Product updates

Get the latest updates on features, fixes and improvements.

838 results

  • Nov 19, 2025

    Karapace version 5.0.3

    Karapace has been updated to version 5.0.3 with fixes that improve protobuf handling and message consumption.

    Improved

    • Protobuf schemas now use absolute runtime paths when compiled, ensuring that generated *_pb2.py modules load correctly across different runtime environments.

    Fixed

    • Fixed protobuf decoding failures that caused messages to appear empty or not load in the Kafka Topic Catalog and REST API.
    • Fixed an error where protobuf keys that could not be decoded resulted in an Unprocessable Entity response. Karapace now falls back to binary decoding for the key.
    • Fixed errors that caused protobuf-formatted messages to fail when fetched through the API or the Aiven Console.

    For more information, see the Karapace 5.0.3 release notes.

  • Nov 18, 2025

    • New
    • Aiven for Valkey™

    Aiven for Valkey™ version 8.1

    Aiven for Valkey™ version 8.1 is now available on the Aiven Platform. It introduces multiple improvements on top of version 8.0, including:

    Performance improvements

    • New hashtable implementation: Reduces the average memory needed for key-value pairs and the number of random memory accesses. It also improves throughput by approximately 10% on pipeline workloads when not using I/O threads.
    • Iterator prefetching: Up to 3.5x faster when iterating over the key set by using prefetching techniques.
    • Various command optimizations: Commands such as ZRANK, ZADD, PFMERGE, PFCOUNT, and BITCOUNT were optimized to execute faster.

    Observability improvements

    • Extending the slowlog to commandlog: The new COMMANDLOG feature gives you better visibility into end-to-end latency.
    • Improved latency insights: The new LATENCY LATEST command reports on the latest collected latency events.

    Other improvements

    • Conditional updates: The introduction of conditional updates using the SET IFEQ semantics.

    Upgrade to version 8.1 at your earliest convenience to ensure you use the most robust and secure version available.

    See the Valkey 8.1 release notes for more details.

  • Nov 13, 2025

    • Improved
    • Aiven for Apache Kafka® Connect

    Iceberg sink connector updated to version 1.10.0

    The Iceberg sink connector for Aiven for Apache Kafka® Connect has been updated to use Apache Iceberg 1.10.0. The update includes security fixes, dependency updates, and improved support for Google Cloud Platform (GCP).

    Key changes include the following:

    • Added support for the BigQuery metastore catalog to integrate with Google BigQuery.
    • Added Google Cloud authentication support, including Application Default Credentials and service account key files.
    • Added support for multiple Google Cloud Storage credential prefixes, allowing different credentials per bucket or prefix.
    • Added a new KeyManagementClient for Google Cloud KMS to manage encryption key wrapping and unwrapping.

    For more details, see the Apache Iceberg 1.10.0 release notes.

    To learn how to use the connector, see the Iceberg sink connector documentation.

  • Nov 12, 2025

    • New
    • Aiven Terraform provider

    Aiven Provider for Terraform version 4.47.0 now available

    This version supports write-only passwords in the aiven_clickhouse_user resource with the password_wo field. This provides secure management of passwords without storing them in the state file.

    There are also 3 new data sources that help you get details without using another tool like the Aiven Console. The aiven_service_plan and aiven_service_plan_list data sources give you detailed service plan information. You can use these to get information on the available service plans.

    Additionally, the aiven_organization_user_group_list data source lists all user groups within an organization. This makes it easier to manage user groups and assign them permissions.

    This release also includes regular updates to service configurations, integrations, and endpoints. For more details on fixes and updates, view the complete Aiven Provider for Terraform changelog.

  • Nov 12, 2025

    New Developer plan for Aiven for PostgreSQL® services

    Aiven has introduced a new pricing plan for Aiven for PostgreSQL® services. Starting at $8 USD, the Developer plan offers more storage, so you can scale up your free PostgreSQL service in a cost-effective way. Unlike the Free plan, services on the Developer plan are not automatically powered off if inactive, and this paid plan automatically includes Basic support services.

    More information on the Developer plan is available in the Aiven docs.

  • Oct 24, 2025

    • Improved
    • Aiven for Apache Kafka® Connect

    BigQuery sink connector for Aiven for Apache Kafka Connect® 2.10.0

    The BigQuery sink connector for Aiven for Apache Kafka Connect has been upgraded to version 2.10.0. This release improves schema handling, ingestion reliability, and performance.

    • Added an option to skip fields not defined in the BigQuery schema.
    • Added support for partition decorator syntax in the Storage Write API.
    • Added support for updating table schemas in GCS-to-BigQuery load jobs.
    • Enabled connection pooling for the Storage Write API default stream to improve write performance.
    • Added trace ID propagation to help BigQuery trace connector traffic.

    For configuration instructions, see Create a sink connector from Apache Kafka® to Google BigQuery

    For all releases, see the GitHub repository.

  • Oct 23, 2025

    Aiven for PostgreSQL®: Enhanced password security with SCRAM-SHA-256

    Aiven for PostgreSQL® now defaults to scram-sha-256 password encryption for enhanced security, moving away from the md5 method. scram-sha-256 offers a more robust challenge-response authentication scheme. While md5 is vulnerable to traditional pass-the-hash attacks, scram-sha-256 eliminates this type of vulnerability and offers much better protection against offline password attacks and brute force attacks.

    How this change applies

    • New services (affected): New Aiven for PostgreSQL services in organizations without PGBouncer pools will use scram-sha-256 by default.
    • Existing services (unaffected): All existing services are not impacted by this change.
    • PGBouncer pool organizations (unaffected): New services created in organizations with PGBouncer pools will continue to default to md5.

    Client compatibility: Most modern PostgreSQL client libraries are compatible with scram-sha-256. For authentication issues, consult your driver's documentation or the PostgreSQL list of drivers.

    When to migrate manually

    If your organization has PGBouncer pools tied to specific database users or your services have additional database users created, migrate to scram-sha-256 manually before the next major PostgreSQL version upgrade, when md5 encryption will be deprecated.

    View migration guide and compatibility instructions

    How to troubleshoot authentication issues

    If you experience connection problems with scram-sha-256, you have two immediate options:

    • Revert default: Change pg.password_encryption back to md5 in your service's user_config.
    • Role-specific MD5: For specific roles, create them with md5 secrets directly using CREATE ROLE ... WITH PASSWORD 'md5' ... (PostgreSQL documentation on CREATE ROLE).
  • Oct 20, 2025

    Support for diskless topics in sample data generator

    You can now generate sample data to diskless or classic topics in Aiven for Apache Kafka® services with diskless topics enabled. The quick connect flow in the Aiven Console has also been updated to support diskless topics.
    For more information, see Stream sample data from the Aiven Console. To learn more about diskless topics, see Diskless topics for Apache Kafka®.

  • Oct 9, 2025

    • Security
    • Aiven for Valkey™
    • Aiven for Caching

    CVE-2025-49844 - Redis/Valkey - Lua Use-After-Free Vulnerability

    On October 3rd, 2025, Redis released details on CVE-2025-49844.

    This particular vulnerability could allow an authenticated user to obtain remote code execution using a specially crafted Lua script.

    This affects all Redis and Valkey versions that have Lua scripting support.

    This issue is resolved in:

    • Redis: 8.2.2+, 8.04+, 7.4.6+, 7.2.11+, 6.2.20+
    • Valkey: 8.1.4+, 8.0.6+, 7.2.11+

    On October 8th Valkey 8.0.6 was made available as mandatory maintenance on the Aiven platform. It is recommended that all Valkey customers run this maintenance as soon as possible.

    For those customers running Redis (Aiven for Caching) on the Aiven platform, a patch to 7.2.11 will be released in the coming days. Note that Aiven for Caching is end-of-life on the Aiven platform and all running instances will be decommissioned starting on October 15th, 2025.