diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 8e44fe94..ecad3a88 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -29,7 +29,7 @@ junit-jupiter = "5.11.4"
 licenser = "0.6.1"
 log4j = "2.24.3"
 mockito = "5.18.0"
-pulsar = "4.1.2"
+pulsar = "4.2.4"
 rat-gradle = "0.8.0"
 reactor = "3.7.14"
 slf4j = "2.0.17"
diff --git a/pulsar-client-reactive-adapter/src/test/java/org/apache/pulsar/reactive/client/internal/adapter/AdaptedReactiveMessageConsumerTests.java b/pulsar-client-reactive-adapter/src/test/java/org/apache/pulsar/reactive/client/internal/adapter/AdaptedReactiveMessageConsumerTests.java
index b6c1afec..65fe5a53 100644
--- a/pulsar-client-reactive-adapter/src/test/java/org/apache/pulsar/reactive/client/internal/adapter/AdaptedReactiveMessageConsumerTests.java
+++ b/pulsar-client-reactive-adapter/src/test/java/org/apache/pulsar/reactive/client/internal/adapter/AdaptedReactiveMessageConsumerTests.java
@@ -193,6 +193,9 @@ void keySharedPolicy() throws Exception {
 		expectedConsumerConf.setSubscriptionName("my-sub");
 		expectedConsumerConf.setSubscriptionType(SubscriptionType.Key_Shared);
 		expectedConsumerConf.setKeySharedPolicy(keySharedPolicy);
+		// ConsumerBuilderImpl applies this default at subscribe time when neither
+		// cryptoFailureAction nor decryptFailListener is configured
+		expectedConsumerConf.setCryptoFailureAction(ConsumerCryptoFailureAction.FAIL);
 
 		CompletableFuture<String> failedConsumer = new CompletableFuture<>();
 		failedConsumer.completeExceptionally(new RuntimeException("didn't match expected consumer conf"));
@@ -229,6 +232,9 @@ void topicsPattern() throws Exception {
 		expectedConsumerConf.setTopicsPattern(topicsPattern);
 		expectedConsumerConf.setRegexSubscriptionMode(RegexSubscriptionMode.AllTopics);
 		expectedConsumerConf.setPatternAutoDiscoveryPeriod(1);
+		// ConsumerBuilderImpl applies this default at subscribe time when neither
+		// cryptoFailureAction nor decryptFailListener is configured
+		expectedConsumerConf.setCryptoFailureAction(ConsumerCryptoFailureAction.FAIL);
 
 		CompletableFuture<String> failedConsumer = new CompletableFuture<>();
 		failedConsumer.completeExceptionally(new RuntimeException("didn't match expected consumer conf"));