build(deps): bump github.com/twmb/franz-go from 1.11.0 to 1.11.3 #291

2023-01-24T17:04:42+03:00

dependabot[bot] commented

2023-01-24 17:04:42 +03:00

(Migrated from github.com)

Bumps github.com/twmb/franz-go from 1.11.0 to 1.11.3.

Changelog

Sourced from github.com/twmb/franz-go's changelog.

v1.11.3

This patch release fixes a panic that can occur when fetching offsets in the following scenario:

You are fetching offsets for a group that the client has not yet loaded internally

The internal load's FindCoordinator request fails OR the group cannot be loaded

FindCoordinator usually does not fail outright because the request internally retries. As well, the group load is usually successful. Group loading only fails if you are unauthorized to describe the group or if the group coordinator is not loaded.

The most common case to encounter this error is when you issue a group request against a new cluster. The first time a group request is seen, the group coordinator loads. While loading, group requests are failed with COORDINATOR_LOAD_IN_PROGRESS or some other similar error.

5289ef6 bugfix kgo.Client: avoid panic in OffsetFetchRequest when coordinator is not loaded

v1.11.2

This patch release fixes HookFetchRecordUnbuffered never being called if a hook also implemented HookFetchRecordBuffered. No existing plugin currently implements these hooks (though one will soon), so this patch is only relevant to you if you manually have added these hooks.

2a37df9 bugfix kgo: patch HookFetchRecordUnbuffered

v1.11.1

This patch release fixes a bug in ConsumePreferringLagFn. The code could panic if you:

Consumed from two+ topics

Two of the topics have a different amount of partitions

The single-partition topic has some lag, the topic with more partitions has one partition with no lag, and another partition with more lag than the single-partition topic

In this case, the code previously would create a non-existent partition to consume from for the single-partition topic and this would immediately result in a panic when the fetch request was built.

... (truncated)

Commits

9d4480e Merge pull request #319 from twmb/changelog_1.11.3
f2b57e7 CHANGELOG: note incoming v1.11.3
ebaf2e1 Merge pull request #318 from twmb/317
f7abaa6 .github: re-add integration testing against redpanda,kafka
5289ef6 kgo.Client: avoid panic in OffsetFetchRequest when coordinator is not loaded
a9875c7 Merge pull request #315 from twmb/changelog
1bee826 CHANGELOG: note incoming v1.11.2 release
656af41 Merge pull request #314 from twmb/patch_hook_fetch_unbuffered
2a37df9 kgo: patch HookFetchRecordUnbuffered
3868806 Merge pull request #312 from twmb/v1.11.1_changelog
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/twmb/franz-go](https://github.com/twmb/franz-go) from 1.11.0 to 1.11.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/twmb/franz-go/blob/master/CHANGELOG.md">github.com/twmb/franz-go's changelog</a>.</em></p> <blockquote> <h1>v1.11.3</h1> <p>This patch release fixes a panic that can occur when fetching offsets in the following scenario:</p> <ul> <li>You are fetching offsets for a group that the client has not yet loaded internally</li> <li>The internal load's FindCoordinator request fails OR the group cannot be loaded</li> </ul> <p>FindCoordinator usually does not fail outright because the request internally retries. As well, the group load is usually successful. Group loading only fails if you are unauthorized to describe the group or if the group coordinator is not loaded.</p> <p>The most common case to encounter this error is when you issue a group request against a new cluster. The first time a group request is seen, the group coordinator loads. While loading, group requests are failed with <code>COORDINATOR_LOAD_IN_PROGRESS</code> or some other similar error.</p> <ul> <li><a href="https://github.com/twmb/franz-go/commit/5289ef6"><code>5289ef6</code></a> <strong>bugfix</strong> kgo.Client: avoid panic in OffsetFetchRequest when coordinator is not loaded</li> </ul> <h1>v1.11.2</h1> <p>This patch release fixes <code>HookFetchRecordUnbuffered</code> never being called if a hook also implemented <code>HookFetchRecordBuffered</code>. No existing plugin currently implements these hooks (though one will soon), so this patch is only relevant to you if you manually have added these hooks.</p> <ul> <li><a href="https://github.com/twmb/franz-go/commit/2a37df9"><code>2a37df9</code></a> <strong>bugfix</strong> kgo: patch HookFetchRecordUnbuffered</li> </ul> <h1>v1.11.1</h1> <p>This patch release fixes a bug in <code>ConsumePreferringLagFn</code>. The code could panic if you:</p> <ul> <li>Consumed from two+ topics</li> <li>Two of the topics have a different amount of partitions</li> <li>The single-partition topic has some lag, the topic with more partitions has one partition with no lag, and another partition with <em>more</em> lag than the single-partition topic</li> </ul> <p>In this case, the code previously would create a non-existent partition to consume from for the single-partition topic and this would immediately result in a panic when the fetch request was built.</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/twmb/franz-go/commit/9d4480e85ca28b8cff03f78594acc3259b1d839e"><code>9d4480e</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/319">#319</a> from twmb/changelog_1.11.3</li> <li><a href="https://github.com/twmb/franz-go/commit/f2b57e7612e9ddce878301f5039fc9ad4c889680"><code>f2b57e7</code></a> CHANGELOG: note incoming v1.11.3</li> <li><a href="https://github.com/twmb/franz-go/commit/ebaf2e193ad5c05e287ad75db4b3e3cd8ef19627"><code>ebaf2e1</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/318">#318</a> from twmb/317</li> <li><a href="https://github.com/twmb/franz-go/commit/f7abaa608a7217f1c2f54ae066b0c71d12c5eabc"><code>f7abaa6</code></a> .github: re-add integration testing against redpanda,kafka</li> <li><a href="https://github.com/twmb/franz-go/commit/5289ef605a4f1cdc5f7208d35c20c415cd804631"><code>5289ef6</code></a> kgo.Client: avoid panic in OffsetFetchRequest when coordinator is not loaded</li> <li><a href="https://github.com/twmb/franz-go/commit/a9875c7d937333f0efac262937a210a6378bee1e"><code>a9875c7</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/315">#315</a> from twmb/changelog</li> <li><a href="https://github.com/twmb/franz-go/commit/1bee826006bbd700e41b482b5b8e9228c1487810"><code>1bee826</code></a> CHANGELOG: note incoming v1.11.2 release</li> <li><a href="https://github.com/twmb/franz-go/commit/656af41cd017ec9431462ee65a80a106612d8a8d"><code>656af41</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/314">#314</a> from twmb/patch_hook_fetch_unbuffered</li> <li><a href="https://github.com/twmb/franz-go/commit/2a37df979d12085bd6d9bc1bd5cc7aeb88dc49ad"><code>2a37df9</code></a> kgo: patch HookFetchRecordUnbuffered</li> <li><a href="https://github.com/twmb/franz-go/commit/3868806beb4cd3ea69174a650b2f80c4bdecd98a"><code>3868806</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/twmb/franz-go/issues/312">#312</a> from twmb/v1.11.1_changelog</li> <li>Additional commits viewable in <a href="https://github.com/twmb/franz-go/compare/v1.11.0...v1.11.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/twmb/franz-go&package-manager=go_modules&previous-version=1.11.0&new-version=1.11.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

github-actions[bot] (Migrated from github.com) approved these changes 2023-01-24 17:04:57 +03:00

dependabot[bot] commented

2023-01-30 17:07:52 +03:00

(Migrated from github.com)

Superseded by #292.