v2.10.3

What's Changed

• build(deps): bump shedlock.version from 6.3.0 to 7.6.0 by @dependabot[bot] in #3019
• build(deps): bump org.checkerframework:checker-qual from 3.42.0 to 3.53.1 by @dependabot[bot] in #3022
• Fix topic promotion in coral ui by @muralibasani in #3025
• Release 2.10.3 Fix topic promotion by @muralibasani in #3026

Full Changelog: v2.10.2...v2.10.3

v2.10.2

What's Changed

• Updating SSO - enable csrf by @muralibasani in #2940
• build(deps-dev): bump msw from 2.7.5 to 2.10.2 in /coral by @dependabot[bot] in #2941
• build(deps-dev): bump prettier from 3.5.3 to 3.6.2 in /coral by @dependabot[bot] in #2942
• build(deps-dev): bump react-aria from 3.39.0 to 3.41.1 in /coral by @dependabot[bot] in #2943
• build(deps-dev): bump glob from 11.0.2 to 11.0.3 in /coral by @dependabot[bot] in #2944
• build(deps-dev): bump lint-staged from 16.0.0 to 16.1.2 in /e2e by @dependabot[bot] in #2946
• build(deps-dev): bump prettier from 3.5.3 to 3.6.2 in /e2e by @dependabot[bot] in #2947
• build(deps-dev): bump @playwright/test from 1.52.0 to 1.53.1 in /e2e by @dependabot[bot] in #2948
• build(deps): bump org.apache.kafka:kafka-clients from 3.9.0 to 3.9.1 in /cluster-api by @dependabot[bot] in #2939
• Add support for oauthbearer kafka protocol by @muralibasani in #2958
• build(deps-dev): bump eslint-import-resolver-typescript from 4.4.1 to 4.4.4 in /coral by @dependabot[bot] in #2953
• build(deps-dev): bump @playwright/test from 1.53.1 to 1.54.1 in /e2e by @dependabot[bot] in #2960
• build(deps): bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 in /cluster-api by @dependabot[bot] in #2959
• deps: Update jest environment and tests by @programmiri in #2980
• Fix delete user from register users table by @muralibasani in #2981
• build(deps-dev): bump eslint-config-prettier from 10.1.5 to 10.1.8 in /e2e by @dependabot[bot] in #2964
• build(deps-dev): bump @types/lodash from 4.17.16 to 4.17.20 in /coral by @dependabot[bot] in #2965
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #2977
• build(deps): bump actions/setup-java from 4.7.1 to 5.0.0 by @dependabot[bot] in #2979
• build(deps): bump actions/cache from 4.2.3 to 4.3.0 by @dependabot[bot] in #2987
• build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by @dependabot[bot] in #2985
• build(deps): bump react-hook-form from 7.54.2 to 7.61.1 in /coral by @dependabot[bot] in #2970
• build(deps): Update zod to latest version for v3 by @programmiri in #2991
• build(deps): Update react-router-dom by @programmiri in #2992
• build(deps): Update react to v19 by @programmiri in #2994
• build(deps): Update aquarium by @programmiri in #2995
• build(deps): bump pnpm/action-setup from 4.1.0 to 4.2.0 by @dependabot[bot] in #2996
• Updating topic sync when config changes by @muralibasani in #3001
• Cluster service load ssl params by @roshini-aiven in #3005
• Spring upgrade by @muralibasani in #3010
• build(deps): bump org.projectlombok:lombok from 1.18.36 to 1.18.42 by @dependabot[bot] in #3015
• build(deps-dev): bump org.jacoco:jacoco-maven-plugin from 0.8.12 to 0.8.14 by @dependabot[bot] in #3013
• build(deps-dev): bump org.assertj:assertj-core from 3.27.3 to 3.27.7 by @dependabot[bot] in #3012

New Contributors

• @roshini-aiven made their first contribution in #3005

Full Changelog: v2.10.1...v2.10.2

v2.10.1

Date: June 13, 2025

Overview :

Overview

Klaw version 2.10.1 is a patch release which fixes couple of user flows while a user is onboarding with Single sign on.

Issues

When a user logs in with Entra ID :

• After logging in with Entra ID successfully, new users are redirected to the path /login/oauth2/code/sso?code=... and see an error page
• E-mail field not prefilled in the signup form
• Full name validation breaking existing users with parenthesis in names
  #2926

Upgrade

To upgrade to this release, download the package from https://github.com/aiven/klaw/releases/tag/v2.10.1 and follow the instructions on Klaw documentation to upgrade. You can also refer to the README file for information.

Contributors

The below contributors have contributed to this release:

• Emmanuel, @nosahama
• Mirjam Aulbach, @programmiri
• Aindriú Lavelle, @aindriu-aiven
• Murali Basani, @muralibasani

Full Changelog: v2.10.0...v2.10.1

v2.10.0

Date: 15 April, 2025

Overview

Klaw version 2.10.0 is a minor release with security updates and several improvement. With v2.10.0, users with the role SUPERADMIN will have access to the new React UI for certain screens.

🛡️ Security updates

• Default superadmin password removed from application configuration, it is required now to be configured on startup.
• Discourage and warn users from usage of PLAINTEXT as protocol (UI change).
• Update rules for passwords.
• Delete unused, old dependency (owl carousal-js)
• Add API permission check on testClusterApiConnection as this should be elevated for administrators only.
• Remove deprecated and unused parameters from API calls.
• Change permission to add/update super admin users (only super admin can do so).
• Upgrade encryption to BCrypt for password storage, also no longer sends plain text passwords to users on initial creation.
• Change emails for new user registration so that they do not get sent a plaintext password in their email.
• Re-enable and correctly configured CSRF protection in both backend and frontend (Angular as well as React).

⚠️ Rollback notes

This release updates password hashing to use bcrypt for improved security. If you rollback to Klaw 2.9.0 or earlier, users may not be able to log in with passwords created or changed in 2.10.0.

• Older versions do not support bcrypt, so bcrypt-hashed passwords will fail validation.
• In such cases, affected users may need to reset their passwords manually.

Recommendation: Avoid rolling back unless absolutely necessary. If you must, ensure you have a process in place to assist users with password resets.

New features

• React UI:
  With this release, superadmin user will have access to the new UI.

Improvements

• Improves cross DB compatibility by using jpq
• Improve Claim experience
• Enable viewing Topic events based on offset range and partition

Bug fixes

• Prevent orphan ACl without service user being created
• Fix validation to parse partitions as ints first
• Avoid NullPointerException when trying to login with Keycloak SSO
• Avoid possible NullPointerException when trying to login with Google SSO
• Fix NullPointerException when trying to read topic events from coral UI

Upgrade

To upgrade to this release, download the package from https://github.com/aiven/klaw/releases/tag/v2.10.0 and follow the instructions on Klaw documentation to upgrade. You can also refer to the README file for information.

Contributors

• @huGgW made their first contribution in #2391 🎉
• @khatibtamal made their first contributions 🎉 in #2486, #2518, #2520, #2530, #2551, #2614
• @luke-zhou made their first contribution in #2517 🎉
• @Enrique-Giottonini made their first contribution in #2547 🎉
• Mirjam Aulbach, @programmiri
• Aindriú Lavelle, @aindriu-aiven
• Murali Basani, @muralibasani

Full Changelog: v2.9.0...v2.10.0

v2.9.0

Date: 8th of April, 2024

Overview

Klaw version 2.9.0 is a minor release with several new features and improvements.

New features

• JSON Schema support in Coral and Angular UIs

• BETA Release of ACL Claim functionality

  • This feature has some limitations please view all the details here

• React UI:
  In this release, we have redesigned some key user interfaces using React to enhance user experience and provide a more intuitive design:

  • Feedback Form now available to directly give us feedback on Klaw!
  • Add Cluster Type on Clusters view to Coral

Improvements

• Admin Guards on all APIs for roles for enhanced security and enhanced user feedback
• Delete Service Users when ACLs are deleted
• Declined User requests can be reused

Bug Fixes

• Allow creating new users with an email address as a username
• Fix the default schema version on promote to be an informational message in angular UI
• Fix unused script and unsafe links
• Fix target=blank vulnerability

Upgrade

To upgrade to this release, download the package from https://github.com/aiven/klaw/releases/tag/v2.9.0 and follow the instructions on Klaw documentation to upgrade. You can also refer to the README file for information.

Database upgrade

This release adds a new primary key to the kwregisterusers table, allowing previously denied usernames to be reused in future requests.

Contributors

The below contributors have contributed to this release:

• Mirjam Aulbach, @programmiri
• Aindriú Lavelle, @aindriu-aiven
• Mathieu Anderson, @mathieu-anderson
• Murali Basani, @muralibasani
• Sergey Nuyanzin, @snuyanzin
• DocEmmetBrown

Full Changelog: v2.8.0...v2.9.0

v2.8.1

Date: 21st of March, 2024

Overview :

Overview

Klaw version 2.8.1 is a patch release which fixes an issue when creating new users with username being a email id as pattern.

Issue

When creating new users, the username field is supposed to accept both email ids and normal usernames. There was a bug introduced in 2.8.0 which is fixed now in this release.

Upgrade

To upgrade to this release, download the package from https://github.com/aiven/klaw/releases/tag/v2.8.1 and follow the instructions on Klaw documentation to upgrade. You can also refer to the README file for information.

Contributors

The below contributors have contributed to this release:

• Mirjam Aulbach, @programmiri
• Aindriú Lavelle, @aindriu-aiven
• Mathieu Anderson, @mathieu-anderson
• Sergey Nuyanzin, @snuyanzin
• Murali Basani, @muralibasani
• Josep Prat, @jlprat
• Roope Karhapaa, @roope-kar
• Samuli Suortti, @SmuliS

Full Changelog: v2.8.0...v2.8.1

v2.8.0

Date: 8th of February, 2024

Overview

Klaw version 2.8.0 is a minor release with several new features and improvements.

New features

• Feedback Form to help gather community feedback for Klaw

• New Klaw documentation site structure implemented

• React UI:
  In this release, we have redesigned some key user interfaces using React to enhance user experience and provide a more intuitive design:

  • Topic Catalogue:

    • Filter by Topic Type: Filter by Producer or Consumer to get a list of topics your team produces to or consumes from.
      

  • Activity Log: See an audit trail of all requests in Coral
    

  • Dashboard Landing Page: Now on login users get brought to the coral Dashboard page complete with Analytics
    

  • View Clusters
    

  • View Environments
    

Improvements

• #2182 A new optional permission to only allow certain users create the initial topic
• #2244 Allow Deletion of a Superadmin User
• #2203 & #2218 & #2223 Redesigned Login, Forgot Password and Sign Up Pages
  

Bug Fixes

• #2238 & #2241 Fix analytics for the dashboard and add 30/60/90 day drop down in coral
• #2213 New User email only sent to the user directly now
• #2188 Version number for data migration is now stored internally instead of through the application.properties
• #2168 Activity log fix to show approved requests

Upgrade

To upgrade to this release, download the package from https://github.com/aiven/klaw/releases/tag/v2.8.0 and follow the instructions on Klaw documentation to upgrade. You can also refer to the README file for information.

This release uses the migration utility to add a new fine grain permission to the database.

Contributors

The below contributors have contributed to this release:

• Mirjam Aulbach, @programmiri
• Aindriú Lavelle, @aindriu-aiven
• Mathieu Anderson, @mathieu-anderson
• Murali Basani, @muralibasani
• Sergey Nuyanzin, @snuyanzin
• Josep Prat, @jlprat
• Roope Karhapaa, @roope-kar
• Samuli Suortti, @SmuliS

New Contributors 🎉 🎉 🎉

• Ruslan Mykoliuk, @MovieTone made their first contribution in #2174

Full Changelog: v2.7.0...v2.8.0

v.2.7.0

Date: 13th of December, 2023

Overview

Klaw version 2.7.0 is a minor release with several new features and improvements.

New features

• React UI:
  In this release, we have redesigned some key user interfaces using React to enhance user experience and provide a more intuitive design:

  • Pending requests:

    • Show amount of pending requests in the side navigation
      
    • Notify of pending request in the top navigation and add quick links to each Approval table
      https://github.com/Aiven-Open/klaw/assets/20607294/b39c98c0-8de5-4e12-b3bb-ca0934eaf08f

  • User information:

    • User Profile (view and update)
      
    • Change Password
      
    • Tenant information
      

  • Configuration overview:

    • View Users
      

    • View Teams

• Custom option to view Topic contents: On the Topic Overview under 'Topic Contents' kafka messages can be viewed. With this custom option, users can type in a partitionid and number of offsets to view
• Edit schema requests: Allowing users to edit the submitted Schema requests

Improvements

• #1812 Option to view user's choice of topic contents
• #1951 Cache update when environments are added
• #2015 Windows build capability
• #2060 Notify producers and consumers when there are schema changes on the topic
• #2062 Load user in lazy way
• #2063 Scheduler to detect topic changes between Kafka cluster & Klaw and notify admins

Bug Fixes

• #1988 Topics per cluster graph was not showing up properly
• #2044 Pom fix for Coral build

Upgrade

To upgrade to this release, download the package from https://github.com/aiven/klaw/releases/tag/v2.7.0 and follow the instructions on Klaw documentation to upgrade. You can also refer to the README file for information.

Change log

Full Changelog: v.2.6.0...v2.7.0

Contributors

The below contributors have contributed to this release:

• Mirjam Aulbach, @programmiri
• Aindriú Lavelle, @aindriu-aiven
• Mathieu Anderson, @mathieu-anderson
• Sergey Nuyanzin, @snuyanzin
• Murali Basani, @muralibasani
• Josep Prat, @jlprat
• Roope Karhapaa, @roope-kar
• Samuli Suortti, @SmuliS

New Contributors 🎉 🎉 🎉

• (@dotarjun)
• (@stealthghost)
• (@gschmutz)

v2.6.1

Date: 22nd of November, 2023

Overview

Klaw version 2.6.1 is a patch release which removes old analytics code that is not being used.

Issue

Please see our blog post for this release Release Blog Post

Upgrade

To upgrade to this release, download the package from https://github.com/aiven/klaw/releases/tag/v2.6.1 and follow the instructions on Klaw documentation to upgrade. You can also refer to the README file for information.

Contributors

The below contributors have contributed to this release:

• Mirjam Aulbach, @programmiri
• Aindriú Lavelle, @aindriu-aiven
• Mathieu Anderson, @mathieu-anderson
• Sergey Nuyanzin, @snuyanzin
• Murali Basani, @muralibasani
• Josep Prat, @jlprat
• Roope Karhapaa, @roope-kar
• Samuli Suortti, @SmuliS

New Contributors 🎉 🎉 🎉

• (@csengineer1990)
• (@WangGithub0)
• (@ScalarJerk)
• (@Rawshansharma)
• (@Devrishi-Dutta)
• (@morgoth9808)
• (@basavarajakj)

Full Changelog: v.2.6.0...v2.6.1

v2.5.2: Version update to release 2.5.2 (#2008)

Date: 22nd of November, 2023

Overview

Klaw version 2.5.2 is a patch release which removes old analytics code that is not being used.

Issue

Please see our blog post for this release here

Contributors

The below contributors have contributed to this release (2.5.0 and 2.5.1 and 2.5.2):

• Mirjam Aulbach, @programmiri
• Aindriú Lavelle, @aindriu-aiven
• Mathieu Anderson, @mathieu-anderson
• Sergey Nuyanzin, @snuyanzin
• Murali Basani, @muralibasani
• Josep Prat, @jlprat
• Roope Karhapaa, @roope-kar
• Samuli Suortti, @SmuliS

New Contributors

• 🎉 Arpit Sodani (@arpitsodani15) made their first contribution in #1421
• 🎉 Sadaf Ahmed ( @Sadaf-A) made their first contribution in #1569

Full Changelog: v2.5.1...v2.5.2