValueStoreFacadeTest to Mockito (#14404)

• PR-951 - revert gradle enterprise plugin

• PR-14386 - KAFKA-14960: TopicMetadata request manager (#14386)

• PR-14376 - KAFKA-15458: Fully resolve endpoint information before registering controllers (#14376)

• PR-14398 - KAFKA-15473: Hide duplicate plugins in /connector-plugins (#14398)

• PR-14371 - KAFKA-14855: Harden integration testing logic for asserting that a connector is deleted (#14371)

• PR-14396 - KAFKA-14133: Move KeyValueIteratorFacadeTest, KeyValueSegmentTest and MeteredKeyValueStoreTest to Mockito (#14396)

• PR-14344 - KAFKA-15476: Resolves cache misses in checkstyle (#14344)

• PR-14385 - KAFKA-15306 - Integrating committed offsets for updating fetch positions (#14385)

• PR-14359 - KAFKA-14274 [2-5/7]: Introduction of more infrastructure for forthcoming fetch request manager (#14359)

• PR-14393 - Added missing licenses for libraries (#14393)

• PR-14130 - KAFKA-15273: Log common name of expired client certificates (#14130)

• PR-14271 - KAFKA-14503: Implement ListGroups (#14271)

• PR-14382 - KAFKA-15442: add a section in doc for tiered storage (#14382)

• PR-14347 - KAFKA-15439: Transactions test with tiered storage (#14347)

• PR-14378 - KAFKA-15459: Convert coordinator retriable errors to a known producer response error (#14378)

• PR-14346 - KAFKA-15115 - KAFKA-15163; Reset/Validate positions implementation & API integration (#14346)

• PR-14323 - KAFKA-15275 - Client state machine basic components, states and initial transitions (#14323)

• PR-14147 - KAFKA-14502; Implement LeaveGroup protocol in new GroupCoordinator (#14147)

• PR-14367 - KAFKA-15450 Don’t allow ZK migration with JBOD (#14367)

• PR-14363 - KAFKA-14993: Improve TransactionIndex instance handling while copying to and fetching from RSM (#14363)

• PR-14349 - KAFKA-15352: Update log-start-offset before initiating deletion of remote segments (#14349)

• PR-14353 - KAFKA-14499: [7/7] Add integration tests for OffsetCommit API and OffsetFetch API (#14353)

• PR-14167 - KAFKA-15315: Use getOrDefault rather than get in TransactionState (#14167)

• PR-14180 - KAFKA-15326: [7/N] Processing thread non-busy waiting (#14180)

• PR-13562 - KAFKA-14581: Moving GetOffsetShell to tools (#13562)

• PR-14351 - KAFKA-15441 Allow broker heartbeats to complete in metadata transaction (#14351)

• PR-14342 - KAFKA-15435 Fix counts in MigrationManifest (#14342)

• PR-14221 - KAFKA-15338: The metric group documentation for metrics added in KAFKA-13945 is incorrect (#14221)

• PR-14330 - KAFKA-15410: Delete records with tiered storage integration test (4/4) (#14330)

• PR-14354 - KAFKA-14273; Close file before atomic move (#14354)

• PR-14305 - KAFKA-14274 #1: basic refactoring (#14305)

• PR-14306 - KAFKA-15369: Implement KIP-919: Allow AC to Talk Directly with Controllers (#14306)

• PR-14314 - KAFKA-15425: Fail fast in Admin::listOffsets when topic (but not partition) metadata is not found (#14314)

• PR-14341 - KAFKA-15307: Removes non-existent configs (#14341)

• PR-14217 - KAFKA-14595: ReassignPartitionsCommandArgsTest rewritten in java (#14217)

• PR-14279 - KAFKA-15179: Add integration tests for the file sink and source connectors (#14279)

• PR-14124 - KAFKA-14509; [1/2] Define ConsumerGroupDescribe API request and response schemas and classes. (#14124)

• PR-14340 - KAFKA-15351: Update log-start-offset after leader election for topics enabled with remote storage (#14340)

• PR-14321 - KAFKA-14499: [6/N] Add MemberId and MemberEpoch to OffsetFetchRequest (#14321)

• PR-14339 - KAFKA-15422: Update documenttion for delegation tokens when working with Kafka with KRaft (#14339)

• PR-14329 - KAFKA-15410: Delete topic integration test with LocalTieredStorage and TBRLMM (3/4) (#14329)

• PR-14111 - KAFKA-9800: Exponential backoff for Kafka clients - KIP-580 (#14111)

• PR-14331 - KAFKA-15293 Added documentation for tiered storage metrics (#14331)

• PR-14328 - KAFKA-15410: Reassign replica expand, move and shrink integration tests (2/4) (#14328)

• PR-14307 - KAFKA-15410: Expand partitions, segment deletion by retention and enable remote log on topic integration tests (1/4) (#14307)

• PR-14324 - KAFKA-15424: Make the transaction verification a dynamic configuration (#14324)

• PR-14152 - KAFKA-7438: Migrate WindowStoreBuilderTest from EasyMock to Mockito (#14152)

• PR-14223 - KAFKA-14133: Move AbstractStreamTest and RocksDBMetricsRecordingTriggerTest to Mockito (#14223)

• PR-14318 - KAFKA-15422: Update documenttion for delegation tokens when working with Kafka with KRaft (#14318)

• PR-14113 - KAFKA-15260: RLM Task should handle uninitialized RLMM for the associated topic-parititon (#14113)

• PR-14320 - KAFKA-15421: fix network thread leak in testThreadPoolResize (#14320)

• PR-14326 - KAFKA-15429: reset transactionInFlight on StreamsProducer close (#14326)

• PR-14325 - KAFKA-15429: catch+log errors from unsubscribe in streamthread shutdown (#14325)

• PR-14308 - KAFKA-14965 - OffsetsRequestsManager implementation & API integration (#14308)

• PR-14319 - KAFKA-15427: Fix resource leak in integration tests for tiered storage (#14319)

• PR-14122 - KAFKA-14500; [7/7] Refactor GroupMetadataManagerTest (#14122)

• PR-14310 - KAFKA-14499: [5/N] Refactor GroupCoordinator.fetchOffsets and GroupCoordinator.fetchAllOffsets (#14310)

• PR-14301 - KAFKA-15351: Ensure log-start-offset not updated to local-log-start-offset when remote storage enabled (#14301)

• PR-14171 - Kafka Streams Threading: Timeout behavior (#14171)

• PR-946 - Revert “KSECURITY-1789: upgrading requests to v2.31.0”

• daea0fdf - KAFKA-15375: fix broken clean shutdown detection logic in LogManager

• 703e1d9f - KAFKA-15375: fix broken clean shutdown detection logic in LogManager

• PR-14222 - KAFKA-14133: Move RocksDBRangeIteratorTest, TimestampedKeyValueStoreBuilderTest and TimestampedSegmentTest to Mockito (#14222)

• PR-14302 - KAFKA-15412: Reading an unknown version of quorum-state-file should trigger an error (#14302)

• PR-14161 - KAFKA-15267: Do not allow Tiered Storage to be disabled while topics have remote.storage.enable property (#14161)

• PR-14303 - KAFKA-13327: Gracefully report connector validation errors instead of returning 500 responses (#14303)

• PR-14277 - KAFKA-15392: Prevent shadowing RestServer shutdown exceptions (#14277)

• PR-14118 - KAFKA-14875: Implement wakeup (#14118)

• PR-14264 - KAFKA-15403: Refactor @Test(expected) annotation with assertThrows (#14264)

• PR-14294 - KRaft support for DescribeClusterRequestTest and DeleteConsumerGroupsTest (#14294)

• PR-14120 - KAFKA-14499: [4/N] Implement OffsetFetch API (#14120)

• PR-14285 - KAFKA-15399: Enable OffloadAndConsumeFromLeader test (#14285)

• PR-14210 - KAFKA-14133: Move RecordCollectorTest, StateRestoreCallbackAdapterTest and StoreToProcessorContextAdapterTest to Mockito (#14210)

• PR-14236 - KAFKA-15353: make sure AlterPartitionRequest.build() is idempotent (#14236)

• PR-14288 - KAFKA-15256: Adding reviewer as part of release announcement email template (#14288)

• PR-14266 - KAFKA-15294: Publish remote storage configs (#14266)

• PR-14127 - KAFKA-15181: Wait for RemoteLogMetadataCache to initialize after assigning partitions (#14127)

• PR-14282 - KAFKA-15389: Don’t publish until we have replayed at least one record (#14282)

• PR-13561 - KAFKA-14888: Added remote log segments retention mechanism based on time and size. (#13561)

• PR-14244 - KAFKA-15377: Don’t expose externalized secret values in tasks-config API endpoint (#14244)

• PR-14278 - KAFKA-15393: Improve shutdown behavior in MM2 integration tests (#14278)

• PR-14026 - Fix incorrect format specifiers when formatting string (#14026)

• PR-14238 - Handle topic-level dynamic remote storage enable configuration (#14238)

• PR-14283 - Use readLock when removing an item from the RemoteIndexCache (#14283)

• PR-14135 - KIP-937-Improve message timestamp validation (#14135)

• PR-14280 - Handle concurrent dir rename which makes log-dir to be offline unexpectedly (#14280)

• PR-14218 - [2/N]: Refactoring for client code to reduce boilerplate (#14218)

• PR-14208 - Metadata transactions in MetadataLoader (#14208)

• PR-14204 - Move mocks from KStreamTransformValuesTest, KTableImplTest and KTableTransformValuesTest to Mockito (#14204)

• PR-14269 - fix grace period partition issue (#14269)

• PR-14197 - Execute action queue after callback request (#14197)

• PR-1393 - 3.7 fixed downstream trigger

• PR-1367 - 3.7 removed mk-include and make init-ci from semaphore

• e2494e6f - Bump version to 3.7.1

ksqlDB

• 4781375c - Update ref to confluent-packaging-tools

• PR-10353 - KSE-1795 | Add support for AnyOf Json type while encoding Ksql schemas.

• 47e67702 - remove jackson pin to update jackon to version specified in common (2.16.0)

• e12817d4 - [skip ci] Copy CODEOWNERS from the default branch

• PR-10355 - MINOR: Update snapshot URLs.

• PR-10348 - Merge Conflict Resolution (from 7.5.x to 7.6.x)

• PR-10346 - Merge Conflict Resolution (from 7.2.x to 7.3.x)

• f8184c49 - KSQL-12164: Disable ITs only for failing modules

• 7902e36e - KSQL-12164: Disable ITs only for single module

• aa0c5327 - KSQL-12164: Disable ITs only for single module

• PR-10340 - KSE-1832 | CVE fix for vertx dependency.

• PR-10338 - KSE-1832 | CVE fix for vertx dependency.

• f68591f6 - KSQL-12164: Remove disable ITs flag

• b0225629 - KSQL-12154: Update plugin version

• PR-10333 - KSE-1829 | Fix CVE for janino dependency.

• 72cd094c - KSQL-12154: Update plugin version

• PR-10330 - Merge Conflict Resolution (from 7.2.x to 7.3.x)

• PR-10329 - Merge Conflict Resolution (from 7.2.x to 7.3.x)

• PR-10328 - KSE-1829 | Fix CVE for janino dependency.

• PR-10321 - [KSQL-12110] | Check if directory exists before cleanup 7.2.x

• PR-10325 - Merge Conflict Resolution (from 7.5.x to 7.6.x)

• PR-10323 - [KSQL-12110] | Check if directory exists before cleanup 7.4.x

• PR-10322 - [KSQL-12110] | Check if directory exists before cleanup 7.3.x

• 5501cc1d - KSQL-11272: Delete Unused File

• PR-10307 - [KSQL-12107] | Migrate 7.7.x to ranges

• PR-10311 - [KSQL-12107] | Migrate 7.3.x to ranges

• PR-10312 - [KSQL-12107] | Migrate 7.2.x to ranges

• PR-10308 - [KSQL-12107] | Migrate to 7.6.x to ranges

• PR-10309 - [KSQL-12107] | Migrate 7.5.x to ranges

• PR-10310 - [KSQL-12107] | Migrate 7.4.x to ranges

• PR-10313 - [KSQL-12107] | Migrate 7.1.x to ranges

• PR-10314 - [KSQL-12107] | Migrate 7.0.x to ranges

• PR-10315 - [KSQL-12107] | Migrate 6.2.x to ranges

• PR-10319 - Merge Conflict Resolution (from 7.6.x to 7.7.x)

• PR-10318 - Merge Conflict Resolution (from 7.3.x to 7.4.x)

• PR-10317 - Merge Conflict Resolution (from 7.2.x to 7.3.x)

• PR-10316 - Merge Conflict Resolution (from 7.1.x to 7.2.x)

• PR-10304 - [KSE-1831] | Update netty version to stable one

• afc0579f - KSQL-11272: usse correct ksqldb-parent version

• 4e8ee5b0 - KSQL-11272: Add EOL’d library code to the ksqlDB codebase

• PR-10297 - [KSQL-12104] | Fix 7.5.x build

• PR-10303 - [KSE-1831] | Update netty version to stable one

• c36d53b4 - [KSQL-12104] | Fix 7.6.x build

• PR-10294 - [KSQL-12103] | Update common version

• d2e2ed65 - KSQL-12064: Add informational comment

• c3b70015 - KSQL-12064: Add UTs

• 732cfbc0 - KSQL-12064: Add num value based Query status metrics

• 233bebe0 - KSQL-12064: Add num value based CommandRunnerMetrics

• PR-10278 - [KSQL-12027] | Update common version in pom (7.7.x)

• 173a4f8e - KSE-1824 | Address review comments.

• 85b238bf - KSE-1824 | Add a no-arg constructor for ProtobufNoSRConverter.

• bbf596c8 - [KSE-1820] | Update common in pom to fix PR pipeline

• 56444690 - [KSE-1820] | Fix formatting

• 340768db - [KSE-1820] | Extract to constants

• e5268de8 - [KSE-1820] | Fixes ksql build failures

• PR-10250 - Merge Conflict Resolution (from 7.6.x to master)

• PR-10243 - KSE-1816: Update Commons-Compress and commons-io

• PR-10238 - KSE-1817: Update apache.io.version

• PR-10237 - KSE-1816: Update commons-compress

• PR-10234 - MINOR: Pinned the common nanoversion to 7.6.1-3

• PR-10223 - KSQL-11784: Change groupID to a more secure name

• 2f84873b - KSQL-11784: Change groupID to a more secure name

• 5612f336 - KSE-1786 | Increase execution time limit to 6 hours.

• 30544a65 - KSE-1786 | Cherry pick the replacement of easymock to mockito from newer branches.

• f969d5c0 - KSE-1786 | Enable pinned nanoversions.

• b49bbcbb - KSE-1786 | Specify type parameter for CommandStatus.

• c7288dd0 - KSE-1786 | Remove maven cache restore.

• cea27ec9 - KSE-1786 | set java version to 8

• cd59a75a - KSE-1786 | Increase the execution time limit.

• 26db19fd - KSE-1786 | Fixed the extra args in service.yml file.

• 37e06168 - KSE-1786 | Fix the parent version in commons.

• 5467ea20 - KSE-1786 | set java version to 8

• 0a1cf171 - KSE-1786 | Increase the execution time limit.

• db81cd09 - KSE-1786 | Fixed the extra args in service.yml file.

• PR-10167 - fix: check status code and do not parse pull query error message

• PR-10153 - Revert “Upgrade Antlr to 4.13.1 (#10122)”

• PR-10138 - fix: make SR dependency optional

• PR-10122 - Upgrade Antlr to 4.13.1

• PR-10365 - add cp-jar-build tasks when running pr workflows

REST Proxy

• PR-1273 - KNET-15501 work around jackson databind string length limit

• 774a275a - [skip ci] Copy CODEOWNERS from the default branch

• 9674993c - Removing /tmp/confluent as the DSTDIR check from Makefile

• PR-1249 - Add doLog parameter for KafkaRestConfig constructor

• PR-1250 - Allow to set KafkaAvroSerializerConfig in KafkaRestConfig (#1229)

• PR-1247 - DP-13727 Add CodeArtifact package paths to service.yml

• PR-1241 - KNET-13992 Fix java.lang.ClassNotFoundException: org.xerial.snappy.SnappyInputStream

• PR-1228 - KREST-9993 Migrate integration tests to kraft

• PR-1229 - KREST-12797 Allow to set KafkaAvroSerializerConfig in KafkaRestConfig

• PR-1216 - Update service.yml

• f7da1047 - Checking if removing the comment helps this pass in the upstream build

• 6b994366 - Disabling flakey test

• 3ac1df6b - Fix flakey test similar to

• 611dfcc1 - [skip ci] Copy CODEOWNERS from the default branch

• PR-482 - Do not throw ConfigException in case there are different applications configured for the server

• ab8cd6a2 - Revert “Support HTTP/2 for BouncyCastle FIPS enabled (#472)”

• PR-475 - KNET-14372 Getter for doLog and add helper config method

• PR-472 - Support HTTP/2 for BouncyCastle FIPS enabled

• 610c421a - ppv2

• PR-469 - Add comment about keeping SslFactoryTest and SslFactoryFipsTest tests insync

• bbca00ae - Remove test jar dependency from fips-tests module

• PR-464 - Add doLog param for constructor

• PR-462 - DP-13727 Add CodeArtifact package paths to service.yml

• 05f2a0ab - Moved bc fips libs from main pom.xml to fips-tests.

• 83d4def9 - Removed test scope from bc fips libs as they are needed downstream as compile.

• 5fe66853 - Incorporated review comments.

• 609b0547 - Added FIPS provider to cert/key factories.

• 08af5745 - Removed unrequired deps from fips-tests/pom.xml.

• f2f1ba00 - Added licenses.

• 6d3a692e - Incorporated comments.

• 4f0d2f69 - Updated test.

• 2626f610 - removed semaphore debug

• e67d7818 - Added debug to semaphore file.

• 52534d9c - Fixed checkstyle issues.

• 756e6fec - Fixed bug in reload test. Added variable to track load exception.

• f6db4eaa - Added log4j dependencies to fips-tests.

• 27d52376 - Added resources in both rest-utils and fips-tests.

• 0b2f7d4d - Moved non fips tests to rest-utils/core and kep FIPS in fips-tests.

• 1a858da5 - Fixed indentation

• 6a4841de - Added separate module for fips tests.

• ff6210a1 - Uncommented scala dependency.

• b3831d47 - Removed ce-kafka:DefaultSslEngineFactory dependency.

• 697f1045 - Completed unit tests.

• b5520893 - More tests.

• 63252c43 - Added FIPS test and bc fips deps in pom.xml.

• 886a6245 - Moved certs and keys to static resources folder.

• cec704b1 - Added basic tests and some refactoring.

• 3f53dbe9 - Encapsulated PEM realted code in separate class. Incorporated comments.

• c5a5308b - KSECURITY-2171: Added support for PEM based keystore.

• PR-458 - Set nodeLabel for nightly master build

• 2ebbbca3 - KREST-13506 Ensure we log timeout errors that result in a 500 error

• 553d5691 - Update service.yml

• PR-447 - KREST-11856 Correctly registry listener to the application’s NetworkTrafficServerConnector connector

• 8d314dab - add test for cipher with incompatible protocol

• e26c7c0c - add a comment

• bd0f3937 - test cleanup

• f8351ec2 - Add test for restricting SSL cipher suite

• ac6ea86f - remove dead whitespace

• 0f92d9f1 - KREST-12628 only log exceptions for 5xx

• PR-430 - Update service.yml

Schema Registry

• b1692037 - Revert recent change to in-memory cache

• ab26883a - DGS-11418 Ensure aliases are properly qualified

• b862eb19 - fix merge issue

• 6a9d6e22 - Fix Protobuf custom option for single-entry map

• b7aea93c - Incorporate review feedback

• 2d3c4736 - Revert “do not reinstantiate objectmapper as it’s expensive (#2686) (#2695)”

• 99e176a0 - Enhance test

• b3570725 - Fix checkstyle

• 18865846 - DGS-11418 Add aliases query param to /schemas endpoint

• PR-3147 - DGS-12288 pt 2: Added config for calling local store on health check

• cdf34e52 - DGS-12608 Fix deserialization of Avro unions with logical types

• 9f34f1a4 - DGS-11418 Add aliases query param to schemas endpoint

• PR-3142 - DGS-12288: Call kafkaStore on healthy checks

• fbe1f760 - Fix build due to Jackson upgrade to 2.16

• 0e4552fe - [skip ci] Copy CODEOWNERS from the default branch

• 75f07a5f - update azure-identity

• 026c2b1f - DGS-11833 Add API to return KEK names for a subject

• 2c980a77 - More robust usage of ServiceLoader

• 79d50b79 - Add comment

• c9956f29 - ensure KafkaStoreMessageHandler take checkpoints

• 2c6c783c - DGS-11554 Enhance Avro error with type name

• f98a7075 - Fix checkstyle

• d81d0f49 - Unwrap IllegalStateException if possible

• ca36c3e3 - Add testSharing query param during kek create and update

• fdc39bff - DGS-10707 Fix handleDeleteSubject to pass right oldSchemaValue

• 8052b8a5 - expose sslfactory

• 811adc50 - fix compile error

• a3e3f2f8 - allow exception to be thrown

• 5848374c - fix checkstyle

• 01dbcbb9 - add headerProperties

• de17bc6e - Support passing keystore/truststore to Vault KMS client

• PR-3110 - Revert jackson to 2.14.2

• PR-3109 - DGS-10892: Produce register schema message after tombstones

• d6b8fcc0 - address review comment

• 5ec016d9 - fix naming

• 57dcf5bc - fix check style

• d8cd6216 - Fix circular recursive reference

• 33dd09be - add JettyEofExceptionWriterInterceptor to catch and swallow JettyEofException

• cf034df4 - add JettyEofExceptionMapper to catch and convert JettyEofException to 400 error

• 40f80bde - DGS-10920 Enhance register API to allow tags to be added/removed

• 57308f0b - upgrade jackson package to fix build

• 642def9c - DGS-10855 Fix inconsisteny with resolving recuring reference.

• c3520a33 - Removing /tmp/confluent as the DSTDIR check from Makefile

• PR-3098 - Fix build due to Jackson upgrade to 2.16.2

• 403302ef - Fix build due to Jackson upgrade to 2.16.2

• a128fcf5 - Add comment

• 8e9c12cb - Fix NPE

• dbd05f8c - DGS-10840 Ensure subject is hard deleted before clearing

• fa9545cc - Ensure consistent lookup of rule params

• b36c62ae - DGS-10808 Support const in JSONSchemaConverter

• 2c32a50d - Refactor storage value to entity conversions

• c04c8fbd - Revert “Minor renaming”

• 8eeaf335 - Add disabled override

• 93d8d2f8 - Allow rule onFailure/onSuccess to be overriden by rule type

• 439119b5 - Add KEK test endpoint for testing shared KEKs

• 4d377d80 - DGS-10135 Allow rule onFailure/onSuccess to be overriden via props

• PR-3072 - DGS-10608: Don’t allow subjects named __EMPTY

• af548bf0 - Update Apache commons-compress to 1.26.1

• c0cbc3c8 - Add test

• fce6aaf6 - Ensure sensitive values are decoded during listVersionsForId

• 01d8b72b - DGS-10533 Fix NPE in deser when use.latest=true and RecordNameStrategy

• e5f0e83f - enable topic deletion in tests

• aab7e57f - DGS-10517 Scrub Avro namespace when scrub.invalid.names=true

• PR-3059 - fix: nested schemas were not considered in matching the correct Json Union schema

• PR-3056 - Fix build breakage caused by dependency change

• 38e98145 - DGS-10394 Handle nulls in enum in JSON Schema converter

• eed8a24f - Add REST APIs

• 08db10e8 - Update service.yml

• b28bf6c2 - Fix checkstyle

• a54972f1 - fix checkstyle

• d60862f1 - First cut at parsing tags

• eefeee7a - First cut at 2020-12 $defs

• 78ae7f7b - Fix merge issue

• c84f735e - Update client/src/main/java/io/confluent/kafka/schemaregistry/rules/RuleContext.java

• PR-3038 - feat: Added ReferenceSchema support to allOf

• 578ef940 - Add missing import

• 8257085e - unit test for reference schema inside allOf

• 2808930e - DGS-10324 Add test to register same schema with no ID in IMPORT mode

• fb094344 - Remove deprecated class

• 317c4e89 - Upgrade json-skema to 0.13.0

• d6179308 - feat: Added ReferenceSchema support to allOf

• ae0e3140 - fix: invalid behaviour for stringSchema in allOfToConnectSchema

• ad7a202a - fix: invalid behaviour for stringSchema in allOfToConnectSchema

• 296b3780 - #3025 log error message with more details in case latest.compatibility.strict=true and latestVersion is not backward compatible

• 6dcb41f7 - Fix tests

• 6a138838 - Allow exact same schema to be re-imported

• 814141db - Update ProtobufSchema.java

• 885098ab - Update JsonSchema.java

• ff5b2158 - DGS-10721 Add support for CONDITION with CEL_FIELD

• a349821f - add OffsetCheckpointReadOnly

• 22f36f3f - Optimization: cache Tink primitives

• 8b8eebe0 - Fix checkstyle

• 1063bb4c - Add check for FieldRuleExecutor

• bc194452 - Add a CEL test with a tags expr in the guard

• ff0b820b - Ensure specific Avro type is setup during configure

• 6df56c8f - Optimization: remove known deps from ProtobufSchema

• 16214b96 - Re-add schema parameter that was dropped during refactor

• d6095ad3 - Fix checkstyle

• 343ddff3 - First commit

• PR-3012 - Minor: Apply service bot changes to earlier branches

• 07c9975e - DGS-10206 Fix handling of multitype JSON schemas for 2020-12

• e5bfd011 - DGS-10203 Add JSON Schema converter config to ignore modern dialects

• 306dd5c5 - Add error message for PACKAGE_CHANGED

• 2861cd88 - Fix checkstyle

• abbab267 - DGS-10184 Ensure package change for Protobuf is incompatible

• 31c49cf7 - Update SR client to accpet SSL configs

• 641a9bab - Fix checkstyle

• d59f138d - Enhance healthy method

• d86366ad - Clean up test

• 151edc97 - Upgrade json skema lib

• aed3b7d5 - Ensure correct GenericData is used

• 26569386 - Optimization: remove extraneous KekInfo/DekInfo classes

• be5c571b - Improve parameter handling in FieldEncryptionExecutor

• 5d5fda18 - Fix use of non-absolute refs for JSON Schema

• PR-2993 - DP-13727 Add CodeArtifact package paths to service.yml

• 3bd1cdd5 - update common-compress

• 77f4ed97 - Ensure Vault namespace is being passed

• 98ffc914 - update azure-identity to match the version used in ce-kafka

• 2ef767e3 - Fix merge issue for wire upgrade

• 7684230c - Update pom.xml

• 2c3178f0 - .

• 819d2c52 - .

• 177af0d0 - DGS-10061 Add Protobuf compat check for moving field into existing oneOf

• 60084a18 - .

• PR-2969 - DGS-10046: Add health check for SR and extensions

• 82f51da1 - Support older versions of Tink library

• 2e8eaceb - .

• 1813e4c2 - .

• bbe261f4 - exclude okio

• PR-2957 - Added snappy-java dependency

• 3462d02f - Update commons-compress to 1.25.0

• 30de64db - Fix breaking change ti ParsedSchema.validate method

• c53b8f00 - Improve the performance of invalid name scrubbing

• PR-2923 - Handle bug where enable.fips config is true but FIPS resource extension class is not configured

• 83570cf5 - add configs

• 6d8f0530 - Remove temp build fix

• 0f4860f3 - Revert “Upgrade JSONata dependency to 2.5.0”

• bd9d64f8 - Fix alias search when using context wildcard

• 64e420b4 - Clean up LocalKmsClient

• 2e6d4af6 - Upgrade json-skema dependency to 0.15.0

• 8c5aaa96 - Upgrade JSONata dependency

• 40691a19 - Add flatten.singleton.unions for JSON schema converter

• 93db043a - Fix javadoc annotations to have no errors

• e0b71df3 - Flatten singleton unions in Avro converter

• 7917b812 - Fix dek search

• eb059309 - Fix comparator for DataEncryptionKeyId

• c025d150 - Fix comparator for DataEncryptionKeyId

• 07ea0e03 - Add DekRegistry to SR properties for easier access

• 79947071 - Cache checkpoint for cacheInitialized before reader thread starts