dependabot[bot] opened a new pull request, #5225: URL: https://github.com/apache/streampipes/pull/5225
Bumps [org.apache.pulsar:pulsar-bom](https://github.com/apache/pulsar) from 4.2.4 to 5.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/pulsar/releases";>org.apache.pulsar:pulsar-bom's releases</a>.</em></p> <blockquote> <h2>v5.0.1</h2> <p><a href="https://github.com/apache/pulsar/pulls?q=is%3Apr+is%3Amerged+label%3Arelease%2F5.0.1+label%3Acherry-picked%2Fbranch-5.0+sort%3Acreated-asc";>Cherry-picked changes</a></p> <h2>v5.0.0</h2> <h4>2026-10-05</h4> <h3>Milestone release notes</h3> <p>The 5.0.0 release also includes the changes from these milestone releases:</p> <ul> <li><a href="https://github.com/apache/pulsar/releases/tag/v5.0.0-M1";>Pulsar 5.0.0-M1</a></li> <li><a href="https://github.com/apache/pulsar/releases/tag/v5.0.0-M2";>Pulsar 5.0.0-M2</a></li> </ul> <h3>Approved PIPs</h3> <ul> <li>[improve][pip] PIP-441: Add Broker-Level Metrics for Skipped Non-Recoverable Data (<a href="https://redirect.github.com/apache/pulsar/pull/24716";>#24716</a>)</li> <li>[improve][pip] PIP-494: Scalable Topics Client Specification — authoritative reference and change process (<a href="https://redirect.github.com/apache/pulsar/pull/26447";>#26447</a>)</li> <li>[improve][pip] PIP-496: Pulsar Functions and IO support for the V5 client and scalable topics (<a href="https://redirect.github.com/apache/pulsar/pull/26698";>#26698</a>)</li> </ul> <h3>Library updates</h3> <ul> <li>[improve][broker] Upgrade bookkeeper to 4.18.1 (<a href="https://redirect.github.com/apache/pulsar/pull/26574";>#26574</a>)</li> <li>[fix][sec] Upgrade Async HTTP Client to 3.0.14 and Netty Reactive Streams to 2.0.20 (<a href="https://redirect.github.com/apache/pulsar/pull/26764";>#26764</a>)</li> <li>[fix][sec] Upgrade at.yawk.lz4:lz4-java to 1.11.4 (<a href="https://redirect.github.com/apache/pulsar/pull/26758";>#26758</a>)</li> <li>[fix][sec] Upgrade zstd-jni to 1.5.7-20 (<a href="https://redirect.github.com/apache/pulsar/pull/26766";>#26766</a>)</li> <li>[fix][build] Upgrade Conscrypt to 2.6.3 (<a href="https://redirect.github.com/apache/pulsar/pull/26660";>#26660</a>)</li> <li>[fix][build] Upgrade LightProto to 0.8.2 (<a href="https://redirect.github.com/apache/pulsar/pull/26623";>#26623</a>)</li> <li>[improve][zk] Upgrade ZooKeeper to 3.9.6 (<a href="https://redirect.github.com/apache/pulsar/pull/26750";>#26750</a>)</li> <li>[improve][build] Upgrade Bouncy Castle libraries (<a href="https://redirect.github.com/apache/pulsar/pull/26753";>#26753</a>)</li> <li>[improve][build] Upgrade Caffeine to 3.3.0 (<a href="https://redirect.github.com/apache/pulsar/pull/26755";>#26755</a>)</li> <li>[improve][build] Upgrade Gradle to 9.8.0 and update plugins (<a href="https://redirect.github.com/apache/pulsar/pull/26752";>#26752</a>)</li> <li>[improve][build] Upgrade gRPC to 1.84.0 (<a href="https://redirect.github.com/apache/pulsar/pull/26762";>#26762</a>)</li> <li>[improve][build] Upgrade Guava to 33.7.1-jre (<a href="https://redirect.github.com/apache/pulsar/pull/26760";>#26760</a>)</li> <li>[improve][build] Upgrade Jackson to 2.21.7 (<a href="https://redirect.github.com/apache/pulsar/pull/26754";>#26754</a>)</li> <li>[improve][build] Upgrade OpenTelemetry libraries to 1.66.0 level (<a href="https://redirect.github.com/apache/pulsar/pull/26756";>#26756</a>)</li> <li>[improve][build] Upgrade Protobuf to 4.36.2 (<a href="https://redirect.github.com/apache/pulsar/pull/26757";>#26757</a>)</li> <li>[improve][build] Upgrade SnakeYAML to 2.7 (<a href="https://redirect.github.com/apache/pulsar/pull/26761";>#26761</a>)</li> <li>[improve][misc] Upgrade Jetty to 12.1.13 (<a href="https://redirect.github.com/apache/pulsar/pull/26738";>#26738</a>)</li> </ul> <h3>Broker</h3> <ul> <li>[fix][broker] Align entry filter policy checks for non-persistent topics (<a href="https://redirect.github.com/apache/pulsar/pull/26774";>#26774</a>)</li> <li>[fix][broker] Align partitioned topic truncate checks with non-partitioned topics (<a href="https://redirect.github.com/apache/pulsar/pull/26776";>#26776</a>)</li> <li>[fix][broker] Apply managedLedgerContinueCachingAddedEntriesAfterLastActiveCursorLeavesMillis to managed ledgers (<a href="https://redirect.github.com/apache/pulsar/pull/26785";>#26785</a>)</li> <li>[fix][broker] Apply subscription policies to namespace and topic subscription operations (<a href="https://redirect.github.com/apache/pulsar/pull/26767";>#26767</a>)</li> <li>[fix][broker] Apply the role logging anonymizer to topic authorization denial logs (<a href="https://redirect.github.com/apache/pulsar/pull/26642";>#26642</a>)</li> <li>[fix][broker] Avoid misleading ownership lock expiry logs during shutdown (<a href="https://redirect.github.com/apache/pulsar/pull/26633";>#26633</a>)</li> <li>[fix][broker] Bound classic Key_Shared dispatcher replay queue look-ahead (<a href="https://redirect.github.com/apache/pulsar/pull/26677";>#26677</a>)</li> <li>[fix][broker] Bound the local partition metadata retry when starting a geo-replicator (<a href="https://redirect.github.com/apache/pulsar/pull/26681";>#26681</a>)</li> <li>[fix][broker] Check the original principal of proxied HTTP requests with its own authentication data (<a href="https://redirect.github.com/apache/pulsar/pull/26748";>#26748</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/pulsar/commit/9ef1a62af60850cfae91c386e8d3bf84aa401a5c";><code>9ef1a62</code></a> [fix][ml] Materialize compressed ManagedCursorInfo before releasing the decom...</li> <li><a href="https://github.com/apache/pulsar/commit/e588a590cc8b0de4ba805750d5f1de9e6030fcb1";><code>e588a59</code></a> Release 5.0.1</li> <li><a href="https://github.com/apache/pulsar/commit/9fae4173978871edd029af409fb7b2a391afff05";><code>9fae417</code></a> [fix][ml] Fix races in managed ledger initialization timeout handling (<a href="https://redirect.github.com/apache/pulsar/issues/23470";>#23470</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/51f86813c9b02242f83c104db40c943354f3ec5a";><code>51f8681</code></a> [fix][broker] Manage in-flight bucket work during clear (<a href="https://redirect.github.com/apache/pulsar/issues/26401";>#26401</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/d8edc2bf8eb0882374a3d88833fa009871f8cfa7";><code>d8edc2b</code></a> [fix][broker] Don't continue loading a topic after its load has timed out (<a href="https://redirect.github.com/apache/pulsar/issues/2";>#2</a>...</li> <li><a href="https://github.com/apache/pulsar/commit/2854520709c47e994bf677383cf203f1809ee31f";><code>2854520</code></a> [fix][fn] Only load crypto_key_reader for python function when cryptoKeyReade...</li> <li><a href="https://github.com/apache/pulsar/commit/293680d710542aa2ad0a6d04783e2d91403d9092";><code>293680d</code></a> [fix][test] Fix flaky NegativeAcksTest.testNegativeAcksWithBackoff (<a href="https://redirect.github.com/apache/pulsar/issues/24342";>#24342</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/e1128ce4dd1bff9397eb6b2c54369282b85f2fae";><code>e1128ce</code></a> [feat][fn] Expose the Prometheus metrics registry to Go functions via Functio...</li> <li><a href="https://github.com/apache/pulsar/commit/b439c2de1147f0d241f970a58f000163274033e9";><code>b439c2d</code></a> [fix][broker] Reject replicated status for the compaction subscription (<a href="https://redirect.github.com/apache/pulsar/issues/27037";>#27037</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/4e2db01f933d4414fea3746f51b97364242dcc9c";><code>4e2db01</code></a> [improve][test] Add deduplication contract coverage across broker restart (<a href="https://redirect.github.com/apache/pulsar/issues/2";>#2</a>...</li> <li>Additional commits viewable in <a href="https://github.com/apache/pulsar/compare/v4.2.4...v5.0.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
