dependabot[bot] opened a new pull request, #5160: URL: https://github.com/apache/streampipes/pull/5160
Bumps [confluent-kafka](https://github.com/confluentinc/confluent-kafka-python) from 2.15.0 to 2.16.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/confluentinc/confluent-kafka-python/releases";>confluent-kafka's releases</a>.</em></p> <blockquote> <h2>v2.16.1</h2> <h3>Fixes</h3> <ul> <li>Require <code>certifi>=2026.10.19</code> for the Schema Registry client. When <code>ssl.ca.location</code> is not set (and the <code>SSL_CERT_FILE</code> and <code>SSL_CERT_DIR</code> environment variables are not set), the client verifies Schema Registry certificates against the <code>certifi</code> CA bundle, and earlier <code>certifi</code> releases still trust the eMudhra root whose intermediate CA keys were compromised (<a href="https://emudhra.we-have-a-problem.com/";>details</a>). This update does not change custom trust stores configured through ssl.ca.location, SSL_CERT_FILE or SSL_CERT_DIR.</li> <li>Fix <code>MetadataTags.__hash__</code> raising <code>TypeError</code> on unhashable list values so schemas with <code>metadata.tags</code> can be cached (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2385";>#2385</a>)</li> <li>Fix <code>TopicPartition</code> string formatting showing <code>%I32d</code> instead of the partition number on Windows (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2374";>#2374</a>)</li> </ul> <p>confluent-kafka-python 2.16.1 is based on librdkafka 2.16.0, see the <a href="https://github.com/confluentinc/librdkafka/releases/tag/v2.16.0";>librdkafka release notes</a> for a complete list of changes, enhancements, fixes and upgrade considerations.</p> <p>v2.16.0 is a feature release with the following features, fixes and enhancements:</p> <h3>Enhancements</h3> <ul> <li><code>confluent_kafka</code> now declares itself GIL-safe, enabling real multi-core parallelism on free-threaded CPython builds. See the <a href="https://github.com/confluentinc/confluent-kafka-python/blob/HEAD/docs/multithreading-guide.md";>Multithreading Guide</a> for thread-safety details and free-threaded caveats. (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2347";>#2347</a>)</li> <li>Add Python 3.14t wheels (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2352";>#2352</a>)</li> <li>Add Linux s390x (IBM Z) wheels, including Python 3.14t (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2360";>#2360</a>)</li> <li>Producer <code>close()</code> now aborts any open transaction (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2347";>#2347</a>)</li> <li>Async IO Consumer's default worker pool size has been increased from 2 to 100 (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2347";>#2347</a>)</li> <li><code>SerializingProducer</code> and <code>DeserializingConsumer</code> accept a <em>serde builder</em> when not passing a ready-made serde, through the new <code>key.serializer.builder</code> / <code>value.serializer.builder</code> and <code>key.deserializer.builder</code> / <code>value.deserializer.builder</code> configuration properties. Serdes built this way, and any Schema Registry client the builder created for them, are owned by the client and closed by its <code>close()</code>; ready-made serdes remain the application's. This API is experimental (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2364";>#2364</a>).</li> <li>Serdes that resolve subjects through the Schema Registry <em>associated</em> subject name strategy are now given the Kafka cluster id automatically. The id is resolved lazily, on the first subject lookup, so creating a client never waits on a broker, and concurrent lookups share a single <code>cluster_id()</code> call; until a broker has been reached the lookup raises a <code>SerializationError</code> naming <code>subject.name.strategy.kafka.cluster.id</code>, which can be set to supply the id explicitly. The new serde hooks (<code>set_cluster_id_resolver()</code>, <code>close()</code>) are experimental (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2364";>#2364</a>).</li> <li>New <code>Producer.cluster_id()</code>, <code>Consumer.cluster_id()</code> and <code>AdminClient.cluster_id()</code> (also on <code>AIOProducer</code> and <code>AIOConsumer</code>), returning the id of the cluster the client is connected to. This API is experimental (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2364";>#2364</a>).</li> <li>New asyncio clients <code>AsyncSerializingProducer</code> and <code>AsyncDeserializingConsumer</code> in <code>confluent_kafka.aio</code>, the counterparts of <code>SerializingProducer</code> and <code>DeserializingConsumer</code> built on <code>AIOProducer</code> / <code>AIOConsumer</code>, accepting the asyncio Schema Registry serdes and their builders. These classes are experimental (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2364";>#2364</a>).</li> <li>New <code>Message.deserialized_key()</code> and <code>Message.deserialized_value()</code>, which</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/confluentinc/confluent-kafka-python/blob/master/CHANGELOG.md";>confluent-kafka's changelog</a>.</em></p> <blockquote> <h2>v2.16.1</h2> <h3>Fixes</h3> <ul> <li>Require <code>certifi>=2026.10.19</code> for the Schema Registry client. When <code>ssl.ca.location</code> is not set (and the <code>SSL_CERT_FILE</code> and <code>SSL_CERT_DIR</code> environment variables are not set), the client verifies Schema Registry certificates against the <code>certifi</code> CA bundle, and earlier <code>certifi</code> releases still trust the eMudhra root whose intermediate CA keys were compromised (<a href="https://emudhra.we-have-a-problem.com/";>details</a>). This update does not change custom trust stores configured through <code>ssl.ca.location</code>, <code>SSL_CERT_FILE</code> or <code>SSL_CERT_DIR</code>; keep those up to date separately.</li> <li>Fix <code>MetadataTags.__hash__</code> raising <code>TypeError</code> on unhashable list values so schemas with <code>metadata.tags</code> can be cached (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2385";>#2385</a>)</li> <li>Fix <code>TopicPartition</code> string formatting showing <code>%I32d</code> instead of the partition number on Windows (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2374";>#2374</a>)</li> </ul> <p>confluent-kafka-python 2.16.1 is based on librdkafka 2.16.0, see the <a href="https://github.com/confluentinc/librdkafka/releases/tag/v2.16.0";>librdkafka release notes</a> for a complete list of changes, enhancements, fixes and upgrade considerations.</p> <h2>v2.16.0</h2> <p>v2.16.0 is a feature release with the following features, fixes and enhancements:</p> <h3>Enhancements</h3> <ul> <li><code>confluent_kafka</code> now declares itself GIL-safe, enabling real multi-core parallelism on free-threaded CPython builds. See the <a href="https://github.com/confluentinc/confluent-kafka-python/blob/master/docs/multithreading-guide.md";>Multithreading Guide</a> for thread-safety details and free-threaded caveats. (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2347";>#2347</a>)</li> <li>Add Python 3.14t wheels (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2352";>#2352</a>)</li> <li>Add Linux s390x (IBM Z) wheels, including Python 3.14t (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2360";>#2360</a>)</li> <li>Producer <code>close()</code> now aborts any open transaction (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2347";>#2347</a>)</li> <li>Async IO Consumer's default worker pool size has been increased from 2 to 100 (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2347";>#2347</a>)</li> <li>Add support for CPython free-threading (PEP 703) to enable true multi-core parallel execution in No-GIL environments (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2347";>#2347</a>)</li> <li><code>SerializingProducer</code> and <code>DeserializingConsumer</code> accept a <em>serde builder</em> when not passing a ready-made serde, through the new <code>key.serializer.builder</code> / <code>value.serializer.builder</code> and <code>key.deserializer.builder</code> / <code>value.deserializer.builder</code> configuration properties. Serdes built this way, and any Schema Registry client the builder created for them, are owned by the client and closed by its <code>close()</code>; ready-made serdes remain the application's. This API is experimental (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2364";>#2364</a>).</li> <li>Serdes that resolve subjects through the Schema Registry <em>associated</em> subject name strategy are now given the Kafka cluster id automatically. The id is resolved lazily, on the first subject lookup, so creating a client never waits on a broker, and concurrent lookups share a single <code>cluster_id()</code> call; until a broker has been reached the lookup raises a <code>SerializationError</code> naming <code>subject.name.strategy.kafka.cluster.id</code>, which can be set to supply the id explicitly. The new serde hooks (<code>set_cluster_id_resolver()</code>, <code>close()</code>) are experimental (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2364";>#2364</a>).</li> <li>New <code>Producer.cluster_id()</code>, <code>Consumer.cluster_id()</code> and <code>AdminClient.cluster_id()</code> (also on <code>AIOProducer</code> and <code>AIOConsumer</code>), returning the id of the cluster the client is connected to. This API is</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/confluentinc/confluent-kafka-python/commit/4d306865a29fdec0162136265ed02ef2a745b146";><code>4d30686</code></a> 2.16.1 (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2403";>#2403</a>)</li> <li><a href="https://github.com/confluentinc/confluent-kafka-python/commit/83f66dfef9939248aa91e731b3f3457537b13677";><code>83f66df</code></a> 2.16.1rc1 (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2399";>#2399</a>)</li> <li><a href="https://github.com/confluentinc/confluent-kafka-python/commit/fbb7c3b349a26f7ba32d7e00d55373f9b450efba";><code>fbb7c3b</code></a> Require certifi>=2026.10.19 for the Schema Registry client (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2398";>#2398</a>)</li> <li><a href="https://github.com/confluentinc/confluent-kafka-python/commit/469f81ce19aae7b8bc78aab9eb26461e46b52811";><code>469f81c</code></a> Fix TopicPartition string formatting on Windows (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2376";>#2376</a>)</li> <li><a href="https://github.com/confluentinc/confluent-kafka-python/commit/47d124053c0cbe96537ecc77ce834b920ba5c689";><code>47d1240</code></a> Fix MetadataTags hash with list values (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2385";>#2385</a>) (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2388";>#2388</a>)</li> <li><a href="https://github.com/confluentinc/confluent-kafka-python/commit/4a1bcb01a1c977bc61faa6c8ae72f56aa250c121";><code>4a1bcb0</code></a> Copy pyproject.toml into smoketest temp dir so asyncio_mode=auto applies (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2384";>#2384</a>)</li> <li><a href="https://github.com/confluentinc/confluent-kafka-python/commit/16ba9674470568acc26bcc6491dff736e7633c94";><code>16ba967</code></a> Fix Unicode errors in string serialization (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2379";>#2379</a>)</li> <li><a href="https://github.com/confluentinc/confluent-kafka-python/commit/73a71f8cf158bbc196a4b7dc776f8f3576b2d384";><code>73a71f8</code></a> 2.16.0 (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2380";>#2380</a>)</li> <li><a href="https://github.com/confluentinc/confluent-kafka-python/commit/20614ae2a9d2dafd83381932aa54f60a8201520f";><code>20614ae</code></a> Integrate Schema Registry serdes into the Kafka clients: serde builders, clus...</li> <li><a href="https://github.com/confluentinc/confluent-kafka-python/commit/7f2e72f3db14647b163ee5fa7283d674eda194f3";><code>7f2e72f</code></a> Add s390x wheels to the build and verification matrix (<a href="https://redirect.github.com/confluentinc/confluent-kafka-python/issues/2360";>#2360</a>)</li> <li>Additional commits viewable in <a href="https://github.com/confluentinc/confluent-kafka-python/compare/v2.15.0...v2.16.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
