v25.3.3

[piyushredpanda]

Bug Fixes

• Fixes incorrect reporting of partition movement progress in decommission/reconfiguration status output. by @bharathv in #29055
• Prevent a slew of races between operations in the storage layer that could lead to attempting to append to a closed segment or a failed assert by @WillemKauf in #28545
• Updated C-Ares to 1.34.6 to address CVE-2025-62408 by @michael-redpanda in #29052
• Variety of fixes to reduce noise in log concerning internal kafka client authentication and authorization by @michael-redpanda in #28927
• prevents state machine from loading local snapshot with offsets greater than log dirty offset by @mmaslankaprv in #29008

Improvements

• Improve timeout logic for failover link to not timeout when processing thousands of shadow topics by @michael-redpanda in #28997
• Increase frequency of topic reconciliation loop to reduce time it takes to failover topics by @michael-redpanda in #28997
• Reduce log noise by @michael-redpanda in #28997
• rpk shadow now has visual feedback on long-running operations. by @r-vasquez in #29078
• reduce test failures on data_migrations_api_test by @joe-redpanda in #28829
• rpk shadow describe now shows Schema Registry sync mode. by @r-vasquez in #29035
• rpk: consume warns when requested end offset is lower than available start offset by @daisukebe in #29049
• PR #29030 [v25.3.x] Fetch read concurrency fix by @ballard26
• PR #29042 [v25.3.x] [CORE-15015] security & kafka: audit log deflaking by @WillemKauf

Full Changelog: v25.3.2...v25.3.3

---

This discussion was created from the release v25.3.3.