build(deps): bump github.com/twmb/franz-go from 1.4.2 to 1.5.1 #225

2022-05-05T17:25:48+03:00

dependabot[bot] commented

2022-05-05 17:25:48 +03:00

(Migrated from github.com)

Bumps github.com/twmb/franz-go from 1.4.2 to 1.5.1.

Changelog

Sourced from github.com/twmb/franz-go's changelog.

v1.5.1

This release fixes a minor bug in RecordReader, and has a behavior change for polling records (and a corresponding tiny new helper API for this).

For the bugfix, RecordReader did not always properly return io.ErrUnexpectedEOF. We now return it more properly and add tests for the missing edge cases.

For the behavior change, we now inject an error into PollFetches and PollRecords if the user context is canceled. Previously, we would just quit the poll and return. This change introduces a new corresponding function, Fetches.Err() error. The thought here is that now we have more injected errors, so Fetches.Err can make it easier to check various errors.

cbc8962 behavior change Poll{Records,Fetches}: inject an error for canceled context

#163 docs: updates StickyBalancer godoc (thanks @Streppel)

2018d20 bugfix RecordReader: properly return io.ErrUnexpectedEOF

#161 examples: avoid duplicated module name (thanks @robsonpeixoto)

v1.5.0

This release adds a few new APIs, has a few small behavior changes, and has one "breaking" change.

Breaking changes

The kerberos package is now a dedicated separate module. Rather than requiring a major version bump, since this fix is entirely at the module level for an almost entirely unused package, I figured it is okayish to technically break compatibility for the few usages of this package, when the fix can be done entirely when go geting.

The gokrb5 library, basically the only library in the Go ecosystem that implements Kerberos, has a slightly broken license. Organizations that are sensitive to this were required to not use franz-go even if they did not use Kerberos because franz-go pulls in a dependency on gokrb5.

Now, with kerberos being a distinct and separate module, depending on franz-go only will not cause an indirect dependency on gokrb5.

If your upgrade is broken by this change, run:
go get github.com/twmb/franz-go/pkg/sasl/kerberos@v1.0.0
go get github.com/twmb/franz-go@v1.5.0

... (truncated)

Commits

f8f480d CHANGELOG: note v1.5.1
cbc8962 Poll{Records,Fetches}: inject an error for canceled context
665f65f docs: updates StickyBalancer godoc
2018d20 RecordReader: properly return io.ErrUnexpectedEOF
779f582 Merge pull request #161 from robsonpeixoto/chore/avoid-duplicated-module-name
a012d44 examples: avoid duplicated module name
55f0427 generate,kadm: fix documented behavior of ListOffsets timestamp
d27fb49 CHANGELOG: fix some wording
ccf7db7 CHANGELOG: note second step for kerberos fix
e5fc77e kerberos: depend on real franz-go@v1.5.0 (split p2)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/twmb/franz-go](https://github.com/twmb/franz-go) from 1.4.2 to 1.5.1. <details> <summary>Changelog</summary> Sourced from <a href="https://github.com/twmb/franz-go/blob/master/CHANGELOG.md">github.com/twmb/franz-go's changelog</a>. <blockquote> <h1>v1.5.1</h1> This release fixes a minor bug in <code>RecordReader</code>, and has a behavior change for polling records (and a corresponding tiny new helper API for this). For the bugfix, <code>RecordReader</code> did not always properly return <code>io.ErrUnexpectedEOF</code>. We now return it more properly and add tests for the missing edge cases. For the behavior change, we now inject an error into <code>PollFetches</code> and <code>PollRecords</code> if the user context is canceled. Previously, we would just quit the poll and return. This change introduces a new corresponding function, <code>Fetches.Err() error</code>. The thought here is that now we have more injected errors, so <code>Fetches.Err</code> can make it easier to check various errors. <ul> <li><a href="https://github.com/twmb/franz-go/commit/cbc8962"><code>cbc8962</code></a> behavior change Poll{Records,Fetches}: inject an error for canceled context</li> <li><a href="https://github-redirect.dependabot.com/twmb/franz-go/pull/163">#163</a> docs: updates StickyBalancer godoc (thanks <a href="https://github.com/Streppel"><code>@Streppel</code></a>)</li> <li><a href="https://github.com/twmb/franz-go/commit/2018d20"><code>2018d20</code></a> bugfix RecordReader: properly return <code>io.ErrUnexpectedEOF</code></li> <li><a href="https://github-redirect.dependabot.com/twmb/franz-go/pull/161">#161</a> examples: avoid duplicated module name (thanks <a href="https://github.com/robsonpeixoto"><code>@robsonpeixoto</code></a>)</li> </ul> <h1>v1.5.0</h1> This release adds a few new APIs, has a few small behavior changes, and has one "breaking" change. <h2>Breaking changes</h2> The <code>kerberos</code> package is now a dedicated separate module. Rather than requiring a major version bump, since this fix is entirely at the module level for an almost entirely unused package, I figured it is okayish to technically break compatibility for the few usages of this package, when the fix can be done entirely when <code>go get</code>ing. The <a href="https://github.com/jcmturner/gokrb5">gokrb5</a> library, basically the only library in the Go ecosystem that implements Kerberos, has a slightly <a href="https://github-redirect.dependabot.com/jcmturner/gokrb5/issues/461">broken license</a>. Organizations that are sensitive to this were required to not use franz-go even if they did not use Kerberos because franz-go pulls in a dependency on gokrb5. Now, with <code>kerberos</code> being a distinct and separate module, depending on franz-go only will not cause an indirect dependency on gokrb5. If your upgrade is broken by this change, run: <pre lang="go"><code>go get github.com/twmb/franz-go/pkg/sasl/kerberos@v1.0.0 go get github.com/twmb/franz-go@v1.5.0 </code></pre>  </blockquote> ... (truncated) </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/twmb/franz-go/commit/f8f480df181dd737c9efbc56a14daffc735424c0"><code>f8f480d</code></a> CHANGELOG: note v1.5.1</li> <li><a href="https://github.com/twmb/franz-go/commit/cbc89624307e2f6b3aed05f626e748d3f3cc77d6"><code>cbc8962</code></a> Poll{Records,Fetches}: inject an error for canceled context</li> <li><a href="https://github.com/twmb/franz-go/commit/665f65f3fd3298107dcfa6068c4af9a24c7a556c"><code>665f65f</code></a> docs: updates StickyBalancer godoc</li> <li><a href="https://github.com/twmb/franz-go/commit/2018d20a8327dacc6f19e3a8203e28e52bc63b24"><code>2018d20</code></a> RecordReader: properly return io.ErrUnexpectedEOF</li> <li><a href="https://github.com/twmb/franz-go/commit/779f582cfde3a4333170e56c9d03041e7c8e34f3"><code>779f582</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/161">#161</a> from robsonpeixoto/chore/avoid-duplicated-module-name</li> <li><a href="https://github.com/twmb/franz-go/commit/a012d44364ac5c2c5875f11a7a784a62fed601c5"><code>a012d44</code></a> examples: avoid duplicated module name</li> <li><a href="https://github.com/twmb/franz-go/commit/55f0427b6c82235df1aa5337d063968c9654196b"><code>55f0427</code></a> generate,kadm: fix documented behavior of ListOffsets timestamp</li> <li><a href="https://github.com/twmb/franz-go/commit/d27fb4962bfd3f30ca0edb758a1fb893883112d5"><code>d27fb49</code></a> CHANGELOG: fix some wording</li> <li><a href="https://github.com/twmb/franz-go/commit/ccf7db77a1bb283c0acfe73db35a68ef138d355f"><code>ccf7db7</code></a> CHANGELOG: note second step for kerberos fix</li> <li><a href="https://github.com/twmb/franz-go/commit/e5fc77e56a39ef12ed3897247afd2ba7a58a43b5"><code>e5fc77e</code></a> kerberos: depend on real franz-go@v1.5.0 (split p2)</li> <li>Additional commits viewable in <a href="https://github.com/twmb/franz-go/compare/v1.4.2...v1.5.1">compare view</a></li> </ul> </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/twmb/franz-go&package-manager=go_modules&previous-version=1.4.2&new-version=1.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

github-actions[bot] (Migrated from github.com) approved these changes 2022-05-05 17:26:08 +03:00

github-actions[bot] (Migrated from github.com) approved these changes 2022-05-05 17:56:47 +03:00

Sign in to join this conversation.

No reviewers

github-actions[bot]