Release 4.1.1 (patroni#3574)

- Release notes
- Update version
- Pyright 1.1.408

Author: hughcapet

.github/workflows/tests.yaml

@@ -196,7 +196,7 @@ jobs:
 
     - uses: jakebailey/pyright-action@v2
       with:
-        version: 1.1.405
+        version: 1.1.408
 
   ydiff:
     name: Test compatibility with the latest version of ydiff

docs/index.rst

@@ -3,6 +3,9 @@
    You can adapt this file completely to your liking, but it should at least
    contain the root `toctree` directive.
 
+Patroni: A Template for PostgreSQL HA with ZooKeeper, etcd or Consul
+====================================================================
+
 .. image:: _static/patroni-logo.png
    :height: 128px
    :width: 128px

docs/releases.rst

@@ -3,6 +3,80 @@
 Release notes
 =============
 
+Version 4.1.1
+-------------
+
+Released 2026-04-08
+
+**Stability improvements**
+
+- Compatibility with threading changes in python 3.11+ (Alexander Kukushkin)
+
+  Avoid starting/stopping threads at runtime. Introduce thread pools for REST API and for executing async tasks. Allow configuring global ``thread_pool_size`` and ``restapi.thread_pool_size``.
+
+- Compatibility with python 3.14 (Alexander Kukushkin)
+
+  Run tests against python 3.14 and fix compatibility issues.
+
+- Compatibility with Etcd security fixes in v3.6.9, v3.5.28, and v3.4.42 (Alexander Kukushkin)
+
+  These Etcd releases addressed CVEs and changed behavior so cluster topology reads and lease keepalive are no longer allowed without authentication. Patroni now handles this by authenticating in member-discovery and lease-keepalive paths, re-authenticating on auth failures, and retrying requests accordingly.
+
+- Improvements for Etcd3 error handling (Alexander Kukushkin)
+
+  Handle broken JSON responses, be flexible in how JSON error is parsed, and improve reporting for etcd internal errors.
+
+**Bugfixes**
+
+- Retry leader update on temporary Kubernetes ``403`` error (Sophia Ruan, Alexander Kukushkin)
+
+  When the Kubernetes API temporarily returns ``403 Permission Denied`` (for example during transient RBAC issues), Patroni now verifies whether the current node still holds leadership and retries the leader update within ``retry_timeout`` instead of immediately demoting.
+
+- Fix issue with renaming leader node in sync mode and pause (Alexander Kukushkin)
+
+  ``/sync`` key wasn't updated after renaming the leader node with Patroni restart in pause (without Postgres restart). It prevented Patroni from promoting after the next restart without pause.
+
+- Trigger ``pg_rewind`` check when the same primary increased timeline (Alexander Kukushkin)
+
+  Such timeline increase may happen as a result of crash recovery in a single user mode + promote after taking a leader key while other replica nodes are isolated from DCS. In this case replica nodes didn't trigger ``pg_rewind`` state machine because the leader and therefore ``primary_conninfo`` didn't change.
+
+- Only write superuser password during ``initdb`` bootstrap if it is non-empty (Michael Banck)
+
+  Writing an empty password during ``initdb`` bootstrap was causing issues.
+
+- Fix bug with ``failover_priority`` with ``synchronous_mode=on`` (Alexander Kukushkin)
+
+  ``tag.failover_priority`` values were ignored when ``synchronous_node_count > 1``.
+
+- Fix bug with ``primary_conninfo`` password comparison (Alexander Kukushkin)
+
+  Starting from PostgreSQL 10, Patroni uses passfile in ``primary_conninfo`` and failed to update the passfile after the replication password was updated in yaml-file configuration with reload.
+
+- Don't restart replica with ``nofailover`` tag in pause mode (Alexander Kukushkin)
+
+  Patroni used to start a manually shut down PostgreSQL replica in pause mode when it had ``nofailover`` tag set to ``true``.
+
+- Fix ``check_recovery_conf()`` when PostgreSQL is in the starting state (Alexander Kukushkin)
+
+  For PostgreSQL v12 and newer, ``pg_settings`` cannot be queried while the server is still starting and not yet accepting connections. Missing recovery parameters are now added to the internal state when writing ``postgresql.conf``. Additionally, restore the ``Postgresql.is_starting()`` check in ``Ha.is_healthiest_node()``.
+
+- Validate user options in dictionary format for ``initdb``/``basebackup`` (m4rrypro)
+
+  When ``initdb`` or ``basebackup`` options were provided as a dictionary (instead of a list), the ``option_is_allowed()`` validation was bypassed, allowing blocked options to be used.
+
+- Allow server-side compression for ``basebackup`` option (m4rrypro)
+
+  The ``compress`` option was completely blocked for ``basebackup``, but since PostgreSQL 15, server-side compression is useful and works transparently with plain format. Client-side compression is still rejected.
+
+- Don't reload PostgreSQL config while running custom bootstrap (Alexander Kukushkin)
+
+  Custom bootstrap could be complex and involve PosgreSQL starting and stopping multiple times. Reloads of PostgreSQL config during this process could lead to unexpected behavior.
+
+- Check that ``postgresql.parameters`` is a dictionary (Alexander Kukushkin)
+
+  Discard new config if ``postgresql.parameters`` is not a dictionary.
+
+
 Version 4.1.0
 -------------
 

patroni/postgresql/cancellable.py

@@ -41,7 +41,7 @@ def _kill_process(self) -> None:
                 try:
                     self._process.suspend()  # Suspend the process before getting list of children
                 except psutil.Error as e:
-                    logger.info('Failed to suspend the process: %s', e.msg)
+                    logger.info('Failed to suspend the process: %s', e)
 
                 try:
                     self._process_children = self._process.children(recursive=True)

patroni/version.py

@@ -2,4 +2,4 @@
 
 :var __version__: the current Patroni version.
 """
-__version__ = '4.1.0'
+__version__ = '4.1.1'