fix(deps): update module github.com/nats-io/nats-server/v2 to v2.10.12

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/nats-io/nats-server/v2	v2.10.4 -> v2.10.12

---

Release Notes

nats-io/nats-server (github.com/nats-io/nats-server/v2)

v2.10.12

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.21.8 (#​5175)

Dependencies

• github.com/klauspost/compress v1.17.7 (#​5129)
• github.com/nats-io/nats.go v1.33.1 (#​5104)
• golang.org/x/crypto v0.21.0 (#​5199)
• golang.org/x/sys v0.18.0 (#​5198)
• github.com/nats-io/jwt/v2 v2.5.5

Improved

General

• Optimize detecting long subjects with wildcards (#​5102)
• Refactor getHeader to improve bounds checking (#​5135)

JetStream

• Switch to use fmt.Appendf to reduce a few allocations (#​5100)
• Write Raft peer state and term/vote inline (#​5151, #​5178)
• Improve term management when handling Raft vote responses (#​5149)
• Ensure Raft applied index is only updated by upper layer (#​5152)
• Add I/O gate for message block writeAt syscall (#​5193)
• Lower the minimum expiry threshold to 250ms (#​5206)

Fixed

General

• Fix randomisation for queue subscriptions on 32-bit platforms which could cause a panic (#​5169) Thanks to @​jeremylowery for the report!
• Stree not matching when partial parts were compared to long fragments (#​5177)

Gateway

• Fix sending empty reply on gateway RMSG (#​5192) Thanks to @​n-holmstedt for the report!

Leafnodes

• Fix loop detection on daisy-chained leafnodes (#​5126)
• Make sure to not remove account mappings that just had their value changed (#​5132, #​5103)

JetStream

• Fix sending Consumer Deleted on peer remove (#​5111, #​5160)
• Fix memory leak during compaction within memory store (#​5116) Thanks to @​stefanLeo for the report and contribution!
• Updating consumer config fails to check OptStartTime properly (#​5127) Thanks to @​thed0ct0r for the contribution!
• Slow ack for snapshots could cause slow consumer and client disconnect (#​5144)
• Fix for a test flapper with consumer expire frequency change (#​5155)
• Fix a potential drift that could occur when assigning last sequences to published messages on clustered streams (#​5179)
• Fix data race when capturing last sequence on clustered streams (#​5182)
• Fix lock inversion when tracking last sequence failures on clustered streams (#​5183)
• Revert an earlier change around the Raft handling of stepdowns due to stream move performance (#​5200)
• Make sure not to commit a replicated ack when the consumer is closed (#​5196)
• Check the Raft layer stream state once recovery is complete (#​5196)

OCSP

• Prefer a POST method to the OCSP server, falling back to GET (#​5109)
• Fixed a race condition that could affect OCSP stapling during server reloads (#​5207)

Complete Changes

v2.10.11

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.21.7

Dependencies

• github.com/nats-io/nats.go v1.33.0

Improved

JetStream

• Optimize replaying messages when they are at the end of the stream (#​5083) Thanks to @​david-wakeo for the report!
• Optimize replaying messages with start sequence by time when there are large gaps between the time sequence and first sequence (#​5088) Thanks again to @​david-wakeo for the report!
• Reduce possible contention for NRG step-down (#​4990)
• Reduce log-level to debug for non-actionable reallocations warnings (#​5085)
• Improved placement of streams in larger clusters when created in rapid succession (#​5079) Thanks to @​kohlisid for the report!
• Improved filtered consumer retrieval time for large subject space streams with wildcards (#​5089)

Fixed

JetStream

• Fixed a bug that could cause consumers to not match filtered subjects with wildcards correctly (#​5080)
• Fixed a bug that could not allow keys/subjects to be found after restarts after extended downtime (#​5054)
• Fixed a bug that would not properly update all consumer state when a filtered purge of the parent stream was narrower then the consumer’s filtered subject space (#​5075)

MQTT

• Fixed an issue with retained messages not working properly if the server name had a ‘.’ (#​5048)

Complete Changes

v2.10.10

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.21.6

Dependencies

• github.com/klauspost/compress v1.17.5
• github.com/nats-io/nats.go v1.32.0

Added

• Add ping_interval cluster route option to configure differently than client connections (#​5029)

Improved

JetStream

• Avoid a linear scan of filestore blocks when loading messages for the first time after restart or long period of inactivity (#​4969)
• NumPending calculations and subject index memory in filestore and memstore (#​4960, #​4983)
• Log healthy Raft group status when no longer falling behind (#​4995)
• Optimize writing full filestore state where there is high subject cardinality (#​5004)
• Share higher fidelity client info in JetStream advisory messages (#​5019, #​5026)
• More thorough gating of blocking disk I/O operations (#​5022, #​5027)
• Improved fallback cleanup of consumer Raft directory (#​5028)

MQTT

• Use different unique names for internal consumers (#​5017)

Fixed

Auth callout

• Ensure the server properly binds scoped users (#​5013) Thanks to @​dpotapov for the report!

Logging

• Fix missing variable in consumer skew log line (#​4967)

JetStream

• Fix data race with stream stop and removal (#​4963)
• Don't unconditionally send consumer snapshot when becoming leader (#​4965)
• Fix tracking holes in the message block index when they are at the end of the block, improving filestore cache efficiency (#​4988)
• Wait for recovery to complete before sending snapshot on stream scale-up from R1 (#​5001)
• Acking a redelivered msg with more pending should move the ack floor (#​5008)
• Fix for a panic calculating record length for secure erase followed by compaction (#​5009)
• Reduce memory growth on interest stream recovery when consumers are ahead of the recovered stream state (#​5011)
• Raft node responds to VoteRequest with outdated Term (#​5021)
• Avoid sending meta leader snapshot as normal entry on leader change when not up-to-date (#​5024)
• Make sure to not restart streams or consumers when they are deleted or immediately after being created (#​5032)

Shutdown

• Avoid panic when reloading during lame duck mode (#​5012)

Complete Changes

v2.10.9

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.21.6

Fixed

JetStream

• Guard against potential panic when finding starting sequence for stream sources from 2.9.x servers (#​4950)

Complete Changes

v2.10.8

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.21.6

Dependencies

• golang.org/x/crypto v0.18.0
• golang.org/x/sys v0.16.0
• github.com/nats-io/nkeys v0.4.7

Added

TLS

• Add 'certs' option to TLS block for multi-cert support (#​4889)

Improved

General

• Random number generation now uses a faster lock-free algorithm (#​4901)
• no_auth_user is now allowed to be an nkey (#​4938)

JetStream

• Improve matching efficiency of filter subjects in consumer (#​4864) Thanks to @​svenfoo for the contribution!
• Optimize JetStream metalayer snapshots by reducing allocations and simplifying marshaling (#​4925)
• Micro-optimization where subject tokenization occurs (#​4880) Thanks to @​svenfoo for the contribution!
• Prevent backing up internal JS API requests in large-scale source and mirror setups (#​4884)
• Optimize catchups for replicas and mirrors where there are a significant number of interior deletes (#​4929)
• Reduce lock contention on the stream lock for some operations that could block routes & gateways (#​4933)
• Do not load all blocks for NumPending when delivery is LastPerSubject (#​4885)
• Call stream update only if the config has changed (#​4898)
• Prevent large memory buildup in the apply queue for NRGs during startup (#​4895)
• Finding the last sourced message for each source of a stream is now much faster (#​4935)

MQTT

• Retained messages will now be fetched concurrently for a new subscription (#​4835)

Fixed

Accounts

• Guard account random number generator with mutex (#​4894) Thanks to @​igorrius for the report!

JetStream

• Fix accounting for replicas and tier limits (#​4868, #​4909)
• Ensure all filter subjects across consumers are accounted for when purging a stream (#​4873) Thanks to @​svenfoo for the contribution!
• Detect corrupt psim subjects during recovery of index.db (#​4890)
• Don’t allow writing snapshots to disk before recovery has completed (#​4927)
• Reduce memory usage during purge operations by flushing cache (#​4905)
• Return an “Account not enabled” error when trying to access JetStream via the system account (#​4910)
• Reduce the number of blocks loaded into memory when doing linear scans (#​4916)

Leafnodes

• Mapping updates on reload for the global account are now propagated to leafnodes correctly (#​4937)
• Leafnode authorization now supports nkeys (#​4940)

MQTT

• Fixed an out-of-date error message on unsupported characters in MQTT topics (#​4903)

OCSP

• Default to Unknown status instead of Good for unknown status assertions (#​4917)
• Fixed OCSP Stapling not resuming for gateways on reload after certs change (#​4943)

Complete Changes

v2.10.7

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.21.5

Dependencies

• github.com/klauspost/compress v1.17.4
• golang.org/x/crypto v0.16.0
• golang.org/x/sys v0.15.0
• golang.org/x/time v0.5.0

Improved

JetStream

• Increase minimum interval for full index.db state writes to reduce contention for high-speed ingest in large streams (#​4858)

Fixed

JetStream

• Corruption of per-subject tracking on recover of bad or missing index.db (#​4851) Thanks to @​oscarwcl for the report!
• Prevent GetSeqFromTime panic in memstore if the last sequence was deleted (#​4853) Thanks to @​andreib1 for the report!
• Protect against bad consumer state and high-memory usage during rollback (#​4857)

Complete Changes

v2.10.6

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.21.4

Dependencies

• github.com/klauspost/compress v1.17.3

Improved

JetStream

• Added in internal filestore state checks on write and recover (#​4804)
• Reduce memory usage for streams with a large subject space (#​4806)
• Only gather subject filters if we need them (#​4820) Thanks to @​svenfoo for the contribution!
• Add pre-check when expected-last-subject-sequence header is present (#​4827)
• Avoid resetting WAL in RAFT layer if we already processed the message (#​4830)

Monitoring

• Remove ocsp_peer_cache from varz response when not applicable (#​4829)

Fixed

JetStream

• Only drop firstSeq under DiscardOld policy (#​4802) Thanks to @​davidmcote for the report and contribution!
• Do not allow consumers to be updated if they have been deleted (#​4818) Thanks to @​matevzmihalic for the report!
• Fix potential race when starting the consumer monitor (#​4828)
• Fix race condition in debug print (#​4833)

MQTT

• Fix typo in README (#​4791) Thanks to @​testwill for the contribution!
• Improved large number of MQTT clients on reconnect with retain messages and larger scoped subscriptions (#​4810)

WebSockets

• Fix potential data race in overlapping re-use of buffers (#​4811) Thanks to @​oscarwcl for the report!

Complete Changes

v2.10.5

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.21.4

Dependencies

• golang.org/x/crypto v0.15.0
• golang.org/x/sys v0.14.0
• golang.org/x/time v0.4.0
• github.com/nats-io/jwt/v2 v2.5.3

Improved

General

• Remove places where using time.After could cause GC pressure (#​4756)

JetStream

• Remove unused Observer const, add unit test to check observer applies (#​4727)
• Throttle writeFullState from separate goroutine (#​4731)
• Reduce memory usage with lots of subjects in filestore (#​4742)
• Resiliency when doing lots of conditional updates to a KV and restarting servers (#​4764)
• ​​General stability and consistency improvements for clustered streams with failure offsets during server restarts (#​4777)
• Improve code comments for Raft subsystem (#​4724)
• Optimize linear scan when looking by comparing the first seq in a block (#​4780)
• Move filestore cleanup to separate goroutine to make non-blocking (#​4782)
• Move deletion of filestore files to separate goroutine to make non-blocking (#​4783)

Monitoring

• Better check for standalone mode when determining to send statsz (#​4757)

MQTT

• Add "clean" flag in trace message (#​4740)

WebSocket

• ​​Check for /leafnode suffix path on leaf WebSocket connection (#​4774)

Fixed

Accounts

• Fix panic in JWT permissions template handling (#​4730)

Leafnode

• Fix subpath concatenation used for WebSocket remote connect URL (#​4770) Thanks to @​yoadey for the report!

JetStream

• Remove the state check in the runAs loops except for runAsLeader (#​4725)
• Make sure to properly remove meta files for filestore after conversion from 2.9.x to 2.10.x (#​4733)
• Make sure we check limits when scaling up a stream (#​4738)
• Improve estimation on full state allocations to avoid reallocations in filestore (#​4743)
• Make access to message block first and last sequence consistently use atomics (#​4744)
• Fix DiscardNew exceed bytes calculation (#​4772) Thanks to @​MauriceVanVeen for the contribution! Thanks to @​davidmcote for the report!
• Fix data race and possible panic when compacting (#​4773, #​4776)
• Fix panic in fileStore.Stop() (#​4779)

MQTT

• Rapid load-balanced (re-)CONNECT to cluster causes races (#​4734)
• Potential deadlock between JS API and mqttDeliverMsgCbQoS0 (#​4760)

WebSocket

• Partial writes may lead to disconnect (#​4755)

Complete Changes

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.