- - JetStream performance upgrades: purging now loads only relevant filestore blocks, optimized filtered load paths, max mem/file store limits can be raised via config reload, stream leaders can catch up from snapshots, and consumer max‑ac...
- - ACL and leafnode security hardening: no‑auth user restricted to client connections, overlapping wildcard deny patterns enforced, multiple leafnode ACL and panic fixes, and MQTT JWT correctly sent to auth callout.
- - Additional stability fixes: correct subject subscription during stream scaling, filestore cache eviction tuned, WebSocket fast‑path uses dedicated no‑auth user, and various other bug fixes.
Release v2.12.7
Official NATS changelog summary with source attribution, release tags, and community reactions.
Track this NATS release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this NATS release note into a weekly digest for the tools you actually use.
Create digestMore NATS changelog updates
Added Leafnodes support with a configurable dial timeout option for high‑latency links
Upgrade to Go 1.25.12 and bump critical dependencies (klauspost/compress v1.19.2, golang.org/x/crypto v0.55.0).
Decoupled Raft transport and increased disk concurrency (now configurable) with several JetStream performance and memory optimizations;