What's Changed

• docs: point 3.x readers at the 4.x migration guide by @nikagra in #1001
• 3.x: preserve OVERLOADED during authentication (DRIVER-1121) by @dkropachev in #1160
• fix: bump jackson to 2.18.11 for CVE-2026-68497 by @nikagra in #1172
• docs: advertise 3.11.5.19 in the 3.x README by @nikagra in #1168
• docs: add a Maven Central badge to the 3.x README by @nikagra in #1198

Full Changelog: 3.11.5.19...3.11.5.20

What's Changed

• fix: release pre-acquired stream ids by @dkropachev in #965
• docs: stop recommending synthesized bind-variable names (DRIVER-902) by @nikagra in #1020
• docs: deprecate the 3.x doc versions and route their readers to 4.x by @nikagra in #997
• build: bump simulacron to 0.14.0.1 by @nikagra in #1050
• refactor: remove dead local-DC contact-point check (DRIVER-201) by @nikagra in #1059
• fix: stop mutating the control reconnection query plan (DRIVER-201) by @nikagra in #1060
• feat: fall back to contact points on control reconnect (DRIVER-201) by @nikagra in #1065
• feat: add resolveAll through Netty's configured resolver (DRIVER-201) by @nikagra in #1073
• fix: bump netty to 4.1.138.Final to remediate CVE-2026-75595 and CVE-2026-75596 by @nikagra in #1097
• docs: build each documented branch's javadoc with the JDK it needs by @dgarcia360 in #1004
• fix: skip an unusable client-route row, keep the refresh (DRIVER-201) by @nikagra in #1061
• docs: add a connectivity section to the core manual by @nikagra in #1130
• docs: publish only 4.18.1.x, 4.19.0.x, 4.19.2.x and 3.11.5.x by @nikagra in #1146
• docs: build scylla-3.11.5.x and scylla-4.19.2.x with MyST by @nikagra in #1156
• docs: fix ScyllaDB Cloud TLS and client routes details by @nikagra in #1151
• docs: stop rewriting links to /stable/ to the built version by @nikagra in #1157
• docs: link the 3.x deprecation banner to the migration page by @nikagra in #1158
• docs: enable TLS in the ScyllaDB Cloud connection example by @nikagra in #1163

Full Changelog: 4.19.2.1...4.19.2.2

What's Changed

• fix: stop depending on synthesized bind-variable names (DRIVER-903) by @nikagra in #1021
• docs: deprecate Java Driver 3.x and announce maintenance mode by @nikagra in #919
• fix: bump netty to 4.1.138.Final for CVE-2026-75595/-75596 by @nikagra in #1098
• docs: note that client routes are 4.x-only (DRIVER-1043) by @nikagra in #1081
• docs: add a connectivity section to the 3.x manual by @nikagra in #1150

Full Changelog: 3.11.5.18...3.11.5.19

What's Changed

• fix(deps): update jackson-databind.version [security] by @renovate[bot] in #934
• build(deps): bump io.netty:netty-handler from 4.1.133.Final to 4.1.135.Final by @dependabot[bot] in #921
• Client config reporting — stage 1 (groundwork): SESSION_ID + DRIVER_CONFIG plumbing by @nikagra in #967
• fix(deps): update dependency at.yawk.lz4:lz4-java to v1.11.1 [security] by @renovate[bot] in #976
• fix(deps): update dependency com.fasterxml.jackson.core:jackson-core to v2.21.4 [security] by @renovate[bot] in #972
• [Snyk] Security upgrade io.netty:netty-handler from 4.1.135.Final to 4.1.136.Final by @dkropachev in #978
• build(deps-dev): bump com.fasterxml.jackson.core:jackson-databind from 2.22.0 to 2.22.1 by @dependabot[bot] in #970
• fix(deps): align Jackson modules with BOM by @dkropachev in #987
• docs: update theme 1.9.3 by @dgarcia360 in #977
• fix(deps): update dependency io.micrometer:micrometer-core to v1.15.12 [security] by @renovate[bot] in #995
• build(deps): bump io.micrometer:micrometer-core from 1.15.4 to 1.15.12 by @dependabot[bot] in #994
• docs: fix multiversion build on old branches (javadoc errors) by @dgarcia360 in #991
• Driver config reporting — stage 2: full DRIVER_CONFIG report by @nikagra in #968

New Contributors

• @annastuchlik made their first contribution in #930

Full Changelog: 4.19.2.0...4.19.2.1

What's Changed

• Client config reporting (3.x) — stage 1 (groundwork): SESSION_ID + DRIVER_CONFIG plumbing by @nikagra in #973
• fix(deps): align Jackson modules with BOM by @dkropachev in #988
• fix: bump netty to 4.1.136.Final and lz4-java to 1.11.1 to remediate CVE-2026-59901 and CVE-2026-59949 by @nikagra in #990
• Client config reporting (3.x) — stage 2: full DRIVER_CONFIG report by @nikagra in #974

Full Changelog: 3.11.5.17...3.11.5.18

What's Changed

• fix: bump jackson from 2.18.6 to 2.18.9 to remediate CVE-2026-54512 through CVE-2026-54518 by @nikagra in #956

Full Changelog: 3.11.5.16...3.11.5.17

What's Changed

• feat: optimize system table queries with column projection (DRIVER-368) by @nikagra in #862
• 3.x: Route SELECT at SERIAL/LOCAL_SERIAL consistency like LWT by @nikagra in #891
• fix: bump netty from 4.1.127 to 4.1.135 to remediate CVE-2026-44249 and CVE-2026-45416 by @nikagra in #927
• fix: cap onRequestError retries at 1 in DefaultRetryPolicy by @nikagra in #929
• 3.x: fail fast on keyspace setup validation failures by @dkropachev in #942
• 3.x: handle synchronous request retry failures by @dkropachev in #943

Full Changelog: 3.11.5.15...3.11.5.16

What's Changed

• Breaking: Drop Java 8 support - Java 11 is now the minimum required runtime by @dkropachev in #900
• Fix prepare cache eviction: skip defensive copy for completed futures by @nikagra in #892
• Merge upstream apache/cassandra-java-driver 4.19.2 and bump version to 4.19.2.0 by @nikagra in #895
• Fix prepared statement cache invalidation on UDT changes by @dkropachev in #904
• fix: validate non-numeric subnet prefixes by @dkropachev
• fix: bump netty to 4.1.135.Final to remediate CVE-2026-42583, CVE-2026-44249 and CVE-2026-45416 by @nikagra in #925
• Fix NPE and channel leak in ChannelPool during reconnection (CUSTOMER-413) by @nikagra and @dkropachev in #928

New Contributors

• @sylwiaszunejko made their first contribution in #914

Full Changelog: 4.19.0.9...4.19.2.0

What's Changed

• fix: resolve control node endpoint after connect via TopologyMonitor API by @dkropachev in #844
• fix: ClientRoutes savePort uses NLB proxy port, preventing node removal on decommission by @dkropachev in #852
• feat: enable shard-awareness with Proxy Protocol v2 in PrivateLink mode by @nikagra in #839
• Resolve control node identity via system.local before initial metadata refresh by @dkropachev in #853
• fix: DNS contact endpoint resolution and control connection reconnection by @dkropachev in #859
• refactor: clarify client route address override naming by @dkropachev in #860
• perf: replace SELECT * with explicit projections in topology monitor queries by @nikagra in #858
• fix: improve driver-side timeout logging with pool/channel diagnostics (4.x) by @nikagra in #883
• 4.x: Route LOCAL_SERIAL statements as LWT requests by @dkropachev in #886
• fix: extend NodeDiagnostics with node state, distance, datacenter and pool size (DRIVER-540) by @nikagra in #887

New Contributors

• @dani-tweig made their first contribution in #868

Full Changelog: 4.19.0.8...4.19.0.9

What's Changed

• fix: route tablet-aware batches via routed statement by @dkropachev in #878
• Fix NPE when closing a pool during initialization by @dkropachev in #864
• fix: replace SimpleStrategy with NetworkTopologyStrategy in integration tests (3.x) by @nikagra in #876

Full Changelog: 3.11.5.14...3.11.5.15