v25.3.7

Bug Fixes

• Fixed admin API service restart to handle pandaproxy and schema_registry on the correct shard. by @pgellert in #29523
• Fixes a bug where truncation does not propagate to sink if source start offset has moved ahead of sink high watermark. by @bharathv in #29446
• firm up start offset update logic by @joe-redpanda in #29467
• PR #29393 [v25.3.x] cloud_io: handle key_not_found when listing bucket objects by @nvartolomei
• PR #29477 [v25.3.x] iobuf: fix operator<=> and operator== for string_view comparisons by @travisdowns
• PR #29497 [v25.3.x] kafka: Clamp consume deadline to 5s by @Lazin

Improvements

• Adds native support for buf's protovalidate to Schema Registry by @michael-redpanda in #29417
• Improve performance of Shadow Link when scaling to thousands of topics but making internal data structures copy on write by @michael-redpanda in #29231
• Upgrade libxml2 to latest minor version by @tyson-redpanda in #29433
• PR #29503 [v25.3.x] bazel: Update OpenSSL to 3.0.19 by @michael-redpanda
• PR #29531 [v25.3.x] cluster_link: improve comment for prefix truncation delay logic by @michael-redpanda
• PR #29537 [v25.3.x] kafka/client: fix race condition in direct_consumer_test by @ballard26

Full Changelog: v25.3.6...v25.3.7