Cruise Control 3.1.0 is the first release under the Linux Foundation.

⚠️ Important:

• This release continues from version 2.5.146. The 3.0.x line is a separate fork for internal LinkedIn builds and is not related.
• The license has been updated from BSD 2-Clause to Apache License 2.0.
• Maven artifacts are now published to Maven Central under the io.cruise-control namespace. Artifacts are no longer published to LinkedIn's JFrog Artifactory. Users must update their dependency coordinates accordingly.

Main Changes Since 2.5.146

• Support for Apache Kafka 4.3.1.
• Upgrade Jetty from 9.4.56 to 12.0.39.
• Fix endpoint routing in the webserver
• Fix Vert.x webserver to respect security settings
• Fix CORS preflight requests from being rejected when authentication is enabled.
• Fix trusted proxy authorization for realm-qualified usernames.
• Multiple dependency updates addressing security vulnerabilities (Netty, Log4j, commons-io, Jackson).

Maven Artifacts

Available on Maven Central under the io.cruise-control namespace with version 3.1.0-rc1:

• io.cruise-control:cruise-control
• io.cruise-control:cruise-control-core
• io.cruise-control:cruise-control-metrics-reporter

Full Changelog: 2.5.146...3.1.0-rc1