Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Updated Confluent.Kafka from 2.5.3 to 2.12.0.

Release notes

Sourced from Confluent.Kafka's releases.

2.12.0

KIP-848 – General Availability

Starting with Confluent.Kafka 2.12.0, the next generation consumer group rebalance protocol defined in KIP-848 is production-ready. Please refer to the following migration guide for moving from Classic to Consumer protocol.

Note: The new consumer group protocol defined in KIP-848 is not enabled by default. There are few contract change associated with the new protocol and might cause breaking changes. GroupProtocol configuration property dictates whether to use the new Consumer protocol or older Classic protocol. It defaults to Classic if not provided.

Enhancements

  • References librdkafka.redist 2.12.0. Refer to the librdkafka v2.12.0 release notes for more information.
  • OAuth OIDC method example for Kafka metadata based authentication with
    an Azure IMDS endpoint using an attached managed identity as principal (#​2526).

2.11.1

Enhancements

2.11.0

Enhancements

2.10.1

Enhancements

2.10.0

Enhancements

  • References librdkafka.redist 2.10.0. Refer to the librdkafka v2.10.0 release notes for more information.
  • [KIP-848] Group Config is now supported in AlterConfigs, IncrementalAlterConfigs and DescribeConfigs. (#​2366)

2.9.0

Enhancements

  • Add utilities to convert decimals from/to Protobuf (#​2424)
  • Add client credentials OAuth support (#​2426)
  • Add support for passing schema ID during serialization (#​2428)
  • Optimize schema registry client by caching results of LookupSchemaAsync (#​2429)
  • Use ConcurrentDictionary as default cache for Schema Registry client (#​2433)

Fixes

  • Fix JSON Schema validation to use latest schema if needed (#​2406)
  • Support Protobuf oneof fields in Data Contract rules (#​2413)

2.8.0

v2.8.0 is a feature release with the following features, fixes and enhancements:

Enhancements

  • References librdkafka.redist 2.8.0. Refer to the librdkafka v2.8.0 release notes for more information.
  • Add retry logic to RestService for Schema Registry (#​2353)
  • Add config for validating payloads against JSON Schema (#​2350)
  • Add ability to override disable flag and actions on a rule (#​2377)
  • Add AWS AssumeRole support to AWS KMS (#​2379)

Fixes

  • Retrieve version for writer schema when getting migrations (#​2358)
  • Add missing JSON Schema validate check (#​2372)
  • Ensure different key ids use different client instances (#​2374)
  • DGS-19409 Ensure Avro serde caches per subject (#​2387)
  • Update hash code for schema references so they can be retrieved correctly (#​2390)

2.6.1

v2.6.1 is a maintenance release with the following features, fixes and enhancements:

Enhancements

Fixes

  • Fix to continue supporting .NET Framework 4.6.2+ in core client library (#​2342).
  • Fix JSON Schema handling to not require use of $id (#​2339).
  • Update Caching.Memory to 8.0.1 to address CVE (#​23440.
  • Added Qualified and Custom reference name strategy approaches for protobuf references (#​2345).
  • Fix validate of SSL CA certs in Schema Registry client (#​2346).
  • Skip SSL certs validation when configured in Schema Registry client (#​2347).
  • Allow proxy to be specified in Schema Registry client (#​2348).

2.6.0

v2.6.0 is a feature release with the following features, fixes and enhancements:

Enhancements

  • KIP-848 EA: Admin API for listing consumer groups now has an optional filter to return only groups of given types (#​2323).
  • KIP-460 Admin Leader Election RPC (#​2320)
  • .NET 8 support with NJsonSchema 11 (#​2314)

confluent-kafka-dotnet is based on librdkafka v2.6.0, see the librdkafka release notes for a complete list of changes, enhancements, fixes and upgrade considerations.

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: Confluent.Kafka
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Oct 13, 2025

Assignees

The following users could not be added as assignees: @ubnt-secpilot/lead-dev. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants