• build: 9.4.3 by @bluestreak01 in https://github.com/questdb/questdb/pull/7265
• build(deps): bump js-yaml from 4.1.0 to 4.2.0 in /compat/src/test/nodejs-pg by @dependabot[bot] in https://github.com/questdb/questdb/pull/7271
• build(deps): bump js-yaml from 4.1.0 to 4.2.0 in /compat/src/test/nodejs-postgres by @dependabot[bot] in https://github.com/questdb/questdb/pull/7272
• fix(core): regenerate _pm when restored data.parquet exceeds the committed size by @bluestreak01 in https://github.com/questdb/questdb/pull/7269
• perf(core): make wait_wal_table(), sleep() functions lightweight and not block IO threads by @ideoma in https://github.com/questdb/questdb/pull/7031
• fix(qwp-ws): fix flushAndGetSequence() returning a stale FSN after an empty flush by @adi1719 in https://github.com/questdb/questdb/pull/7257
• fix(core): prevent posting index out-of-memory during seal and rollback on skewed symbols by @nwoolmer in https://github.com/questdb/questdb/pull/7236
• chore(core): prevent a JVM crash when an async writer command races a writer close by @RaphDal in https://github.com/questdb/questdb/pull/7266
• perf(sql): speed up ORDER BY on varchar, UUIDs and wide multi-column keys by @kafka1991 in https://github.com/questdb/questdb/pull/7242
• perf(sql): reduce memory footprint of cached parallel aggregations and joins by @puzpuzpuz in https://github.com/questdb/questdb/pull/7267
• ci(build): auto-detect SNAPSHOT client and enable local-client profile in release builds by @bluestreak01 in https://github.com/questdb/questdb/pull/7274
• chore(build): migrate GitHub Actions workflows off the deprecated Node 20 runtime by @RaphDal in https://github.com/questdb/questdb/pull/7277
• chore(core): format code with IDEA 2026.1.3 by @RaphDal in https://github.com/questdb/questdb/pull/7281
• chore(core): fix wrong symbol values on replicas after a column type conversion - fuzz test fix by @glasstiger in https://github.com/questdb/questdb/pull/7179
• ci(build): route Maven builds through the self-hosted Reposilite cache by @sklarsa in https://github.com/questdb/questdb/pull/7286
• ci(build): retry Maven wagon transfers on cache connect failure by @sklarsa in https://github.com/questdb/questdb/pull/7287
• fix(sql): fix crash on incomplete expression after CASE ... END by @mtopolnik in https://github.com/questdb/questdb/pull/7290
• chore(core): allow ADD INDEX over a parquet partition where the column is absent by @RaphDal in https://github.com/questdb/questdb/pull/7291
• chore(core): add new ent config key to server.conf template by @glasstiger in https://github.com/questdb/questdb/pull/7270
• fix(core): fix table corruption when a range-replace commit adds partitions above the last one by @puzpuzpuz in https://github.com/questdb/questdb/pull/7289
• fix(sql): fix wrong SAMPLE BY first()/last() results when the time column is not selected by @ideoma in https://github.com/questdb/questdb/pull/7282
• feat(sql): add kurtosis and skewness aggregates by @brunocalza in https://github.com/questdb/questdb/pull/7221
• test(qwp): assert proper treatment of empty and NULL arrays on egress by @mtopolnik in https://github.com/questdb/questdb/pull/7276
• feat(core): add per-query memory limits by @puzpuzpuz in https://github.com/questdb/questdb/pull/7184
• fix(sql): add cursor self-consistency checks and fault injection to query fuzzer and harden query engine by @puzpuzpuz in https://github.com/questdb/questdb/pull/7217
• fix(core): fix out-of-order rows after a lag commit crosses a partition boundary by @brunocalza in https://github.com/questdb/questdb/pull/7285
• test(core): stop posting-index fuzz from mixing replace commits with Parquet by @bluestreak01 in https://github.com/questdb/questdb/pull/7299
• fix(sql): concurrent NPE in CoveringIndexRecordCursorFactory.getCursor (#7294) by @bluestreak01 in https://github.com/questdb/questdb/pull/7298
• chore(core): engine seams for hot in-place primary/replica role switch by @jovfer in https://github.com/questdb/questdb/pull/7261
• fix(sql): fix internal error when subtracting a literal from a timestamp by @puzpuzpuz in https://github.com/questdb/questdb/pull/7304
• fix(core): fix O3 lag commit recording maxTimestamp below the committed max across partitions by @bluestreak01 in https://github.com/questdb/questdb/pull/7297
• perf(core): speed up checkpoint/snapshot restore for tables with many parquet partitions by @bluestreak01 in https://github.com/questdb/questdb/pull/7255
• chore(core): stop truncating the _pm sidecar on a rolled-back partition update by @RaphDal in https://github.com/questdb/questdb/pull/7268
• perf(sql): evaluate runtime-constant subexpressions once per query instead of per row by @puzpuzpuz in https://github.com/questdb/questdb/pull/7280
• ci(build): bound cache connect timeout and retry connect failures by @sklarsa in https://github.com/questdb/questdb/pull/7311
• test(core): de-flake HTTP export file-descriptor leak checks by @RaphDal in https://github.com/questdb/questdb/pull/7292
• chore(ui): upgrade web console to 2.0.0 by @emrberk in https://github.com/questdb/questdb/pull/7317
• chore(core): fix native memory leak when a sharded parallel GROUP BY trips the per-query memory limit by @RaphDal in https://github.com/questdb/questdb/pull/7309
• fix(sql): fix wrong results from queries on renamed Parquet columns by @bluestreak01 in https://github.com/questdb/questdb/pull/7318
• fix(sql): honor query cancellation and timeouts in all query types by @bluestreak01 in https://github.com/questdb/questdb/pull/7250
• chore(qwp): exercise e2e test on the client changes by @bluestreak01 in https://github.com/questdb/questdb/pull/7307
• test(qwp): adapt facade E2E tests to the WebSocket-only client by @mtopolnik in https://github.com/questdb/questdb/pull/7314
• test(core): stop ServerMainForeignTableTest SAMPLE BY assertions flaking on the RSS check by @jovfer in https://github.com/questdb/questdb/pull/7323
• test(core): stabilize flaky QWP credit-flow and worker-pool CI tests by @puzpuzpuz in https://github.com/questdb/questdb/pull/7306
• fix(core): RSS pre-flight the covered-sidecar snapshot in incremental posting seal by @nwoolmer in https://github.com/questdb/questdb/pull/7308
• chore(core): prevent table suspension on out-of-order inserts into parquet partitions by @RaphDal in https://github.com/questdb/questdb/pull/7310
• fix(core): fix spurious table metadata reload failures by @kafka1991 in https://github.com/questdb/questdb/pull/7312
• chore(sql): keep the per-query memory tracker balanced across aggregate re-execution by @RaphDal in https://github.com/questdb/questdb/pull/7319
• chore(core): refresh materialized views correctly after a base-table truncate and on read-only nodes by @jovfer in https://github.com/questdb/questdb/pull/7315
• feat(wal): add WAL-apply suspension controls and ALTER TABLE REBASE WAL by @ideoma in https://github.com/questdb/questdb/pull/7239
• test(sql): extend ASOF/LT JOIN fuzz coverage to multi-column ON clauses by @jerrinot in https://github.com/questdb/questdb/pull/6638
• fix(core): retry mat view refresh on transient errors instead of invalidating by @bluestreak01 in https://github.com/questdb/questdb/pull/7275
• chore(core): fix file-descriptor leak when the server shuts down with a query parked by @RaphDal in https://github.com/questdb/questdb/pull/7324
• test(core): stop SampleByConfigTest flaking on the post-close RSS check by @RaphDal in https://github.com/questdb/questdb/pull/7325
• fix(sql): avoid intermediate overflow in corr() denominator by @jovfer in https://github.com/questdb/questdb/pull/7313
• fix(http): prevent HTTP context reuse crashes and tighten multipart upload parsing by @jerrinot in https://github.com/questdb/questdb/pull/7327
• fix(sql): fix view reads failing due to incomplete dependency tracking by @glasstiger in https://github.com/questdb/questdb/pull/7322
• fix(core): fix query cancellation being lost when it races query startup by @jovfer in https://github.com/questdb/questdb/pull/7329
• fix(core): fix POSTING-indexed tables suspending WAL apply after out-of-order writes by @RaphDal in https://github.com/questdb/questdb/pull/7332
• fix(core): make DataID publication thread-safe by @bluestreak01 in https://github.com/questdb/questdb/pull/7344
• fix(core): prevent posting index corruption when .pk stat fails during column rename by @bluestreak01 in https://github.com/questdb/questdb/pull/7347
• feat(qwp): add a connect timeout and tolerant client startup by @bluestreak01 in https://github.com/questdb/questdb/pull/7341
• fix(sql): fix crash joining or grouping on empty VARCHAR values by @sklarsa in https://github.com/questdb/questdb/pull/7346
• feat(core): support column type conversions with parquet partitions by @ideoma in https://github.com/questdb/questdb/pull/7024
• chore(core): improve Parquet interoperability with external readers and Iceberg tooling by @RaphDal in https://github.com/questdb/questdb/pull/7283
• feat(sql): parallel covered-index decode for aggregation and filter by @nwoolmer in https://github.com/questdb/questdb/pull/7284
• feat(sql): add SHOW CREATE DATABASE for schema-only dumps by @nwoolmer in https://github.com/questdb/questdb/pull/7232
• perf(sql): speed up filters that wrap the designated timestamp in a function by @kafka1991 in https://github.com/questdb/questdb/pull/7305
• chore(build): bump gosu to 1.19-go1.25.11 by @sklarsa in https://github.com/questdb/questdb/pull/7367
• fix(sql): fix LATEST ON returning the wrong row with an indexed key and residual filter by @nwoolmer in https://github.com/questdb/questdb/pull/7334
• test(qwp): speed up sender coercion-error tests by @RaphDal in https://github.com/questdb/questdb/pull/7364
• fix(qwp): fail fast on deterministic ingest rejections instead of retrying them by @kafka1991 in https://github.com/questdb/questdb/pull/7359
• fix(qwp): prevent stale egress plans from leaking to clients by @jerrinot in https://github.com/questdb/questdb/pull/7350
• chore(core): fix catalogue queries omitting tables after a concurrent metadata cache clear by @RaphDal in https://github.com/questdb/questdb/pull/7360
• feat(qwp): add per-query SYMBOL dict reset flag by @kafka1991 in https://github.com/questdb/questdb/pull/7321
• fix(sql): fix PIVOT and expression column names that embed double quotes by @glasstiger in https://github.com/questdb/questdb/pull/7353
• chore(core): fix socket leaks on shutdown when queries are parked or retrying by @RaphDal in https://github.com/questdb/questdb/pull/7368
• chore(core): resolve column files by writer index when converting a partition to Parquet by @RaphDal in https://github.com/questdb/questdb/pull/7363
• fix(core): fix POSTING index covering scans failing when queries migrate across worker threads by @nwoolmer in https://github.com/questdb/questdb/pull/7349
• chore(core): fix adding a covering index over parquet after a column type change by @kafka1991 in https://github.com/questdb/questdb/pull/7370
• fix(sql): clarify materialized view error when timestamp lacks a sampling interval by @Socialpranker in https://github.com/questdb/questdb/pull/7376
• fix(sql): fix cancel_query() spuriously cancelling the wrong query by @jerrinot in https://github.com/questdb/questdb/pull/7238
• test(core): stop query_activity churn test hanging and cascading on constrained CI by @kafka1991 in https://github.com/questdb/questdb/pull/7395
• fix(sql): fix dot_product returning wrong result for transposed arrays by @raphaelroshan in https://github.com/questdb/questdb/pull/7392
• test(core): stop fuzz tests spuriously failing when logging non-ASCII index values by @RaphDal in https://github.com/questdb/questdb/pull/7396
• fix(SQL): fix SAMPLE BY w to accept the week unit without a leading digit by @nabeel001 in https://github.com/questdb/questdb/pull/7391
• chore(build): bump gosu to 1.19-go1.25.12 by @questdb-maven-release-app[bot] in https://github.com/questdb/questdb/pull/7398
• ci(build): reduce Ubuntu package download failures by @bluestreak01 in https://github.com/questdb/questdb/pull/7405
• feat(sql): compare a numeric column with a scalar sub-query in predicates by @bluestreak01 in https://github.com/questdb/questdb/pull/7377
• test(core): fix seed-dependent crash in checkpoint fuzz test by @jovfer in https://github.com/questdb/questdb/pull/7381
• fix(http): return EXPLAIN plans as plain text by @emrberk in https://github.com/questdb/questdb/pull/7406
• fix(core): fix POSTING-indexed WAL table suspending after a partition squash by @ideoma in https://github.com/questdb/questdb/pull/7386
• fix(core): stop a query when its client disconnects by @kafka1991 in https://github.com/questdb/questdb/pull/7372
• ci(build): re-add docker image vulnerability scanning to release pipeline by @sklarsa in https://github.com/questdb/questdb/pull/7365
• fix(sql): fix NULL array handling, IPv4 aggregates, and parallel OOM handling by @puzpuzpuz in https://github.com/questdb/questdb/pull/7371
• chore(core): pluggable WAL event types and partition flag bit by @RaphDal in https://github.com/questdb/questdb/pull/6985
• chore(ui): upgrade web console to 2.0.1 by @emrberk in https://github.com/questdb/questdb/pull/7420
• chore(qwp): carry crash-safe SF cleanup and pool-capacity recovery by @bluestreak01 in https://github.com/questdb/questdb/pull/7387
• refactor(qwp): rename sf_max_bytes to sf_max_segment_bytes in e2e fuzz test by @mtopolnik in https://github.com/questdb/questdb/pull/7413
• fix(core): fix covering index reading NULL after converting a parquet partition back to native by @nwoolmer in https://github.com/questdb/questdb/pull/7415
• fix(qwp): fix duplicate writes and store-and-forward recovery during failover by @bluestreak01 in https://github.com/questdb/questdb/pull/7366
• fix(sql): prevent JIT STRING null checks from crashing the server by @jerrinot in https://github.com/questdb/questdb/pull/7454
• feat(sql): add live views by @ideoma in https://github.com/questdb/questdb/pull/7461
• feat(qwp): stop resending the full symbol dictionary on every message by @glasstiger in https://github.com/questdb/questdb/pull/7374
• feat(sql): fast-lag append for covering-indexed WAL block-apply by @nwoolmer in https://github.com/questdb/questdb/pull/7414
• chore(qwp): bump symbol dictionary limit to 2m by @ideoma in https://github.com/questdb/questdb/pull/7468

• @adi1719 made their first contribution in https://github.com/questdb/questdb/pull/7257
• @Socialpranker made their first contribution in https://github.com/questdb/questdb/pull/7376
• @raphaelroshan made their first contribution in https://github.com/questdb/questdb/pull/7392
• @nabeel001 made their first contribution in https://github.com/questdb/questdb/pull/7391
• @questdb-maven-release-app[bot] made their first contribution in https://github.com/questdb/questdb/pull/7398

Full Changelog: https://github.com/questdb/questdb/compare/9.4.3...10.0.0

Nacos 3.3.0-BETA is a feature iteration release for the Nacos 3.x series.

This release focuses on:

• Protocol-neutral Agent registration, management, and discovery.
• Agentic Resource Discovery for AI Registry resources.
• Dynamic plugin configuration and management.
• Distributed lock capabilities.
• Spring Boot 4 and Jackson 3 compatibility.

The main feature updates include:

• Agent lifecycle management, endpoint discovery, SDKs, Console support, and legacy A2A compatibility.
• Hybrid keyword and vector discovery for Skill, Prompt, and MCP resources.
• Runtime plugin configuration and AI resource visibility authorization.
• Phase 1 distributed reentrant and non-reentrant locks.

It also includes Skill workflow improvements, security hardening, compatibility fixes, performance optimizations, and dependency updates.

---

Detailed changes in this release:

• [#14466] Add a neutral JSON adapter with Jackson 2 and Jackson 3 runtime support.
• [#14804] Add protocol-neutral Agent registration, persistence, endpoint discovery, Java SDKs, Admin and Console APIs, Console management, and legacy A2A compatibility routing.
• [#15279] Add distributed reentrant and non-reentrant locks with watchdog renewal, FIFO waiting, gRPC notifications, Raft consistency, and a Java Lock SDK.
• [#15471] Support SkillSpector as an AI publish pipeline.
• [#15475] Add unified dynamic plugin configuration, lifecycle management, runtime updates, deterministic discovery, and Console configuration workflows.
• [#15476][#15604] Add plugin-owned visibility grant and revoke APIs and Console management for Skill and AgentSpec resources.
• [#15541] Add Agentic Resource Discovery with search, exploration, artifact retrieval, visibility filtering, persistent indexes, and hybrid keyword and vector retrieval.
• [#15640] Support Nacos server deployments on Linux RISC-V with RocksDB.

• [#12064] Support configuring the gRPC port offset through individual client properties.
• [#14932] Refactor the in-memory MCP cache to reduce read-path contention and improve index consistency.
• [#15315][#15561] Improve Skill upload precheck, conflict handling, and server-side ZIP validation.
• [#15322] Remove obsolete Config migration compatibility code and retain only the current Config storage model.
• [#15346] Manage the reserved latest label for AI resources on the server.
• [#15432][#15440][#15441] Remove reviewed unused Java code and preserve compatibility-facing contracts where required.
• [#15448] Improve English translations in Console UI Next.
• [#15486] Include the Skill owner in upload permission-denied messages.
• [#15606] Return a stable per-item result for every Skill batch upload candidate.

• [#12557] Add retry behavior when acquiring the Config dump write lock to prevent stale MD5 cache data.
• [#14981][#15468] Fix concurrent Config publish duplicate-key handling through the datasource dialect SPI, including PostgreSQL unique_violation.
• [#15410] Fix trailing separators when joining collections containing null elements.
• [#15415] Prevent malformed config-plugin property names from discarding valid plugin configuration.
• [#15420] Fix Skill ZIP uploads with invalid or unavailable version candidates.
• [#15425] Prevent out-of-range batch indexes from causing IndexOutOfBoundsException.
• [#15446] Fix page count calculation for empty and exactly divisible result sets.
• [#15447] Prevent NamingUtils.getServiceName from failing on a trailing service separator.
• [#15466] Correct @Since annotations for Skill upload APIs.
• [#15490] Fix Chinese text corruption in Skill Scanner pipeline reports on Windows.
• [#15494] Restore complete MCP tool advanced-template support in Console UI Next.
• [#15510] Reject explicitly supplied invalid Bearer tokens instead of silently falling back to anonymous access.
• [#15534] Generate deterministic, ASCII-safe physical Config keys for AI resources.
• [#15543] Restore case-sensitive collation for newly initialized MySQL schemas.
• [#15557] Fix server startup failures when plugin state snapshots are restored before unified plugin discovery.
• [#15603] Fix visibility query conversion when explicitly authorized resources are present.
• [#15618] Fix Skill upload version resolution to try lower-priority explicit versions before generating a version.
• [#15620] Allow AI resource versions to be resubmitted after completed or stale review results.
• [#15634] Fix HTTP and gRPC authorization metadata, custom resource parser precedence, AgentSpec authorization, and Prometheus security path matching.

• [#14944] Upgrade Spring Boot from 3.5.14 to 4.0.6.
• [#15584] Upgrade Maven Compiler Plugin from 3.5.1 to 3.15.0 for JDK 25 build compatibility.
• [#15645] Upgrade compatible Console UI Next dependencies and regenerate packaged frontend assets.

---

Nacos 3.3 removes legacy Config migration compatibility paths and changes how unsafe AI resource Config keys are mapped.

Affected users:

• Users upgrading from a version earlier than Nacos 3.0 whose Config data uses the legacy empty tenant for the default namespace.
• Users with legacy beta or tag gray-release data in config_info_beta or config_info_tag.
• Users of the nacos_config AI storage provider with historical non-ASCII or overlength resource identifiers.

Recommended upgrade path:

• Upgrade pre-3.0 deployments to an earlier Nacos 3.x version first.
• Migrate default-namespace data from the empty tenant to public.
• Migrate legacy beta and tag data to config_info_gray.
• Explicitly migrate affected AI resource Config coordinates to the new deterministic ASCII-safe mapping.
• Back up the database and verify the migration in a staging environment before upgrading to Nacos 3.3.0-BETA.

Users already running Nacos 3.x who do not have affected AI Config coordinates are not impacted by these migration removals.

---

Module	Java Required
Nacos-Server / Nacos-Console	Java 17
Nacos-Client	Java 8
Nacos-Maintainer-Client	Java 8

---

• S3

  • S3: fold large chunk lists into manifest chunks on the direct write path by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10383
  • S3: track manifest blob ownership through multipart completion by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10386
  • s3: stop listing prefixes whose objects are all delete-marked by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10419
  • s3: chunk uploads at the filer's maxMB by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10439
  • s3: require a bucket-policy action to write a bucket policy by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10444
  • s3: apply filer identity changes despite a static config file by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10392
  • s3: register the advertised ip with the master by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10482
  • s3: keep the list marker exclusive for versioned objects by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10496
  • s3: allow copying an object onto itself in a versioned bucket by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10497
  • s3: report a peer that went away as ClientDisconnected, not IncompleteBody by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10511
  • s3: carry storage class in the cached listing metadata by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10516
  • s3: register an identity's inline account instead of collapsing it into admin by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10548
  • s3: honor a bucket owner recorded as an identity by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10567
  • s3: honor the version history of a directory marker by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10571
  • s3: stop treating a directory marker as a versioned object by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10573
  • s3 lifecycle: bound the daily-replay pass so a quiet cluster stops wedging the job by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10578
  • s3: let a suspended-versioning multipart completion replace the null delete marker by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10585
  • s3: retire the suspended null marker only once the PUT has committed by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10589
  • s3: report the effective ownership when a bucket has none stored by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10591
  • s3: give a versioned metadata-only copy its own chunks by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10594
  • [s3] force filer apply s3 expiry metadata by @kmlebedev in https://github.com/seaweedfs/seaweedfs/pull/10469
  • chore(weed/s3api): prune dead code by @alrs in https://github.com/seaweedfs/seaweedfs/pull/10462

• IAM and STS

  • s3api: load document-style policies from the advanced IAM config by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10481
  • s3: list the buckets an attached IAM policy grants by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10458
  • s3: keep an admin's role session scoped to the role by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10520
  • s3: audit the assumed-role principal and the STS caller by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10519
  • iam: authorize IAM management actions as IAM actions by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10593

• Iceberg

  • iceberg maintenance: resolve table files from the recorded location by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10418
  • iceberg maintenance: record file counters on the snapshots it commits by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10420
  • s3api/iceberg: report the reason a table schema was rejected by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10473
  • iceberg: read manifest lists that omit the Avro format version by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10475
  • iceberg: let clients select their table bucket as the catalog warehouse by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10549
  • iceberg: withhold the S3 endpoint from credential-vending clients by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10570

• Filer

  • filer: conditional UpdateEntry with a chunk-set write condition by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10382
  • filer: stop an oversized metadata log flush from wedging the change feed by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10430
  • log_buffer: bound the flush queue in bytes, not in copies by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10433
  • filer: reject a proxyChunkId that isn't a well-formed fid by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10436
  • filer: fix credential handling on the proxyChunkId path by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10434
  • filer: drop a caller's jwt query param on a proxied read by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10440
  • filer: add a placement overlay seam for the write path by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10437
  • filer: let a nested path rule turn worm off by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10503
  • fix(filer): stop skipping recent unflushed events on metadata subscription gaps by @kisow in https://github.com/seaweedfs/seaweedfs/pull/10501
  • fix(redis2/redis3): support separate sentinel auth credentials by @TJDawson10 in https://github.com/seaweedfs/seaweedfs/pull/10412
  • filer: honor the documented TLS options in every redis store by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10425
  • filer: make the redis connection settings configurable by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10441
  • Bump Tarantool client library from 2.4.2 to 3.0.0 by @MaratKarimov in https://github.com/seaweedfs/seaweedfs/pull/10377

• Filer sync and replicate

  • filer sync: do not advance the sync offset past a failed event by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10424
  • filer.replicate: acknowledge notifications after the sink write, not on receipt by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10427

• Remote storage

  • azure: authenticate with Entra ID instead of a storage account key by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10456
  • azure: let the blob endpoint be configured by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10460
  • remote storage: actually delete objects when a directory is removed by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10531
  • s3 remote: honor s3.support_tagging in UpdateFileMetadata by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10532

• Volume

  • volume: reject needle blob writes to read-only volumes by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10435
  • volume: widen the gRPC admin gate and stop it drifting by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10443
  • volume: recover .idx rows overwritten by tiered deletes by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10474
  • fix(volume): persist the leveldb needle map watermark at batch boundaries by @SuperMohit in https://github.com/seaweedfs/seaweedfs/pull/10557
  • volume: skip directory fsync on Windows, report a failed makeupDiff by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10572
  • rust volume: mark-readonly notifies the live leader, not the static seed by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10461

• Erasure coding

  • EC decode: read shards with the encode-time block layout by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10385
  • volume: fix EC decode/reconstruct index locality under -dir.idx by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10442
  • volume: EC decode onto a clean peer via staged-new-volume adopt (Go+Rust) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10463
  • volume: skip a shard-holding disk when staging a decoded volume (Go+Rust) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10464
  • volume: scan for on-disk EC shards when staging a decoded volume (Go+Rust) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10465
  • ec.encode: count shards wherever they landed before deleting the source by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10483
  • ec.encode: name the shard ids an aborted deletion found by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10486
  • EC scrubbing: list shards for needles failing scrubs in the result output by @plisandro in https://github.com/seaweedfs/seaweedfs/pull/10510

• Master

  • master: count EC volumes in statistics used size by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10457
  • master: count only writable volumes as crowded when deciding growth by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10522
  • fix(master): bump seaweedfs/raft to v1.2.0 for the snapshot race by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10498

• Shell and placement

  • volume.fix.replication: add a well-placed replica before deleting a misplaced one by @CodeRusher in https://github.com/seaweedfs/seaweedfs/pull/10364
  • exclusive_locks: clear renew-running flag before dropping isLocked by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10413
  • shell: accept a context in the volume move helpers by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10415
  • Fix volume.merge corrupting every needle it copies by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10565
  • shell: add a reusable target picker for volume moves by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10579
  • placement: move the target picker out of the shell package by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10580
  • placement: let callers reject candidates placement cannot judge by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10581
  • shell: pick tier.move replica targets with the shared placement picker by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10582

• Mount

  • mount: version open file handles by filer log position by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10403
  • mount: report data sizes to df with -df.logical by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10459
  • mount: keep a sealed chunk alive until its own upload finishes by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10504
  • mount: drop the unused go-fuse fs package dependency by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10534
  • mount: keep the xattr flag constants off freebsd by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10552
  • mount: build the package on windows by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10535
  • mount: support mounting on Windows through WinFsp by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10536
  • mount: forward extended attributes on windows by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10554
  • mount: tell windows about changes made elsewhere by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10553
  • mount: report . and .. from windows directories by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10556
  • mount: mark windows files archived and ignore a zero timestamp by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10559

• WebDAV

  • webdav: answer PROPFIND child stats from the listing by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10492

• Client

  • wdclient: read the vid map cache link before the live map by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10505
  • wdclient: age vid map entries by generation instead of chaining snapshots by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10506
  • operation: re-assign chunk upload when replica volume is full by @timolow in https://github.com/seaweedfs/seaweedfs/pull/10588
  • consolidate the duplicated transient-error classifiers onto util.IsTransientError by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10429
  • chore(weed/worker): prune unused Registry by @alrs in https://github.com/seaweedfs/seaweedfs/pull/10431

• Admin

  • fix(admin): implement ApplyPluginConfigFromToml to propagate settings by @baracudaz in https://github.com/seaweedfs/seaweedfs/pull/10388

• Helm

  • helm: support fixed nodePort numbers on all-in-one, s3, sftp, and admin services by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10381
  • helm: generate the SFTP host key per install by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10390
  • Do not fail immediately when running the post bucket hook by @kallies in https://github.com/seaweedfs/seaweedfs/pull/10471
  • helm: label the hook Job pods so selectors can reach them by @kreativmonkey in https://github.com/seaweedfs/seaweedfs/pull/10478
  • helm: optional NetworkPolicy per component by @kreativmonkey in https://github.com/seaweedfs/seaweedfs/pull/10479
  • helm: pass extraEnvironmentVars and security.toml to the bucket-creation hook by @kreativmonkey in https://github.com/seaweedfs/seaweedfs/pull/10477

• Telemetry

  • telemetry: tidy server module after prometheus bumps by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10380
  • telemetry: fix empty over-time charts on the built-in dashboard by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10396
  • telemetry: key per-cluster value gauges by cluster_id only by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10397
  • ci: fix Deploy Telemetry Server build (nested telemetry/server module) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10398
  • telemetry: persist server state across restarts by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10399
  • telemetry: per-cluster usage history on the built-in dashboard by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10400
  • telemetry: validate reports on the collect endpoint by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10401
  • telemetry: confirmed-cluster stats (2+ distinct days) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10402
  • telemetry: per-cluster size over time on the dashboard by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10417
  • telemetry: fix total disk usage over time by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10476
  • telemetry: report anonymous cluster stats by default by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10488
  • telemetry: build the over-time charts from confirmed clusters by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10489
  • telemetry: stack volume servers per cluster, drop the total disk usage chart by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10550
  • telemetry: sync the server module with the client_golang bump by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10551

• Tests

  • test(s3): aim collection force-delete at the master the suite actually runs by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10404
  • plugin: fix flaky scheduler lock test by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10432
  • test: stop comparing two JWTs minted a second apart by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10495
  • test: pin that a .vif replication outranks the superblock by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10499
  • test: cover delete idempotency on versioned object-locked buckets by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10512
  • test: pin that an unusable version id is refused, never resolved by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10513
  • test: pin verb parity on lock-arbitration keys through acquire and release by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10514
  • test: compare ListObjects and ListObjectVersions over the same namespace by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10515
  • test: cover listings spanning a run of retracted keys by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10517
  • s3: cover three untested STS paths by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10521
  • test: random needles always carry at least one byte by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10523
  • test: wait for async write-budget release after pipeline shutdown by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10530
  • test: wait for every queued flush before deleting the log files by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10546
  • Stop the filer test helpers from pinning gigabytes of log buffers by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10560
  • test: cover delete-on-close on the windows mount by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10561
  • test(s3): give the copying suite room for a collection per bucket by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10590

• CI

  • Add codespell support with configuration and typo fixes by @yarikoptic in https://github.com/seaweedfs/seaweedfs/pull/10393
  • ci: read branch names from env instead of interpolating them into the shell by @kobihikri in https://github.com/seaweedfs/seaweedfs/pull/10470
  • ci: fix FUSE mounts against the new runner image by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10484
  • ci: harden the fusermount3 repair by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10485
  • ci: run WinFsp's conformance suite against the windows mount by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10555
  • ci: run each conformance test on its own by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10564
  • ci: key the Rust cargo cache on the toolchain that built it by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10568
  • ci: cross-compile each target in its own job by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10575
  • ci: deal volume server tests across shards instead of bucketing by letter by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/10576

• @yarikoptic made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10393
• @TJDawson10 made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10412
• @kobihikri made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10470
• @kreativmonkey made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10478
• @SuperMohit made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10557
• @timolow made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10588

Full Changelog: https://github.com/seaweedfs/seaweedfs/compare/4.40...4.41

https://fluentbit.io/announcements/v5.1.0/

• workflows: bump docker/login-action from 4.3.0 to 4.4.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12055
• build: bump to v5.1 (dev) by @edsiper in https://github.com/fluent/fluent-bit/pull/12066
• skills: Extract skills from memory by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12068
• in_opentelemetry: return not found for invalid endpoint by @edsiper in https://github.com/fluent/fluent-bit/pull/12064
• workflows: bump actions/stale from 10.3.0 to 10.4.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12081
• workflows: bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12074
• tls: openssl: don't recycle a connection after peer close_notify by @ku524 in https://github.com/fluent/fluent-bit/pull/12079
• in_winevtlog: Enrich EventData key-value map if enabled by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12082
• lib: cmetrics: upgrade to v2.2.0 by @edsiper in https://github.com/fluent/fluent-bit/pull/12083
• thread_storage: Fix incorrectly to detect C TLS existence by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12067
• in_forward: fix stale byte accounting when multiple frames share a buffer by @zshuang0316 in https://github.com/fluent/fluent-bit/pull/12049
• lib: cfl: upgrade to v1.0.0 by @edsiper in https://github.com/fluent/fluent-bit/pull/12084
• opentelemetry: reduce protobuf log allocation churn by @edsiper in https://github.com/fluent/fluent-bit/pull/12087
• in_gpu_metrics: Handle NVIDIA GPU metrics via NVML by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11720
• log_event_decoder: time: plug 2038 problem on timestamp by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11549
• in_etw: Implement event tracing for windows input plugin by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12072
• tests: runtime: plugins: Enable to build and run runtime testcases on windows by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12092
• lib: cmetrics: upgrade to v2.2.1 by @edsiper in https://github.com/fluent/fluent-bit/pull/12088
• in_opentelemetry: reduce protobuf decode allocation churn by @edsiper in https://github.com/fluent/fluent-bit/pull/12089
• in_node_exporter_metrics: Add a capability to adjust log level w/ error paths by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12057
• downstream: re-architect workers support by @edsiper in https://github.com/fluent/fluent-bit/pull/11775
• github: workflows: Enable runtime tests only for x64 Windows architecure by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12098
• http_server: plug unsupported shared port issue on windows by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12101
• workflows: bump softprops/action-gh-release from 3.0.1 to 3.0.2 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12099
• tests: runtime: Handle byte order mark for non-ASCII environment of Windows correctly by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12100
• network: Plug an unintialized member by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12102
• tests: runtime: out_tcp: Make more rigid accumutated assertions by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12104
• workflows: bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12108
• github: workflows: Enable unit testing on 5.0 branch by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12122
• mp: avoid unbounded recursion in chunk cobj record iteration by @zshuang0316 in https://github.com/fluent/fluent-bit/pull/12126
• tests: link test binaries against shared library by @edsiper in https://github.com/fluent/fluent-bit/pull/12128
• out_s3: add format=parquet,arrow with selectable page compression codecs by @rituparnakhaund in https://github.com/fluent/fluent-bit/pull/11885
• in_opentelemetry: optimize batched protobuf ingestion by @edsiper in https://github.com/fluent/fluent-bit/pull/12171
• out_syslog: tls: io: Handle dtls protocol on out syslog by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11728
• alias: handle input, output, filter, and processor plugin aliases by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11656
• config: engine: Implement adaptive flushing by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11498
• out_gcs: Implement Google Cloud Storage(gcs) plugin by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11792
• in_node_exporter_metrics: implement additional metrics (filesystem, EXT_* metrics, powersupplyclass) on node exporter metrics by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11765
• out_file: Support RA placeholders for dynamic creation of files by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11840
• tls: openssl: Reload and watch certificates mainly on Linux by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11950
• tests: integration: Adopt to trace for memory issues for macOS and optimize executions by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12134
• downstream: add coroutine-based event dispatch by @edsiper in https://github.com/fluent/fluent-bit/pull/12146
• in_podman_metrics: add per-container disk I/O metrics by @stondo in https://github.com/fluent/fluent-bit/pull/11986
• filter_kubernetes: Plug SEGV occurence on enabling Use_Pod_Association by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12153
• in_process_exporter_metrics: Fix the reported RSS ram by @anagno in https://github.com/fluent/fluent-bit/pull/12139
• config: fips: bin: Initial implementation to enable FIPS compliance by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12024
• in_lib: Adjust consuming mechanism to improve throughput by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12130
• tests: runtime: isolate Loki mock server configuration by @edsiper in https://github.com/fluent/fluent-bit/pull/12132
• in_node_exporter_metrics: fix netstat file reads by @edsiper in https://github.com/fluent/fluent-bit/pull/12173
• build: plugins: Generate plugin defs on separated build directories by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12109
• in_process_exporter_metrics: Expire metrics for dead processes by @piwai in https://github.com/fluent/fluent-bit/pull/11760
• tests: runtime: out_http: out_chronicle: fix output runtime test races by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12154
• in_forward: batch Forward mode worker ingress by @edsiper in https://github.com/fluent/fluent-bit/pull/12163
• in_tail: add Windows UTF-8 path encoding mode by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12020
• opentelemetry: validate JSON container value types by @edsiper in https://github.com/fluent/fluent-bit/pull/12131
• input: input_chunk: Handle flow with events metrics per window by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11698
• config_format: yaml: handle configuration metadata on yaml conf by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11690
• parser: Handle too long time string on parsing by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11682
• workflows: bump reviewdog/action-actionlint from 1.72.0 to 1.73.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12136
• workflows: bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.3 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12135
• workflows: bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12124
• workflows: bump actions/setup-python from 6.3.0 to 7.0.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12117
• out_kafka: Implement resolving registry of avro schema by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11953
• in_kubernetes_events: bound watch connection lifetime by @edsiper in https://github.com/fluent/fluent-bit/pull/12105
• engine: fail startup when HTTP server cannot start by @edsiper in https://github.com/fluent/fluent-bit/pull/12176
• out_s3: fix prefix match in log_key extraction by @Vaibhav-C-S in https://github.com/fluent/fluent-bit/pull/12008
• packaging: add packages index generator and release CI by @lecaros in https://github.com/fluent/fluent-bit/pull/12150
• out_syslog: tls feature glitches for selecting protocols by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12196
• build: run daemon-reload and restart service in deb postinst by @guoard in https://github.com/fluent/fluent-bit/pull/12195
• out_es: sds: Implement es upstream with sds view by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11647
• out_file: add logs rotation feature by @SagiROosto in https://github.com/fluent/fluent-bit/pull/11352
• in_node_exporter_metrics: add timex linux collector by @ngillen in https://github.com/fluent/fluent-bit/pull/11718
• tls: openssl: preserve syscall error details by @edsiper in https://github.com/fluent/fluent-bit/pull/12178
• avro: out_kakfa: handle empty map even if avro schema defines map type by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12181
• dockerignore: Add an entry not to collide type definition on package creations by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12199
• filter_expect: validate all records in batches by @edsiper in https://github.com/fluent/fluent-bit/pull/12188
• in_emitter: reject self-referential senders to prevent recursive pause SIGSEGV by @Nahid-NHB in https://github.com/fluent/fluent-bit/pull/12190
• metrics: extend support for Tag metrics by @edsiper in https://github.com/fluent/fluent-bit/pull/11887
• tests: integration: cover kubernetes pod association isolation by @edsiper in https://github.com/fluent/fluent-bit/pull/12208
• input: add pause/resume callbacks by @edsiper in https://github.com/fluent/fluent-bit/pull/10616
• tests: runtime: out_file_rotation: Wait with flexible intervals by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12211
• workflows: bump docker/login-action from 4.4.0 to 4.6.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12198
• workflows: bump reviewdog/action-hadolint from 1.51.0 to 1.53.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12197
• in_exec: unblock threaded shutdown by @edsiper in https://github.com/fluent/fluent-bit/pull/12221
• oauth2: fix request body ownership on allocation failure by @edsiper in https://github.com/fluent/fluent-bit/pull/12213
• lib: monkey: upgrade to v1.8.9 by @edsiper in https://github.com/fluent/fluent-bit/pull/12212
• github: workflows: Update release workflow for 5.1 development cycle by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12217
• tests: runtime: Stabilize out_loki tests to catch EV_THREAD events by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12218
• tests: internal: Plug an uninitialized coro stack by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12214
• tests: runtime: Use long json payloads to trigger rotataion easily by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12215
• dockerfile: windows: Create an image of windows nano server ltsc2025 by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12219
• in_calyptia_fleet: enhance relative paths handling by @edsiper in https://github.com/fluent/fluent-bit/pull/11962
• packaging: pass the elements to jq by pipes instead of command line by @lecaros in https://github.com/fluent/fluent-bit/pull/12226
• log: mem: signv4: Plug possible memory errors by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12234
• tls: support HTTPS proxy by @antoniomrfranco in https://github.com/fluent/fluent-bit/pull/11778
• in_kubernetes_events: fix unsafe MessagePack field parsing by @edsiper in https://github.com/fluent/fluent-bit/pull/12222
• tests: runtime: Adopt the test config path for Windows and others by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12227
• http_server: accept empty HTTP header values by @kimonus in https://github.com/fluent/fluent-bit/pull/12223

• @ku524 made their first contribution in https://github.com/fluent/fluent-bit/pull/12079
• @rituparnakhaund made their first contribution in https://github.com/fluent/fluent-bit/pull/11885
• @stondo made their first contribution in https://github.com/fluent/fluent-bit/pull/11986
• @anagno made their first contribution in https://github.com/fluent/fluent-bit/pull/12139
• @guoard made their first contribution in https://github.com/fluent/fluent-bit/pull/12195
• @SagiROosto made their first contribution in https://github.com/fluent/fluent-bit/pull/11352
• @ngillen made their first contribution in https://github.com/fluent/fluent-bit/pull/11718
• @Nahid-NHB made their first contribution in https://github.com/fluent/fluent-bit/pull/12190
• @kimonus made their first contribution in https://github.com/fluent/fluent-bit/pull/12223

Full Changelog: https://github.com/fluent/fluent-bit/compare/v5.0.9...v5.1.0

• [58717685a1] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #63949
• [44b940ee8c] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
• [c1e4f7365e] - (SEMVER-MINOR) lib: add perfetto support (Chengzhong Wu) #64565
• [11c2f9c642] - (SEMVER-MINOR) module: implement Symbol.dispose in ModuleHooks (Remco Haszing) #63928
• [a646319f61] - (SEMVER-MINOR) test_runner: add support for --test-coverage-include-all (avivkeller) #64830

• [a2d3f891d3] - async_hooks: use validateBoolean for trackPromises (Soul Lee) #64731
• [d7266cdd99] - benchmark: fix calibrate-n option handling (Luan Muniz) #64146
• [2e64293e3f] - buffer: use Clamp conversion in Blob slice (Donghoon Kang) #64739
• [5fda0958bd] - buffer: validate copyArrayBuffer offsets against buffer length (Ilia Alshanetsky) #63904
• [5298db40f9] - build: run perfetto build and test on GHA (Chengzhong Wu) #64721
• [e3eac7cef9] - build: fix v8_use_perfetto source scraping (Chengzhong Wu) #64721
• [ab5f076d7f] - build: bump rustc requirement to >=1.86 (Renegade334) #64543
• [df608e061f] - (SEMVER-MINOR) build: perfetto-sdk (Chengzhong Wu) #64565
• [74928adc46] - build,tools: fix shared library cross-compile (Kirill Saied) #63963
• [58717685a1] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) #63949
• [58d13b6f3d] - crypto: preserve OpenSSL errors from KDF failures (Filip Skokan) #64776
• [478a719cb5] - crypto: fix Argon2 bypassing FIPS mode (Filip Skokan) #64776
• [44b940ee8c] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
• [fde85237c7] - crypto: clarify missing cipher error (Filip Skokan) #64852
• [c604d8846d] - crypto: reuse X509 issuer result (Filip Skokan) #64852
• [c68c7d0112] - crypto: validate key generation options (Filip Skokan) #64852
• [c36bb1d017] - crypto: fix Argon2 validation errors (Filip Skokan) #64852
• [f61408bb27] - crypto: handle XOF output allocation failure (Filip Skokan) #64851
• [2b4053d046] - crypto: initialize KeyObjectData mutex eagerly (Filip Skokan) #64851
• [4b7b2adf44] - crypto: handle DH operation failures (Filip Skokan) #64851
• [12170c3753] - crypto: use user-facing error for output encoding changes (Archkon) #64692
• [474f06d550] - debugger: preserve overlapping CDP request state (Trivikram Kamat) #64467
• [718cbe9497] - deps: upgrade npm to 11.19.0 (npm team) #64883
• [657c6154b3] - deps: update ngtcp2 to 1.25.0 (Node.js GitHub Bot) #64944
• [75a1fbeff9] - deps: update nghttp3 to 1.18.0 (Node.js GitHub Bot) #64943
• [07d7cb7cd8] - deps: update minimatch to 10.2.6 (Node.js GitHub Bot) #64945
• [f7d56359f1] - deps: update simdjson to 4.6.6 (Node.js GitHub Bot) #64942
• [8b06457cfb] - deps: update acorn to 8.18.0 (Node.js GitHub Bot) #64941
• [5919d01525] - deps: update googletest to 1b6f64d659944658a4c685b7bd9f04c1c3b8a39b (Node.js GitHub Bot) #64940
• [4a87ad6cff] - deps: update nghttp2 to 1.70.0 (Node.js GitHub Bot) #64939
• [c96d76a7c8] - deps: update zlib to 1.3.2.1-motley-42c2f19 (Node.js GitHub Bot) #64744
• [2b59984c0f] - deps: V8: backport 5177b10891e6 (avivkeller) #64631
• [b839af91da] - deps: update ada to 4.0.0 (Node.js GitHub Bot) #64790
• [70dedef942] - deps: update sqlite to 3.53.4 (Node.js GitHub Bot) #64745
• [7bc4c171f5] - deps: update Rust crates for V8 14.6.202.34-node.26 (Renegade334) #64543
• [308c6b2ac3] - deps: V8: backport 7d9b7e03141d (Manish Goregaokar) #64543
• [8eeae28e88] - deps: V8: backport c4d06ba586f3 (liujiahui) #63731
• [bbd6fc58c4] - diagnostics_channel: grow native channel storage (Stephen Belanger) #64497
• [ce8b292955] - doc: fix grammar and punctuation in dgram documentation (Kamal Rawal) #64957
• [1a413a60cf] - doc: fix grammar and editorial issues in addons documentation (Kamal Rawal) #64952
• [63fbd59e64] - doc: formalize fn/name as part of TestOptions API (Christopher Hiller) #64946
• [b263b0bca1] - doc: remove references to ca/crl as per-context QuicSession options (René) #64769
• [f37de14b27] - doc: fix typo in maintaining-dependencies.md (greenhead) #64896
• [16cb77cdc8] - doc: add RafaelGSS as last security release stewards (Rafael Gonzaga) #64843
• [335c28cd17] - doc: fix typos in documentation (greenhead) #64900
• [d4bed8ca39] - doc: fix missing references in doc type map (Tim Perry) #64872
• [e71d09d5f1] - doc: improve TestContext hook descriptions (Kamal Rawal) #64899
• [7089bd9ae4] - doc: add missing float32/float64 FFI type names (Soul Lee) #64874
• [8d3ae0830e] - doc: document stream.isDestroyed() (YspritanHyzygy) #64789
• [a757e62af7] - doc: add contributing detail for git Signed-off-by trailer (Mike McCready) #64862
• [3e840f43ed] - doc: mark config-file as release candidate (Marco Ippolito) #64516
• [70cd5df810] - doc: fix duplicated word in test snapshot docs (Kamal Rawal) #64837
• [d5f36c7adc] - doc: remove obsolete cctest node.gyp instructions (Soul Lee) #64814
• [a0bf29ea09] - doc: report proper return type on url.format (Brian Muenzenmeyer) #64806
• [e655e42085] - doc: use ffi.suffix for library paths in examples (Junsoo Ha) #64805
• [e0f0830dbc] - doc: document --permission-audit audit mode behavior (Adrián Estrada) #64791
• [efbede6de0] - doc: clarify tlsSocket.authorized on resumption (soreavis) #64584
• [db95655c4a] - doc: stabilize --disable-warning (Jean Michelet) #64742
• [a8367200be] - doc: add MDN links for explicit resource management in fs (lluisemper) #59557
• [1c09165c2e] - doc: mention constructor check in deepStrictEqual (Sumit Kumar Das) #62010
• [29709324e0] - doc: update technical priorities (Jacob Smith) #64505
• [522a28e648] - doc: deprecation add more codemod (Augustin Mauroy) #63175
• [c40aaa6539] - doc: run license-builder (Node.js GitHub Bot) #63918
• [428e9bc50f] - ffi: fix crash in refCallback and unrefCallback (Trivikram Kamat) #64881
• [33912103e7] - ffi: reject fast calls after library close (Trivikram Kamat) #64860
• [b348ed7f92] - ffi: validate fast 32-bit integer argument ranges (Trivikram Kamat) #64691
• [48f4cfb480] - ffi: fix optimized buffer conversions (Trivikram Kamat) #64639
• [109ffcd4f3] - ffi: preserve link register in ppc64 trampoline (Trivikram Kamat) #64792
• [aa3f168b31] - ffi: preserve strings during reentrant calls (Trivikram Kamat) #64551
• [ca60942f38] - ffi: preserve uint8 semantics for bool fast calls (Trivikram Kamat) #64527
• [0fb1d2bd65] - ffi: validate fast integer argument ranges (Trivikram Kamat) #64614
• [b250b40b30] - fs: key glob matcher cache by platform (Archkon) #64571
• [e26891ec6a] - http: fix writableFinished and 'finish' after write errors (Tim Perry) #64847
• [dfc192fdfb] - http: avoid aborting IncomingMessage signal on normal close (Archkon) #64392
• [6794441c85] - http: guard invalid timeout values in checkConnections (Efe Karasakal) #64506
• [6879aa4aa8] - http: propagate highWaterMark to ClientRequest OutgoingMessage (trivenay) #64653
• [72448a82f4] - http2: avoid copying the options in respond() (Matteo Collina) #64265
• [f6692da576] - http2: avoid per-write closures in kWriteGeneric (Matteo Collina) #64265
• [3ed37153f8] - http2: reduce per-request allocations (Matteo Collina) #64265
• [bce92debba] - Revert "http2: avoid per-write closures in kWriteGeneric" (Antoine du Hamel) #64663
• [b5d5dd74a1] - Revert "http2: avoid copying the options in respond()" (Antoine du Hamel) #64663
• [19b9c14d60] - lib: fix AbortSignal.any() observed-composite leak (Paul Bouchon) #64481
• [d3cada57c2] - lib: fix typo in comment in _http_client.js (agape1225) #64729
• [c1e4f7365e] - (SEMVER-MINOR) lib: add perfetto support (Chengzhong Wu) #64565
• [6c2157522d] - loader: enforce path normalization before lookup (Maël Nison) #63917
• [31522c41a7] - meta: bump actions/stale from 10.3.0 to 11.0.0 (dependabot[bot]) #64935
• [88c8b8ef54] - meta: bump github/codeql-action/analyze from 4.36.2 to 4.37.3 (dependabot[bot]) #64934
• [9dcd759a84] - meta: bump github/codeql-action/autobuild from 4.36.2 to 4.37.3 (dependabot[bot]) #64933
• [82ca02db3c] - meta: bump actions/setup-python from 6.3.0 to 7.0.0 (dependabot[bot]) #64932
• [848e2287f2] - meta: bump github/codeql-action/init from 4.36.2 to 4.37.3 (dependabot[bot]) #64931
• [ae8ad3b17b] - meta: bump Mozilla-Actions/sccache-action from 0.0.10 to 0.0.11 (dependabot[bot]) #64930
• [0b359cfa4c] - meta: bump cachix/install-nix-action from 31.10.6 to 31.11.0 (dependabot[bot]) #64929
• [3b4f980f4c] - meta: bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.3 (dependabot[bot]) #64927
• [d7ee9e9ea7] - meta: bump step-security/harden-runner from 2.19.4 to 2.20.0 (dependabot[bot]) #64926
• [7e80bbaaa9] - meta: bump ossf/scorecard-action from 2.4.3 to 2.4.4 (dependabot[bot]) #64925
• [915cabbfcf] - meta: remove node_crates .gitignore (René) #64779
• [8e03c54347] - meta: add @nodejs/url as codeowner for node_url_pattern.* (Efe Karasakal) #64737
• [11c2f9c642] - (SEMVER-MINOR) module: implement Symbol.dispose in ModuleHooks (Remco Haszing) #63928
• [fffd8a76d0] - net: support TCP handle transfer on Windows (Matteo Collina) #64460
• [fe9e0dbdc2] - net: support AF_UNIX paths in net.BoundSocket (Guy Bedford) #64399
• [eb61b7ee1e] - permission: add unique warning codes (David Evans) #64414
• [999a928822] - permission: support v8.setHeapSnapshotNearHeapLimit (Ilyas Shabi) #64808
• [7de3d095b6] - quic: fix stop sending behaviour & callback (Tim Perry) #64710
• [6289398bb2] - quic: fix coverage comment typo (Jungwon Sohn) #64486
• [01510dc759] - quic: fix segfault after fragmented client hello (Tim Perry) #64720
• [dcc348af97] - quic: serialize stream reset code as string (한만욱) #64577
• [c25b8e3331] - readline: reduce createInterface overhead (Matteo Collina) #64585
• [14e802d1cd] - sqlite: invalidate sessions when closing database (Trivikram Kamat) #64783
• [279547b7da] - sqlite: check database state before calling SQLite (Trivikram Kamat) #64812
• [bb86521a42] - sqlite: fix crash when a session outlives its database (Mohamed Sayed) #63797
• [870f4997e7] - sqlite: fix use-after-free in Exec() and ApplyChangeset() (Matteo Collina) #64535
• [a8ec5a9df7] - src: fix perfetto build on GetTraceFilePath (Chengzhong Wu) #64721
• [6cd643acaa] - src: implement MemoryRetainer protocol for ByteSource (Filip Skokan) #64660
• [8725e56928] - src: fix crash when writing odd-length hex string via Writev (RajeshKumar11) #63658
• [e018f9a4a1] - (SEMVER-MINOR) src: add perfetto trace agent (Chengzhong Wu) #64565
• [0611d443ab] - (SEMVER-MINOR) src: rename legacy trace event headers (Chengzhong Wu) #64565
• [2897cc1d93] - (SEMVER-MINOR) src: fix trace macro compatibility (Chengzhong Wu) #64565
• [d4d7172e10] - src: avoid using ToLocalChecked in crypto_hash (James M Snell) #64668
• [53b7d48b47] - src: fix libuv assertion on windows (liuxingbaoyu) #61999
• [69d10ed021] - src,test: disable trace events tests when perfetto is enabled (Chengzhong Wu) #64721
• [1b0597b4ef] - stream: cut per-chunk allocations in pipeTo (Matteo Collina) #64890
• [2632d606bb] - stream: preserve push signal abort reason (Trivikram Kamat) #64798
• [d5358a75bc] - stream: skip zero-byte broadcast writes (Trivikram Kamat) #64772
• [796c896fb4] - stream: honor AbortSignal in Writer.end() (Trivikram Kamat) #64727
• [ff12b8e22e] - stream: use validateString for consumer encoding (Jungwon Sohn) #64754
• [cfad2efb06] - stream: use the ring buffer for pending BYOB pull-into descriptors (Matteo Collina) #64818
• [fe06bf56dc] - stream: fix uncatchable error closing half-open Duplex.toWeb() writable (Mohamed Sayed) #64161
• [f2919dbb83] - test: unflake debugger and REPL tests (Matteo Collina) #64718
• [a1c29174e8] - test: ensure assertions are reached on all tests (Antoine du Hamel) #64716
• [b9e596f8e5] - test: reuse ffi.suffix instead of reimplementing it (Seongeun Lee) #64840
• [c816918e14] - test: remove test-repl-user-error-handler from flaky (avivkeller) #64631
• [9d2f10ec54] - test: update WPT for url to 4832db4761 (Node.js GitHub Bot) #64829
• [75b80d0b7b] - test: update WPT for url to b63305b743 (Node.js GitHub Bot) #64790
• [9a139b3c86] - test: cover worker throwing primitive values (varshitha) #64365
• [796acc8920] - test: mark test-repl-user-error-handler as flaky (Aviv Keller) #64612
• [a646319f61] - (SEMVER-MINOR) test_runner: add support for --test-coverage-include-all (avivkeller) #64830
• [4368303e01] - test_runner: wait for filtered suite build (semimikoh) #64208
• [70d11241a3] - test_runner: convert to uint during deserialization (Aviv Keller) #64706
• [cafe7bffcc] - tls: fix SNICallback certificate selection (Matteo Collina) #64700
• [9ee05ec40f] - tools: bump the eslint group in /tools/eslint with 4 updates (dependabot[bot]) #64928
• [5f4b859932] - tools: bump brace-expansion from 5.0.7 to 5.0.9 in /tools/eslint (dependabot[bot]) #64904
• [b5ced907b3] - tools: use 'readonly' for EventSource global (Honey Tyagi) #64787
• [fd4460e34e] - typings: add heap_utils internalBinding types (Donghoon Kang) #64816
• [3bc0ee0492] - typings: remove isDataView from types binding (Archkon) #64738
• [236d7ca965] - url: create URLPattern result properties in WebIDL order (Archkon) #64733
• [3def577ab4] - v8: report minor mark-sweep in GCProfiler (Archkon) #64688
• [5293abff73] - vfs: speed up recursive readdir test setup (Trivikram Kamat) #64813
• [4345185496] - vfs: make lchown update symlink metadata (Trivikram Kamat) #64573
• [b6ab546de5] - wasm: register missing SetURL function (Archkon) #64679
• [f322870bd1] - zlib: validate pledgedSrcSize as a safe integer (Archkon) #64604
• [44042c20d4] - zlib: accept ArrayBuffer dictionary in Zstd (Ryuhei Shima) #64599