Release v2.10.23-RC.1

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.22.8

Added

Windows

• New ca_certs_match option has been added in the tls block for searching the certificate store for only certificates matching the specified CAs (#5115)
• New cert_match_skip_invalid option has been added in the tls block for ignoring certificates that have expired or are not valid yet (#6042)
• The cert_match_by option can now be set to thumbprint, allowing an SHA1 thumbprint to be specified in cert_match (#6042, #6047)

Improved

JetStream

• Reduced the number of allocations in consumers from get-next requests and when returning some error codes (#6039)

Fixed

General

• Load balancing queue groups from leaf nodes in a cluster (#6043)

JetStream

• Invalidate the stream state when a drift between the tracking states has been detected (#6034)
• Fixed a panic in the subject tree when checking for full wildcards (#6049)
• Snapshot processing should no longer spin when there is no leader (#6050)
• Replicated stream message framing can no longer overflow with extremely long subjects, headers or reply subjects (#6052)
• Don’t replace the leader’s snapshot when shutting down, potentially causing a desync (#6053)

Windows

• Using the LocalMachine certificate store is now possible from a non-administrator user (#6019)

Complete Changes

v2.10.22...v2.10.23-RC.1