Try our Chrome extension
Easily add the current web-page from your browser directly into your changedetection.io tool, more great features coming soon!
Chrome Webstore
Changedetection.io needs your support!
You can help us by supporting changedetection.io on these platforms;
- Rate us at AlternativeTo.net
- Star us on GitHub
- Follow us at Twitter/X
- G2 Software reviews
- Check us out on LinkedIn
- And tell your friends and colleagues :)
The more popular changedetection.io is, the more time we can dedicate to adding amazing features!
Many thanks :)
changedetection.io team
Noch nicht vor Sekunden
False
Noch nicht vor Sekunden
Auslösender Text Ignorierter Text Blockierter Text
vor 5 Stunden
Skip to content
Navigation Menu
Sign in Appearance settings
* Platform
+ AI CODE CREATION
o GitHub Copilot Write better code with AI
o GitHub Copilot app Direct agents from issue to merge
o MCP Registry Integrate external tools
+ DEVELOPER WORKFLOWS
o Actions Automate any workflow
o Codespaces Instant dev environments
o Issues Plan and track work
o Code Review Manage code changes
o Code Quality Enforce quality at merge
+ APPLICATION SECURITY
o GitHub Advanced Security Find and fix vulnerabilities
o Code security Secure your code as you build
o Secret protection Stop leaks before they start
+ EXPLORE
o Why GitHub
o Documentation
o Blog
o Changelog
o Marketplace
View all features
* Solutions
+ BY COMPANY SIZE
o Enterprises
o Small and medium teams
o Startups
o Nonprofits
+ BY USE CASE
o App Modernization
o DevSecOps
o DevOps
o CI/CD
o View all use cases
+ BY INDUSTRY
o Healthcare
o Financial services
o Manufacturing
o Government
o View all industries
View all solutions
* Resources
+ EXPLORE BY TOPIC
o AI
o Software Development
o DevOps
o Security
o View all topics
+ EXPLORE BY TYPE
o Customer stories
o Events & webinars
o Ebooks & reports
o Business insights
o GitHub Skills
+ SUPPORT & SERVICES
o Documentation
o Customer support
o Community forum
o Trust center
o Partners
View all resources
* Open Source
+ COMMUNITY
o GitHub Sponsors Fund open source developers
+ PROGRAMS
o Security Lab
o Maintainer Community
o Accelerator
o GitHub Stars
o Archive Program
+ REPOSITORIES
o Topics
o Trending
o Collections
* Enterprise
+ ENTERPRISE SOLUTIONS
o Enterprise platform AI-powered developer platform
+ AVAILABLE ADD-ONS
o GitHub Advanced Security Enterprise-grade security features
o Copilot for Business Enterprise-grade AI features
o Premium Support Enterprise-grade 24/7 support
* Pricing
Type / to search
Sign in
Sign up Appearance settings
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
Uh oh!
There was an error while loading. Please reload this page.
nats-io / nats-server Public
* Uh oh!
There was an error while loading. Please reload this page.
* Notifications You must be signed in to change notification settings
* Fork 1.9k
* Star 20.4k
* Code
* Issues 445
* Pull requests 96
* Discussions
* Actions
* Projects
* Security and quality 36
* Insights
Additional navigation options
* Code
* Issues
* Pull requests
* Discussions
* Actions
* Projects
* Security and quality
* Insights
Releases: nats-io/nats-server
Releases Tags
Releases · nats-io/nats-server
Release list
* Release v2.14.4
* Release v2.12.14
* Release v2.14.3
* Release v2.12.12
* Release v2.12.11
* Release v2.14.2
* Release v2.12.10
* Release v2.14.2-RC.1
* Release v2.12.10-RC.1
* Release v2.14.1
Previous Next
Jump to release
* Release v2.14.4
* Release v2.12.14
* Release v2.14.3
* Release v2.12.12
* Release v2.12.11
* Release v2.14.2
* Release v2.12.10
* Release v2.14.2-RC.1
* Release v2.12.10-RC.1
* Release v2.14.1
Previous Next
Release v2.14.4
Release v2.14.4 Latest
Latest
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 30 Jul 13:57
v2.14.4
This tag was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
bbd6dc5
This commit was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
Changelog
Refer to the 2.14 Upgrade Guide for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.
Go Version
* 1.26.5 (#8435)
Dependencies
* github.com/klauspost/compress v1.19.0 (#8385)
* golang.org/x/crypto v0.54.0 (#8385)
* golang.org/x/sys v0.47.0 (#8385)
* github.com/antithesishq/antithesis-sdk-go v0.7.2-default-no-op (#8385)
Improved
JetStream
* The Raft transport layer has been decoupled, improves testing but does not change server behaviour (#8181)
* The disk concurrency semaphore has been increased to 4096 slots, up from the previous CPU-scaled count (#8336)
* The disk concurrency semaphore can now be configured with the max_concurrent_io option in the jetstream config block (#8336)
* Filestore underlying block cache buffers are now recycled to the pool when the weak reference is collected by the GC, which should smooth out memory usage with some usage patterns (#8395)
* Calculating and looking up sequences in delete maps for file-backed streams with large numbers of interior deletes is now faster and holds locks for less time (#8403)
* Inserts, iterations and deletes in AVL sequence sets are now faster in many cases, which speeds up the tracking of interior deletes (#8406)
* Stream snapshots now attempt to determine the correct encode buffer size up front, avoiding many unnecessary allocations on streams with large numbers of interior deletes (#8405)
* Reduced memory usage of the structure that is used to track subjects within a stream (#8412)
Fixed
General
* allow_non_tls will no longer log an incorrect message at startup claiming that TLS is required (#8420)
* Combining no_auth_user with auth callouts will no longer skip authentication checks when no CONNECT message is sent
* JWT validation no longer crashes the server with whitespace-only permissions
* Several paths that enforce the permissions of queue subscriptions no longer treat the whole permission as a subject literal
* Several JetStream and MQTT endpoints now correctly guard against null values in JSON
* Fixed an authentication bypass with TLS verify_and_map authenticating users with blank passwords
Monitoring
* The healthz endpoint will now skip and no longer report on expired JWT accounts (#8379, thanks to @ByapakSigdel)
* The varz endpoint will now correctly report JetStream limits after they were changed via a config reload (#8394)
JetStream
* Malformed cluster replicated acks or delivered updates are now correctly rejected by the decoder (#8284, thanks to @uwezkhan)
* Malformed cluster replicated skip or reset updates are now correctly rejected by the decoder (#8345, thanks to @uwezkhan)
* Empty cluster replicated entries are now correctly ignored (#8347, thanks to @uwezkhan)
* Decoded AVL sequence set node counts are now validated correctly on 32-bit systems (#8355, thanks to @uwezkhan)
* Stale error responses on source or mirror creation are now dropped by recreating the subscription (#8356)
* Oversized cluster replicated messages are now validated correctly on 32-bit systems (#8357, thanks to @uwezkhan)
* Raft elections now correctly ignore votes from removed peers (#8353)
* Filestore blocks with unsynced or truncated key files are now removed and counted as lost data instead of failing to recover altogether (#8365)
* Filestore encryption key files are now synced to disk more aggressively (#8366)
* Raft now handles the append entry iterator returning no more entries correctly (#8372)
* Fixed string ownership when handling the expected last sequence per subject in a batch (#8377)
* Fixed a race condition between concurrent message removals via limits that could unexpectedly disable writes into a filestore (#8378)
* Fixed a bug in the filestore which could prevent some filestore block cache references from being weakened correctly, which could result in unexpected memory usage and GC pressure (#8380)
* Attempting to update the consumer storage type now correctly returns an error (#8382)
* Stream publish checks will now correctly reject messages that exceed the maximum store size before proposal (#8389)
* Fixed a race condition between storing messages in the filestore and block compactions (#8400)
* The filestore no longer skips sparse delete blocks when processing deletes from a snapshot (#8404)
* The consumer reset endpoint responses are no longer dropped when sent through a service import (#8407)
* Creating a clustered consumer immediately after creating a clustered stream should no longer respond with a stream not found error (#8410)
* Raft proposals now require the term to be passed down from JetStream, preventing situations where stale proposals from a previous term could make changes in a new term after a fast election (#8370)
* Replicated streams that were recreated while a node was down are no longer treated as an update by a returning node processing a snapshot, avoiding stale Raft groups from continuing to run and unexpected behaviour with consumers (#8413)
* Stream snapshot endpoints now more strictly check the reply subject for validity
MQTT
* Packet identifiers for QoS1 and QoS2 are now issued by a monotonic counter, avoiding accidental ID reuse (#8358, thanks to @nberlee)
* Pending QoS1 and QoS2 deliveries should no longer leak when the subscription is downgraded to QoS0 (#8359, thanks to @nberlee)
* QoS2 messages released on a resumed sessions should no longer lose their QoS or packet ID (#8414)
* MQTT clients can no longer subscribe to $MQTT.> subjects, closing a potential permission bypass
Complete Changes
v2.14.3...v2.14.4
Contributors
*
*
*
nberlee, ByapakSigdel, and uwezkhan
Assets 55
* nats-server-v2.14.4-386.deb
sha256:87510c0c954704a2f22499c345439eaf06a8554c58ba4d5b014ef2e03d757702
6.33 MB 2026-07-30T13:49:04Z
* nats-server-v2.14.4-386.rpm
sha256:09911b1cfb3a445c9fa67e6f2d831c85eab597fbf7cf4b768c5bb6821e2cee6b
6.3 MB 2026-07-30T13:49:05Z
* nats-server-v2.14.4-amd64.deb
sha256:30e12e0e4810a087464f1914370a069eb0f84ac3af7c6b0fea1608c0d2b6eba6
6.55 MB 2026-07-30T13:49:05Z
* nats-server-v2.14.4-amd64.rpm
sha256:73572ee8af1f401fcfd92af97d9467876c9b4e25e10356d67098f1ea6921fead
6.54 MB 2026-07-30T13:49:04Z
* nats-server-v2.14.4-arm6.deb
sha256:a17099a709848fc5197b59725ef7431f1df38d3f715a022bb9ced8377a1d2f08
6.31 MB 2026-07-30T13:49:03Z
* nats-server-v2.14.4-arm6.rpm
sha256:cc803356c5f8e117dd18153e1cf7bc9caec502470e926c78897235d4f328f4c0
6.27 MB 2026-07-30T13:49:04Z
* nats-server-v2.14.4-arm64.deb
sha256:3011ff275c09c1df2da3ceed5fd6747bbf583db6dc356d4c367ee96bb827a3c4
5.93 MB 2026-07-30T13:49:01Z
* nats-server-v2.14.4-arm64.rpm
sha256:3ed4263de7345b0fc476f43b7ca5b2f1eff8a6170799b4e0ace6df422362fe7a
5.9 MB 2026-07-30T13:49:05Z
* nats-server-v2.14.4-arm7.deb
sha256:fe5fbeb0b2abe82ab7c33851c1e6f601d6f39afff5f28c75bc3d8fb3bbd99ca3
6.3 MB 2026-07-30T13:49:03Z
* nats-server-v2.14.4-arm7.rpm
sha256:374832f2eebefeef5de153204481961f55d0e15be45649e082a30aafc7b5a47b
6.26 MB 2026-07-30T13:49:06Z
* Source code (zip)
2026-07-30T12:34:44Z
* Source code (tar.gz)
2026-07-30T12:34:44Z
* Show all 55 assets Loading
Uh oh!
There was an error while loading. Please reload this page.
🎉 9 0xfeeddeadbeef, sudodios, neZorinEgor, Leftyx, omer9564, dmedovich, Robertmk0, alexnrod, and hjoukl reacted with hooray emoji
All reactions
* 🎉 9 reactions
9 people reacted
Release v2.12.14
Release v2.12.14
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 30 Jul 13:56
v2.12.14
This tag was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
c0a7827
This commit was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
Changelog
Go Version
* 1.25.12 (#8435)
Dependencies
* github.com/klauspost/compress v1.19.0 (#8385)
* golang.org/x/crypto v0.54.0 (#8385)
* golang.org/x/sys v0.47.0 (#8385)
* github.com/antithesishq/antithesis-sdk-go v0.7.2-default-no-op (#8385)
Improved
JetStream
* The Raft transport layer has been decoupled, improves testing but does not change server behaviour (#8181)
* The disk concurrency semaphore has been increased to 4096 slots, up from the previous CPU-scaled count (#8336)
* The disk concurrency semaphore can now be configured with the max_concurrent_io option in the jetstream config block (#8336)
* Filestore underlying block cache buffers are now recycled to the pool when the weak reference is collected by the GC, which should smooth out memory usage with some usage patterns (#8395)
* Inserts, iterations and deletes in AVL sequence sets are now faster in many cases, which speeds up the tracking of interior deletes (#8406)
* Stream snapshots now attempt to determine the correct encode buffer size up front, avoiding many unnecessary allocations on streams with large numbers of interior deletes (#8405)
* Reduced memory usage of the structure that is used to track subjects within a stream (#8412)
Fixed
General
* allow_non_tls will no longer log an incorrect message at startup claiming that TLS is required (#8420)
* Combining no_auth_user with auth callouts will no longer skip authentication checks when no CONNECT message is sent
* JWT validation no longer crashes the server with whitespace-only permissions
* Several paths that enforce the permissions of queue subscriptions no longer treat the whole permission as a subject literal
* Several JetStream and MQTT endpoints now correctly guard against null values in JSON
* Fixed an authentication bypass with TLS verify_and_map authenticating users with blank passwords
Monitoring
* The healthz endpoint will now skip and no longer report on expired JWT accounts (#8379, thanks to @ByapakSigdel)
* The varz endpoint will now correctly report JetStream limits after they were changed via a config reload (#8394)
JetStream
* Malformed cluster replicated acks or delivered updates are now correctly rejected by the decoder (#8284, thanks to @uwezkhan)
* Malformed cluster replicated skip or reset updates are now correctly rejected by the decoder (#8345, thanks to @uwezkhan)
* Empty cluster replicated entries are now correctly ignored (#8347, thanks to @uwezkhan)
* Decoded AVL sequence set node counts are now validated correctly on 32-bit systems (#8355, thanks to @uwezkhan)
* Oversized cluster replicated messages are now validated correctly on 32-bit systems (#8357, thanks to @uwezkhan)
* Raft elections now correctly ignore votes from removed peers (#8353)
* Filestore encryption key files are now synced to disk more aggressively (#8366)
* Raft now handles the append entry iterator returning no more entries correctly (#8372)
* Fixed a bug in the filestore which could prevent some filestore block cache references from being weakened correctly, which could result in unexpected memory usage and GC pressure (#8380)
* Attempting to update the consumer storage type now correctly returns an error (#8382)
* Stream publish checks will now correctly reject messages that exceed the maximum store size before proposal (#8389)
* Creating a clustered consumer immediately after creating a clustered stream should no longer respond with a stream not found error (#8410)
* Replicated streams that were recreated while a node was down are no longer treated as an update by a returning node processing a snapshot, avoiding stale Raft groups from continuing to run and unexpected behaviour with consumers (#8413)
* Stream snapshot endpoints now more strictly check the reply subject for validity
MQTT
* Packet identifiers for QoS1 and QoS2 are now issued by a monotonic counter, avoiding accidental ID reuse (#8358, thanks to @nberlee)
* Pending QoS1 and QoS2 deliveries should no longer leak when the subscription is downgraded to QoS0 (#8359, thanks to @nberlee)
* QoS2 messages released on a resumed sessions should no longer lose their QoS or packet ID (#8414)
Complete Changes
v2.12.12...v2.12.14
Contributors
*
*
*
nberlee, ByapakSigdel, and uwezkhan
Assets 55
Loading
Uh oh!
There was an error while loading. Please reload this page.
🎉 1 chenparty reacted with hooray emoji
All reactions
* 🎉 1 reaction
1 person reacted
Release v2.14.3
Release v2.14.3
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 29 Jun 15:36
v2.14.3
This tag was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
9b17a58
This commit was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
Changelog
Refer to the 2.14 Upgrade Guide for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.
Go Version
* 1.26.4 (#8281)
Dependencies
* golang.org/x/crypto v0.53.0 (#8297)
* golang.org/x/sys v0.46.0 (#8297)
* github.com/nats-io/jwt/v2 v2.8.2
* github.com/nats-io/nkeys v0.4.16
Improved
General
* Per-connection log lines that could be noisy in normal operation have been demoted to debug level (#8289)
* Writer options are now applied consistently when using the s2_fast compression mode (#8047)
JetStream
* Stream and consumer assignment handling has been refactored for more consistent migration and info behavior (#8262)
* Meta, stream and consumer write errors are now registered more consistently for health and recovery handling (#8293)
Removed
Monitoring
* JSONP callback support has been removed from monitoring endpoints
Fixed
General
* Long-running reconnect and OCSP loops no longer retain unused timers, reducing memory pressure over time (#8204)
* Inherited JWT default permissions are now refreshed when account claims are updated (#8276)
* External auth configuration is now cleared correctly when account claims are updated (#8275)
* PROXY protocol detection, TLS sniffing with allow_non_tls and PROXY v1 address-family parsing have been fixed (#8302)
* A race in gateway CONNECT handling has been fixed (#8306)
* Trusted proxy tracking no longer leaks closed clients during concurrent updates (#8307)
* Service import replies can now be delivered across cluster routes (#8317)
* Message tracing now works correctly with service imports and exports
* Several panic, fatal and data race conditions in authentication, routing, monitoring and clustered request handling have been fixed
* NoAuthUser now checks connection restrictions
* Leaf connections no longer bypass Nats-Trace-Dest publish permission checks
* CONNZ and SUBSZ pagination now guard against Offset and Limit integer overflow panics
* Fixed a nil pointer panic when starting up when the resolver parent directory is missing (#8329)
MQTT
* Partial CONNECT packets can no longer exhaust pre-authentication memory
* PUBLISH remaining-length underflow no longer causes a server panic
* Subscriptions to internal $MQTT.deliver.pubrel subjects are now rejected
* Subscribe deny rules are now enforced on retained message and QoS replay paths
* WebSocket /mqtt upgrades no longer panic when MQTT is disabled
Monitoring
* JetStream remote usage updates no longer panic on length integer overflow
JetStream
* A data race on the cluster meta node during JetStream shutdown has been fixed (#8260)
* Meta proposal inflight tracking is now kept consistent during stream moves and related operations (#8261)
* Stream catchup is no longer skipped when limits are exceeded, preventing possible stream desync (#8265)
* Malformed TTL and schedule state is now rejected during decode (#8269)
* Zero consumer limits are now treated as unlimited during stream updates (#8286)
* Raft nodes no longer participate in voting or candidacy after write errors (#8290)
* Raft checkpoint handling now aborts if the node is closed (#8296)
* Raft ApplyCommit now handles the post-snapshot index correctly (#8321)
* Consumer ack subscriptions now match correctly when consumer names contain % (#8301)
* Observer state is now cleared correctly during js_cluster_migrate when a leaf remote is removed (#8304)
* Atomic batch end-of-batch max-size checks and R1 message rewrites have been fixed (#8305)
* Schedule drift, failed fast batch commits with gapOk and stale /varz leaf remote state have been fixed (#8308)
* Peer state decoding now bounds peer ID reads to the buffer length (#8310)
* Counter stream staging no longer corrupts the committed running total (#8311)
* Filestore compaction no longer corrupts compressed or encrypted blocks (#8312)
* Memory store NumPending no longer overcounts for DeliverLastPerSubject consumers (#8313)
* Consumer inactive-delete grace period handling and pull request MaxBytes budgeting have been fixed (#8314)
* MultiLastSeqs no longer reorders stream config subjects through filterIsAll handling (#8315)
* Meta recovery snapshots no longer leave phantom streams or consumers behind (#8324)
* Skipped messages last time no longer violates ordering that could lead to issues with starting by time (#8237)
* Raft now reverts uncommitted membership changes correctly when truncating or snapshotting (#8332)
Credits
While CVE advisory notices are credited individually, a number of fixes in this release were the result of non-CVE reports from the following contributors:
* Koda Reef
* @Emin-ACIKGOZ
* @0xVijay
* Yaohui Wang
* @alanturing881
Complete Changes
v2.14.2...v2.14.3
Contributors
*
*
*
0xVijay, Emin-ACIKGOZ, and iaohkut-from-NightWolf-Team
Assets 55
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 2 eyoboue and Akrobs reacted with thumbs up emoji 🎉 4 0xfeeddeadbeef, aosan, Akrobs, and sudodios reacted with hooray emoji ❤️ 1 Akrobs reacted with heart emoji 🚀 2 quixoticaxis and virakthaka reacted with rocket emoji
All reactions
* 👍 2 reactions
* 🎉 4 reactions
* ❤️ 1 reaction
* 🚀 2 reactions
7 people reacted
Release v2.12.12
Release v2.12.12
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 29 Jun 15:36
v2.12.12
This tag was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
e8de2a6
This commit was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
Changelog
Go Version
* 1.25.11
Dependencies
* golang.org/x/crypto v0.53.0 (#8297)
* golang.org/x/sys v0.46.0 (#8297)
* github.com/nats-io/jwt/v2 v2.8.2
* github.com/nats-io/nkeys v0.4.16
Improved
General
* Per-connection log lines that could be noisy in normal operation have been demoted to debug level (#8289)
* Writer options are now applied consistently when using the s2_fast compression mode (#8047)
JetStream
* Stream and consumer assignment handling has been refactored for more consistent migration and info behavior (#8262)
* Meta, stream and consumer write errors are now registered more consistently for health and recovery handling (#8293)
Removed
Monitoring
* JSONP callback support has been removed from monitoring endpoints
Fixed
General
* Inherited JWT default permissions are now refreshed when account claims are updated (#8276)
* External auth configuration is now cleared correctly when account claims are updated (#8275)
* PROXY protocol detection, TLS sniffing with allow_non_tls and PROXY v1 address-family parsing have been fixed (#8302)
* A race in gateway CONNECT handling has been fixed (#8306)
* Trusted proxy tracking no longer leaks closed clients during concurrent updates (#8307)
* Service import replies can now be delivered across cluster routes (#8317)
* Message tracing now works correctly with service imports and exports
* Several panic, fatal and data race conditions in authentication, routing, monitoring and clustered request handling have been fixed
* NoAuthUser now checks connection restrictions
* CONNZ and SUBSZ pagination now guard against Offset and Limit integer overflow panics
* Fixed a nil pointer panic when starting up when the resolver parent directory is missing (#8329)
MQTT
* Partial CONNECT packets can no longer exhaust pre-authentication memory
* PUBLISH remaining-length underflow no longer causes a server panic
* Subscriptions to internal $MQTT.deliver.pubrel subjects are now rejected
* Subscribe deny rules are now enforced on retained message and QoS replay paths
* WebSocket /mqtt upgrades no longer panic when MQTT is disabled
Monitoring
* JetStream remote usage updates no longer panic on length integer overflow
JetStream
* A data race on the cluster meta node during JetStream shutdown has been fixed (#8260)
* Meta proposal inflight tracking is now kept consistent during stream moves and related operations (#8261)
* Stream catchup is no longer skipped when limits are exceeded, preventing possible stream desync (#8265)
* Malformed TTL and schedule state is now rejected during decode (#8269)
* Zero consumer limits are now treated as unlimited during stream updates (#8286)
* Raft nodes no longer participate in voting or candidacy after write errors (#8290)
* Raft checkpoint handling now aborts if the node is closed (#8296)
* Raft ApplyCommit now handles the post-snapshot index correctly (#8321)
* Consumer ack subscriptions now match correctly when consumer names contain % (#8301)
* Atomic batch end-of-batch max-size checks and R1 message rewrites have been fixed (#8305)
* Peer state decoding now bounds peer ID reads to the buffer length (#8310)
* Counter stream staging no longer corrupts the committed running total (#8311)
* Filestore compaction no longer corrupts compressed or encrypted blocks (#8312)
* Memory store NumPending no longer overcounts for DeliverLastPerSubject consumers (#8313)
* Consumer inactive-delete grace period handling and pull request MaxBytes budgeting have been fixed (#8314)
* MultiLastSeqs no longer reorders stream config subjects through filterIsAll handling (#8315)
* Meta recovery snapshots no longer leave phantom streams or consumers behind (#8324)
* Skipped messages last time no longer violates ordering that could lead to issues with starting by time (#8237)
* Raft now reverts uncommitted membership changes correctly when truncating or snapshotting (#8332)
Credits
While CVE advisory notices are credited individually, a number of fixes in this release were the result of non-CVE reports from the following contributors:
* Koda Reef
* @Emin-ACIKGOZ
* @0xVijay
* Yaohui Wang
* @alanturing881
Complete Changes
v2.12.11...v2.12.12
Contributors
*
*
*
0xVijay, Emin-ACIKGOZ, and iaohkut-from-NightWolf-Team
Assets 55
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 1 Akrobs reacted with thumbs up emoji
All reactions
* 👍 1 reaction
1 person reacted
Release v2.12.11
Release v2.12.11
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 09 Jun 14:57
v2.12.11
This tag was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
2ee210e
This commit was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
Changelog
Refer to the 2.12 Upgrade Guide for backwards compatibility notes with 2.11.x.
Go Version
* 1.25.11
Fixed
JetStream
* Fixed a regression introduced in v2.12.7 which could result in stale subject state tracking which could manifest in "Message Not Found" errors when a max messages per subject limit is configured (#8285)
+ Please note that v2.14.x versions are not affected
Complete Changes
v2.12.10...v2.12.11
Assets 55
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 1 Akrobs reacted with thumbs up emoji 🚀 1 quixoticaxis reacted with rocket emoji
All reactions
* 👍 1 reaction
* 🚀 1 reaction
2 people reacted
Release v2.14.2
Release v2.14.2
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 02 Jun 16:02
v2.14.2
This tag was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
1d06592
This commit was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
Changelog
Refer to the 2.14 Upgrade Guide for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.
Go Version
* 1.26.3
Dependencies
* golang.org/x/crypto v0.52.0
* golang.org/x/sys v0.45.0
* github.com/nats-io/jwt/v2 v2.8.2
* github.com/nats-io/nkeys v0.4.16
Improved
General
* The client ID is now available through the embedded ClientAuthentication API (#8217)
Fixed
General
* A race condition when handling subscription interest over routes has been fixed (#8235)
* Potential protocol-level corruption from rewriting $JS.ACK subjects has been fixed (#8242)
* Potential protocol-level corruption from buffer misuse in compressed WebSocket clients has been fixed (#8244)
* The /accstatz monitoring endpoint no longer omits accounts with only leaf connections (#8252)
JetStream
* Fixed a case where Raft peers were not correctly tracked after an inactivity stall during catchup (#8226)
* Quorum needed is now calculated correctly when bootstrapping the metalayer when gateway URLs resolve to multiple IP addresses (#8238)
* The filestore no longer performs a block skip check on streams with extremely high subject counts, as it could result in runaway CPU usage (#8227)
* Fixed a case where the filestore would not release a lock after handling a write error (#8232)
* Purge operations on both file and memory stores are now more consistent with each other (#8241)
* Fixed a case where the consumer lock would not release a lock after handling a start sequence error (#8230)
* Counter streams and message schedules now have configuration constraints applied to prevent incorrect usage patterns (#8240)
* Improved stream and consumer scale down behaviour consistency (#8253)
* Fixed an issue where the per-subject state last block was not stored correctly with a max messages per subject limit of 1 (#8254)
* Fixed a drift that could occur in the peer sets after a peer remove of an online node (#8258)
Complete Changes
v2.14.1...v2.14.2
Assets 55
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 2 Akrobs and magicprinc reacted with thumbs up emoji 🎉 1 Akrobs reacted with hooray emoji ❤️ 2 Akrobs and magicprinc reacted with heart emoji
All reactions
* 👍 2 reactions
* 🎉 1 reaction
* ❤️ 2 reactions
2 people reacted
Release v2.12.10
Release v2.12.10
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 02 Jun 16:02
v2.12.10
This tag was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
7c79aaf
This commit was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
Changelog
Refer to the 2.12 Upgrade Guide for backwards compatibility notes with 2.11.x.
Go Version
* 1.25.10
Dependencies
* golang.org/x/crypto v0.52.0
* golang.org/x/sys v0.45.0
* github.com/nats-io/jwt/v2 v2.8.2
* github.com/nats-io/nkeys v0.4.16
Improved
General
* The client ID is now available through the embedded ClientAuthentication API (#8217)
Fixed
General
* A race condition when handling subscription interest over routes has been fixed (#8235)
* Potential protocol-level corruption from rewriting $JS.ACK subjects has been fixed (#8242)
* Potential protocol-level corruption from buffer misuse in compressed WebSocket clients has been fixed (#8244)
* The /accstatz monitoring endpoint no longer omits accounts with only leaf connections (#8252)
JetStream
* Fixed a case where Raft peers were not correctly tracked after an inactivity stall during catchup (#8226)
* Quorum needed is now calculated correctly when bootstrapping the metalayer when gateway URLs resolve to multiple IP addresses (#8238)
* The filestore no longer performs a block skip check on streams with extremely high subject counts, as it could result in runaway CPU usage (#8227)
* Purge operations on both file and memory stores are now more consistent with each other (#8241)
* Counter streams and message schedules now have configuration constraints applied to prevent incorrect usage patterns (#8240)
* Improved stream and consumer scale down behaviour consistency (#8253)
* Fixed an issue where the per-subject state last block was not stored correctly with a max messages per subject limit of 1 (#8254)
* Fixed a drift that could occur in the peer sets after a peer remove of an online node (#8258)
Complete Changes
v2.12.9...v2.12.10
Assets 55
Loading
Uh oh!
There was an error while loading. Please reload this page.
🚀 3 quixoticaxis, jakubmiski, and sudodios reacted with rocket emoji
All reactions
* 🚀 3 reactions
3 people reacted
Release v2.14.2-RC.1
Release v2.14.2-RC.1 Pre-release
Pre-release
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 29 May 15:17
v2.14.2-RC.1
This tag was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
7f6d2b1
This commit was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
Changelog
Refer to the 2.14 Upgrade Guide for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.
Go Version
* 1.26.3
Dependencies
* golang.org/x/crypto v0.52.0
* golang.org/x/sys v0.45.0
Fixed
General
* A race condition when handling subscription interest over routes has been fixed (#8235)
* Potential protocol-level corruption from rewriting $JS.ACK subjects has been fixed (#8242)
* Potential protocol-level corruption from buffer misuse in compressed WebSocket clients has been fixed (#8244)
JetStream
* Fixed a case where Raft peers were not correctly tracked after an inactivity stall during catchup (#8226)
* Quorum needed is now calculated correctly when bootstrapping the metalayer when gateway URLs resolve to multiple IP addresses (#8238)
* The filestore no longer performs a block skip check on streams with extremely high subject counts, as it could result in runaway CPU usage (#8227)
* Fixed a case where the filestore would not release a lock after handling a write error (#8232)
* Purge operations on both file and memory stores are now more consistent with each other (#8241)
* Fixed a case where the consumer lock would not release a lock after handling a start sequence error (#8230)
* Counter streams and message schedules now have configuration constraints applied to prevent incorrect usage patterns (#8240)
Complete Changes
v2.14.1...v2.14.2-RC.1
Assets 55
Loading
Uh oh!
There was an error while loading. Please reload this page.
🚀 2 quixoticaxis and sudodios reacted with rocket emoji
All reactions
* 🚀 2 reactions
2 people reacted
Release v2.12.10-RC.1
Release v2.12.10-RC.1 Pre-release
Pre-release
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 29 May 15:16
v2.12.10-RC.1
This tag was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
678aebf
This commit was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
Changelog
Refer to the 2.12 Upgrade Guide for backwards compatibility notes with 2.11.x.
Go Version
* 1.25.10
Dependencies
* golang.org/x/crypto v0.52.0
* golang.org/x/sys v0.45.0
Fixed
General
* A race condition when handling subscription interest over routes has been fixed (#8235)
* Potential protocol-level corruption from rewriting $JS.ACK subjects has been fixed (#8242)
* Potential protocol-level corruption from buffer misuse in compressed WebSocket clients has been fixed (#8244)
JetStream
* Fixed a case where Raft peers were not correctly tracked after an inactivity stall during catchup (#8226)
* Quorum needed is now calculated correctly when bootstrapping the metalayer when gateway URLs resolve to multiple IP addresses (#8238)
* The filestore no longer performs a block skip check on streams with extremely high subject counts, as it could result in runaway CPU usage (#8227)
* Purge operations on both file and memory stores are now more consistent with each other (#8241)
* Counter streams and message schedules now have configuration constraints applied to prevent incorrect usage patterns (#8240)
Complete Changes
v2.12.9...v2.12.10-RC.1
Assets 55
Loading
Uh oh!
There was an error while loading. Please reload this page.
All reactions
Release v2.14.1
Release v2.14.1
Compare
Choose a tag to compare
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
No results found
View all tags
github-actions released this 20 May 15:42
v2.14.1
This tag was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
cb557cd
This commit was signed with the committer’s verified signature.
neilalexander Neil
GPG key ID: 8993BAD6C5E51CD8
Verified
Learn about vigilant mode.
Changelog
Refer to the 2.14 Upgrade Guide for backwards compatibility notes with 2.12.x. Please note that the 2.13.x version was skipped.
Go Version
* 1.26.3 (#8107)
Dependencies
* github.com/klauspost/compress v1.18.6 (#8124)
* golang.org/x/crypto v0.51.0 (#8124)
* golang.org/x/sys v0.44.0 (#8124)
Added
General
* New metrics in_client_msgs, in_client_bytes, out_client_msgs and out_client_bytes are now available via the /varz monitoring endpoint for tracking data to/from normal clients only (#7851)
Improved
General
* Client TLS certificates without subject DNs but with DNS subject alternate names are now permitted (#8100)
* The log level of TLS handshake timeout or non-TLS record errors have been demoted to debug level to reduce noise (#8096)
JetStream
* Num pending is now only calculated on consumer leaders, avoiding unnecessary CPU usage on followers (#8172)
* Snapshot and catchup loops no longer leak timers (#8186, thanks to @SebTardif)
* Stream and consumer assignment errors are now surfaced (#8208)
* Intersection of sublists and subject trees can now be cancelled early, avoiding high CPU usage in some pathological cases (#8209)
Fixed
General
* Cluster route compression now obeys the cluster max_pings_out option if configured (#8093)
* The internal send loop no longer mutates caller headers, which could corrupt buffers (#8097)
* Removing headers no longer fails to remove later headers if the matching prefix also appeared in an earlier header value (#8103)
* The sublist now correctly maintains negative results in the cache when calculating number of interested subjects (#8119)
* Server shutdown requests are now idempotent, preventing concurrency issues when shutting down in embedded contexts (#8163)
* TLS listeners now work correctly with the PROXY protocol where enabled (#8130)
* Reduced lock contention that could be created between leafnodes and clients (#8139, #8159)
* Fixed a panic that could happen when an error occurs when walking JWT directory resolver folders (#8173, thanks to @SebTardif)
* In-process connections will no longer unexpectedly revert to TLS required with async INFO (#8205)
Leafnodes
* Leafnode connections will no longer negotiate compression if they are configured over already-compressed WebSockets (#7969)
JetStream
* Fast batch now correctly parses the batch sequence as a uint64 (#8094)
* Atomic batch no longer double-pools committed entries on cleanup (#8098)
* Raft nodes will now ignore temporary snapshots on recovery after a crash (#8101)
* A number of paths that could leave consumer redelivered in a drifted state have been fixed, e.g. with workqueue or interest-based streams with max_deliver, on single message removal or after purges/compactions (#8102)
* Caches are now cleared correctly when converting filestore encryption mode, avoiding block-level corruption (#8105, #8166)
* Fixed a race condition when updating the deduplication map on leader change (#8106)
* Source consumer creation will no longer schedule a recreation if a setup is already in progress, avoiding potential setup storms (#8111)
* Fixed data races when reading from the stream configuration when checking reservations, answering some API requests amongst others (#8115)
* Stream republish subjects are now validated correctly (#8127)
* The delivery policy for consumers on clustered workqueue streams is now enforced correctly (#8126)
* The Nats-Schedule-Next: purge action now correctly checks if the target is a schedule (#8135)
* Raft node append entry caches are now invalidated correctly on WAL truncation and snapshot installs (#8149)
* Skip message errors are now surfaced correctly, propagating failures (#8152)
* Mirror consumers are now retried immediately on a last sequence mismatch, avoiding stalling for longer than necessary (#8152)
* Raft nodes will no longer allow proposals to remove unknown peers (#8154)
* Pending state no longer leaks when reaching max deliveries (#8156)
* A panic when reusing a wait group when resetting a stream's clustered state has been fixed (#8158)
* Correctly reset local meta log when extending the meta group to a parent domain (#8142)
* Consumer file stores will now correctly flush when deleting a single redelivery, avoiding unexpected further redeliveries (#8168)
* Storage reservations for un-tiered streams have been made consistent between creates/updates and clustered/non-clustered modes (#8170)
* Raft will now correctly cancel an in-flight checkpoint operation when resetting (#8180, #8202)
* The JetStreamMaxMemory and JetStreamMaxStore options are now handled correctly in embedded mode (#8184)
* A number of fields that were aliasing underlying filestore block caches have been fixed (#8187)
* Consumers with inactive_threshold should no longer have their local state deleted unexpectedly when the proposal to the metalayer to clean up the consumer fails (#8198)
* Metalayer state is now preserved in a number of cases where it was incorrectly being removed on shutdown (#8199)
MQTT
* Invalid characters in subjects are now rejected correctly, avoiding protocol issues when forwarded to other connection types (#8104, #8112)
Complete Changes
v2.14.0...v2.14.1
Contributors
*
SebTardif
Assets 55
Loading
Uh oh!
There was an error while loading. Please reload this page.
👍 4 eyoboue, 0xfeeddeadbeef, magicprinc, and Akrobs reacted with thumbs up emoji 🎉 1 Akrobs reacted with hooray emoji ❤️ 1 Akrobs reacted with heart emoji 🚀 4 quixoticaxis, sudodios, magicprinc, and Akrobs reacted with rocket emoji
All reactions
* 👍 4 reactions
* 🎉 1 reaction
* ❤️ 1 reaction
* 🚀 4 reactions
6 people reacted
Previous 1 2 3 4 5 … 28 29 Next
Previous Next
Footer
© 2026 GitHub, Inc.
Footer navigation
* Terms
* Privacy
* Security
* Status
* Community
* Docs
* Contact
* Manage cookies
* Do not share my personal information
You can’t perform that action at this time.
Derzeit werden Unterschiede nur textuell und nicht grafisch dargestellt, es ist nur der letzte Screenshot verfügbar.
Für Screenshots ist ein Content Fetcher (Sockpuppetbrowser, Selenium usw.) erforderlich, der Screenshots unterstützt.