Sourced from pulsar-client's releases.

v1.14.0

What's Changed

• bump master version to 1.14.0-rc.0 by @​shibd in apache/pulsar-client-node#405
• Fix release workflow and script by @​shibd in apache/pulsar-client-node#404
• Fix message might lost when use listener by @​shibd in apache/pulsar-client-node#406
• Fix segmentation fault when use token auth by @​shibd in apache/pulsar-client-node#407
• Upgrade libraries with security vulnerabilities by @​hrsakai in apache/pulsar-client-node#414
• Fix: Enclose variables in double quotes by @​hrsakai in apache/pulsar-client-node#413
• Support set connectionTimeout param by @​shibd in apache/pulsar-client-node#410
• [fix][client] handle subscriptionRolePrefix properly by @​candu in apache/pulsar-client-node#416
• Support Key-based batcher for producer by @​shibd in apache/pulsar-client-node#418
• Support consumer key-shared policy by @​shibd in apache/pulsar-client-node#420
• [fix][client] prevent garbage collection of token-supplier by @​klaatu01 in apache/pulsar-client-node#412
• [feat][npm publish]exclude unnecessary files to be included in npm package by @​davidkhala in apache/pulsar-client-node#419
• Upgrade brace-expansion to address CVE-2025-5889 by @​massakam in apache/pulsar-client-node#423

New Contributors

• @​candu made their first contribution in apache/pulsar-client-node#416
• @​klaatu01 made their first contribution in apache/pulsar-client-node#412
• @​davidkhala made their first contribution in apache/pulsar-client-node#419

Full Changelog: https://github.com/apache/pulsar-client-node/compare/v1.13.2...v1.14.0

• 8978d5d Ignore src/cert.pem (#425)
• a10b6ae Release v1.14.0
• 9529355 Upgrade brace-expansion to address CVE-2025-5889 (#423)
• a2983fc Create .npmignore (#419)
• 6c01e36 [fix][client] prevent garbage collection of token-supplier (#412)
• 52ab66a Support consumer key-shared policy (#420)
• d3174fa Support Key-based batcher for producer (#418)
• 8b2cfd3 call correct function to set subscription role prefix (#416)
• f25b90d Support set connectionTimeout param (#410)
• d4251d4 Fix: Enclose variables in double quotes (#413)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)