A maintenance release with a dependency and toolchain update, broad defect corrections, and behavior improvements across authentication, routing, monitoring, clustering, and JetStream. It also removes JSONP monitoring callbacks and addresses MQTT and authorization-related connection and permission handling.
Check if affected (3)
security
Nats-Trace-Destpublish permission checks for leaf connectionsApplies if you use Leaf connections.
Leaf connections now undergo the same publish permission checks for
Nats-Trace-Destas other connections.security
MQTTsubscribe deny rules on retained message and QoS replay pathsApplies if you use
MQTT.Subscribe deny rules are now enforced when replaying retained messages and QoS messages in
MQTT.breakingThe
JSONPcallback support in monitoring endpoints, removedApplies if you use JSONP callback support.
JSONPcallback support has been removed from monitoring endpoints in this release.