What's new.

• Update to JVM 25 and Jetty 12.1
• Introduce data lineage derived from schema registry metadata
• Introduce new 'Clone to topic' function for message replay without modification
• Introduce wildcard '*' action for RBAC policies
• Introduce SNAPSHOT_CONFIG_PERIOD_MS to provide configurable config period
• Introduce JETTY_SECURE_COOKIE flag to require secure cookies when ssl terminated at proxy
• Improve UI behavior and performance with large datasets and long field-names
• Improve broker and topic filtering when viewing consumer groups
• Improve tenant materialization performance
• Fix empty consumer count by removing simple consumers from the empty consumer total
• Fix simple consumer topic summary information
• Fix OpenID Connect authentication error when presented with an overage claim
• Fix sort-by columns for consumer topic, host, and broker views
• Fix potential OOM when supporting a high number of concurrent users
• Fix simple consumer offset-reset function

CVE Resolved

• CRITICAL CVE-2026-4140 org.apache.mina:mina-core
• CRITICAL CVE-2026-4163 org.apache.mina:mina-core
• CRITICAL CVE-2026-4277 org.apache.mina:mina-core
• CRITICAL CVE-2026-4277 org.apache.mina:mina-core
• CRITICAL CVE-2026-4202 org.apache.opennlp:opennlp-tools
• CRITICAL CVE-2026-4068 org.apache.opennlp:opennlp-tools
• HIGH CVE-2026-4258 io.netty:netty-codec
• HIGH CVE-2026-4257 io.netty:netty-codec-dns
• HIGH CVE-2026-4258 io.netty:netty-codec-http
• HIGH CVE-2026-4258 io.netty:netty-codec-http
• HIGH CVE-2026-4258 io.netty:netty-codec-http2
• HIGH CVE-2026-34480 org.apache.logging.log4j
• HIGH CVE-2026-34478 org.apache.logging.log4j
• HIGH CVE-2026-4244 org.apache.opennlp:opennlp-tools
• HIGH CVE-2026-233 org.eclipse.jetty:jetty-http
• MEDIUM CVE-2026-4258 io.netty:netty-codec-http
• MEDIUM CVE-2026-4258 io.netty:netty-codec-http
• MEDIUM CVE-2026-4258 io.netty:netty-codec-http
• MEDIUM CVE-2026-4141 io.netty:netty-codec-http
• MEDIUM CVE-2026-686 io.vertx:vertx-core
• MEDIUM CVE-2026-3447 org.apache.logging.log4j:log4j-1.2-api
• MEDIUM CVE-2026-3447 org.apache.logging.log4j:log4j-core
• MEDIUM CVE-2026-3447 org.apache.logging.log4j:log4j-core
• MEDIUM CVE-2026-3448 org.apache.logging.log4j:log4j-core
• MEDIUM CVE-2024-676 org.eclipse.jetty:jetty-http
• LOW CVE-2026-4257 io.netty:netty-handler-proxy
• LOW CVE-2025-1114 org.eclipse.jetty:jetty-http

Kpow

Added

• Added a new "Snapshot age" table in the admin performance UI to better debug Kpow's internal compute

Fixed

• Fixed regression in Kafka OAuth authentication

Changed

• Improved logging around internal observation and materialization for better debugging
• Improve UI performance for large Kafka deployments
• Revert base Docker image of main tag back to Java17 from Java21

Kpow

Added

• Data inspect workers to handle concurrent queries
• Strimzi support
• Code folding in the Schema Registry editor for Avro and JSON schemas.
• Base64 deserializer in data inspect

Fixed

• Empty consumers reset offset actions available in UI
• Empty consumer lag calculation
• Auto SerDes: allow fallback to String when data policies applied

Changed

• Added simple consumers by dimension in UI
• Added simple consumer offset management actions
• Added deploymentAnnotations on Helm Charts
• Sort tenancy overview UI alphabetically and add sorting options
• Consumer offset management: add controls to reset a topic to start, commit or end positions
• The Kafka internal topic __transaction_state is included in Kpow's hide_internal_resources tenant

Flex

Fixed

• Job chart dropdown presets now use record reads & writes for sorting

Changed

• Added deploymentAnnotations on Helm Charts

Kpow v95.3

Fixed

• Fix memory leak impacting customers running with in-memory compute

Flex v95.3

Fixed

• Fix memory leak impacting customers running with in-memory compute

Kpow v95.2

Added

• Support for simple consumer group offset management

Changed

• Update heatmap UI component state colour palette
• Prometheus egress: support the env field for all resource types (ksqlDB, Connect, Schema, Flink, etc)
• Helm: add API configuration options and a new flag to control automatic mounting of service account API credentials (default: false) (Kubernetes docs).

Fixed

• Fixed a bug in the consumer group UI where Empty consumers were not appearing in the Topic dimension
• Fixed advanced filters in the consumer groups UI by dimension
• Data inspect: fix regression handling results with deserializaiton errors

Flex v95.2

Changed

• Update heatmap UI component state colour palette
• Add chart/configuration to Job state in Home & Jobs
• Prometheus egress: support the env field for all resource types (ksqlDB, Connect, Schema, Flink, etc)
• Helm: add API configuration options and a new flag to control automatic mounting of service account API credentials (default: false) (Kubernetes docs).

Kpow v95.1

Added

• GCP Integration
  • temurin-ubi build of Kpow now targets GCP MSAK.
  • Due to a bug in Google's GcpBearerAuthCredentialProvider disallowing multiple credential providers on the classpath at once, GCP functionality is provided in a separate build until resolved.
• Data Inspect
  • Data rule support for Confluent Schema Registry SerDes, supports CEL, CEL_FIELD, and JSONata data rules when querying for data
• ksqlDB
  • New KSQLDB_TIMEOUT_MS configuration option. Default=30s
• Access Control
  • Add ENABLE_INTERNAL_TENANT=false environment variable to control the visibility of Kpow’s hide internal resources tenant (simple access control only)

Changed

• Branding
  • Updated logos, icons, and favicons (light + dark mode) across Community Edition and Enterprise.
• Charts
  • Line charts now consistently colour a series across charts on the same page
  • Line charts now support keyboard interaction when focused (left and right arrow keys)
• Tables
  • Consistent alignment for readability. Numeric columns (and their headers) are now right-aligned, all other columns are left-aligned to better distinguish IDs/text from numbers
• Data Inspect
  • Updated the kJQ search keybinding to Cmd + Shift + F / Ctrl + Shift + F
• Connect
  • Improved usability & responsiveness of task stacktrace modal, and added new ‘copy to clipboard’ button
• Performance
  • Improved performance of core materialization engine. Larger deployments of Kpow should see significantly less CPU and memory pressure.

Fixed

• Schema Registry
  • Fixed a bug when observing Karapace Schema Registry schemas
  • Overview filters are now retained when you drill into a subject and navigate back
  • Added support for primitive type name Avro schemas (boolean, int, long, string)
• Metrics
  • Fixed a bug introduced in 94.6 where some aggregated metrics weren’t being published

Flex v95.1

Changed

• Branding
  • Updated logos, icons, and favicons (light + dark mode) across Community Edition and Enterprise.
• Charts
  • Line charts now consistently colour a series across charts on the same page
  • Line charts now support keyboard interaction when focused (left and right arrow keys).
• Tables
  • Consisent alignment for readability. Numeric columns (and their headers) are now right-aligned, all other columns are left-aligned to better distinguish IDs/text from numbers

‍

Kpow v48

• Introduce Live Mode for realtime Kafka resource observation
• Improve Consumer Group Lag visualisations

Platform v94.6

Factor Platform

• First Factor Platform release candidate

Kpow v94.6

Kpow

• Upgrades
  • Upgraded to Kafka Clients 4.1.0 and Confluent Libraries 8.0.0.
  • Updated Confluent Serdes (including Protobuf) to v4.31.1 to resolve security vulnerabilities and improve serialization resilience.
• Enhancements
  • Data Inspect: Expanded kJQ capabilities with new map and select operators.
  • Improved Schema Registry integration: added additional createdAt metadata (supported in Confluent Schema Registry 8.0.0+ or AWS Glue)
  • Improved the Amazon MSK connector BOOTSTRAP environment variable matching condition to ensure all applicable connectors are displayed.
• Bug Fixes
  • Resolved an issue in LDAP auth for creating OBF-obfuscated values.
  • Schema: Fixed a bug that resulted an incomplete list of schemas when using Confluent Schema Registry and SCHEMA_REGISTRY_OBSERVATION_VERSION=2.
  • Schema: Fixed a bug where the schema ID was not updated when selecting different schema versions.
  • Schema Registry integration: Fixed a bug where the schema version ID stat would not update when switching between revisions
  • Data Inspect: Fixed a serialization exception when searching by key mode with AVRO keys.
  • Data Inspect: Fixed incorrect display of large numeric values that exceed the browser's native maximum value.
  • Data Inspect: Fixed raw formatted results overflowing the results container.
  • Data Inspect: Fixed ghost data appearing when closing a tab during a streaming search.
  • Connect: Enhanced summary statistics to display both connector-level and task-level counts separately for Running, Paused, Failed, and Unassigned states.
  • Topology: Fixed missing edges in exported topology diagrams, improving rendering quality for downloaded images.
  • Fixed CVE-2025-49794 security vulnerability in libxml2.

Flex v94.6

Flex

• Integrations
  • Introduced integration with Ververica Platform (Community and Enterprise v2) for native Apache Flink® management and observability within the Factor House ecosystem.
• Bug Fixes
  • Flink clusters in the top-level menu and tenant selector now respect multi cluster configuration ordering.
  • Fixed incorrectly labeled sinks in Job's Inspect > Topology diagram.
  • Increased the timeout when submitting a job, which was incorrectly reporting a failure to start the job.

Kpow v94.5

• Data Inspect Enhancements:
  • Add support for comma-separated kJQ Projection expressions to extract multiple fields in one query.
  • Introduce in-browser search (Ctrl + F) with kJQ filter support.
  • Surface detailed schema metadata per message, including schema IDs and deserializer types.
  • Improve detection of misaligned schemas, poison messages, and deserialization errors.
  • Add alphabetical sorting for message keys and values to improve readability.
  • Stream over 500,000 records smoothly without UI lag.
• kJQ Improvements:
  • Expanded capabilities with new transforms (e.g., parse-json, upper-case, flatten) and functions (within, split, join) for richer data manipulation.
• Consumer Group Management:
  • Fix an issue preventing offset resets for consumer groups with EMPTY member assignments by fetching offsets directly from the AdminClient.
• Cluster & Platform Enhancements:
  • Improve Under-Replicated Partition (URP) detection, even when brokers are offline.
  • Add support for configuring custom serializers and deserializers on a per-cluster basis.
• KRaft Improvements:
  • Improve KRaft tables with better sorting and correct End Offset display.
  • Fix incorrect display of the controller broker in broker details.
  • Add new KRaft-related metrics to Prometheus.
• Bug Fixes:
  • Resolve an edge case in the temporary policy UI display.
  • Fix the Microsoft Teams webhook integration.
  • Correct a buggy textarea in the Data Masking Playground.
  • Fix a regression affecting the ordering of ksqlDB, Schema Registry, and Connect resources in navigation.
  • Fixed Kafka resource ordering so that CONNECT_RESOURCE_IDS, SCHEMA_REGISTRY_RESOURCE_IDS, and KSQLDB_RESOURCE_IDS show in the specified order
• User Interface:
  • Redesign the Help menu with an improved "What's New" section and a direct link to the Slack community.

Flex v94.5

• Bug Fixes:
  • Fixed an issue where Flink SQL jobs were incorrectly applied when selected from the Jobs filter.
  • Fixed overflow of long job names in Jobs Overview tab's Job state chart.
  • Selected jobs now persist in the Jobs filter when navigating back and forth between the Overview and Details tabs.
• User Interface:
  • Improved sorting of jobs with identical names in the Jobs Details tab, with the most recent invocations appearing first.
  • Improved differentiation of jobs with identical names in the Jobs Inspect tab's filter by adding invocation start time to job labels.
  • Improved sorting of JARs with identical names in the Jobs JARs tab, with the most recently uploaded appearing first.

Kpow v94.4

• Topic SerDes inference
  • Fix bug where Auto SerDes failed to infer data when data policies not configured
  • Include UTF-8 String in inference list (as lowest priority)