build(deps): bump github.com/twmb/franz-go from 1.11.0 to 1.11.1 #285

Closed
dependabot[bot] wants to merge 1 commits from dependabot/go_modules/github.com/twmb/franz-go-1.11.1 into master
dependabot[bot] commented 2023-01-19 17:05:09 +03:00 (Migrated from github.com)

Bumps github.com/twmb/franz-go from 1.11.0 to 1.11.1.

Changelog

Sourced from github.com/twmb/franz-go's changelog.

v1.11.1

This patch release fixes a bug in ConsumePreferringLagFn. The code could panic if you:

  • Consumed from two+ topics
  • Two of the topics have a different amount of partitions
  • The single-partition topic has some lag, the topic with more partitions has one partition with no lag, and another partition with more lag than the single-partition topic

In this case, the code previously would create a non-existent partition to consume from for the single-partition topic and this would immediately result in a panic when the fetch request was built.

See the commit for more details.

  • 38f2ec6 bugfix pkg/kgo: bugfix ConsumePreferringLagFn
Commits
  • 3868806 Merge pull request #312 from twmb/v1.11.1_changelog
  • 0056380 CHANGELOG: note incoming v1.11.1
  • d178965 Merge pull request #311 from twmb/310
  • 38f2ec6 pkg/kgo: bugfix ConsumePreferringLagFn
  • bfcfa08 Merge pull request #300 from artemklevtsov/phuslog-plugin
  • bff5744 Add kphuslog plugin
  • 8549b48 Merge pull request #307 from twmb/kadm_first_any
  • 1b944fa kadm: patch test per prior merge
  • 7079107 Merge pull request #279 from twmb/kadm_first_any
  • f200186 kadm: bump to go1.19, add First{,E} and Any{,E} helpers
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [github.com/twmb/franz-go](https://github.com/twmb/franz-go) from 1.11.0 to 1.11.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/twmb/franz-go/blob/master/CHANGELOG.md">github.com/twmb/franz-go's changelog</a>.</em></p> <blockquote> <h1>v1.11.1</h1> <p>This patch release fixes a bug in <code>ConsumePreferringLagFn</code>. The code could panic if you:</p> <ul> <li>Consumed from two+ topics</li> <li>Two of the topics have a different amount of partitions</li> <li>The single-partition topic has some lag, the topic with more partitions has one partition with no lag, and another partition with <em>more</em> lag than the single-partition topic</li> </ul> <p>In this case, the code previously would create a non-existent partition to consume from for the single-partition topic and this would immediately result in a panic when the fetch request was built.</p> <p>See the commit for more details.</p> <ul> <li><a href="https://github.com/twmb/franz-go/commit/38f2ec6"><code>38f2ec6</code></a> <strong>bugfix</strong> pkg/kgo: bugfix ConsumePreferringLagFn</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/twmb/franz-go/commit/3868806beb4cd3ea69174a650b2f80c4bdecd98a"><code>3868806</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/312">#312</a> from twmb/v1.11.1_changelog</li> <li><a href="https://github.com/twmb/franz-go/commit/005638065fc69704abc5f63b81923d97f57eae52"><code>0056380</code></a> CHANGELOG: note incoming v1.11.1</li> <li><a href="https://github.com/twmb/franz-go/commit/d17896571d3507d5c99623feaf361c05081ddf07"><code>d178965</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/311">#311</a> from twmb/310</li> <li><a href="https://github.com/twmb/franz-go/commit/38f2ec6e10550b3a36aed830b14be5cd4443afeb"><code>38f2ec6</code></a> pkg/kgo: bugfix ConsumePreferringLagFn</li> <li><a href="https://github.com/twmb/franz-go/commit/bfcfa0847e03933f371a4ec813d8dd4e0f5780fd"><code>bfcfa08</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/300">#300</a> from artemklevtsov/phuslog-plugin</li> <li><a href="https://github.com/twmb/franz-go/commit/bff5744a98e16ed2756b08f15bdbe87a91dea266"><code>bff5744</code></a> Add kphuslog plugin</li> <li><a href="https://github.com/twmb/franz-go/commit/8549b489412cd250cf5d5f5fa7eed5ad02c31d83"><code>8549b48</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/307">#307</a> from twmb/kadm_first_any</li> <li><a href="https://github.com/twmb/franz-go/commit/1b944fa8013cd4ba661353106a269598939c93c9"><code>1b944fa</code></a> kadm: patch test per prior merge</li> <li><a href="https://github.com/twmb/franz-go/commit/70791074464c63bd2fd66967cf62c5683e6dd488"><code>7079107</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/279">#279</a> from twmb/kadm_first_any</li> <li><a href="https://github.com/twmb/franz-go/commit/f20018607e84c7d3dc6f2b0ccb8a303c8d9ea241"><code>f200186</code></a> kadm: bump to go1.19, add First{,E} and Any{,E} helpers</li> <li>Additional commits viewable in <a href="https://github.com/twmb/franz-go/compare/v1.11.0...v1.11.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/twmb/franz-go&package-manager=go_modules&previous-version=1.11.0&new-version=1.11.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
github-actions[bot] (Migrated from github.com) approved these changes 2023-01-19 17:05:26 +03:00
dependabot[bot] commented 2023-01-23 17:06:27 +03:00 (Migrated from github.com)

Superseded by #288.

Superseded by #288.

Pull request closed

Sign in to join this conversation.
No description provided.