Skip to content

chore: bump github.com/nats-io/nats-server/v2 from 2.14.0 to 2.14.1#397

Merged
retr0h merged 1 commit into
mainfrom
dependabot/go_modules/github.com/nats-io/nats-server/v2-2.14.1
May 21, 2026
Merged

chore: bump github.com/nats-io/nats-server/v2 from 2.14.0 to 2.14.1#397
retr0h merged 1 commit into
mainfrom
dependabot/go_modules/github.com/nats-io/nats-server/v2-2.14.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 21, 2026

Bumps github.com/nats-io/nats-server/v2 from 2.14.0 to 2.14.1.

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.14.1

Changelog

Refer to the 2.14 Upgrade Guide for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.

Go Version

Dependencies

  • github.com/klauspost/compress v1.18.6 (#8124)
  • golang.org/x/crypto v0.51.0 (#8124)
  • golang.org/x/sys v0.44.0 (#8124)

Added

General

  • New metrics in_client_msgs, in_client_bytes, out_client_msgs and out_client_bytes are now available via the /varz monitoring endpoint for tracking data to/from normal clients only (#7851)

Improved

General

  • Client TLS certificates without subject DNs but with DNS subject alternate names are now permitted (#8100)
  • The log level of TLS handshake timeout or non-TLS record errors have been demoted to debug level to reduce noise (#8096)

JetStream

  • Num pending is now only calculated on consumer leaders, avoiding unnecessary CPU usage on followers (#8172)
  • Snapshot and catchup loops no longer leak timers (#8186, thanks to @​SebTardif)
  • Stream and consumer assignment errors are now surfaced (#8208)
  • Intersection of sublists and subject trees can now be cancelled early, avoiding high CPU usage in some pathological cases (#8209)

Fixed

General

  • Cluster route compression now obeys the cluster max_pings_out option if configured (#8093)
  • The internal send loop no longer mutates caller headers, which could corrupt buffers (#8097)
  • Removing headers no longer fails to remove later headers if the matching prefix also appeared in an earlier header value (#8103)
  • The sublist now correctly maintains negative results in the cache when calculating number of interested subjects (#8119)
  • Server shutdown requests are now idempotent, preventing concurrency issues when shutting down in embedded contexts (#8163)
  • TLS listeners now work correctly with the PROXY protocol where enabled (#8130)
  • Reduced lock contention that could be created between leafnodes and clients (#8139, #8159)
  • Fixed a panic that could happen when an error occurs when walking JWT directory resolver folders (#8173, thanks to @​SebTardif)
  • In-process connections will no longer unexpectedly revert to TLS required with async INFO (#8205)

Leafnodes

... (truncated)

Commits
  • cb557cd Release v2.14.1
  • 9182ee9 Cherry-picks for 2.14.1 (#8219)
  • 128e855 Add a benchmark for WriteTermVote
  • 6bb9af2 Allow cancellation of IntersectGSL, optimise skip block check
  • 899bf88 [IMPROVED] Clear stale sa/ca.err after success
  • a1e81c0 [IMPROVED] Surface assignment errors in stream/consumer log messages
  • 2477ebc [IMPROVED] Surface assignment errors in stream/consumer health checks
  • b7d533e [IMPROVED] Consumer's deleteNotActive compares against object-local assignment
  • e667787 [FIXED] Async INFO flipped tls_required for in-process clients
  • f56faad Release v2.14.1-RC.2
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.14.0 to 2.14.1.
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md)
- [Commits](nats-io/nats-server@v2.14.0...v2.14.1)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go labels May 21, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Thank you for contributing to this project! 😊🕹️

@retr0h retr0h merged commit c9641bc into main May 21, 2026
9 checks passed
@retr0h retr0h deleted the dependabot/go_modules/github.com/nats-io/nats-server/v2-2.14.1 branch May 21, 2026 19:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant