Bump github.com/nats-io/nats-server/v2 from 2.11.7 to 2.12.1 in /cli

[dependabot]

Bumps github.com/nats-io/nats-server/v2 from 2.11.7 to 2.12.1.

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.12.1

Changelog

Refer to the 2.12 Upgrade Guide for backwards compatibility notes with 2.11.x.

Go Version

• 1.25.3 (#7428)

Dependencies

• github.com/google/go-tpm v0.9.6 (#7374)
• github.com/nats-io/nats.go v1.46.0 (#7374)
• golang.org/x/crypto v0.43.0 (#7423)
• golang.org/x/sys v0.37.0 (#7423)
• golang.org/x/time v0.14.0 (#7423)

Added

General

• The NewServerFromConfig function has been added to the embedded server API for parsing an external configuration file when ConfigFile is supplied (#7364)
• WebSocket leafnode connections can now use a HTTP proxy by specifying proxy settings in the leafnode remotes (#7242)
• The write_deadline option in the cluster, leafnode and gateway config blocks allows configuring write deadlines on a finger-grained basis (#7405)

Improved

Monitoring

• The jsz monitoring endpoint can now report leader counts (#7429)

JetStream

• The store lock is no longer held while searching for TTL expiry tasks, improving performance (#7344)
• Removing a message from the TTL state is now faster (#7344)
• The filestore no longer performs heap allocations for hash checks (#7345)
• The filestore now reuses pooled write cache allocations more efficiently (#7346)
• Meta snapshot performance for a very large number of assets has been improved after a regression in v2.11.9 (#7350)
• Sequence-from-timestamp lookups, such as those using opt_start_time on consumers or start_time on message get requests, now use a binary search for improved lookup performance (#7357)
• Scheduled messages are now deactivated properly when followed up with another message on the same subject without a schedule (#7366)
• Meta snapshots are no longer taken on every stream removal (#7373)
• Filestore cache lookups can now return early for empty blocks (#7381)
• Filestore meta files are now written using temporary staging, avoiding accidental truncation on crashes (#7388)
• Atomic batch publish now supports deduplication with the Nats-Msg-Id header (#7391)
• Cache-specific log lines in the filestore have been improved (#7396)
• Log lines and errors related to offline/unsupported assets are now clearer (#7416, #7425)

Fixed

General

... (truncated)

Commits

• fab5f99 Release v2.12.1
• bf2c60a Cherry-picks for v2.12.1 (#7430)
• 350d9d7 [FIXED] Filestore unlock when message erase fails
• 18007b8 [IMPROVED] JSZ Raft leader stats
• bc7407a Update to Go 1.25.3/1.24.9
• ffbdb10 [FIXED] Trusted Proxies: Reload log message report added keys as removed
• 59361c9 Release v2.12.1-RC.5
• fd8c5b7 Cherry-picks for v2.12.1-RC.5 (#7426)
• 6c9a051 feat: add riscv64 support
• 84fe04a NRG: Parallel catchups can truncate committed
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[dependabot]

Superseded by #187.