Bump github.com/twmb/franz-go from 1.4.2 to 1.5.0 #61

vtolstov · 2022-05-02T14:25:23+03:00

dependabot[bot] commented

2022-05-02 14:25:23 +03:00

(Migrated from github.com)

Bumps github.com/twmb/franz-go from 1.4.2 to 1.5.0.

Changelog

Sourced from github.com/twmb/franz-go's changelog.

v1.5.0

This release adds a few new APIs, has a few small behavior changes, and has one "breaking" change.

Breaking changes

The kerberos package is now a dedicated separate module. Rather than requiring a major version bump, since this fix is entirely at the module level for an almost entirely unused package, I figured it is okayish to technically break compatibility for the few usages of this package, when the fix can be done entirely when go geting.

The gokrb5 library, basically the only library in the Go ecosystem that implements Kerberos, has a slightly broken license. Organizations that are sensitive to this were required to not use franz-go even if they did not use Kerberos because franz-go pulls in a dependency on gokrb5.

Now, with kerberos being a distinct and separate module, depending on franz-go only will not cause an indirect dependency on gokrb5.

If your upgrade is broken by this change, run:
go get github.com/twmb/franz-go/pkg/sasl/kerberos@v1.0.0
go get github.com/twmb/franz-go@v1.5.0
Behavior changes

UnknownTopicRetries now allows -1 to signal disabling the option (meaning unlimited retries, rather than no retries). This follows the convention of other options where -1 disables limits.

Improvements

Waiting for unknown topics while producing now takes into account both the produce context and aborting. Previously, the record context was only taken into account after a topic was loaded. The same is true for aborting buffered records: previously, abort would hang until a topic was loaded.

New APIs are added to kmsg to deprecate the previous Into functions. The Into functions still exist and will not be removed until kadm is stabilized (see #141).

Features

ConsumeResetOffset is now clearer, you can now use NoResetOffset with

... (truncated)

Commits

6ed27f5 CHANGELOG: note v1.5
a2cbbf8 go.{mod,sum}: go get -u ./...; go mod tidy
cba9e26 PreCommitContextFn => PreCommitFnContext before v1.5
744a60e Offset.AfterMilli: properly save noReset
ce7a84f kerberos: split into dedicated module, p1
e8e5c82 kgo: improve ConsumeResetOffset, NoResetOffset, add Offset.AfterMilli
b457742 balancing: LogLevelError if BalanceOrError returns an error
e8e5117 switch IntoSyncAssignmentOrError to GroupMemberBalancerOrError
b5256c7 kadm: fix long standing poor API (Into fns)
8148c55 BalancePlan: add AsMemberIDMap
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/twmb/franz-go](https://github.com/twmb/franz-go) from 1.4.2 to 1.5.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/twmb/franz-go/blob/master/CHANGELOG.md">github.com/twmb/franz-go's changelog</a>.</em></p> <blockquote> <h1>v1.5.0</h1> <p>This release adds a few new APIs, has a few small behavior changes, and has one "breaking" change.</p> <h2>Breaking changes</h2> <p>The <code>kerberos</code> package is now a dedicated separate module. Rather than requiring a major version bump, since this fix is entirely at the module level for an almost entirely unused package, I figured it is <em>okayish</em> to technically break compatibility for the few usages of this package, when the fix can be done entirely when <code>go get</code>ing.</p> <p>The <a href="https://github.com/jcmturner/gokrb5">gokrb5</a> library, basically the only library in the Go ecosystem that implements Kerberos, has a slightly <a href="https://github-redirect.dependabot.com/jcmturner/gokrb5/issues/461">broken license</a>. Organizations that are sensitive to this were required to not use franz-go even if they did not use Kerberos because franz-go pulls in a dependency on gokrb5.</p> <p>Now, with <code>kerberos</code> being a distinct and separate module, depending on franz-go only will <em>not</em> cause an indirect dependency on gokrb5.</p> <p>If your upgrade is broken by this change, run:</p> <pre lang="go"><code>go get github.com/twmb/franz-go/pkg/sasl/kerberos@v1.0.0 go get github.com/twmb/franz-go@v1.5.0 </code></pre> <h2>Behavior changes</h2> <ul> <li><code>UnknownTopicRetries</code> now allows -1 to signal disabling the option (meaning unlimited retries, rather than no retries). This follows the convention of other options where -1 disables limits.</li> </ul> <h2>Improvements</h2> <ul> <li> <p>Waiting for unknown topics while producing now takes into account both the produce context and aborting. Previously, the record context was only taken into account <em>after</em> a topic was loaded. The same is true for aborting buffered records: previously, abort would hang until a topic was loaded.</p> </li> <li> <p>New APIs are added to kmsg to deprecate the previous <code>Into</code> functions. The <code>Into</code> functions still exist and will not be removed until kadm is stabilized (see <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/141">#141</a>).</p> </li> </ul> <h2>Features</h2> <ul> <li><code>ConsumeResetOffset</code> is now clearer, you can now use <code>NoResetOffset</code> with</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/twmb/franz-go/commit/6ed27f5f2a131b8fd6f407c4f45477faf416b300"><code>6ed27f5</code></a> CHANGELOG: note v1.5</li> <li><a href="https://github.com/twmb/franz-go/commit/a2cbbf8eceac619aa926f4cc8cbf30c1088f96dc"><code>a2cbbf8</code></a> go.{mod,sum}: go get -u ./...; go mod tidy</li> <li><a href="https://github.com/twmb/franz-go/commit/cba9e26b737dbbe1ada2cd536e0c91219c1179b2"><code>cba9e26</code></a> PreCommitContextFn => PreCommitFnContext before v1.5</li> <li><a href="https://github.com/twmb/franz-go/commit/744a60ed076730d50ff57688201d99c81d240c62"><code>744a60e</code></a> Offset.AfterMilli: properly save noReset</li> <li><a href="https://github.com/twmb/franz-go/commit/ce7a84f4a4c2da983f678339ee3556907feb4d11"><code>ce7a84f</code></a> kerberos: split into dedicated module, p1</li> <li><a href="https://github.com/twmb/franz-go/commit/e8e5c82a1668869a6c700889b29c06ecfead9c27"><code>e8e5c82</code></a> kgo: improve ConsumeResetOffset, NoResetOffset, add Offset.AfterMilli</li> <li><a href="https://github.com/twmb/franz-go/commit/b457742f5f5451b341530143a114107ba109b90a"><code>b457742</code></a> balancing: LogLevelError if BalanceOrError returns an error</li> <li><a href="https://github.com/twmb/franz-go/commit/e8e51173dd9a819225068b08354edea0447ea100"><code>e8e5117</code></a> switch IntoSyncAssignmentOrError to GroupMemberBalancerOrError</li> <li><a href="https://github.com/twmb/franz-go/commit/b5256c729d2926807a8338a02b7f3b71442d45c7"><code>b5256c7</code></a> kadm: fix long standing poor API (Into fns)</li> <li><a href="https://github.com/twmb/franz-go/commit/8148c55adcd276683181ec29ddfba7ced276715c"><code>8148c55</code></a> BalancePlan: add AsMemberIDMap</li> <li>Additional commits viewable in <a href="https://github.com/twmb/franz-go/compare/v1.4.2...v1.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/twmb/franz-go&package-manager=go_modules&previous-version=1.4.2&new-version=1.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

github-actions[bot] (Migrated from github.com) approved these changes 2022-05-02 14:25:39 +03:00

vtolstov referenced this issue from a commit

2023-04-28 22:51:09 +03:00

Bump github.com/twmb/franz-go from 1.4.2 to 1.5.0 (#61)

Sign in to join this conversation.

No reviewers

github-actions[bot]