We routinely upgrade to stay (more or less) current with bug fix releases, and it is that time again. Additionally, it may be necessary make sense to upgrade to Cassandra 5.x in order to get support for Java 17 (T418010), which in turns is needed to upgrade to Bookworm (T357791). When we do upgrade to Cassandra 5, we should do so from the latest 4.1.x.
- aqs
- cassandra-dev
- restbase
- sessionstore
CHANGES.txt
4.1.11 * Fix ant generate-eclipse-files (CASSANDRA-21215) * No need to evict already prepared statements, as it creates a race condition between multiple threads (CASSANDRA-17401) * Disk usage guardrail cannot be disabled when failure threshold is reached (CASSANDRA-21057) * ReadCommandController should close fast to avoid deadlock when building secondary index (CASSANDRA-19564) * Redact security-sensitive information in system_views.settings (CASSANDRA-20856) Merged from 4.0: * Add option to disable cqlsh history (CASSANDRA-21180) * Rate limit password changes (CASSANDRA-21202) * Node does not send multiple inflight echos (CASSANDRA-18866) * Obsolete expired SSTables before compaction starts (CASSANDRA-19776) * Switch lz4-java to at.yawk.lz4 version due to CVE (CASSANDRA-21052) * Restrict BytesType compatibility to scalar types only (CASSANDRA-20982) * Backport fix to nodetool gcstats output for direct memory (CASSANDRA-21037) * ArrayIndexOutOfBoundsException with repaired data tracking and counters (CASSANDRA-20871) * Fix cleanup of old incremental repair sessions in case of owned token range changes or a table deleting (CASSANDRA-20877) * Fix memory leak in BufferPoolAllocator when a capacity needs to be extended (CASSANDRA-20753) * Leveled Compaction doesn't validate maxBytesForLevel when the table is altered/created (CASSANDRA-20570) * Updated dtest-api to 0.0.18 and removed JMX-related classes that now live in the dtest-api (CASSANDRA-20884) * Fixed incorrect error message constant for keyspace name length validation (CASSANDRA-20915) * update shaded cassandra-driver-core to 3.11.5 (CASSANDRA-20904) 4.1.10 * Improve CommitLogSegmentReader to skip SyncBlocks correctly in case of CRC errors (CASSANDRA-20664) * Do not crash on first boot with data_disk_usage_max_disk_size set when data directory is not created yet (CASSANDRA-20787) * Rework / simplification of nodetool get/setguardrailsconfig commands (CASSANDRA-20778) * IntrusiveStack.accumulate is not accumulating correctly (CASSANDRA-20670) * Add nodetool get/setguardrailsconfig commands (CASSANDRA-19552) Merged from 4.0: * Prevent too long table names not fitting file names (CASSANDRA-20389) * Fix IndexOutOfBoundsException in sstablemetadata tool when a range tombstone is a max clustering value (CASSANDRA-20855) * Update Jackson to 2.19.2 (CASSANDRA-20848) * Update commons-lang3 to 3.18.0 (CASSANDRA-20849) * Add NativeTransportMaxConcurrentConnectionsPerIp to StorageProxyMBean (CASSANDRA-20642) * Make secondary index implementations notified about rows in fully expired SSTables in compaction (CASSANDRA-20829) * Ensure prepared_statement INSERT timestamp precedes eviction DELETE (CASSANDRA-19703) 4.1.9 * Grant permission on keyspaces system_views and system_virtual_schema not possible (CASSANDRA-20171) * Fix mixed mode paxos ttl commit hang (CASSANDRA-20514) * Fix paxos mixed mode infinite loop (CASSANDRA-20493) * Optionally skip exception logging on invalid legacy protocol magic exception (CASSANDRA-19483) * Fix SimpleClient ability to release acquired capacity (CASSANDRA-20202) * Fix WaitQueue.Signal.awaitUninterruptibly may block forever if invoking thread is interrupted (CASSANDRA-20084) Merged from 4.0: * Gossip doesn't converge due to race condition when updating EndpointStates multiple fields (CASSANDRA-20659) * Handle sstable metadata stats file getting a new mtime after compaction has finished (CASSANDRA-18119) * Honor MAX_PARALLEL_TRANSFERS correctly (CASSANDRA-20532) * Updating a column with a new TTL but same expiration time is non-deterministic and causes repair mismatches. (CASSANDRA-20561) * Avoid computing prepared statement size for unprepared batches (CASSANDRA-20556) * Fix Dropwizard Meter causes timeouts when infrequently used (CASSANDRA-19332) * Update OWASP dependency checker to version 12.1.0 (CASSANDRA-20501) * Suppress CVE-2025-25193 (CASSANDRA-20504) * Include in source tree and build packages a Snyk policy file that lists known false positives (CASSANDRA-20319) * Update zstd-jni to 1.5.7-2 (CASSANDRA-20453) * Suppress CVE-2024-12801 (CASSANDRA-20412) * Suppress CVE-2024-12798 (CASSANDRA-20408) * Fix autocompletion for role names/user names (CASSANDRA-20175) * Support null column value tombstones in FQL batch statements (CASSANDRA-20397) * Update Zstd library to 1.5.7-1 (CASSANDRA-20367) * Fix premature auto-failing of long-running repairs (CASSANDRA-20312)