Release notes

This page contains the release notes for KurrentDB v26.0.

26.0.3

13 May 2026

This release contains some bug fixes and several backported improvements from the 26.1 short term support release that we wanted to include in the 26.0.x long term support release series.

Backported: Multi-stream Appends Improvements

Multi-stream appends already allow writing to multiple streams in one atomic operation, with an expected version for each stream being written to which must be satisfied for the operation to be accepted. Now expected versions can be specified for streams even if they are not being written to in the operation. e.g. you can write to streamA conditionally upon the version of streamB.

Within a multi-stream append operation, it used to be required that events for a particular stream must be grouped together: it was not possible to write to streamA, then streamB, then streamA in one operation. This limitation has been removed. A client upgrade is necessary as well as a server upgrade.

A new expected version SoftDeleted has been added, which allows the operation to proceed only if the target stream is in a soft deleted state.

Backported: Persistent Subscriptions Stability and Performance Improvements

Persistent subscriptions using the pinned strategies have improved performance under burst load.

Other conditions have been identified and fixed where a persistent subscription may not always resume after a leader election, or after a TCP client (excluding the dotnet TCP client) disconnects and reconnects.

These improvements and fixes are also being backported to the 24.10 series.

#5512)

License Required

The new setting OAuth:DisableCodeChallengeMethodsSupportedValidation disables validation of the code_challenge_methods_supported field in the identity provider's discovery document.

Enable this when using an identity provider such as Microsoft Entra that supports PKCE but does not advertise it in the discovery document.

See the documentation for details.

#5515)

License Required

The OAuth and Ldap plugins are now also able to read configuration settings from environment variables and/or command line options. Previously, and in contrast to all the other configuration options, the OAuth and Ldap plugins could only take their configuration from a file.

#5550)

Publicly trusted certificate authorities are moving away from issuing certificates with the clientAuth EKU, largely driven by changes to the Chrome Root Program policy.

This option disables validation of the presence of the clientAuth EKU when a node connects to another, allowing KurrentDB to be used with new certificates issued by publicly trusted CAs.

See the documentation for details.

#5520)

JavaScript projections can now access the created property on events, which is the ISO 8601 timestamp of when the event was written to the database. This applies to the traditional engine and also the experimental V2 engine.

#5558)

Some queries were being run every 24h for telemetry which would cause a significant spike in memory and disk activity on large databases. The queries checked for the count of streams/categories/event types, the existence of explicit transactions, and the length of the longest streams.

#5623)

• Projections reading event.body no longer fault on events with primitive JSON bodies (numbers, strings, booleans, null, as opposed to objects).

• Projections that return string state, and projections defined without explicit when() handlers, now persist and reload state correctly across restarts instead of faulting.

• Projection state containing NaN or Infinity is now persisted as null (matching JSON.stringify) instead of faulting the projection.

26.0.2

12 March 2026

#5550)

Publicly trusted certificate authorities are moving away from issuing certificates with the clientAuth EKU, largely driven by changes to the Chrome Root Program policy.

This option disables validation of the presence of the clientAuth EKU when a node connects to another, allowing KurrentDB to be used with new certificates issued by publicly trusted CAs.

See the documentation for details.

26.0.1

6 February 2026

#5492)

Under certain conditions a follower or Read Only Replica could fail to join a cluster with a "Data sizes violation" error.

This fix resolves the error condition and allows the node to join the cluster. There is no risk to the integrity of the data.

#5480)

Empty payloads now use stored blocks instead of static Huffman blocks to fix DEFLATE errors with strict GZIP parsers.

26.0.0

16 January 2026

What's new

Find out what's new in this release.

#5428)

When writing empty transactions (write requests with 0 events in) a race condition existed where a projection that had reached the end of its input stream and stopped might not detect the addition of a new event. The new event could remain unprocessed until another event is written to any stream. Subsequent new events written to any stream would allow the projection to continue and process any outstanding events correctly. Writing empty transactions is uncommon but supported by the database.