Bump org.apache.pulsar:pulsar-bom from 3.3.1 to 4.0.1 in /modules/pulsar

[dependabot]

Bumps org.apache.pulsar:pulsar-bom from 3.3.1 to 4.0.1.

Release notes

Sourced from org.apache.pulsar:pulsar-bom's releases.

v4.0.1

2024-12-02

Library updates

• [feat][meta] Bump oxia java version from 0.4.5 to 0.4.7 (#23471)
• [feat][misc] Upgrade oxia version to 0.4.9 (#23607)
• [fix][sec] Replace bcprov-jdk15on dependency with bcprov-jdk18-on (#23532)
• [fix][sec] Upgrade Zookeeper to 3.9.3 to address CVE-2024-51504 (#23581)
• [fix][sec] Upgrade to Netty 4.1.115.Final to address CVE-2024-47535 (#23596)
• [improve][monitor] Upgrade OTel to 1.41.0 (#23484)
• [improve] Upgrade OpenTelemetry library to 1.44.1 version (#23656)
• [improve] Upgrade oxia-java to 0.4.10 and fix closing of OxiaMetadataStore (#23653)

Broker

• [feat][broker] Implement allowBrokerOperationAsync in PulsarAuthorizationProvider to avoid exception thrown (#23663)
• [fix][broker] Broker is failing to create non-durable sub if topic is fenced (#23579)
• [fix][broker] Fix Broker migration NPE while broker tls url not configured (#23534)
• [fix][broker] Fix currently client retries until operation timeout if the topic does not exist (#23530)
• [fix][broker] Fix failed TokenAuthenticatedProducerConsumerTest (#23602)
• [fix][broker] Fix ownership loss (#23515)
• [fix][broker] Fix print cluster migration state response (#23535)
• [fix][broker] Fix race-condition causing repeated delete topic (#23522)
• [fix][broker] Increase readBuffer size for bookkeeper.DLOutputStream (#23548)
• [fix][broker] Key_Shared subscription: Reject consumers with incompatible policy (#23449)
• [fix][broker] Revert "[improve][client] Add log when can't add message to the container (#23657)
• [fix][broker] fix logging with correct error message while loading the topic (#23544)
• [fix][broker] fix null lookup result when brokers are starting (#23642)
• [fix][broker] support missing tenant level fine-granted permissions (#23660)
• [fix][broker]: support missing broker level fine-granted permissions (#23637)
• [improve][broker] Decouple pulsar_storage_backlog_age_seconds metric with backlogQuota check (#23619)
• [improve][broker] Exclude system topics from namespace level publish and dispatch rate limiting (#23589)
• [improve][broker] Make cluster metadata teardown command support metadata config path (#23520)
• [improve][broker] PIP-392: Add configuration to enable consistent hashing to select active consumer for partitioned topic (#23584)
• [improve][broker] Reduce memory occupation of InMemoryRedeliveryTracker. (#23640)
• [improve][broker] Reduce memory occupation of the delayed message queue (#23611)
• [improve][broker] Skip unloading when bundle throughput is zero (ExtensibleLoadManagerImpl only) (#23626)
• [improve][broker] Support cleanup replication cluster and allowed cluster when cluster metadata teardown (#23561)
• [improve][broker] re-elect the channel owner if no channel owner is found (#23516)
• [improve][broker] replace HashMap with inner implementation ConcurrentLongLongPairHashMap in Negative Ack Tracker. (#23582)

Client

• [fix][admin] Fix lookup get a null result if uses proxy (#23556)
• [fix][client] Fix ConsumerStats.getRateMsgsReceived javadoc (#21618)
• [fix][client] Fix DLQ producer name conflicts when there are same name consumers (#23577)
• [fix][client] Fix Reader.hasMessageAvailable return wrong value after seeking by timestamp with startMessageIdInclusive (#23502)
• [fix][client] Fix deadlock of NegativeAcksTracker (#23651)
• [fix][client] Fix producer/consumer stop to reconnect or Pub/Sub due to IO thread race-condition (#23499)

... (truncated)

Commits

• 3ea527b [fix][broker] support missing tenant level fine-granted permissions (#23660)
• d136476 [fix][broker] Revert "[improve][client] Add log when can't add message to the...
• f448703 [improve][broker] Reduce memory occupation of InMemoryRedeliveryTracker. (#23...
• 0d638f4 [feat][broker] Implement allowBrokerOperationAsync in PulsarAuthorizationProv...
• 938447f [fix][broker]: support missing broker level fine-granted permissions (#23637)
• d848cd6 [improve][client] Enhance error handling for non-exist subscription in consum...
• 7ffc717 [fix][client] Fix race-condition causing doReconsumeLater to hang when creati...
• bd93277 [improve][client] Reduce unshaded dependencies and shading warnings in shaded...
• f869c8b [improve] Upgrade OpenTelemetry library to 1.44.1 version (#23656)
• 1203869 [improve] [pip] PIP-373: Add a topic's system prop that indicates whether use...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)