Bump github.com/twmb/franz-go from 1.2.4 to 1.2.5 #22

2021-11-29T14:21:35+03:00

dependabot[bot] commented

2021-11-29 14:21:35 +03:00

(Migrated from github.com)

Bumps github.com/twmb/franz-go from 1.2.4 to 1.2.5.

Changelog

Sourced from github.com/twmb/franz-go's changelog.

v1.2.5

This small patch release fixes one non-impacting bug in SCRAM authentication, and allows more errors to be abort&retryable rather than fatal while transactionally committing.

For SCRAM, this client did not implement the client-final-reply completely correctly: this client replied with just the client nonce, not the client nonce + server nonce. Technically this was not to spec, but no broker today enforces this final nonce correctly. However, the client has been fixed so that if someday brokers do start enforcing the nonce correctly, this client will be ready.

For transactional committing, we can handle a few extra errors while committing without entering a fatal state. Previously, ILLEGAL_GENERATION was handled: this meant that a rebalance began and completed before the client's commit went through. In this case, we just aborted the transaction and continued successfully. We can do this same thing for REBALANCE_IN_PROGRESS, which is similar to the prior error, as well as for errors that result from client request retry limits.

The integration tests now no longer depend on kcl, meaning you can simply go test in the kgo package to test against your local brokers. Seeds can be provided by specifying a KGO_SEEDS environment variable, otherwise the default is 127.0.0.1:9092.

Lastly, a few bugs have been fixed in the not-yet-stable, currently-separate-module kadm package. If you use that package, you may have already pulled in these fixes.

17dfae8 go.{mod,sum}: update deps

3b34db0 txn test: remove increasing-from-0 strictness when producing

d0a27f3 testing: remove dependency on kcl

8edf934 txn: allow more commit errors to just trigger abort

03c58cb scram: use c-nonce s-nonce, not just c-nonce, in client-reply-final

8f34083 consumer group: avoid regex log if no topics were added/skipped

Commits

d0a262a note v1.2.5
17dfae8 go.{mod,sum}: update deps
3b34db0 txn test: remove increasing-from-0 strictness when producing
d0a27f3 testing: remove dependency on kcl
8edf934 txn: allow more commit errors to just trigger abort
03c58cb scram: use c-nonce s-nonce, not just c-nonce, in client-reply-final
af367fb Merge pull request #108 from yuzhichang/fix_typo
1ac6270 fix typo
e97ad6b bench: clarify flag
55bb1cb sticky: reuse the input members slice, minor optimizations
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/twmb/franz-go](https://github.com/twmb/franz-go) from 1.2.4 to 1.2.5. <details> <summary>Changelog</summary> Sourced from <a href="https://github.com/twmb/franz-go/blob/master/CHANGELOG.md">github.com/twmb/franz-go's changelog</a>. <blockquote> <h1>v1.2.5</h1> This small patch release fixes one non-impacting bug in SCRAM authentication, and allows more errors to be abort&retryable rather than fatal while transactionally committing. For SCRAM, this client did not implement the client-final-reply completely correctly: this client replied with just the <code>client nonce</code>, not the <code>client nonce + server nonce</code>. Technically this was not to spec, but no broker today enforces this final nonce correctly. However, the client has been fixed so that if someday brokers do start enforcing the nonce correctly, this client will be ready. For transactional committing, we can handle a few extra errors while committing without entering a fatal state. Previously, <code>ILLEGAL_GENERATION</code> was handled: this meant that a rebalance began and completed before the client's commit went through. In this case, we just aborted the transaction and continued successfully. We can do this same thing for <code>REBALANCE_IN_PROGRESS</code>, which is similar to the prior error, as well as for errors that result from client request retry limits. The integration tests now no longer depend on <code>kcl</code>, meaning you can simply <code>go test</code> in the <code>kgo</code> package to test against your local brokers. Seeds can be provided by specifying a <code>KGO_SEEDS</code> environment variable, otherwise the default is 127.0.0.1:9092. Lastly, a few bugs have been fixed in the not-yet-stable, currently-separate-module kadm package. If you use that package, you may have already pulled in these fixes. <ul> <li><a href="https://github.com/twmb/franz-go/commit/17dfae8"><code>17dfae8</code></a> go.{mod,sum}: update deps</li> <li><a href="https://github.com/twmb/franz-go/commit/3b34db0"><code>3b34db0</code></a> txn test: remove increasing-from-0 strictness when producing</li> <li><a href="https://github.com/twmb/franz-go/commit/d0a27f3"><code>d0a27f3</code></a> testing: remove dependency on kcl</li> <li><a href="https://github.com/twmb/franz-go/commit/8edf934"><code>8edf934</code></a> txn: allow more commit errors to just trigger abort</li> <li><a href="https://github.com/twmb/franz-go/commit/03c58cb"><code>03c58cb</code></a> scram: use c-nonce s-nonce, not just c-nonce, in client-reply-final</li> <li><a href="https://github.com/twmb/franz-go/commit/8f34083"><code>8f34083</code></a> consumer group: avoid regex log if no topics were added/skipped</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/twmb/franz-go/commit/d0a262ad1fe2907caecaacf26a286786506099c2"><code>d0a262a</code></a> note v1.2.5</li> <li><a href="https://github.com/twmb/franz-go/commit/17dfae88f0e1a7870255a68b90888febb4a5d81d"><code>17dfae8</code></a> go.{mod,sum}: update deps</li> <li><a href="https://github.com/twmb/franz-go/commit/3b34db0c6d1e9c5f6c06b97de13e7c4775f77249"><code>3b34db0</code></a> txn test: remove increasing-from-0 strictness when producing</li> <li><a href="https://github.com/twmb/franz-go/commit/d0a27f324ad66e76e76a16073a1451d1bdd02f86"><code>d0a27f3</code></a> testing: remove dependency on kcl</li> <li><a href="https://github.com/twmb/franz-go/commit/8edf93461fc16de8cd949b0de49f455b36cd1e33"><code>8edf934</code></a> txn: allow more commit errors to just trigger abort</li> <li><a href="https://github.com/twmb/franz-go/commit/03c58cbf39e9cd53f457a71277b311fe4bcf4c66"><code>03c58cb</code></a> scram: use c-nonce s-nonce, not just c-nonce, in client-reply-final</li> <li><a href="https://github.com/twmb/franz-go/commit/af367fbdcc9e7df37954dd0fdffb5873d55b07aa"><code>af367fb</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/108">#108</a> from yuzhichang/fix_typo</li> <li><a href="https://github.com/twmb/franz-go/commit/1ac6270dc45821067500952344422694d64dda6d"><code>1ac6270</code></a> fix typo</li> <li><a href="https://github.com/twmb/franz-go/commit/e97ad6b8ef3e84bc59627fcb987ab98d9c8fea6a"><code>e97ad6b</code></a> bench: clarify flag</li> <li><a href="https://github.com/twmb/franz-go/commit/55bb1cbe926f2b717a34e85d7fd9bf55786cc9d9"><code>55bb1cb</code></a> sticky: reuse the input members slice, minor optimizations</li> <li>Additional commits viewable in <a href="https://github.com/twmb/franz-go/compare/v1.2.4...v1.2.5">compare view</a></li> </ul> </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/twmb/franz-go&package-manager=go_modules&previous-version=1.2.4&new-version=1.2.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

vtolstov (Migrated from github.com) approved these changes 2021-11-29 14:21:52 +03:00

Sign in to join this conversation.

No reviewers

vtolstov