dependabot[bot] opened a new pull request, #19762: URL: https://github.com/apache/pinot/pull/19762
Bumps [org.apache.pulsar:pulsar-bom](https://github.com/apache/pulsar) from 4.0.13 to 5.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/pulsar/releases";>org.apache.pulsar:pulsar-bom's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <h4>2026-10-05</h4> <h3>Milestone release notes</h3> <p>The 5.0.0 release also includes the changes from these milestone releases:</p> <ul> <li><a href="https://github.com/apache/pulsar/releases/tag/v5.0.0-M1";>Pulsar 5.0.0-M1</a></li> <li><a href="https://github.com/apache/pulsar/releases/tag/v5.0.0-M2";>Pulsar 5.0.0-M2</a></li> </ul> <h3>Approved PIPs</h3> <ul> <li>[improve][pip] PIP-441: Add Broker-Level Metrics for Skipped Non-Recoverable Data (<a href="https://redirect.github.com/apache/pulsar/pull/24716";>#24716</a>)</li> <li>[improve][pip] PIP-494: Scalable Topics Client Specification — authoritative reference and change process (<a href="https://redirect.github.com/apache/pulsar/pull/26447";>#26447</a>)</li> <li>[improve][pip] PIP-496: Pulsar Functions and IO support for the V5 client and scalable topics (<a href="https://redirect.github.com/apache/pulsar/pull/26698";>#26698</a>)</li> </ul> <h3>Library updates</h3> <ul> <li>[improve][broker] Upgrade bookkeeper to 4.18.1 (<a href="https://redirect.github.com/apache/pulsar/pull/26574";>#26574</a>)</li> <li>[fix][sec] Upgrade Async HTTP Client to 3.0.14 and Netty Reactive Streams to 2.0.20 (<a href="https://redirect.github.com/apache/pulsar/pull/26764";>#26764</a>)</li> <li>[fix][sec] Upgrade at.yawk.lz4:lz4-java to 1.11.4 (<a href="https://redirect.github.com/apache/pulsar/pull/26758";>#26758</a>)</li> <li>[fix][sec] Upgrade zstd-jni to 1.5.7-20 (<a href="https://redirect.github.com/apache/pulsar/pull/26766";>#26766</a>)</li> <li>[fix][build] Upgrade Conscrypt to 2.6.3 (<a href="https://redirect.github.com/apache/pulsar/pull/26660";>#26660</a>)</li> <li>[fix][build] Upgrade LightProto to 0.8.2 (<a href="https://redirect.github.com/apache/pulsar/pull/26623";>#26623</a>)</li> <li>[improve][zk] Upgrade ZooKeeper to 3.9.6 (<a href="https://redirect.github.com/apache/pulsar/pull/26750";>#26750</a>)</li> <li>[improve][build] Upgrade Bouncy Castle libraries (<a href="https://redirect.github.com/apache/pulsar/pull/26753";>#26753</a>)</li> <li>[improve][build] Upgrade Caffeine to 3.3.0 (<a href="https://redirect.github.com/apache/pulsar/pull/26755";>#26755</a>)</li> <li>[improve][build] Upgrade Gradle to 9.8.0 and update plugins (<a href="https://redirect.github.com/apache/pulsar/pull/26752";>#26752</a>)</li> <li>[improve][build] Upgrade gRPC to 1.84.0 (<a href="https://redirect.github.com/apache/pulsar/pull/26762";>#26762</a>)</li> <li>[improve][build] Upgrade Guava to 33.7.1-jre (<a href="https://redirect.github.com/apache/pulsar/pull/26760";>#26760</a>)</li> <li>[improve][build] Upgrade Jackson to 2.21.7 (<a href="https://redirect.github.com/apache/pulsar/pull/26754";>#26754</a>)</li> <li>[improve][build] Upgrade OpenTelemetry libraries to 1.66.0 level (<a href="https://redirect.github.com/apache/pulsar/pull/26756";>#26756</a>)</li> <li>[improve][build] Upgrade Protobuf to 4.36.2 (<a href="https://redirect.github.com/apache/pulsar/pull/26757";>#26757</a>)</li> <li>[improve][build] Upgrade SnakeYAML to 2.7 (<a href="https://redirect.github.com/apache/pulsar/pull/26761";>#26761</a>)</li> <li>[improve][misc] Upgrade Jetty to 12.1.13 (<a href="https://redirect.github.com/apache/pulsar/pull/26738";>#26738</a>)</li> </ul> <h3>Broker</h3> <ul> <li>[fix][broker] Align entry filter policy checks for non-persistent topics (<a href="https://redirect.github.com/apache/pulsar/pull/26774";>#26774</a>)</li> <li>[fix][broker] Align partitioned topic truncate checks with non-partitioned topics (<a href="https://redirect.github.com/apache/pulsar/pull/26776";>#26776</a>)</li> <li>[fix][broker] Apply managedLedgerContinueCachingAddedEntriesAfterLastActiveCursorLeavesMillis to managed ledgers (<a href="https://redirect.github.com/apache/pulsar/pull/26785";>#26785</a>)</li> <li>[fix][broker] Apply subscription policies to namespace and topic subscription operations (<a href="https://redirect.github.com/apache/pulsar/pull/26767";>#26767</a>)</li> <li>[fix][broker] Apply the role logging anonymizer to topic authorization denial logs (<a href="https://redirect.github.com/apache/pulsar/pull/26642";>#26642</a>)</li> <li>[fix][broker] Avoid misleading ownership lock expiry logs during shutdown (<a href="https://redirect.github.com/apache/pulsar/pull/26633";>#26633</a>)</li> <li>[fix][broker] Bound classic Key_Shared dispatcher replay queue look-ahead (<a href="https://redirect.github.com/apache/pulsar/pull/26677";>#26677</a>)</li> <li>[fix][broker] Bound the local partition metadata retry when starting a geo-replicator (<a href="https://redirect.github.com/apache/pulsar/pull/26681";>#26681</a>)</li> <li>[fix][broker] Check the original principal of proxied HTTP requests with its own authentication data (<a href="https://redirect.github.com/apache/pulsar/pull/26748";>#26748</a>)</li> <li>[fix][broker] Check topic permissions for binary GetSchema and GetOrCreateSchema (<a href="https://redirect.github.com/apache/pulsar/pull/26643";>#26643</a>)</li> <li>[fix][broker] Check topic permissions for partitions and subscriptions added to a transaction (<a href="https://redirect.github.com/apache/pulsar/pull/26644";>#26644</a>)</li> <li>[fix][broker] Decode topic name in the scalable topic migrate endpoint (<a href="https://redirect.github.com/apache/pulsar/pull/26711";>#26711</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/pulsar/commit/b7b03f72cd4f81d501570588fcf3433ee035629b";><code>b7b03f7</code></a> Release 5.0.0</li> <li><a href="https://github.com/apache/pulsar/commit/7cf7321a66c0d2960b1f5e993213d479fc55ec32";><code>7cf7321</code></a> [fix][client] Apply V5 connection backoff initial and max intervals (<a href="https://redirect.github.com/apache/pulsar/issues/26799";>#26799</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/af8c5292febdd54d8427d455482ecebeca1c8423";><code>af8c529</code></a> [improve][test] Add disk-limit options and A/B comparison charts to the Pulsa...</li> <li><a href="https://github.com/apache/pulsar/commit/f61af25688f1b601cef35ca0dedcef5d91e81dbd";><code>f61af25</code></a> [doc][spec] PIP-494: Scalable Topics client specification (<a href="https://redirect.github.com/apache/pulsar/issues/26805";>#26805</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/22a998e29fddb05f6865a250ac5710353f9b03f3";><code>22a998e</code></a> [improve][pip] PIP-494: Scalable Topics Client Specification — authoritative ...</li> <li><a href="https://github.com/apache/pulsar/commit/f175a6c1804ac87dba1bee35638eabd07778c453";><code>f175a6c</code></a> [feat][broker] PIP-441:Add broker-level metrics for non-recoverable data skip...</li> <li><a href="https://github.com/apache/pulsar/commit/4c245b6a2647aa113b31fefb923f32ab38995e3d";><code>4c245b6</code></a> [fix][Client] permit leak in chunked message discard path (<a href="https://redirect.github.com/apache/pulsar/issues/26661";>#26661</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/80d27d35a29b7e77d7b5877a8398c59d1ae99936";><code>80d27d3</code></a> [fix][broker] Avoid misleading ownership lock expiry logs during shutdown (<a href="https://redirect.github.com/apache/pulsar/issues/2";>#2</a>...</li> <li><a href="https://github.com/apache/pulsar/commit/3ad3085567e1c8faa4d1857651dd056cc76c9dd6";><code>3ad3085</code></a> [improve][test] Strengthen auto-split selector concurrency test (<a href="https://redirect.github.com/apache/pulsar/issues/26779";>#26779</a>)</li> <li><a href="https://github.com/apache/pulsar/commit/86ba7ebf6a3be14e6410080ddcd9de18945e380f";><code>86ba7eb</code></a> [fix][test] Fix flaky V5ProducerBackpressureTest.retriesAcrossASegmentSplitKe...</li> <li>Additional commits viewable in <a href="https://github.com/apache/pulsar/compare/v4.0.13...v5.0.0";>compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | org.apache.pulsar:pulsar-bom | [>= 4.1.a0, < 4.2] | | org.apache.pulsar:pulsar-bom | [>= 4.2.a0, < 4.3] | </details> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
