Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 22, 2025

Bumps github.com/nats-io/nats-server/v2 from 2.12.2 to 2.12.3.

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.12.3

Changelog

Refer to the 2.12 Upgrade Guide for backwards compatibility notes with 2.11.x.

Go Version

Dependencies

  • github.com/google/go-tpm v0.9.7 (#7578)
  • github.com/nats-io/nkeys v0.4.12 (#7578)
  • golang.org/x/crypto v0.45.0 (#7578)
  • github.com/klauspost/compress v1.18.2 (#7604)
  • github.com/antithesishq/antithesis-sdk-go v0.5.0-default-no-op (#7604)
  • golang.org/x/crypto v0.46.0 (#7648)
  • golang.org/x/sys v0.39.0 (#7648)

Added

General

  • Added WebSocket-specific ping interval configuration with ping_internal in the websocket block (#7614)

Improved

JetStream

  • The scan for the last sourced message sequence when setting up a subject-filtered source is now considerably faster (#7553)
  • The metalayer will now stage and deduplicate recovery operations at startup, instead of rapidly applying and then undoing conflicting assignments (#7540)
  • Consumer interest checks on interest-based streams are now significantly faster when there are large gaps in interest (#7656)

MQTT

  • Retained messages will now work correctly even when sourced from a different account and has a subject transform (#7636)

Fixed

General

  • WebSocket connections will now correctly limit the buffer size during decompression (#7625, thanks to Pavel Kokout at Aisle Research)

JetStream

  • A protocol error caused by an invalid transform of acknowledgement reply subjects when originating from a gateway connection has been fixed (#7579)
  • The meta layer will now only respond to peer remove requests after quorum has been reached (#7581)
  • Invalid subject filters containing non-terminating full wildcard no longer produce unexpected matches (#7585)
  • A data race when creating a stream in clustered mode has been fixed (#7586)
  • Raft will no longer allow multiple membership changes to take place concurrently (#7565, #7609)

... (truncated)

Commits
  • 450a519 Release v2.12.3
  • 8670ba0 Release v2.12.3-RC.5
  • 08bb9ee Cherry-picks for 2.12.3-RC.5 (#7657)
  • 7bd48a2 [IMPROVED] Consumer interest check with large gap
  • 9be1774 [FIXED] Filestore desync during stream snapshot
  • 97f0c1a Release v2.12.3-RC.4
  • 036a3fd Cherry-picks for 2.12.3-RC.4 (#7652)
  • 6d739fa NRG: Removed leader may reappear in membership
  • d2e57bf [FIXED] mb.compact updates last seq/ts
  • 8e732b2 [FIXED] Filestore idx mismatch & 'no idx present' errors
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.12.2 to 2.12.3.
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Commits](nats-io/nats-server@v2.12.2...v2.12.3)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 22, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 29, 2025

Looks like github.com/nats-io/nats-server/v2 is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Dec 29, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/nats-io/nats-server/v2-2.12.3 branch December 29, 2025 08:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant