Cruise Control 3.1.0 is the first release under the Linux Foundation.

⚠️ Important:

• This release continues from version 2.5.146. The 3.0.x line is a separate fork for internal LinkedIn builds and is not related.
• The license has been updated from BSD 2-Clause to Apache License 2.0.
• Maven artifacts are now published to Maven Central under the io.cruise-control namespace. Artifacts are no longer published to LinkedIn's JFrog Artifactory. Users must update their dependency coordinates accordingly.

Main Changes Since 2.5.146

• Support for Apache Kafka 4.3.1.
• Upgrade Jetty from 9.4.56 to 12.0.39.
• Fix endpoint routing in the webserver.
• Fix Vert.x webserver to respect security settings.
• Fix CORS preflight requests from being rejected when authentication is enabled.
• Fix trusted proxy authorization for realm-qualified usernames.
• Multiple dependency updates addressing security vulnerabilities (Netty, Log4j, commons-io, Jackson).

Maven Artifacts

Available on Maven Central under the io.cruise-control namespace with version 3.1.0:

• io.cruise-control:cruise-control
• io.cruise-control:cruise-control-core
• io.cruise-control:cruise-control-metrics-reporter

Full Changelog: 2.5.146...3.1.0

Cruise Control 3.1.0 is the first release under the Linux Foundation.

⚠️ Important:

• This release continues from version 2.5.146. The 3.0.x line is a separate fork for internal LinkedIn builds and is not related.
• The license has been updated from BSD 2-Clause to Apache License 2.0.
• Maven artifacts are now published to Maven Central under the io.cruise-control namespace. Artifacts are no longer published to LinkedIn's JFrog Artifactory. Users must update their dependency coordinates accordingly.

Main Changes Since 3.1.0-rc1

• Changed license in POM metadata from BSD to Apache 2.0

Maven Artifacts

Available on Maven Central under the io.cruise-control namespace with version 3.1.0-rc2:

• io.cruise-control:cruise-control
• io.cruise-control:cruise-control-core
• io.cruise-control:cruise-control-metrics-reporter

Full Changelog: 3.1.0-rc1...3.1.0-rc2

Cruise Control 3.1.0 is the first release under the Linux Foundation.

⚠️ Important:

• This release continues from version 2.5.146. The 3.0.x line is a separate fork for internal LinkedIn builds and is not related.
• The license has been updated from BSD 2-Clause to Apache License 2.0.
• Maven artifacts are now published to Maven Central under the io.cruise-control namespace. Artifacts are no longer published to LinkedIn's JFrog Artifactory. Users must update their dependency coordinates accordingly.

Main Changes Since 2.5.146

• Support for Apache Kafka 4.3.1.
• Upgrade Jetty from 9.4.56 to 12.0.39.
• Fix endpoint routing in the webserver
• Fix Vert.x webserver to respect security settings
• Fix CORS preflight requests from being rejected when authentication is enabled.
• Fix trusted proxy authorization for realm-qualified usernames.
• Multiple dependency updates addressing security vulnerabilities (Netty, Log4j, commons-io, Jackson).

Maven Artifacts

Available on Maven Central under the io.cruise-control namespace with version 3.1.0-rc1:

• io.cruise-control:cruise-control
• io.cruise-control:cruise-control-core
• io.cruise-control:cruise-control-metrics-reporter

Full Changelog: 2.5.146...3.1.0-rc1

What's Changed

• GHA: artifactory publish workflow: set artifactory key from secrets by @mhratson in #2376
• version bumps for migrate_to_kafka_3_0 branch by @mhratson in #2390

Full Changelog: 3.0.3...3.0.4

What's Changed

  ELR-344856: bump nettyVersion 4.1.100→4.1.118.Final, vertxVersion 4.5.8→4.5.11
  ELR-344856: bump jackson-databind 2.15.2→2.18.4, add jackson-core pin
  ELR-344856: global logback exclude + resolutionStrategy force block
  ELR-344856: bump kafkaVersion 3.5.1→3.5.2

Full Changelog: 3.0.4-RC.0...3.0.4-RC.1

What's Changed

RIOT-1076: Drop unknown metric ids during deserialization instead of throwing
RIOT-1076: Add BROKER_CONNECTION_COUNT and BROKER_CONNECTION_CAPACITY metric types
RIOT-1076: Add optional connectionCapacity to BrokerCapacityInfo and Broker
RIOT-1076: Report broker connection-count and max-connections from socket-server-metrics
RIOT-1076: Thread broker-only aggregator output into Broker.load()
RIOT-1076: Add BROKER_CONNECTION_COUNT to reporter test baseline
cruise-control-metrics-reporter: migrate ContainerMetricUtilsTest off PowerMock onto Mockito-inline
cruise-control: migrate last PowerMock tests to EasyMock partial mocks + reflection
cruise-control: bump EasyMock 4.3 -> 5.4.0 for JDK17 compatibility
cruise-control: open java.base/java.lang to test JVM for OperationFuture reflection
RIOT-1076: HTML-escape raw '>' in BrokerMetricSample v6 javadoc

Full Changelog: 3.0.3...3.0.4-RC.0

What's Changed

• Migrate CruiseControlMetricsReporterTest to TestContainers by @kyguy in #2303
• Migrate AutoCreateTopicTest to TestContainers by @kyguy in #2313
• Removing unnecessary runtime dependency of core: spotbugs-annotations by @akatona84 in #2325
• updating nimbus-jose-jwt to 10.0.2 to address CVE-2025-53864 by @stecurran-est-tech in #2296

Full Changelog: 2.5.145...2.5.146

What's Changed

• updating netty to v. 4.1.118.Final by @stecurran-est-tech in #2292
• Remove support for Java 11 by @JvD-Ericsson in #2308
• Remove ZooKeeper by @egyedt in #2244
• Upgrade Kafka to 4.0.0 by @pnagy-cldr in #2311

New Contributors

• @stecurran-est-tech made their first contribution in #2292
• @pnagy-cldr made their first contribution in #2311

Full Changelog: 2.5.143...2.5.145

What's Changed

• Update README.md to say what versions support Kafka 3.8 by @wushujames in #2275
• Java 17 support by @akatona84 in #2248
• Upgrade kafka to 3.9.1 by @JvD-Ericsson in #2286

New Contributors

• @wushujames made their first contribution in #2275
• @JvD-Ericsson made their first contribution in #2286

Full Changelog: 2.5.142...2.5.143

What's Changed

• Fix ignored broker failure anomalies when self healing is disabled by @bsandeep23 in #2270

Full Changelog: 3.0.2...3.0.3