Update 4.1.0 release notes

Author: michaelklishin

release-notes/4.1.0.md

@@ -131,6 +131,11 @@ This section can be incomplete and will be expanded as 4.1 approaches its releas
 
    GitHub issue: [#10519](https://github.com/rabbitmq/rabbitmq-server/issues/10519), [#12564](https://github.com/rabbitmq/rabbitmq-server/pull/12564)
 
+ * AMQP 1.0 filters now have capped complexity: filtering on more than 16 properties
+   won't be possible. This is a protection mechanism recommended in the AMQP 1.0 spec.
+
+   GitHub issue: [#13196](https://github.com/rabbitmq/rabbitmq-server/pull/13196)
+
  * Support for Multiple Routing Keys in AMQP 1.0 via `x-cc` Message Annotation.
 
    AMQP 1.0 publishers now can set multiple routing keys by using the `x-cc` message annotation.
@@ -183,11 +188,31 @@ This section can be incomplete and will be expanded as 4.1 approaches its releas
 
    GitHub issue: [#12837](https://github.com/rabbitmq/rabbitmq-server/pull/12837)
 
+ * In a mixed version 4.0/3.13 cluster, dead lettering a message could fail.
+
+   GitHub issue: [#12933](https://github.com/rabbitmq/rabbitmq-server/issues/12933)
+
  * In very rare cases, RabbitMQ could fail to notify stream consumers connected to follower replicas
    about newly committed offsets as quickly as it usually happens for consumers connected to the stream leader.
 
    GitHub issue: [#12785](https://github.com/rabbitmq/rabbitmq-server/pull/12785)
 
+### Bug Fixes
+
+ * Default cluster formation timeout with [Khepri](https://www.rabbitmq.com/docs/metadata-store) now matches that of Mnesia (5 minutes by default).
+
+   Discovered and reported by @evolvedlight.
+
+   GitHub issue: [#13195](https://github.com/rabbitmq/rabbitmq-server/pull/13195)
+
+ * Quorum queues could return a list of members (replicas) with duplicates in some cases.
+
+   GitHub issue: [#13168](https://github.com/rabbitmq/rabbitmq-server/pull/13168)
+
+ * Classic queues with priorities could run into an exception.
+
+   GitHub issue: [#13088](https://github.com/rabbitmq/rabbitmq-server/pull/13088)
+
 
 ### MQTT Plugin
 
@@ -201,20 +226,29 @@ This section can be incomplete and will be expanded as 4.1 approaches its releas
 
 ### CLI Tools
 
+#### Breaking Changes and Deprecations
+
+ * `rabbitmqctl force_reset` is **deprecated** as it is incompatible with Khepri,
+   which will become the default metadata store in RabbitMQ by 4.2.0.
+
+   GitHub issue: [#13217](https://github.com/rabbitmq/rabbitmq-server/pull/13217)
+
 #### Enhancements
 
- * New major version of `rabbitmqadmin`, a CLI tool that targets RabbitMQ's HTTP API, is maturing.
+ * New major version of `rabbitmqadmin`, a CLI tool that targets RabbitMQ's HTTP API, has matured.
    Unlike its predecessor, the tool is distirbuted via GitHub as as a standalone native binary.
 
    There are minor command line interface changes and a slightly different configuration file
-   format ([TOML](https://toml.io/en/) instead of `ini`)
+   format ([TOML](https://toml.io/en/) instead of `ini`).
+
+   Documentation guide: []().
 
    GitHub repository: [`rabbitmq/rabbitmqadmin-ng`](https://github.com/rabbitmq/rabbitmqadmin-ng)
 
  * `rabbitmq-diagnostics check_if_any_deprecated_features_are_used` implementation is now more complete
    (checks for a more deprecated features).
 
-   GitHub issue: [#12675](https://github.com/rabbitmq/rabbitmq-server/pull/12675)
+   GitHub issues: [#12619](https://github.com/rabbitmq/rabbitmq-server/issues/12619), [#12675](https://github.com/rabbitmq/rabbitmq-server/pull/12675)
 
 #### Bug Fixes
 
@@ -256,6 +290,17 @@ This section can be incomplete and will be expanded as 4.1 approaches its releas
 
 ### Management UI
 
+#### Breaking Changes and Deprecations
+
+ * The original HTTP API One True Health Check™ is now a no-op. A comparable "mega health check"
+   has long been deprecated in CLI tools and was made a no-op in `4.0.0`.
+
+   This endpoint was using a [deprecated feature](https://www.rabbitmq.com/docs/deprecated-features): a classic non-exclusive transient (non-durable) queue.
+
+   See [Health Checks](https://www.rabbitmq.com/docs/monitoring#health-checks) for modern focused alternatives.
+
+   GitHub issue: [#13047](https://github.com/rabbitmq/rabbitmq-server/issues/13047)
+
 #### Enhancements
 
  * Static assets served by the management UI now have a `control-cache` header set
@@ -272,8 +317,9 @@ This section can be incomplete and will be expanded as 4.1 approaches its releas
    3. Link flow control state
    4. Session flow control state
    5. Number of unconfirmed and unacknowledged messages
+   6. Busy incoming links are now highlighted
 
-   GitHub issue: [#12670](https://github.com/rabbitmq/rabbitmq-server/pull/12670)
+   GitHub issues: [#12670](https://github.com/rabbitmq/rabbitmq-server/pull/12670), [#13093](https://github.com/rabbitmq/rabbitmq-server/pull/13093)
 
  * The management UI now shows if a feature flag has a migration function (in other words, it may take time to be enabled),
    if it is experimental and whether it is supported or not. To enable an experimental feature flag,
@@ -294,11 +340,68 @@ This section can be incomplete and will be expanded as 4.1 approaches its releas
 
    GitHub issue: [#12840](https://github.com/rabbitmq/rabbitmq-server/pull/12840)
 
+ * Nodes will fail to boot if `rabbit.credit_flow_default_credit` (an `advanced.config`-only, rarely used setting)
+   is set to an incompatible pair of values.
+
+   Contributed by @JimmyWang6.
+
+   GitHub issue: [#13046](https://github.com/rabbitmq/rabbitmq-server/pull/13046)
+
  * When a logged in user's JWT token was refreshed, the user identity displayed in the UI was changed.
 
    GitHub issue: [#12818](https://github.com/rabbitmq/rabbitmq-server/pull/12818)
 
 
+### OAuth 2 AuthN and AuthZ Plugin
+
+#### Breaking Changes and Deprecations
+
+ * The OAuth 2 plugin now requires several values to be explicitly configured by the user
+   and will not provide any defaults.
+
+   The affected identity providers are Azure Entra (né Azure AD) and auth0.
+
+   GitHub issue: [#12235](https://github.com/rabbitmq/rabbitmq-server/issues/12235)
+
+### Enhancements
+
+ * Scope aliases now can be configured in `rabbitmq.conf`.
+
+   ```ini
+   auth_oauth2.scope_aliases.admin = tag:administrator configure:*/*
+   auth_oauth2.scope_aliases.developer = tag:management configure:*/* read:*/* write:*/*
+   ```
+
+   ```ini
+   auth_oauth2.scope_aliases.1.alias = api://administrator
+   auth_oauth2.scope_aliases.1.scope = tag:administrator configure:*/*
+   auth_oauth2.scope_aliases.2.alias = api://developer
+   auth_oauth2.scope_aliases.2.scope = tag:management configure:*/* read:*/* write:*/*
+   ```
+
+   GitHub issue: [#12210](https://github.com/rabbitmq/rabbitmq-server/issues/12210)
+
+ * [OpenID Discovery Endpoint](https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationRequest) now can be configured. This is particularly relevant for
+   Azure Entra (né Azure AD) users.
+
+   GitHub issue: [#12211](https://github.com/rabbitmq/rabbitmq-server/issues/12211)
+
+### Bug Fixes
+
+ * JWT token refreshes will no longer affect the identity shown in the management UI.
+
+   GitHub issue: [#12598](https://github.com/rabbitmq/rabbitmq-server/issues/12598)
+
+
+### Federation Plugin
+
+#### Enhancements
+
+ * Exchange federation now can be used with MQTTv5 consumers.
+
+   GitHub issue: [#13115](https://github.com/rabbitmq/rabbitmq-server/pull/13115)
+
+
 ### Shovel Plugin
 
 #### Bug Fixes
@@ -338,6 +441,20 @@ This section can be incomplete and will be expanded as 4.1 approaches its releas
 
 ### Kubernetes Peer Discovery Plugin
 
+#### Enhancements
+
+ * This plugin was significantly reworked to further reduce the probability of
+   two (or more) clusters being formed in a small percentage of cases when
+   the entire cluster was started for the first time.
+
+   The plugin no longer relies on the Kubernetes API and instead will try to join
+   the first (indexed at `0`) node as the seed node.
+
+   This change is backwards compatible.
+
+   GitHub issue: [#13050](https://github.com/rabbitmq/rabbitmq-server/pull/13050)
+
+
 #### Bug Fixes
 
  * Avoids an exception during automatic removal of cluster members that are
@@ -348,6 +465,17 @@ This section can be incomplete and will be expanded as 4.1 approaches its releas
 
 ### Consul Peer Discovery Plugin
 
+#### Enhancements
+
+ * `` is a new configuration setting that allows the backend to skip registration.
+
+   This is useful when Consul is used for peer discovery but a different tool such as Nomad
+   is used to keep track of the services and their registration, unregistration.
+
+   Contributed by @frederikbosch.
+
+   GitHub issue: [#13201](https://github.com/rabbitmq/rabbitmq-server/pull/13201)
+
 #### Bug Fixes
 
  * Avoids an exception during automatic removal of cluster members that are
@@ -366,10 +494,23 @@ This section can be incomplete and will be expanded as 4.1 approaches its releas
    GitHub issue: [#12809](https://github.com/rabbitmq/rabbitmq-server/pull/12809)
 
 
+### Erlang AMQP 1.0 Client
+
+#### Breaking Changes and Deprecations
+
+ * The client now only can declare durable entities in preparation for a Khepri-only
+   future version of RabbitMQ.
+
+   GitHub issue: [#12947](https://github.com/rabbitmq/rabbitmq-server/pull/12947)
+
+
 ### Dependency Changes
 
+ * `ra` was upgraded to [`2.16.1`](https://github.com/rabbitmq/ra/releases)
  * `osiris` was upgraded to [`1.8.5`](https://github.com/rabbitmq/osiris/releases)
-
+ * `observer_cli` was upgraded to [`1.8.2`](https://github.com/zhongwencool/observer_cli/releases)
+ * `eetcd` was upgraded to [`0.5.0`](https://github.com/zhongwencool/eetcd/releases)
+ * `gun` was upgraded to [`2.1.0`](https://github.com/ninenines/gun/releases)
 
 ## Source Code Archives