Skip to content

chore(deps): Bump pulsar-version from 4.1.3 to 4.2.0#22397

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/pulsar-version-4.2.0
Open

chore(deps): Bump pulsar-version from 4.1.3 to 4.2.0#22397
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/pulsar-version-4.2.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 2, 2026 •
edited
Loading

Bumps pulsar-version from 4.1.3 to 4.2.0.
Updates org.apache.pulsar:pulsar-client from 4.1.3 to 4.2.0

Release notes

Sourced from org.apache.pulsar:pulsar-client's releases.

v4.2.0

2026-04-01

Approved PIPs

Library updates

  • [improve][broker] Upgrade bookkeeper to 4.17.3 (#25166)
  • [improve][ml] Upgrade Oxia client to 0.7.0 (#24824)
  • [fix][sec] Added Exclusions for tomcat-embed-core and derby and override mina-core to remediate CVEs (#24949)
  • [fix][sec] Bump at.yawk.lz4:lz4-java from 1.9.0 to 1.10.1 in /pulsar-common (#25045)
  • [fix][sec] Bump github.com/dvsekhvalnov/jose2go from 1.6.0 to 1.7.0 in /pulsar-function-go (#24987)
  • [fix][sec] Bump google.golang.org/grpc from 1.60.0 to 1.79.3 in /pulsar-function-go (#25353)
  • [fix][sec] Bump io.vertx:vertx-web from 4.5.10 to 4.5.22 (#24889)
  • [fix][sec] Bump org.apache.solr:solr-core from 9.8.0 to 9.10.1 in /pulsar-io/solr (#25175)
  • [fix][sec] Bump org.apache.zookeeper:zookeeper from 3.9.4 to 3.9.5 (#25303)
  • [fix][sec] Eliminate commons-collections dependency (#25024)
  • [fix][sec] Exclude org.lz4:lz4-java and standardize on at.yawk.lz4-java to remediate CVE-2025-12183 and CVE-2025-66566 (#25198)
  • [fix][sec] Override commons-beanutils and commons-configuration2 to remediate CVEs (#24936)
  • [fix][sec] Override kafka-clients in kinesis-kpl-shaded to remediate CVE-2024-31141 and CVE-2025-27817 (#24935)
  • [fix][sec] Override msgpack-core to 0.9.11 to address CVE-2026-21452 (#25233)
  • [fix][sec] Override nimbus-jose-jwt to remediate CVE-2023-52428 and CVE-2025-53864 (#24937)
  • [fix][sec] Update Hbase version to 2.6.3-hadoop3 and exclude Avro from hbase-client to remediate CVEs (#24953)
  • [fix][sec] Upgrade aircompressor to 2.0.3 to resolve CVE-2025-67721 (#25256)
  • [fix][sec] Upgrade BouncyCastle FIPS to 2.0.10 to remediate CVE-2025-8916 (#24923)
  • [fix][sec] Upgrade hadoop3 version from 3.4.0 to 3.4.1 (#24950)
  • [fix][sec] Upgrade Jackson version to 2.18.6 (#25264)
  • [fix][sec] Upgrade Jetty to 9.4.58.v20250814 to address CVE-2025-5115 (#24897)
  • [fix][sec] Upgrade jose4j to 0.9.6 to address CVE-2024-29371 (#25095)
  • [fix][sec] Upgrade log4j to 2.25.3 to address CVE-2025-68161 (#25102)
  • [fix][sec] Upgrade Netty to 4.1.127.Final to address CVEs (#24717)
  • [fix][sec] Upgrade Netty to 4.1.130.Final (#25078)
  • [fix][sec] Upgrade OpenSearch to 2.19.4 to remediate CVE-2025-9624 (#25206)
  • [fix][sec] Upgrade Python protobuf version to 6.33.5 to address CVE-2026-0994 (#25250)
  • [fix][sec] Upgrade Spring to 6.2.12 to remediate CVE-2025-22233 and CVE-2025-41249 (#24903)
  • [fix][sec] Upgrade vertx to address CVE-2026-1002 (#25152)
  • [fix][build] Fix Eclipse/VSCode support after Jetty 12 upgrade (#25169)

... (truncated)

Commits
  • de34788 Release 4.2.0
  • 19ef1fc [improve][offload] Bump hadoop to 3.4.3 and hbase to 2.6.4 (#25396)
  • 0163ce8 [cleanup] Convert 12 test classes to SharedPulsarBaseTest (#25392)
  • 08d89a2 [improve][broker] PIP-464: Strict Avro schema validation for SchemaType.JSON ...
  • 78281fd [improve][pip] PIP-464: Deprecate legacy Jackson JsonSchema format for Schema...
  • 7e5839c [cleanup] Convert 30 test classes to SharedPulsarBaseTest (#25381)
  • 3bc834f [fix][client] Fix stale Healthy state in SameAuthParamsLookupAutoClusterFailo...
  • ce3429c [fix][test] Fix flaky OneWayReplicatorUsingGlobalZKTest.cleanup (#25389)
  • ba851d3 [feat][bookkeeper] add certs refresh (#25370)
  • 953d092 [fix][test] Fix flaky PersistentStickyKeyDispatcherMultipleConsumersClassicTe...
  • Additional commits viewable in compare view

Updates org.apache.pulsar:pulsar-client-admin from 4.1.3 to 4.2.0

Release notes

Sourced from org.apache.pulsar:pulsar-client-admin's releases.

v4.2.0

2026-04-01

Approved PIPs

Library updates

  • [improve][broker] Upgrade bookkeeper to 4.17.3 (#25166)
  • [improve][ml] Upgrade Oxia client to 0.7.0 (#24824)
  • [fix][sec] Added Exclusions for tomcat-embed-core and derby and override mina-core to remediate CVEs (#24949)
  • [fix][sec] Bump at.yawk.lz4:lz4-java from 1.9.0 to 1.10.1 in /pulsar-common (#25045)
  • [fix][sec] Bump github.com/dvsekhvalnov/jose2go from 1.6.0 to 1.7.0 in /pulsar-function-go (#24987)
  • [fix][sec] Bump google.golang.org/grpc from 1.60.0 to 1.79.3 in /pulsar-function-go (#25353)
  • [fix][sec] Bump io.vertx:vertx-web from 4.5.10 to 4.5.22 (#24889)
  • [fix][sec] Bump org.apache.solr:solr-core from 9.8.0 to 9.10.1 in /pulsar-io/solr (#25175)
  • [fix][sec] Bump org.apache.zookeeper:zookeeper from 3.9.4 to 3.9.5 (#25303)
  • [fix][sec] Eliminate commons-collections dependency (#25024)
  • [fix][sec] Exclude org.lz4:lz4-java and standardize on at.yawk.lz4-java to remediate CVE-2025-12183 and CVE-2025-66566 (#25198)
  • [fix][sec] Override commons-beanutils and commons-configuration2 to remediate CVEs (#24936)
  • [fix][sec] Override kafka-clients in kinesis-kpl-shaded to remediate CVE-2024-31141 and CVE-2025-27817 (#24935)
  • [fix][sec] Override msgpack-core to 0.9.11 to address CVE-2026-21452 (#25233)
  • [fix][sec] Override nimbus-jose-jwt to remediate CVE-2023-52428 and CVE-2025-53864 (#24937)
  • [fix][sec] Update Hbase version to 2.6.3-hadoop3 and exclude Avro from hbase-client to remediate CVEs (#24953)
  • [fix][sec] Upgrade aircompressor to 2.0.3 to resolve CVE-2025-67721 (#25256)
  • [fix][sec] Upgrade BouncyCastle FIPS to 2.0.10 to remediate CVE-2025-8916 (#24923)
  • [fix][sec] Upgrade hadoop3 version from 3.4.0 to 3.4.1 (#24950)
  • [fix][sec] Upgrade Jackson version to 2.18.6 (#25264)
  • [fix][sec] Upgrade Jetty to 9.4.58.v20250814 to address CVE-2025-5115 (#24897)
  • [fix][sec] Upgrade jose4j to 0.9.6 to address CVE-2024-29371 (#25095)
  • [fix][sec] Upgrade log4j to 2.25.3 to address CVE-2025-68161 (#25102)
  • [fix][sec] Upgrade Netty to 4.1.127.Final to address CVEs (#24717)
  • [fix][sec] Upgrade Netty to 4.1.130.Final (#25078)
  • [fix][sec] Upgrade OpenSearch to 2.19.4 to remediate CVE-2025-9624 (#25206)
  • [fix][sec] Upgrade Python protobuf version to 6.33.5 to address CVE-2026-0994 (#25250)
  • [fix][sec] Upgrade Spring to 6.2.12 to remediate CVE-2025-22233 and CVE-2025-41249 (#24903)
  • [fix][sec] Upgrade vertx to address CVE-2026-1002 (#25152)
  • [fix][build] Fix Eclipse/VSCode support after Jetty 12 upgrade (#25169)

... (truncated)

Commits
  • de34788 Release 4.2.0
  • 19ef1fc [improve][offload] Bump hadoop to 3.4.3 and hbase to 2.6.4 (#25396)
  • 0163ce8 [cleanup] Convert 12 test classes to SharedPulsarBaseTest (#25392)
  • 08d89a2 [improve][broker] PIP-464: Strict Avro schema validation for SchemaType.JSON ...
  • 78281fd [improve][pip] PIP-464: Deprecate legacy Jackson JsonSchema format for Schema...
  • 7e5839c [cleanup] Convert 30 test classes to SharedPulsarBaseTest (#25381)
  • 3bc834f [fix][client] Fix stale Healthy state in SameAuthParamsLookupAutoClusterFailo...
  • ce3429c [fix][test] Fix flaky OneWayReplicatorUsingGlobalZKTest.cleanup (#25389)
  • ba851d3 [feat][bookkeeper] add certs refresh (#25370)
  • 953d092 [fix][test] Fix flaky PersistentStickyKeyDispatcherMultipleConsumersClassicTe...
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 2, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 2, 2026

🌟 Thank you for your contribution to the Apache Camel project! 🌟
🤖 CI automation will test this PR automatically.

🐫 Apache Camel Committers, please review the following items:

  • First-time contributors require MANUAL approval for the GitHub Actions to run
  • You can use the command /component-test (camel-)component-name1 (camel-)component-name2.. to request a test from the test bot although they are normally detected and executed by CI.
  • You can label PRs using build-all, build-dependents, skip-tests and test-dependents to fine-tune the checks executed by this PR.
  • Build and test logs are available in the summary page. Only Apache Camel committers have access to the summary.

⚠️ Be careful when sharing logs. Review their contents before sharing them publicly.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 2, 2026 •
edited
Loading

🧪 CI tested the following changed modules:

  • parent

✅ POM dependency changes: targeted tests included

Changed properties: pulsar-version

Modules affected by dependency changes (1)
  • :camel-pulsar
All tested modules (2 modules)
  • Camel :: Parent
  • Camel :: Pulsar

⚙️ View full build and test results

@apupier
Copy link
Copy Markdown
Contributor

apupier commented Apr 2, 2026

/component-test pulsar

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 2, 2026

❌ /component-test pulsar tests failed. Please check the logs.

apupier
apupier requested changes Apr 2, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@apupier apupier left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

severla tests are failing with invalid topic name exception:

[ERROR] org.apache.camel.component.pulsar.integration.PulsarConsumerInIT.testAMessageToClusterIsConsumed -- Time elapsed: 0.018 s <<< ERROR!
org.apache.camel.RuntimeCamelException: org.apache.pulsar.client.api.PulsarClientException$InvalidTopicNameException: Invalid topic name: 'persistent://public/default/camel-topic/PulsarConsumerInIT'

This was referenced Apr 9, 2026
Closed
Merged
@gnodet
Copy link
Copy Markdown
Contributor

gnodet commented Apr 9, 2026

@dependabot recreate

@dependabot dependabot bot force-pushed the dependabot/maven/pulsar-version-4.2.0 branch from 9863740 to ba533f5 Compare April 9, 2026 15:15
@davsclaus
Copy link
Copy Markdown
Contributor

davsclaus commented Apr 10, 2026

@dependabot rebase

@dependabot
chore(deps): Bump pulsar-version from 4.1.3 to 4.2.0
cb56908 
Bumps `pulsar-version` from 4.1.3 to 4.2.0.

Updates `org.apache.pulsar:pulsar-client` from 4.1.3 to 4.2.0
- [Release notes](https://github.com/apache/pulsar/releases)
- [Commits](apache/pulsar@v4.1.3...v4.2.0)

Updates `org.apache.pulsar:pulsar-client-admin` from 4.1.3 to 4.2.0
- [Release notes](https://github.com/apache/pulsar/releases)
- [Commits](apache/pulsar@v4.1.3...v4.2.0)

---
updated-dependencies:
- dependency-name: org.apache.pulsar:pulsar-client
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.pulsar:pulsar-client-admin
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/pulsar-version-4.2.0 branch from ba533f5 to cb56908 Compare April 10, 2026 09:36
@davsclaus
Copy link
Copy Markdown
Contributor

davsclaus commented Apr 10, 2026

The pulsar CI jobs are hanging, 2h running ...

@davsclaus
Copy link
Copy Markdown
Contributor

davsclaus commented Apr 10, 2026

@gnodet is the scalpel stuff hanging ...
https://github.com/apache/camel/actions/runs/24236587744/job/70760575272?pr=22397

The last log says

Running Scalpel POM analysis...
Running Scalpel change detection...

@davsclaus
Copy link
Copy Markdown
Contributor

davsclaus commented Apr 10, 2026

"java.lang.IllegalArgumentException: V1 topic names (with cluster component) are no longer supported. Please use the V2 format: '://tenant/namespace/topic'. Got: persistent://public/default/camel-topic/PulsarCustomMessageReceiptIT"

@davsclaus
Copy link
Copy Markdown
Contributor

davsclaus commented Apr 10, 2026

try changing those topic names to not use slash,

-    private static final String TOPIC_URI = "persistent://public/default/camel-topic/PulsarConsumerInIT";
+    private static final String TOPIC_URI = "persistent://public/default/PulsarConsumerInIT";

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@apupier apupier apupier requested changes

Assignees

No one assigned

Labels

core-build-and-dependencies dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@apupier @gnodet @davsclaus