Bump github.com/confluentinc/confluent-kafka-go/v2 from 2.2.0 to 2.5.0

[dependabot]

Bumps github.com/confluentinc/confluent-kafka-go/v2 from 2.2.0 to 2.5.0.

Release notes

Sourced from github.com/confluentinc/confluent-kafka-go/v2's releases.

v2.5.0

This is a feature release.

• Adds an AdminAPI DeleteRecords() (#1141, @​PratRanj07).
• Add support for metadata and ruleSet in the schema registry client, which together support data contracts.
• Add a new Avro package "avrov2" which uses the Avro hamba library. The old package "avro" uses Avro libraries which are no longer maintained and should not be used in new code.
• Move rest service for schema registry client into internal package for use by both the SR client and the DEK Registry client.
• Add support for CSFLE (client-side field-level encryption) for AWS, Azure, GCP, and HashiCorp Vault. See the encryption examples in the examples directory.
• Add support for CEL, CEL_FIELD, and JSONata rules.

Fixes

• Issues: #965 Windows builds are linked to libssp in addition to other libraries, since the bundled zstd and zlib are built with -fstack-protector, and not linking causes build failures. Happening since 2.0.0 (#1184).

confluent-kafka-go is based on librdkafka v2.5.0, see the librdkafka v2.5.0 release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

v2.4.0

This is a feature release.

• KIP-848: Integration tests running with the new consumer group protocol. The feature is an Early Access: not production ready (#1185).
• Allow custom http.Client to be passed to schema registry client (#1099)
• Cache schemas when setting UseLatestVersion=true (#1100)
• Add CacheLatestTtlSecs to allow expiration of latest schemas (#1106)
• Cache parsed file descriptors in Protobuf deserializer (#1128)
• Add CacheSchemas option to Protobuf serializer (#1151)
• Add tags field to Confluent metadata (#1131)

Fixes

• The version of Go in go.mod has been changed from 1.17 to 1.21. This is necessary to update test dependencies with security vulnerabilities. Code using the library will still work with Go 1.17 (#1136, @​rzeijde).
• Fix JSON validation during serialization (#1101)
• Fix counter in mock schema registry client (#1170)

confluent-kafka-go is based on librdkafka v2.4.0, see the librdkafka v2.4.0 release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

v2.3.0

This is a feature release.

• Adds support for AdminAPI DescribeCluster() and DescribeTopics() (#964, @​jainruchir).
• KIP-430: Return authorized operations in Describe Responses. (#964, @​jainruchir).
• Adds Rack to the Node type, so AdminAPI calls can expose racks for brokers (currently, all Describe Responses) (#964, @​jainruchir).

... (truncated)

Changelog

Sourced from github.com/confluentinc/confluent-kafka-go/v2's changelog.

v2.5.0

This is a feature release.

• Adds an AdminAPI DeleteRecords() (#1141, @​PratRanj07).
• Add support for metadata and ruleSet in the schema registry client, which together support data contracts.
• Add a new Avro package "avrov2" which uses the Avro hamba library. The old package "avro" uses Avro libraries which are no longer maintained and should not be used in new code.
• Move rest service for schema registry client into internal package for use by both the SR client and the DEK Registry client.
• Add support for CSFLE (client-side field-level encryption) for AWS, Azure, GCP, and HashiCorp Vault. See the encryption examples in the examples directory.
• Add support for CEL, CEL_FIELD, and JSONata rules.

Fixes

• Issues: #965 Windows builds are linked to libssp in addition to other libraries, since the bundled zstd and zlib are built with -fstack-protector, and not linking causes build failures. Happening since 2.0.0 (#1184).

confluent-kafka-go is based on librdkafka v2.5.0, see the librdkafka v2.5.0 release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

v2.4.0

This is a feature release.

• KIP-848: Integration tests running with the new consumer group protocol. The feature is an Early Access: not production ready (#1185).
• Allow custom http.Client to be passed to schema registry client (#1099)
• Cache schemas when setting UseLatestVersion=true (#1100)
• Add CacheLatestTtlSecs to allow expiration of latest schemas (#1106)
• Cache parsed file descriptors in Protobuf deserializer (#1128)
• Add CacheSchemas option to Protobuf serializer (#1151)
• Add tags field to Confluent metadata (#1131)

Fixes

• The version of Go in go.mod has been changed from 1.17 to 1.21. This is necessary to update test dependencies with security vulnerabilities. Code using the library will still work with Go 1.17. (#1136, @​rzeijde).
• Fix JSON validation during serialization (#1101)
• Fix counter in mock schema registry client (#1170)

... (truncated)

Commits

• dd336f6 librdkafka v2.5.0 (#1259)
• 54edfed Documentation and error code update for librdkafka v2.5.0
• 3e25430 librdkafka static bundle v2.5.0
• b0415ae librdkafka and confluent-kafka-go v2.5.0
• 01c0f40 Update CHANGELOG for 2.5.0 (#1258)
• 37256f4 Added a DeleteRecords API (#1141)
• d30da91 Import v2.5.0 rc3 (#1255)
• 4c7634d Documentation and error code update for librdkafka v2.5.0-RC3
• 4bdf42b librdkafka static bundle v2.5.0-RC3
• 924d831 librdkafka and confluent-kafka-go v2.5.0-RC3
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)