v25.3.5

[tyson-redpanda]

Features

• Cluster health report now includes node IDs of nodes that exceed the disk usage reporting thresholds. by @bharathv in #29141
• Iceberg: Support customizing Iceberg catalog namespace (defaults to redpanda) at cluster level. by @nvartolomei in #29169
• Snapshot id correlated with table update transaction is now available in Datalake REST API by @mmaslankaprv in #29256
• rpk shadow config generate: now supports --print-template along with --for-cloud by @r-vasquez in #29126
• rpk: WCR supports --cluster-uuid-override by @daisukebe in #29185
• rpk: rpk can now be used to create Redpanda roles in Redpanda Cloud using the rpk security role command. by @r-vasquez in #29211

Bug Fixes

• Adds better validation to arrays and strings being read off the wire from kafka clients. by @WillemKauf in #29227
• PR #29243 Fix bug in iobuf::operator<=> by @ballard26
• PR #29273 bytes: ensure iobuf::operator<=>(...) is an unsigned byte-wise comparison by @ballard26
• PR #28682 health_monitor: Fix oversized alloc in MTT scenarios by @StephanDollberg
• PR #29147 CORE-14619 rpk: fix version check logic for semver by @pgellert

Improvements

• Connection errors now report the resolved address where possible. by @BenPope in #29202
• rpk shadow create [cloud]: now rpk validates if the secret exists in the Shadow cluster before sending a request to create by @r-vasquez in #29129
• rpk shadow describe now supports the --format json/yaml flag. by @r-vasquez in #29130
• PR #29275 Improve descriptions for OpenAPI (backport) by @kbatuigas

Full Changelog: v25.3.4...v25.3.5

---

This discussion was created from the release v25.3.5.