LoginSign Up
← Back to all sparks
R

RabbitMQ

INFRA · APIS
Velocity5.0

Message broker supporting AMQP, MQTT and STOMP protocols

www.rabbitmq.com ↗

RabbitMQ 4.4 moves to Erlang 28 and tightens OpenID Connect checks, with 4.3 still patched.

message-brokerquorum-queueserlangoidcmaintenance-release
◆Current state
RabbitMQ shipped 4.4.0 on October 28 with full Erlang 28 support and stricter OpenID Connect discovery validation that can break setups with non-compliant identity providers. The 4.3 line keeps receiving maintenance releases: 4.3.6 in September fixed exchange deletion leaving behind bindings that pointed to it, quorum queue membership reconciliation adding too many replicas, and double-counted message store references in classic queue recovery; 4.3.7 followed in October.
◆Where it's heading
Feature work has moved to 4.4 while 4.3 absorbs correctness fixes, many in quorum queues and cleanup paths. The stricter OIDC validation in 4.4 continues the security tightening seen in 4.3.5's encrypted management login tokens.
◆Prediction
Expect 4.4.x patches, likely including fixes for identity providers caught by the stricter OIDC checks, alongside further 4.3.x maintenance.

◆Recent moves

  1. 16d ago

    RabbitMQ 4.4.0

    A feature release with full Erlang 28 support and stricter OpenID Connect discovery validation that can break non-compliant identity providers such as Cloud Foundry UAA. Legacy AMQP 1.0 header parsing is removed.

    View source ↗
  2. 25d ago

    RabbitMQ 4.3.7

    A 4.3 maintenance release fixing consumer state after delivery timeouts and other core bugs.

    View source ↗
  3. 2mo ago

    RabbitMQ 4.3.6 cleans up bindings on exchange deletion

    A 4.3 maintenance release whose main fix matters for topology hygiene: deleting an exchange now removes bindings that pointed to it, with related auto-delete and vhost cleanup cases fixed too. Quorum queue reconciliation also stops adding more replicas than the target.

    View source ↗
  4. 2mo ago

    Encrypted management login tokens, Shovel self-delete TTL

    Billed as a 4.3.x maintenance release, but past the bug-fix head it adds encrypted management-UI login tokens (AES-256-GCM behind a cluster-wide secret), a dedicated authentication log category, conditional ETag requests on GET /api/definitions, and a Shovel that can self-delete after a set duration. Real operator-facing surface arriving in a patch, alongside stricter parsing across AMQP 1.0, MQTT 5.0 and STOMP.

    View source ↗
  5. 3mo ago

    Quorum queues stop dropping metrics after node restart

    Fixes quorum queues in clusters that came through the 3.13 to 4.2 to 4.3 upgrade path silently ceasing to emit metrics and take snapshots after a restart. A migration-path bug, exactly the class of issue the Khepri transition keeps surfacing.

    View source ↗
  6. 3mo ago

    Erlang 27 now the minimum; Raft commit fix

    Raises the minimum Erlang to 27.0 now that OTP 26 is end-of-life — nodes on older releases will not start. Also fixes Raft leaders committing log entries optimistically, another correctness fix in the consensus layer.

    View source ↗