scylla-2026.3.5-candidate-20261104054308
Merge '[Backport 2026.3] storage_service: observe an idle topology wi…
Merge '[Backport 2026.3] storage_service: observe an idle topology wi…
Update ScyllaDB version to: 2026.4.0-rc1
Update ScyllaDB version to: 2026.4.0-rc1
Update ScyllaDB version to: 2026.4.0-rc0
Update ScyllaDB version to: 2026.4.0-rc0
Update ScyllaDB version to: 2026.4.0-rc0
Update ScyllaDB version to: 2026.4.0-rc0
Update ScyllaDB version to: 2026.4.0-rc0
Update ScyllaDB version to: 2026.4.0-rc0
Merge '[Backport 2026.2] alternator: report WarmThroughput and GSI Pr…
Merge '[Backport 2026.2] alternator: report WarmThroughput and GSI Pr…
Update pgo profiles - aarch64
Update pgo profiles - aarch64
service: tablet_allocator: check a migration group with its combined …
service: tablet_allocator: check a migration group with its combined …
Update ScyllaDB version to: 2026.2.9
Update ScyllaDB version to: 2026.2.9
Fixes: SCYLLADB-4945 Fragment ID for large commitlog entries are only unique per-shard. For a non-corrupt commitlog, this is not a problem, since we replay in descriptor order -> partitioned per shard. But if one or more segments are broken, we could end up with lingering data from one shard sharing id with a subsequent one from another shard. This can cause data corruption or data loss, depending…
Fixes: SCYLLADB-4945 Fragment ID for large commitlog entries are only unique per-shard. For a non-corrupt commitlog, this is not a problem, since we replay in descriptor order -> partitioned per shard. But if one or more segments are broken, we could end up with lingering data from one shard sharing id with a subsequent one from another shard. This can cause data corruption or data loss, depending…
handle_topology_ordered_op() releases the group0 guard before sending its RPCs, but reads _topology.session afterwards. That read is covered neither by the guard's read_apply mutex nor by the term check in start_operation(), so a coordinator which lost leadership in that window can pick up the session installed by a later, unrelated operation. Replicas accept the RPC because the session exists and…
handle_topology_ordered_op() releases the group0 guard before sending its RPCs, but reads _topology.session afterwards. That read is covered neither by the guard's read_apply mutex nor by the term check in start_operation(), so a coordinator which lost leadership in that window can pick up the session installed by a later, unrelated operation. Replicas accept the RPC because the session exists and…
Fixes: SCYLLADB-4525 The timeout handling in active_segmentwill, on fail abandon a pending new_segment call, which will (probably) still finish eventually. However, if the odds play against us, we could end up with it finishing when another segment has already been added as active. This is particularly true on large allocation, where we restore segment state and can thusly end up leaving an alloca…
Fixes: SCYLLADB-4525 The timeout handling in active_segmentwill, on fail abandon a pending new_segment call, which will (probably) still finish eventually. However, if the odds play against us, we could end up with it finishing when another segment has already been added as active. This is particularly true on large allocation, where we restore segment state and can thusly end up leaving an alloca…
Merge '[Backport 2026.2] alternator: keep a retained CDC log out of L…
Merge '[Backport 2026.2] alternator: keep a retained CDC log out of L…
Merge '[Backport 2026.3] cql3: validate compaction sub-options for vi…
Merge '[Backport 2026.3] cql3: validate compaction sub-options for vi…
A node whose bootstrap or replace fails is rolled back by the topology coordinator through left_token_ring, and finish_left_token_ring_transition removes it from group0 and bans it. The joining node is racing that: it either observes its own failed request and aborts startup with the message the test expects, or receives the ban notification first and terminates on that instead. Both are legitimat…
A node whose bootstrap or replace fails is rolled back by the topology coordinator through left_token_ring, and finish_left_token_ring_transition removes it from group0 and bans it. The joining node is racing that: it either observes its own failed request and aborts startup with the message the test expects, or receives the ban notification first and terminates on that instead. Both are legitimat…
Update ScyllaDB version to: 2026.2.7