Bump org.apache.pulsar:pulsar-bom from 3.3.1 to 4.0.1 in /modules/pulsar

[dependabot]

Bumps org.apache.pulsar:pulsar-bom from 3.3.1 to 4.0.1.

Release notes

Sourced from org.apache.pulsar:pulsar-bom's releases.

v4.0.1

2024-12-02

Library updates

• [feat][meta] Bump oxia java version from 0.4.5 to 0.4.7 (#23471)
• [feat][misc] Upgrade oxia version to 0.4.9 (#23607)
• [fix][sec] Replace bcprov-jdk15on dependency with bcprov-jdk18-on (#23532)
• [fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 (#23581)
• [fix][sec] Upgrade to Netty 4.1.115.Final to address CVE-2024-47535 (#23596)
• [improve][monitor] Upgrade OTel to 1.41.0 (#23484)
• [improve] Upgrade OpenTelemetry library to 1.44.1 version (#23656)
• [improve] Upgrade oxia-java to 0.4.10 and fix closing of OxiaMetadataStore (#23653)

Broker

• [feat][broker] Implement allowBrokerOperationAsync in PulsarAuthorizationProvider to avoid exception thrown (#23663)
• [fix][broker] Broker is failing to create non-durable sub if topic is fenced (#23579)
• [fix][broker] Fix Broker migration NPE while broker tls url not configured (#23534)
• [fix][broker] Fix currently client retries until operation timeout if the topic does not exist (#23530)
• [fix][broker] Fix failed TokenAuthenticatedProducerConsumerTest (#23602)
• [fix][broker] Fix ownership loss (#23515)
• [fix][broker] Fix print cluster migration state response (#23535)
• [fix][broker] Fix race-condition causing repeated delete topic (#23522)
• [fix][broker] Increase readBuffer size for bookkeeper.DLOutputStream (#23548)
• [fix][broker] Key_Shared subscription: Reject consumers with incompatible policy (#23449)
• [fix][broker] Revert "[improve][client] Add log when can't add message to the container (#23657)
• [fix][broker] fix logging with correct error message while loading the topic (#23544)
• [fix][broker] fix null lookup result when brokers are starting (#23642)
• [fix][broker] support missing tenant level fine-granted permissions (#23660)
• [fix][broker]: support missing broker level fine-granted permissions (#23637)
• [improve][broker] Decouple pulsar_storage_backlog_age_seconds metric with backlogQuota check (#23619)
• [improve][broker] Exclude system topics from namespace level publish and dispatch rate limiting (#23589)
• [improve][broker] Make cluster metadata teardown command support metadata config path (#23520)
• [improve][broker] PIP-392: Add configuration to enable consistent hashing to select active consumer for partitioned topic (#23584)
• [improve][broker] Reduce memory occupation of InMemoryRedeliveryTracker. (#23640)
• [improve][broker] Reduce memory occupation of the delayed message queue (#23611)
• [improve][broker] Skip unloading when bundle throughput is zero (ExtensibleLoadManagerImpl only) (#23626)
• [improve][broker] Support cleanup replication cluster and allowed cluster when cluster metadata teardown (#23561)
• [improve][broker] re-elect the channel owner if no channel owner is found (#23516)
• [improve][broker] replace HashMap with inner implementation ConcurrentLongLongPairHashMap in Negative Ack Tracker. (#23582)

Client

• [fix][admin] Fix lookup get a null result if uses proxy (#23556)
• [fix][client] Fix ConsumerStats.getRateMsgsReceived javadoc (#21618)
• [fix][client] Fix DLQ producer name conflicts when there are same name consumers (#23577)
• [fix][client] Fix Reader.hasMessageAvailable return wrong value after seeking by timestamp with startMessageIdInclusive (#23502)
• [fix][client] Fix deadlock of NegativeAcksTracker (#23651)
• [fix][client] Fix producer/consumer stop to reconnect or Pub/Sub due to IO thread race-condition (#23499)

... (truncated)

Commits

• 3ea527b [fix][broker] support missing tenant level fine-granted permissions (#23660)
• d136476 [fix][broker] Revert "[improve][client] Add log when can't add message to the...
• f448703 [improve][broker] Reduce memory occupation of InMemoryRedeliveryTracker. (#23...
• 0d638f4 [feat][broker] Implement allowBrokerOperationAsync in PulsarAuthorizationProv...
• 938447f [fix][broker]: support missing broker level fine-granted permissions (#23637)
• d848cd6 [improve][client] Enhance error handling for non-exist subscription in consum...
• 7ffc717 [fix][client] Fix race-condition causing doReconsumeLater to hang when creati...
• bd93277 [improve][client] Reduce unshaded dependencies and shading warnings in shaded...
• f869c8b [improve] Upgrade OpenTelemetry library to 1.44.1 version (#23656)
• 1203869 [improve] [pip] PIP-373: Add a topic's system prop that indicates whether use...
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.