Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 28, 2026

Bumps github.com/nats-io/nats-server/v2 from 2.12.3 to 2.12.4.

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.12.4

Changelog

Refer to the 2.12 Upgrade Guide for backwards compatibility notes with 2.11.x.

Go Version

Dependencies

  • github.com/google/go-tpm v0.9.8 (#7696)
  • github.com/nats-io/nats.go v1.48.0 (#7696)
  • github.com/klauspost/compress v1.18.3 (#7736)
  • golang.org/x/crypto v0.47.0 (#7736)
  • golang.org/x/sys v0.40.0 (#7736)

Added

Monitoring

  • Added tls_cert_not_after to the varz monitoring endpoint for showing when TLS certificates are due to expire (#7709)

Improved

JetStream

  • Creating consumer file stores no longer contends on the stream lock, improving consumer create performance on heavily loaded streams (#7700)
  • Recalculating num pending with updated filter subjects no longer gathers and sorts the subject filter list twice (#7772)
  • Switching to interest-based retention will now remove no-interest messages from the head of the stream (#7766)

Fixed

General

  • The config parser now correctly detects and errors on self-referencing environment variables (#7737)
  • Internal functions for handling headers should no longer corrupt message bodies if appended (#7752)

JetStream

  • Raft single node elections now transition into leader state correctly (#7642)
  • R1 streams will no longer incorrectly drift last sequence when exceeding limits (#7658)
  • Deleted streams are no longer wrongfully revived if stalled on an upper-layer catchup (#7668)
  • A panic that could happen when receiving a shutdown signal while JetStream is still starting up has been fixed (#7683)
  • JetStream usage stats now correctly reflect purged whole blocks when optimising large purges (#7685)
  • Recovering JetStream encryption keys now happens independently of the stream index recovery, fixing some cases where the key could be reset unexpectedly if the index is rebuilt (#7678)
  • Non-replicated file-based consumers now detect corrupted state on disk and are deleted automatically (#7691)
  • A panic that could occur when a compact and a hash check run concurrently on a store has been fixed (#7697)
  • Raft no longer allows a repeat vote for the same term after a stepdown or leadership transfer (#7698)
  • Replicated consumers are no longer incorrectly deleted if they become leader just as JetStream is about to shut down (#7699)

... (truncated)

Commits
  • 34894c1 Release v2.12.4
  • 4077af1 Cherry-picks for 2.12.4 (#7775)
  • ae9b06e [IMPROVED] Remove no interest messages from head of stream
  • acbb5fd [FIXED] Many concurrent checkInterestState goroutines
  • e2dacf3 [FIXED] Interest stream desync after consumer filter update
  • bd9298d [IMPROVED] Simplify recalculate pending with updated filter subject(s)
  • 5d93f80 Release v2.12.4-RC.6
  • 2b72612 Revert "Perform _writeFullState under read lock only"
  • aa094cd Release v2.12.4-RC.5
  • 190c6e6 Cherry-picks for 2.12.4-RC.5 (#7767)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.12.3 to 2.12.4.
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Commits](nats-io/nats-server@v2.12.3...v2.12.4)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go labels Jan 28, 2026
@github-actions
Copy link
Contributor

Assigning reviewers:

R: @jrmccluskey for label go.

Note: If you would like to opt out of this review, comment assign to next reviewer.

Available commands:

  • stop reviewer notifications - opt out of the automated review tooling
  • remind me after tests pass - tag the comment author after tests pass
  • waiting on author - shift the attention set back to the author (any comment or push by the author will return the attention set to the reviewers)

The PR bot will only process comments in the main thread (not review comments).

@jrmccluskey jrmccluskey merged commit 928ad7e into master Jan 28, 2026
6 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/sdks/github.com/nats-io/nats-server/v2-2.12.4 branch January 28, 2026 15:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Next Action: Reviewers

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant