Releases

Check if affected (3)

• securityNats-Trace-Dest publish permission checks for leaf connections

  Applies if you use Leaf connections.

  Leaf connections now undergo the same publish permission checks for Nats-Trace-Dest as other connections.

• securityMQTT subscribe deny rules on retained message and QoS replay paths

  Applies if you use MQTT.

  Subscribe deny rules are now enforced when replaying retained messages and QoS messages in MQTT.

• breakingThe JSONP callback support in monitoring endpoints, removed

  Applies if you use JSONP callback support.

  JSONP callback support has been removed from monitoring endpoints in this release.

Check if affected (1)

• breakingThe JSONP callback support in monitoring endpoints, removed

  Applies if you use JSONP callback support.

  JSONP callback support has been removed from monitoring endpoints in this release.

Check if affected (3)

• breakingInsecure TLS cipher suite default

  Applies if you enable allow_insecure_cipher_suites.

  The server now adds new cipher suites automatically and disables insecure cipher suites by default. Insecure suites can be allowed by enabling allow_insecure_cipher_suites.

• breakingJetStream strict mode default

  Applies if you use JetStream.

  The server now returns an error for invalid JetStream requests instead of only logging them, because strict mode is enabled by default. Invalid requests are rejected by the server.

• breakingDowngrade compatibility for new v2.12 features

  Applies if you use new v2.12 features.

  Downgrades are supported only to v2.11.9 or higher. The server recognizes new v2.12 features and places streams or consumers that use them into unsupported or offline mode, protecting the data and server from unsupported features or data.