Skip to content

Bump Confluent.Kafka and 21 others - #386

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/accounting/nuget-production-dependencies-99451b4a2b
Closed

Bump Confluent.Kafka and 21 others#386
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/accounting/nuget-production-dependencies-99451b4a2b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Updated Confluent.Kafka from 2.8.0 to 2.15.0.

Release notes

Sourced from Confluent.Kafka's releases.

2.15.0

Upgrade considerations

Ensure you're not calling StoreOffset with an EOF message.
As when calling Commit with an EOF message, it will throw an InvalidOperationException.
Previously this could cause skipping an offset (<2.1.0) or message reprocessing (>=2.1.0).

New features

  • New optional package Confluent.Kafka.OAuthBearer.Aws provides AWS IAM-based
    OAUTHBEARER authentication via AWS STS GetWebIdentityToken. Activate by
    setting SaslOauthbearerMethod = SaslOauthbearerMethod.Oidc,
    SaslOauthbearerMetadataAuthenticationType.AwsIam, and supplying
    region and audience in SaslOauthbearerConfig. See the package's README
    for details.

Enhancements

  • References librdkafka.redist 2.15.0. Refer to the librdkafka v2.15.0 release notes for more information.
  • Added support for .NET 10 (LTS) and dropped support for .NET 6 (end of support since November 2024). The library now multi-targets net8.0 and net10.0 alongside netstandard2.0 and net462. Builds on the approach proposed in #​2545 by @​ffernandolima, adapted for the centralized Directory.Build.props structure on current master.
  • Adds support for union-of-pools/ auto pool mapping for Schema Registry (#​2634)

Fixes

  • Throw an InvalidOperationException when calling StoreOffset with an EOF consume result, to match Commit behavior (#​2621)
  • Handle non-http errors during retries (#​2633)

2.14.2

Enhancements

  • References librdkafka.redist 2.14.2. Refer to the librdkafka v2.14.2 release notes for more information.
  • Add IHeader overload to Headers.Add() method (#​2604)

Fixes

  • Handle anyOf/allOf in JSON transforms (#​2611)
  • Allow encrypting enum for JObject in dotnet (#​2615)
  • Fix 'occured' -> 'occurred' typo in ConsumeException XML doc comments (#​2609)

2.14.0

Enhancements

  • References librdkafka.redist 2.14.0. Refer to the librdkafka v2.14.0 release notes for more information.
  • Add AssociatedNameStrategy (#​2577)
  • Add enableAt to RuleSet (#​2593)
  • Add config to validate before domain rules for JSON Schema (#​2596)
  • Cache FieldAccessor to address CSFLE perf with JSON (#​2601)

Fixes

  • Ensure dispose methods clean up properly (#​2595)

2.13.2

Enhancements

  • Preserve inner exceptions in RestService (#​2571)

Fixes

  • Support multi-certificate PEM bundles in Schema Registry SslCaLocation (#​2576)

2.13.1

Enhancements

  • Unify build configurations and remove redundant properties (#​2464)
  • JSONSchema Validation Errors: Include paths to nested properties (#​2554)
  • Add Confluent-Client-Version header to requests to SR, C# client (#​2549)

Fixes

  • Fix DeriveKey in Hkdf implementation (#​2559)
  • Ensure single use of HttpRequestMessage for token fetch (#​2544)
  • Fix race conditions when retrieving KEK/DEK (#​2565)
  • Allowing for Confluent-Identity-Pool-Id to be optional (#​2564)
  • Ensure JSON schema access is thread-safe (#​2567)
  • Use lock on root schema when protecting access to subschemas (#​2568)
  • Processing arrays and maps sequentially to avoid race conditions (#​2569)

2.13.0

Enhancements

  • References librdkafka.redist 2.13.0. Refer to the librdkafka v2.13.0 release notes for more information.
  • Support Avro schema references for C# client (#​2534)
  • Add Accept-Version header (#​2536)
  • Handle evolution during field transformation (#​2541)
  • Re-enable deserialization optimization by removing unnecessary array conversions (#​2531)

Fixes

  • Ensure schemaId initialization is thread-safe (#​2540)
  • Ensure all deps are strongly named (#​2548)

2.12.0

KIP-848 – General Availability

Starting with Confluent.Kafka 2.12.0, the next generation consumer group rebalance protocol defined in KIP-848 is production-ready. Please refer to the following migration guide for moving from Classic to Consumer protocol.

Note: The new consumer group protocol defined in KIP-848 is not enabled by default. There are few contract change associated with the new protocol and might cause breaking changes. GroupProtocol configuration property dictates whether to use the new Consumer protocol or older Classic protocol. It defaults to Classic if not provided.

Enhancements

  • References librdkafka.redist 2.12.0. Refer to the librdkafka v2.12.0 release notes for more information.
  • OAuth OIDC method example for Kafka metadata based authentication with
    an Azure IMDS endpoint using an attached managed identity as principal (#​2526).

2.11.1

Enhancements

2.11.0

Enhancements

2.10.1

Enhancements

2.10.0

Enhancements

  • References librdkafka.redist 2.10.0. Refer to the librdkafka v2.10.0 release notes for more information.
  • [KIP-848] Group Config is now supported in AlterConfigs, IncrementalAlterConfigs and DescribeConfigs. (#​2366)

2.9.0

Enhancements

  • Add utilities to convert decimals from/to Protobuf (#​2424)
  • Add client credentials OAuth support (#​2426)
  • Add support for passing schema ID during serialization (#​2428)
  • Optimize schema registry client by caching results of LookupSchemaAsync (#​2429)
  • Use ConcurrentDictionary as default cache for Schema Registry client (#​2433)

Fixes

  • Fix JSON Schema validation to use latest schema if needed (#​2406)
  • Support Protobuf oneof fields in Data Contract rules (#​2413)

Commits viewable in compare view.

Updated Google.Protobuf from 3.30.0 to 3.35.1.

Release notes

Sourced from Google.Protobuf's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Grpc.AspNetCore from 2.67.0 to 2.83.0.

Release notes

Sourced from Grpc.AspNetCore's releases.

2.83.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0

2.83.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0-pre1

2.80.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.76.0...v2.80.0

2.80.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.76.0...v2.80.0-pre1

2.76.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0

2.76.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0-pre1

2.71.0

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0

2.71.0-pre1

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0-pre1

2.70.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.67.0...v2.70.0

Commits viewable in compare view.

Updated Grpc.AspNetCore.HealthChecks from 2.67.0 to 2.83.0.

Release notes

Sourced from Grpc.AspNetCore.HealthChecks's releases.

2.83.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0

2.83.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0-pre1

2.80.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.76.0...v2.80.0

2.80.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.76.0...v2.80.0-pre1

2.76.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0

2.76.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0-pre1

2.71.0

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0

2.71.0-pre1

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0-pre1

2.70.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.67.0...v2.70.0

Commits viewable in compare view.

Updated Grpc.Net.Client from 2.70.0 to 2.83.0.

Release notes

Sourced from Grpc.Net.Client's releases.

2.83.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0

2.83.0-pre1

What's Changed

Description has been truncated

@dependabot
Bump Confluent.Kafka and 21 others
20490ad 
Bumps Confluent.Kafka from 2.8.0 to 2.15.0
Bumps Google.Protobuf from 3.30.0 to 3.35.1
Bumps Grpc.AspNetCore from 2.67.0 to 2.83.0
Bumps Grpc.AspNetCore.HealthChecks from 2.67.0 to 2.83.0
Bumps Grpc.Net.Client from 2.70.0 to 2.83.0
Bumps Grpc.Tools from 2.68.1 to 2.83.0
Bumps Microsoft.AspNetCore.TestHost from 8.0.13 to 8.0.29
Bumps Microsoft.Extensions.Logging from 9.0.2 to 10.0.10
Bumps Microsoft.NET.Test.Sdk from 17.13.0 to 18.8.1
Bumps Microsoft.VisualStudio.Azure.Containers.Tools.Targets from 1.21.2 to 1.23.0
Bumps OpenFeature from 2.7.0 to 2.14.0
Bumps OpenFeature.Contrib.Providers.Flagd from 0.3.2 to 0.5.0
Bumps OpenFeature.DependencyInjection from 2.7.0 to 2.9.0
Bumps OpenFeature.Hosting to 2.9.0, 2.14.0
Bumps OpenTelemetry.AutoInstrumentation from 1.11.0 to 1.16.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.11.2 to 1.17.0
Bumps OpenTelemetry.Extensions.Hosting from 1.11.2 to 1.17.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.11.1 to 1.17.0
Bumps OpenTelemetry.Instrumentation.Http from 1.11.1 to 1.17.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.11.1 to 1.17.0
Bumps StackExchange.Redis from 2.8.31 to 3.1.0
Bumps xunit.runner.visualstudio from 3.0.2 to 3.1.5

---
updated-dependencies:
- dependency-name: Confluent.Kafka
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Google.Protobuf
  dependency-version: 3.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Grpc.Tools
  dependency-version: 2.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production-dependencies
- dependency-name: Microsoft.VisualStudio.Azure.Containers.Tools.Targets
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.AutoInstrumentation
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Grpc.AspNetCore
  dependency-version: 2.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Grpc.AspNetCore.HealthChecks
  dependency-version: 2.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenFeature
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenFeature.Contrib.Providers.Flagd
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenFeature.Hosting
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenFeature.DependencyInjection
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenFeature.Hosting
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: StackExchange.Redis
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production-dependencies
- dependency-name: Grpc.Net.Client
  dependency-version: 2.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Microsoft.AspNetCore.TestHost
  dependency-version: 8.0.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-production-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-production-dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 4, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/src/accounting/nuget-production-dependencies-99451b4a2b branch August 4, 2026 07:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants